From 0760ef33a660a780f4b6c1cc095f69d9915185c7 Mon Sep 17 00:00:00 2001
From: znerol2 <6800371+znerol2@users.noreply.github.com>
Date: Sat, 7 Nov 2026 14:45:03 +0100
Subject: [PATCH] fix(chart): drop the default image pull secret

The chart named a registry-creds pull secret that nothing creates, so
every console pod logged FailedToRetrieveImagePullSecret. Pulls only
worked because the platform registry serves anonymous reads, and the
warning would have hidden a real failure if that changed.

Default imagePullSecrets to an empty list and say when to set it.

Closes dmfdeploy/dmfdeploy#852

Signed-off-by: znerol2 <6800371+znerol2@users.noreply.github.com>
---
 charts/dmf-cms/values.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/charts/dmf-cms/values.yaml b/charts/dmf-cms/values.yaml
index aecfa9e..fde9195 100644
--- a/charts/dmf-cms/values.yaml
+++ b/charts/dmf-cms/values.yaml
@@ -9,8 +9,9 @@ image:
   tag: "0.41.0"
   pullPolicy: IfNotPresent
 
-imagePullSecrets:
-  - name: registry-creds
+# Set this only when the registry requires credentials for reads. The platform
+# registry serves anonymous reads (ADR-0033), so the default is empty.
+imagePullSecrets: []
 
 service:
   type: ClusterIP