apiVersion: v1 kind: Service metadata: name: registry namespace: registry labels: app: registry spec: type: ClusterIP # Pinned: CI pushes here (buildkitd's config and the app workflows use this address). # Nodes pull through registry-proxy on localhost:5000 instead; see daemonset-proxy.yaml. clusterIP: selector: app: registry ports: - name: http port: 5000 targetPort: http