update images for registry and cicd modules and add ability to set registry mirrors for orchestrator

This commit is contained in:
2024-06-01 21:38:17 +03:00
parent 005f7bfbe9
commit cd368c7755
13 changed files with 275 additions and 37 deletions

View File

@@ -231,6 +231,72 @@ dns_domain: {{ `"{{ cluster_name }}"` }}
## Default: containerd
container_manager: {{ .Orchestrator.ContainerEngine.Type }}
{{- if .Orchestrator.RegistryMirrors }}
containerd_registries_mirrors:
- prefix: docker.io
mirrors:
{{- range $index, $registryData := .Orchestrator.RegistryMirrors }}
- host: {{ $registryData.Host }}
capabilities: ["pull", "resolve"]
skip_verify: {{ $registryData.SkipVerify }}
{{- end }}
{{- else }}
containerd_registries_mirrors:
- prefix: docker.io
mirrors:
- host: https://mirror.gcr.io
capabilities: ["pull", "resolve"]
skip_verify: false
- host: https://quay.io
capabilities: ["pull", "resolve"]
skip_verify: false
- host: https://registry.redhat.io
capabilities: ["pull", "resolve"]
skip_verify: false
{{- end }}
## CRI-O registry mirrors setup
{{- if .Orchestrator.RegistryMirrors }}
crio_registries:
- prefix: docker.io
insecure: false
blocked: false
location: registry-1.docker.io
unqualified: false
mirrors:
{{- range $index, $registryData := .Orchestrator.RegistryMirrors }}
- location: {{ $registryData.Host }}
insecure: {{ $registryData.SkipVerify }}
{{- end }}
{{- else }}
crio_registries:
- prefix: docker.io
insecure: false
blocked: false
location: registry-1.docker.io
unqualified: false
mirrors:
- location: https://mirror.gcr.io
insecure: false
- location: https://quay.io
insecure: false
- location: https://registry.redhat.io
insecure: false
{{- end }}
## Docker registry mirrors setup
{{- if .Orchestrator.RegistryMirrors }}
docker_registry_mirrors:
{{- range $index, $registryData := .Orchestrator.RegistryMirrors }}
- {{ $registryData.Host }}
{{- end }}
{{- else }}
docker_registry_mirrors:
- https://mirror.gcr.io
- https://quay.io
- https://registry.redhat.io
{{- end }}
# Additional container runtimes
kata_containers_enabled: false