Install Helm Charts from a Private Registry

This page shows how to deploy a Helm Chart from a private registry to child clusters. A Secret is used to store the credentials.

Create a Secret

In most shells, the easiest way to escape the password is to surround it with single quotes ('). For example, if your password is S!B\*d$zDsb=, run the following command:

kubectl create ns my-system
kubectl create secret generic my-helm-repo -n my-system \
  --from-literal=username=devuser \

or we can apply below yaml file with command kubectl apply,

apiVersion: v1
kind: Secret
  name: my-helm-repo
  namespace: my-system
type: Opaque
  password: devuser
  username: S!B\*d$zDsb=

Create a Helm Chart that uses your Secret

Here is a manifest for an example HelmChart that needs access to your Helm registry credentials in my-helm-repo:

kind: HelmChart
  name: mysql
  namespace: default
  repo: https://my.private.repo/registry
    name: my-helm-repo
    namespace: my-system
  chart: mysql
  version: 9.2.0
  targetNamespace: abc

Then you can follow tutorials on multi-cluster applications to deploy this HelmChart to child clusters.

Last modified June 2, 2023: add doc on feed inventory (#86) (db1bc3b)