(Note to self: if you are reading this, the HSA k8s howtos exist and have screenshots to describe this exact process…)

• In the Gitlab project Settings->Repository, create a new Deploy token with at least reading access.
  • username will be ~ gitlab+deploy-token-N
• Rancher
  • Storage->Secret, create a new secret in of type Custom. Registry Domain Name is the gitlab instance including the port, so your.gitlab.domain.com:5050 w/ the password
  • let’s call it project-x-gitlab-registry
• Pods
  • In the config:

apiVersion: v1
kind: Pod
metadata:
  name: lm-eval-sh
  namespace: project-eval-lm-ua
spec:
  containers:
    - name: xxx
  # etc
  imagePullSecrets:
    - name: project-x-gitlab-registry