eso.yaml: the eso ServiceAccount, the openbao SecretStore (role meru-zot-eso, wave -2) and the zot-htpasswd ExternalSecret (Owner - D68, wave -1); the Namespace moves to wave -3. ESO takes the hand-made Secret over with the same values (probed live: identical). Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01MdS1HcMerN6toVuLY5K4MR
15 lines
325 B
YAML
15 lines
325 B
YAML
# Zot: our image registry + pull-through mirror for docker.io, ghcr.io, quay.io.
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: zot
|
|
resources:
|
|
- namespace.yaml
|
|
- eso.yaml
|
|
- pvc.yaml
|
|
- deployment.yaml
|
|
- service.yaml
|
|
configMapGenerator:
|
|
- name: zot-config
|
|
files:
|
|
- config.json
|