diff --git a/chart/README.md b/chart/README.md index 8750a60df..39d799784 100644 --- a/chart/README.md +++ b/chart/README.md @@ -102,7 +102,6 @@ This removes all the Kubernetes components associated with the chart and deletes | apis.​rest.​tolerations | Set tolerations, overrides global | `[]` | | base.​cache_poll_period | Cache timeout for core agent & diskpool deployment | `"30s"` | | base.​default_req_timeout | Request timeout for rest & core agents | `"5s"` | -| base.​imagePullSecrets.​enabled | Enable imagePullSecrets for pulling our container images | `false` | | base.​logging.​color | Enable ansi color code for Pod StdOut/StdErr | `true` | | base.​logging.​format | Valid values for format are pretty, json and compact | `"pretty"` | | base.​logging.​silenceLevel | Silence specific module components | `nil` | @@ -149,6 +148,7 @@ This removes all the Kubernetes components associated with the chart and deletes | etcd.​removeMemberOnContainerTermination | Use a PreStop hook to remove the etcd members from the etcd cluster on container termination Ignored if lifecycleHooks is set or replicaCount=1 | `false` | | etcd.​replicaCount | Number of replicas of etcd | `3` | | image.​pullPolicy | ImagePullPolicy for our images | `"Always"` | +| image.​pullSecrets | docker-secrets required to pull images if the container registry from image.registry is protected | `[]` | | image.​registry | Image registry to pull our product images | `"docker.io"` | | image.​repo | Image registry's namespace | `"openebs"` | | image.​tag | Release tag for our images | `"develop"` | diff --git a/chart/templates/_helpers.tpl b/chart/templates/_helpers.tpl index 495538e2d..8bbeac51a 100644 --- a/chart/templates/_helpers.tpl +++ b/chart/templates/_helpers.tpl @@ -77,8 +77,12 @@ Usage: {{ include "base_pull_secrets" . }} */}} {{- define "base_pull_secrets" -}} - {{- if .Values.base.imagePullSecrets.enabled }} - {{- include "render" (dict "value" .Values.base.imagePullSecrets.secrets "context" $) | nindent 8 }} + {{- if .Values.base.imagePullSecrets }} + {{- if .Values.base.imagePullSecrets.enabled }} + {{- include "render" (dict "value" .Values.base.imagePullSecrets.secrets "context" $) | nindent 8 }} + {{- end }} + {{- else -}} + {{- include "render" (dict "value" .Values.image.pullSecrets "context" $) | nindent 8 }} {{- end }} {{- end -}} diff --git a/chart/values.yaml b/chart/values.yaml index 2e693bd65..0804f1a31 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -26,6 +26,9 @@ image: # -- ImagePullPolicy for our images pullPolicy: Always + # -- docker-secrets required to pull images if the container registry from image.registry is protected + pullSecrets: [] + # -- Node labels for pod assignment # ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ # Note that if multi-arch images support 'kubernetes.io/arch: amd64' @@ -87,13 +90,6 @@ base: - name: etcd-probe image: busybox:latest command: ['sh', '-c', 'trap "exit 1" TERM; until nc -vzw 5 {{ .Release.Name }}-etcd {{.Values.etcd.service.port}}; do date; echo "Waiting for etcd..."; sleep 1; done;'] - # docker-secrets required to pull images if the container registry from image.Registry is protected - imagePullSecrets: - # -- Enable imagePullSecrets for pulling our container images - enabled: false - # Name of the imagePullSecret in the installed namespace - secrets: - - name: login metrics: # -- Enable the metrics exporter