mirror of
https://github.com/gitpod-io/gitpod.git
synced 2025-12-08 17:36:30 +00:00
65 lines
1.7 KiB
Go
65 lines
1.7 KiB
Go
// Copyright (c) 2021 Gitpod GmbH. All rights reserved.
|
|
// Licensed under the GNU Affero General Public License (AGPL).
|
|
// See License.AGPL.txt in the project root for license information.
|
|
|
|
package dockerregistry
|
|
|
|
import (
|
|
//nolint:typecheck
|
|
"encoding/base64"
|
|
"encoding/json"
|
|
"fmt"
|
|
|
|
"github.com/gitpod-io/gitpod/installer/pkg/common"
|
|
corev1 "k8s.io/api/core/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/runtime"
|
|
"k8s.io/kubectl/pkg/cmd/create"
|
|
"k8s.io/utils/pointer"
|
|
)
|
|
|
|
func secret(ctx *common.RenderContext) ([]runtime.Object, error) {
|
|
if !pointer.BoolDeref(ctx.Config.ContainerRegistry.InCluster, false) {
|
|
return nil, nil
|
|
}
|
|
|
|
user := ctx.Values.InternalRegistryUsername
|
|
if user == "" {
|
|
return nil, fmt.Errorf("unknown value: internal registry username")
|
|
}
|
|
|
|
password := ctx.Values.InternalRegistryPassword
|
|
if password == "" {
|
|
return nil, fmt.Errorf("unknown value: internal registry password")
|
|
}
|
|
|
|
// todo(sje): handle if bypassing registry with proxy
|
|
registryHost := "registry." + ctx.Config.Domain
|
|
|
|
config, err := json.Marshal(create.DockerConfigJSON{
|
|
Auths: map[string]create.DockerConfigEntry{
|
|
registryHost: {
|
|
Auth: base64.StdEncoding.EncodeToString([]byte(user + ":" + password)),
|
|
},
|
|
},
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return []runtime.Object{&corev1.Secret{
|
|
TypeMeta: common.TypeMetaSecret,
|
|
ObjectMeta: metav1.ObjectMeta{
|
|
Name: BuiltInRegistryAuth,
|
|
Namespace: ctx.Namespace,
|
|
Labels: common.DefaultLabels(Component),
|
|
},
|
|
Type: corev1.SecretTypeDockerConfigJson,
|
|
Data: map[string][]byte{
|
|
".dockerconfigjson": config,
|
|
"user": []byte(user),
|
|
"password": []byte(password),
|
|
},
|
|
}}, nil
|
|
}
|