Add image digest (#48)

* add image digest variable (#46) * Update chart version to 0.1.46, digest comment --------- Co-authored-by: Stan M <github@welcome01.org>
gogatekeeper · Feb 26, 2024 · da9f691 · da9f691
1 parent e342c3f
commit da9f691
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 4 deletions.
diff --git a/charts/gatekeeper/Chart.yaml b/charts/gatekeeper/Chart.yaml
@@ -24,5 +24,5 @@ sources:
 maintainers:
   - name: gogatekeeper
     url: https://gogatekeeper.github.io/
-version: 0.1.45
+version: 0.1.46
 appVersion: "2.9.4"
diff --git a/charts/gatekeeper/README.md b/charts/gatekeeper/README.md
@@ -1,6 +1,6 @@
 # gatekeeper
 
-![Version: 0.1.45](https://img.shields.io/badge/Version-0.1.45-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 2.9.4](https://img.shields.io/badge/AppVersion-2.9.4-informational?style=flat-square)
+![Version: 0.1.46](https://img.shields.io/badge/Version-0.1.46-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 2.9.4](https://img.shields.io/badge/AppVersion-2.9.4-informational?style=flat-square)
 
 Gatekeeper is a proxy which integrates with OpenID Connect (OIDC) Providers, it supports both access tokens in a browser cookie or bearer tokens.
 
@@ -68,6 +68,7 @@ For the complete list of all available configuration options, please read the
 | extraVolumes | list | `[]` | Array to add extra volumes |
 | fullnameOverride | string | `""` | Overrides the full name of the chart |
 | hostAliases | list | `[]` |  |
+| image.digest | string | `""` | Container image digest sha256:(hash) |
 | image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of `Always`, `Never`, `IfNotPresent` |
 | image.registry | string | `"quay.io"` | Container image registry |
 | image.repository | string | `"gogatekeeper/gatekeeper"` | Container image name |

diff --git a/charts/gatekeeper/templates/deployment.yaml b/charts/gatekeeper/templates/deployment.yaml
@@ -48,7 +48,7 @@ spec:
           securityContext:
             {{- omit .Values.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
-          image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}{{ if .Values.image.digest }}{{ printf `@%s` .Values.image.digest  }}{{- end }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           args:
             - --config
@@ -108,4 +108,3 @@ spec:
       {{- if .Values.hostAliases }}
       hostAliases: {{ toYaml .Values.hostAliases | nindent 8 }}
       {{- end }}
-
diff --git a/charts/gatekeeper/values.yaml b/charts/gatekeeper/values.yaml
@@ -12,6 +12,8 @@ image:
   repository: gogatekeeper/gatekeeper
   # -- Container image tag (overrides the image tag whose default is the chart appVersion.)
   tag: ""
+  # -- Container image digest sha256:(hash)
+  digest: ""
   # -- Image pull policy. One of `Always`, `Never`, `IfNotPresent`
   pullPolicy: IfNotPresent