search

deislabs / cnab-operator

Experimental CNAB operator for Kubernetes. WIP.
MIT License
7 stars 1 forks source link

Well-known secret for storing the OCI registry auth token #3

Open radu-matei opened 5 years ago

radu-matei commented 5 years ago

If the bundle is stored in a private OCI registry, we need to store the access token for the registry in a Kubernetes secret.

I think we can use an imagePullSecret and attach it to the controller pod, I'll investigate some more.

technosophos commented 5 years ago

For initial release, I think it is fair to stipulate that imagePullSecret is used, and that it is the devops responsibility to create these on their own (we can, of course, provide docs)