Cache public container images in azure container registry

[bengtfredh]

Description

Some parts of infrastructure in kubernetes use public container images. Public container images shold be cached in azure container registry. This make sure we are not affected of outages in public container registry like docker.io, gcr.io i.e. Pulling images will probably go faster, and make autscaling work better.

Additional Information

https://learn.microsoft.com/en-us/azure/container-registry/tutorial-enable-artifact-cache-cli https://learn.microsoft.com/en-us/azure/container-registry/tutorial-enable-artifact-cache-auth-cli https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/container_registry_cache_rule

Tasks

• [x] Add credential for docker.io to get higher pull rate limit
• [ ] Add cache for infrastructure container images in use
  • [x] traefik
  • [x] linkerd
  • [ ] grafana
  • [ ] prometheus
  • [x] browserless
  • [ ] "filescan"

Acceptance Criterias

Infrastructure can pull images from azure container registry

Summary

• Created a new container registry altinncr.azurecr.io
  • We want to use this for all cached images for all services

[ivarne]

Is this also relevant for the browserless image that is used for PDF?

[bengtfredh]

Is this also relevant for the browserless image that is used for PDF?

Yes, I think the goal must be that all container pulls go to azurecr.io.

[bengtfredh]

• https://github.com/Altinn/altinn-studio-charts/pull/45