6 Commits

Author SHA1 Message Date
Zuul
81aa73fd99 Merge "Remove read-only user from registry" 2019-10-11 20:48:39 +00:00
James E. Blair
9bafd83279 Add public url to intermediate registry
This is needed for the JWT auth fix in
https://review.opendev.org/687622

Change-Id: I35f758ea6bfd3871921adc72c70766340216d654
2019-10-09 10:39:01 -07:00
James E. Blair
40cd27487b Remove read-only user from registry
This is no longer used as read access is provided to unathenticated
users with the recently added JWT support.

Depends-On: https://review.opendev.org/687422
Change-Id: I36fd28710c644be9b07d645c6b0c6092f52a7385
2019-10-08 14:20:06 -07:00
James E. Blair
dee6a8b330 Add token secret to intermediate registry
An upcoming change will add JWT authentication to the registry;
prepare for that by establishing a server-side secret for use
in signing the tokens.

Change-Id: Ibaa15dd0c4b0d797f01a1886186fdc021dc990fa
2019-10-08 14:16:43 -07:00
James E. Blair
8223eadf01 Switch the insecure-ci-registry to zuul-registry
This uses the new zuul-registry container image to run the
intermediate registry.  The same authentication data and certs
are used.  The new registry also writes to the same swift container,
but uses different pseudo-directories so it won't clash with the
current registry.  If there are problems, we can switch back easily.
After successful use of the new registry, we can delete the old data.

Change-Id: Ib855fb99c991411293a617b9b238d79a6bfae328
2019-10-02 14:11:33 -07:00
James E. Blair
f357e5cdab Use swift to back intermediate docker registry
Note, this does not have complete tests yet (we will need to update
the job to start a swift for that).

Change-Id: I2ee7a9e4fb503a3431366c16c380cf09327f6050
2019-04-18 08:14:37 -07:00