apps pinned to exact version numbers

2026-08-23 15:25:16 +03:00
parent c4449ead10
commit c2b8a18100
10 changed files with 16 additions and 8 deletions
@@ -17,7 +17,7 @@ spec:
          app:
            image:
              repository: authelia/authelia
-              tag: latest
+              tag: v4.39.20
            probes:
              liveness:
                enabled: true
@@ -17,7 +17,7 @@ spec:
          app:
            image:
              repository: postgres
-              tag: "16-alpine"
+              tag: "16.14-alpine"
            env:
              TZ: Europe/Moscow
              POSTGRES_PASSWORD:
@@ -29,7 +29,7 @@ spec:
          app:
            image:
              repository: yegle/fava
-              tag: latest
+              tag: "1.30.4"
            env:
              TZ: Europe/Moscow
              BEANCOUNT_FILE: /documents/main.beancount
@@ -17,7 +17,7 @@ spec:
          app:
            image:
              repository: docker.io/valkey/valkey
-              tag: "9"
+              tag: "9.1.1"
            resources:
              requests:
                cpu: 20m
@@ -21,6 +21,8 @@ spec:
            image:
              repository: hectorm/nfs-ganesha
              tag: v10
+              # hectorm does not publish exact versions, v10.0 digest is 93df70b78...
+              digest: sha256:93df70b78aae56957f4a4f5c606c4250d84b729435f76132dca07b7290f5bfce
            command:
              - sh
              - -c
@@ -17,7 +17,7 @@ spec:
          app:
            image:
              repository: ghcr.io/pvliesdonk/markdown-vault-mcp
-              tag: latest
+              tag: "3.1.0"
            env:
              MARKDOWN_VAULT_MCP_SOURCE_DIR: /vault
              MARKDOWN_VAULT_MCP_INDEX_PATH: /data/state/index.db
@@ -1,6 +1,6 @@
 image:
  repository: eclipse-mosquitto
-  tag: "2"
+  tag: "2.1.2"
  pullPolicy: IfNotPresent

 # not really needed, as StatefulSet has hardcoded "replicas: 1"
@@ -18,7 +18,7 @@ spec:
  values:
    image:
      repository: eclipse-mosquitto
-      tag: "2"
+      tag: "2.1.2"
      pullPolicy: IfNotPresent

    replicaCount: 1
@@ -21,6 +21,8 @@ spec:
            image:
              repository: hectorm/nfs-ganesha
              tag: v10
+              # hectorm does not publish exact versions, v10.0 digest is 93df70b78...
+              digest: sha256:93df70b78aae56957f4a4f5c606c4250d84b729435f76132dca07b7290f5bfce
            command:
              - sh
              - -c
@@ -29,6 +31,8 @@ spec:
            image:
              repository: hectorm/nfs-ganesha
              tag: v10
+              # hectorm does not publish exact versions, v10.0 digest is 93df70b78...
+              digest: sha256:93df70b78aae56957f4a4f5c606c4250d84b729435f76132dca07b7290f5bfce
            command:
              - sh
              - -c
@@ -38,6 +42,8 @@ spec:
            image:
              repository: hectorm/nfs-ganesha
              tag: v10
+              # hectorm does not publish exact versions, v10.0 digest is 93df70b78...
+              digest: sha256:93df70b78aae56957f4a4f5c606c4250d84b729435f76132dca07b7290f5bfce
            securityContext:
              readOnlyRootFilesystem: true
              capabilities:
@@ -24,7 +24,7 @@ spec:
          app:
            image:
              repository: ghcr.io/hacdias/webdav
-              tag: latest
+              tag: v5.14.2
            args:
              - "-c"
              - "/config.yml"