Finding information on how to create a service account to allow login to registry.redhat.io and pull containers from the registry can take some time. This could be done using a standard Red Hat account, but if the user leaves the organisation, a service account is necessary to ensure the application continues to function. Fortunately, Red Hat offers the ability to create service accounts specifically for pulling images from registry.redhat.io.
The following explains this process step by step:
- Navigate to Red Hat Customer Portal
- Login using your RH account
- Click on New Service Account
- Enter the name for the service account
- Click Create
- Click on Docker Login tab
- Use the information from the Docker Login tab to login with podman (replace docker with podman):
The results below:
[root@aap02 ~]# podman login -u='6910732|new-sa-account' -p=eyJhbGciOiJSUzUxMiJ9.eyJzdWIiOiJiOTRlNzQ3MjMyZTI0ZjhjYjQyNGUyOTFmOTRlMGY3YyJ9.QqmAJa6TFyTczQ4DtulmaFbd-wiSXnMrqRacoKzkyr8SDTT1Igch3I-22oHOINpDoEHFvCOx6gBJGw40hKLKXxSU6PpM7v0wS-P0USrlgdwJnF_U3MO38xVNCMMQWcDOtcRakJx2hkgRZu9dK9KgOwW8orbQ8MJ3veLCI3Qkl48SmlxR-Zpei0vtFvFwUGC3bajlChkl4m1609m1NqU5Qypla2yi8JvnVyhIbVyXfQR5Mc4FjbKoIVrEfKQm7rs9OrUyUDzgn1XfeDNEozx-ClUHCPnthwz13zlKlXRNWpwAUxlzUOH5aKBnWAvb7QxxaUL0xifg1Rqo1XRsvVtgLImXMhud529a6y1uLViTmoywvjBUjs9YWkCSpj5UeB7V5l2CYV8C_j9Y70L8ox80kKmlMnBEW_jpuxAkiXuj_5FSh1z6mHSDhosm2Nd-PT3Jbgw0Z2SwQZUhsRkGqaZ16AsjyRgrzYihbBMY9sGRE39AeGEgfdDuDPn8seOGOr4sVpoeze-DOcdiQZiT7rYj4XY2RKO4cUiHkuXeTSTalA4sCqQsDdzjVQ7cuCrtvwI8MlcGVT81pOIPcLY34SehgIaiWTrRCt7U6s2h5T2wgbVJLvjYRRj7DNYc5FssXIIg3wXbf616fFey54CiBg5qihMKhgst8Juzfx7JT8YI registry.redhat.io Login Succeeded! (BTW – the account and token above have been edited 🙂 )
To verify if we really can pull images from this registry, issue the command similar to the one below:
Test pulling the image:
[root@aap02 etc]# podman pull registry.redhat.io/ansible-automation-platform-23/ee-minimal-rhel8 Trying to pull registry.redhat.io/ansible-automation-platform-23/ee-minimal-rhel8:latest... Getting image source signatures Checking if image destination supports signatures Copying blob 762908e901a6 done Copying blob c779eca88374 done Copying blob 60776429df00 done Copying config 566499dfb0 done Writing manifest to image destination Storing signatures 566499dfb02c6fdea5a3ef7102890258e4ec2f22cb31c4405eaaebb3fab5acae Verify if the image is visible on the local host:
[root@aap02 etc]# podman images REPOSITORY TAG IMAGE ID CREATED SIZE registry.redhat.io/ansible-automation-platform-23/ee-minimal-rhel8 latest 566499dfb02c 5 weeks ago 299 MB For more information about RedHat Registry and why a service account is necessary to ensure the application continues to function, contact us today and speak with one of our experts.
