Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support private docker images #146

Merged
merged 5 commits into from
Jul 28, 2023

Conversation

Inkvi
Copy link
Collaborator

@Inkvi Inkvi commented Jul 7, 2023

No description provided.

@Anmol1696
Copy link
Collaborator

This is something we would have to make for all the images then, and not just the chain images. I wonder if there is a way to have docker image secrets so that it can pull from public and private registries.

We would also need to expose this in the values.yaml file for the helm chart. There should be information around how helm handles image pull secrets.

@Inkvi
Copy link
Collaborator Author

Inkvi commented Jul 10, 2023

This is something we would have to make for all the images then, and not just the chain images.

I added the private image support for the go-relayer in #147. I can extend it to other relayers. For other types of services I don't see a necessity for private images.

I wonder if there is a way to have docker image secrets so that it can pull from public and private registries.
Not sure what you mean by that. Any docker image secret should be able to pull from a public registry. For private docker images, you have to be explicit with k8s. I didn't find a way for k8s just to pick up the authorizations docker already has.

We would also need to expose this in the values.yaml file for the helm chart. There should be information around how helm handles image pull secrets.

imagePullSecrets is not a required parameter so I don't think you have to modify values.yaml. For example, I was able to test polymer chain with the current values.yaml and this config:

  - name: polymer
    type: custom
    numValidators: 1
    image: ghcr.io/polymerdao/polymer:v0.0.1-rc4
    home: /home/heighliner/.polymer
    binary: polymerd
    prefix: polymer
    denom: token
    coins: 100000000000000token
    hdPath: m/44'/118'/0'/0/0
    coinType: 118
    repo: https://github.com/polymerdao/polymerase/
    imagePullSecrets:
      - name: ghcr

@Inkvi
Copy link
Collaborator Author

Inkvi commented Jul 19, 2023

@Anmol1696 I did a little bit of refactoring and put the logic into a helper

@Inkvi Inkvi requested a review from Anmol1696 July 19, 2023 22:55
{{- range $imagePullSecrets }}
- name: {{ .name }}
{{- end }}
{{- include "imagePullSecrets" $relayer | indent 6 }}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since this is added to go-relayer, it might just make sense to add it to other relayers, explorers and others too.
What do you think?

@Inkvi Inkvi requested a review from Anmol1696 July 20, 2023 17:01
Copy link
Collaborator

@Anmol1696 Anmol1696 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Anmol1696 Anmol1696 merged commit 7f7a144 into cosmology-tech:main Jul 28, 2023
7 checks passed
@Inkvi Inkvi deleted the imagePullSecrets branch August 10, 2023 00:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants