You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/disconnected-osus-overview.adoc
+4-4Lines changed: 4 additions & 4 deletions
Original file line number
Diff line number
Diff line change
@@ -7,16 +7,16 @@
7
7
8
8
= Using the OpenShift Update Service in a disconnected environment
9
9
10
-
The OpenShift Update Service (OSUS) provides update recommendations to {product-title} clusters. RedHat publicly hosts the OpenShift Update Service, and clusters in a connected environment can connect to the service through public APIs to retrieve update recommendations.
10
+
The OpenShift Update Service (OSUS) provides update recommendations to {product-title} clusters. Red{nbsp}Hat publicly hosts the OpenShift Update Service, and clusters in a connected environment can connect to the service through public APIs to retrieve update recommendations.
11
11
12
-
However, clusters in a disconnected environment cannot access these public APIs to retrieve update information. To have a similar update experience in a disconnected environment, you can install and configure the OpenShift Update Service locally so that it is available within the disconnected environment.
12
+
However, clusters in a disconnected environment cannot access these public APIs to retrieve update information. To have a similar update experience in a disconnected environment, you can install and configure the OpenShift Update Service so that it is available within the disconnected environment.
13
13
14
14
A single OSUS instance is capable of serving recommendations to thousands of clusters.
15
15
OSUS can be scaled horizontally to cater to more clusters by changing the replica value.
16
16
So for most disconnected use cases, one OSUS instance is enough.
17
-
For example, RedHat hosts just one OSUS instance for the entire fleet of connected clusters.
17
+
For example, Red{nbsp}Hat hosts just one OSUS instance for the entire fleet of connected clusters.
18
18
19
19
If you want to keep update recommendations separate in different environments, you can run one OSUS instance for each environment.
20
20
For example, in a case where you have separate test and stage environments, you might not want a cluster in a stage environment to receive update recommendations to version A if that version has not been tested in the test environment yet.
21
21
22
-
The following sections describe how to install a local OSUS instance and configure it to provide update recommendations to a cluster.
22
+
The following sections describe how to install an OSUS instance and configure it to provide update recommendations to a cluster.
Copy file name to clipboardExpand all lines: modules/update-service-configure-cvo.adoc
+3-3Lines changed: 3 additions & 3 deletions
Original file line number
Diff line number
Diff line change
@@ -5,13 +5,13 @@
5
5
[id="update-service-configure-cvo"]
6
6
= Configuring the Cluster Version Operator (CVO)
7
7
8
-
After the OpenShift Update Service Operator has been installed and the OpenShift Update Service application has been created, the Cluster Version Operator (CVO) can be updated to pull graph data from the locally installed OpenShift Update Service.
8
+
After the OpenShift Update Service Operator has been installed and the OpenShift Update Service application has been created, the Cluster Version Operator (CVO) can be updated to pull graph data from the OpenShift Update Service installed in your environment.
9
9
10
10
.Prerequisites
11
11
12
12
* The OpenShift Update Service Operator has been installed.
13
13
* The OpenShift Update Service graph data container image has been created and pushed to a repository that is accessible to the OpenShift Update Service.
14
-
* The current release and update target releases have been mirrored to a locally accessible registry.
14
+
* The current release and update target releases have been mirrored to a registry in the disconnected environment.
15
15
* The OpenShift Update Service application has been created.
Copy file name to clipboardExpand all lines: modules/update-service-create-service-cli.adoc
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ You can use the OpenShift CLI (`oc`) to create an OpenShift Update Service appli
11
11
12
12
* The OpenShift Update Service Operator has been installed.
13
13
* The OpenShift Update Service graph data container image has been created and pushed to a repository that is accessible to the OpenShift Update Service.
14
-
* The current release and update target releases have been mirrored to a locally accessible registry.
14
+
* The current release and update target releases have been mirrored to a registry in the disconnected environment.
15
15
16
16
.Procedure
17
17
@@ -31,7 +31,7 @@ The namespace must match the `targetNamespaces` value from the operator group.
31
31
$ NAME=service
32
32
----
33
33
34
-
. Configure the local registry and repository for the release images as configured in "Mirroring the {product-title} image repository", for example, `registry.example.com/ocp4/openshift4-release-images`:
34
+
. Configure the registry and repository for the release images as configured in "Mirroring the {product-title} image repository", for example, `registry.example.com/ocp4/openshift4-release-images`:
35
35
//TODO: Add xref to the preceding step when allowed.
Copy file name to clipboardExpand all lines: modules/update-service-create-service-web-console.adoc
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ You can use the {product-title} web console to create an OpenShift Update Servic
11
11
12
12
* The OpenShift Update Service Operator has been installed.
13
13
* The OpenShift Update Service graph data container image has been created and pushed to a repository that is accessible to the OpenShift Update Service.
14
-
* The current release and update target releases have been mirrored to a locally accessible registry.
14
+
* The current release and update target releases have been mirrored to a registry in the disconnected environment.
15
15
16
16
.Procedure
17
17
@@ -28,7 +28,7 @@ You can use the {product-title} web console to create an OpenShift Update Servic
28
28
. Enter the local pullspec in the *Graph Data Image* field to the graph data container image created in "Creating the OpenShift Update Service graph data container image", for example, `registry.example.com/openshift/graph-data:latest`.
29
29
//TODO: Add xref to preceding step when allowed.
30
30
31
-
. In the *Releases* field, enter the local registry and repository created to contain the release images in "Mirroring the OpenShift Container Platform image repository", for example, `registry.example.com/ocp4/openshift4-release-images`.
31
+
. In the *Releases* field, enter the registry and repository created to contain the release images in "Mirroring the OpenShift Container Platform image repository", for example, `registry.example.com/ocp4/openshift4-release-images`.
To push a graph data image to a local registry in a disconnected environment, copy the graph data container image created in the previous step to a repository that is accessible to the OpenShift Update Service. Run `oc image mirror --help` for available options.
46
+
To push a graph data image to a registry in a disconnected environment, copy the graph data container image created in the previous step to a repository that is accessible to the OpenShift Update Service. Run `oc image mirror --help` for available options.
* You must have the `oc` command-line interface (CLI) tool installed.
43
-
* You must provision a local container image registry with the container images for your update, as described in xref:../../../updating/updating_a_cluster/updating_disconnected_cluster/mirroring-image-repository.adoc#mirroring-ocp-image-repository[Mirroring {product-title} images].
43
+
* You must provision a container image registry in your environment with the container images for your update, as described in xref:../../../updating/updating_a_cluster/updating_disconnected_cluster/mirroring-image-repository.adoc#mirroring-ocp-image-repository[Mirroring {product-title} images].
44
44
45
45
[id="registry-configuration-for-update-service"]
46
46
== Configuring access to a secured registry for the OpenShift Update Service
@@ -66,7 +66,7 @@ data:
66
66
...
67
67
-----END CERTIFICATE-----
68
68
----
69
-
<1> The OpenShift Update Service Operator requires the config map key name updateservice-registry in the registry CA cert.
69
+
<1> The OpenShift Update Service Operator requires the config map key name `updateservice-registry` in the registry CA cert.
70
70
<2> If the registry has the port, such as `registry-with-port.example.com:5000`, `:` should be replaced with `..`.
71
71
72
72
// Updating the global cluster pull secret
@@ -114,7 +114,7 @@ and must be no more than 63 characters`, try creating the Update Service with a
@@ -126,15 +126,15 @@ See xref:../../../networking/enable-cluster-wide-proxy.adoc#enable-cluster-wide-
126
126
127
127
Before updating your cluster, confirm that the following conditions are met:
128
128
129
-
* The Cluster Version Operator (CVO) is configured to use your locally-installed OpenShift Update Service application.
129
+
* The Cluster Version Operator (CVO) is configured to use your installed OpenShift Update Service application.
130
130
* The release image signature config map for the new release is applied to your cluster.
131
131
+
132
132
[NOTE]
133
133
====
134
-
The release image signature config map allows the Cluster Version Operator (CVO) to ensure the integrity of release images by verifying that the actual image signatures match the expected signatures.
134
+
The Cluster Version Operator (CVO) uses release image signatures to ensure that release images have not been modified, by verifying that the release image signatures match the expected result.
135
135
====
136
-
* The current release and update target release images are mirrored to a locally accessible registry.
137
-
* A recent graph data container image has been mirrored to your local registry.
136
+
* The current release and update target release images are mirrored to a registry in the disconnected environment.
137
+
* A recent graph data container image has been mirrored to your registry.
138
138
* A recent version of the OpenShift Update Service Operator is installed.
139
139
+
140
140
[NOTE]
@@ -143,7 +143,7 @@ If you have not recently installed or updated the OpenShift Update Service Opera
143
143
See xref:../../../operators/admin/olm-restricted-networks.adoc#olm-restricted-networks[Using Operator Lifecycle Manager on restricted networks] for more information about how to update your OLM catalog in a disconnected environment.
144
144
====
145
145
146
-
After you configure your cluster to use the locally-installed OpenShift Update Service and local mirror registry, you can use any of the following update methods:
146
+
After you configure your cluster to use the installed OpenShift Update Service and local mirror registry, you can use any of the following update methods:
147
147
148
148
** xref:../../../updating/updating_a_cluster/updating-cluster-web-console.adoc#updating-cluster-web-console[Updating a cluster using the web console]
149
149
** xref:../../../updating/updating_a_cluster/updating-cluster-cli.adoc#updating-cluster-cli[Updating a cluster using the CLI]
0 commit comments