Skip to content

make image digest available in setters#508

Closed
makkes wants to merge 2 commits intomainfrom
image-digests
Closed

make image digest available in setters#508
makkes wants to merge 2 commits intomainfrom
image-digests

Conversation

@makkes
Copy link
Copy Markdown
Member

@makkes makkes commented Apr 5, 2023

Using the new :digest suffix in policy markers one can now instruct IAC to store the digest of an image instead of the tag in the given manifest.

This makes use of the the .status.imageDigest field introduced in fluxcd/image-reflector-controller#368.

closes #165

@makkes makkes force-pushed the image-digests branch 3 times, most recently from 7275eb3 to 1fa9671 Compare May 8, 2023 16:45
Using the new `:digest` suffix in policy markers one can now instruct
IAC to store the digest of an image instead of the tag in the given
manifest.

This makes use of the the `.status.imageDigest` field introduced in
fluxcd/image-reflector-controller#368.

closes #165

Signed-off-by: Max Jonas Werner <mail@makk.es>
@makkes
Copy link
Copy Markdown
Member Author

makkes commented Jul 26, 2023

IAC should fail to reconcile if only the digest setter in set in YAML and if the digest is missing from the ImagePolicy status.

@makkes
Copy link
Copy Markdown
Member Author

makkes commented Aug 30, 2023

Outcome from today's dev meeting:

We need two markers in whole for this change:

  1. image:tag@shaXYZ:digest
  2. shaXYZ:digest

@matheuscscp
Copy link
Copy Markdown
Member

Superseded by #902

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support sha256 digest pinning

2 participants