Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generate/use pull secrets when possible #35036

Merged
merged 1 commit into from
Aug 8, 2023

Conversation

iocanel
Copy link
Contributor

@iocanel iocanel commented Jul 26, 2023

Inspirted by @Sgitario comment on #34241 this pull request automates the generation of image pull secrets when registry and credentials are provided as part of a push operation.

@quarkus-bot
Copy link

quarkus-bot bot commented Jul 26, 2023

Thanks for your pull request!

The title of your pull request does not follow our editorial rules. Could you have a look?

  • title should preferably start with an uppercase character (if it makes sense!)
  • title should not start with chore/docs/feat/fix/refactor but be a proper sentence

This message is automatically generated by a bot.

@gsmet gsmet changed the title feat: generate/use pull secrets when possible Generate/use pull secrets when possible Jul 26, 2023
@quarkus-bot

This comment has been minimized.

@iocanel iocanel requested a review from Sgitario July 27, 2023 11:15
/**
* Enable generation of image pull secret, when credentials are available.
*/
@ConfigItem(defaultValue = "true")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would disable this property by default, since it should not be used for security reasons.

* Enable generation of image pull secret, when credentials are available.
*/
@ConfigItem(defaultValue = "true")
boolean imagePullSecretGenerate;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

About the name, I would rename it to generate-image-pull-secret instead to follow the same pattern as others properties like quarkus.kubernetes-client.generate-rbac.

@@ -183,6 +183,12 @@ public static enum DeploymentResourceKind {
@ConfigItem
Optional<List<String>> imagePullSecrets;

/**
* Enable generation of image pull secret, when credentials are available.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* Enable generation of image pull secret, when credentials are available.
* Enable generation of image pull secret, when the container image username and password were provided.

Or something like this.

@iocanel iocanel force-pushed the push-pull-secret-handling branch from 7aee675 to 60b2237 Compare August 7, 2023 10:42
@iocanel iocanel requested a review from Sgitario August 7, 2023 10:43
@github-actions
Copy link

github-actions bot commented Aug 7, 2023

🙈 The PR is closed and the preview is expired.

@quarkus-bot
Copy link

quarkus-bot bot commented Aug 7, 2023

✔️ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

@iocanel iocanel merged commit 6f55d65 into quarkusio:main Aug 8, 2023
@quarkus-bot quarkus-bot bot added this to the 3.3 - main milestone Aug 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants