mirror of
https://github.com/project-zot/zot.git
synced 2026-06-18 13:37:57 +08:00
copilot-swe-agent[bot]
2a064f0fe5
- Add comprehensive README explaining OIDC workload identity - Add example configuration file - Document configuration options and usage - Include examples for Kubernetes, Flux CD, and GitHub Actions - Add troubleshooting guide and security considerations Co-authored-by: rchincha <45800463+rchincha@users.noreply.github.com>
39 lines
805 B
JSON
39 lines
805 B
JSON
{
|
|
"distSpecVersion": "1.1.1",
|
|
"storage": {
|
|
"rootDirectory": "/tmp/zot"
|
|
},
|
|
"http": {
|
|
"address": "127.0.0.1",
|
|
"port": "8080",
|
|
"auth": {
|
|
"bearer": {
|
|
"realm": "zot",
|
|
"service": "zot-service",
|
|
"oidc": {
|
|
"issuer": "https://kubernetes.default.svc.cluster.local",
|
|
"audiences": ["zot", "https://zot.example.com"],
|
|
"claimMapping": {
|
|
"username": "sub"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"accessControl": {
|
|
"repositories": {
|
|
"**": {
|
|
"policies": [
|
|
{
|
|
"users": ["system:serviceaccount:default:flux-controller"],
|
|
"actions": ["read", "create", "update", "delete"]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"log": {
|
|
"level": "info"
|
|
}
|
|
}
|