Skip to content

Commit 10a7402

Browse files
committed
Align documentation with BYO changes
Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com>
1 parent 16ff5ab commit 10a7402

1 file changed

Lines changed: 4 additions & 20 deletions

File tree

docs/supply-chain.md

Lines changed: 4 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -182,12 +182,11 @@ To enable this use case, the following parameters should be defined within the [
182182
value: true
183183
- name: rhtpa.enabled
184184
value: true
185+
# If you are using the Quay embedded registry, add these attributes:
186+
- name: quay.enabled
187+
value: "true"
185188
- name: registry.tlsVerify
186189
value: "false"
187-
- name: registry.user
188-
value: quay-admin
189-
- name: registry.passwordVaultKey
190-
value: quay-admin-password
191190
```
192191

193192
* `applications.vault.jwt.roles.policies`: In the _Vault_ policies section, uncomment the following:
@@ -200,28 +199,13 @@ To enable this use case, the following parameters should be defined within the [
200199
- hub-infra-rhtpa-jwt-secret
201200
```
202201

203-
* `applications.qtodo.overrides`: In the _qtodo_ overrides section, specify the following to source content from the Quay registry instance.
204-
205-
```shell
206-
- name: app.images.main.name
207-
value: quay-registry-quay-quay-enterprise.apps.{{ $.Values.global.clusterDomain }}/ztvp/qtodo
208-
- name: app.images.main.version
209-
value: latest
210-
- name: app.images.main.registry.auth
211-
value: true
212-
- name: app.images.main.registry.user
213-
value: quay-admin
214-
- name: app.images.main.registry.passwordVaultKey
215-
value: quay-admin-password
216-
```
217-
218202
## Bring Your Own (BYO) Container Registry
219203

220204
By default, ZTVP deploys a built-in Red Hat Quay registry. However, you can use your own container registry (e.g., quay.io, Docker Hub, GitHub Container Registry, or a private registry) instead.
221205

222206
### Configuration Steps
223207

224-
1. **Disable built-in Quay registry** (optional - if not using Quay): Comment out the Quay-related applications in `values-hub.yaml`: `quay-enterprise` namespace, `quay-operator` subscription, and `quay-registry` application.
208+
1. **Disable built-in Quay registry** (optional - if not using Quay): Comment out the Quay-related applications in `values-hub.yaml`: `quay-enterprise` namespace, `quay-operator` subscription, and `quay-registry` application. Remove the `applications.supply-chain.overrides.quay.enabled` and `applications.supply-chain.overrides.registry.tlsVerify` settings.
225209

226210
2. **Configure registry credentials in Vault** (**BYO registry only**): Per VP rule, add your registry credentials to `~/values-secrets.yaml` (or `~/values-secret.yaml` / `~/values-secret-layered-zero-trust.yaml` per VP lookup order):
227211

0 commit comments

Comments
 (0)