Add docker-registry secrets to OCI doc

A new statement is added to specify that docker-registry secrets are
accepted by OCI Helm repositories.

Signed-off-by: Soule BA <soule@weave.works>
This commit is contained in:
Soule BA 2022-07-04 17:28:31 +02:00
parent 9df01026ce
commit 6a8369f3b1
No known key found for this signature in database
GPG Key ID: 4D40965192802994
1 changed files with 12 additions and 1 deletions

View File

@ -368,7 +368,7 @@ metadata:
namespace: default
spec:
interval: 5m0s
url: oci://ghcr.io/stefanprodan/charts
url: oci://ghcr.io/my-user/my-private-repo
type: "oci"
secretRef:
name: oci-creds
@ -383,6 +383,17 @@ stringData:
password: 123456
```
For OCI Helm repositories, Kubernetes secrets of type [kubernetes.io/dockerconfigjson](https://kubernetes.io/docs/concepts/configuration/secret/#secret-types) are also supported.
It is possible to create one such secret with `kubectl create secret docker-registry`
or using the Flux CLI:
```yaml
flux create secret oci ghcr-auth \
--url=ghcr.io \
--username=flux \
--password=${GITHUB_PAT}
```
#### TLS authentication
**Note:** TLS authentication is not yet supported by OCI Helm repositories.