mirror of
https://github.com/dredx/prole.git
synced 2026-09-27 12:04:30 +00:00
598eae4633
- Add ssl_hosts group and prole_ssl role to deploy registry cert/key to /etc/ssl/certs/prole - Configure k8s registry deployment to serve HTTPS using mounted host certs - Switch k3s/containerd registry mirror config to https:// and prefer HTTPS checks with HTTP fallback Co-authored-by: Junie <junie@jetbrains.com>
15 lines
592 B
Django/Jinja
15 lines
592 B
Django/Jinja
mirrors:
|
|
'{{ k3s_registry_host_resolved }}:{{ k3s_registry_port }}':
|
|
endpoint:
|
|
- "https://{{ k3s_registry_host_resolved }}:{{ k3s_registry_port }}"
|
|
'registry.{{ k3s_registry_namespace_resolved }}.svc.cluster.local:{{ k3s_registry_port }}':
|
|
endpoint:
|
|
- "https://{{ k3s_registry_host_resolved }}:{{ k3s_registry_port }}"
|
|
configs:
|
|
'{{ k3s_registry_host_resolved }}:{{ k3s_registry_port }}':
|
|
tls:
|
|
insecure_skip_verify: true
|
|
'registry.{{ k3s_registry_namespace_resolved }}.svc.cluster.local:{{ k3s_registry_port }}':
|
|
tls:
|
|
insecure_skip_verify: true
|