Improve UI security and deploy workflow

chart/templates/deployment.yaml

@@ -20,6 +20,10 @@ spec:
       labels:
         {{- include "app.selectorLabels" . | nindent 8 }}
     spec:
+      {{- with .Values.app.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       securityContext:
         runAsUser: {{ .Values.app.securityContext.runAsUser }}
         runAsGroup: {{ .Values.app.securityContext.runAsGroup }}
@@ -27,7 +31,8 @@ spec:
         fsGroup: {{ .Values.app.securityContext.runAsGroup }}
       containers:
         - name: web
-          image: {{ .Values.app.image }}
+          image: {{ .Values.app.image | quote }}
+          imagePullPolicy: {{ .Values.app.imagePullPolicy | default "Always" }}
           ports:
             - containerPort: {{ .Values.app.port }}
               protocol: TCP

chart/values.yaml.example

@@ -2,6 +2,8 @@ namespace: apcupsd
 
 app:
   image: ghcr.io/k2patel/apcupsd-client:latest
+  imagePullPolicy: IfNotPresent
+  imagePullSecrets: []
   replicas: 1
   port: 8000
   resources: