Skip to content

Comments

[helm] Enable pulling from private Docker registry#2692

Open
affo wants to merge 1 commit intoapache:mainfrom
affo:la-pull-secrets
Open

[helm] Enable pulling from private Docker registry#2692
affo wants to merge 1 commit intoapache:mainfrom
affo:la-pull-secrets

Conversation

@affo
Copy link

@affo affo commented Feb 16, 2026

Purpose

Linked issue: close #2691

Brief change log

  • Uses images.registry
  • Renders image.pullSecrets

Makes it possible to use an alternate registry and use pull secrets to pull the image if the registry is private.

I favored the approach of adding pull secrets directly to STS and not in the service account for bigger flexibility as the user can still link another service account to pods while pull secrets are attached to pods.

Tests

No test introduced.
Would be good to add tests once this PR lands (introduces helm unittest + github workflow).

API and Format

NO

Documentation

No new feature, it is already documented in the README.

Copy link
Contributor

@morazow morazow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thanks 🚀

Copy link
Contributor

@xx789633 xx789633 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR @affo I just left some minor suggestions.

Image name
*/}}
{{- define "fluss.image" -}}
{{- $image := printf "%s:%s" .Values.image.repository .Values.image.tag }}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If a user omits image.tag or sets it to empty, this would produce an invalid image reference like apache/fluss:. Maybe we need to add a fallback here.

Image name
*/}}
{{- define "fluss.image" -}}
{{- $image := printf "%s:%s" .Values.image.repository .Values.image.tag }}
Copy link
Contributor

@xx789633 xx789633 Feb 19, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If a user provides a purely numeric tag (e.g. tag: 1.0), printf "%s" in Helm may output apache/fluss:%!s(float64=1).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[helm] Enable pulling from private Docker registry

3 participants