feat(homepage): add ghcr pull secret and configure imagePullSecrets

Author: soohyunme

services/homepage/base/deployment.yaml

@@ -16,6 +16,8 @@ spec:
         app: homepage
         component: backend
     spec:
+      imagePullSecrets:
+      - name: ghcr-creds
       containers:
       - name: api
         image: ghcr.io/pseudo-lab/devfactory-homepage-backend # Tag will be managed by Kustomize/CI
@@ -51,6 +53,8 @@ spec:
         app: homepage
         component: frontend
     spec:
+      imagePullSecrets:
+      - name: ghcr-creds
       containers:
       - name: frontend
         image: ghcr.io/pseudo-lab/devfactory-homepage-frontend # Tag will be managed by Kustomize/CI

services/homepage/overlays/prod/ghcr-pull-secret.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  creationTimestamp: null
+  name: ghcr-creds
+spec:
+  encryptedData:
+    .dockerconfigjson: AgAC20R9FUZ24WFFH6I7bT6eDeEJnwueGsduII6HcRSFrws7RbpII8yPADy40E27Z090Yv8HQO4UhPucTzVKM6ukwI1HRxJIdPZFOGn5DAQj1yCQIpqdsTEomEdMcm2TVRN1NzBI2//93Q+ynRaixlL+Dr67JpFcqVdjJ78o8B2fh5Im6pTZVlo6E2JlKMkAa36dB8tJHoTBiZAEJIxTGELaRAVn081+E3iS5QvEOfqjeOohWGuQyKxphTCznX4iU8vQnuMW2rDSK8FD3ShN5pHW6W7d5SU5oPjuYYOdgLsq+Cp8AOVT3pMDv9kbfLHwD6fTnxik5P7aAPLioo7qM9YZicX4E7a2riEl56iRolmcbtOPOYm8AsxGtSP1JqoUzzVYDiWytmeHgwE5IY3EGmCmQQUrcPGJhfzNpVZ/d585L916VkDsmjl5iykutVhQFy5XI1LhFt8MlFA7TtZUPQG+YqkBUUC1VuB88wvSjpYfgL/kcnptyQ7To9TG99A7pboL7jQcEBWNrbPbCx5XGPRrXPC7eYk+ndamaulNEJj4Lms2X0imyr9BhYlNPJGgBZP80uaQkZf5IlS25dGwhkVkA0GHLlDcvD/iqgqxxrGa6+0xl/0VO5GuNEC8hEujvRe/Bf+Rq1wc/9vSISFWF8ljTY46AkBdQUkIKv7rA0VWAd8WXQ40C3yruu7sYg5Gy+0gLPxF92ysTLm9gJmH6D+u7r+xaqskDYMTvlGjDQqyU4Iquxo6zFAjT3P+jtW6xeqT1Pqf3CkjslwNW8IYuc6vRBghxhDQNIz3SRtC3uQuMOlM79Bcg/ByrO20K0ISaM0nydBhUoEJRcR7vjeMTaMTPRnmGDr6JiCS2LJrdLAvVEeSn9vTLVNjQThCwPvAnHV6v5qWr5tnKlo5BSbddwbe/8r/ki+P658JVHzKA6wGiKzyDWYzu54H
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      creationTimestamp: null
+      name: ghcr-creds
+    type: kubernetes.io/dockerconfigjson

services/homepage/overlays/prod/kustomization.yaml

@@ -7,6 +7,7 @@ resources:
 - namespace.yaml
 - ingress.yaml
 - sealed-secret.yaml
+- ghcr-pull-secret.yaml
 
 commonLabels:
   environment: production