Skip to content

openshift/secrets/pull-secret-uri

Full reference URI for the shared operator-provided pull secret

The pull secret is the one secret shared across every cluster, written into the store once by the operator rather than generated per cluster. This param holds the COMPLETE LookupUri the openshift-secrets profile uses for openshift/pull-secret: scheme, location, and format query, all of it. The profile simply dereferences this param, so you control the entire reference.

Requirements

There is intentionally no default: the value only exists when a backend profile (or an operator override) provides it. The operator must seed the pull secret at the referenced store location before deploying a cluster.

Usage

Operators normally never set this param: each backend profile in this bundle supplies its backend's fixed shared location, resolving the scheme from openshift/secrets/store. The authoritative grammar for each backend lives in (and is documented by) its profile: see openshift-secrets-vault, openshift-secrets-awssecman, or openshift-secrets-azkeyvault.

Set it yourself to relocate the pull secret or to reshape the reference entirely, for example to match an existing operator workflow on your store. Set the override on the cluster itself (cluster-level params outrank profile-supplied values). A profile-hosted override only wins if that profile is ordered before the backend profile in the cluster's profile list, and global never wins: global is the lowest-precedence source in aggregation.

Objects that Reference openshift/secrets/pull-secret-uri

Objects used by openshift/secrets/pull-secret-uri

Not used in current content packs