Problem pulling image from local registry

[westnet-paul]

I'm experimenting with Talos on my laptop and liking what I'm seeing so far.

I'm trying to configure the cluster to pull images from a local registry with a self-signed cert authority. My machineconfig includes:

    registries:
        mirrors:
            westnet.ie:
                endpoints:
                    - https://docker-registry.mgmt-private.westnet.ie:5000

        config:
            westnet.ie:
                tls:
                    ca: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURCREND...

The actual ca value is the base64-encoded CA cert. I've validated the same CA cert with:

➜  ~ http --verify=Downloads/registry.ca.crt https://docker-registry.mgmt-private.westnet.ie:5000/v2/
HTTP/1.1 200 OK
Content-Length: 2
Content-Type: application/json; charset=utf-8
Date: Wed, 26 Oct 2022 20:47:38 GMT
Docker-Distribution-Api-Version: registry/2.0
X-Content-Type-Options: nosniff

{}

Attempting to start a pod with an image from the registry fails with:

Failed to pull image "westnet.ie/ping-service": rpc error: code = Unknown desc = failed to pull and unpack image "westnet.ie/ping-service:latest": failed to resolve reference "westnet.ie/ping-service:latest": failed to do request: Head "https://docker-registry.mgmt-private.westnet.ie:5000/v2/ping-service/manifests/latest?ns=westnet.ie": x509: certificate signed by unknown authority

Any ideas?

[westnet-paul]

Kris Reeves on Slack pointed me to the correct answer: under the config key I should have referenced the endpoint, not the registry name:

config:
    "docker-registry.mgmt-private.westnet.ie:5000":
        tls:
            ca: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURCREND...