-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Generate/use pull secrets when possible #35036
Conversation
Thanks for your pull request! The title of your pull request does not follow our editorial rules. Could you have a look?
This message is automatically generated by a bot. |
This comment has been minimized.
This comment has been minimized.
/** | ||
* Enable generation of image pull secret, when credentials are available. | ||
*/ | ||
@ConfigItem(defaultValue = "true") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would disable this property by default, since it should not be used for security reasons.
* Enable generation of image pull secret, when credentials are available. | ||
*/ | ||
@ConfigItem(defaultValue = "true") | ||
boolean imagePullSecretGenerate; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
About the name, I would rename it to generate-image-pull-secret
instead to follow the same pattern as others properties like quarkus.kubernetes-client.generate-rbac
.
@@ -183,6 +183,12 @@ public static enum DeploymentResourceKind { | |||
@ConfigItem | |||
Optional<List<String>> imagePullSecrets; | |||
|
|||
/** | |||
* Enable generation of image pull secret, when credentials are available. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
* Enable generation of image pull secret, when credentials are available. | |
* Enable generation of image pull secret, when the container image username and password were provided. |
Or something like this.
7aee675
to
60b2237
Compare
🙈 The PR is closed and the preview is expired. |
✔️ The latest workflow run for the pull request has completed successfully. It should be safe to merge provided you have a look at the other checks in the summary. |
Inspirted by @Sgitario comment on #34241 this pull request automates the generation of image pull secrets when registry and credentials are provided as part of a push operation.