我试图在图表中为imagePullSecrets写一个YAML文件 . 我已经阅读了here的图表提示,
我也知道如何创建imagePullSecret:
kubectl create secret docker-registry mydockercfg \
--docker-server "https://eu.gcr.io" \
--docker-username _json_key \
--docker-email not@val.id \
--docker-password=$(cat your_service_account.json)
但我不知道如何将“your_service_account.json”的内容填入该图表的values.yaml的密码 . 我可以更改名称“your_service_account.json”以更新values.yaml的密码 .
目前,我的实施如下:
$ cat values.yaml
secretName: gcr-json-key-test
imageCredentials:
registry: us.gcr.io/xxxxx
username: _json_key
password:
secrets.yaml的内容:
$ cat templates/secrets.yaml
apiVersion: v1
kind: Secret
metadata:
name: {{ .Values.secretName }}
labels:
app: {{ template "fullname" . }}
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
release: "{{ .Release.Name }}"
heritage: "{{ .Release.Service }}"
type: kubernetes.io/dockercfg
data:
.dockerconfigjson: {{ template "imagePullSecret" . }}
_helpers.tpl的内容:
$ cat templates/_helpers.tpl
{{/*
Expand the name of the chart.
*/}}
{{- define "name" -}}
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
{{- end -}}
{{/*
Create a default fully qualified app name.
We truncate at 63 chars because some Kubernetes name fields are limited
to this (by the DNS naming spec).
*/}}
{{- define "fullname" -}}
{{- $name := default .Chart.Name .Values.nameOverride -}}
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
{{- end -}}
{{- define "imagePullSecret" }}
{{- printf "{\"auths\": {\"%s\": {\"auth\": \"%s\"}}}" .Values.imageCredentials.registry (printf "%s:%s" .Values.imageCredentials.username .Values.imageCredentials.password | b64enc) | b64enc }}
{{- end }}
然后使用
$ helm install ./secrets --set imageCredentials.password "$(cat ./my_service_account.json)"
会导致错误:
错误:此命令需要1个参数:图表名称
我怎么解决这个问题?
1 回答
可以使用以下步骤创建和部署它:
Steps:
或将其存储在文件(.dockercfg)中并使用以下命令
希望这会有用...... !! :)