Add digest option to btp-operator chart (#169)

* add sha option to deployment images
SAP · May 26, 2022 · 76cd05d · 76cd05d
1 parent e778f90
commit 76cd05d
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 2 deletions.
diff --git a/sapbtp-operator-charts/templates/deployment.yml b/sapbtp-operator-charts/templates/deployment.yml
@@ -31,7 +31,13 @@ spec:
             - --upstream=http://127.0.0.1:8080/
             - --logtostderr=true
             - --v=10
-          image: quay.io/brancz/kube-rbac-proxy:v0.11.0
+
+          {{- if .Values.manager.rbacProxy.image.sha }}
+          image: "{{.Values.manager.rbacProxy.image.repository}}@sha256:{{.Values.manager.rbacProxy.image.sha}}"
+          {{- else }}
+          image: "{{.Values.manager.rbacProxy.image.repository}}:{{.Values.manager.rbacProxy.image.tag}}"
+          {{- end }}
+
           {{- if .Values.manager.securityContext }}
           securityContext:
           {{ toYaml .Values.manager.securityContext | indent 2 }}
@@ -50,7 +56,11 @@ spec:
           envFrom:
             - configMapRef:
                 name: sap-btp-operator-config
-          image: {{.Values.manager.image.repository}}:{{.Values.manager.image.tag}}
+          {{- if .Values.manager.image.sha}}
+          image: "{{.Values.manager.image.repository}}@sha256:{{.Values.manager.image.sha}}"
+          {{- else }}
+          image: "{{.Values.manager.image.repository}}:{{.Values.manager.image.tag}}"
+          {{- end }}
           imagePullPolicy: IfNotPresent
           {{- if .Values.manager.securityContext }}
           securityContext:

diff --git a/sapbtp-operator-charts/values.yaml b/sapbtp-operator-charts/values.yaml
@@ -15,6 +15,7 @@ manager:
   image:
     repository: ghcr.io/sap/sap-btp-service-operator/controller
     tag: master
+    sha: ""
   secret:
     b64encoded: false
     enabled: true
@@ -26,6 +27,11 @@ manager:
     sm_url: ""
     tokenurl: ""
     tokenurlsuffix: "/oauth/token"
+  rbacProxy:
+    image:
+      repository: quay.io/brancz/kube-rbac-proxy
+      sha: ""
+      tag: v0.11.0
   certificates:
     # Configure if https://github.com/jetstack/cert-manager is used
     certManager: true