docker.io registry introduced pretty low rate limits for unauthenticated
requests. To ensure uninterrupted workloads it’s possible to configure the
Seed in a way that docker.io registry will be used through the caching proxy.
Google has launched caching public images proxy mirror.gcr.io. Let’s configure KKP to use it.
apiVersion: kubermatic.k8c.io/v1
kind: Seed
metadata:
name: <<exampleseed>>
namespace: kubermatic
spec:
### ... content omitted for brevity
datacenters:
dc1:
### ... content omitted for brevity
node:
containerdRegistryMirrors:
# A map of registries to use to render configs and mirrors for containerd registries
registries:
docker.io:
# List of registry mirrors to use
mirrors:
- mirror.gcr.io
See more for the full example of Seed with comments and all possible options.