registry-creds

registry-creds copied to clipboard

v1. Namespace is forbidden: User cannot list resource "namespaces" in API group.

10

Any idea why would this happen? Seems like the Go app can't list the namespaces. What can I do in this case? It is configured for AWS ECR the same...

marcgarciajr

Added ClusterRole, ClusterRoleBinding and ServiceAccount

2

When you want to test it in a k8s cluster you will need this files, otherwise the app will fail missing permissions

Keralin

Intorduce a Helm chart for simplified deployments

4

Introduce a helm chart with the tool. This will ease users in using registry-creds.

mimiteto

Add ClusterRole, ClusterRoleBinding and ServiceAccount to examples

2

This requires a service account that can get/list/watch namespaces, create/update secrets, and update service accounts. The k8s yml files in the repo should include this.

flokli

Include exclude namespaces

2

Introduces two new arguments * `--include-namespaces`: a subset of namespaces to process, if empty processes all namespaces. * `--exclude-namespaces`: a subset of namespaces to exclude from processing. In this implementation...

ede-n

Go module, bump versions of k8s libs, rework of the Informer for namespaces (more suitable), rework of secretGenerator

1

Hello, I moved the project to go module because we use it in my enterprise. Bumped some librairies. Also I reworked the Informer because the one used was not really...

achoimet

Kubernetes 1.6 RBAC support

8

For anyone interested who wants to use this with Kubernetes 1.6.2 and RBAC enabled using a `Deployment` instead of `ReplicaSet` for pulling images from AWS ECR, see the following snippet:...

weitzj

Thanks for putting this repository together, we have been using it extensively and came across a use case for which we need to whitelist a few namespaces. Here I propose...

ede-n

Allow blacklisting of namespaces

1

Is there anyway to add a blacklist (or a whitelist) of namespaces that we want to allow the credentials to be synced to? For example, secrets are also being synced...

xlanor

client-go: No cached connection was available

14

Hi, I'm running this on AKS and it works perfectly for a day. After that it will silently fail and when I view the pod-log I see a continuous list...

Pwntus