upstream/openstack/openstack-helm-infra/centos
Angie Wang 4a3b8ff654 Add imagePullSecrets in service account template
The functionality of local docker registry authentication will be
enabled in commit https://review.openstack.org/#/c/626355/. However,
the OSH doesn't support a way to pass credentials to kubernetes to
pull images from a registry with authentication turned on.

This commit adds a "imagePullSecrets" field in service account template
resource and references the well-known secret "default-registry-key"
which created in sysinv during application apply. With this change,
kubernetes will pull images from local registry using this secret.

Note:
- This is short-term solution. The long-term solution is to implement
  the BP https://blueprints.launchpad.net/openstack-helm/+spec/support
  -docker-registry-with-authentication-turned-on which creates the
  secret in chart and pass the secret in service account conditionally.
- It works with an unauthed registry and non-existent or existent
  secret "default-registry-key" as well.

Change-Id: Icdff8b385cee7f8b0311086ae892b3b1edacea37
Story: 2002840
Task: 28945
Signed-off-by: Angie Wang <angie.wang@windriver.com>
2019-02-12 10:27:28 -05:00
..
build_srpm.data Add imagePullSecrets in service account template 2019-02-12 10:27:28 -05:00
openstack-helm-infra.spec Add imagePullSecrets in service account template 2019-02-12 10:27:28 -05:00