feat: add global.images.pullSecrets support to k8s-agents-operator

Add support for cascade imagePullSecrets from global.images.pullSecrets:
- Added pullSecrets configuration to controllerManager.manager.image in values.yaml
- Added imagePullSecrets rendering in deployment.yaml that respects both
  global.images.pullSecrets (takes precedence) and chart-level pullSecrets
- Pattern: Concatenates global and chart-level pullSecrets, uses common library
  renderPullSecrets helper for consistent formatting

Configuration hierarchy:
1. global.images.pullSecrets (applied first)
2. controllerManager.manager.image.pullSecrets (applied second)
Both sources are combined to support flexible secret management.

🤖 Generated with Claude Code

Co-Authored-By: Claude <[email protected]>

Author: dpacheconr

charts/k8s-agents-operator/templates/deployment.yaml

@@ -26,6 +26,14 @@ spec:
       hostNetwork: {{ .Values.hostNetwork }}
       {{- end }}
       serviceAccountName: {{ include "newrelic.common.serviceAccount.name" . }}
+      {{- $globalPullSecrets := .Values.global.images.pullSecrets | default list }}
+      {{- $chartPullSecrets := .Values.controllerManager.manager.image.pullSecrets | default list }}
+      {{- if or $globalPullSecrets $chartPullSecrets }}
+      {{- with include "newrelic.common.images.renderPullSecrets" ( dict "pullSecrets" (concat $globalPullSecrets $chartPullSecrets) "context" .) }}
+      imagePullSecrets:
+        {{- . | nindent 8 }}
+      {{- end }}
+      {{- end }}
       {{- with include "newrelic.common.securityContext.pod" . }}
       securityContext:
         {{- . | nindent 8 }}

charts/k8s-agents-operator/values.yaml

@@ -57,6 +57,8 @@ controllerManager:
       # -- Sets the manager image version to retrieve. Could be a tag i.e. "v0.17.0" or a SHA digest i.e. "sha256:e2399e70e99ac370ca6a3c7e5affa9655da3b246d0ada77c40ed155b3726ee2e"
       version:
       pullPolicy:
+      # -- The secrets that are needed to pull images from a custom registry. Can be configured also with `global.images.pullSecrets`
+      pullSecrets: []
     resources:
       limits:
         cpu: 500m