7129d477d3
This registry can be accessed through proxies that run on each node listening on port 5000. We send the proxy images to the nodes directly to avoid requests that hit the network during cluster launch. For now, we continue to pull the registry itself over the network, especially given its large size (we should be able to dramatically shrink the image). On GCE we create a PD and use that for storage, otherwise we use an emptyDir. The registry is not enabled outside of GCE. All communication is currently plain HTTP. In order to use SSL, we will need to be able to request a certificate/key from the apiserver signed by the apiserver's CA cert.
9 lines
226 B
Plaintext
9 lines
226 B
Plaintext
/etc/kubernetes/manifests/kube-registry-proxy.yaml:
|
|
file.managed:
|
|
- source: salt://kube-registry-proxy/kube-registry-proxy.yaml
|
|
- user: root
|
|
- group: root
|
|
- mode: 644
|
|
- makedirs: True
|
|
- dir_mode: 755
|