Add imagePullSecrets to deployment templates and define sensitive GHCR authentication variables

Author: devsocket

helm/order-service/templates/deployment.yaml

@@ -14,6 +14,8 @@ spec:
       labels:
         app: {{ .Chart.Name }}
     spec:
+      imagePullSecrets:
+        - name: ghcr-secret
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"

helm/product-service/templates/deployment.yaml

@@ -14,6 +14,8 @@ spec:
       labels:
         app: {{ .Chart.Name }}
     spec:
+      imagePullSecrets:
+        - name: ghcr-secret
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"

helm/user-service/templates/deployment.yaml

@@ -14,6 +14,8 @@ spec:
       labels:
         app: {{ .Chart.Name }}
     spec:
+      imagePullSecrets:
+        - name: ghcr-secret
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"

terraform/environments/qa/main.tf

@@ -33,6 +33,9 @@ module "aks" {
   resource_group_name = var.resource_group_name
   location            = var.location
   cluster_name        = var.cluster_name
+
+  ghcr_username       = var.ghcr_username
+  ghcr_pat            = var.ghcr_pat
 }
 
 module "key_vault" {

terraform/environments/qa/variables.tf

@@ -14,4 +14,16 @@ variable "container_name" {
 variable "tags" {
   type = map(string)
   default = {}
+}
+
+variable "ghcr_username" {
+  description = "GitHub username for GHCR authentication"
+  type        = string
+  sensitive   = true
+}
+
+variable "ghcr_pat" {
+  description = "GitHub PAT for GHCR authentication"
+  type        = string
+  sensitive   = true
 }