Pull Images from a Private Registry

Container images may be pulled from a private registry. As an alternative to granting the default service account access to a private registry, a Pod can be configured to use imagePullSecrets. This will pass the credentials down to the StatefulSet spec when the Operator pulls an image.

To create a secret with the necessary credentials:

  1. Create a secret with the required credentials.

  2. Add the following lines and secret name to the spec section of the memsql-cluster.yaml file:

    spec:
      containers:
      - name: private-reg-container
        image: <your-private-image>
      imagePullSecrets:
      - name: <secret-name>

This will allow the image to be pulled from a private registry using the specified credentials.

Refer to the following for additional information.