Available in: EE
parameters
Schema version: 1
-
-
objectsettings.gcGarbage collection settings.
-
booleansettings.gc.enabledEnable periodic garbage collection.
Default:
false -
stringsettings.gc.scheduleСron schedule for the garbage collector. Link for check: https://crontab.guru
Examples:
schedule: 0 20 * * 1schedule: 5 3 * * *schedule: 0 2 * * * -
stringsettings.gc.skipThresholdThe time interval within which the garbage collector task must start. If the task does not start within this interval, its execution is skipped until the next scheduled time. The feature is disabled by default. The minimum allowable value is 10 minutes. The following units of measurement are supported:
h(hours),m(minutes),s(seconds).Pattern:
^(?:(\d+)h)?(?:(\d+)m)?(?:(\d+)s)?$Examples:
skipThreshold: 20mskipThreshold: 1hskipThreshold: 1h20m30s
-
-
objectsettings.https
What certificate type to use with the payload registry.
This parameter completely overrides the
global.modules.httpssettings.Examples:
customCertificate: secretName: foobar mode: CustomCertificatecertManager: clusterIssuerName: letsencrypt mode: CertManager-
objectsettings.https.certManager
Default:
{}-
stringsettings.https.certManager.clusterIssuerName
What ClusterIssuer to use for the payload registry.
Currently,
letsencrypt,letsencrypt-staging,selfsignedare available. Also, you can define your own.Default:
letsencrypt
-
-
objectsettings.https.customCertificate
Default:
{}-
stringsettings.https.customCertificate.secretName
The name of the secret in the
d8-systemnamespace to use with the payload registry.This secret must have the kubernetes.io/tls format.
Default:
false
-
-
stringsettings.https.mode
The HTTPS usage mode:
Disabled— in this mode, the payload registry can only be accessed over HTTP. Caution! This mode is not supported. HTTPS is required for the module to function properly. If HTTPS is disabled, the payload registry will be unavailable.CertManager— the payload registry is accessed over HTTPS using a certificate obtained from a clusterIssuer specified in thecertManager.clusterIssuerNameparameter.CustomCertificate— the payload registry is accessed over HTTPS using the certificate from thed8-systemnamespace.OnlyInURI— the payload registry serves HTTP inside the cluster while an external HTTPS load balancer terminates TLS. All links will use the HTTPS scheme. The external load balancer must redirect HTTP to HTTPS.
Allowed values:
Disabled,CertManager,CustomCertificate,OnlyInURI
-
-
objectsettings.persistenceConfiguration parameters for
PersistentVolumeClaimDefault:
{}-
array of stringssettings.persistence.accessModes
Access modes for the
PersistentVolumeClaim. This field is immutable, and to change it, a newPersistentVolumeClaimmust be created.To change the parameter, go to the section “How to create a new PVC?”.
Default:
[ "ReadWriteOnce" ]Examples:
accessModes: - ReadWriteOnceaccessModes: - ReadWriteMany-
stringsettings.persistence.accessModes.Element of the array
Allowed values:
ReadWriteOnce,ReadWriteMany
-
-
stringsettings.persistence.nameThe name of the
PersistentVolumeClaim. Be careful: changing this field will result in the creation of a newPersistentVolumeClaim. The oldPersistentVolumeClaimwill remain in the namespace and must be manually deleted if it is no longer needed.Default:
registryLength:
1..63Pattern:
^[a-z0-9]([-a-z0-9]*[a-z0-9])?$Examples:
name: registryname: registry-hddname: registry-network-ssd-2 -
stringsettings.persistence.sizeDisk size of the
PersistentVolumeClaim. The minimum allowable value is 1Gi. Specify the desired disk size. You can increase the size later if necessary.Default:
10GiPattern:
^([+-]?[0-9.]+)([eEinumkKMGTP]*[-+]?[0-9]*)$Examples:
size: 10Gisize: 1500Mi -
stringsettings.persistence.storageClass
The name of the
StorageClassto be set when initializing thePersistentVolumeClaim. If this field is omitted, theStorageClassof the existingPersistentVolumeClaimwill be used. If there is noPersistentVolumeClaimyet, either the globalStorageClassorglobal.discovery.defaultStorageClasswill be used. This field is immutable, and to change it, a newPersistentVolumeClaimmust be created.To change the parameter, go to the section “How to create a new PVC?”.
Examples:
storageClass: ceph-ssdstorageClass: network-hddstorageClass: network-ssd
-
-
objectsettings.usersConfiguration settings for user authorization within the payload registry.
Default:
{}Examples:
username-1: passwordHash: $2y$05$WuwBasGDAgr.QCbGIjKJaep4dhxeai9gNZdmBnQXqpKly57oNutya projects: - access: FULL name: project-1 subPath: path-* - access: READ name: project-1 subPath: '*' - access: FULL name: project-2 subPath: test/*username-2: passwordHash: $2y$05$WuwBasGDAgr.QCbGIjKJaep4dhxeai9gNZdmBnQXqpKly57oNutya
-