Files
homelab-infra/apps/zot/reader-values.yaml
T
panxiao81 31d89817b2
yaml / yaml (pull_request) Successful in 22s
ansible / collection-test (pull_request) Successful in 1m10s
ansible / lint (pull_request) Successful in 17m42s
fix(zot): 分离匿名拉取与 SPIRE 鉴权推送入口
2026-09-16 13:06:35 +00:00

65 lines
1.5 KiB
YAML

# 叠加于共用 values.yaml;同一镜像、S3、Secret、安全设置,无制品副本。
# 无 Bearer middleware,仅 anonymousPolicy=read;关闭 GC 避免多个实例清理共享存储。
configFiles:
config.json: |
{
"distSpecVersion": "1.1.1",
"storage": {
"rootDirectory": "/var/lib/registry",
"dedupe": false,
"gc": false,
"storageDriver": {
"name": "s3",
"region": "us-east-1",
"regionendpoint": "https://s3.ad.ddupan.top",
"bucket": "zot",
"rootdirectory": "/registry",
"secure": true,
"skipverify": false,
"forcepathstyle": true
}
},
"http": {
"address": "0.0.0.0",
"port": "5000",
"externalUrl": "https://zot.ad.ddupan.top",
"compat": [
"docker2s2"
],
"accessControl": {
"repositories": {
"**": {
"anonymousPolicy": [
"read"
]
}
}
}
},
"log": {
"level": "info"
}
}
httproute:
hostnames:
- zot.ad.ddupan.top
rules:
- matches:
- path:
type: PathPrefix
value: /v2/
method: GET
- path:
type: PathPrefix
value: /v2/
method: HEAD
filters:
- type: RequestHeaderModifier
requestHeaderModifier:
remove:
- Cookie
- Authorization
timeouts:
request: 900s
backendRequest: 900s