cluster

commit 0de1890589c23b6a560eaead68459edad2ff1bf5
parent 5fa645d6879dffeca5e9ce8035188681bd6b83ff
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Wed, 25 Mar 2026 20:20:21 +0100

fix zot

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
infrastructure_talos/controllers/zot/release.yaml
 | 
34
+++++++++++++++++-----------------

1 file changed, 17 insertions(+), 17 deletions(-)
diff --git a/infrastructure_talos/controllers/zot/release.yaml b/infrastructure_talos/controllers/zot/release.yaml
@@ -24,8 +24,6 @@ spec:
     replicaCount: 1
 
     image:
-      # Multi-arch image supports arm64 natively
-      repository: ghcr.io/project-zot/zot-linux-arm64
       pullPolicy: IfNotPresent
 
     service:
@@ -42,6 +40,9 @@ spec:
         cpu: "1"
         memory: 512Mi
 
+    # Required: mount the configFiles ConfigMap into /etc/zot
+    mountConfig: true
+
     # Zot config — S3_ACCESS_KEY and S3_SECRET_KEY are substituted from env vars at startup
     configFiles:
       config.json: |
@@ -100,20 +101,19 @@ spec:
         }
 
     # Inject S3 credentials as env vars for config substitution
-    extraEnvFrom:
-      - secretRef:
-          name: zot-secret
-
-    # Mount htpasswd from Secret
-    extraVolumes:
-      - name: htpasswd
-        secret:
-          secretName: zot-secret
-          items:
-            - key: htpasswd
-              path: htpasswd
+    env:
+      - name: S3_ACCESS_KEY
+        valueFrom:
+          secretKeyRef:
+            name: zot-secret
+            key: S3_ACCESS_KEY
+      - name: S3_SECRET_KEY
+        valueFrom:
+          secretKeyRef:
+            name: zot-secret
+            key: S3_SECRET_KEY
 
-    extraVolumeMounts:
-      - name: htpasswd
+    # Mount zot-secret (contains htpasswd) at /htpasswd
+    externalSecrets:
+      - secretName: zot-secret
         mountPath: /htpasswd
-        readOnly: true