Add pull secret for default backend

Author: jgranieczny

kubernetes-ingress/templates/_helpers.tpl

@@ -53,6 +53,13 @@ Encode an imagePullSecret string.
 {{- printf "{\"auths\": {\"%s\": {\"auth\": \"%s\"}}}" .Values.controller.imageCredentials.registry (printf "%s:%s" .Values.controller.imageCredentials.username .Values.controller.imageCredentials.password | b64enc) | b64enc }}
 {{- end }}
 
+{{/*
+Encode an imagePullSecret string for the default backend.
+*/}}
+{{- define "kubernetes-ingress.defaultBackend.imagePullSecret" }}
+{{- printf "{\"auths\": {\"%s\": {\"auth\": \"%s\"}}}" .Values.defaultBackend.imageCredentials.registry (printf "%s:%s" .Values.defaultBackend.imageCredentials.username .Values.defaultBackend.imageCredentials.password | b64enc) | b64enc }}
+{{- end }}
+
 {{/*
 Generate default certificate for HAProxy.
 */}}

kubernetes-ingress/templates/default-backend-deployment.yaml

@@ -51,6 +51,13 @@ spec:
       topologySpreadConstraints:
         {{- toYaml . | nindent 8 }}
 {{- end }}
+{{- if .Values.defaultBackend.imageCredentials.registry }}
+      imagePullSecrets:
+      - name: {{ template "kubernetes-ingress.defaultBackend.fullname" . }}
+{{- else if .Values.defaultBackend.existingImagePullSecret }}
+      imagePullSecrets:
+      - name: {{ .Values.defaultBackend.existingImagePullSecret }}
+{{- end }}
 {{- if .Values.controller.priorityClassName }}
       priorityClassName: {{ .Values.controller.priorityClassName }}
 {{- end }}

kubernetes-ingress/templates/default-backend-pullsecret.yaml

@@ -0,0 +1,32 @@
+{{/*
+Copyright 2019 HAProxy Technologies LLC
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/}}
+
+{{- if .Values.defaultBackend.imageCredentials.registry }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ template "kubernetes-ingress.defaultBackend.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: {{ template "kubernetes-ingress.name" . }}
+    helm.sh/chart: {{ template "kubernetes-ingress.chart" . }}
+    app.kubernetes.io/managed-by: {{ .Release.Service }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+type: kubernetes.io/dockerconfigjson
+data:
+  .dockerconfigjson: {{ template "kubernetes-ingress.defaultBackend.imagePullSecret" . }}
+{{- end }}

kubernetes-ingress/values.yaml

@@ -531,6 +531,14 @@ defaultBackend:
     #       metricName: haproxy_backend_current_sessions
     #       targetAverageValue: 2000
 
+  ## Private Registry configuration
+  ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
+  imageCredentials:
+    registry: null
+    username: null
+    password: null
+  existingImagePullSecret: null
+  
   ## Listener port configuration
   ## ref: https://kubernetes.io/docs/concepts/services-networking/connect-applications-service/
   containerPort: 8080