Merge pull request #240 from chhsiao1981/image-pull-secrets

k8smgr: add image_pull_secrets in V1PodSpec

Author: chhsiao1981

pman/config.py

@@ -67,6 +67,8 @@ def __init__(self):
         if self.CONTAINER_ENV == 'kubernetes':
             self.JOB_NAMESPACE = env('JOB_NAMESPACE', 'default')
             self.NODE_SELECTOR = env.dict('NODE_SELECTOR', {})
+            image_pull_secrets = env('IMAGE_PULL_SECRETS', '')
+            self.IMAGE_PULL_SECRETS = None if not image_pull_secrets else image_pull_secrets.split(',')
 
         if self.CONTAINER_ENV == 'cromwell':
             self.CROMWELL_URL = env('CROMWELL_URL')

pman/kubernetesmgr.py

@@ -224,13 +224,22 @@ def create_job(self, image, command, name, resources_dict, env_l, uid, gid,
 
         node_selector = self.config.get('NODE_SELECTOR')
 
+        pod_spec_args = {
+            'restart_policy': 'Never',
+            'containers': [container],
+            'volumes': [volume, *dshm_volume],
+        }
+
+        if node_selector:
+            pod_spec_args['node_selector'] = node_selector
+
+        image_pull_secrets = self.config.get('IMAGE_PULL_SECRETS')
+        if image_pull_secrets:
+            pod_spec_args['image_pull_secrets'] = image_pull_secrets
+
         template = k_client.V1PodTemplateSpec(
             metadata=pod_template_metadata,
-            spec=k_client.V1PodSpec(restart_policy='Never',
-                                    containers=[container],
-                                    volumes=[volume, *dshm_volume],
-                                    node_selector=node_selector),
-
+            spec=k_client.V1PodSpec(**pod_spec_args),
         )
         # configure job's spec
         spec = k_client.V1JobSpec(