Image Pull Secret

Note

• Examples under each key are only to be used as a placement guide
• See the Full Examples section for complete examples.

Appears in

• .Values.imagePullSecret

Naming scheme

• $FullName-$ImagePullSecretName (release-name-chart-name-imagePullSecretName)

Tip

• Replace references to $name with the actual name you want to use.

---

Target Selector

• targetSelectAll (bool): Whether to assign the secret to all pods or not. targetSelector is ignored in this case
• targetSelector (list): Define the pod(s) to assign the secret
• targetSelector (empty): Assign the secret to the primary pod

---

imagePullSecret

Define image pull secrets

Key	imagePullSecret
Type	map
Required	❌
Helm tpl	❌
Default	{}

Example

imagePullSecret: {}

---

$name

Define image pull secret

Key	imagePullSecret.$name
Type	map
Required	✅
Helm tpl	❌
Default	{}

Example

imagePullSecret:
  pull-secret-name: {}

---

enabled

Enables or Disables the image pull secret

Key	imagePullSecret.$name.enabled
Type	bool
Required	✅
Helm tpl	✅
Default	false

Example

imagePullSecret:
  pull-secret-name:
    enabled: true

---

namespace

Define the namespace for this object

Key	imagePullSecret.$name.namespace
Type	string
Required	❌
Helm tpl	✅ (On value only)
Default	""

Example

imagePullSecret:
  pull-secret-name:
    namespace: some-namespace

---

labels

Additional labels for image pull secret

Key	imagePullSecret.$name.labels
Type	map
Required	❌
Helm tpl	✅ (On value only)
Default	{}

Example

imagePullSecret:
  pull-secret-name:
    labels:
      key: value

---

annotations

Additional annotations for image pull secret

Key	imagePullSecret.$name.annotations
Type	map
Required	❌
Helm tpl	✅ (On value only)
Default	{}

Example

imagePullSecret:
  pull-secret-name:
    annotations:
      key: value

---

targetSelectAll

Whether to assign the secret to all pods or not

Key	imagePullSecret.$name.targetSelectAll
Type	bool
Required	❌
Helm tpl	❌
Default	unset

Example

imagePullSecret:
  pull-secret-name:
    targetSelectAll: true

---

targetSelector

Define the pod(s) to assign the secret

Key	imagePullSecret.$name.targetSelector
Type	list of string
Required	❌
Helm tpl	❌
Default	[]

Example

imagePullSecret:
  pull-secret-name:
    targetSelector:
      - workload-name1
      - workload-name2

---

data

Define the data of the image pull secret

Key	imagePullSecret.$name.data
Type	map
Required	✅
Helm tpl	❌
Default	{}

Example

imagePullSecret:
  pull-secret-name:
    data: {}

---

data.registry

Define the registry of the image pull secret

Key	imagePullSecret.$name.data.registry
Type	string
Required	✅
Helm tpl	✅
Default	""

Example

imagePullSecret:
  pull-secret-name:
    data:
      registry: quay.io

---

data.username

Define the username of the image pull secret

Key	imagePullSecret.$name.data.username
Type	string
Required	✅
Helm tpl	✅
Default	""

Example

imagePullSecret:
  pull-secret-name:
    data:
      username: my_user

---

data.password

Define the password of the image pull secret

Key	imagePullSecret.$name.data.password
Type	string
Required	✅
Helm tpl	✅
Default	""

Example

imagePullSecret:
  pull-secret-name:
    data:
      password: my_pass

---

data.email

Define the email of the image pull secret

Key	imagePullSecret.$name.data.email
Type	string
Required	✅
Helm tpl	✅
Default	""

Example

imagePullSecret:
  pull-secret-name:
    data:
      email: my_email@example.com

---

Full Examples

imagePullSecret:

  pull-secret-name:
    enabled: true
    namespace: some-namespace
    labels:
      key: value
      keytpl: "{{ .Values.some.value }}"
    annotations:
      key: value
      keytpl: "{{ .Values.some.value }}"
      data:
        registry: quay.io
        username: my_user
        password: my_pass
        email: my_mail@example.com
      targetSelectAll: true

  other-pull-secret-name:
    enabled: true
    namespace: some-namespace
      data:
        registry: "{{ .Values.my_registry }}"
        username: "{{ .Values.my_user }}"
        password: "{{ .Values.my_pass }}"
        email: "{{ .Values.my_mail }}"
      targetSelector:
        - workload-name1
        - workload-name2