docker login on invoker pods when using private registry

Author: Mike Ludwig

helm/openwhisk/configMapFiles/dockerLogin/dockerLogin.sh

@@ -0,0 +1 @@
+docker login $RUNTIMES_REGISTRY -u $RUNTIMES_REGISTRY_USERNAME -p $RUNTIMES_REGISTRY_PASSWORD

helm/openwhisk/templates/_helpers.tpl

@@ -310,6 +310,11 @@ imagePullSecrets:
           mountPath: "/invoker-scripts/configureDNS.sh"
           subPath: "configureDNS.sh"
 {{- end }}
+{{- if ne .Values.docker.registry.name "" }}
+        - name: scripts-dir
+          mountPath: "/invoker-scripts/dockerLogin.sh"
+          subPath: "dockerLogin.sh"
+{{- end }}
 {{- end }}
 {{- end }}
 

helm/openwhisk/templates/invoker-cm.yaml

@@ -24,3 +24,4 @@ metadata:
 data:
 {{ (.Files.Glob "configMapFiles/dockerPullRuntimes/playbook.yml").AsConfig | indent 2 }}
 {{ (.Files.Glob "configMapFiles/configureDNS/configureDNS.sh").AsConfig | indent 2 }}
+{{ (.Files.Glob "configMapFiles/dockerLogin/dockerLogin.sh").AsConfig | indent 2 }}

helm/openwhisk/templates/invoker-pod.yaml

@@ -83,11 +83,17 @@ spec:
       - name: invoker
         image: "{{- .Values.docker.registry.name -}}{{- .Values.invoker.imageName -}}:{{- .Values.invoker.imageTag -}}"
         imagePullPolicy: {{ .Values.invoker.imagePullPolicy | quote }}
+        command:
+          - /bin/bash
+          - -c
+          -
+{{- if ne .Values.docker.registry.name "" }}
+            . /invoker-scripts/dockerLogin.sh &&
+{{- end }}
 {{- if and (eq .Values.invoker.containerFactory.impl "docker") .Values.invoker.containerFactory.networkConfig.dns.inheritInvokerConfig }}
-        command: [ "/bin/bash", "-c", ". /invoker-scripts/configureDNS.sh && /init.sh --uniqueName $INVOKER_NAME" ]
-{{- else }}
-        command: [ "/bin/bash", "-c", "/init.sh --uniqueName $INVOKER_NAME" ]
+            . /invoker-scripts/configureDNS.sh &&
 {{- end }}
+            /init.sh --uniqueName $INVOKER_NAME
         env:
           - name: "PORT"
             value: {{ .Values.invoker.port | quote }}
@@ -202,6 +208,20 @@ spec:
             value: "{{ .Values.elasticsearch.password }}"
           - name: "CONFIG_whisk_spi_ActivationStoreProvider"
             value: "org.apache.openwhisk.core.database.elasticsearch.ElasticSearchActivationStoreProvider"
+{{- end }}
+{{- if ne .Values.docker.registry.name "" }}
+          - name: "RUNTIMES_REGISTRY"
+            value: "{{- .Values.docker.registry.name -}}"
+          - name: "RUNTIMES_REGISTRY_USERNAME"
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Release.Name }}-docker.registry.auth
+                key: docker_registry_username
+          - name: "RUNTIMES_REGISTRY_PASSWORD"
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Release.Name }}-docker.registry.auth
+                key: docker_registry_password
 {{- end }}
         ports:
         - name: invoker