Fix issue15 private registry support

interlink/templates/tests/test-connection.yaml

@@ -2,15 +2,19 @@ apiVersion: v1
 kind: Pod
 metadata:
   name: "{{ include "interlink.fullname" . }}-test-connection"
+  namespace: {{ .Release.Namespace}}
   labels:
     {{- include "interlink.labels" . | nindent 4 }}
   annotations:
     "helm.sh/hook": test
 spec:
   serviceAccountName: {{ .Release.Name }}-test
+  imagePullSecrets:
+{{ toYaml .Values.global.images.pullSecrets | indent 4 }}
   containers:
     - name: kubectl
-      image: bitnami/kubectl
+      image: "{{ .Values.interlinkTestConnection.image.registry }}/{{ .Values.interlinkTestConnection.image.repository}}:{{ .Values.interlinkTestConnection.image.tag }}"
+      imagePullPolicy: "{{ .Values.global.images.pullPolicy }}"
       command: ['sh', '-c']
       args:
         - >
@@ -25,13 +29,15 @@ spec:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: {{ .Release.Name }}-test 
+  name: {{ .Release.Name }}-test
+  namespace: {{ .Release.Namespace}}
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: {{ .Release.Name }}-node-reader
+  namespace: {{ .Release.Namespace}}
 rules:
 - apiGroups: [""]
   resources: ["nodes"]
@@ -42,10 +48,10 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: {{ .Release.Name }}-read-nodes
+  namespace: {{ .Release.Namespace}}
 subjects:
 - kind: ServiceAccount
-  name: {{ .Release.Name }}-test 
-  namespace: {{ .Release.Namespace }} 
+  name: {{ .Release.Name }}-test
 roleRef:
   kind: Role
   name: {{ .Release.Name }}-node-reader

interlink/templates/virtual-kubelet.yaml

@@ -26,11 +26,13 @@ spec:
       tolerations:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      imagePullSecrets:
+{{ toYaml .Values.global.images.pullSecrets | indent 8 }}
       containers:
       {{- if .Values.plugin.enabled }}
       - name: plugin
-        image: "{{.Values.plugin.image}}"
-        imagePullPolicy: Always
+        image: "{{ .Values.plugin.image.registry }}/{{ .Values.plugin.image.repository}}:{{ .Values.plugin.image.tag }}"
+        imagePullPolicy: "{{ .Values.global.images.pullPolicy }}"
         {{- if .Values.plugin.privileged }}
         securityContext:
           privileged: true
@@ -61,8 +63,8 @@ spec:
       {{- end }}
       {{- if .Values.interlink.enabled }}
       - name: interlink
-        image: "{{.Values.interlink.image}}"
-        imagePullPolicy: Always
+        image: "{{ .Values.interlink.image.registry }}/{{ .Values.interlink.image.repository }}:{{ .Values.interlink.image.tag }}"
+        imagePullPolicy: "{{ .Values.global.images.pullPolicy }}"
         env:
           - name: INTERLINKCONFIGPATH
             value: "/etc/interlink/InterLinkConfig.yaml"
@@ -83,8 +85,8 @@ spec:
           {{- end }}
       {{- end }}
       - name: vk
-        image: {{.Values.virtualNode.image}}
-        imagePullPolicy: Always
+        image: "{{ .Values.virtualNode.image.registry }}/{{ .Values.virtualNode.image.repository }}:{{ .Values.virtualNode.image.tag }}"
+        imagePullPolicy: "{{ .Values.global.images.pullPolicy }}"
         env:
         - name: NODENAME
           value: {{.Values.nodeName}}
@@ -140,8 +142,8 @@ spec:
         {{- end }}
       {{- if .Values.OAUTH.enabled }}
       - name: refresh-token
-        image: "{{.Values.OAUTH.image}}"
-        imagePullPolicy: Always
+        image: "{{ .Values.OAUTH.image.registry }}/{{ .Values.OAUTH.image.repository }}:{{ .Values.OAUTH.image.tag }}"
+        imagePullPolicy: "{{ .Values.global.images.pullPolicy }}"
         env:
         - name: IAM_TOKEN_ENDPOINT
           value: {{.Values.OAUTH.TokenURL}}
@@ -177,8 +179,8 @@ spec:
       {{- end }}
       {{- if .Values.sshBastion.enabled }}
       - name: ssh-bastion
-        image: "{{.Values.sshBastion.image}}"
-        imagePullPolicy: Always
+        image: "{{ .Values.sshBastion.image.registry }}/{{ .Values.sshBastion.image.repository }}:{{ .Values.sshBastion.image.tag }}"
+        imagePullPolicy: "{{ .Values.global.images.pullPolicy }}"
         ports:
         - containerPort: 2222
         - containerPort: 22

interlink/values.yaml

@@ -4,8 +4,19 @@
 
 nodeName: virtual-node
 
+global:
+  images:
+    # -- imagePullPolicy to apply to all containers
+    pullPolicy: Always
+    # -- Secrets with credentials to pull images from a private registry
+    # Eg: pullSecrets: [ name: pull-secret1, name: pull-secret2 ]
+    pullSecrets: []
+
 interlink:
-  image: ghcr.io/interlink-hq/interlink/interlink:latest
+  image:
+    registry: "ghcr.io"
+    repository: "interlink-hq/interlink/interlink"
+    tag: "latest"
   enabled: false
   exportPodData: false
   dataRootVolume: ""
@@ -48,8 +59,17 @@ interlink:
   #     apptainer_options: {}
   #     volume_options: {}
 
+interlinkTestConnection:
+  image:
+    registry: "docker.io"
+    repository: "bitnami/kubectl"
+    tag: "latest"
+
 virtualNode:
-  image: ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest
+  image:
+    registry: "ghcr.io"
+    repository: "interlink-hq/interlink/virtual-kubelet-inttw"
+    tag: "latest"
   resources:
     CPUs: 8
     memGiB: 49
@@ -110,8 +130,11 @@ virtualNode:
 
 plugin:
   enabled: false
-  image: ""
-  command: []
+  image:
+    registry: ""
+    repository: ""
+    tag: ""
+  commands: []
   args: []
   # content of the "config" will be mounted as /etc/interlink/plugin.yaml
   config: ""
@@ -132,7 +155,10 @@ plugin:
 
 sshBastion:
   enabled: false
-  image: lscr.io/linuxserver/openssh-server:latest
+  image:
+    registry: "lscr.io"
+    repository: "linuxserver/openssh-server"
+    tag: "latest"
   clientKeys:
     authorizedKeys: ""
     keysURL: ""
@@ -148,7 +174,10 @@ sshBastion:
 # disable OAUTH when using sockets for communication in the in-cluster mode
 OAUTH:
   enabled: false
-  image: ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw-refresh:latest
+  image:
+    registry: "ghcr.io"
+    repository: "interlink-hq/interlink/virtual-kubelet-inttw-refresh"
+    tag: "latest"
   TokenURL: DUMMY
   ClientID: DUMMY
   ClientSecret: DUMMY