Disabling Zarf Registry Iron Bank Mirror

SmoothGlue comes with a built-in containerd mirror for pointing registry1.dso.mil (Iron Bank) to Zarf's internal registry. Zarf usually mutates image registries using its mutating webhook. However, in some use cases, a hybrid case is desirable where images for deployed applications can be pulled from external repositories, but the images for Istio sidecar containers deployed by the platform can be pulled from the cluster-internal Zarf registry. Read more about this use case on our Application Onboarding page.

If desired, this functionality can be disabled by configuring the IaC inputs:

locals = {
  cluster_inputs = {
    zarf_registry_ironbank_mirror_enabled = false
  }
}

After making this change, execute the Terragrunt for the cluster as if performing an upgrade and rotate the nodes in your cluster to ensure that the new containerd configuration takes effect.