Foreman » Installer

The following configuration needs to occur in order for katello to properly connect to the content app serving a docker registry:

<Location /pulpcore_registry/v2/>
   SSLRequire %{SSL_CLIENT_S_DN_CN} eq "admin" 
</Location>

ProxyPass /pulpcore_registry/v2/ http://127.0.0.1:24816/v2/
ProxyPassReverse /pulpcore_registry/v2 http://127.0.0.1:24816/v2

Note, that this requires this PR to actually work in katello https://github.com/Katello/katello/pull/8499

The idea behind this change is that katello will use its own pulp client certs to authenticate with the /pulpcore_registry/ endpoint which will require a signed cert with a CN of 'admin'. It will then proxy the request through to the pulp content app