roles/docker-registry.rb

   1 name 'docker-registry'
   2 description 'Docker Registry'
   3
   4 run_list(
   5   'recipe[ssl_cert::ca_certs]',
   6   'recipe[ssl_cert::server_key_pairs]',
   7   'role[docker]',
   8   'recipe[docker-grid::registry]',
   9 )
  10
  11 #env_run_lists()
  12
  13 #default_attributes()
  14
  15 registry_cn = 'registry.docker.example.com'
  16
  17 override_attributes(
  18   'docker-grid' => {
  19     'registry' => {
  20       'with_ssl_cert_cookbook' => true,
  21       'ssl_cert' => {
  22         'common_name' => registry_cn,
  23       },
  24       'docker-compose' => {
  25         'config' => {
  26           'registry' => {
  27             'restart' => 'always',
  28             'image' => 'registry:2',
  29             'ports' => [
  30               '5000:5000',
  31             ],
  32             'environment' => {
  33               # These environment variables will be set by the docker-grid::registry recipe automatically.
  34               #'REGISTRY_HTTP_TLS_CERTIFICATE' => '/certs/domain.crt',
  35               #'REGISTRY_HTTP_TLS_KEY' =>         '/certs/domain.key',
  36               'REGISTRY_AUTH' =>                'htpasswd',
  37               'REGISTRY_AUTH_HTPASSWD_PATH' =>  '/auth/.htpasswd',
  38               'REGISTRY_AUTH_HTPASSWD_REALM' => 'Registry Realm',
  39             },
  40             'volumes' => [
  41               '/var/lib/docker-registry:/var/lib/registry',
  42               # These volumes will be set by the docker-grid::registry recipe automatically.
  43               #"#{server_cert_path(node['docker-grid']['registry']['ssl_cert']['common_name'])}:/certs/domain.crt:ro",
  44               #"#{server_key_path(node['docker-grid']['registry']['ssl_cert']['common_name'])}:/certs/domain.key:ro",
  45               './auth:/auth',
  46             ],
  47           },
  48         },
  49       },
  50     },
  51   },
  52   'ssl_cert' => {
  53     'ca_names' => [
  54       'grid_ca',
  55     ],
  56     'common_names' => [
  57       registry_cn,
  58     ],
  59   }
  60 )
  61