From d5273a355519f8df104adaa2b9f20ce2bd60aac1 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 11 Dec 2025 01:50:25 -0300
Subject: [PATCH] zot: temporarily bypass sso and allow open access

---
 services/zot/configmap.yaml | 10 ++++++----
 services/zot/ingress.yaml   |  4 ++--
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/services/zot/configmap.yaml b/services/zot/configmap.yaml
index 38527cf..55fb1c7 100644
--- a/services/zot/configmap.yaml
+++ b/services/zot/configmap.yaml
@@ -35,11 +35,13 @@ data:
         "accessControl": {
           "repositories": {
             "**": {
-              "policies": [
-                { "groups": ["admin", "image-pusher"], "actions": ["read", "create", "update", "delete"] }
+              "policies": [],
+              "defaultPolicy": [
+                { "actions": ["read", "create", "update", "delete"] }
               ],
-              "defaultPolicy": [],
-              "anonymousPolicy": []
+              "anonymousPolicy": [
+                { "actions": ["read", "create", "update", "delete"] }
+              ]
             }
           },
           "adminPolicy": {
diff --git a/services/zot/ingress.yaml b/services/zot/ingress.yaml
index 9180541..3425535 100644
--- a/services/zot/ingress.yaml
+++ b/services/zot/ingress.yaml
@@ -22,6 +22,6 @@ spec:
             pathType: Prefix
             backend:
               service:
-                name: oauth2-proxy-zot
+                name: zot
                 port:
-                  number: 80
+                  number: 5000