Image Pull Secrets

Analyzing the image pull secrets that are available in the cluster

The imagePullSecret analyzer checks that a secret exists with credentials to pull images from a registry. It does not verify that the credentials in the secret are valid.

The imagePullSecret analyzer uses data from the clusterResources collector. The clusterResources collector is automatically added and will always be present.


registryName: (Required) The name of the registry to check

apiVersion: troubleshoot.sh/v1beta2
kind: Preflight
  name: preflight-sample
    - imagePullSecret:
        checkName: Pull from Quay
        registryName: quay.io
          - fail:
              message: Did not find credentials to pull from Quay
          - pass:
              message: Found credentials to pull from Quay

Note: troubleshoot.sh/v1beta2 was introduced in preflight and support-bundle krew plugin version 0.9.39 and Kots version 1.19.0. Kots vendors should read the guide to maintain backwards compatibility.

Edit on GitHub