📋 Prerequisites
📝 Feature Summary
The Agent CRD (kagent.dev/v1alpha2) supports imagePullSecrets in the spec.declarative.deployment section, but the Helm chart templates for agents (k8s-agent, cilium-policy-agent, cilium-manager-agent, etc.) don't expose this configuration through helm values.
❓ Problem Statement / Motivation
When using a private container registry that requires authentication, agent pods fail to pull images because they don't have imagePullSecrets configured. The global imagePullSecrets value works for the controller and UI deployments, but is not passed to Agent CRs.
💡 Proposed Solution
- Update each agent's values.yaml and templates/agent.yaml to support imagePullSecrets.
- Inherit from the parent chart's global imagePullSecrets if not explicitly set.
📋 Prerequisites
📝 Feature Summary
The Agent CRD (kagent.dev/v1alpha2) supports imagePullSecrets in the spec.declarative.deployment section, but the Helm chart templates for agents (k8s-agent, cilium-policy-agent, cilium-manager-agent, etc.) don't expose this configuration through helm values.
❓ Problem Statement / Motivation
When using a private container registry that requires authentication, agent pods fail to pull images because they don't have imagePullSecrets configured. The global imagePullSecrets value works for the controller and UI deployments, but is not passed to Agent CRs.
💡 Proposed Solution