Relocate Supervisor Services to a Private Registry

Relocate Supervisor Services to a private container registry.

Prerequisites

• Verify that you have upgraded vCenter Server to version vSphere 8.0 Update 3.
• Verify that you have upgraded Supervisor to version 1.28.
• Verify that you have a private container image registry.

Procedure

1. Install the Carvel imgpkg utility.
   1. Install imgpkg

      wget -O- https://carvel.dev/install.sh > install.sh
      sudo bash install.sh
      

   2. Verify installation.

      imgpkg version
      

   For more information about the Carvel imgpkg utility, see https://carvel.dev/imgpkg/docs/v0.42.x/install/.
2. Get the YAML manifest for your service.

   Locate the imgpkg bundle:

   The following is a Contour example:

   template:
     spec:
       fetch:
       - imgpkgBundle:
           image: projects.registry.vmware.com/tkg/packages/standard/contour:v1.24.4_vmware.1-tkg.1

3. Download a tar of that imgpkg bundle.

   imgpkg copy -b projects.registry.vmware.com/tkg/packages/standard/contour:v1.24.4_vmware.1-tkg.1 --to-tar contour-v1.24.4.tar --cosign-signatures
   

   Important: You must use the copycommand and not the push and pull commands to relocate the images as they do not pull down all referenced images.
4. Upload the imgpkg bundle to your private container image registry.

   imgpkg copy --tar contour-v1.24.4.tar --to-repo ${registry_url}/contour --cosign-signatures

   Note: imgpkg honors the system's trust settings and Docker's configuration for authentication. If your registry requires authentication, first log in with the Docker CLI command docker login ${registry_url}
5. Update the Supervisor Service YAML with the new URL for the imgpkg bundle.
   For example:

   template:
     spec:
       fetch:
       - imgpkgBundle:
           image: n.n.n.n/contour:v1.24.4_vmware.1-tkg.1