rancher / kim

In ur kubernetes, buildin ur imagez
Apache License 2.0
326 stars 19 forks source link

[feature] implement kim-native credentials #71

Closed dweomer closed 3 years ago

dweomer commented 3 years ago

Introduce kim builder login that works very much like docker login but instead stores the resulting Docker config.json in a kubernetes secret in the builder namespace. This secret is rendered to disk in a temp directory for build operations (to satisfy buildkit) but is leveraged as an in-memory keyring for shipping auth credentials for push / pull operations. If the secret setup by the login cli operation does not exist, kim reverts to the existing behavior of consulting the ${DOCKER_CONFIG}/config.json for registry credentials.

Addresses #64 Fixes #22

Signed-off-by: Jacob Blain Christen jacob@rancher.com