cluster-api-provider-vcluster icon indicating copy to clipboard operation
cluster-api-provider-vcluster copied to clipboard

vcluster dont support private registry with authentication

Open sbasti93 opened this issue 1 year ago • 2 comments

I came across the following problem through a POC. When I tried to change the referencing from the official Helm Chart to a private registry (with authentication), I realised that this does not work at all.

According to the CRD, the only parameters to be set are the following:

apiVersion: infrastructure.cluster.x-k8s.io/v1alpha1
kind: VCluster
metadata:
  name: [CLUSTER_NAME]
spec:
  helmRelease:
    chart: 
      name: [CHART_NAME]
      repo: [CHART_REPO]
      version: [CHART_VERSION]

This means that it is not possible to pass a secret, which is required for authentication at the private registry. There may be another way to do this, which I have not found out.

sbasti93 avatar Sep 13 '24 06:09 sbasti93

Same issue, adding corporate ca for helm repo, and requirement to set https_proxy/no_proxy

poblin-orange avatar Nov 06 '24 12:11 poblin-orange

Apart from the parameters mentioned above you also have the ability to pass in vcluster.yaml values by setting the VCLUSTER_YAML env var to those. The advanced section in the docs (especially serviceAccount in combination with defaultImageRegistry) might provide you with the required values.

johannesfrey avatar Jan 21 '25 16:01 johannesfrey