Merge pull request #4014 from tredmon/pullsecrets-schema

fix: schema for agent.image.pullSecrets

Author: thallgren

CHANGELOG.yml

@@ -83,6 +83,10 @@ items:
           - connector-foreground => userd
           - daemon-foreground => rootd
           - kubeauth-foreground => kubeauthd
+      - type: bugfix
+        title: Fix schema for agent.image.pullSecrets
+        body: >-
+          The `agent.image.pullSecrets` is referenced by the helm chart's deployment.yaml but was previously disallowed by the schema file.
   - version: 2.25.1
     date: 2025-11-10
     notes:

charts/telepresence-oss/README.md

@@ -25,6 +25,7 @@ The following tables lists the configurable parameters of the Telepresence chart
 | affinity                                             | Define the `Node` Affinity and Anti-Affinity for the Traffic Manager.                                                                                               | `{}`                                                                        |
 | agent.image.name                                     | The name of the injected agent image                                                                                                                                | `""`                                                                        |
 | agent.image.pullPolicy                               | Pull policy in the webhook for the traffic agent image                                                                                                              | `IfNotPresent`                                                              |
+| agent.image.pullSecrets                              | The `Secret` storing any credentials needed to access the image in a private registry.                                                                              |                                                                             |
 | agent.image.tag                                      | The tag for the injected agent image                                                                                                                                | `""` (Defined in `appVersion` Chart.yaml)                                   |
 | agent.image.registry                                 | The registry for the injected agent image                                                                                                                           | `ghcr.io/telepresenceio`                                                    |
 | agent.initResources                                  | The resources for the injected init container                                                                                                                       |                                                                             |

charts/telepresence-oss/values.schema.yaml

@@ -43,6 +43,11 @@ properties:
           pullPolicy:
             description: Pull policy in the webhook for the traffic agent image
             $ref: "#/$defs/pullPolicy"
+          pullSecrets:
+            description: The Secret storing any credentials needed to access the image in a private registry
+            type: array
+            items:
+              $ref: "#/$defs/localObjectReference"
           registry:
             description: The registry for the injected agent image
             type: string

docs/helm/values.schema.json

@@ -57,6 +57,12 @@ The daemons are therefore now renamed:
 - kubeauth-foreground => kubeauthd
 </div>
 
+## <div style="display:flex;"><img src="images/bugfix.png" alt="bugfix" style="width:30px;height:fit-content;"/><div style="display:flex;margin-left:7px;">Fix schema for agent.image.pullSecrets</div></div>
+<div style="margin-left: 15px">
+
+The `agent.image.pullSecrets` is referenced by the helm chart's deployment.yaml but was previously disallowed by the schema file.
+</div>
+
 ## Version 2.25.1 <span style="font-size: 16px;">(November 10)</span>
 ## <div style="display:flex;"><img src="images/bugfix.png" alt="bugfix" style="width:30px;height:fit-content;"/><div style="display:flex;margin-left:7px;">Volumes did not mount correctly when using `telepresence connect --docker` when Docker had IPv6 enabled.</div></div>
 <div style="margin-left: 15px">

docs/release-notes.md

@@ -63,6 +63,12 @@ The daemons are therefore now renamed:
 - kubeauth-foreground => kubeauthd
   </Body>
 </Note>
+<Note>
+	<Title type="bugfix">Fix schema for agent.image.pullSecrets</Title>
+	<Body>
+The `agent.image.pullSecrets` is referenced by the helm chart's deployment.yaml but was previously disallowed by the schema file.
+  </Body>
+</Note>
 ## Version 2.25.1 <span style={{fontSize:'16px'}}>(November 10)</span>
 <Note>
 	<Title type="bugfix">Volumes did not mount correctly when using `telepresence connect --docker` when Docker had IPv6 enabled.</Title>