Create project token for RH certification jobs
RedHat certification job uses preflight
that collects registry Authentication data and submits it over to RedHat. Subsequently whenever "Health Index" is being checked by a scheduled job on RH side - it will quite frequently fail due to authentication issues.
At present we use CI_REGISTRY_USER
and CI_REGISTRY_PASSWORD
for authentication, however those live only a short time (duration of the job) thus quite frequently by the time RH worker gets to connect - those credentials are already disabled.
To alleviate this we should use longer-lived tokens (project access tokens) that we'll supply to preflight
(and subsequently to RH) during certification process.
Before proceeding
Check comments for any outstanding items indicating non-viability of this at the moment.
Acceptance criteria
-
project access token has been created with Guest role and read-only permissions to project registry -
Variables CERTIFICATION_REGISTRY_USER
andCERTIFICATION_REGISTRY_PASSWORD
are set for CI to reflect token's Username (project_*_bot*
) and Password
Edited by Dmytro Makovey