bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

zot middleware add

Browse Source
This commit is contained in:
Brad Stein 2025-09-09 01:43:13 -05:00
parent 33d07dcf5c
commit 6efe79819f
4 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
services/zot/configmap.yaml
View File

@ -23,7 +23,7 @@ data:
}, },
"accessControl": { "accessControl": {
"repositories": { "repositories": {
"pegasus": { "pegasus/**": {
"policies": [ "policies": [
{ "users": ["bstein"], "actions": ["read", "create", "update", "delete"] } { "users": ["bstein"], "actions": ["read", "create", "update", "delete"] }
], ],

1
services/zot/ingress.yaml
View File

@ -10,6 +10,7 @@ metadata:
traefik.ingress.kubernetes.io/router.tls: "true" traefik.ingress.kubernetes.io/router.tls: "true"
# traefik.ingress.kubernetes.io/router.tls.options: zot-h1only@kubernetescrd # traefik.ingress.kubernetes.io/router.tls.options: zot-h1only@kubernetescrd
# traefik.ingress.kubernetes.io/router.middlewares: zot-zot-headers@kubernetescrd,zot-zot-buffering@kubernetescrd # traefik.ingress.kubernetes.io/router.middlewares: zot-zot-headers@kubernetescrd,zot-zot-buffering@kubernetescrd
traefik.ingress.kubernetes.io/router.middlewares: zot-add-www-auth@kubernetescrd
spec: spec:
ingressClassName: traefik ingressClassName: traefik
tls: tls:

2
services/zot/kustomization.yaml
View File

@ -8,5 +8,5 @@ resources:
- configmap.yaml - configmap.yaml
- service.yaml - service.yaml
- ingress.yaml - ingress.yaml
# - middleware.yaml - middleware.yaml
# - tlsoptions.yaml # - tlsoptions.yaml

10
services/zot/middleware.yaml
View File

@ -24,3 +24,13 @@
# maxResponseBodyBytes: 0 # maxResponseBodyBytes: 0
# memResponseBodyBytes: 0 # memResponseBodyBytes: 0
# retryExpression: "IsNetworkError() && Attempts() <= 2" # retryExpression: "IsNetworkError() && Attempts() <= 2"
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: add-www-auth
namespace: zot
spec:
headers:
customResponseHeaders:
WWW-Authenticate: Basic realm="zot-registry"