Add imagePullSecrets support to helm hook jobs (#741)

* Add imagePullSecrets support to helm hook jobs Hook jobs lacked imagePullSecrets configuration on their pod specs, causing image pull failures in environments using private registries with authentication * spire-server: post-install, pre-upgrade, post-upgrade, pre-delete hooks * spire-oidc-discovery-provider: pre-delete hook * spike-nexus: bootstrap hook * spire: global imagePullSecrets Fixes #649 Signed-off-by: Rowan Ruseler <[email protected]> * Document global.imagePullSecrets parameter Signed-off-by: Rowan Ruseler <[email protected]> * Replaced non functioning 'or' with 'coalesce' Signed-off-by: Rowan Ruseler <[email protected]> --------- Signed-off-by: Rowan Ruseler <[email protected]>
2026-02-11 15:16:16 -08:00
parent 141c8865a3
commit 75ffbd06f5
16 changed files with 36 additions and 8 deletions
@@ -34,7 +34,7 @@ spec:
        {{- toYaml . | nindent 8 }}
        {{- end }}
    spec:
-      {{- with .Values.imagePullSecrets }}
+      {{- with (coalesce .Values.imagePullSecrets .Values.global.imagePullSecrets) }}
      imagePullSecrets:
        {{- toYaml . | nindent 8 }}
      {{- end }}
@@ -57,6 +57,10 @@ spec:
      name: {{ include "spiffe-oidc-discovery-provider.fullname" . }}-pre-delete
    spec:
      restartPolicy: Never
+      {{- with (coalesce .Values.imagePullSecrets .Values.global.imagePullSecrets) }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
      serviceAccountName: {{ include "spiffe-oidc-discovery-provider.serviceAccountName" . }}-pre-delete
      securityContext:
        {{- include "spire-lib.podsecuritycontext" . | nindent 8 }}