Skip to content

HDDS-15903. Fix imagePullSecrets support#44

Merged
adoroszlai merged 1 commit into
apache:mainfrom
dnskr:fix-imagePullSecrets-support
Jul 18, 2026
Merged

HDDS-15903. Fix imagePullSecrets support#44
adoroszlai merged 1 commit into
apache:mainfrom
dnskr:fix-imagePullSecrets-support

Conversation

@dnskr

@dnskr dnskr commented Jul 18, 2026

Copy link
Copy Markdown
Contributor

What changes were proposed in this pull request?

The PR fixes imagePullSecrets support to all Ozone pod templates, enabling deployments to clusters that require private registry authentication.

What is the link to the Apache JIRA

https://issues.apache.org/jira/browse/HDDS-15903

How was this patch tested?

Render changed templates (excluding om decommission jobs) with provided imagePullSecrets value:

helm template ozone charts/ozone --set "imagePullSecrets[0].name=regcred" --set recon.enabled=true \
  -s templates/datanode/datanode-statefulset.yaml \
  -s templates/om/om-statefulset.yaml \
  -s templates/recon/recon-deployment.yaml \
  -s templates/s3g/s3g-statefulset.yaml \
  -s templates/scm/scm-statefulset.yaml

Output (reduced):

---
# Source: ozone/templates/datanode/datanode-statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: ozone-datanode
spec:
  replicas: 3
  serviceName: ozone-datanode-headless
  template:
    spec:
      imagePullSecrets:
        - name: regcred
      containers:
        - name: datanode
          image: "apache/ozone:2.1.1"
          ...
---
# Source: ozone/templates/om/om-statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: ozone-om
spec:
  replicas: 3
  serviceName: ozone-om-headless
  template:
    spec:
      imagePullSecrets:
        - name: regcred
      containers:
        - name: om
          image: "apache/ozone:2.1.1"
          ...
---
# Source: ozone/templates/recon/recon-deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ozone-recon
spec:
  replicas: 1
  template:
    spec:
      imagePullSecrets:
        - name: regcred
      containers:
        - name: recon
          image: "apache/ozone:2.1.1"
          ...
---
# Source: ozone/templates/s3g/s3g-statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: ozone-s3g
spec:
  replicas: 1
  serviceName: ozone-s3g-headless
  template:
    spec:
      imagePullSecrets:
        - name: regcred
      containers:
        - name: s3g
          image: "apache/ozone:2.1.1"
          ...
---
# Source: ozone/templates/scm/scm-statefulset.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: ozone-scm
spec:
  replicas: 1
  podManagementPolicy: Parallel
  serviceName: ozone-scm-headless
  template:
    spec:
      imagePullSecrets:
        - name: regcred
      initContainers:
        - name: init
          image: "apache/ozone:2.1.1"
          ...

Signed-off-by: Denis Krivenko <dnskrv88@gmail.com>
@adoroszlai

Copy link
Copy Markdown
Contributor

@shuan1026 please review if you have time

@adoroszlai
adoroszlai requested a review from Tejaskriya July 18, 2026 13:52

@shuan1026 shuan1026 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@adoroszlai Thanks for the ping.

I re-checked the helm template for main workloads with imagePullSecrets[0].name=regcred. And validated on kind cluster that image pull with private Docker Hub repo.

LGTM.

@adoroszlai
adoroszlai merged commit be41bcc into apache:main Jul 18, 2026
1 check passed
@adoroszlai

Copy link
Copy Markdown
Contributor

Thanks @dnskr for the patch, @shuan1026 for the review.

shuan1026 added a commit to shuan1026/ozone-helm-charts that referenced this pull request Jul 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants