Merge branch 'docs/add-warning-for-registry-configuration' into 'master'

Emphasis the importance of auth registry

See merge request gitlab-org/gitlab-ce!22843
This commit is contained in:
Evan Read 2018-11-07 23:03:12 +00:00
commit daa6fe7f0a
1 changed files with 4 additions and 1 deletions

View File

@ -71,7 +71,7 @@ A Registry init file is not shipped with GitLab if you install it from source.
Hence, [restarting GitLab][restart gitlab] will not restart the Registry should Hence, [restarting GitLab][restart gitlab] will not restart the Registry should
you modify its settings. Read the upstream documentation on how to achieve that. you modify its settings. Read the upstream documentation on how to achieve that.
At the absolute minimum, make sure your [Registry configuration][registry-auth] At the **absolute** minimum, make sure your [Registry configuration][registry-auth]
has `container_registry` as the service and `https://gitlab.example.com/jwt/auth` has `container_registry` as the service and `https://gitlab.example.com/jwt/auth`
as the realm: as the realm:
@ -84,6 +84,9 @@ auth:
rootcertbundle: /root/certs/certbundle rootcertbundle: /root/certs/certbundle
``` ```
CAUTION: **Caution:**
If `auth` is not set up, users will be able to pull docker images without authentication.
## Container Registry domain configuration ## Container Registry domain configuration
There are two ways you can configure the Registry's external domain. There are two ways you can configure the Registry's external domain.