Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 24 additions & 1 deletion docs-source/content/security/secrets.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ description: "Kubernetes secrets for the WebLogic operator"
#### Contents
* [WebLogic domain credentials secret](#weblogic-domain-credentials-secret)
* [WebLogic domain image pull secret](#weblogic-domain-image-pull-secret)
* [WebLogic operator image pull secret](#weblogic-operator-image-pull-secret)
* [WebLogic operator configuration override secrets](#weblogic-operator-configuration-override-secrets)
* [WebLogic operator external REST interface secret](#weblogic-operator-external-rest-interface-secret)
* [WebLogic operator internal REST interface secret](#weblogic-operator-internal-rest-interface-secret)
Expand Down Expand Up @@ -71,14 +72,36 @@ username: 8 bytes
#### WebLogic domain image pull secret

The WebLogic domain that the operator manages can have images that are protected
in the registry. The `imagePullSecrets` setting can be used to specify the
in the registry. The `imagePullSecrets` setting on the `Domain` can be used to specify the
Kubernetes `Secret` that holds the registry credentials.

{{% notice info %}}
For more information, see [Docker Image Protection]({{<relref "/security/domain-security/image-protection.md#weblogic-domain-in-docker-image-protection">}})
under **Domain security**.
{{% /notice %}}

#### WebLogic operator image pull secret

The Helm chart for installing the operator has an option to specify the
image pull secret used for the operator's image when using a private registry.
The Kubernetes `Secret` of type `docker-registry` should be created in the namespace
where the operator is deployed.

Here is an example of using the `helm install` command to set the image name and image pull secret:
```bash
$ helm install kubernetes/charts/weblogic-operator \
--set "image=my.io/my-operator-image:1.0" \
--set "imagePullSecrets[0].name=my-operator-image-pull-secret" \
--name my-weblogic-operator --namespace weblogic-operator-ns \
--wait
```

{{% notice info %}}
For more information, see
[Install the operator Helm chart]({{<relref "/userguide/managing-operators/installation/_index.md#install-the-operator-helm-chart">}})
under **User Guide**.
{{% /notice %}}

#### WebLogic operator configuration override secrets

The WebLogic operator supports embedding macros within configuration override templates
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,12 @@ If `weblogic-operator-namespace` exists, then it will be used. If it does not e

You can verify the operator installation by examining the output from the `helm install` command.

{{% notice note %}}
When the operator image is stored in a private registry, see
[WebLogic operator image pull secret]({{<relref "/security/secrets.md#weblogic-operator-image-pull-secret">}})
for more information on specifying the registry credentials.
{{% /notice %}}

#### Alternatively, install the operator Helm chart from GitHub chart repository

Add this repository to the Helm installation:
Expand Down