Janis Eccarius
18 lines
620 B
YAML
18 lines
620 B
YAML
# PLACEHOLDER — seal with htwg-1 cluster key before use:
|
|
# kubectl -n nowchess create secret docker-registry ghcr-pull-secret \
|
|
# --docker-server=ghcr.io --docker-username=<user> --docker-password=<token> \
|
|
# --dry-run=client -o yaml | kubeseal --controller-namespace kube-system -o yaml > this-file.yaml
|
|
apiVersion: bitnami.com/v1alpha1
|
|
kind: SealedSecret
|
|
metadata:
|
|
name: ghcr-pull-secret
|
|
namespace: nowchess
|
|
spec:
|
|
encryptedData:
|
|
.dockerconfigjson: REPLACE_WITH_SEALED_VALUE
|
|
template:
|
|
type: kubernetes.io/dockerconfigjson
|
|
metadata:
|
|
name: ghcr-pull-secret
|
|
namespace: nowchess
|