Chapter 2. Getting Started

2.1. System Requirements

To use Red Hat Data Grid for OpenShift, you need:

2.2. Creating a Data Grid for OpenShift Project

Set up an OpenShift project where you can run Data Grid for OpenShift pods.

  1. Log in to your OpenShift cluster.

    If you are new to OpenShift, try the following tutorial: Logging in to an OpenShift Cluster.

  2. Create an OpenShift project with the oc new-project command, for example:

    $ oc new-project rhdg-helloworld --display-name="Red Hat Data Grid"

2.3. Setting Up Registry Authentication

You must authenticate with the Red Hat Container Catalog, registry.redhat.io, to pull Data Grid images.

Use one of the following:

  • Red Hat customer account username and password. Pull resources from registry.redhat.io with the docker login command.
  • Registry service account tokens. Use authentication tokens to configure multiple hosts. Do the following:

    1. Log in to registry.redhat.io.
    2. Create or select a Registry Service Account.
    3. Generate authentication tokens.

2.3.1. Configuring Hosts with Authentication Tokens

Add authentication tokens from your Registry Service Account to hosts as follows:

  1. Select the Docker Login tab and copy the command.
  2. Run the docker login command on each host that pulls from registry.redhat.io.
  3. Verify your Docker configuration.

    $ cat ~/.docker/config.json
    ...
    "registry.redhat.io": {
    			"auth": "MTEwMDkx..."
    		}

2.3.2. Creating Pull Secrets

To pull secured container images that are not available on the internal registry for OpenShift, do the following:

  1. Log in to your OpenShift cluster.
  2. Select your working project, for example:

    $ oc project rhdg-helloworld
  3. Create a generic pull secret with your Docker configuration.

    $ oc create secret generic ${SECRET_NAME} \
      --from-file=.dockerconfigjson=path/to/.docker/config.json \
      --type=kubernetes.io/dockerconfigjson
  4. Link the pull secret to your service account.

    $ oc secrets link default ${SECRET_NAME} --for=pull
  5. Mount the secret.

    $ oc secrets link builder ${SECRET_NAME}

For more information, including troubleshooting procedures, see Red Hat Container Registry Authentication.