Add docker-registry secrets to OCI doc
A new statement is added to specify that docker-registry secrets are accepted by OCI Helm repositories. Signed-off-by: Soule BA <soule@weave.works>
This commit is contained in:
parent
9df01026ce
commit
6a8369f3b1
|
@ -368,7 +368,7 @@ metadata:
|
||||||
namespace: default
|
namespace: default
|
||||||
spec:
|
spec:
|
||||||
interval: 5m0s
|
interval: 5m0s
|
||||||
url: oci://ghcr.io/stefanprodan/charts
|
url: oci://ghcr.io/my-user/my-private-repo
|
||||||
type: "oci"
|
type: "oci"
|
||||||
secretRef:
|
secretRef:
|
||||||
name: oci-creds
|
name: oci-creds
|
||||||
|
@ -383,6 +383,17 @@ stringData:
|
||||||
password: 123456
|
password: 123456
|
||||||
```
|
```
|
||||||
|
|
||||||
|
For OCI Helm repositories, Kubernetes secrets of type [kubernetes.io/dockerconfigjson](https://kubernetes.io/docs/concepts/configuration/secret/#secret-types) are also supported.
|
||||||
|
It is possible to create one such secret with `kubectl create secret docker-registry`
|
||||||
|
or using the Flux CLI:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
flux create secret oci ghcr-auth \
|
||||||
|
--url=ghcr.io \
|
||||||
|
--username=flux \
|
||||||
|
--password=${GITHUB_PAT}
|
||||||
|
```
|
||||||
|
|
||||||
#### TLS authentication
|
#### TLS authentication
|
||||||
|
|
||||||
**Note:** TLS authentication is not yet supported by OCI Helm repositories.
|
**Note:** TLS authentication is not yet supported by OCI Helm repositories.
|
||||||
|
|
Loading…
Reference in New Issue