Skip to content

Conversation

@bpradipt
Copy link
Contributor

No description provided.

bpradipt and others added 6 commits November 16, 2025 16:51
Automatically detects and uses imagePullSecrets from the default service
account when not explicitly defined in the manifest. This supports the
common Kubernetes pattern of configuring registry credentials at the
service account level instead of per-pod.

Co-Authored-By: Claude <[email protected]>
Signed-off-by: Pradipta Banerjee <[email protected]>
- Add deployment-with-secrets-and-imagepullsecrets.yaml test fixture
- Add comprehensive test for Deployment with secrets and imagePullSecrets
- Fix manifest methods to use GetPodSpec() instead of GetSpec() for proper
  handling of Deployment, StatefulSet, DaemonSet, and other workload resources
- Methods updated: GetSecretRefs, ReplaceSecretName, AddVolume, AddInitContainer,
  GetInitContainers, AddVolumeMountToContainer, GetRuntimeClass, ConvertEnvSecretToSealed,
  ConvertVolumeSecretToInitContainer, RemoveSecretVolume, ConvertEnvFromSecret
- All tests passing

Signed-off-by: Pradipta Banerjee <[email protected]>
- Add replicaset-with-secrets-and-imagepullsecrets.yaml test fixture
- Add comprehensive test for ReplicaSet with secrets and imagePullSecrets
- Verifies GetPodSpec, GetImagePullSecrets, GetSecretRefs, and SetRuntimeClass
  work correctly for ReplicaSet resources

Signed-off-by: Pradipta Banerjee <[email protected]>
- Add statefulset-with-secrets-and-imagepullsecrets.yaml test fixture
- Add comprehensive test for StatefulSet with secrets and imagePullSecrets
- Verifies GetPodSpec, GetImagePullSecrets, GetSecretRefs, and SetRuntimeClass
  work correctly for StatefulSet resources

Signed-off-by: Pradipta Banerjee <[email protected]>
- Add job-with-secrets-and-imagepullsecrets.yaml test fixture
- Add comprehensive test for Job with secrets and imagePullSecrets
- Verifies GetPodSpec, GetImagePullSecrets, GetSecretRefs, and SetRuntimeClass
  work correctly for Job resources

Signed-off-by: Pradipta Banerjee <[email protected]>
initdata annotation must be placed on pod template metadata
for workload resources (Deployment, StatefulSet, ReplicaSet, Job, DaemonSet),
not on the resource's top-level metadata.

Fix the tests as well

Signed-off-by: Pradipta Banerjee <[email protected]>
@bpradipt bpradipt merged commit 62c4813 into confidential-devhub:main Nov 16, 2025
3 checks passed
@bpradipt bpradipt deleted the fixes branch November 16, 2025 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant