bevel
bevel copied to clipboard
Make docker creds section in network.yaml as optional in Quorum
Currently, we don't have an option to exclude docker credentials from network.yaml The docker credentials are used to create a kubernetes secret (docker cred template) which is used to pull images with docker credentials. With the inclusion of images over a public dockerhub registry, we dont need the docker username & password section in the network.yaml, the regcred and thus there is no need to pull the image with docker creds.
The changes required are:
-
In the file quorum/configuration/roles/setup/vault_kubernetes/tasks/main.yaml, change the last task named "Create the docker pull credentials" to run only if network.docker.username && network.docker.password are defined and are not empty. To check if a variable (network.docker.username) is defined and not empty, you can use the code
network.docker.username | default('', true) | trim != ''
-
For the charts, you need to a put a condition to use imagePullSecrets only when
network.docker.username | default('', true) | trim != ''
andnetwork.docker.password | default('', true) | trim != ''
The following charts are required to be changed for Quorum
-
[ ] node_constellation chart
-
[ ] node_tessera chart
-
-
Test the network for the above changes.