HarborRegistry Settings¶
HarborRegistry requires a configuration file to start, which is located at /etc/registry/config.yml
within the container. Any changes made to this config file are temporary and will not persist once the pod is restarted.
This config file is stored within the services/harborregistry/harborregistry.yml
file and loaded into the container as /etc/registry/pre-config.yml
. A custom container entrypoint, services/harborregistry/entrypoint.sh
, then transposes provided environment variables into this config file and saves the results as /etc/registry/config.yml
.
Config File Contents¶
CORE_SECRET
- This value is a pre-shared key that must match between the various services connecting to harbor-core.
- The default value is set to
secret123
when Harbor is run locally or during CI testing. - This value is retrieved from a secret created when Harbor is first set up on a running Lagoon.
HARBOR_NGINX_ENDPOINT
- This environment variable tells harborregistry where its Nginx ingress controller, harbor-nginx, is running in order to construct proper push and pull instructions in the UI, among other things.
- The default value is set to
http://harbor-nginx:8080
when run locally or during CI testing. - Lagoon attempts to obtain and set this variable automagically when run in production. If that process fails, this service will fail to run.
JOBSERVICE_SECRET
- This value is a pre-shared key that must match between the various services connecting to harbor-jobservice.
- The default value is set to
secret123
when Harbor is run locally or during CI testing. - This value is retrieved from a secret created when Harbor is first set up on a running Lagoon.
REGISTRY_HTTP_SECRET
- This value is a pre-shared key that must match between the various services connecting to harborregistry.
- The default value is set to
secret123
when Harbor is run locally or during CI testing. - This value is retrieved from a secret created when Harbor is first set up on a running Lagoon.
REGISTRY_REDIS_PASSWORD
- This environment variable tells harborregistryctl the password that should be used to connect to Redis.
- The default value is an empty string.