opensuse/registries-operator repository overview

⁠Registry operator:

• Description⁠
• Quickstart⁠
• Devel⁠
• Additional Info⁠

⁠Description

A Docker registries operator for Kubernetes, developed inside the Kubic⁠ project.

⁠features:

• Automatic installation of registries certificates based on some CRD⁠s.

⁠Quick start

• load the operator with

  kubectl apply -f https://raw.githubusercontent.com/kubic-project/registries-operator/master/deployments/registries-operator-full.yaml
  

  Copy

• once the operator is running, store the certificate for your registry in a Secret with:

  kubectl create secret generic suse-ca-crt --from-file=ca.crt=/etc/pki/trust/anchors/SUSE_CaaSP_CA.crt -n kube-system
  

  Copy

  where /etc/pki/trust/anchors/SUSE_CaaSP_CA.crt is the certificate and suse-ca-crt is the Secret.

• create a Registry object like this:

  # registry.yaml
  apiVersion: "kubic.opensuse.org/v1beta1"
  kind: Registry
  metadata:
    name: suse-registry
    namespace: kube-system
  spec:
    hostPort: "registry.suse.de:5000"
    # secret with the ca.crt used for pulling images from this registry
    certificate:
      name: suse-ca-crt
      namespace: kube-system
  

  Copy

  then you can load it with kubectl apply -f registry.yaml.

• once this is done, the suse-ca-crt should automatically appear in all the machines in your cluster, and all the Docker daemons in your cluster will be able to pull from that registry automatically.

⁠Devel

• See the development documentation⁠ if you intend to contribute to this project.

⁠Extra

• the registries-operator image⁠ in the Docker Hub.
• the kubic-init⁠ container, a container for bootstrapping a Kubernetes cluster on top of MicroOS⁠ (an openSUSE-Tumbleweed-based OS focused on running containers).
• the Kubic Project⁠ home page.