{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12833","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12833/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12833/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12833/events","html_url":"https://github.com/kubernetes/kubernetes/pull/12833","id":101533028,"number":12833,"title":"Launch a cluster-local registry.","user":{"login":"uluyol","id":4128872,"avatar_url":"https://avatars.githubusercontent.com/u/4128872?v=3","gravatar_id":"","url":"https://api.github.com/users/uluyol","html_url":"https://github.com/uluyol","followers_url":"https://api.github.com/users/uluyol/followers","following_url":"https://api.github.com/users/uluyol/following{/other_user}","gists_url":"https://api.github.com/users/uluyol/gists{/gist_id}","starred_url":"https://api.github.com/users/uluyol/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/uluyol/subscriptions","organizations_url":"https://api.github.com/users/uluyol/orgs","repos_url":"https://api.github.com/users/uluyol/repos","events_url":"https://api.github.com/users/uluyol/events{/privacy}","received_events_url":"https://api.github.com/users/uluyol/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/cla:%20yes","name":"cla: yes","color":"bfe5bf"}],"state":"open","locked":false,"assignee":{"login":"thockin","id":5595220,"avatar_url":"https://avatars.githubusercontent.com/u/5595220?v=3","gravatar_id":"","url":"https://api.github.com/users/thockin","html_url":"https://github.com/thockin","followers_url":"https://api.github.com/users/thockin/followers","following_url":"https://api.github.com/users/thockin/following{/other_user}","gists_url":"https://api.github.com/users/thockin/gists{/gist_id}","starred_url":"https://api.github.com/users/thockin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thockin/subscriptions","organizations_url":"https://api.github.com/users/thockin/orgs","repos_url":"https://api.github.com/users/thockin/repos","events_url":"https://api.github.com/users/thockin/events{/privacy}","received_events_url":"https://api.github.com/users/thockin/received_events","type":"User","site_admin":false},"milestone":null,"comments":14,"created_at":"2015-08-17T23:44:35Z","updated_at":"2015-08-20T16:05:44Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/12833","html_url":"https://github.com/kubernetes/kubernetes/pull/12833","diff_url":"https://github.com/kubernetes/kubernetes/pull/12833.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/12833.patch"},"body":"This registry can be accessed through proxies that run on each node listening on port 5000. We send the proxy images to the nodes directly to avoid requests that hit the network during cluster launch. For now, we continue to pull the registry itself over the network, especially given its large size (we should be able to dramatically shrink the image). On GCE we create a PD and use that for storage, otherwise we use an emptyDir. The registry is not enabled outside of GCE. All communication is currently plain HTTP. In order to use SSL, we will need to be able to request a certificate/key from the apiserver signed by the apiserver's CA cert.\r\n\r\n@thockin"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/133061735","html_url":"https://github.com/kubernetes/kubernetes/pull/12833#issuecomment-133061735","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/12833","id":133061735,"user":{"login":"justinsb","id":100893,"avatar_url":"https://avatars.githubusercontent.com/u/100893?v=3","gravatar_id":"","url":"https://api.github.com/users/justinsb","html_url":"https://github.com/justinsb","followers_url":"https://api.github.com/users/justinsb/followers","following_url":"https://api.github.com/users/justinsb/following{/other_user}","gists_url":"https://api.github.com/users/justinsb/gists{/gist_id}","starred_url":"https://api.github.com/users/justinsb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/justinsb/subscriptions","organizations_url":"https://api.github.com/users/justinsb/orgs","repos_url":"https://api.github.com/users/justinsb/repos","events_url":"https://api.github.com/users/justinsb/events{/privacy}","received_events_url":"https://api.github.com/users/justinsb/received_events","type":"User","site_admin":false},"created_at":"2015-08-20T16:05:44Z","updated_at":"2015-08-20T16:05:44Z","body":"Cool, though I don't understand the purpose of the proxy?  I've done something similar in the past, though I set it up using a service.  I set it up using a known IP, and then just used that IP to access the registry, though our DNS has improved so much since then that pure DNS might work now.\r\n\r\n(I also set it up using S3 as the backing store; not sure which is better.  My guess is that a persistent volume is more portable and doesn't require embedding credentials, so I like this approach.)\r\n\r\nFrom an AWS implementation point of view, I agree that there should be a persistent backend for it too.  I suggest that once this merges we open an issue to do the same thing for AWS & I will perform the equivalent changes for AWS."}}