Uploaded image for project: 'Red Hat Advanced Cluster Security'
  1. Red Hat Advanced Cluster Security
  2. ROX-28578

Pin images with SHA and automate their updates

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • ACS Cloud Service
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • False
    • 0

      Background

      Slack thread: https://redhat-internal.slack.com/archives/C07385ZCG5B/p1742363477113029

      review deployments with floating tags and add imagePullPolicy: Always if missing. Random examples to illustrate: 1, 2. Always pull always!

      Instead of using images with floating tags and having imagePullPolicy: Always we could pin the versions with the sha hash.

      Definition of done

      • Review ACSCS repositories and identify image references with the floating tags. Change these to sha instead of tags.
      • Configure automatic image updates with dependabot or renovate.

              ykovalev@redhat.com Yury Kovalev
              ykovalev@redhat.com Yury Kovalev
              ACS Cloud Service
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: