Skip to content

Latest commit

 

History

History
138 lines (106 loc) · 9.97 KB

README.md

File metadata and controls

138 lines (106 loc) · 9.97 KB
Raw

Release Charts

Forked from the original charts repo.

Docker Registry Helm Chart

This repo contains a Kubernetes chart to deploy a private Docker Registry.

Quick Usage

Helm must be installed to use the charts. Please refer to Helm's documentation to get started.

Once Helm has been set up correctly, add the repo as follows:

helm repo add docker-registry https://bh90210.github.io/docker-registry-chart

If you had already added this repo earlier, run helm repo update to retrieve the latest versions of the packages. You can then run helm search repo docker-registry to see the charts.

To install the chart:

helm install docker-registry docker-registry/docker-registry --create-namespace -n docker-registry

To uninstall the chart:

helm delete docker-registry -n docker-registry

Prerequisites Details

  • PV support on underlying infrastructure (if persistence is required)

Chart Details

This chart will do the following:

  • Implement a Docker registry deployment

Installing the Chart with custom values

To install the chart, use the following:

helm install docker-registry docker-registry/docker-registry --create-namespace -n docker-registry -f values.yaml

Creating a user login

First create a user password key pair.

docker run --entrypoint htpasswd registry:2.7.0 -Bbn username password > ./htpasswd

Replace username with an actual username.

Then edit the values.yaml like so:

secrets:
  haSharedSecret: ""
  htpasswd: |-
      user:<your password hash>

To create the hash simply grab the password portion inside the htpasswd file created in the previous step and run

echo $2y$05$qee9BI3FovJ9/j.HWEbGu7m8nfUzXm0dG7UkxsmEEmMJ00iDPS/u | base64

Configuration

The following table lists the configurable parameters of the docker-registry chart and their default values.

Parameter Description Default
image.pullPolicy Container pull policy IfNotPresent
image.repository Container image to use registry
image.tag Container image tag to deploy 2.7.1
imagePullSecrets Specify image pull secrets nil (does not add image pull secrets to deployed pods)
persistence.accessMode Access mode to use for PVC ReadWriteOnce
persistence.enabled Whether to use a PVC for the Docker storage false
persistence.deleteEnabled Enable the deletion of image blobs and manifests by digest nil
persistence.size Amount of space to claim for PVC 10Gi
persistence.storageClass Storage Class to use for PVC -
persistence.existingClaim Name of an existing PVC to use for config nil
service.port TCP port on which the service is exposed 5000
service.type service type ClusterIP
service.clusterIP if service.type is ClusterIP and this is non-empty, sets the cluster IP of the service nil
service.nodePort if service.type is NodePort and this is non-empty, sets the node port of the service nil
service.loadBalancerIP if service.type is LoadBalancer and this is non-empty, sets the loadBalancerIP of the service nil
service.loadBalancerSourceRanges if service.type is LoadBalancer and this is non-empty, sets the loadBalancerSourceRanges of the service nil
replicaCount k8s replicas 1
updateStrategy update strategy for deployment {}
podAnnotations Annotations for pod {}
podLabels Labels for pod {}
podDisruptionBudget Pod disruption budget {}
resources.limits.cpu Container requested CPU nil
resources.limits.memory Container requested memory nil
priorityClassName priorityClassName ""
storage Storage system to use filesystem
tlsSecretName Name of secret for TLS certs nil
secrets.htpasswd Htpasswd authentication nil
secrets.s3.accessKey Access Key for S3 configuration nil
secrets.s3.secretKey Secret Key for S3 configuration nil
secrets.swift.username Username for Swift configuration nil
secrets.swift.password Password for Swift configuration nil
haSharedSecret Shared secret for Registry nil
configData Configuration hash for docker nil
s3.region S3 region nil
s3.regionEndpoint S3 region endpoint nil
s3.bucket S3 bucket name nil
s3.encrypt Store images in encrypted format nil
s3.secure Use HTTPS nil
swift.authurl Swift authurl nil
swift.container Swift container nil
nodeSelector node labels for pod assignment {}
affinity affinity settings {}
tolerations pod tolerations []
ingress.enabled If true, Ingress will be created false
ingress.annotations Ingress annotations {}
ingress.labels Ingress labels {}
ingress.path Ingress service path /
ingress.hosts Ingress hostnames []
ingress.tls Ingress TLS configuration (YAML) []
extraVolumeMounts Additional volumeMounts to the registry container []
extraVolumes Additional volumes to the pod []

Specify each parameter using the --set key=value[,key=value] argument to helm install.

To generate htpasswd file, run this docker command: docker run --entrypoint htpasswd registry:2 -Bbn user password > ./htpasswd.