MarioGLealPandClaude Opus 5.5
5f12aeb1d4
Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01MdS1HcMerN6toVuLY5K4MR
1.0 KiB
1.0 KiB
Meru Zot
The image registry of Meru, a small in-house container platform (CaaS) on k3s: Zot,
deployed by Argo CD from this repo into namespace zot (the Application is in
Meru/meru platform/zot.yaml).
- Our images:
meru/<app>, pushed only by that app's builds - one push login per app, allowed on its own repository only (config.jsonaccessControl); everyone may read. Signatures live next to the images. - Pull-through mirror for docker.io, ghcr.io and quay.io: copies only what the cluster pulls, so every image the cluster runs comes through here and gets scanned.
- CVE scans with Trivy (database refreshed daily).
- Retention: mirror copies are kept 90 days after their last pull (the 3 newest per repository always); our images keep the 10 newest plus anything pulled in the last 30 days.
The push logins are a hand-made Secret (zot-htpasswd), never in this repo. Data lives on the server's hdd
storage class.
License
MIT - see LICENSE.