Helm chart: add imagePullSecrets for gateway.backend

dask-gateway-server/dask_gateway_server/backends/kubernetes/backend.py

@@ -6,7 +6,7 @@
 
 from kubernetes_asyncio import client, config
 from kubernetes_asyncio.client.rest import ApiException
-from traitlets import Dict, Float, Unicode, default
+from traitlets import Dict, Float, List, Unicode, default
 from traitlets.config import LoggingConfigurable
 
 from ... import __version__ as VERSION
@@ -54,6 +54,10 @@ def _default_namespace(self):
         config=True,
     )
 
+    image_pull_secrets = List(
+        Unicode, help="The pull secret(s) associated with the ``image``.", config=True
+    )
+
     # Kubernetes is a bit different in types/granularity of resource requests.
     # We redefine these common fields here to support that.
     worker_cores = Float(

resources/helm/dask-gateway/templates/gateway/configmap.yaml

@@ -52,6 +52,8 @@ data:
             "%s:%s" % (image_name, image_tag) if image_tag else image_name
         )
 
+    c.KubeClusterConfig.image_pull_secrets = {{ .Values.gateway.backend.imagePullSecrets }}
+
     # Forward dask cluster configuration
     for field, prop_name in [
         # Scheduler config

resources/helm/dask-gateway/values.schema.yaml

@@ -239,6 +239,7 @@ properties:
         additionalProperties: false
         required:
           - image
+          - imagePullSecrets
           - scheduler
           - worker
         description: |
@@ -253,6 +254,7 @@ properties:
               Set a custom image name, tag, pullPolicy, or pullSecrets for Dask
               Cluster's scheduler and worker pods.
             properties: *image-properties
+          imagePullSecrets: *imagePullSecrets-spec
           namespace:
             type: [string, "null"]
             description: |

resources/helm/dask-gateway/values.yaml

@@ -87,6 +87,9 @@ gateway:
       tag: "set-by-chartpress"
       pullPolicy: IfNotPresent
 
+    # Image pull secrets for schedulers and worker pods
+    imagePullSecrets: []
+
     # The namespace to launch dask clusters in. If not specified, defaults to
     # the same namespace the gateway is running in.
     namespace: