Azure Red Hat OpenShift — Internal Registry

I guess, you already started digging into Azure Red Hat OpenShift and hit already some of its drawbacks and restrictions.

As ARO is a managed service, you, as a customer, are not assigned the full privileges of the “OpenShift-ClusterAdmin” role. Some of the access restrictions can prevent you from determining the Container Registry exposed Route.

Quick Overview

You can access the container registry through a secure HTTPS endpoint, which allows operations such as push, pull and manage images. This endpoint is the Route to the Internal Container Registry.

From where can I get this Route?

To make your life easier, use the default format mentioned below to gain access to the ARO Internal Registry and then managing your images.

Internal Registry Name format

docker-registry.apps.<ARO_ID>.<LOCATION>.azmosa.io

Where:

<ARO_ID> is the ID of your Azure Red Hat OpenShift cluster,

<LOCATION> is where you deployed your Azure Red Hat OpenShift cluster.

Access the Internal Registry

Let’s check both of them together !!

Login to the GUI/Console of the Internal Registry

Follow the HTTPS endpoint format mentioned here to gain access to the Console:

https://registry-console.apps.<ARO_ID>.<LOCATION>.azmosa.io

After logging in, you should be able to see the Azure Red Hat Registry Console.

Azure Red Hat OpenShift — Internal Registry Console (GUI)

Login to the Internal Registry (CLI)

Let’s login in first to the ARO cluster:

oc login https://openshift.<ARO_ID>.<LOCATION>.azmosa.io \
--token=<TOKEN_ID>

Once done, use the token to gain access to the ARO Internal Registry:

docker login docker-registry.apps.<ARO_ID>.<LOCATION>.azmosa.io \
-u $(of whoami) -p $(oc whoami -t)

Manage your Internal Registry

Push Container Images to the registry

docker tag <SOURCE_IMAGE_NAME>:<TAG> docker-registry.apps.<ARO_ID>.<LOCATION>.azmosa.io/openshift/<DEST_IMAGE_NAME>:<TAG>

2. Push the tagged image

docker push docker-registry.apps.<ARO_ID>.<LOCATION>.azmosa.io/NAMESPACE/<DEST_IMAGE_NAME>:<TAG>

Ensure to update the fields; IMAGE_NAME, TAG and NAMESPACE to reflect your needs.

Do it differently

Is a DevOps & Cloud enthusiast with 10 plus years of experience. He’s continuously immersing himself in the latest technologies trends & projects.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store