Anyone know how to set up private registries for C...
# rke2f
flat-spring-34799
04/22/2025, 3:55 PMAnyone know how to set up private registries for CAPI provisioned clusters? I see that it is in the spec for the RKE2ConfigTemplate (in
.spec.template.spec.privateRegistriesConfig.configsc
creamy-pencil-82913
04/22/2025, 5:09 PMare you looking for the docs on the structure of that specific field? or are you just asking how it works for rke2 in general?
creamy-pencil-82913
04/22/2025, 5:10 PMthere are two sections under privateregistriesconfig, same as in RKE2 registries.yaml -
configsmirrorsf
flat-spring-34799
04/22/2025, 5:11 PMRight, so I see that, but I don't think that is what the RKE2ConfigTemplate takes (or is it)?
flat-spring-34799
04/22/2025, 5:11 PMideally, I want to pass in a secret reference, and then CAPI for RKE2 puts everything in the right place
c
creamy-pencil-82913
04/22/2025, 5:12 PMCan you link to which specific capi provider you’re using?
f
flat-spring-34799
04/22/2025, 5:12 PMflat-spring-34799
04/22/2025, 5:12 PMinfra side is VMWare, but I don't think that matters
c
creamy-pencil-82913
04/22/2025, 5:13 PMit would appear to take the same structure as rke2 itself. I don’t see anything about secret references.
f
flat-spring-34799
04/22/2025, 5:21 PMflat-spring-34799
04/22/2025, 5:22 PMBut it doesn't seem to work
c
creamy-pencil-82913
04/22/2025, 5:39 PMit appears to be nested under configs.additionalProperties.authSecret, at least if this CRD is to be believed.
f
flat-spring-34799
04/22/2025, 5:39 PMso I can get it to be accepted, but it doesn't actually work
c
creamy-pencil-82913
04/22/2025, 5:40 PMI would look here, instead of at the CRD yaml: https://github.com/rancher/cluster-api-provider-rke2/blob/v0.13.0/bootstrap/api/v1beta1/rke2config_types.go#L365
creamy-pencil-82913
04/22/2025, 5:42 PMcreamy-pencil-82913
04/22/2025, 5:43 PMthe auth secret namespace and name are set in the spec, and the secret contains
usernamepasswordf
flat-spring-34799
04/22/2025, 6:26 PMyes
flat-spring-34799
04/22/2025, 6:27 PMand like it said, its accepted, but the new cluster can't pull images from that registry, and I don't see it anywhere in the containerd files
c
creamy-pencil-82913
04/22/2025, 6:27 PMis registries.yaml getting created on the nodes? that’s the first place I’d look.
f
flat-spring-34799
04/22/2025, 6:28 PMi'll take a look tommorow have to head out, but where would that be?
c
creamy-pencil-82913
04/22/2025, 6:28 PMexactly where the rke2 docs say it is
creamy-pencil-82913
04/22/2025, 6:29 PMall this stuff just ends up going into registries.yaml on each node
f
flat-spring-34799
04/22/2025, 6:29 PMgot it