Private Registry with Kubernetes Provider

[pew]

Hi, I'm wondering how to use Diun with the Kubernetes provider and private registries? I deployed Diun using the quick start guide. It seems to work for public images, but for private ones I get this warning:

unable to retrieve auth token: invalid username/password: unauthorized" image=ghcr.io/[...]

The registry secrets are configured in my k8s environment already, is there a way to make Diun use them instead of providing the username/password separately within the Diun config?

[pew]

If k8s is using a docker config.json file as a secret, this seems to work in combination with Diun:

for the container part:

volumeMounts:
  - mountPath: /root/.docker/
    name: docker-config
    readOnly: true

referencing the volume:

volumes:
  - name: docker-config
    secret:
      secretName: regcred
      items:
      - key: .dockerconfigjson
        path: config.json

this will mount the existing .dockerconfigjson secret to the diun container at /root/.docker/config.json