Subir archivos a "registry-privado"

registry-privado/README.md

@@ -0,0 +1,12 @@
+# registry privado
+
+Esta configuración crea un docker registry privado en el clúster.
+
+No necesita credenciales.
+
+    kubectl create ns docker-registry
+    kubectl create -f docker-registry.yaml -f ingress.yaml
+
+El fichero ```registries.yaml``` no sé para qué vale.
+
+He cogido las ideas de [aquí](https://gist.github.com/gdamjan/139de773683fec561dfb1927a2ed22a9#file-docker-registry-yaml)

registry-privado/docker-registry.yaml

@@ -0,0 +1,65 @@
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: docker-registry-service
+  labels:
+    app: docker-registry
+spec:
+  selector:
+    app: docker-registry
+  ports:
+    - protocol: TCP
+      port: 5000
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: docker-registry-pvc
+  labels:
+    app: docker-registry
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: local-path
+  resources:
+    requests:
+      storage: 10Gi
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: docker-registry
+  labels:
+    app: docker-registry
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: docker-registry
+  template:
+    metadata:
+      labels:
+        app: docker-registry
+    spec:
+      containers:
+      - name: docker-registry
+        image: registry
+        ports:
+        - containerPort: 5000
+          protocol: TCP
+        volumeMounts:
+        - name: storage
+          mountPath: /var/lib/registry
+        env:
+        - name: REGISTRY_HTTP_ADDR
+          value: :5000
+        - name: REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY
+          value: /var/lib/registry
+      volumes:
+      - name: storage
+        persistentVolumeClaim:
+          claimName: docker-registry-pvc

registry-privado/ingress.yaml

@@ -0,0 +1,19 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-body-size: '0'
+  name: docker-registry-ingress
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: registry.rancher.lab
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: docker-registry-service
+            port:
+              number: 5000

registry-privado/registries.yaml

@@ -0,0 +1,9 @@
+# /etc/rancher/k3s/registries.yaml
+#
+# No need for TLS/HTTPS for the local registry
+# https://docs.k3s.io/installation/private-registry
+#
+mirrors:
+  registry.localhost:
+    endpoint:
+      - "http://registry.localhost:80"