Pull Secret Trait

The Pull Secret trait sets a pull secret on the pod to allow Kubernetes to retrieve the container image from an external registry.

In a production environment it is highly advisable to provide such authentication and ensure the secret exists in the Integration namespace.

This trait is available in the following profiles: Kubernetes, Knative, OpenShift.

Configuration

Trait properties can be specified when running any integration with the CLI:

$ kamel run --trait pull-secret.[key]=[value] --trait pull-secret.[key2]=[value2] integration.yaml

The following configuration options are available:

Property Type Description

Property	Type	Description
`pull-secret.enabled`	`bool`	Can be used to enable or disable a trait. All traits share this common property.
`pull-secret.secretName`	`string`	The pull secret name to set on the Pod.
`pull-secret.imagePullerDelegation`	`bool`	When using a global operator with a shared platform, this enables delegation of the `system:image-puller` cluster role on the operator namespace to the integration service account. Deprecated: may be removed in future releases.
`pull-secret.auto`	`bool`	Automatically configures the platform registry secret on the pod if it is of type `kubernetes.io/dockerconfigjson`.

pull-secret.enabled

bool

Can be used to enable or disable a trait. All traits share this common property.

pull-secret.secretName

string

The pull secret name to set on the Pod.

pull-secret.imagePullerDelegation

bool

When using a global operator with a shared platform, this enables delegation of the system:image-puller cluster role on the operator namespace to the integration service account.

Deprecated: may be removed in future releases.

pull-secret.auto

bool

Automatically configures the platform registry secret on the pod if it is of type kubernetes.io/dockerconfigjson.

the variable names are "snake case" if you’re using in kamel CLI, for example trait.myParam has to be translated as -t trait.my-param