add local private registry setup

This PR aims at adding local private docker registry setup with kind cluster. Prior this commit the doc is missing or the content is distributed.

docs/developers/local-setup.md

@@ -12,7 +12,7 @@ This section provides guidelines for running Tekton on your local workstation vi
 Complete these prerequisites to run Tekton locally using Docker Desktop:
 
 - Install the [required tools](https://github.com/tektoncd/pipeline/blob/main/DEVELOPMENT.md#requirements).
-- Install [Docker Desktop](https://www.docker.com/products/docker-desktop) 
+- Install [Docker Desktop](https://www.docker.com/products/docker-desktop)
 - Configure Docker Desktop ([Mac](https://docs.docker.com/docker-for-mac/#resources), [Windows](https://docs.docker.com/docker-for-windows/#resources))to use six CPUs, 10 GB of RAM and 2GB of swap space.
 - Set `host.docker.internal:5000` as an insecure registry with Docker for Desktop. See the [Docker insecure registry documentation](https://docs.docker.com/registry/insecure/).
   for details.
@@ -82,3 +82,129 @@ If you wish to use a different image URL, you can add the appropriate line to mi
 ### Reconfigure logging
 
 See the information in the "Docker for Desktop" section
+
+## Using kind and local docker registry
+
+### Prerequisites
+
+Complete these prerequisites to run Tekton locally using Kind:
+
+- Install the [required tools](https://github.com/tektoncd/pipeline/blob/main/DEVELOPMENT.md#requirements).
+- Install [Docker](https://www.docker.com/get-started).
+- Install [kind](https://kind.sigs.k8s.io/).
+
+### Use local registry without authentication
+
+See [Using KinD](https://github.com/tektoncd/pipeline/blob/main/DEVELOPMENT.md#using-kind).
+
+### Use local private registry
+
+1. Create password file with basic auth.
+
+```bash
+export TEST_USER=testuser
+export TEST_PASS=testpassword
+if [ ! -f auth ]; then
+    mkdir auth
+fi
+docker run \
+ --entrypoint htpasswd \
+ httpd:2 -Bbn $TEST_USER $TEST_PASS > auth/htpasswd
+```
+
+2. Start kind cluster and local private registry
+
+
+Execute the script.
+
+```shell
+#!/bin/sh
+set -o errexit
+
+# create registry container unless it already exists
+reg_name='kind-registry'
+reg_port='5000'
+running="$(docker inspect -f '{{.State.Running}}' "${reg_name}" 2>/dev/null || true)"
+if [ "${running}" != 'true' ]; then
+ docker run \
+   -d --restart=always -p "127.0.0.1:${reg_port}:5000" --name "${reg_name}" \
+   -v "$(pwd)"/auth:/auth \
+   -e "REGISTRY_AUTH=htpasswd" \
+   -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" \
+   -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd \
+   registry:2
+fi
+
+# create a cluster with the local registry enabled in containerd
+cat <<EOF | kind create cluster --config=-
+kind: Cluster
+apiVersion: kind.x-k8s.io/v1alpha4
+containerdConfigPatches:
+- |-
+ [plugins."io.containerd.grpc.v1.cri".registry.mirrors."localhost:${reg_port}"]
+   endpoint = ["http://${reg_name}:5000"]
+EOF
+
+# connect the registry to the cluster network
+# (the network may already be connected)
+docker network connect "kind" "${reg_name}" || true
+
+# Document the local registry
+# https://github.com/kubernetes/enhancements/tree/master/keps/sig-cluster-lifecycle/generic/1755-communicating-a-local-registry
+cat <<EOF | kubectl apply -f -
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: local-registry-hosting
+ namespace: kube-public
+data:
+ localRegistryHosting.v1: |
+   host: "localhost:${reg_port}"
+   help: "https://kind.sigs.k8s.io/docs/user/local-registry/"
+EOF
+
+```
+
+3. Install tekton [pipeline](https://github.com/tektoncd/pipeline/blob/main/docs/install.md) and create the secret in cluster.
+
+```bash
+kubectl create secret docker-registry secret-tekton \
+  --docker-username=$TEST_USER \
+  --docker-password=$TEST_PASS \
+  --docker-server=localhost:5000 \
+   --namespace=tekton-pipelines
+```
+
+4. Config [ko](https://github.com/google/ko#install) and add secret to service acount.
+
+```bash
+export KO_DOCKER_REPO='localhost:5000'
+```
+
+`200-serviceaccount.yaml`
+
+```yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: tekton-pipelines-controller
+ namespace: tekton-pipelines
+ labels:
+   app.kubernetes.io/component: controller
+   app.kubernetes.io/instance: default
+   app.kubernetes.io/part-of: tekton-pipelines
+imagePullSecrets:
+ - name: secret-tekton
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: tekton-pipelines-webhook
+ namespace: tekton-pipelines
+ labels:
+   app.kubernetes.io/component: webhook
+   app.kubernetes.io/instance: default
+   app.kubernetes.io/part-of: tekton-pipelines
+imagePullSecrets:
+ - name: secret-tekton
+```