OCI Configuration

The oci section configures settings for Open Container Initiative (OCI) registries. The Apollo GraphOS Operator uses OCI registries to fetch GraphQL schemas that are stored as OCI artifacts, such as when a subgraph or supergraph references an ociImage or oci source.

Configuration

Example

1oci:
2  httpOnlyRegistries:
3    - "localhost:5000"
4    - "registry.local:5000"

Use Cases

Local Development

1oci:
2  httpOnlyRegistries:
3    - "localhost:5000"

Internal Registries

1oci:
2  httpOnlyRegistries:
3    - "registry.internal.company.com"
4    - "dev-registry.company.com"

Security Considerations

⚠️ Warning: Using HTTP-only registries can expose your container images to security vulnerabilities. Only use in:

• Local development environments

• Isolated internal networks

• Testing environments with controlled access

For production, always use HTTPS-enabled registries.