opendefensecloud / solution-arsenal / 26939975669

74%

Build Type

push

github

Committed by web-flow

Commit Message

feat: improved target secret rendering (#553)

## What

Improves the rendering for imagePullSecrets.

Closes #440 

## Testing
Unit Tests and E2E.

## Checklist
- [X] Tests added/updated
- [x] No breaking changes (or upgrade path documented above)
- [X] Readable commit history (squashed and cleaned up as desired)
- [x] AI code review considered and comments resolved


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Rendering now resolves per-resource pull-secret names via
RegistryBinding and includes them in rendered manifests and
release/bootstrap inputs.

* **Configuration Changes**
* Added strict mode flag (--registry-binding-strict) to enforce
RegistryBinding matches.
* Helm values and templates updated to conditionally render pull-secret
refs; RBAC updated to allow RegistryBinding access.

* **Documentation**
* Registry credential ADR accepted; API and controller docs updated for
resolved pull-secret behavior.

* **Tests**
* Unit, renderer, and e2e tests updated for pull-secret resolution,
strict mode, and spec-drift.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Coverage Stats

141 of 163 new or added lines in 2 files covered. (86.5%)

2 existing lines in 1 file now uncovered.

2610 of 3531 relevant lines covered (73.92%)

29.7 hits per line