Skip to content

feat(helm): add imagePullSecrets support to kanister-operator chart - #4192

Open
FrancescoCastaldi wants to merge 1 commit into
kanisterio:masterfrom
FrancescoCastaldi:feat/imagePullSecrets-2999
Open

FrancescoCastaldi wants to merge 1 commit into
kanisterio:masterfrom
FrancescoCastaldi:feat/imagePullSecrets-2999

Conversation

@FrancescoCastaldi

Copy link
Copy Markdown

Summary

Fixes #2999

Allow users to configure imagePullSecrets on the kanister-operator Deployment via the Helm chart values.

Problem

In air-gapped environments or clusters that use private container registries with authentication, the operator pod fails to pull the controller image because there was no way to pass imagePullSecrets through the Helm chart.

Solution

  • Added imagePullSecrets: [] to �alues.yaml with an inline example comment
  • Conditionally rendered imagePullSecrets in deployment.yaml when the list is non-empty (zero overhead for the default case)
  • Added TestImagePullSecretsFromHelmChart test covering:
    • Single pull secret
    • Multiple pull secrets
    • Default (empty list → field absent from rendered manifest)

Usage

\\yaml

values.yaml

imagePullSecrets:

  • name: my-registry-secret
    \
    or via CLI:
    \\�ash
    helm install kanister kanister/kanister-operator
    --set 'imagePullSecrets[0].name=my-registry-secret'
    \\

Testing

Validated with \helm lint --strict\ and \helm template\ — chart passes with 0 failures.

Resolves kanisterio#2999

Allow users to configure imagePullSecrets on the kanister-operator
Deployment via the Helm chart. This is required in air-gapped
environments where images are pulled from private registries that
require authentication.

Changes:
- Add imagePullSecrets: [] field to values.yaml with example comments
- Render imagePullSecrets in deployment.yaml when the list is non-empty
- Add TestImagePullSecretsFromHelmChart test covering single secret,
  multiple secrets, and default (empty/absent) cases

Signed-off-by: FrancescoCastaldi <francescocastaldi@users.noreply.github.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Allow imagePullSecrets configurable on operator Deployment

1 participant