registryTokenService:
  authority:
    issuer: "https://authority.localhost"
    requireHttpsMetadata: false
    audiences:
      - "registry"
    requiredScopes:
      - "registry.token.issue"
  signing:
    issuer: "https://registry.localhost/token"
    keyPath: "etc/registry-signing-sample.pem"
    keyPassword: ""
    lifetime: "00:05:00"
  registry:
    realm: "https://registry.localhost/v2/token"
    allowedServices:
      - "registry.localhost"
  defaultPlan: "community"
  plans:
    - name: "community"
      repositories:
        - pattern: "stella-ops/public/*"
          actions: [ "pull" ]
    - name: "enterprise"
      repositories:
        - pattern: "stella-ops/public/*"
          actions: [ "pull" ]
        - pattern: "stella-ops/enterprise/*"
          actions: [ "pull" ]
  revokedLicenses: []