registry-manifest-with-elb-2.yml

---
apiVersion: v1
kind: Namespace
metadata:
  name: registry
---
apiVersion: v1
kind: Secret
type: Opaque
metadata:
  namespace: registry
  name: docker-registry-auth-secret
data:
  htpasswd: YmJveWtvdjokMnkkMDUkOFpsZkxTZWFZQ0h2WjYvT1N4ajEvLkNFamIzbVV0Ty5TQXZkbmFPZUV4TFM0Z2hoTXVVZ2E=
---
apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: registry
  name: registry
  labels:
    app: registry
spec:
  replicas: 3
  strategy:
    type: RollingUpdate
  selector:
    matchLabels:
      app: registry
  template:
    metadata:
      labels:
        app: registry
    spec:
      containers:
      - name: registry
        image: registry:2.6.2
        resources:
          limits:
            memory: 512Mi
          requests:
            memory: 512Mi
        env:
        - name: REGISTRY_AUTH_HTPASSWD_REALM
          value: basic_realm
        - name: REGISTRY_AUTH_HTPASSWD_PATH
          value: /auth/htpasswd
        - name: REGISTRY_HTTP_ADDR
          value: ":5000"
        - name: REGISTRY_HTTP_DEBUG_ADDR
          value: ":5001"
        - name: REGISTRY_HTTP_HOST
          value: https://registry.bboykov.receipt-labs.com
        - name: REGISTRY_HTTP_SECRET
          value: asecretforlocaldevelopment
        - name: REGISTRY_STORAGE
          value: s3
        - name: REGISTRY_STORAGE_S3_ACCESSKEY
          value: xxxx
        - name: REGISTRY_STORAGE_S3_SECRETKEY
          value: xxxx
        - name: REGISTRY_STORAGE_S3_BUCKET
          value: registry-bboykov-receipt-labs-com
        - name: REGISTRY_STORAGE_S3_REGION
          value: eu-west-1
        - name: REGISTRY_STORAGE_S3_SECURE
          value: "true"
        - name: REGISTRY_STORAGE_S3_V4AUTH
          value: "true"
        - name: REGISTRY_STORAGE_S3_CHUNKSIZE
          value: "5242880"
        - name: REGISTRY_STORAGE_S3_ENCRYPT
          value: "false"
        - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
          value: inmemory
        - name: REGISTRY_LOG_LEVEL
          value: debug
        ports:
        - containerPort: 5000
          name: registry-port
          protocol: TCP
        volumeMounts:
          - name: docker-registry-auth-secret
            mountPath: /auth
      volumes:
      - name: docker-registry-auth-secret
        secret:
          secretName: docker-registry-auth-secret

---
apiVersion: v1
kind: Service
metadata:
  annotations:
    service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:eu-west-1:525658692556:certificate/1b3077fe-8d6d-408c-858f-90f06fd6dd27
    service.beta.kubernetes.io/aws-load-balancer-internal: 0.0.0.0/0
    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
    service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
    service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: "true"
    external-dns.alpha.kubernetes.io/hostname: https://registry.bboykov.receipt-labs.com
    service.beta.kubernetes.io/aws-load-balancer-access-log-enabled: "true"
    service.beta.kubernetes.io/aws-load-balancer-access-log-emit-interval: "5"
    service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name: "lb-logs-registry-bboykov-receipt-labs-com"
  labels:
    app: registry
  name: registry
  namespace: registry
spec:
  type: LoadBalancer
  selector:
    app: registry
  ports:
  - name: service-port-https
    port: 443
    targetPort: 5000
    protocol: TCP