goharbor.io/v1beta1/Registry

string

.apiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

string

.kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

object required

.metadata

object

.spec

.spec .http .debug

Use debug option to configure a debug server that can be helpful in diagnosing problems. The debug endpoint can be used for monitoring registry metrics and health, as well as profiling. Sensitive information may be available via the debug endpoint. Please be certain that access to the debug endpoint is locked down in a production environment.

integer

.spec .http .debug .port

object

.spec .http .debug .prometheus

boolean

.spec .http .debug .prometheus .enabled

string

.spec .http .debug .prometheus .path

string

.spec .http .drainTimeout

Amount of time to wait for HTTP connections to drain before shutting down after registry receives SIGTERM signal

object

.spec .http .headers

Use this option to specify headers that the HTTP server should include in responses. This can be used for security headers such as Strict-Transport-Security. The headers option should contain an option for each header to include, where the parameter name is the header’s name, and the parameter value a list of the header’s payload values. Including X-Content-Type-Options: [nosniff] is recommended, sothat browsers will not interpret content as HTML if they are directed to load a page from the registry. This header is included in the example configuration file.

string

.spec .http .host

A fully-qualified URL for an externally-reachable address for the registry. If present, it is used when creating generated URLs. Otherwise, these URLs are derived from client requests.

object

.spec .http .http2

Use the http2 structure to control http2 settings for the registry.

boolean

string

.spec .image

Image name for the component.

string

.spec .imagePullPolicy

Image pull policy. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images

array

.spec .imagePullSecrets

string

.spec .imagePullSecrets[] .name

Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?

.spec .log .hooks

array required

.spec .log .hooks[] .levels

string required

.spec .log .hooks[] .optionsRef

string required

.spec .log .hooks[] .type

string

.spec .log .level

A human-readable name for the service.

integer

.spec .notifications .endpoints[] .threshold

string

.spec .notifications .endpoints[] .timeout

A value for the HTTP timeout. A positive integer and an optional suffix indicating the unit of time, which may be ns, us, ms, s, m, or h. If you omit the unit of time, ns is used.

string required

.spec .notifications .endpoints[] .url

integer

.spec .redis .database

The database number.

string

.spec .redis .dialTimeout

string required

.spec .redis .host

Server hostname.

string

.spec .redis .passwordRef

Secret containing the password to use when connecting to the server.

.spec .redis .readTimeout

string

.spec .redis .sentinelMasterSet

for Sentinel MasterSet.

string

.spec .redis .writeTimeout

integer

.spec .replicas

Replicas is the number of desired replicas. This is a pointer to distinguish between explicit zero and unspecified. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller

object

ServiceAccountName is the name of the ServiceAccount to use to run this component. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/

object required

.spec .storage

object

.spec .storage .cache

string

.spec .storage .cache .blobdescriptor

object

.spec .storage .delete

boolean

.spec .storage .delete .enabled

object required

.spec .storage .driver

object

.spec .storage .driver .azure

An implementation of the storagedriver.StorageDriver interface which uses Microsoft Azure Blob Storage for object storage. See: https://docs.docker.com/registry/storage-drivers/azure/

string

integer

.spec .storage .driver .filesystem .maxthreads

string

An implementation of the storagedriver.StorageDriver interface which uses Alibaba Cloud for object storage. https://docs.docker.com/registry/storage-drivers/oss/

string required

.spec .storage .driver .oss .accessKeyID

string required

.spec .storage .driver .oss .accessSecretRef

string required

.spec .storage .driver .oss .bucket

integer

.spec .storage .driver .oss .chunksize

The Oss API requires multipart upload chunks to be at least 5MB.

boolean

.spec .storage .driver .oss .encrypt

Specifies whether the registry stores the image in encrypted format or not. A boolean value.

string

.spec .storage .driver .oss .endpoint

boolean

.spec .storage .driver .oss .internal

string

.spec .storage .driver .oss .pathPrefix

string required

.spec .storage .driver .oss .region

boolean

.spec .storage .driver .oss .secure

object

.spec .storage .driver .s3

An implementation of the storagedriver.StorageDriver interface which uses Amazon S3 or S3 compatible services for object storage. See: https://docs.docker.com/registry/storage-drivers/s3/

string

.spec .storage .driver .s3 .accesskey

The AWS Access Key. If you use IAM roles, omit to fetch temporary credentials from IAM.

string required

.spec .storage .driver .s3 .bucket

The bucket name in which you want to store the registry’s data.

string

.spec .storage .driver .s3 .certificateRef

integer

.spec .storage .driver .s3 .chunksize

The S3 API requires multipart upload chunks to be at least 5MB.

boolean

.spec .storage .driver .s3 .encrypt

Specifies whether the registry stores the image in encrypted format or not. A boolean value.

string

.spec .storage .driver .s3 .keyid

KMS key ID to use for encryption (encrypt must be true, or this parameter is ignored).

integer

.spec .storage .driver .s3 .multipartcopychunksize

integer

.spec .storage .driver .s3 .multipartcopymaxconcurrency

integer

.spec .storage .driver .s3 .multipartcopythresholdsize

string required

.spec .storage .driver .s3 .region

The AWS region in which your bucket exists. For the moment, the Go AWS library in use does not use the newer DNS based bucket routing. For a list of regions, see http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

string

.spec .storage .driver .s3 .regionendpoint

Endpoint for S3 compatible storage services (Minio, etc).

string

.spec .storage .driver .s3 .rootdirectory

This is a prefix that is applied to all S3 keys to allow you to segment data in your bucket if necessary.

string

.spec .storage .driver .s3 .secretkeyRef

Reference to the secret containing the AWS Secret Key. If you use IAM roles, omit to fetch temporary credentials from IAM.

boolean

goharbor.io / v1beta1 / Registry