Configure Nodes to Access Secure Registries

[MattPOlson]

This is a feature request for the following. With the current version of the operator that uses containerd the toml file at C:\k\containerd on each of the nodes needs to be modified to allow auth to the private registry. Currently every time a windows node is provisioned there is a manual step to allow it to pull from the registry. If the operator could read from the same secret that the coreos nodes use and configure the toml file on the nodes this would eliminate the manual step currently needed. Below is an example of the config file to allow access.

      config_path = ""

      [plugins."io.containerd.grpc.v1.cri".registry.auths]

      [plugins."io.containerd.grpc.v1.cri".registry.configs]
        [plugins."io.containerd.grpc.v1.cri".registry.configs."my-registry.com".auth]
          auth = "*************"

      [plugins."io.containerd.grpc.v1.cri".registry.headers] 

[jrvaldes]

@MattPOlson, WINC-846 was created to track this work.

[jrvaldes]

/close

[openshift-ci]

@jrvaldes: Closing this issue.

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[sebsoto]

/reopen

[openshift-ci]

@sebsoto: Reopened this issue.

In response to this:

/reopen

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[sebsoto]

Keeping this open so its tracked on Github as well

[openshift-bot]

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

[sebsoto]

/remove-lifecycle stale

[sebsoto]

/lifecycle frozen