Skip to content

Commit fa07654

Browse files
authored
[OSDOCS-11363] Updating images-configuration-allowed to correct mco workflow
Adding/removing registries under `spec.registrySources.allowedRegistries` in `image.config.openshift.io/cluster` updates `/etc/containers/policy.json file` on each node. Changes to the `/etc/containers/policy.json` do not require node drain.
1 parent 37d9f76 commit fa07654

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/images-configuration-allowed.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ status:
5959
Either the `allowedRegistries` parameter or the `blockedRegistries` parameter can be set, but not both.
6060
====
6161
+
62-
The Machine Config Operator (MCO) watches the `image.config.openshift.io/cluster` resource for any changes to the registries. When the MCO detects a change, it drains the nodes, applies the change, and uncordons the nodes. After the nodes return to the `Ready` state, the allowed registries list is used to update the image signature policy in the `/etc/containers/policy.json` file on each node.
62+
The Machine Config Operator (MCO) watches the `image.config.openshift.io/cluster` resource for any changes to the registries. When the MCO detects a change, it triggers a rollout on nodes in machine config pool (MCP). The allowed registries list is used to update the image signature policy in the `/etc/containers/policy.json` file on each node. Changes to the `/etc/containers/policy.json` file do not require the node to drain.
6363
6464
ifndef::openshift-rosa,openshift-dedicated[]
6565
.Verification

0 commit comments

Comments
 (0)