argo/apps/docker-registry/base/deployment.yaml

92 lines
2.6 KiB
YAML

---
# Source: docker-registry/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: docker-registry
labels:
app.kubernetes.io/name: docker-registry
spec:
selector:
matchLabels:
app.kubernetes.io/name: docker-registry
replicas: 1
revisionHistoryLimit: 3
strategy:
type: RollingUpdate
template:
metadata:
labels:
app.kubernetes.io/name: docker-registry
annotations:
spec:
securityContext:
fsGroup: 1000
runAsUser: 1000
containers:
- name: docker-registry
image: "registry:2.8.1"
imagePullPolicy: IfNotPresent
command:
- /bin/registry
- serve
- /etc/docker/registry/config.yml
ports:
- containerPort: 5000
livenessProbe:
httpGet:
path: /
port: 5000
readinessProbe:
httpGet:
path: /
port: 5000
resources: {}
env:
- name: REGISTRY_HTTP_SECRET
valueFrom:
secretKeyRef:
name: docker-registry-secret
key: haSharedSecret
- name: REGISTRY_AUTH
value: "htpasswd"
- name: REGISTRY_AUTH_HTPASSWD_REALM
value: "Registry Realm"
- name: REGISTRY_AUTH_HTPASSWD_PATH
value: "/auth/htpasswd"
- name: REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY
value: "/var/lib/registry"
# - name: REGISTRY_PROXY_REMOTEURL
# value: https://registry-1.docker.io
# - name: REGISTRY_PROXY_USERNAME
# valueFrom:
# secretKeyRef:
# name: docker-registry-secret
# key: proxyUsername
# - name: REGISTRY_PROXY_PASSWORD
# valueFrom:
# secretKeyRef:
# name: docker-registry-secret
# key: proxyPassword
volumeMounts:
- name: config
mountPath: /etc/docker/registry
readOnly: true
- name: auth
mountPath: /auth
readOnly: true
- name: data
mountPath: /var/lib/registry/
volumes:
- name: config
configMap:
name: docker-registry-config
- name: auth
secret:
secretName: docker-registry-secret
items:
- key: htpasswd
path: htpasswd
- name: data
persistentVolumeClaim:
claimName: docker-registry