Skip to content

[helm] Enable pulling from private Docker registry#2692

Merged
xx789633 merged 2 commits into
apache:mainfrom
affo:la-pull-secrets
Feb 25, 2026
Merged

[helm] Enable pulling from private Docker registry#2692
xx789633 merged 2 commits into
apache:mainfrom
affo:la-pull-secrets

Conversation

@affo
Copy link
Copy Markdown
Contributor

@affo affo commented Feb 16, 2026

Purpose

Linked issue: close #2691

Brief change log

  • Uses images.registry
  • Renders image.pullSecrets

Makes it possible to use an alternate registry and use pull secrets to pull the image if the registry is private.

I favored the approach of adding pull secrets directly to STS and not in the service account for bigger flexibility as the user can still link another service account to pods while pull secrets are attached to pods.

Tests

No test introduced.
Would be good to add tests once this PR lands (introduces helm unittest + github workflow).

API and Format

NO

Documentation

No new feature, it is already documented in the README.

Copy link
Copy Markdown
Contributor

@morazow morazow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thanks 🚀

Copy link
Copy Markdown
Contributor

@xx789633 xx789633 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR @affo I just left some minor suggestions.

Comment thread helm/templates/_helpers.tpl Outdated
Image name
*/}}
{{- define "fluss.image" -}}
{{- $image := printf "%s:%s" .Values.image.repository .Values.image.tag }}
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If a user omits image.tag or sets it to empty, this would produce an invalid image reference like apache/fluss:. Maybe we need to add a fallback here.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

addressed 👍

Comment thread helm/templates/_helpers.tpl Outdated
Image name
*/}}
{{- define "fluss.image" -}}
{{- $image := printf "%s:%s" .Values.image.repository .Values.image.tag }}
Copy link
Copy Markdown
Contributor

@xx789633 xx789633 Feb 19, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If a user provides a purely numeric tag (e.g. tag: 1.0), printf "%s" in Helm may output apache/fluss:%!s(float64=1).

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what a catch! Partially addressed 🤝

@affo
Copy link
Copy Markdown
Contributor Author

affo commented Feb 24, 2026

@xx789633 the latest changes now address your doubts 🤝

repository is now required.
if tag is missing, no : is added avoiding a malformed image name.

For tag formatting, unfortunately, it is not possible to discriminate 1.0 VS 1 in Go templating, as they would always render to 1 as strings. However, I added a toString that would cover 1.1 for example 🤝

Wrapping the tag in quotes in YAML is left to the user 👍
In our default values we offer a tag value wrapped in quotes.

I checked this behavior and it would be the same in Bitnami's charts.
Tested with Zookeeper 🤝

@xx789633
Copy link
Copy Markdown
Contributor

Looks good to me.

@swuferhong
Copy link
Copy Markdown
Contributor

LGTM overall. One more suggestion: Could you add documentation in helm/README.md explaining how to use image.registry and image.pullSecrets when configuring a private Docker registry?

Added instructions for using a private Docker registry and included image values reference.
@xx789633
Copy link
Copy Markdown
Contributor

I have appended a commit to document the private docker registry. Merging....

@xx789633 xx789633 merged commit 43f76a5 into apache:main Feb 25, 2026
6 checks passed
@affo affo deleted the la-pull-secrets branch February 25, 2026 10:57
@affo
Copy link
Copy Markdown
Contributor Author

affo commented Feb 25, 2026

@xx789633 thanks for promptly acting on this one!
I was too busy yesterday to promptly address 😓

wxplovecc pushed a commit to tongcheng-elong/fluss that referenced this pull request Apr 17, 2026
* [helm] Enable pulling from private Docker registry

Added instructions for using a private Docker registry and included image values reference.

---------

Co-authored-by: xx789 <348448708@qq.com>
wxplovecc pushed a commit to tongcheng-elong/fluss that referenced this pull request Apr 20, 2026
* [helm] Enable pulling from private Docker registry

Added instructions for using a private Docker registry and included image values reference.

---------

Co-authored-by: xx789 <348448708@qq.com>
polyzos pushed a commit that referenced this pull request Apr 23, 2026
* [helm] Enable pulling from private Docker registry (#2692)

* [helm] Enable pulling from private Docker registry

Added instructions for using a private Docker registry and included image values reference.

---------

Co-authored-by: xx789 <348448708@qq.com>
(cherry picked from commit 43f76a5)

* [helm] Fix wrong resource name in coordinator sts (#2834)

(cherry picked from commit 2c49fbc)

* [helm] Add CI workflow to run Helm tests (#2777)

* [helm] Add CI workflow to run Helm tests

(cherry picked from commit dd181eb)

* [Helm] Chart Component Configuration Isolation (#2472)

* Helm Chart Component Configuration Isolation

* Retrigger CI tests

* Retriggering CI/CD build pipeline

(cherry picked from commit d956e75)

* [Helm] Revert Chart Component Configuration Isolation (#2472) (#2863)

This reverts commit d956e75.

(cherry picked from commit 8cd9a6f)

* [helm] Enable SASL authentication configurations (#2506)

(cherry picked from commit f7e4498)

* [helm] Rewrite README to point to website docs (#2846)

(cherry picked from commit aa5d166)

* [helm][hotfix] Go template whitespace trimming caused exceptions (#2893)

* [helm][hotfix] Go template whitespace trimming caused exceptions

* Update and use without trimming

(cherry picked from commit 22ece48)

* [helm] Enable metrics reporting in helm charts (#2711)

---

Co-authored-by: Lorenzo Affetti <lorenzo.affetti@gmail.com>
(cherry picked from commit 2b207a4)

* [helm] Fix .helmignore to not package tests (#2847)

(cherry picked from commit d4748f2)

* [helm] Enable SASL authenticated connection to Zookeeper nodes (#2700)

---

Co-authored-by: Lorenzo Affetti <lorenzo.affetti@gmail.com>
(cherry picked from commit bdbbbce)

* [helm] Fix Zookeeper client config path (#3015)

(cherry picked from commit e9bfd72)

* [helm] Fix wrong resource name in coordinator sts (#3044)

(cherry picked from commit 8df3873)

* [helm] Add extraVolumes, extraVolumeMounts, initContainers (#3034)

(cherry picked from commit 17f5400)

---------

Co-authored-by: Lorenzo Affetti <lorenzo.affetti@gmail.com>
Co-authored-by: xx789 <348448708@qq.com>
Co-authored-by: Hemanth Savasere <hemanth.savasere@gmail.com>
Ugbot pushed a commit to Ugbot/fluss that referenced this pull request Apr 26, 2026
* [helm] Enable pulling from private Docker registry

Added instructions for using a private Docker registry and included image values reference.

---------

Co-authored-by: xx789 <348448708@qq.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[helm] Enable pulling from private Docker registry

4 participants