harbor/make/photon/prepare/templates/registry/config.yml.jinja

78 lines
1.6 KiB
Plaintext
Raw Normal View History

version: 0.1
log:
level: {{level}}
fields:
service: registry
storage:
cache:
layerinfo: redis
{{storage_provider_info}}
maintenance:
uploadpurging:
{% if purge_upload.enabled %}
enabled: true
age: {{ purge_upload.age }}
interval: {{ purge_upload.interval }}
{% if purge_upload.dryrun %}
dryrun: true
{% else %}
dryrun: false
{% endif %}
{% else %}
enabled: false
{% endif %}
delete:
enabled: true
{% if storage_redirect_disabled %}
redirect:
disable: true
{% endif %}
redis:
{% if sentinel_master_set %}
Upgrade to distribution (registry) v3 alpha (#19784) * registryctl/api/registry/blob: fix dropped test error (#19721) Signed-off-by: Lars Lehtonen <lars.lehtonen@gmail.com> * Remove robot account update quota permission (#19819) Signed-off-by: Yang Jiao <yang.jiao@broadcom.com> Co-authored-by: Yang Jiao <yang.jiao@broadcom.com> * Cache image list with digest key (#19801) fixes #19429 Signed-off-by: stonezdj <daojunz@vmware.com> Co-authored-by: stonezdj <daojunz@vmware.com> * Add quota permissions testcase (#19822) Signed-off-by: Yang Jiao <yang.jiao@broadcom.com> Co-authored-by: Yang Jiao <yang.jiao@broadcom.com> * deprecate gosec in makefile (#19828) remove the unused the part from makefile Signed-off-by: wang yan <wangyan@vmware.com> * Add verification that robot account duration is not 0 (#19829) Signed-off-by: Yang Jiao <yang.jiao@broadcom.com> * fix artifact page bug (#19807) * fix artifact page bug * update testcase * Upgrade to distribution (registry) v3 alpha This includes all the benefits of the v3 distribution, but also all breaking changes. Most notably, Image Manifest v2 Schema v1 support has been dropped, as well as the `oss` and `swift` storage drivers. Currently, this still relies on v2's github.com/docker/distribution/registry/client/auth/challenge, because that code has been removed from the public API in v3. Signed-off-by: Aaron Dewes <aaron.dewes@protonmail.com> --------- Signed-off-by: Lars Lehtonen <lars.lehtonen@gmail.com> Signed-off-by: Yang Jiao <yang.jiao@broadcom.com> Signed-off-by: stonezdj <daojunz@vmware.com> Signed-off-by: wang yan <wangyan@vmware.com> Signed-off-by: Aaron Dewes <aaron.dewes@protonmail.com> Co-authored-by: Lars Lehtonen <lars.lehtonen@gmail.com> Co-authored-by: Yang Jiao <72076317+YangJiao0817@users.noreply.github.com> Co-authored-by: Yang Jiao <yang.jiao@broadcom.com> Co-authored-by: stonezdj(Daojun Zhang) <stonezdj@gmail.com> Co-authored-by: stonezdj <daojunz@vmware.com> Co-authored-by: Wang Yan <wangyan@vmware.com> Co-authored-by: ShengqiWang <124650040+ShengqiWang@users.noreply.github.com>
2024-01-26 22:48:06 +01:00
sentinel:
{# sentinel hosts are separated with comma #}
{% set redis_hosts = redis_host.split(',') %}
addresses:
{% for local_redis_host in redis_hosts %}
- {{local_redis_host}}
{% endfor %}
sentinelMasterSet: {{sentinel_master_set}}
{% else %}
addr: {{redis_host}}
{% endif %}
readtimeout: 10s
writetimeout: 10s
dialtimeout: 10s
password: {{redis_password}}
db: {{redis_db_index_reg}}
pool:
maxidle: 100
maxactive: 500
idletimeout: 60s
http:
{% if internal_tls.enabled %}
addr: :5443
tls:
certificate: /etc/harbor/tls/registry.crt
key: /etc/harbor/tls/registry.key
minimumtls: tls1.2
{% else %}
addr: :5000
{% endif %}
secret: placeholder
debug:
{% if metric.enabled %}
addr: :{{ metric.port }}
prometheus:
enabled: true
path: {{ metric.path }}
{% else %}
addr: localhost:5001
{% endif %}
auth:
htpasswd:
realm: harbor-registry-basic-realm
path: /etc/registry/passwd
validation:
disabled: true