150 lines
3.4 KiB
YAML
150 lines
3.4 KiB
YAML
image:
|
|
repository: ghcr.io/project-zot/zot
|
|
tag: v2.1.3-rc4
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: traefik
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
|
kubernetes.io/tls-acme: "true"
|
|
kubernetes.io/ingress.allow-http: "false"
|
|
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
|
|
pathtype: Prefix
|
|
hosts:
|
|
- host: registry.ru.badhouseplants.net
|
|
paths:
|
|
- path: /
|
|
tls:
|
|
- secretName: registry.ru.badhouseplants.net
|
|
hosts:
|
|
- registry.ru.badhouseplants.net
|
|
|
|
service:
|
|
type: ClusterIP
|
|
persistence: false
|
|
pvc:
|
|
create: true
|
|
lavels:
|
|
velero.io/exclude-from-backup: true
|
|
mountConfig: true
|
|
mountSecret: true
|
|
configFiles:
|
|
config.json: |-
|
|
{
|
|
"distSpecVersion": "1.1.1",
|
|
"storage": {
|
|
"dedupe": true,
|
|
"gc": true,
|
|
"rootDirectory": "/var/lib/registry",
|
|
"retention": {
|
|
"dryRun": false,
|
|
"delay": "24h",
|
|
"policies": [
|
|
{
|
|
"repositories": [
|
|
"**"
|
|
],
|
|
"deleteReferrers": false,
|
|
"deleteUntagged": true,
|
|
"keepTags": [
|
|
{
|
|
"mostRecentlyPulledCount": 2
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"http": {
|
|
"address": "0.0.0.0",
|
|
"port": "5000",
|
|
"externalUrl": "https://registry.ru.badhouseplants.net",
|
|
"auth": {
|
|
"htpasswd": {
|
|
"path": "/secret/htpasswd"
|
|
}
|
|
},
|
|
"accessControl": {
|
|
"metrics": {
|
|
"users": [
|
|
"admin"
|
|
]
|
|
},
|
|
"repositories": {
|
|
"**": {
|
|
"anonymousPolicy": [],
|
|
"policies": [
|
|
{
|
|
"users": [
|
|
"mirror_user",
|
|
"overlord"
|
|
],
|
|
"actions": [
|
|
"read",
|
|
"create",
|
|
"update",
|
|
"delete"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"log": {
|
|
"level": "info"
|
|
},
|
|
"extensions": {
|
|
"scrub": {
|
|
"enable": true
|
|
},
|
|
"metrics": {
|
|
"enable": true,
|
|
"prometheus": {
|
|
"path": "/metrics"
|
|
}
|
|
},
|
|
"mgmt": {
|
|
"enable": false
|
|
},
|
|
"sync": {
|
|
"enable": true,
|
|
"registries": [
|
|
{
|
|
"urls": [
|
|
"https://docker.io/library",
|
|
"https://docker.io"
|
|
],
|
|
"content": [
|
|
{
|
|
"prefix": "**",
|
|
"destination": "/dockerhub"
|
|
}
|
|
],
|
|
"onDemand": true,
|
|
"tlsVerify": true
|
|
},
|
|
{
|
|
"urls": [
|
|
"https://registry.k8s.io"
|
|
],
|
|
"content": [
|
|
{
|
|
"prefix": "**",
|
|
"destination": "/k8s"
|
|
}
|
|
],
|
|
"onDemand": true,
|
|
"tlsVerify": true
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
|
|
secretFiles:
|
|
htpasswd: |-
|
|
overlord:$2y$05$RhAeAsFY32y8h0japhT72.SQTPXgHc54RCp4CZ4Udsg2.iQxJVeZ.
|
|
mirror_user:$2y$05$PkvVMY04ZGvuGUXkrez7peyXevl63ugFbdxZ.ON1G/Tof/0Uf5vZi
|