add mylimbo.globals.k3s.registries_cache_mysetup

roles/k3s/tasks/registries_cache_mysetup.yaml

@@ -0,0 +1,10 @@
+# requires host/group vars
+# oci_cache:
+#  address: https://xxxx.xxx.xx/v2
+#  auth_username: xxxxx
+#  auth_password: Ixxxx
+
+- name:  k3s - setup cache registries
+  ansible.builtin.template:
+    src: templates/registries_cache_mysetup
+    dest: /etc/rancher/k3s/registries.yaml

roles/k3s/templates/registries_cache_mysetup.j2

@@ -0,0 +1,65 @@
+mirrors:
+  # --- Docker Hub (all aliases → docker-mirror) ---
+  docker.io:
+    endpoint:
+      - https://{{oci_cache.address}}/docker-mirror
+  registry-1.docker.io:
+    endpoint:
+      - https://{{oci_cache.address}}/docker-mirror
+  index.docker.io:
+    endpoint:
+      - https://{{oci_cache.address}}/docker-mirror
+
+  # --- GHCR ---
+  ghcr.io:
+    endpoint:
+      - https://{{oci_cache.address}}/ghcr-mirror
+
+  # --- Quay.io ---
+  quay.io:
+    endpoint:
+      - https://{{oci_cache.address}}/quay-mirror
+
+  # --- Kubernetes official registry ---
+  registry.k8s.io:
+    endpoint:
+      - https://{{oci_cache.address}}/k8s-mirror
+
+  # --- Google Container Registry
+  gcr.io:
+    endpoint:
+      - https://{{oci_cache.address}}/grc-mirror
+
+  # --- AWS Public ECR ---
+  public.ecr.aws:
+    endpoint:
+      - https://{{oci_cache.address}}/aws-mirror
+
+  # --- Microsoft Container Registry ---
+  mcr.microsoft.com:
+    endpoint:
+      - https://{{oci_cache.address}}/mcr-proxy
+
+  # --- GitLab Container Registry ---
+  registry.gitlab.com:
+    endpoint:
+      - https://{{oci_cache.address}}/gitlab-mirror
+
+  # --- Bitnami (namespace under Docker Hub) ---
+  docker.io/bitnami:
+    endpoint:
+      - https://{{oci_cache.address}}/bitnami-mirror
+
+  # --- Red Hat registry ---
+  registry.redhat.io:
+    endpoint:
+      - https://{{oci_cache.address}}/readheat-mirror
+      
+
+configs:
+  oci.limbosolutions.com:
+    auth:
+      username:  {{oci_cache.auth_username }}
+      password:  {{oci_cache.auth_password }}
+    tls:
+      insecure_skip_verify: false