4a3b8ff654
The functionality of local docker registry authentication will be enabled in commit https://review.openstack.org/#/c/626355/. However, the OSH doesn't support a way to pass credentials to kubernetes to pull images from a registry with authentication turned on. This commit adds a "imagePullSecrets" field in service account template resource and references the well-known secret "default-registry-key" which created in sysinv during application apply. With this change, kubernetes will pull images from local registry using this secret. Note: - This is short-term solution. The long-term solution is to implement the BP https://blueprints.launchpad.net/openstack-helm/+spec/support -docker-registry-with-authentication-turned-on which creates the secret in chart and pass the secret in service account conditionally. - It works with an unauthed registry and non-existent or existent secret "default-registry-key" as well. Change-Id: Icdff8b385cee7f8b0311086ae892b3b1edacea37 Story: 2002840 Task: 28945 Signed-off-by: Angie Wang <angie.wang@windriver.com> |
||
|---|---|---|
| .. | ||
| 0001-gnocchi-chart-updates.patch | ||
| 0004-Allow-multiple-containers-per-daemonset-pod.patch | ||
| Add-imagePullSecrets-in-service-account.patch | ||
| Mariadb-Share-container-PID-namespaces-under-docker.patch | ||
| Mariadb-Support-adoption-of-running-single-node-mari.patch | ||
| fix-type-error-to-streamline-single-replica-mariadb-.patch | ||
| repositories.yaml | ||