zhong (钟鹏群) hace 1 mes
padre
commit
e78250b9ca

+ 71 - 0
k3s-yamls/deprecated/registry-ui.yaml

@@ -0,0 +1,71 @@
+# Docker Registry UI - K3s 部署清单
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: docker-registry-ui
+  namespace: default
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: docker-registry-ui
+  template:
+    metadata:
+      labels:
+        app: docker-registry-ui
+    spec:
+      containers:
+      - name: registry-ui
+        image: registry.cn-hangzhou.aliyuncs.com/zhongpengqun/wanderer:linux-amd64-docker-registry-frontend-v2
+        ports:
+        - containerPort: 80
+        env:
+        - name: REGISTRY_HOST
+          value: "docker-registry"
+        - name: REGISTRY_PORT
+          value: "5000"
+        - name: REGISTRY_PROTOCOL
+          value: "http"
+        - name: DELETE_IMAGES
+          value: "true"
+        resources:
+          limits:
+            cpu: "0.5"
+            memory: "256Mi"
+          requests:
+            cpu: "0.2"
+            memory: "128Mi"
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: docker-registry-ui
+  namespace: default
+spec:
+  type: NodePort
+  ports:
+  - port: 80
+    targetPort: 80
+    nodePort: 30010
+  selector:
+    app: docker-registry-ui
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: docker-registry-ui-ingress
+  namespace: default
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+spec:
+  rules:
+  - host: registry-ui.local
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: docker-registry-ui
+            port:
+              number: 80

+ 85 - 0
k3s-yamls/deprecated/registry.yaml

@@ -0,0 +1,85 @@
+# 私有Docker Registry - K3s 部署清单
+# 等价转换原 docker-compose.yml 所有配置
+apiVersion: v1
+kind: Secret
+metadata:
+  name: registry-auth
+  namespace: default
+type: Opaque
+# 注意:这里仅为占位,实际需要用 htpasswd 生成账号密码后替换
+data:
+  htpasswd: ""
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: registry-data
+  namespace: default
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: docker-registry
+  namespace: default
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: docker-registry
+  template:
+    metadata:
+      labels:
+        app: docker-registry
+    spec:
+      containers:
+      - name: registry
+        image: registry.cn-hangzhou.aliyuncs.com/zhongpengqun/wanderer:amd64-linux-docker-registry-v2
+        ports:
+        - containerPort: 5000
+        resources:
+          limits:
+            cpu: "0.5"
+            memory: "256Mi"
+          requests:
+            cpu: "0.2"
+            memory: "128Mi"
+        env:
+        - name: REGISTRY_AUTH
+          value: "htpasswd"
+        - name: REGISTRY_AUTH_HTPASSWD_REALM
+          value: "Docker Registry"
+        - name: REGISTRY_AUTH_HTPASSWD_PATH
+          value: "/auth/htpasswd"
+        volumeMounts:
+        - name: registry-data
+          mountPath: /var/lib/registry
+        - name: registry-auth
+          mountPath: /auth
+          readOnly: true
+      volumes:
+      - name: registry-data
+        persistentVolumeClaim:
+          claimName: registry-data
+      - name: registry-auth
+        secret:
+          secretName: registry-auth
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: docker-registry
+  namespace: default
+spec:
+  type: NodePort
+  ports:
+  - port: 5000
+    nodePort: 30009
+    targetPort: 5000
+  selector:
+    app: docker-registry

+ 4 - 0
k3s-yamls/namespace-registry.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: registry