Add imagePullSecrets to helm Chart (#789)

* Add imagePullSecrets to helm Chart

Fixes #787

Signed-off-by: Christian Zunker <christian.zunker@codecentric.cloud>

* use only one imagePullSecret

Signed-off-by: Christian Zunker <christian.zunker@codecentric.cloud>

* Bugfix

Signed-off-by: Christian Zunker <christian.zunker@codecentric.cloud>

Author: czunker

helm/trivy/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: trivy
-version: 0.3.0
+version: 0.4.0
 appVersion: "0.15.0"
 description: Trivy helm chart
 keywords:

helm/trivy/README.md

@@ -51,6 +51,7 @@ The following table lists the configurable parameters of the Trivy chart and the
 | `image.repository`                    | Image name                                                              | `aquasec/trivy` |
 | `image.tag`                           | Image tag                                                               | `{TAG_NAME}`   |
 | `image.pullPolicy`                    | Image pull policy                                                       | `IfNotPresent` |
+| `image.pullSecret`                    | The name of an imagePullSecret used to pull trivy image from e.g. Docker Hub or a private registry  | |
 | `replicaCount`                        | Number of Trivy Pods to run                                   | `1`            |
 | `trivy.debugMode`             | The flag to enable or disable Trivy debug mode                          | `false` |
 | `trivy.gitHubToken`           | The GitHub access token to download Trivy DB                            |      |

helm/trivy/templates/statefulset.yaml

@@ -36,6 +36,10 @@ spec:
       securityContext:
 {{ toYaml .Values.podSecurityContext | indent 8 }}
       {{- end }}
+      {{- if .Values.image.pullSecret }}
+      imagePullSecrets:
+        - name: {{ .Values.image.pullSecret }}
+      {{- end }}
       containers:
         - name: main
           image: {{ template "trivy.imageRef" . }}

helm/trivy/values.yaml

@@ -6,6 +6,7 @@ image:
   repository: aquasec/trivy
   tag: 0.15.0
   pullPolicy: IfNotPresent
+  pullSecret: ""
 
 replicaCount: 1