I'm thinking about downstream, there's been a CVE so we'll respin the Flink images. If the customer has hardcoded a flink sql runner image in their FlinkDeployment, then they are not going to get the respun sqlrunner image.

It'd be nice if there was a way to specify the default image at the operator level, then have that used if the image is absent in the FlinkDeployment.

The Flink Operator does offer a configuration, but we need to be able to influence this from the CSV.

org.apache.flink.kubernetes.operator.config.FlinkConfigBuilder#applyImage

We'd then make use of https://osbs.readthedocs.io/en/latest/users.html?highlight=enable_digest_pinning#replacing-pullspecs so that Freshmaker refreshes the references within the CSV.