Getting access to images from the public IBM Entitled Registry

Click Workloads > Secrets, and switch to the openshift-config namespace. If the pull-secret secret does not exist, click Create, and then select "image pull secret".

If it does exist, select the secret and then click Actions > Edit Secret. Then click Add credentials, enter the information, and click Save.

If the .dockerconfigjson is empty.

1. Set the following environment variables:

   export REGISTRY_USER=cp 
   export REGISTRY_PASSWORD=entitlement-key 
   export REGISTRY_SERVER=cp.icr.io

   Replace entitlement-key with your entitlement key.

2. Run the following command to create the pull secret:

   kubectl create secret docker-registry \
      --docker-server=${REGISTRY_SERVER} \
      --docker-username=${REGISTRY_USER} \
      --docker-password=${REGISTRY_PASSWORD} \
      --docker-email=${REGISTRY_USER} \
      -n openshift-config pull-secret

If the pull secret exists:

1. Encode the username and password by using Base64 encoding:

   echo -n "cp:entitlement-key" | base64

   Replace entitlement-key with your entitlement key.

2. Add an entry for the container registry to the auths section in the JSON file. The following example has an existing entry:

   {
      "auths":{
            "myregistry.example.com":{
            "auth":"b3Blb=",
            "email":"not-used"
         }
      }
   }

   The new entry can be added to the auths section:

   {
      "auths":{
            "registry-location":{
            "auth":"base64-encoded-credentials",
            "email":"not-used"
         },
            "myregistry.example.com":{
            "auth":"b3Blb=",
            "email":"not-used"
         }
      }
   }

   Replace the following values:

   registry-location

   The value is cp.icr.io.

   base64-encoded-credentials

   The encoded credentials that you generated in the previous step. For example, cmVnX3VzZXJuYW1lOnJlZ19wYXNzd29yZAo=.

3. Apply the new configuration:

   kubectl set data secret/pull-secret -n openshift-config \
   --from-file=.dockerconfigjson