The `registration.yml` (at least the `as_token` and `hs_token`) should come from a Kubernetes Secret instead of a ConfigMap as it contains secret values.