fix(infra): pin API image to SHA to bypass kubelet latest caching bug

Node mindy caches the :latest tag digest even with imagePullPolicy: Always.
Pinning to the SHA-tagged image forces a fresh pull on pod restart.
This image includes the pentest-user (UID 1001) securityContext fix.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
Test User
2026-04-21 21:27:43 +00:00
parent 067b58a3a6
commit b36ad267a4
+2 -2
View File
@@ -15,12 +15,12 @@ spec:
labels:
app: hightower-api
annotations:
kubectl.kubernetes.io/restartedAt: "2026-04-21T12:45:00Z"
kubectl.kubernetes.io/restartedAt: "2026-04-21T21:26:00Z"
spec:
serviceAccountName: hightower-api
containers:
- name: api
image: ghcr.io/farhoodliquor/hightower-api:latest
image: ghcr.io/farhoodliquor/hightower-api:sha-067b58a3a6ad342b38c3fc9cfecbd362b77e67e4
imagePullPolicy: Always
ports:
- containerPort: 3000