[kots]: enable use of a local registry

This will enable use of Replicated's airgapped functionality

Author: Simon Emms

install/kots/manifests/gitpod-installer-job.yaml

@@ -24,7 +24,7 @@ spec:
       containers:
         - name: installer
           # This will normally be the release tag - using this tag as need the license evaluator
-          image: 'eu.gcr.io/gitpod-core-dev/build/installer:sje-installer-mini-config.0'
+          image: 'eu.gcr.io/gitpod-core-dev/build/installer:sje-airgapped.0'
           volumeMounts:
             - mountPath: /config-patch
               name: config-patch
@@ -90,7 +90,18 @@ spec:
                 yq e -i ".database.external.certificate.name = \"database\"" "${CONFIG_FILE}"
               fi
 
-              if [ '{{repl ConfigOptionEquals "reg_incluster" "0" }}' = "true" ];
+              if [ '{{repl HasLocalRegistry }}' = "true" ];
+              then
+                echo "Gitpod: configuring mirrored container registry"
+
+                yq e -i ".containerRegistry.inCluster = false" "${CONFIG_FILE}"
+                yq e -i ".containerRegistry.external.url = \"{{repl LocalRegistryAddress }}\"" "${CONFIG_FILE}"
+                yq e -i ".containerRegistry.external.certificate.kind = \"secret\"" "${CONFIG_FILE}"
+                yq e -i ".containerRegistry.external.certificate.name = \"{{repl ImagePullSecretName }}\"" "${CONFIG_FILE}"
+                yq e -i ".repository = \"{{repl LocalRegistryAddress }}\"" "${CONFIG_FILE}"
+                yq e -i ".imagePullSecrets[0].kind = \"secret\"" "${CONFIG_FILE}"
+                yq e -i ".imagePullSecrets[0].name = \"{{repl ImagePullSecretName }}\"" "${CONFIG_FILE}"
+              elif [ '{{repl ConfigOptionEquals "reg_incluster" "0" }}' = "true" ];
               then
                 echo "Gitpod: configuring external container registry"
 
@@ -99,7 +110,7 @@ spec:
                 yq e -i ".containerRegistry.external.certificate.kind = \"secret\"" "${CONFIG_FILE}"
                 yq e -i ".containerRegistry.external.certificate.name = \"container-registry\"" "${CONFIG_FILE}"
 
-              if [ '{{repl ConfigOptionEquals "reg_s3storage" "1" }}' = "true" ];
+                if [ '{{repl ConfigOptionEquals "reg_s3storage" "1" }}' = "true" ];
                 then
                   echo "Gitpod: configuring container registry S3 backend"
 

install/kots/manifests/gitpod-registry-secret.yaml

@@ -6,7 +6,7 @@ kind: Secret
 metadata:
   name: container-registry
   annotations:
-    kots.io/when: '{{repl ConfigOptionEquals "reg_incluster" "0" }}'
+    kots.io/when: '{{repl and (eq HasLocalRegistry false) (ConfigOptionEquals "reg_incluster" "0") }}'
 type: kubernetes.io/dockerconfigjson
 data:
   .dockerconfigjson: '{{repl printf "{\"auths\": {\"%s\": {\"username\": \"%s\", \"password\": %s, \"auth\": \"%s\"}}}" (ConfigOption "reg_server" | default (ConfigOption "reg_url")) (ConfigOption "reg_username") (ConfigOption "reg_password" | toJson) (printf "%s:%s" (ConfigOption "reg_username") (ConfigOption "reg_password") | Base64Encode) | Base64Encode }}'