From de725ab0d849cb297d7f83aea9e8d04c68c9ed5b Mon Sep 17 00:00:00 2001
From: OdooSky v3 <m@havari.me>
Date: Sat, 9 May 2026 22:30:09 +0200
Subject: [PATCH] fix(chart): keda-add-ons-http operator.imagePullSecrets for
 mirrored sidecar

---
 values.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/values.yaml b/values.yaml
index 57a7e64..b54d75d 100644
--- a/values.yaml
+++ b/values.yaml
@@ -387,6 +387,13 @@ keda-add-ons-http:
     kubeRbacProxy:
       name: registry.odoosky.cloud/odoosky/docker-mirror/kube-rbac-proxy
       tag: v0.18.0
+  # imagePullSecrets — required so the kube-rbac-proxy sidecar
+  # (mirrored at registry.odoosky.cloud) can pull. The operator
+  # container itself pulls from ghcr.io which needs no auth, but
+  # k8s applies imagePullSecrets per-pod (covers all containers).
+  operator:
+    imagePullSecrets:
+      - name: docker-mirror-pull
   interceptor:
     replicas:
       # Scale the interceptor itself with HPA on its own metrics —