Adding imagePullSecrets support to AEE jobs

api/bases/ansibleee.openstack.org_openstackansibleees.yaml

@@ -891,6 +891,14 @@ spec:
                 x-kubernetes-preserve-unknown-fields: true
               image:
                 type: string
+              imagePullSecrets:
+                items:
+                  properties:
+                    name:
+                      type: string
+                  type: object
+                  x-kubernetes-map-type: atomic
+                type: array
               initContainers:
                 items:
                   properties:

api/v1beta1/openstack_ansibleee_types.go

@@ -105,6 +105,11 @@ type OpenStackAnsibleEESpec struct {
 	// ServiceAccountName allows to specify what ServiceAccountName do we want the ansible execution run with. Without specifying,
 	// it will run with default serviceaccount
 	ServiceAccountName string `json:"serviceAccountName,omitempty"`
+	// ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this Job.
+	// If specified, these secrets will be passed to individual puller implementations for them to use.
+	// More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
+	// +kubebuilder:validation:Optional
+	ImagePullSecrets []corev1.LocalObjectReference `json:"imagePullSecrets,omitempty"`
 	// DNSConfig allows to specify custom dnsservers and search domains
 	// +kubebuilder:validation:Optional
 	DNSConfig *corev1.PodDNSConfig `json:"dnsConfig,omitempty"`

config/crd/bases/ansibleee.openstack.org_openstackansibleees.yaml

@@ -891,6 +891,14 @@ spec:
                 x-kubernetes-preserve-unknown-fields: true
               image:
                 type: string
+              imagePullSecrets:
+                items:
+                  properties:
+                    name:
+                      type: string
+                  type: object
+                  x-kubernetes-map-type: atomic
+                type: array
               initContainers:
                 items:
                   properties:

config/manifests/bases/openstack-ansibleee-operator.clusterserviceversion.yaml

@@ -56,6 +56,11 @@ spec:
         path: backoffLimit
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:number
+      - description: 'Image pull secrets for container images. Default: []'
+        displayName: Image Pull Secrets
+        path: imagePullSecrets
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:advanced
       - description: 'RestartPolicy is the policy applied to the Job on whether it
           needs to restart the Pod. It can be "OnFailure" or "Never". RestartPolicy
           default: Never'

controllers/openstack_ansibleee_controller.go

@@ -344,6 +344,9 @@ func (r *OpenStackAnsibleEEReconciler) jobForOpenStackAnsibleEE(ctx context.Cont
 	if len(instance.Spec.ServiceAccountName) > 0 {
 		job.Spec.Template.Spec.ServiceAccountName = instance.Spec.ServiceAccountName
 	}
+	if len(instance.Spec.ImagePullSecrets) > 0 {
+		job.Spec.Template.Spec.ImagePullSecrets = instance.Spec.ImagePullSecrets
+	}
 	// Set primary inventory if specified as string
 	var existingInventoryMounts string = ""
 	if len(instance.Spec.Inventory) > 0 {

docs/assemblies/openstack_ansibleee.adoc

@@ -172,6 +172,11 @@ OpenStackAnsibleEESpec defines the desired state of OpenStackAnsibleEE
 | string
 | false
 
+| imagePullSecrets
+| ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this Job. If specified, these secrets will be passed to individual puller implementations for them to use. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
+| []corev1.LocalObjectReference
+| false
+
 | dnsConfig
 | DNSConfig allows to specify custom dnsservers and search domains
 | *corev1.PodDNSConfig