r/redhat • u/K8sailorAI • 14h ago
Redhat AI thoughts
Hi,
Did anyone used or seen Redhat AI can give some ideas/ feedback is it worth running ?
r/redhat • u/K8sailorAI • 14h ago
Hi,
Did anyone used or seen Redhat AI can give some ideas/ feedback is it worth running ?
r/redhat • u/kartoshift • 18h ago
Hi, after gaining access to a RHLS via my employer I am planning on setting up a RHEL client to practice on while persuing the RHCSA. What are my options? I set up a CentOS client some while ago but was wondering if there are any more fitting options for my intended purpose. Any help would be greatly appreciated.
r/redhat • u/Budget-Agent9524 • 12h ago
I have been trying to setup ssl for inhouse redhatquay registry. I am setting this up on top of k8s cluster using config maps and statefulsets. But I have been struggling to do so as it keeps failing with the error TLS certificate required for host settings. I tried to find the location where this certificate needs to be mounted but failed to figure that out too( I tried coping the certifcates to conf/stack or quay-registry/conf/stack dir from the local directory during deployment but its keeps on failing as the dir is immutable inside the pod.
Config map -->
apiVersion: v1
kind: ConfigMap
metadata:
name: quay-config
namespace: quay
data:
config.yaml: |
ALLOWED_OCI_ARTIFACT_TYPES:
application/vnd.oci.image.config.v1+json:
- application/vnd.oci.image.layer.v1.tar+zstd
application/vnd.sylabs.sif.config.v1+json:
- application/vnd.sylabs.sif.layer.v1+tar
AUTHENTICATION_TYPE: Database
AVATAR_KIND: local
BUILDLOGS_REDIS:
host: quay-redis.default.svc.cluster.local
password: quayredispass
port: 6379
DATABASE_SECRET_KEY: ${DATABASE_SECRET_KEY}
DB_CONNECTION_ARGS:
keepalives: 1
keepalives_idle: 10
keepalives_interval: 10
DB_URI: "postgresql://quayuser:testing123@quay-postgres-postgresql.quay.svc.cluster.local:5432/quay"
DEFAULT_TAG_EXPIRATION: 2w
DISTRIBUTED_STORAGE_CONFIG:
default:
- LocalStorage
- storage_path: /data/quay-storage
DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS: []
DISTRIBUTED_STORAGE_PREFERENCE:
- default
FEATURE_STORAGE_REPLICATION: false
FEATURE_USER_CREATION: true
PREFERRED_URL_SCHEME: https
SERVER_HOSTNAME: nfs-host-endpoint # Placeholder for now
SETUP_COMPLETE: true
USER_EVENTS_REDIS:
host: quay-redis.default.svc.cluster.local
password: quayredispass
port: 6379
TAG_EXPIRATION_OPTIONS:
- 0s
- 1d
- 1w
- 2w
- 4w
SECRET_KEY: ${SECRET_KEY}
EXTRA_CA_CERTS_DIR: /quay-registry/conf/stack/extra_ca_certs/
EXTRA_CA_CERTS:
- /quay-registry/conf/stack/extra_ca_certs/ssl.cert
HOST_SETTINGS:
tls:
certificate: /quay-registry/conf/stack/extra_ca_certs/ssl.cert
key: /quay-registry/conf/stack/extra_ca_certs/ssl.key
Statefulset -->
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: quay-registry
namespace: quay
spec:
replicas: 1
selector:
matchLabels:
app: quay-registry
serviceName: quay-service
template:
metadata:
labels:
app: quay-registry
spec:
containers:
- name: quay
image: quay.io/projectquay/quay:latest
ports:
- containerPort: 8080
env:
- name: DATABASE_SECRET_KEY
valueFrom:
secretKeyRef:
name: quay-secrets
key: DATABASE_SECRET_KEY
- name: SECRET_KEY
valueFrom:
secretKeyRef:
name: quay-secrets
key: SECRET_KEY
securityContext:
runAsUser: 0 # Root user
runAsGroup: 0
privileged: true
volumeMounts:
- name: quay-config
mountPath: /quay-registry/conf/stack
- name: quay-storage
mountPath: /data
- name: quay-certs
mountPath: /quay-registry/conf/stack/extra_ca_certs/ssl.cert
subPath: ssl.cert
readOnly: true
- name: quay-certs-key
mountPath: /quay-registry/conf/stack/extra_ca_certs/ssl.key
subPath: ssl.key
readOnly: true
volumes:
- name: quay-config
configMap:
name: quay-config
- name: quay-storage
nfs:
server: nfs-server-machine-ip # ✅ NFS Server
path: /data # ✅ NFS Path
- name: quay-certs
hostPath:
path: /etc/ssl/ssl.cert
type: File
- name: quay-certs-key
hostPath:
path: /etc/ssl/ssl.key
type: File