Kubernetes Cookbook - Second Edition

Configuring a private registry to load a Kubernetes secret

On the other hand, the private registry itself supports reading the HTTP secret as an environment variable in string format. It also can support specifying the file path for the SSL certificate and HTTP basic authentication file as environment variables:

Environment variable name	Description	Sample value
REGISTRY_HTTP_SECRET	HTTP secret string	valueFrom:     secretKeyRef:         name: registry-secrets         key: http.secret
REGISTRY_HTTP_TLS_CERTIFICATE	File path for certificate  (domain.crt)	/mnt/domain.crt
REGISTRY_HTTP_TLS_KEY	File path for private key (domain.key)	/mnt/domain.key
REGISTRY_AUTH_HTPASSWD_REALM	The realm in which the registry server authenticates ...