1. 添加k8s相关的配置

kubernetes/dockerhub/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 45m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://registry-1.docker.io

kubernetes/dockerhub/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: dockerhub-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true

kubernetes/dockerhub/sts.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: dockerhub
+  namespace: registry
+spec:
+  selector:
+    matchLabels:
+      app: dockerhub
+  serviceName: dockerhub
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: dockerhub
+    spec:
+      containers:
+      - name: dockerhub
+        image: registry:2.8.1
+        ports:
+        - containerPort: 5000
+          name: dockerhub
+        volumeMounts:
+        - name: dockerhub-data
+          mountPath: /var/lib/registry
+        - name: timezone
+          mountPath: /etc/localtime
+          readOnly: true
+        - name: dockerhub-cnf
+          mountPath: /etc/docker/registry/config.yml
+          subPath: config.yml
+      volumes:
+        - name: dockerhub-cnf
+          configMap:
+            name: dockerhub-cnf
+        - name: timezone
+          hostPath: 
+            path: /usr/share/zoneinfo/Asia/Shanghai  
+  volumeClaimTemplates:
+  - metadata:
+      name: dockerhub-data
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi

kubernetes/dockerhub/svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: dockerhub
+  namespace: registry
+spec:
+  selector:
+    app: dockerhub
+  ports:
+  - port: 5000
+    targetPort: 5000

kubernetes/gcr/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 1m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://gcr.io

kubernetes/gcr/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: gcr-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true

kubernetes/gcr/sts.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: gcr
+  namespace: registry
+spec:
+  selector:
+    matchLabels:
+      app: gcr
+  serviceName: gcr
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: gcr
+    spec:
+      containers:
+      - name: gcr
+        image: registry:2.8.1
+        ports:
+        - containerPort: 5000
+          name: gcr
+        volumeMounts:
+        - name: gcr-data
+          mountPath: /var/lib/registry
+        - name: timezone
+          mountPath: /etc/localtime
+          readOnly: true
+        - name: gcr-cnf
+          mountPath: /etc/docker/registry/config.yml
+          subPath: config.yml
+      volumes:
+        - name: gcr-cnf
+          configMap:
+            name: gcr-cnf
+        - name: timezone
+          hostPath: 
+            path: /usr/share/zoneinfo/Asia/Shanghai  
+  volumeClaimTemplates:
+  - metadata:
+      name: gcr-data
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi

kubernetes/gcr/svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: gcr
+  namespace: registry
+spec:
+  selector:
+    app: gcr
+  ports:
+  - port: 5000
+    targetPort: 5000

kubernetes/ghcr/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 1m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://ghcr.io

kubernetes/ghcr/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: ghcr-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true

kubernetes/ghcr/sts.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: ghcr
+  namespace: registry
+spec:
+  selector:
+    matchLabels:
+      app: ghcr
+  serviceName: ghcr
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: ghcr
+    spec:
+      containers:
+      - name: ghcr
+        image: registry:2.8.1
+        ports:
+        - containerPort: 5000
+          name: ghcr
+        volumeMounts:
+        - name: ghcr-data
+          mountPath: /var/lib/registry
+        - name: timezone
+          mountPath: /etc/localtime
+          readOnly: true
+        - name: ghcr-cnf
+          mountPath: /etc/docker/registry/config.yml
+          subPath: config.yml
+      volumes:
+        - name: ghcr-cnf
+          configMap:
+            name: ghcr-cnf
+        - name: timezone
+          hostPath: 
+            path: /usr/share/zoneinfo/Asia/Shanghai  
+  volumeClaimTemplates:
+  - metadata:
+      name: ghcr-data
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 50Gi

kubernetes/ghcr/svc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: ghcr
+  namespace: registry
+spec:
+  selector:
+    app: ghcr
+  ports:
+  - port: 5000
+    targetPort: 5000

kubernetes/ingress.yaml

@@ -0,0 +1,75 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: registry-ingress
+  namespace: registry
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+spec:
+  rules:
+  - host: "quay.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: quay
+            port:
+              number: 5000
+  - host: "registryk8s.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: registryk8s
+            port:
+              number: 5000
+  - host: "gcr.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: gcr
+            port:
+              number: 5000
+  - host: "ghcr.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: ghcr
+            port:
+              number: 5000
+  - host: "k8sgcr.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: k8sgcr
+            port:
+              number: 5000
+  - host: "hub.example.com"
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/"
+        backend:
+          service:
+            name: dockerhub
+            port:
+              number: 5000
+  tls:
+  - hosts:
+    - example.com
+    secretName: example.com-tls

kubernetes/k8sgcr/config.yml

@@ -0,0 +1,16 @@
+version: 0.1
+storage:
+  filesystem:
+    rootdirectory: /var/lib/registry
+  delete:
+    enabled: true
+  maintenance:
+    uploadpurging:
+      enabled: true
+      age: 168h
+      dryrun: false
+      interval: 1m
+http:
+  addr: 0.0.0.0:5000
+proxy:
+  remoteurl: https://k8s.gcr.io

kubernetes/k8sgcr/kustomization.yaml

@@ -0,0 +1,10 @@
+resources:
+- sts.yaml
+- svc.yaml
+
+configMapGenerator:
+- name: k8sgcr-cnf
+  files:
+  - config.yml
+  options:
+    disableNameSuffixHash: true