diff --git a/apps/docker-registry/base/config.yml b/apps/docker-registry/base/cm/config.yml
similarity index 100%
rename from apps/docker-registry/base/config.yml
rename to apps/docker-registry/base/cm/config.yml
diff --git a/apps/docker-registry/base/cronjob.yaml b/apps/docker-registry/base/cronjob.yaml
index e2ad559..471bb84 100644
--- a/apps/docker-registry/base/cronjob.yaml
+++ b/apps/docker-registry/base/cronjob.yaml
@@ -62,7 +62,7 @@ spec:
                       name: docker-registry-secret
                       key: proxyPassword
               volumeMounts: 
-                - name: "docker-registry-config"
+                - name: config
                   mountPath: "/etc/docker/registry"
                 - name: auth
                   mountPath: /auth
@@ -71,7 +71,7 @@ spec:
                   mountPath: /var/lib/registry/
           restartPolicy: OnFailure
           volumes: 
-            - name: docker-registry-config
+            - name: config
               configMap:
                 name: docker-registry-config
             - name: auth
diff --git a/apps/docker-registry/base/deployment.yaml b/apps/docker-registry/base/deployment.yaml
index a2378b7..65323c8 100644
--- a/apps/docker-registry/base/deployment.yaml
+++ b/apps/docker-registry/base/deployment.yaml
@@ -53,7 +53,7 @@ spec:
               port: 5000
           resources: 
             {}
-          env: 
+          env:
             - name: REGISTRY_HTTP_SECRET
               valueFrom:
                 secretKeyRef:
@@ -79,18 +79,22 @@ spec:
                 secretKeyRef:
                   name: docker-registry-secret
                   key: proxyPassword
-          volumeMounts: 
+          volumeMounts:
             - name: config
               mountPath: "/etc/docker/registry"
+              readOnly: true
             - name: auth
               mountPath: /auth
               readOnly: true
             - name: data
               mountPath: /var/lib/registry/
-      volumes: 
+      volumes:
         - name: config
           configMap:
             name: docker-registry-config
+            items:
+              - key: "config.yml"
+                path: "config.yml"
         - name: auth
           secret:
             secretName: docker-registry-secret
diff --git a/apps/docker-registry/base/kustomization.yaml b/apps/docker-registry/base/kustomization.yaml
index 154990e..8f027cd 100644
--- a/apps/docker-registry/base/kustomization.yaml
+++ b/apps/docker-registry/base/kustomization.yaml
@@ -12,4 +12,4 @@ resources:
 configMapGenerator:
   - name: docker-registry-config
     files:
-      - config.yml
+      - config.yml=cm/config.yml