If you want to allow global access, you can also add the credentials to
each node and avoid needing an image pull secret.  Keep in mind that
configuring your nodes like this means that all users will have access to
the authenticated registry.  See
https://github.com/kubernetes/kubernetes/blob/master/docs/user-guide/images.md#configuring-nodes-to-authenticate-to-a-private-repository
for details.

On Wed, Mar 2, 2016 at 8:28 AM, Vincent Behar <[email protected]> wrote:

> Hi,
>
> yes, you can customise the template used to create new projects :
> https://docs.openshift.org/latest/admin_guide/selfprovisioned_projects.html
>
> and in this template, just add the secret. So that each new project will
> have it.
>
> The only issue is that the secret is now duplicated in each project, and
> if you want to change it, you will need to change it in each project.
>
> > On 02 Mar 2016, at 12:56, Lorenz Vanthillo <[email protected]>
> wrote:
> >
> > I've an origin cluster (1.1.3). The main goal of our cluster is to pull
> images from an external registry and to use the images to start containers
> on our cluster.
> > There is some authentication on our registry. So we have to create a
> secret and add the secret to service accounts.
> > At the moment we have to add a new secret and add it to the service
> accounts for each new project.
> > Is there a possibility to add the secret to some global project that
> operates as "template" project for the rest of the projects.
> > So that we only once have to add the secret and only once have to tell
> the service accounts that they're able to use the secret?
> >
> > _______________________________________________
> > users mailing list
> > [email protected]
> > http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>
>
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Reply via email to