titan-iac/services/zot/configmap.yaml

# services/zot/config.map
apiVersion: v1
kind: ConfigMap
metadata:
  name: zot-config
  namespace: zot
data:
  config.json: |
    {
      "storage": {
        "rootDirectory": "/var/lib/registry",
        "dedupe": true,
        "gc": true,
        "gcDelay": "1h",
        "gcInterval": "1h"
      },
      "http": {
        "address": "0.0.0.0",
        "port": "5000",
        "realm": "zot-registry",
        "auth": {
          "htpasswd": { "path": "/etc/zot/htpasswd" }
        },
        "accessControl": {
          "repositories": {
            "pegasus": {
              "policies": [
                { "users": ["bstein"], "actions": ["read", "create", "update", "delete"] }
              ],
              "defaultPolicy": [],
              "anonymousPolicy": []
            },
            "**": {
              "policies": [
                { "users": ["bstein"], "actions": ["read", "create", "update", "delete"] }
              ],
              "defaultPolicy": ["read"],
              "anonymousPolicy": ["read"]
            }
          },
          "adminPolicy": {
            "users": ["bstein"],
            "actions": ["read", "create", "update", "delete"]
          }
        }
      },
      "log": { "level": "debug" },
      "extensions": {
        "ui": { "enable": true },
        "search": { "enable": true },
        "metrics": { "enable": true }
      }
    }