Updating Registry Access Token

Registry access token is used to access the container registry. You must rotate the container registry access token, configured through the registry_password parameter in the siebel-config.yaml file, regularly to prevent unauthorized access to the images in the container registry.

To update the registry access token, perform the following tasks:

Note: If you use SSH for Git, you must set the GIT_SSH_COMMAND environment variable in the current shell before you run your first remote Git command. For more information, see the "Configuring SSH for Manual Git Operations" section in Using Existing Git Repositories.

1. Update the registry_password parameter in the Git repository:
   1. Go to the environment directory:

      cd /home/opc/siebel/<env_id>

   2. Open the siebel-config.yaml file:

      vi <Cloud manager repository name>/flux-crm/apps/base/siebel/siebel-config.yaml

   3. Update the registry_password parameter value with the new access token.
2. Recreate the custom secret definition for the registry credentials:
   1. Delete the existing custom secret definition:

      source /home/opc/siebel/<env_id>/k8sprofile
      kubectl delete secret -n <namespace> customsecret

   2. Go to the secrets directory:

      cd /home/opc/siebel/<env_id>/<Cloud manager repository name>/flux-crm/infrastructure/secrets

   3. Create a new custom secret definition with the updated registry access token:

      kubectl --dry-run=client -n <namespace> create secret docker-registry customsecret \
      --docker-server=<registry_url> \
      --docker-username=<registry_username>\
      --docker-password=<registry_password> \
      --docker-email=[e-mail] \
      -o yaml > customsecret.yaml

3. Commit the changes to the remote Git repository:

   git add .
   git commit -m "updated registry password and custom secrets"
   git config pull.rebase false
   git pull 
   git push

   Note: Flux will reconcile and uptake the new changes in the Git repository and recreate a new custom secret.
4. Update registry_password in environment YAML file:
   1. Open the environment YAML file:

      vi /home/opc/siebel/environments/<env_id>_environment.yaml

   2. Update the registry_password parameter value with the new access token.