From b36ad267a467c08612856833a42732d4db3072c8 Mon Sep 17 00:00:00 2001 From: Test User Date: Tue, 21 Apr 2026 21:27:43 +0000 Subject: [PATCH] fix(infra): pin API image to SHA to bypass kubelet latest caching bug Node mindy caches the :latest tag digest even with imagePullPolicy: Always. Pinning to the SHA-tagged image forces a fresh pull on pod restart. This image includes the pentest-user (UID 1001) securityContext fix. Co-Authored-By: Paperclip --- apps/api/infra/base/deployment.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/api/infra/base/deployment.yaml b/apps/api/infra/base/deployment.yaml index 7a62385..8e3f95a 100644 --- a/apps/api/infra/base/deployment.yaml +++ b/apps/api/infra/base/deployment.yaml @@ -15,12 +15,12 @@ spec: labels: app: hightower-api annotations: - kubectl.kubernetes.io/restartedAt: "2026-04-21T12:45:00Z" + kubectl.kubernetes.io/restartedAt: "2026-04-21T21:26:00Z" spec: serviceAccountName: hightower-api containers: - name: api - image: ghcr.io/farhoodliquor/hightower-api:latest + image: ghcr.io/farhoodliquor/hightower-api:sha-067b58a3a6ad342b38c3fc9cfecbd362b77e67e4 imagePullPolicy: Always ports: - containerPort: 3000