farhoodlabs/trebuchet
8
0
Fork 0
Code Issues Pull Requests 5 Actions Packages Projects Releases Wiki Activity

fix(infra): pin API image to SHA to bypass kubelet latest caching bug

Browse Source 
Node mindy caches the :latest tag digest even with imagePullPolicy: Always.
Pinning to the SHA-tagged image forces a fresh pull on pod restart.
This image includes the pentest-user (UID 1001) securityContext fix.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
Test User
2026-04-21 21:27:43 +00:00
parent 067b58a3a6
commit b36ad267a4
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/api/infra/base/deployment.yaml
+2 -2
View File
@@ -15,12 +15,12 @@ spec:
labels: labels:
app: hightower-api app: hightower-api
annotations: annotations:
kubectl.kubernetes.io/restartedAt: "2026-04-21T12:45:00Z" kubectl.kubernetes.io/restartedAt: "2026-04-21T21:26:00Z"
spec: spec:
serviceAccountName: hightower-api serviceAccountName: hightower-api
containers: containers:
- name: api - name: api
image: ghcr.io/farhoodliquor/hightower-api:latest image: ghcr.io/farhoodliquor/hightower-api:sha-067b58a3a6ad342b38c3fc9cfecbd362b77e67e4
imagePullPolicy: Always imagePullPolicy: Always
ports: ports:
- containerPort: 3000 - containerPort: 3000