From f0950a9cc14da4a448be0edc7f109f5bb80caa1b Mon Sep 17 00:00:00 2001 From: Ian Thompson Date: Mon, 15 Jun 2026 11:16:43 +0100 Subject: [PATCH 1/2] environments/base>all.yml: Add authentication for Docker proxy registry Add authentication for the Harbor hosted proxy for `docker.io`. PLAT-1106 --- environments/base/inventory/group_vars/all.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/environments/base/inventory/group_vars/all.yml b/environments/base/inventory/group_vars/all.yml index 4b7299ef..02956414 100644 --- a/environments/base/inventory/group_vars/all.yml +++ b/environments/base/inventory/group_vars/all.yml @@ -63,6 +63,12 @@ harbor_proxy_cache_extra_projects: { } harbor_proxy_cache_projects: >- {{ harbor_proxy_cache_default_projects | combine(harbor_proxy_cache_extra_projects) }} +capi_cluster_registry_auth: + - registry_url: "registry.{{ ingress_base_domain }}.dockerhub-public" + basic_auth: + username: proxy + password: "{{ harbor_proxy_password }}" + # Indicates whether to install a Grafana to show cloud metrics cloud_metrics_enabled: false From 425f7da79e2b873e70900f9f7ca9c0924d621bd8 Mon Sep 17 00:00:00 2001 From: Ian Thompson Date: Mon, 22 Jun 2026 13:11:01 +0100 Subject: [PATCH 2/2] bin/generate-secrets: Add a password for the harbor proxy user Generate a password for the Docker hub proxy user. PLAT-1106 --- bin/generate-secrets | 2 ++ 1 file changed, 2 insertions(+) diff --git a/bin/generate-secrets b/bin/generate-secrets index 719c9838..eb102aa8 100755 --- a/bin/generate-secrets +++ b/bin/generate-secrets @@ -88,6 +88,8 @@ zenith_registrar_subdomain_token_signing_key: "$(openssl rand -hex 32)" harbor_admin_password: "$(openssl rand -hex 16)" # The secret key for Harbor harbor_secret_key: "$(openssl rand -hex 8)" +# The password for harbor "dockerproxy" account +harbor_proxy_password: "$(openssl rand -hex 16)" # https://azimuth-config.readthedocs.io/en/stable/configuration/14-monitoring/#accessing-web-interfaces # The admin password for Azimuth administrative dashboards