zot middleware fix

services/jitsi/deployment.yaml

@@ -5,7 +5,7 @@ metadata:
   name: jitsi-prosody
   namespace: jitsi
 spec:
-  replicas: 1
+  replicas: 0
   selector:
     matchLabels: { app: jitsi-prosody }
   template:
@@ -13,7 +13,7 @@ spec:
       labels: { app: jitsi-prosody }
     spec:
       nodeSelector:
-        kubernetes.io/hostname: titan-22     # keep everything on titan-22 for simplicity
+        kubernetes.io/hostname: titan-22
         kubernetes.io/arch: amd64
       containers:
         - name: prosody
@@ -51,7 +51,7 @@ metadata:
   name: jitsi-jicofo
   namespace: jitsi
 spec:
-  replicas: 1
+  replicas: 0
   selector:
     matchLabels: { app: jitsi-jicofo }
   template:
@@ -90,7 +90,7 @@ metadata:
   name: jitsi-jvb
   namespace: jitsi
 spec:
-  replicas: 1
+  replicas: 0
   selector:
     matchLabels: { app: jitsi-jvb }
   template:
@@ -140,7 +140,7 @@ metadata:
   name: jitsi-web
   namespace: jitsi
 spec:
-  replicas: 1
+  replicas: 0
   selector:
     matchLabels: { app: jitsi-web }
   template:

services/zot/ingress.yaml

@@ -6,6 +6,9 @@ metadata:
   namespace: zot
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    traefik.ingress.kubernetes.io/router.middlewares: zot-zot-headers@kubernetescrd,zot-zot-buffering@kubernetescrd
 spec:
   ingressClassName: traefik
   tls:

services/zot/kustomization.yaml

@@ -8,4 +8,5 @@ resources:
   - configmap.yaml
   - service.yaml
   - ingress.yaml
+  - middleware.yaml
   

services/zot/middleware.yaml

@@ -0,0 +1,26 @@
+# services/zot/middlewares.yaml
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: zot-headers
+  namespace: zot
+spec:
+  headers:
+    customRequestHeaders:
+      Docker-Distribution-Api-Version: "registry/2.0"
+
+---
+
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: zot-buffering
+  namespace: zot
+spec:
+  buffering:
+    # "0" here means "no limit" for Traefik's buffering middleware
+    maxRequestBodyBytes: 0
+    memRequestBodyBytes: 0
+    maxResponseBodyBytes: 0
+    memResponseBodyBytes: 0
+    retryExpression: "IsNetworkError() && Attempts() <= 2"