default-imagepullsecrets

default-imagepullsecrets

The admission controller that applies default imagePullSecrets to pods.

Getting Started

Install cert-manager

default-imagepullsecrets uses cert-manager for certificate management of Admission Webhook. Make sure you have already installed cert-manager before you start.

• Install cert-manager on kubernetes

Deploy default-imagepullsecrets

export VERSION=latest
export DEFAULT_IMAGEPULLSECRETS="mysecret0,my-secret1"
envsubst < default-imagepullsecrets.yaml | kubectl apply -f -

# Wait for default-imagepullsecrets to be rollout
kubectl rollout status -n default-imagepullsecrets deployment default-imagepullsecrets

# Deploy MutatingWebHookConfiguration
kubectl apply -f mutating-webhook-configuration.yaml

# Run a test pod
kubectl run test --image=nginx
# Make sure that default imagePullSecrets are applied
kubectl get pods test -o jsonpath='{.spec.imagePullSecrets}{"\n"}'

Clean up

kubectl delete -f mutating-webhook-configuration.yaml

export VERSION=latest
export DEFAULT_IMAGEPULLSECRETS="mysecret0,my-secret1"
envsubst < default-imagepullsecrets.yaml | kubectl delete -f -