Updating Registry Access Token

Registry access token is used to access the container registry. You must rotate the container registry access token, configured through the registry_password parameter in the siebel-config.yaml file, regularly to prevent unauthorized access to the images in the container registry.

To update the registry access token, perform the following tasks:

1. Update the registry_password parameter in the Git repository:
   1. Go to the environment directory:

      cd /home/opc/siebel/<env_id>

   2. Open the siebel-config.yaml file:

      vi <namespace>-cloud-manager/flux-crm/apps/base/siebel/siebel-config.yaml

   3. Update the registry_password parameter value with the new access token.
2. Recreate the custom secret definition for the registry credentials:
   1. Delete the existing custom secret definition:

      source /home/opc/siebel/<env_id>/k8sprofile
      kubectl delete secret -n <namespace> customsecret

   2. Go to the secrets directory:

      cd /home/opc/siebel/<env_id>/<namespace>-cloud-manager/flux-crm/infrastructure/secrets

   3. Create a new custom secret definition with the updated registry access token:

      kubectl --dry-run=client -n <namespace> create secret docker-registry customsecret \
      --docker-server=<registry_url> \
      --docker-username=<registry_username>\
      --docker-password=<registry_password> \
      --docker-email=[e-mail] \
      -o yaml > customsecret.yaml

3. Commit the changes to the remote Git repository:

   git add .
   git commit -m "updated registry password and custom secrets"
   git config pull.rebase false
   git pull 
   git push

   Note: Flux will reconcile and uptake the new changes in the Git repository and recreate a new custom secret.
4. Update registry_password in environment YAML file:
   1. Open the environment YAML file:

      vi /home/opc/siebel/environments/<env_id>_environment.yaml

   2. Update the registry_password parameter value with the new access token.