Merge pull request #697 from AmericanAirlines/Add-Image-Pull-Secrets-…

…to-Fulcio Add image pull secrets to fulcio
sigstore · Jan 31, 2024 · c581846 · c581846
2 parents baf04c8 + bd16df7
commit c581846
Show file tree

Hide file tree

Showing 6 changed files with 16 additions and 2 deletions.
diff --git a/charts/fulcio/Chart.yaml b/charts/fulcio/Chart.yaml
@@ -5,7 +5,7 @@ description: |
 
 type: application
 
-version: 2.3.14
+version: 2.3.15
 appVersion: 1.4.3
 
 keywords:

diff --git a/charts/fulcio/README.md b/charts/fulcio/README.md
@@ -2,7 +2,7 @@
 
 <!-- This README.md is generated. Please edit README.md.gotmpl -->
 
-![Version: 2.3.14](https://img.shields.io/badge/Version-2.3.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.4.3](https://img.shields.io/badge/AppVersion-1.4.3-informational?style=flat-square)
+![Version: 2.3.15](https://img.shields.io/badge/Version-2.3.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.4.3](https://img.shields.io/badge/AppVersion-1.4.3-informational?style=flat-square)
 
 Fulcio is a free code signing Certificate Authority, built to make short-lived certificates available to anyone.
 
@@ -105,6 +105,7 @@ helm uninstall [RELEASE_NAME]
 | ctlog.namespace.create | bool | `true` |  |
 | ctlog.namespace.name | string | `"ctlog-system"` |  |
 | forceNamespace | string | `""` |  |
+| imagePullSecrets | list | `[]` |  |
 | namespace.create | bool | `false` |  |
 | namespace.name | string | `"fulcio-system"` |  |
 | server.args.aws_hsm_root_ca_path | string | `nil` |  |

diff --git a/charts/fulcio/templates/createcerts-job.yaml b/charts/fulcio/templates/createcerts-job.yaml
@@ -19,6 +19,10 @@ spec:
       serviceAccountName: {{ template "fulcio.serviceAccountName.createcerts" . }}
       restartPolicy: Never
       automountServiceAccountToken: {{ .Values.createcerts.serviceAccount.mountToken }}
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
       containers:
         - name: {{ template "fulcio.createcerts.fullname" . }}
           image: "{{ template "fulcio.image" .Values.createcerts.image }}"

diff --git a/charts/fulcio/templates/fulcio-deployment.yaml b/charts/fulcio/templates/fulcio-deployment.yaml
@@ -23,6 +23,10 @@ spec:
       serviceAccountName: {{ template "fulcio.serviceAccountName" . }}
       # This doesn't actually use Kubernetes credentials, so don't mount them in.
       automountServiceAccountToken: {{ .Values.server.serviceAccount.mountToken }}
+      {{- if .Values.imagePullSecrets }}
+      imagePullSecrets:
+{{ toYaml .Values.imagePullSecrets | indent 8 }}
+      {{- end }}
       containers:
         - name: {{ template "fulcio.fullname" . }}
           image: "{{ template "fulcio.image" .Values.server.image }}"

diff --git a/charts/fulcio/values.schema.json b/charts/fulcio/values.schema.json
@@ -13,6 +13,9 @@
         "forceNamespace"
     ],
     "properties": {
+        "imagePullSecrets": {
+            "type": "array"
+        },
         "namespace": {
             "type": "object",
             "default": {},

diff --git a/charts/fulcio/values.yaml b/charts/fulcio/values.yaml
@@ -2,6 +2,8 @@ namespace:
   create: false
   name: fulcio-system
 
+imagePullSecrets: []
+
 config:
   contents: {}