Skip to content

chore: pin overlay images to immutable sha- tags #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
David-Uka merged 1 commit into from
Jul 6, 2026
Merged

chore: pin overlay images to immutable sha- tags #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion apps/sample-app/overlays/dev/kustomization.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,5 +15,9 @@ patches:
path: /spec/template/spec/containers/0/env/0/value
value: dev
images:
# Pinned to an immutable sha- tag, never a floating name (dev/staging/prod).
# CI (ci.yml's bump-dev-overlay job, or promote.yml for staging/prod) is the only
# thing that should change this value, via `kustomize edit set image`.
# Placeholder below until the first successful CI run pins a real digest.
- name: ghcr.io/david-uka/sample-app
newTag: dev
newTag: sha-0000000
6 changes: 5 additions & 1 deletion apps/sample-app/overlays/prod/kustomization.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,5 +21,9 @@ patches:
path: /spec/template/spec/containers/0/resources/limits/memory
value: 256Mi
images:
# Pinned to an immutable sha- tag, never a floating name (dev/staging/prod).
# CI (ci.yml's bump-dev-overlay job, or promote.yml for staging/prod) is the only
# thing that should change this value, via `kustomize edit set image`.
# Placeholder below until the first successful CI run pins a real digest.
- name: ghcr.io/david-uka/sample-app
newTag: prod
newTag: sha-0000000
6 changes: 5 additions & 1 deletion apps/sample-app/overlays/staging/kustomization.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,5 +15,9 @@ patches:
path: /spec/template/spec/containers/0/env/0/value
value: staging
images:
# Pinned to an immutable sha- tag, never a floating name (dev/staging/prod).
# CI (ci.yml's bump-dev-overlay job, or promote.yml for staging/prod) is the only
# thing that should change this value, via `kustomize edit set image`.
# Placeholder below until the first successful CI run pins a real digest.
- name: ghcr.io/david-uka/sample-app
newTag: staging
newTag: sha-0000000
Loading