From 19f3180a264bc49c4aa468f63ee6f3a7b7aad9c8 Mon Sep 17 00:00:00 2001
From: Arunesh Dwivedi <arunesh.devops@gmail.com>
Date: Thu, 25 Jun 2026 15:00:15 +0000
Subject: [PATCH] fix: pass imagePullSecrets to cleanup job pod spec

The cleanup hook job ignored imagePullSecrets from values.yaml,
causing image pull failures when using private registries that
require authentication. Adds the same imagePullSecrets block
already present in the deployment template.

Signed-off-by: Arunesh Dwivedi <arunesh.devops@gmail.com>
---
 charts/k8up/templates/cleanup-hook.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/charts/k8up/templates/cleanup-hook.yaml b/charts/k8up/templates/cleanup-hook.yaml
index a0375f635..e7b5f2211 100644
--- a/charts/k8up/templates/cleanup-hook.yaml
+++ b/charts/k8up/templates/cleanup-hook.yaml
@@ -82,6 +82,10 @@ spec:
     spec:
       restartPolicy: Never
       serviceAccountName: cleanup-service-account
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       containers: