Added examples with imagePullSecrets

examples/manifests/mariadb_full.yaml

@@ -15,6 +15,8 @@ spec:
 
   image: mariadb:11.0.3
   imagePullPolicy: IfNotPresent
+  imagePullSecrets:
+    - name: registry # run 'make registry-secret' to generate a secret from ~/.docker/config
 
   port: 3306
 

examples/manifests/maxscale_full.yaml

@@ -5,6 +5,8 @@ metadata:
 spec:
   image: mariadb/maxscale:23.08
   imagePullPolicy: IfNotPresent
+  imagePullSecrets:
+    - name: registry # run 'make registry-secret' to generate a secret from ~/.docker/config
 
   replicas: 3
 

make/deploy.mk

@@ -50,6 +50,12 @@ registry: ## Configure registry auth.
 		docker cp $(DOCKER_CONFIG) $$node:/var/lib/kubelet/config.json; \
 	done
 
+REGISTRY_PULL_SECRET ?= registry
+.PHONY: registry-secret
+registry-secret: ## Configure registry pull secret.
+	@$(KUBECTL) create secret docker-registry $(REGISTRY_PULL_SECRET) --from-file=.dockerconfigjson=$(DOCKER_CONFIG) --dry-run=client -o yaml \
+		| $(KUBECTL) apply -f -
+
 OCP_REGISTRY_URL ?= https://index.docker.io/v1/
 .PHONY: openshift-registry
 openshift-registry-add: oc jq ## Add catalog registry in OpenShift global config.

make/pki.mk

@@ -29,7 +29,7 @@ MINIO_CERT_SUBJECT ?= "/CN=minio.minio.svc.cluster.local"
 MINIO_CERT_ALT_NAMES ?= "subjectAltName=DNS:minio,DNS:minio.minio,DNS:minio.minio.svc.cluster.local"
 MINIO_CERT_NAMESPACE ?= minio
 .PHONY: cert-minio
-cert-minio: ca ## Generates minio private key and certificate for local development.
+cert-minio: ca kubectl ## Generates minio private key and certificate for local development.
 	CERT_DIR=$(MINIO_CERT_DIR) CERT_SUBJECT=$(MINIO_CERT_SUBJECT) CERT_ALT_NAMES=$(MINIO_CERT_ALT_NAMES) $(MAKE) cert
 	$(KUBECTL) create namespace $(MINIO_CERT_NAMESPACE) \
 		--dry-run=client -o yaml | $(KUBECTL) apply -f -