wso2 · AqeelMuhammad · Jul 24, 2026 · Jun 12, 2026 · Jun 12, 2026 · Jun 12, 2026
diff --git a/all-in-one/README.md b/all-in-one/README.md
@@ -377,7 +377,8 @@ A Helm chart for the deployment of WSO2 API Manager all-in-one distribution.
 | wso2.deployment.highAvailability | bool | `false` |  |
 | wso2.deployment.image.digest | string | `""` | Docker image digest |
 | wso2.deployment.image.imagePullPolicy | string | `"Always"` | Refer to the Kubernetes documentation on updating images (https://kubernetes.io/docs/concepts/containers/images/#updating-images) |
-| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"name":"","password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets.name | string | `""` | Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created. |
 | wso2.deployment.image.registry | string | `""` | Registry containing the image |
 | wso2.deployment.image.repository | string | `""` | Repository name consisting the image |
 | wso2.deployment.image.tag | string | `""` | Docker image tag |

diff --git a/all-in-one/default_openshift_values.yaml b/all-in-one/default_openshift_values.yaml
@@ -662,6 +662,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Registry containing the image

diff --git a/all-in-one/default_values.yaml b/all-in-one/default_values.yaml
@@ -760,6 +760,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Registry containing the image

diff --git a/all-in-one/templates/am/instance-1/wso2am-deployment.yaml b/all-in-one/templates/am/instance-1/wso2am-deployment.yaml
@@ -66,8 +66,12 @@ spec:
           {{- end }}
       {{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
       imagePullSecrets:
+      {{- if .Values.wso2.deployment.image.imagePullSecrets.name }}
+      - name: {{ .Values.wso2.deployment.image.imagePullSecrets.name }}
+      {{- else }}
       - name: {{ template "am-all-in-one.fullname" . }}-docker-registry-auth
       {{- end }}
+      {{- end }}
       containers:
         - name: wso2am
           {{- if .Values.wso2.deployment.image.digest }}

diff --git a/all-in-one/templates/am/instance-2/wso2am-deployment.yaml b/all-in-one/templates/am/instance-2/wso2am-deployment.yaml
@@ -67,8 +67,12 @@ spec:
           {{- end }}
       {{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
       imagePullSecrets:
+      {{- if .Values.wso2.deployment.image.imagePullSecrets.name }}
+      - name: {{ .Values.wso2.deployment.image.imagePullSecrets.name }}
+      {{- else }}
       - name: {{ template "am-all-in-one.fullname" . }}-docker-registry-auth
       {{- end }}
+      {{- end }}
       containers:
         - name: wso2am
           {{- if .Values.wso2.deployment.image.digest }}

diff --git a/all-in-one/templates/secrets/wso2am-secret-docker-registry.yaml b/all-in-one/templates/secrets/wso2am-secret-docker-registry.yaml
@@ -1,4 +1,4 @@
-{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
+{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled (not .Values.wso2.deployment.image.imagePullSecrets.name) }}
 # -------------------------------------------------------------------------------------
 #
 # Copyright (c) 2025, WSO2 LLC. (http://www.wso2.com). All Rights Reserved.

diff --git a/all-in-one/values.yaml b/all-in-one/values.yaml
@@ -870,6 +870,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created.
+        name: ""
         username: ""
         password: ""
       # -- Registry containing the image

diff --git a/distributed/control-plane/README.md b/distributed/control-plane/README.md
@@ -246,7 +246,8 @@ A Helm chart for the deployment of WSO2 API Management API Control Plane profile
 | wso2.deployment.highAvailability | bool | `true` | Enable high availability for traffic manager. If this is enabled, two traffic manager instances will be deployed. This is not relavant to HA in Kubernetes. Multiple replicas of the same instance will not count as HA for TM. |
 | wso2.deployment.image.digest | string | `""` | Docker image digest |
 | wso2.deployment.image.imagePullPolicy | string | `"Always"` | Refer to the Kubernetes documentation on updating images (https://kubernetes.io/docs/concepts/containers/images/#updating-images) |
-| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"name":"","password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets.name | string | `""` | Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created. |
 | wso2.deployment.image.registry | string | `""` | Container registry hostname |
 | wso2.deployment.image.repository | string | `""` | Azure ACR repository name consisting the image |
 | wso2.deployment.image.tag | string | `""` | Docker image tag |

diff --git a/distributed/control-plane/templates/control-plane/instance-1/wso2am-cp-deployment.yaml b/distributed/control-plane/templates/control-plane/instance-1/wso2am-cp-deployment.yaml
@@ -69,8 +69,12 @@ spec:
           {{- end }}
       {{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
       imagePullSecrets:
+      {{- if .Values.wso2.deployment.image.imagePullSecrets.name }}
+      - name: {{ .Values.wso2.deployment.image.imagePullSecrets.name }}
+      {{- else }}
       - name: {{ template "apim-helm-cp.fullname" . }}-docker-registry-auth
       {{- end }}
+      {{- end }}
       containers:
       - name: wso2am-control-plane
         {{- if .Values.wso2.deployment.image.digest }}

diff --git a/distributed/control-plane/templates/control-plane/instance-2/wso2am-cp-deployment.yaml b/distributed/control-plane/templates/control-plane/instance-2/wso2am-cp-deployment.yaml
@@ -70,8 +70,12 @@ spec:
           {{- end }}
       {{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
       imagePullSecrets:
+      {{- if .Values.wso2.deployment.image.imagePullSecrets.name }}
+      - name: {{ .Values.wso2.deployment.image.imagePullSecrets.name }}
+      {{- else }}
       - name: {{ template "apim-helm-cp.fullname" . }}-docker-registry-auth
       {{- end }}
+      {{- end }}
       containers:
       - name: wso2am-control-plane
         {{- if .Values.wso2.deployment.image.digest }}

diff --git a/distributed/control-plane/templates/secrets/wso2am-secret-docker-registry.yaml b/distributed/control-plane/templates/secrets/wso2am-secret-docker-registry.yaml
@@ -1,4 +1,4 @@
-{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
+{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled (not .Values.wso2.deployment.image.imagePullSecrets.name) }}
 # -------------------------------------------------------------------------------------
 #
 # Copyright (c) 2025, WSO2 LLC. (http://www.wso2.com). All Rights Reserved.

diff --git a/distributed/control-plane/values.yaml b/distributed/control-plane/values.yaml
@@ -645,6 +645,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/distributed/gateway/README.md b/distributed/gateway/README.md
@@ -220,7 +220,8 @@ A Helm chart for the deployment of WSO2 API Management Universal Gateway profile
 | wso2.deployment.envs | object | `{}` | Environment variables for the deployment Example:   envs:     MY_CUSTOM_VAR: "my-value"     ANOTHER_VAR: "another-value" |
 | wso2.deployment.image.digest | string | `""` | Docker image digest |
 | wso2.deployment.image.imagePullPolicy | string | `"Always"` | Refer to the Kubernetes documentation on updating images (https://kubernetes.io/docs/concepts/containers/images/#updating-images) |
-| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"name":"","password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets.name | string | `""` | Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created. |
 | wso2.deployment.image.registry | string | `""` | Container registry hostname |
 | wso2.deployment.image.repository | string | `""` | Azure ACR repository name consisting the image |
 | wso2.deployment.image.tag | string | `""` | Docker image tag |

diff --git a/distributed/gateway/templates/gateway/wso2am-gateway-deployment.yaml b/distributed/gateway/templates/gateway/wso2am-gateway-deployment.yaml
@@ -70,8 +70,12 @@ spec:
           {{- end }}
       {{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
       imagePullSecrets:
+      {{- if .Values.wso2.deployment.image.imagePullSecrets.name }}
+      - name: {{ .Values.wso2.deployment.image.imagePullSecrets.name }}
+      {{- else }}
       - name: {{ template "apim-helm-gw.fullname" . }}-docker-registry-auth
       {{- end }}
+      {{- end }}
       containers:
       - name: wso2am-gateway
         {{- if .Values.wso2.deployment.image.digest }}

diff --git a/distributed/gateway/templates/secrets/wso2am-secret-docker-registry.yaml b/distributed/gateway/templates/secrets/wso2am-secret-docker-registry.yaml
@@ -1,4 +1,4 @@
-{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
+{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled (not .Values.wso2.deployment.image.imagePullSecrets.name) }}
 # -------------------------------------------------------------------------------------
 #
 # Copyright (c) 2025, WSO2 LLC. (http://www.wso2.com). All Rights Reserved.

diff --git a/distributed/gateway/values.yaml b/distributed/gateway/values.yaml
@@ -570,6 +570,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/distributed/key-manager/README.md b/distributed/key-manager/README.md
@@ -156,7 +156,8 @@ A Helm chart for the deployment of WSO2 API Manager all-in-one distribution.
 | wso2.deployment.highAvailability | bool | `false` | Enable high availability for key manager. If this is enabled, two key manager replicas will be deployed. |
 | wso2.deployment.image.digest | string | `""` | Docker image digest |
 | wso2.deployment.image.imagePullPolicy | string | `"Always"` | Refer to the Kubernetes documentation on updating images (https://kubernetes.io/docs/concepts/containers/images/#updating-images) |
-| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"name":"","password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets.name | string | `""` | Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created. |
 | wso2.deployment.image.registry | string | `""` | Container registry hostname |
 | wso2.deployment.image.repository | string | `""` | Azure ACR repository name consisting the image |
 | wso2.deployment.image.tag | string | `""` | Docker image tag |

diff --git a/distributed/key-manager/templates/key-manager/wso2am-km-deployment.yaml b/distributed/key-manager/templates/key-manager/wso2am-km-deployment.yaml
@@ -74,8 +74,12 @@ spec:
           {{- end }}
       {{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
       imagePullSecrets:
+      {{- if .Values.wso2.deployment.image.imagePullSecrets.name }}
+      - name: {{ .Values.wso2.deployment.image.imagePullSecrets.name }}
+      {{- else }}
       - name: {{ template "apim-helm-km.fullname" . }}-docker-registry-auth
       {{- end }}
+      {{- end }}
       containers:
       - name: wso2am-km
         {{- if .Values.wso2.deployment.image.digest }}

diff --git a/distributed/key-manager/templates/secrets/wso2am-secret-docker-registry.yaml b/distributed/key-manager/templates/secrets/wso2am-secret-docker-registry.yaml
@@ -1,4 +1,4 @@
-{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
+{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled (not .Values.wso2.deployment.image.imagePullSecrets.name) }}
 # -------------------------------------------------------------------------------------
 #
 # Copyright (c) 2025, WSO2 LLC. (http://www.wso2.com). All Rights Reserved.

diff --git a/distributed/key-manager/values.yaml b/distributed/key-manager/values.yaml
@@ -413,6 +413,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/distributed/traffic-manager/README.md b/distributed/traffic-manager/README.md
@@ -115,7 +115,8 @@ A Helm chart for the deployment of WSO2 API Management Traffic Manager profile
 | wso2.deployment.highAvailability | bool | `true` | Enable high availability for traffic manager. If this is enabled, two traffic manager instances will be deployed. This is not relavant to HA in Kubernetes. Multiple replicas of the same instance will not count as HA for TM. |
 | wso2.deployment.image.digest | string | `""` | Docker image digest |
 | wso2.deployment.image.imagePullPolicy | string | `"Always"` | Refer to the Kubernetes documentation on updating images (https://kubernetes.io/docs/concepts/containers/images/#updating-images) |
-| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets | object | `{"enabled":false,"name":"","password":"","username":""}` | Container registry credentials. Specify image pull secrets for private registries |
+| wso2.deployment.image.imagePullSecrets.name | string | `""` | Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created. |
 | wso2.deployment.image.registry | string | `""` | Container registry hostname |
 | wso2.deployment.image.repository | string | `""` | Azure ACR repository name consisting the image |
 | wso2.deployment.image.tag | string | `""` | Docker image tag |

diff --git a/distributed/traffic-manager/templates/secrets/wso2am-secret-docker-registry.yaml b/distributed/traffic-manager/templates/secrets/wso2am-secret-docker-registry.yaml
@@ -1,4 +1,4 @@
-{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
+{{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled (not .Values.wso2.deployment.image.imagePullSecrets.name) }}
 # -------------------------------------------------------------------------------------
 #
 # Copyright (c) 2025, WSO2 LLC. (http://www.wso2.com). All Rights Reserved.

diff --git a/distributed/traffic-manager/templates/traffic-manager/instance-1/wso2am-tm-deployment.yaml b/distributed/traffic-manager/templates/traffic-manager/instance-1/wso2am-tm-deployment.yaml
@@ -72,8 +72,12 @@ spec:
           {{- end }}
       {{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
       imagePullSecrets:
+      {{- if .Values.wso2.deployment.image.imagePullSecrets.name }}
+      - name: {{ .Values.wso2.deployment.image.imagePullSecrets.name }}
+      {{- else }}
       - name: {{ template "apim-helm-tm.fullname" . }}-docker-registry-auth
       {{- end }}
+      {{- end }}
       containers:
       - name: wso2am-traffic-manager
         {{- if .Values.wso2.deployment.image.digest }}

diff --git a/distributed/traffic-manager/templates/traffic-manager/instance-2/wso2am-tm-deployment.yaml b/distributed/traffic-manager/templates/traffic-manager/instance-2/wso2am-tm-deployment.yaml
@@ -73,8 +73,12 @@ spec:
           {{- end }}
       {{- if and .Values.wso2.deployment.image.imagePullSecrets.enabled }}
       imagePullSecrets:
+      {{- if .Values.wso2.deployment.image.imagePullSecrets.name }}
+      - name: {{ .Values.wso2.deployment.image.imagePullSecrets.name }}
+      {{- else }}
       - name: {{ template "apim-helm-tm.fullname" . }}-docker-registry-auth
       {{- end }}
+      {{- end }}
       containers:
       - name: wso2am-traffic-manager
         {{- if .Values.wso2.deployment.image.digest }}

diff --git a/distributed/traffic-manager/values.yaml b/distributed/traffic-manager/values.yaml
@@ -321,6 +321,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/resources/am-pattern-0-all-in-one/default_values.yaml b/resources/am-pattern-0-all-in-one/default_values.yaml
@@ -691,6 +691,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Registry containing the image

diff --git a/resources/am-pattern-1-all-in-one-HA/default_values.yaml b/resources/am-pattern-1-all-in-one-HA/default_values.yaml
@@ -710,6 +710,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/resources/am-pattern-2-all-in-one_GW/default_gw_values.yaml b/resources/am-pattern-2-all-in-one_GW/default_gw_values.yaml
@@ -451,6 +451,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/resources/am-pattern-2-all-in-one_GW/default_values.yaml b/resources/am-pattern-2-all-in-one_GW/default_values.yaml
@@ -684,6 +684,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Registry containing the image

diff --git a/resources/am-pattern-3-ACP_TM_GW/default_acp_values.yaml b/resources/am-pattern-3-ACP_TM_GW/default_acp_values.yaml
@@ -503,6 +503,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/resources/am-pattern-3-ACP_TM_GW/default_gw_values.yaml b/resources/am-pattern-3-ACP_TM_GW/default_gw_values.yaml
@@ -453,6 +453,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/resources/am-pattern-3-ACP_TM_GW/default_tm_values.yaml b/resources/am-pattern-3-ACP_TM_GW/default_tm_values.yaml
@@ -249,6 +249,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/resources/am-pattern-4-ACP_TM_GW_KM/default_acp_values.yaml b/resources/am-pattern-4-ACP_TM_GW_KM/default_acp_values.yaml
@@ -503,6 +503,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/resources/am-pattern-4-ACP_TM_GW_KM/default_gw_values.yaml b/resources/am-pattern-4-ACP_TM_GW_KM/default_gw_values.yaml
@@ -453,6 +453,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/resources/am-pattern-4-ACP_TM_GW_KM/default_km_values.yaml b/resources/am-pattern-4-ACP_TM_GW_KM/default_km_values.yaml
@@ -335,6 +335,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname

diff --git a/resources/am-pattern-4-ACP_TM_GW_KM/default_tm_values.yaml b/resources/am-pattern-4-ACP_TM_GW_KM/default_tm_values.yaml
@@ -249,6 +249,8 @@ wso2:
       # Specify image pull secrets for private registries
       imagePullSecrets:
         enabled: false
+        # -- Name of an existing image pull secret in the namespace. If set, this secret is used directly and no new secret is created from username/password credentials.
+        name: ""
         username: ""
         password: ""
       # -- Container registry hostname