apiVersion: v1
kind: Pod
metadata:
  name: registry
  labels:
    app: registry
spec:
  containers:
  - name: registry
    image: registry:2.8.2
    volumeMounts:
    - name: registry-repo
      mountPath: "/var/lib/registry"
    resources:
      limits:
        memory: "256Mi"
        cpu: "1"
      requests:
        memory: "64Mi"
        cpu: "100m"
  volumes:
  - name: registry-repo
    persistentVolumeClaim:
      claimName: registry-repo
---
apiVersion: v1
kind: Service
metadata:
  name: registry
spec:
  selector:
    app: registry
  ports:
  - port: 5000
    targetPort: 5000
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: registry-repo
  namespace: default
spec:
  resources:
    requests:
      storage: 2Gi
  accessModes:
    - ReadWriteOnce
  storageClassName: nfs-client
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: container-registry
  annotations:
    cert-manager.io/issuer: "le-issuer"
    nginx.ingress.kubernetes.io/proxy-body-size: 100m
  namespace: default
spec:
  tls:
  - hosts:
    - icr.gmem.ca
    secretName: gmem-ca-wildcard
  rules:
    - host: icr.gmem.ca
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name:  registry
                port:
                  number: 5000