Applies to SUSE AI Factory

2 Are there any post-deployment steps? #

To run AI applications and blueprints, you must configure access credentials for multiple network registries. This guide walks you through acquiring user tokens, creating Kubernetes secrets in the local cluster, and mapping those secrets in SUSE AI Factory.

Screenshot showing list of Rancher secrets

Figure 2.1: Rancher secrets #

2.1 How do I access images from SUSE Application Collection? #

Visit SUSE Application Collection, sign in, create and save the user access token as described in the official documentation.
Add the SUSE Application Collection credentials to the Rancher local cluster.
1. From the main left panel, select local › Storage › Secrets.
2. Select Create in the top right and select Opaque.
  Figure 2.2: Rancher secrets types #
3. Select the aif-operator namespace and enter your preferred secret name (referenced as <APPCO_SECRETS_NAME> in command line tasks) to identify the resource.
4. In the Data tab, add the key user with the value of your SUSE Application Collection username and token with your SUSE Application Collection token.
  Figure 2.3: SUSE Application Collection secrets #
5. Confirm by selecting Create in the bottom right corner.
Tip: Creating the secrets on the command line
```
> kubectl create secret generic <APPCO_SECRETS_NAME> \
  --from-literal=user=<APPCO_USERNAME> \
  --from-literal=token=<APPCO_USER_TOKEN> \
  -n aif-operator
```
Assign SUSE Application Collection secrets to SUSE AI Factory.
1. From the main left panel, select SUSE AI Factory › Settings.
2. In the SUSE Application Collection section, select the secret name corresponding to your <APPCO_SECRETS_NAME> from the Secret name drop-down list.
3. Select user for Username Secret › Secret Key and token for Access Token Secret › Secret Key.
  Figure 2.4: SUSE Application Collection secrets #
4. Confirm by selecting Apply in the bottom right corner.
Navigate to SUSE AI Factory › Apps and select SUSE AI Library from the drop-down list in the top center of the screen.
Select the Refresh button in the top right. The list of available applications from the SUSE Application Collection appears.

2.2 How do I access images from SUSE Registry? #

Visit SUSE Customer Center, select the organization with an active SUSE AI Factory subscription from the left sidebar, and save the registration code for the SUSE AI Factory subscription.
Add the SUSE Registry credentials to the Rancher local cluster.
1. From the main left panel, select local › Storage › Secrets.
2. Select Create in the top right and select Opaque.
3. Select the aif-operator namespace and enter your preferred secret name (referenced as <REGISTRY_SECRETS_NAME> in command line tasks) to identify the resource.
4. In the Data tab, add the key user with the value regcode and token with your SUSE Registry token.
  Figure 2.5: SUSE Registry secrets #
5. Confirm by selecting Create in the bottom right corner.
Tip: Creating the secrets on the command line
```
> kubectl create secret generic <REGISTRY_SECRETS_NAME> \
  --from-literal=user=regcode \
  --from-literal=token=<REGISTRY_USER_TOKEN> \
  -n aif-operator
```
Assign SUSE Registry secrets to SUSE AI Factory.
1. From the main left panel, select SUSE AI Factory › Settings.
2. In the SUSE Registry section, select the secret name corresponding to your <REGISTRY_SECRETS_NAME> from the Secret name drop-down list.
3. Select user for Username Secret › Secret Key and token for Access Token Secret › Secret Key.
  Figure 2.6: Assign SUSE Registry secrets #
4. Confirm by selecting Apply in the bottom right corner.
Navigate to SUSE AI Factory › Apps and select SUSE AI Library from the drop-down list in the top center of the screen.
Select the Refresh button in the top right. The list of available applications from the SUSE Registry appears.

2.3 How do I access images from NVIDIA catalog? #

Visit SUSE Customer Center and save the NVIDIA registration code for the SUSE AI Factory subscription.
Add the NVIDIA registry credentials to the Rancher local cluster.
1. From the main left panel, select local › Storage › Secrets.
2. Select Create in the top right and select Opaque.
3. Select the aif-operator namespace and enter your preferred secret name (referenced as <NVIDIA_SECRETS_NAME> in command line tasks) to identify the resource.
4. In the Data tab, add the key user with the value $oauthtoken and token with your NVIDIA registry token.
  Figure 2.7: NVIDIA secrets #
5. Confirm by selecting Create in the bottom right corner.
Tip: Creating NVIDIA secrets on the command line
```
> kubectl create secret generic <NVIDIA_SECRETS_NAME> \
  --from-literal=user=$oauthtoken \
  --from-literal=token=<NVIDIA_USER_TOKEN> \
  -n aif-operator
```
Assign NVIDIA registry secrets to SUSE AI Factory.
1. From the main left panel, select SUSE AI Factory › Settings.
2. In the NVIDIA section, select the secret name corresponding to your <NVIDIA_SECRETS_NAME> from the Secret name drop-down list.
3. Select user for Username Secret › Secret Key and token for Access Token Secret › Secret Key.
  Figure 2.8: Assign NVIDIA secrets #
4. Confirm by selecting Apply in the bottom right corner.
Navigate to SUSE AI Factory › Apps and select NVIDIA Library from the drop-down list in the top center of the screen.
Select the Refresh button in the top right. The list of available applications from the NVIDIA registry appears.

2.4 How do I access a Git repository to store applications configuration? #

Add your Git Personal Access Token (PAT) to the Rancher local cluster.
1. From the main left panel, select local › Storage › Secrets.
2. Select Create in the top right and select Opaque.
3. Select the aif-operator namespace and enter your preferred secret name (referenced as <GIT_SECRETS_NAME> in command line tasks) to identify the resource.
4. In the Data tab, add the key token and paste your PAT as a value.
  Figure 2.9: Git secrets #
5. Confirm by selecting Create in the bottom right corner.
Tip: Creating Git secrets on the command line
```
> kubectl create secret generic <GIT_SECRETS_NAME> \
  --from-literal=token=<GIT_PAT_TOKEN> \
  -n aif-operator
```
Add the Git PAT to SUSE AI Factory.
1. From the main left panel, select SUSE AI Factory › Settings.
2. In the Fleet/GitOps section, enter the Git repository URL and specify which branch to use.
3. Select the authentication type and the PAT secret name corresponding to your <GIT_SECRETS_NAME> from the Credential Secret drop-down list.
4. Select token for menu:Secret Key.
  Figure 2.10: Assign Git secrets #
5. Confirm by selecting Apply in the bottom right corner.