Authentication / Authorization (standalone registry)

ENVTypeDescriptionDefault Value
ANKA_API_KEYS_CLEANING_INTERVAL(duration)The interval for cleaning of expired api keys.4h0m0s
ANKA_API_KEYS_SESSION_TTL(duration)The API Keys session TTL (used for automatic expiration).5m0s
ANKA_BACKEND_PLUGIN_PATH(string)The path to a backend plugin (instead of using disk)
ANKA_CA_CERT(string)(Certificate Authentication) The CA/root cert used to authenticate incoming requests/certs.
ANKA_CRL(string)(Certificate Authentication) File containing certificate revocation list (CRL) used to authenticate incoming requests/certs.
ANKA_ENABLE_API_KEYS(boolean)Enable API Key Authentication.false
ANKA_ENABLE_AUTH(boolean)Enable Authentication (Root Token, Certificate, SSO/OpenID Connect or API Keys) (Not to be confused with Authorization).false
ANKA_ENABLE_AUTHORIZATION(boolean)Enable Authorization for the standalone registry.false
ANKA_ENABLE_INGRESS_NGINX(boolean)Enable Authentication based on headers set by Ingress Nginx (https://kubernetes.github.io/ingress-nginx/examples/auth/client-certs/false
ANKA_ENABLE_RESOURCE_MANAGEMENT(boolean)Enable resource management for the standalone registry (requires enable-authorization)false
ANKA_ROOT_TOKEN(string)Sets the basic auth token that will be used for accessing the API (username is ‘root’).
ANKA_USE_BACKEND_PLUGIN(boolean)Turns on usage of backend plugin provided by backend-plugin-pathfalse