this repo has no description
chore(infra/bootstrap): add place holder auth config for Zot
Change-Id: I409c34c46cb3dd4a34925fb9aea0a9c077e538fa
+40
+40
infra/modules/bootstrap/registry.tf
+40
infra/modules/bootstrap/registry.tf
···
29
29
podLabels = {
30
30
"istio.io/dataplane-mode" = "ambient"
31
31
}
32
+
# TODO health check will fail if auth is enabled, fix is waiting for release https://github.com/project-zot/helm-charts/pull/69
33
+
# strategy = {
34
+
# # Avoid boltdb file is already in use
35
+
# type = "Recreate"
36
+
# }
37
+
# mountConfig = true
38
+
# configFiles = {
39
+
# "config.json" = jsonencode({
40
+
# "storage": { "rootDirectory": "/var/lib/registry" },
41
+
# "http": {
42
+
# "address": "0.0.0.0",
43
+
# "port": "5000",
44
+
# "externalUrl": "https://registry.${var.cluster_domain}",
45
+
# "auth": {
46
+
# "openid": {
47
+
# "providers": {
48
+
# "oidc": {
49
+
# "issuer": "https://dex.${var.cluster_domain}",
50
+
# "clientid": "registry",
51
+
# "clientsecret": "TODO",
52
+
# "keypath": "",
53
+
# "scopes": ["openid", "profile", "email", "groups"]
54
+
# }
55
+
# }
56
+
# }
57
+
# }
58
+
# },
59
+
# "log": { "level": "info" },
60
+
# "extensions": {
61
+
# "search": {
62
+
# "cve": {
63
+
# "updateInterval": "2h"
64
+
# }
65
+
# },
66
+
# "ui": {
67
+
# "enable": true
68
+
# }
69
+
# }
70
+
# })
71
+
# }
32
72
# TODO separate logic for k3d
33
73
service = {
34
74
type = "NodePort"