| giolekva | d65f7cb | 2020-12-09 10:26:20 +0400 | [diff] [blame] | 1 | --- |
| 2 | apiVersion: v1 |
| 3 | kind: Namespace |
| 4 | metadata: |
| 5 | name: container-registry |
| 6 | --- |
| 7 | apiVersion: v1 |
| 8 | kind: Service |
| 9 | metadata: |
| 10 | name: registry |
| 11 | namespace: container-registry |
| 12 | spec: |
| giolekva | 918b79d | 2020-12-09 12:39:41 +0400 | [diff] [blame] | 13 | # NOTE(lekva): We use NodePort type service here so container registry accessible |
| 14 | # from every node in the cluster without any extra whitelisting. |
| 15 | # It is easy to expose such services on host muchine from local dev environment. |
| 16 | type: NodePort |
| giolekva | d65f7cb | 2020-12-09 10:26:20 +0400 | [diff] [blame] | 17 | selector: |
| 18 | app: registry |
| 19 | ports: |
| giolekva | 918b79d | 2020-12-09 12:39:41 +0400 | [diff] [blame] | 20 | - port: 5000 |
| 21 | nodePort: 30500 |
| giolekva | d65f7cb | 2020-12-09 10:26:20 +0400 | [diff] [blame] | 22 | targetPort: 5000 |
| 23 | --- |
| 24 | apiVersion: networking.k8s.io/v1 |
| 25 | kind: Ingress |
| 26 | metadata: |
| 27 | name: ingress |
| 28 | namespace: container-registry |
| 29 | annotations: |
| 30 | kubernetes.io/ingress.class: "traefik" |
| 31 | spec: |
| 32 | rules: |
| 33 | - host: "dev-container-registry" |
| 34 | http: |
| 35 | paths: |
| 36 | - pathType: Prefix |
| 37 | path: "/" |
| 38 | backend: |
| 39 | service: |
| 40 | name: container-registry |
| 41 | port: |
| 42 | number: 5000 |
| 43 | --- |
| 44 | apiVersion: apps/v1 |
| giolekva | 0088376 | 2020-12-11 21:52:53 +0400 | [diff] [blame] | 45 | kind: StatefulSet |
| giolekva | d65f7cb | 2020-12-09 10:26:20 +0400 | [diff] [blame] | 46 | metadata: |
| 47 | name: registry |
| 48 | namespace: container-registry |
| 49 | spec: |
| giolekva | 0088376 | 2020-12-11 21:52:53 +0400 | [diff] [blame] | 50 | serviceName: registry |
| giolekva | d65f7cb | 2020-12-09 10:26:20 +0400 | [diff] [blame] | 51 | selector: |
| 52 | matchLabels: |
| 53 | app: registry |
| 54 | replicas: 1 |
| 55 | template: |
| 56 | metadata: |
| 57 | labels: |
| 58 | app: registry |
| 59 | spec: |
| 60 | containers: |
| 61 | - name: registry |
| 62 | image: registry:2 |
| 63 | imagePullPolicy: IfNotPresent |
| giolekva | 0088376 | 2020-12-11 21:52:53 +0400 | [diff] [blame] | 64 | volumeMounts: |
| 65 | - name: registry-dir |
| 66 | mountPath: /var/lib/registry |
| giolekva | d65f7cb | 2020-12-09 10:26:20 +0400 | [diff] [blame] | 67 | env: |
| 68 | # - name: REGISTRY_REDIRECT_DISABLE |
| 69 | # value: "true" |
| 70 | # - name: REGISTRY_LOG_LEVEL |
| 71 | # value: "debug" |
| 72 | # - name: REGISTRY_LOG_ACCESSLOG_DISABLED |
| 73 | # value: "false" |
| 74 | # - name: REGISTRY_HTTP_RELATIVEURLS |
| 75 | # value: "true" |
| 76 | # - name: REGISTRY_HTTP_HOST |
| 77 | # value: "http://dev-container-registry:8080" |
| 78 | - name: REGISTRY_HTTP_ADDR |
| 79 | value: 0.0.0.0:5000 |
| 80 | ports: |
| 81 | - containerPort: 5000 |
| giolekva | 0088376 | 2020-12-11 21:52:53 +0400 | [diff] [blame] | 82 | volumes: |
| 83 | - name: registry-dir |
| 84 | persistentVolumeClaim: |
| 85 | claimName: registry-dir |
| 86 | volumeClaimTemplates: |
| 87 | - metadata: |
| 88 | name: registry-dir |
| 89 | annotations: |
| 90 | volume.alpha.kubernetes.io/storage-class: local-path |
| 91 | spec: |
| 92 | accessModes: |
| 93 | - "ReadWriteOnce" |
| 94 | resources: |
| 95 | requests: |
| 96 | storage: 1Gi |