Kubernetes Operator - Using Image Pull Secrets

Overview

vFunction provides an “air gapped” (offline) Installation Package for installing the vFunction Kubernetes Operator in a restricted Kubernetes Cluster.

Running the vFunction Operator in a restricted Cluster requires that all Docker Images (the vFunction Operator and the vFunction Server Containers) reside in a Private Docker Registry that is accessible from the Cluster. To grant access to this Registry, the installation also requires the deployment of a related Image Pull Secret. This Image Pull Secret should be deployed in advance of running the Installation Script to the same Namespace where the vFunction Operator will run.

The vFunction Kubernetes Offline Installation package contains all required Docker Images as well as utility scripts. These utility script will migrate the Docker Images to the Private Docker Registry and can, if needed, create an Image Pull Secret in the Namespace.

Deploy an existing Image Pull Secret

  1. Download the vFunction Server Offline Installation Kubernetes TGZ and move it to the Linux machine with access to the Cluster where the vFunction Operator will be installed
  2. Unpack the vFunction Server Offline Installation Kubernetes TGZ

    ### Replace VERSION with the actual value

    tar xvf vfunction-server-offline-installation-kubernetes.vVERSION.tgz
  3. Add the CUSTOM_REPO and CUSTOM_IMAGE_PULL_SECRET to the relevant locations within the vFunction Kubernetes Installation Scripts

    ### Replace CUSTOM_REPO and CUSTOM_IMAGE_PULL_SECRET with the actual value

    vfunction-server-for-kubernetes/offline/init.sh -r CUSTOM_REPO -s CUSTOM_IMAGE_PULL_SECRET

Create and deploy a new Image Pull Secret

  1. Download the vFunction Server Offline Installation Kubernetes TGZ and move it to the Linux machine with access to the Cluster where the vFunction Operator will be installed
  2. Unpack the vFunction Server Offline Installation Kubernetes TGZ

    ### Replace VERSION with the actual value

    tar xvf vfunction-server-offline-installation-kubernetes.vVERSION.tgz
  3. Create the Image Pull Secret in the Namespace and add it to the relevant locations within the vFunction Kubernetes Installation Scripts

    ### Replace CUSTOM_REPO, REGISTRY_USERNAME, REGISTRY_PASSWORD, USER_EMAIL and NAMESPACE with the actual value

    vfunction-server-for-kubernetes/offline/init.sh -r CUSTOM_REPO -c -u REGISTRY_USERNAME -p REGISTRY_PASSWORD -e USER_EMAIL -n NAMESPACE

Updated on 23 Feb 2024