Allow imagePullSecrets to be added via Helm.

manifests/helm/build/templates/overlays/deployment.yaml

@@ -6,6 +6,8 @@ metadata:
 spec:
   template:
     spec:
+      imagePullSecrets:
+        - name: '{{ .Values.imageCredentials.pullSecretName }}'
       containers:
         - name: contrast-agent-operator
           env:

manifests/helm/templates/image-pull-secrets.yaml.tpl

@@ -0,0 +1,16 @@
+{{- define "imagePullSecret" }}
+{{- with .Values.imageCredentials }}
+{{- printf "{\"auths\":{\"%s\":{\"username\":\"%s\",\"password\":\"%s\",\"email\":\"%s\",\"auth\":\"%s\"}}}" .registry .username .password .email (printf "%s:%s" .username .password | b64enc) | b64enc }}
+{{- end }}
+{{- end }}
+{{ if .Values.imageCredentials.enabled }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .Values.imageCredentials.pullSecretName }}
+  namespace: >-
+    {{ .Values.namespace }}
+type: kubernetes.io/dockerconfigjson
+data:
+  .dockerconfigjson: {{ template "imagePullSecret" . }}
+{{ end }}

manifests/helm/values.yaml

@@ -6,6 +6,16 @@ image:
   # Defaults to the version specified in Chart.AppVersion.
   tag:
 
+imageCredentials:
+  # Name of the registry credential secret that should be used to pull the above image.
+  pullSecretName: image-credentials
+  # If enabled, a registry credential secret will be created using the above name and below credentials.
+  enabled: false
+  registry: contrast
+  username:
+  password:
+  email:
+
 operator:
   # The default registry to use, defaults to docker.io/contrast.
   defaultRegistry: contrast