Docker Registry Deployment

Private Docker Registry deployed using Kustomize.

Structure

docker-registry/
├── base/                    # Base Registry configuration
│   ├── namespace.yaml       # registry namespace
│   ├── configmap.yaml      # Registry configuration
│   ├── pvc.yaml            # Persistent storage (50Gi)
│   ├── deployment.yaml     # Registry deployment
│   ├── service.yaml        # ClusterIP service
│   ├── ingress.yaml        # Ingress configuration
│   └── kustomization.yaml  # Base kustomization
├── overlays/
│   ├── stage/              # Stage environment
│   │   └── kustomization.yaml
│   └── prod/               # Production environment
│       └── kustomization.yaml
└── README.md

Environments

Stage

• URL: https://registry.apps-stage.in.hinisoft.com
• Ingress: nginx-private (internal only, via VPN)
• Replicas: 1
• Resources: 100m CPU / 128Mi Memory
• Storage: 50Gi

Production

• URL: https://registry.apps-prod.in.hinisoft.com
• Ingress: nginx-public (external access)
• Replicas: 2
• Resources: 250m CPU / 256Mi Memory
• Storage: 200Gi

Deployment

Stage Environment

kubectl apply -k overlays/stage

Production Environment

kubectl apply -k overlays/prod

Features

• Docker Registry v3.0.0
• Persistent storage with Longhorn
• Automatic SSL certificates via cert-manager + Let's Encrypt
• Health checks (liveness and readiness probes)
• Resource limits and requests
• Image deletion enabled
• No body size limit for large image uploads

Credentials

• Username: admin
• Password: yBDotwdDtQFE6VU9tSDskoDE+gZXUkei

Usage

Login to Registry

docker login registry.apps-stage.in.hinisoft.com
# Username: admin
# Password: yBDotwdDtQFE6VU9tSDskoDE+gZXUkei

Push an Image

docker tag myimage:latest registry.apps-stage.in.hinisoft.com/myimage:latest
docker push registry.apps-stage.in.hinisoft.com/myimage:latest

Pull an Image

docker pull registry.apps-stage.in.hinisoft.com/myimage:latest

List Repositories

curl -X GET https://registry.apps-stage.in.hinisoft.com/v2/_catalog

List Tags for a Repository

curl -X GET https://registry.apps-stage.in.hinisoft.com/v2/myimage/tags/list

Kubernetes Image Pull

To use images from this registry in Kubernetes:

spec:
  containers:
  - name: myapp
    image: registry.apps-stage.in.hinisoft.com/myimage:latest

SSL Certificates

Certificates are automatically issued by cert-manager using Let's Encrypt with GoDaddy DNS-01 challenge.

Accessing Registry

Stage (Internal)

1. Connect to VPN
2. Access: https://registry.apps-stage.in.hinisoft.com

Production (External)

Access directly: https://registry.apps-prod.in.hinisoft.com