UNCLASSIFIED - NO CUI

Support utilizing imageData with private registries

In order to support utilizing the imageData variable in kyverno policies such as https://kyverno.io/policies/other/block_images_with_volumes/block-images-with-volumes/ we need to:

  • Add --imagePullSecrets to .Values.extraArgs
extraArgs:
  - --clientRateLimitQPS=25
  - --clientRateLimitBurst=50
  - --autogenInternals=false
  - --imagePullSecrets=private-registry
  • Ensure NetworkPolicy includes an exception to allow network traffic to query the registry.