ContainerRegistry resource¶

This section describes the ContainerRegistry custom resource (CR) used in MOSK to configure CA certificates on machines to access private Docker registries.

The ContainerRegistry CR contains the following fields:

apiVersion
API version of the object that is kaas.mirantis.com/v1alpha1
kind
Object type that is ContainerRegistry
metadata
The metadata object field of the ContainerRegistry CR contains the following fields:
- name
  Name of the container registry
- namespace
  Project where the container registry is created
spec
The spec object field of the ContainerRegistry CR contains the following fields:
- domain
  Host name and optional port of the registry
- CACert
  CA certificate of the registry in the base64-encoded format

Caution

Only one ContainerRegistry resource can exist per domain. To configure multiple CA certificates for the same domain, combine them into one certificate.

The ContainerRegistry resource example:

apiVersion: kaas.mirantis.com/v1alpha1
kind: ContainerRegistry
metadata:
  name: demoregistry
  namespace: test
spec:
  domain: demohost:5000
  CACert: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0...