Fixed dkregistry secret

ansible-5/roles/prod.k3s/files/dkregistry/values.yaml

@@ -11,15 +11,13 @@ ingress:
 #  className: traefik
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production
+##    kubernetes.io/ingress.class: traefik
+#    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+#    traefik.ingress.kubernetes.io/router.tls: 'true'
   tls:
     - secretName: xai-corp-production-tls-registry
   hosts:
     - dkregistry.xai-corp.net
-#  annotations:
-#    cert-manager.io/cluster-issuer: letsencrypt-production
-##    kubernetes.io/ingress.class: traefik
-#    traefik.ingress.kubernetes.io/router.entrypoints: websecure
-#    traefik.ingress.kubernetes.io/router.tls: 'true'
 
 persistence:
   enabled: true

ansible-5/roles/prod.k3s/tasks/deployments/dkregistry.yaml

@@ -33,10 +33,10 @@
       kind: Secret
       type: Opaque
       metadata:
-        name: auth-secret
+        name: auth-secret-2025
         namespace: "{{apps.dkregistry.namespace}}"
       stringData:
-        htpasswd: "richard:$2y$05$Zp.GEiUbsGYYVOYWE71truuERCAE.D5wwGzU3Xi3wIVAWjH60t/U."
+        htpasswd: "richard:$2y$05$E7B3.iHmoLLSyFZJJWEj3u6eMdm2gPGBu1vAn7VPo9Axk3Wbict2m"
   become: true
 
 - name: create docker-registry resources

ansible-5/roles/prod.k3s/templates/dkregistry/deployment.yaml

@@ -21,13 +21,13 @@ spec:
         - name: auth-secret
           mountPath: "/auth"
           readOnly: true
-#      env:
-#        - name: REGISTRY_AUTH
-#          value: "htpasswd"
-#        - name: REGISTRY_AUTH_HTPASSWD_REALM
-#          value: "Registry Realm"
-#        - name: REGISTRY_AUTH_HTPASSWD_PATH
-#          value: "/auth/htpasswd"
+      env:
+        - name: REGISTRY_AUTH
+          value: "htpasswd"
+        - name: REGISTRY_AUTH_HTPASSWD_REALM
+          value: "Registry Realm"
+        - name: REGISTRY_AUTH_HTPASSWD_PATH
+          value: "/auth/htpasswd"
 #        - name: REGISTRY_HTTP_SECRET
 #          value: "/auth/htpasswd"
 #        - name: REGISTRY_HTTP_TLS_CERTIFICATE
@@ -44,4 +44,4 @@ spec:
 
     - name: auth-secret
       secret:
-        secretName: auth-secret
+        secretName: auth-secret-2025

ansible-5/roles/prod.k3s/templates/dkregistry/ingress.yaml

@@ -23,3 +23,5 @@ spec:
 
   tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames
     - secretName: xai-corp-production-tls
+      hosts:
+        - dkregistry.xai-corp.net