# Container registry secret for image pulls in main namespace
registry_credentials_encoded = REGISTRY_PASSWORD.apply(
    lambda registry_password_resolved:
    base64.b64encode(
        f'{REGISTRY_USERNAME}:{registry_password_resolved}'.encode(),
    ).decode(),
)
docker_config_json = registry_credentials_encoded.apply(
    lambda registry_credentials_encoded_resolved:
    {
        '.dockerconfigjson':
            '{"auths":{'
            f'"{CONTAINER_REGISTRY}":'
            '{"auth":'
            f'"{registry_credentials_encoded_resolved}"'
            '}}}',
    },
)
image_pull_secret_ns_main = k8s.core.v1.Secret(
    resource_name=f'containerRegistryCredentials-{NAMESPACE_MAIN}',
    metadata=k8s.meta.v1.ObjectMetaArgs(
        name='regcred',
        namespace=NAMESPACES[NAMESPACE_MAIN].metadata.name,
    ),
    type='<http://kubernetes.io/dockerconfigjson|kubernetes.io/dockerconfigjson>',
    string_data=docker_config_json,
    opts=p.ResourceOptions(
        provider=k8s_provider,
        parent=NAMESPACES[NAMESPACE_MAIN]
        if NAMESPACE_MAIN in NAMESPACES else aks,
    ),
)