:sparkles: Support serviceaccount pull secrets by tmshort · Pull Request #2005 · operator-framework/operator-controller

@openshift-ci openshift-ci bot added the approved

Indicates a PR has been approved by an approver from all required OWNERS files.

label

Jun 4, 2025

joelanford

joelanford

joelanford

joelanford

joelanford

joelanford

joelanford

camilamacedo86

camilamacedo86

camilamacedo86

camilamacedo86

joelanford

@openshift-ci openshift-ci bot added lgtm

Indicates that a PR is ready to be merged.

and removed lgtm

Indicates that a PR is ready to be merged.

labels

Jun 12, 2025
Serviceaccounts reference pull secrets!

* Determine our serviceaccount (via the new internal/shared/util/sa package).
* Use a common pull_secret_controller
* Update the pull_secret_controller to know about the service account
* Update the pull_secret_controller to watch the namespace-local secrets
* Update caching to include sa, and use filters for additional secrets
* Add RBAC to access these secrets and sa
* Update writing the auth.json file to handle dockercfg and dockerconfigjson
* Update writing the auth.json file to include multiple secrets

Signed-off-by: Todd Short <tshort@redhat.com>
Signed-off-by: Todd Short <tshort@redhat.com>
Signed-off-by: Todd Short <tshort@redhat.com>
Signed-off-by: Todd Short <tshort@redhat.com>

@tmshort

@tmshort

Signed-off-by: Todd Short <tshort@redhat.com>

@tmshort

Signed-off-by: Todd Short <tshort@redhat.com>

camilamacedo86

@tmshort tmshort deleted the use-sa-pull-secret branch

June 12, 2025 23:37