Handle config + passthrough for authenticated private registries

[richard-cox]

Epic: #16912

Is your feature request related to a problem? Please describe.

Support rancher/rancher#54180

Describe the solution you'd like

• Configuration of GSDR secret
  • Someplace in global settings --> settings
  • Needs to be the same secret selector as shown in v2prov registries tab
• Passthrough of GSDR secret to CSDR
  • Types: Imported Clusters (including hosted), hosted, and v2prov Clusters
  • We should improve / ensure we adequately explain what's happening (we're automatically copying in G settings to C settings)
• Configuration of CSDR secret
  • Types: Imported Clusters (including hosted), hosted, and v2prov Clusters
  • This happens atm for v2prov, we need to do similar for imported
• Passthrough of GSDR --> CSDR secret to chart install chart SDR secret + Configuration of chart install chart SDR secret
  • This was moved out of the RFD. Whilst we offer the option to override the GSDR and CSDR url when installing a system chart we won't initially offer the option to also provide a secret, or passthrough an existing secret from GSDR / CSDR.
  • https://github.com/SUSE/rancher-architecture/pull/52#discussion_r3001981259
• When users supply a SDR secret, whether at G or C levels, it's made clear to them it will be visible to all Pods that use it. Wording TBD. More info https://github.com/SUSE/rancher-architecture/pull/52#discussion_r3056739784

Additional context

• in v2prov world we offer users the option to provide image registry mirros.

[github-actions]

🤖 Issue grooming analysis

This feature request is well-groomed and ready for triage. Here's the analysis against the checklist:

✅ Clear Problem Statement
The title and description clearly explain the need: support authenticated private registries by enabling configuration and passthrough of Global/Cluster System Default Registry (GSDR/CSDR) secrets across imported clusters, hosted clusters, and v2prov clusters.

✅ Acceptance Criteria
A detailed, testable checklist is provided covering: configuration of GSDR secret (in global settings), GSDR passthrough to CSDR for imported/v2prov clusters, CSDR secret configuration, GSDR→CSDR passthrough to chart install SDR secrets, and a user-facing notice about secret visibility to Pods. One item is already marked complete (chart install SDR secret configuration moved out of scope per linked architecture discussion).

✅ Technical Details
The feature is linked to a parent epic (#16912), the upstream Rancher issue (#54180), and a SUSE architecture PR with discussion references. The scope across cluster types is clearly defined.

✅ Reproducibility (Feature)
The feature flow is well-described through the checklist items: from configuring at the global level, through passthrough to cluster level, through to chart installation.

This analysis was generated automatically based on the repository's grooming checklist.

Generated by Daily Issue Grooming · ◷

[richard-cox]

Blocked on rancher/rancher#54180

[mantis-toboggan-md]

One PR from r/r has been raised so far. Should be a second in the next few days
rancher/rancher#54890

[mantis-toboggan-md]

waiting on rancher/rancher#55071