Importing simple content access certificates with Insights Operator

Insights Operator periodically imports your simple content access certificates from OpenShift Cluster Manager and stores them in the etc-pki-entitlement secret in the openshift-config-managed namespace. Simple content access is a capability in Red Hat subscription tools which simplifies the behavior of the entitlement tooling. This feature makes it easier to consume the content provided by your Red Hat subscriptions without the complexity of configuring subscription tooling.

Insights Operator imports simple content access certificates every 8 hours by default, but can be configured or disabled using the support secret in the openshift-config namespace.

Additional resources

• See About simple content access in the Red Hat Subscription Central documentation, for more information about simple content access.

• See Using Red Hat subscriptions in builds, for more information about using simple content access certificates in OKD entitled builds.

Configuring simple content access import interval

You can configure how often the Insights Operator imports the simple content access certificates using the support secret in the openshift-config namespace. The certificate import normally occurs every 8 hours, but you can shorten this interval if you update your simple content access configuration in Red Hat Subscription Management.

This procedure describes how to update the import interval to one hour.

Prerequisites

• You are logged in to the OKD web console as cluster-admin.

Procedure

1. Navigate to Workloads → Secrets.

2. Select the openshift-config project.

3. Search for the support secret using the Search by name field. If it does not exist, click Create → Key/value secret to create it.

4. Click the Options menu , and then click Edit Secret.

5. Click Add Key/Value.

6. Create a key named scaInterval with a value of 1h, and click Save.

   The interval 1h can also be entered as 60m for 60 minutes.

Disabling simple content access import

You can disable the import of simple content access certificates using the support secret in the openshift-config namespace.

Prerequisites

• You are logged in to the OKD web console as cluster-admin.

Procedure

1. Navigate to Workloads → Secrets.

2. Select the openshift-config project.

3. Search for the support secret using the Search by name field. If it does not exist, click Create → Key/value secret to create it.

4. Click the Options menu , and then click Edit Secret.

5. Click Add Key/Value.

6. Create a key named scaPullDisabled with a value of true, and click Save.

   The simple content access certificate import is now disabled.

   To enable the simple content access import again, edit the support secret and delete the scaPullDisabled key.