feat(mudcraft): add registry pull secret and imagePullSecrets to deployment

2026-04-01 00:10:00 -05:00
parent 1e06463529
commit 67347bdcdf
2 changed files with 29 additions and 0 deletions
@@ -15,6 +15,8 @@ spec:
      labels:
        app: mudcraft-core
    spec:
+      imagePullSecrets:
+        - name: registry-pull-secret
      containers:
        - name: mudcraft-core
          image: registry.neuralplatform.ai/mudcraft/core:3c5445c55d4e2afe2b4a5e6e4f4ce23e5e3bf374
@@ -0,0 +1,27 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: registry-pull-secret
+  namespace: mudcraft
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: registry-pull-secret
+    creationPolicy: Owner
+    template:
+      type: kubernetes.io/dockerconfigjson
+      data:
+        .dockerconfigjson: |
+          {"auths":{"registry.neuralplatform.ai":{"username":"{{ .registry_user }}","password":"{{ .registry_docker_token }}","auth":"{{ list .registry_user .registry_docker_token | join ":" | b64enc }}"}}}
+  data:
+    - secretKey: registry_user
+      remoteRef:
+        key: secret/data/mudcraft
+        property: registry_user
+    - secretKey: registry_docker_token
+      remoteRef:
+        key: secret/data/mudcraft
+        property: registry_docker_token