upstream/openstack/openstack-helm-infra
Angie Wang 4a3b8ff654 Add imagePullSecrets in service account template
The functionality of local docker registry authentication will be
enabled in commit https://review.openstack.org/#/c/626355/. However,
the OSH doesn't support a way to pass credentials to kubernetes to
pull images from a registry with authentication turned on.

This commit adds a "imagePullSecrets" field in service account template
resource and references the well-known secret "default-registry-key"
which created in sysinv during application apply. With this change,
kubernetes will pull images from local registry using this secret.

Note:
- This is short-term solution. The long-term solution is to implement
  the BP https://blueprints.launchpad.net/openstack-helm/+spec/support
  -docker-registry-with-authentication-turned-on which creates the
  secret in chart and pass the secret in service account conditionally.
- It works with an unauthed registry and non-existent or existent
  secret "default-registry-key" as well.

Change-Id: Icdff8b385cee7f8b0311086ae892b3b1edacea37
Story: 2002840
Task: 28945
Signed-off-by: Angie Wang <angie.wang@windriver.com>
2019-02-12 10:27:28 -05:00
..
centos Add imagePullSecrets in service account template 2019-02-12 10:27:28 -05:00
files Add imagePullSecrets in service account template 2019-02-12 10:27:28 -05:00
Readme.rst Adding openstack-helm and openstack-helm-infra to the build 2018-11-06 09:38:06 -06:00

Readme.rst

This repo is for https://github.com/openstack/openstack-helm-infra

Changes to this repo are needed for StarlingX and those changes are not yet merged. Rather than clone and diverge the repo, the repo is extracted at a particular git SHA, and patches are applied on top.

As those patches are merged, the SHA can be updated and the local patches removed.