mirror of
https://github.com/khuedoan/homelab.git
synced 2025-01-07 05:51:17 +07:00
4b69ec2dfc
https://github.com/distribution/distribution Docker Registry is stateless and easier to automate. The tiny footprint is an added bonus.
48 lines
1.2 KiB
YAML
48 lines
1.2 KiB
YAML
docker-registry:
|
|
ingress:
|
|
enabled: true
|
|
className: nginx
|
|
hosts:
|
|
- &host registry.khuedoan.com
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/proxy-body-size: "0"
|
|
tls:
|
|
- secretName: registry-tls-certificate
|
|
hosts:
|
|
- *host
|
|
extraVolumes:
|
|
- name: auth
|
|
emptyDir: {}
|
|
extraVolumeMounts:
|
|
- mountPath: /auth
|
|
name: auth
|
|
# TODO uncomment to enable auth
|
|
# extraEnvVars:
|
|
# - name: REGISTRY_AUTH
|
|
# value: "htpasswd"
|
|
# - name: REGISTRY_AUTH_HTPASSWD_REALM
|
|
# value: "Registry Realm"
|
|
# - name: REGISTRY_AUTH_HTPASSWD_PATH
|
|
# value: "/auth/htpasswd"
|
|
# initContainers:
|
|
# - name: htpasswd
|
|
# image: httpd:2-alpine
|
|
# command:
|
|
# - sh
|
|
# - -c
|
|
# - htpasswd -Bbn "${username}" "${password}" > /auth/htpasswd
|
|
# envFrom:
|
|
# - secretRef:
|
|
# name: registry-admin-secret
|
|
# volumeMounts:
|
|
# - mountPath: /auth
|
|
# name: auth
|
|
persistence:
|
|
enabled: true
|
|
size: 10Gi
|
|
storageClass: longhorn
|
|
garbageCollect:
|
|
enabled: true
|