Add imagePullSecrets to helm chart

nginx · Nov 8, 2018 · 8e11a86 · 8e11a86
1 parent d7ce4f9
commit 8e11a86
Show file tree

Hide file tree

Showing 6 changed files with 14 additions and 6 deletions.
diff --git a/deployments/helm-chart/README.md b/deployments/helm-chart/README.md
@@ -79,7 +79,8 @@ Parameter | Description | Default
 `controller.service.annotations` | The annotations of the Ingress controller service. | { }
 `controller.service.loadBalancerIP` | The static IP address for the load balancer. Requires `controller.service.type` set to `LoadBalancer`.  | None
 `controller.service.externalIPs` | The list of external IPs for the Ingress controller service. | []
-`controller.serviceAccountName` | The serviceAccountName of the Ingress controller pods. Used for RBAC. | nginx-ingress
+`controller.serviceAccount.name` | The serviceAccountName of the Ingress controller pods. Used for RBAC. | nginx-ingress
+`controller.serviceAccount.imagePullSecrets.name` | The name of the secret containing docker registry credentials. | None
 `controller.ingressClass` | A class of the Ingress controller. The Ingress controller only processes Ingress resources that belong to its class - i.e. have the annotation `"kubernetes.io/ingress.class"` equal to the class. Additionally, the Ingress controller processes Ingress resources that do not have that annotation which can be disabled by setting the "-use-ingress-class-only" flag. | nginx
 `controller.useIngressClassOnly` | Ignore Ingress resources without the `"kubernetes.io/ingress.class"` annotation. | false
 `controller.watchNamespace` | Namespace to watch for Ingress resources. By default the Ingress controller watches all namespaces. | ""

diff --git a/deployments/helm-chart/templates/controller-daemonset.yaml b/deployments/helm-chart/templates/controller-daemonset.yaml
@@ -22,7 +22,7 @@ spec:
         prometheus.io/port: "{{ .Values.prometheus.port }}"
 {{- end }}
     spec:
-      serviceAccountName: {{ .Values.controller.serviceAccountName }}
+      serviceAccountName: {{ .Values.controller.serviceAccount.name }}
       terminationGracePeriodSeconds: {{ .Values.controller.terminationGracePeriodSeconds }}
 {{- if .Values.controller.nodeSelector }}
       nodeSelector:

diff --git a/deployments/helm-chart/templates/controller-deployment.yaml b/deployments/helm-chart/templates/controller-deployment.yaml
@@ -23,7 +23,7 @@ spec:
         prometheus.io/port: "{{ .Values.prometheus.port }}"
 {{- end }}
     spec:
-      serviceAccountName: {{ .Values.controller.serviceAccountName }}
+      serviceAccountName: {{ .Values.controller.serviceAccount.name }}
       hostNetwork: {{ .Values.controller.hostNetwork }}
       containers:
       - image: "{{ .Values.controller.image.repository }}:{{ .Values.controller.image.tag }}"

diff --git a/deployments/helm-chart/templates/controller-serviceaccount.yaml b/deployments/helm-chart/templates/controller-serviceaccount.yaml
@@ -2,10 +2,14 @@
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: {{ .Values.controller.serviceAccountName }}
+  name: {{ .Values.controller.serviceAccount.name }}
   labels:
     app: {{ .Values.controller.name | trunc 63 }}
     chart: {{ .Chart.Name }}-{{ .Chart.Version }}
     heritage: {{ .Release.Service }}
     release: {{ .Release.Name }}
+{{- if .Values.controller.serviceAccount.imagePullSecrets.name }}
+imagePullSecrets:
+- name: {{ .Values.controller.serviceAccount.imagePullSecrets.name | quote }}
+{{- end }}
 {{- end }}
diff --git a/deployments/helm-chart/templates/rbac.yaml b/deployments/helm-chart/templates/rbac.yaml
@@ -77,7 +77,7 @@ metadata:
     release: {{ .Release.Name }}
 subjects:
 - kind: ServiceAccount
-  name: {{ .Values.controller.serviceAccountName }}
+  name: {{ .Values.controller.serviceAccount.name }}
   namespace: {{ .Release.Namespace }}
 roleRef:
   kind: ClusterRole

diff --git a/deployments/helm-chart/values.yaml b/deployments/helm-chart/values.yaml
@@ -34,7 +34,10 @@ controller:
     annotations: {}
     loadBalancerIP: ""
     externalIPs: []
-  serviceAccountName: nginx-ingress
+  serviceAccount:
+    name: nginx-ingress
+    imagePullSecrets:
+      name: ""
   reportIngressStatus:
     enable: true
     externalService: nginx-ingress