-
-
Notifications
You must be signed in to change notification settings - Fork 6.8k
Open
Labels
✨ enhancementNew feature or requestNew feature or request
Description
What features would you like to see added?
I use FluxCD to track the latest image tag to ensure the absolute newest version is deployed immediately upon release.
Because latest is a mutable tag, I would like to use digest pinning (SHA256) to:
- Ensure Kubernetes pulls the new image content immediately (bypassing potential node caching of "latest").
- Maintain a precise, immutable history of exactly which version of "latest" is running in our GitOps repository.
Unfortunately the current Helm template enforces the format {{ .registry }}/{{ .repository }}:{{ .tag }}.
Would be nice if you can add an optional digest field
More details
Please add an optional digest field to values.yaml and update the deployment.yaml template to append the digest with the required @ separator if provided.
Proposed Implementation:
values.yaml
image:
# ... existing fields ...
digest: "" # Optional field for SHA256 pinningdeployment.yaml
# Updates the template to include the '@' separator when a digest is present
image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}{{ if .Values.image.digest }}@{{ .Values.image.digest }}{{ end }}"Which components are impacted by your request?
Other
Pictures
No response
Code of Conduct
- I agree to follow this project's Code of Conduct
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
✨ enhancementNew feature or requestNew feature or request