Skip to content

Commit 787ac93

Browse files
author
Steven Smith
committed
Updates IR Swift configuration docs to add a note
1 parent 21d7e6d commit 787ac93

File tree

1 file changed

+11
-3
lines changed

1 file changed

+11
-3
lines changed

modules/registry-configuring-registry-storage-swift-trust.adoc

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,15 +5,23 @@
55
// * registry/configuring-registry-storage-openstack-user-infrastructure.adoc
66
:_mod-docs-content-type: PROCEDURE
77
[id="registry-configuring-registry-storage-swift-trust_{context}"]
8-
= Configuring the Image Registry Operator to trust Swift storage
8+
= Configuring Image Registry Operator redirects
99

10-
You must configure the Image Registry Operator to trust {rh-openstack-first} Swift storage.
10+
By disabling redirects, you can configure the Image Registry Operator to control whether clients such as {product-title} cluster builds or external systems like developer machines are redirected to pull images directly from {rh-openstack-first} Swift storage. This configuration is optional and depends on whether the clients trust the storage's SSL/TLS certificates.
1111

12+
[NOTE]
13+
====
14+
In situations where clients to not trust the storage certificate, setting the `disableRedirect` option can be set to `true` proxies traffic through the image registry. Consequently, however, the image registry might require more resources, especially network bandwidth, to handle the increased load.
15+
16+
Alternatively, if clients trust the storage certificate, the registry can allow redirects. This reduces resource demand on the registry itself.
17+
18+
Some users might prefer to configure their clients to trust their self-signed certificate authorities (CAs) instead of disabling redirects. If you are using a self-signed CA, you must decide between trusting the custom CAs or disabling redirects.
19+
====
1220
// to allow the client to pull the image layers from the image registry rather than from links directly from Swift.
1321

1422
.Procedure
1523

16-
* From a command line, enter the following command to change the value of the `spec.disableRedirect` field in the `config.imageregistry` object to `true`:
24+
* To ensures that the image registry proxies traffic instead of relying on Swift storage, change the value of the `spec.disableRedirect` field in the `config.imageregistry` object to `true` by running the following command:
1725
+
1826
[source,terminal]
1927
----

0 commit comments

Comments
 (0)