Add docker-registry secrets to OCI doc

A new statement is added to specify that docker-registry secrets are
accepted by OCI Helm repositories.

Signed-off-by: Soule BA <soule@weave.works>
This commit is contained in:
Soule BA 2022-07-04 17:28:31 +02:00
parent 9df01026ce
commit 6a8369f3b1
No known key found for this signature in database
GPG Key ID: 4D40965192802994
1 changed files with 12 additions and 1 deletions

View File

@ -368,7 +368,7 @@ metadata:
namespace: default namespace: default
spec: spec:
interval: 5m0s interval: 5m0s
url: oci://ghcr.io/stefanprodan/charts url: oci://ghcr.io/my-user/my-private-repo
type: "oci" type: "oci"
secretRef: secretRef:
name: oci-creds name: oci-creds
@ -383,6 +383,17 @@ stringData:
password: 123456 password: 123456
``` ```
For OCI Helm repositories, Kubernetes secrets of type [kubernetes.io/dockerconfigjson](https://kubernetes.io/docs/concepts/configuration/secret/#secret-types) are also supported.
It is possible to create one such secret with `kubectl create secret docker-registry`
or using the Flux CLI:
```yaml
flux create secret oci ghcr-auth \
--url=ghcr.io \
--username=flux \
--password=${GITHUB_PAT}
```
#### TLS authentication #### TLS authentication
**Note:** TLS authentication is not yet supported by OCI Helm repositories. **Note:** TLS authentication is not yet supported by OCI Helm repositories.