When the registry module is set to the Direct mode, container registry requests are processed directly, without intermediate caching.
CRI requests to the registry are redirected based on its configuration, which is defined in the containerd configuration.
For components such as operator-trivy, image-availability-exporter, deckhouse-controller, and others that access the registry directly, requests go through the in-cluster proxy located on the master nodes.

For more information about the Direct mode, see the section about managing the internal container image registry.