-
Notifications
You must be signed in to change notification settings - Fork 665
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Flyte-core add missing imagePullSecrets support #4810
Flyte-core add missing imagePullSecrets support #4810
Conversation
- The console doesn't have / need a ServiceAccount, but it still needs credentials to be able to pull image from security registries Add a new imagePullSecrets value for that - The webhook ServiceAccount didn't have the correct imagePullSecrets set, so similarly could not pull images from security registries. Use the propeller settings Signed-off-by: ddl-ebrown <[email protected]>
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #4810 +/- ##
===========================================
+ Coverage 58.98% 76.69% +17.71%
===========================================
Files 644 18 -626
Lines 55145 1515 -53630
===========================================
- Hits 32527 1162 -31365
+ Misses 20046 289 -19757
+ Partials 2572 64 -2508
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
@davidmirror-ops this one should be a pretty straightforward bugfix |
@@ -18,6 +18,10 @@ spec: | |||
{{- end }} | |||
labels: {{ include "flyteconsole.podLabels" . | nindent 8 }} | |||
spec: | |||
{{- with .Values.flyteconsole.imagePullSecrets }} | |||
imagePullSecrets: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
While I don't see this to be the most common scenario (hosting the flyteconsole image on a secured registry) I see it could be the case for more security-aware environments.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you!
The console doesn't have / need a ServiceAccount, but it still needs credentials to be able to pull image from secured registries
Add a new imagePullSecrets value for that
The webhook ServiceAccount didn't have the correct imagePullSecrets set, so similarly could not pull images from security registries. Use the propeller settings
Tracking issue
https://github.com/flyteorg/flyte/issues/
Why are the changes needed?
What changes were proposed in this pull request?
How was this patch tested?
Setup process
Screenshots
Check all the applicable boxes
Related PRs
Docs link