mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-03-09 03:37:36 +03:00
Update configuration of registries in cri-o (#7852)
* Update configuration of registries in cri-o * Update docs to match new registry configuration
This commit is contained in:
@@ -7,32 +7,25 @@ crio_log_level: "info"
|
||||
crio_metrics_port: "9090"
|
||||
crio_pause_image: "{{ pod_infra_image_repo }}:{{ pod_infra_version }}"
|
||||
|
||||
# Trusted registries to pull unqualified images (e.g. alpine:latest) from
|
||||
# Registries defined within cri-o.
|
||||
# By default unqualified images are not allowed for security reasons
|
||||
crio_registries: []
|
||||
|
||||
# Configure insecure registries.
|
||||
crio_insecure_registries: []
|
||||
|
||||
# Configure registry auth (if applicable to secure/insecure registries)
|
||||
crio_registry_auth: []
|
||||
# - registry: 10.0.0.2:5000
|
||||
# username: user
|
||||
# password: pass
|
||||
|
||||
# Define registiries mirror
|
||||
|
||||
crio_registries_mirrors: []
|
||||
# - prefix: docker.io
|
||||
# insecure: false
|
||||
# blocked: false
|
||||
# location: registry-1.docker.io
|
||||
# location: registry-1.docker.io ## REQUIRED
|
||||
# unqualified: false
|
||||
# mirrors:
|
||||
# - location: 172.20.100.52:5000
|
||||
# insecure: true
|
||||
# - location: mirror.gcr.io
|
||||
# insecure: false
|
||||
|
||||
crio_registry_auth: []
|
||||
# - registry: 10.0.0.2:5000
|
||||
# username: user
|
||||
# password: pass
|
||||
|
||||
crio_seccomp_profile: ""
|
||||
crio_selinux: "{{ (preinstall_selinux_state == 'enforcing')|lower }}"
|
||||
crio_signature_policy: "{% if ansible_os_family == 'ClearLinux' %}/usr/share/defaults/crio/policy.json{% endif %}"
|
||||
|
||||
Reference in New Issue
Block a user