apiVersion: v1
kind: ConfigMap
metadata:
  namespace: cabotage
  name: registry-config
data:
  config.yml: |
    version: 0.1
    auth:
      token:
        realm: https://cabotage-app.cabotage.svc.cluster.local:8443/docker/auth
        service: cabotage-registry
        issuer: cabotage-app
        rootcertbundle: /etc/docker/registry-local/public_key_bundle
    log:
      level: debug
      fields:
        service: registry
    storage:
      cache:
        blobdescriptor: inmemory
      redirect:
        disable: true
      s3:
        accesskey: MINIOACCESSKEY
        secretkey: MINIOSECRETKEY
        region: us-east-2
        regionendpoint: https://minio.cabotage.svc.cluster.local:9000
        bucket: cabotage-registry
        encrypt: false
        keyid: mykeyid
        secure: true
        v4auth: true
        chunksize: "5242880"
    http:
      addr: 0.0.0.0:4999
      secret: verysecure
      host: https://registry.cabotage.svc.cluster.local:5000
      headers:
        X-Content-Type-Options: [nosniff]
  public_key_bundle: |
    -----BEGIN CERTIFICATE-----
    MIIBLDCB1KADAgECAhRGpaXYSTDowzwESrvF5ByYSGFquzAKBggqhkjOPQQDAjAX
    MRUwEwYDVQQDDAxjYWJvdGFnZS1hcHAwHhcNMTgwMjIyMjA1ODQwWhcNMTkwMjIz
    MjA1ODQwWjAXMRUwEwYDVQQDDAxjYWJvdGFnZS1hcHAwWTATBgcqhkjOPQIBBggq
    hkjOPQMBBwNCAAT56aUT3Zmn9ekqwlBkrhHnyyb+4L3gqAV9lZWq59Go2Q8Plu3u
    m4twqVEXnWtbArutWDsRBJ+VGhbzrXfxcf2TMAoGCCqGSM49BAMCA0cAMEQCIHu+
    O9M1tFQpbm5V+VIZBK1D1t1gQIgvCVs9I9ql/vTUAiBcvJU85lLiX33ZDYzvGeCn
    NFVMCKVndaRe9DPhcnNXdw==
    -----END CERTIFICATE-----
