Add proper authentication for pulling gcr private images

Author: mcabrams

.github/workflows/cd.yaml

@@ -8,15 +8,6 @@ jobs:
     - name: 'Checkout'
       uses: 'actions/checkout@v1'
 
-    - uses: GoogleCloudPlatform/github-actions/setup-gcloud@master
-      with:
-        version: '278.0.0'
-        service_account_email: ${{ secrets.GCP_SA_EMAIL }}
-        service_account_key: ${{ secrets.GCP_SA_KEY }}
-
-    - name: Authorize gcloud with docker
-      run: gcloud auth configure-docker
-
     - name: 'Helm dependency updates'
       run: |
         curl -LO https://get.helm.sh/helm-v3.0.3-linux-amd64.tar.gz \

first-deploy-quickstart.sh

@@ -5,13 +5,29 @@
 kubectl create namespace doppelganger
 kubectl create namespace staging-doppelganger
 kubectl create namespace production-doppelganger
+
+# Need to create secret for each namespace we will run pods in
 kubectl create secret docker-registry gcr-json-key \
   --namespace doppelganger \
   --docker-server=gcr.io \
   --docker-username=_json_key \
   --docker-password="$(cat ./json-key-file.json)" \
   --docker-email=any@valid.email
 
+kubectl create secret docker-registry gcr-json-key \
+  --namespace staging-doppelganger \
+  --docker-server=gcr.io \
+  --docker-username=_json_key \
+  --docker-password="$(cat ./json-key-file.json)" \
+  --docker-email=any@valid.email
+
+kubectl create secret docker-registry gcr-json-key \
+  --namespace production-doppelganger \
+  --docker-server=gcr.io \
+  --docker-username=_json_key \
+  --docker-password="$(cat ./json-key-file.json)" \
+  --docker-email=any@valid.email
+
 kubectl patch serviceaccount default \
   -p "{\"imagePullSecrets\": [{\"name\": \"gcr-json-key\"}]}"
 helm repo add stable https://kubernetes-charts.storage.googleapis.com