🔧 Add private docker registry secret (#1)

modified:   README.md; modified:   charts/kube-arch-scheduler/Chart.yaml; modified:   charts/kube-arch-scheduler/templates/deployment.yaml; modified:   charts/kube-arch-scheduler/values.yaml

Author: amitai-devops

README.md

@@ -30,6 +30,12 @@ addToDefaultScheduler: true
 # and it will only affect pods with: [schedulerName: kube-arch-scheduler].
 nonDefaultSchedulerName: kube-arch-scheduler
 
+# dockerconfig.json is a base64 encoded docker config file, it will be used
+# to pull the image manifests. The pod needs to have the secret mounted at
+# /root/.docker/config.json. This is only needed if you are using a private
+# registry. If you are using a public registry, you can leave this empty.
+dockerConfigSecretName: ""
+
 # The weight of each architecture,
 # if a pod can sit on both, it will prefer the one with the higher weight.
 # The default weight of undefined architectures is 0, meaning none will have

charts/kube-arch-scheduler/Chart.yaml

@@ -13,5 +13,5 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.0.14
+version: 0.1.0
 appVersion: 0.0.5

charts/kube-arch-scheduler/templates/deployment.yaml

@@ -24,6 +24,11 @@ spec:
         - name: scheduler-config
           configMap:
             name: {{ include "kube-arch-scheduler.fullname" . }}-config
+        {{ if .Values.dockerConfigSecretName }}
+        - name: registry-creds
+          secret:
+            secretName: {{ .Values.dockerConfigSecretName }}
+        {{ end }}
       containers:
         - name: scheduler-ctrl
           image: {{ .Values.controllerManager.manager.image.repository }}:{{ .Values.controllerManager.manager.image.tag }}
@@ -37,3 +42,8 @@ spec:
           volumeMounts:
             - name: scheduler-config
               mountPath: /scheduler
+          {{ if .Values.dockerConfigSecretName }}
+            - name: registry-creds
+              mountPath: "/root/.docker"
+              readOnly: true
+          {{ end }}

charts/kube-arch-scheduler/values.yaml

@@ -17,6 +17,12 @@ addToDefaultScheduler: true
 # and it will only affect pods with: [schedulerName: kube-arch-scheduler].
 nonDefaultSchedulerName: kube-arch-scheduler
 
+# dockerconfig.json is a base64 encoded docker config file, it will be used
+# to pull the image manifests. The pod needs to have the secret mounted at
+# /root/.docker/config.json. This is only needed if you are using a private
+# registry. If you are using a public registry, you can leave this empty.
+dockerConfigSecretName: ""
+
 # The weight of each architecture,
 # if a pod can sit on both, it will prefer the one with the higher weight.
 # The default weight of undefined architectures is 0, meaning none will have