Since Docker images for the scan server and client are located in a private GitHub repository, you need credentials for pulling. The authentication requires some prerequisites:
- Create a new access token with the only right "read packages".
- Create a string in the format $USERNAME:$PASSWORD and encode it to base64.
- Create a docker.config JSON file:
{
"auths": {
"ghcr.io": {
"auth": "$$_BASE64_ENCODED_USER_NAME_AND_PASSWORD_$$"
}
}
}
- Encode docker.config to base64 and copy it into a values.yaml file:
secret:
dockerconfigjson: $$_BASE64_ENCODED_DOCKER_CONFIG_$$
- Test the
values.yaml
locally before prodiving it to a customer.