From 6e6849b1bd6b05897a73d1f3706c503ebb80951f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Soko=C5=82owski?= Date: Tue, 3 Sep 2024 09:31:43 +0200 Subject: [PATCH] all: add Harbor Docker registry credentials MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Otherwise hosts create a lot of `/v2/` calls that fail with 401. Signed-off-by: Jakub SokoĊ‚owski --- ansible/group_vars/all.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml index 8ace365..2e31688 100644 --- a/ansible/group_vars/all.yml +++ b/ansible/group_vars/all.yml @@ -15,6 +15,12 @@ wireguard_consul_acl_token: '{{lookup("bitwarden", "consul/acl-tokens", field="w # Volume of Trace level logs is too high and fills up ES cluster. bootstrap__rsyslog_filter_rules: ['TRC'] +# Docker registry +bootstrap__docker_registries: + - url: 'https://harbor.status.im' + username: 'robot$wakuorg+infra-waku' + password: '{{ lookup("bitwarden", "harbor-robot", field="robot$wakuorg+infra-waku") }}' + # Custom SSH accounts for Nimbus fleet, should start from UID 8000. bootstrap__active_extra_users: - { name: hanno, uid: 8003, admin: true, key: 'ssh-rsa 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 hanno@status.im' }