Comments (9)
Hi, alright when I provide a secret like you describe with the credentials of our robot accounts it can authenticate and updates the container. I can give you the layout of the secret.yaml that I received from quay.io if that would help.
apiVersion: v1
kind: Secret
metadata:
name: pull-secret
data:
.dockerconfigjson:"I assume here comes the encoded auth token"==
type: kubernetes.io/dockerconfigjson
from keel.
Also, @alexanderreinelt 's example is a bit wrong. The "I assume here comes the encoded auth token"
part is actually base64 that decodes to:
{
"auths": {
"quay.io": {
"auth": "<TOKEN HERE>",
"email": ""
}
}
from keel.
should be fixed with #107
from keel.
Hey, can you check whether you have app
and release
labels in your chart template? https://github.com/webhookrelay/webhook-demo/blob/master/webhookdemo/templates/deployment.yaml#L5-L8
from keel.
Having same issue using Artifactory as a private repo. Verified that app and release are in the chart template.
from keel.
Yes I have the app
and release
labels in my deployment template.
release is set to {{ .Release.Name }}
and for app I use a hard coded value but I think that should not matter, right?
from keel.
okay, I experimented a little bit and now facing the problem that the secret is found but ignored because of the following message
level=warning msg="secrets.defaultGetter: supplied secret is not kubernetes.io/dockercfg, ignoring
[...] type=kubernetes.io/dockerconfigjson
so it seems that this type of secret is not supported, but thats the secret I got from quay.io for pulling those images and in the deployment it's working.
from keel.
ahh yes, there are several different types of secrets, current implementation works with default one from k8s docs:
kubectl create secret docker-registry myregistrykey --docker-server=https://index.docker.io/v1/ --docker-username=yourUsername --docker-password=yourPassword [email protected]
you can have a look at https://github.com/rusenask/keel/blob/master/secrets/secrets.go#L120-L140, I think it would be great to support more secret options. If you add more info on how your secret is formed - I could implement it after I am finished with approvals branch.
from keel.
+1 for supporting Quay's robot tokens.
from keel.
Related Issues (20)
- Initial tag required? HOT 1
- High CPU usage HOT 5
- Fix documentation to add "Registry" webhook
- Bump helm chart release HOT 4
- Helm chart: Ingress not working with release name
- Add support for ntfy HOT 1
- Can keel handle multiple containers in a pod deployment? HOT 3
- Cannot use registry mirror
- keel is using deprecated api /apis/batch/v1beta1/cronjobs
- Helm chart still uses app version 0.19.1
- Timeout errors trying to use polling HOT 1
- Slack integration is broken
- Allow ignoring/skipping version
- GCP registry returns 404 on digest check
- Feature request: Helm repositories
- Keel updates regexp deployment after restarting
- Keel SMTP notification error
- regexp:(dev|main) not working
- Upgrade github.com/docker/docker past v27.1.2+incompatible
- Pulling older images when the new pod creation got triggered
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from keel.