67 lines
2.2 KiB
Bash
67 lines
2.2 KiB
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
# Setup GitHub Container Registry (GHCR) image pull secrets for all namespaces
|
||
|
|
# This script creates docker-registry secrets for pulling images from GHCR
|
||
|
|
|
||
|
|
set -e
|
||
|
|
|
||
|
|
# GitHub Container Registry credentials
|
||
|
|
# Note: Use a GitHub Personal Access Token with 'read:packages' scope
|
||
|
|
GHCR_SERVER="ghcr.io"
|
||
|
|
GHCR_USERNAME="uals" # GitHub username
|
||
|
|
GHCR_PASSWORD="ghp_zzEY5Q58x1S0puraIoKEtbpue3A" # GitHub Personal Access Token
|
||
|
|
GHCR_EMAIL="ualfaro@gmail.com"
|
||
|
|
SECRET_NAME="ghcr-creds"
|
||
|
|
|
||
|
|
# List of namespaces used in the project
|
||
|
|
NAMESPACES=(
|
||
|
|
"bakery-ia"
|
||
|
|
"bakery-ia-dev"
|
||
|
|
"bakery-ia-prod"
|
||
|
|
"default"
|
||
|
|
)
|
||
|
|
|
||
|
|
echo "Setting up GitHub Container Registry image pull secrets..."
|
||
|
|
echo "=========================================================="
|
||
|
|
echo ""
|
||
|
|
|
||
|
|
for namespace in "${NAMESPACES[@]}"; do
|
||
|
|
echo "Processing namespace: $namespace"
|
||
|
|
|
||
|
|
# Create namespace if it doesn't exist
|
||
|
|
if ! kubectl get namespace "$namespace" >/dev/null 2>&1; then
|
||
|
|
echo " Creating namespace: $namespace"
|
||
|
|
kubectl create namespace "$namespace"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Delete existing secret if it exists
|
||
|
|
if kubectl get secret "$SECRET_NAME" -n "$namespace" >/dev/null 2>&1; then
|
||
|
|
echo " Deleting existing secret in namespace: $namespace"
|
||
|
|
kubectl delete secret "$SECRET_NAME" -n "$namespace"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Create the docker-registry secret for GHCR
|
||
|
|
echo " Creating GHCR secret in namespace: $namespace"
|
||
|
|
kubectl create secret docker-registry "$SECRET_NAME" \
|
||
|
|
--docker-server="$GHCR_SERVER" \
|
||
|
|
--docker-username="$GHCR_USERNAME" \
|
||
|
|
--docker-password="$GHCR_PASSWORD" \
|
||
|
|
--docker-email="$GHCR_EMAIL" \
|
||
|
|
-n "$namespace"
|
||
|
|
|
||
|
|
echo " ✓ Secret created successfully in namespace: $namespace"
|
||
|
|
echo ""
|
||
|
|
done
|
||
|
|
|
||
|
|
echo "=========================================================="
|
||
|
|
echo "GitHub Container Registry secrets setup completed!"
|
||
|
|
echo ""
|
||
|
|
echo "The secret '$SECRET_NAME' has been created in all namespaces:"
|
||
|
|
for namespace in "${NAMESPACES[@]}"; do
|
||
|
|
echo " - $namespace"
|
||
|
|
done
|
||
|
|
echo ""
|
||
|
|
echo "Next steps:"
|
||
|
|
echo "1. Update your Kubernetes manifests to include the GHCR imagePullSecrets"
|
||
|
|
echo "2. Verify pods can pull images from GHCR: kubectl get pods -A"
|
||
|
|
echo "3. Consider updating your CI/CD pipelines to push images to GHCR"
|