add pull secret (#9)

Author: james-otten

.github/workflows/helm_deploy.yaml

@@ -48,6 +48,9 @@ jobs:
             -f ./website-map/values.yaml \
             --set app_namespace="${{ vars.APP_NAMESPACE }}" \
             --set fqdn="${{ vars.FQDN }}" \
+            --set imageCredentials.username="${{ secrets.PULL_SECRET_USERNAME }}" \
+            --set imageCredentials.password="${{ secrets.PULL_SECRET_PASSWORD }}" \
+            --set imageCredentials.email="${{ secrets.PULL_SECRET_EMAIL }}" \
             --set github_client_id="${{ secrets.GH_CLIENT_ID }}" \
             --set github_install_id="${{ secrets.GH_INSTALL_ID }}" \
             --set github_secret="${{ secrets.GH_APP_KEY }}"

website-map/templates/_helpers.tpl

@@ -60,3 +60,9 @@ Create the name of the service account to use
 {{- default "default" .Values.serviceAccount.name }}
 {{- end }}
 {{- end }}
+
+{{- define "imagePullSecret" }}
+{{- with .Values.imageCredentials }}
+{{- printf "{\"auths\":{\"%s\":{\"username\":\"%s\",\"password\":\"%s\",\"email\":\"%s\",\"auth\":\"%s\"}}}" .registry .username .password .email (printf "%s:%s" .username .password | b64enc) | b64enc }}
+{{- end }}
+{{- end }}

website-map/templates/backend.yaml

@@ -25,6 +25,10 @@ spec:
     spec:
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
+      {{- if .Values.imageCredentials }}
+      imagePullSecrets:
+        - name: pull-secret
+      {{- end }}
       containers:
         - name: {{ .Chart.Name }}-backend
           securityContext:

website-map/values.yaml

@@ -1,7 +1,7 @@
 backend:
   replicaCount: 1
   image:
-    repository: nginx
+    repository: docker.io/nginx
     pullPolicy: IfNotPresent
     tag: "latest"
   service:
@@ -16,10 +16,13 @@ backend:
 
 cron:
   image:
-    repository: python
+    repository: docker.io/python
     pullPolicy: IfNotPresent
     tag: "3.13-alpine"
 
+imageCredentials:
+  registry: docker.io
+
 pvc_name: "website-map-data"
 pvc_size: "1Gi"