/update-ro-keys-job

updates RO keys in quay DB for deploying quay.io in RO mode

Primary LanguagePythonApache License 2.0Apache-2.0

Update RO Keys

This script updates the Quay.io DB to add RO keys. The Keys to be added are passed in as a Secret monted on the container

Environment variables

Variable Description
DB_HOST Database hostname
DB_USER Database username
DB_PASSWORD Database password
KEY_NAME Name of the key that needs to be inserted
EXPIRY_TIME Expiry time of key in YYYY-MM-DD fromat

Running the script

  1. Create the Key and Secret in the quay repo
git clone git@github.com:quay/quay.git
pip install -r requirements.txt
PYTHONPATH=. python tools/generatekeypair.py quay-readonly
  1. Add the key into Vault at the appropriate location
  2. Run the Job in app-interface setting KEY_NAME and EXPIRY_TIME