feat: add capability to override docker registries (#651)

components/operator/apis/stack/v1beta3/configuration_types.go

@@ -17,6 +17,7 @@ limitations under the License.
 package v1beta3
 
 import (
+	"fmt"
 	"reflect"
 	"strings"
 
@@ -116,6 +117,10 @@ type MetricsSpec struct {
 	Otlp *OtlpSpec `json:"otlp,omitempty"`
 }
 
+type RegistryConfig struct {
+	Endpoint string `json:"endpoint"`
+}
+
 type ConfigurationSpec struct {
 	Services ConfigurationServicesSpec `json:"services"`
 	Broker   Broker                    `json:"broker"`
@@ -128,6 +133,8 @@ type ConfigurationSpec struct {
 	// LightMode is experimental and indicate we want monopods
 	// +optional
 	LightMode bool `json:"light,omitempty"`
+	// +optional
+	Registries map[string]RegistryConfig `json:"registries,omitempty"`
 }
 
 func (in *ConfigurationSpec) GetServices() []string {
@@ -159,6 +166,26 @@ func (c Configuration) Validate() error {
 	return nil
 }
 
+func (c *Configuration) ResolveImage(image string) string {
+	parts := strings.Split(image, ":")
+	repository := parts[0]
+	repositoryParts := strings.SplitN(repository, "/", 2)
+	var (
+		registry, path string
+	)
+	if len(repositoryParts) == 1 {
+		registry = "docker.io"
+		path = repository
+	} else {
+		registry = repositoryParts[0]
+		path = repositoryParts[1]
+	}
+	if config, ok := c.Spec.Registries[registry]; ok && config.Endpoint != "" {
+		return fmt.Sprintf("%s/%s:%s", config.Endpoint, path, parts[1])
+	}
+	return image
+}
+
 //+kubebuilder:object:root=true
 
 // ConfigurationList contains a list of Configuration

components/operator/config/crd/bases/stack.formance.com_configurations.yaml

@@ -4208,6 +4208,15 @@ spec:
                         type: object
                     type: object
                 type: object
+              registries:
+                additionalProperties:
+                  properties:
+                    endpoint:
+                      type: string
+                  required:
+                  - endpoint
+                  type: object
+                type: object
               services:
                 description: ConfigurationServicesSpec define all existing services
                   for a stack. Fields order is important. For example, auth must be

components/operator/internal/controllers/stack/testdata/multipod-latest-with-custom-registry/configuration.yaml

@@ -0,0 +1,75 @@
+apiVersion: stack.formance.com/v1beta3
+kind: Configuration
+metadata:
+  name: default
+spec:
+  registries:
+    ghcr.io:
+      endpoint: localhost:5000
+  broker:
+    kafka:
+      brokers:
+      - kafka1:1234
+      - kafka2:1234
+  monitoring:
+    traces:
+      otlp:
+        endpoint: localhost
+        insecure: true
+        mode: grpc
+        port: 4317
+  services:
+    auth:
+      postgres:
+        disableSSLMode: true
+        host: localhost
+        password: root
+        port: 5432
+        username: root
+    control: {}
+    ledger:
+      postgres:
+        disableSSLMode: true
+        host: localhost
+        password: root
+        port: 5432
+        username: root
+    orchestration:
+      postgres:
+        disableSSLMode: true
+        host: localhost
+        password: root
+        port: 5432
+        username: root
+    payments:
+      encryptionKey:
+      postgres:
+        disableSSLMode: true
+        host: localhost
+        password: root
+        port: 5432
+        username: root
+    search:
+      batching:
+        count:
+        period:
+      elasticSearch:
+        host: elasticsearch
+        pathPrefix: ''
+        port: 9200
+        scheme: http
+    stargate:
+    wallets:
+    webhooks:
+      postgres:
+        disableSSLMode: true
+        host: localhost
+        password: root
+        port: 5432
+        username: root
+  temporal:
+    address:
+    namespace:
+    tls:
+      crt:
+      key:

components/operator/internal/controllers/stack/testdata/multipod-latest-with-custom-registry/results/configmaps--v1/auth-config.yaml

@@ -0,0 +1,42 @@
+apiVersion: v1
+data:
+    config.yaml: |
+        clients:
+            - public: false
+              description: null
+              redirectUris:
+                - http://example.net/auth/login
+              PostLogoutRedirectUris:
+                - http://example.net/auth/destroy
+              scopes:
+                - openid
+                - profile
+                - email
+                - offline
+              id: control
+              secrets:
+                - mocked-secret
+            - public: false
+              description: null
+              redirectUris: []
+              PostLogoutRedirectUris: []
+              scopes:
+                - openid
+              id: orchestration
+              secrets:
+                - mocked-secret
+            - public: false
+              description: null
+              redirectUris: []
+              PostLogoutRedirectUris: []
+              scopes:
+                - openid
+              id: wallets
+              secrets:
+                - mocked-secret
+kind: ConfigMap
+metadata:
+    labels:
+        stack: "true"
+    name: auth-config
+    namespace: multipod-latest-with-custom-registry