---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: registry
  annotations:
    reloader.stakater.com/auto: "true"
spec:
  revisionHistoryLimit: 0
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: registry
  template:
    metadata:
      labels:
        app: registry
    spec:
      containers:
        - name: registry
          image: ghcr.io/project-zot/zot-linux-arm64
          env:
            - name: TZ
              value: 'Europe/Paris'
            - name: REGISTRY_HTTP_ADDR
              value: 0.0.0.0:5000
          ports:
            - containerPort: 5000
              name: http-registry
          volumeMounts:
            - mountPath: /var/lib/registry
              name: registry
            - name: config
              mountPath: /etc/zot/config.json
              subPath: config.json
            - name: credentials
              mountPath: /etc/zot/credentials.json
              subPath: credentials.json
      securityContext:
        runAsUser: 1000
        runAsGroup: 1000
        fsGroup: 1000
        fsGroupChangePolicy: OnRootMismatch
      volumes:
        - name: registry
          hostPath:
            path: /home/pi/registry
        - name: config
          configMap:
            name: zot-config
            items:
              - key: config.json
                path: config.json
        - name: credentials
          secret:
            secretName: registries-credentials
            items:
              - key: credentials.json
                path: credentials.json