option to pass registry auth token using k8s secret

[prasoon-pxc]

I want to use auth token to fetch image from docker-hub account to avoid rate limit but I do not want to pass whole config.yaml as a secret because I am using helm chart and providing configmap with helm template, now my question is that how we can just define auth thingy using k8s-secret or with envsubst to subsitute its values using ENV variable in k8s job.
And do I need to install envsubst explicitly to get it work.

[xelalexv]

This question goes a bit beyond the scope of this project, but here's a sketch of how you can approach this:

• mount the config into the dregsy pod as usual, using a config map
• additionally have a secret with the token mounted into the pod
• add an init container to the pod, in which you source the token, then run envsubst on the config file

The dregsy container images don't contain envsubst, so you need to use a different image for the init container, or extend the dregsy image if you want to use just one image in your pod.

[prasoon-pxc]

Thanks @xelalexv for the hint, I will try to use init-container with envsubst installed on it and let's see how it goes, we can make this issue open for that time.

[prasoon-pxc]

So, I am able to configure auth-token for dockerhub using envsubst. Also getting this line in config confirm that it is using auth to connect to dockerhub, but still getting rate-limit error, is there any smooth way where we can check how many pull left for user from dockerhub.

time="2024-04-13T18:49:56Z" level=info msg="using credentials from config" registry=docker.io username=my-dockerhub-user

Also, after enabling auth getting this extra line in logs:

time="2024-04-13T18:46:08Z" level=error msg="invalid character 'e' in literal true (expecting 'r')"

[xelalexv]

...is there any smooth way where we can check how many pull left for user from dockerhub.

see here

Also, after enabling auth getting this extra line in logs:

time="2024-04-13T18:46:08Z" level=error msg="invalid character 'e' in literal true (expecting 'r')"

There could be a misspelling of true somewhere in your config.

[prasoon-pxc]

...is there any smooth way where we can check how many pull left for user from dockerhub.

see here

my user is part of paid docker plans, and I am not getting any rate limit headers in curl request, also this is mentioned in doc