Remove demo-go-app-image-pull-secret (homelab Harbor project now public)
No longer needed now that anonymous pull works — pairs with devops-helm-charts#efc2c4f dropping the corresponding pullSecret reference from demo-go-app's values. app-of-secretstores has automated prune, so this deletion applies on its own on next sync.
This commit is contained in:
@@ -1,35 +0,0 @@
|
||||
# imagePullSecret for demo-go-app's own Deployment — separate from
|
||||
# harbor-robot-dockerconfig (which lives in the jenkins namespace, for
|
||||
# the build pod's docker push). This one lands in the demo-go-app
|
||||
# namespace itself, since imagePullSecrets must be in the same namespace
|
||||
# as the pod referencing them. Same underlying robot account/Vault path
|
||||
# (harbor/jenkins-robot already has push+pull scope), just synced to a
|
||||
# second namespace and keyed to the same Contour ingress hostname used
|
||||
# for the image reference in values/demo-go-app/demo-go-app/values.yaml.
|
||||
apiVersion: external-secrets.io/v1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: demo-go-app-image-pull-secret
|
||||
namespace: demo-go-app
|
||||
spec:
|
||||
refreshInterval: 1h
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
kind: ClusterSecretStore
|
||||
target:
|
||||
name: demo-go-app-image-pull-secret
|
||||
creationPolicy: Owner
|
||||
template:
|
||||
type: kubernetes.io/dockerconfigjson
|
||||
data:
|
||||
.dockerconfigjson: |
|
||||
{"auths":{"harbor.192.168.1.7.nip.io":{"username":"{{ .username }}","password":"{{ .password }}","auth":"{{ printf "%s:%s" .username .password | b64enc }}"}}}
|
||||
data:
|
||||
- secretKey: username
|
||||
remoteRef:
|
||||
key: harbor/jenkins-robot
|
||||
property: username
|
||||
- secretKey: password
|
||||
remoteRef:
|
||||
key: harbor/jenkins-robot
|
||||
property: password
|
||||
Reference in New Issue
Block a user