diff --git a/deploy-templates/README.md b/deploy-templates/README.md index 179e9682..bce59ece 100644 --- a/deploy-templates/README.md +++ b/deploy-templates/README.md @@ -30,6 +30,7 @@ A Helm chart for KubeRocketCI Codebase Operator | image.repository | string | `"epamedp/codebase-operator"` | EDP codebase-operator Docker image name. The released image can be found on [Dockerhub](https://hub.docker.com/r/epamedp/codebase-operator) | | image.tag | string | `nil` | EDP codebase-operator Docker image tag. The released image can be found on [Dockerhub](https://hub.docker.com/r/epamedp/codebase-operator/tags) | | imagePullPolicy | string | `"IfNotPresent"` | | +| imagePullSecrets | list | `[]` | Optional array of imagePullSecrets containing private registry credentials # Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry | | jira.apiUrl | string | `"https://jiraeu-api.example.com"` | API URL for development | | jira.credentialName | string | `"ci-jira"` | Name of secret with credentials to Jira server | | jira.integration | bool | `false` | Flag to enable/disable Jira integration | diff --git a/deploy-templates/templates/deployment.yaml b/deploy-templates/templates/deployment.yaml index ae558b88..b125b903 100644 --- a/deploy-templates/templates/deployment.yaml +++ b/deploy-templates/templates/deployment.yaml @@ -21,6 +21,9 @@ spec: serviceAccountName: edp-{{ .Values.name }} securityContext: runAsNonRoot: true + {{- if .Values.imagePullSecrets }} + imagePullSecrets: {{ toYaml .Values.imagePullSecrets | nindent 8 }} + {{- end }} containers: - name: {{ .Values.name }} image: {{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }} diff --git a/deploy-templates/values.yaml b/deploy-templates/values.yaml index fad3ce0a..8deaa4c6 100644 --- a/deploy-templates/values.yaml +++ b/deploy-templates/values.yaml @@ -21,6 +21,10 @@ envs: - name: CODEBASE_BRANCH_MAX_CONCURRENT_RECONCILES value: "3" imagePullPolicy: "IfNotPresent" +# -- Optional array of imagePullSecrets containing private registry credentials +## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry +imagePullSecrets: [] +# - name: regcred resources: limits: