handsome-state-59775
04/06/2021, 4:15 AMkubectl -n $NAMESPACE patch serviceaccount default -p '{"imagePullSecrets": [{"name": "regcred"}]}'
?
(azure-natice, python, pulumi_kubernetes)better-shampoo-48884
04/06/2021, 6:10 AMwhite-balloon-205
04/07/2021, 5:18 AMhandsome-state-59775
04/14/2021, 1:35 PMdef patch_service_account_default(
kubeconfig: p.Output,
namespace: k8s.core.v1.Namespace,
image_pull_secret_name: str,
) -> None:
"""Patches default serviceaccount of namespace with image pull secret."""
serviceaccount_patch = p.Output.all(
kubeconfig=kubeconfig,
namespace_metadata=namespace.metadata,
).apply(
lambda args:
subprocess.run(
f"kubectl --kubeconfig=<(echo '{args['kubeconfig']}')"
f" -n {args['namespace_metadata']['name']}"
' patch serviceaccount default'
''' -p '{"imagePullSecrets": [{'''
f'"name": "{image_pull_secret_name}"'
'''}]}' ''',
executable='/bin/bash',
shell=True,
check=True,
capture_output=True,
),
)
serviceaccount_patch.apply(
lambda results:
p.info(
msg=results.stdout.decode(),
resource=namespace,
) if results.stdout else None,
)
serviceaccount_patch.apply(
lambda results:
p.error(
msg=results.stderr.decode(),
resource=namespace,
) if results.stderr else None,
)