Before beginning, ensure your cluster has access to the Solace Container Registry as outlined in the Connectivity Model for Kubernetes Deployments.
SAP provides the registry secret (authorization token) to access the Solace Container Registry (gcr.io) where the container images are stored. This is provided as a JSON or YAML file that allows you to pull images (the available file type is based on your Kubernetes configuration) from the gcr.io.
You require these credentials to install the Kubernetes cluster, which can download the <datacenter-id>-pull-secret.yaml or the <datacenter-id>-registry-credentials.json file.
If you organization doesn't allow you to download images from your VPC/VNet, you can set up an internal mirror site for the Solace Container Registry (gcr.io).
To download the registry secret ( <datacenter-id>-pull-secret.yaml or the <datacenter-id>-registry-credentials.json file), perform the following steps:
-
Log in to the Cloud Console if you have not done so yet. The URL to access the Cloud Console differs based on your
- On the navigation bar, click User & Account
and then select Account Details. - On the Account Details page, select the Private Regions tab.
- Click the ellipse icon (
) for a listed Datacenter. -
The menu that opens presents one of two options based on your Kubernetes configuration:
- Download Image Pull Secret—Securely downloads a
<datacenter-id>-pull-secret.yamlfile containing a manifest for Kubernetes to your local storage drive via TLS. - Download Registry Credentials—Securely downloads a
<datacenter-id>-registry-credentials.jsonregistry credentials file for Kubernetes to your local storage drive via TLS.
You can use the contents of either of these files as an authorization token to access the Solace Container Registry (
gcr.io) where SAP's container images are stored. For more about deploying Mission Control Agent into your Kubernetes cluster, see Kubernetes Cluster Installation. - Download Image Pull Secret—Securely downloads a
For more information, see Private Regions.