anchor.diff:  ----
   ====
   
  +[[docker-registry-configuration-reference-auth]]
   ==== auth
   
  -Auth options should not be altered. The **openshift** extension is the only supported
  -option.
  -
  +Auth options should not be altered. The *openshift* extension is the only
  +supported option.
  +
  +====
   ----
   auth:
     openshift:
       realm: openshift
   ----
  -
  +====
  +
  +[[docker-registry-configuration-reference-middleware]]
   ==== middleware
   
  -The **repository** middleware extension should not be altered except for the
  -**options** section to disable pull-through cache.
  +The *repository* middleware extension should not be altered except for the
  +*options* section to disable pull-through cache.
   
   [NOTE]
  -The **middleware** section may not be overridden using environment variables.
  +====
  +The *middleware* section cannot be overridden using environment variables.
  +====
   
   ====
   ----
  
positive.code: 
  You can override the integrated registry's default configuration, found by
  default at *_/config.yml_* in a running registry's container, with your own
  custom configuration. See
  link:#registry-configuration-reference[registry configuration reference] for more
  information.
  
  [TIP]
  Upstream configuration options in this file may also be overridden using environment
  variables. However, the link:#middleware[middleware section] may **not** be
  overridden using environment variables. See upstream documentation on how to
  link:https://docs.docker.com/registry/configuration/#override-specific-configuration-options[override specific configuration options].
  
  === Deploying Updated Configuration
  
  To enable managing the registry configuration file directly, it
  is recommended that the configuration file be mounted as a
  link:../../dev_guide/secrets.html[secret volume]:
  
  . link:#deploy-registry[Deploy the registry].
  
  . Edit the registry configuration file locally as needed. The initial YAML file
  deployed on the registry is provided below. See
  link:#registry-configuration-reference[registry configuration reference] for
  supported options.
  +
  .Registry configuration file
  ====
  
negative.code: $ oc delete secret registry-config
  ----
  +
  . Recreate the secret to reference the updated configuration file:
  +
  ----
  $ oc secrets new registry-config config.yml=</path/to/custom/registry/config.yml>
  