Skip to content

imagecache: Support Docker config credentials for private registry pulls - #1790

Closed
Danny Guinther (tdg5) wants to merge 1 commit into
agent-substrate:mainfrom
tdg5:atelet-registry-keychain
Closed

Danny Guinther (tdg5) wants to merge 1 commit into
agent-substrate:mainfrom
tdg5:atelet-registry-keychain

Conversation

@tdg5

@tdg5 Danny Guinther (tdg5) commented Sep 22, 2026 •

Copy link
Copy Markdown

atelet pulls actor images itself, so the kubelet's imagePullSecrets never apply to them. Consult the standard Docker credential keychain for every registry GCP auth does not cover, leaving pulls anonymous when no config is present.

Fixes #1789 (a semi-dupe of #432 and #917)

  • Tests pass
  • Appropriate changes to documentation are included in the PR

atelet pulls actor images itself, so the kubelet's imagePullSecrets never
apply to them. Consult the standard Docker credential keychain for every
registry GCP auth does not cover, leaving pulls anonymous when no config
is present.
@google-cla

google-cla Bot commented Sep 22, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@tdg5

Copy link
Copy Markdown
Author

Seems like #917 is the better alternative here, though it doesn't cover some unmanaged use cases. Going to close this for now and revisit when #917 sees any traction.

@bowei Bowei Du (bowei) added area/node area/storage kind/feature An enhancement / feature request or implementation labels Sep 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/node area/storage kind/feature An enhancement / feature request or implementation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: imagecache: No way to supply registry credentials for non-GCP image pulls

2 participants