Support immutable image digests

charts/quickwit/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: quickwit
 description: Sub-second search & analytics engine on cloud storage.
 type: application
-version: 0.8.14
+version: 0.8.15
 appVersion: v0.8.2
 keywords:
   - quickwit

charts/quickwit/templates/_helpers.tpl

@@ -5,6 +5,18 @@ Expand the name of the chart.
 {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
 {{- end }}
 
+{{/*
+Create the Quickwit image reference. An immutable digest takes precedence over
+the configured tag and the chart appVersion.
+*/}}
+{{- define "quickwit.image" -}}
+{{- if .Values.image.digest -}}
+{{- printf "%s@%s" .Values.image.repository .Values.image.digest -}}
+{{- else -}}
+{{- printf "%s:%s" .Values.image.repository (.Values.image.tag | default .Chart.AppVersion) -}}
+{{- end -}}
+{{- end }}
+
 {{/*
 Create a default fully qualified app name.
 We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).

charts/quickwit/templates/_metastore-deployment.tpl

@@ -62,7 +62,7 @@ spec:
         - name: {{ $root.Chart.Name }}
           securityContext:
             {{- toYaml $root.Values.securityContext | nindent 12 }}
-          image: "{{ $root.Values.image.repository }}:{{ $root.Values.image.tag | default $root.Chart.AppVersion }}"
+          image: {{ include "quickwit.image" $root | quote }}
           imagePullPolicy: {{ $root.Values.image.pullPolicy }}
           {{- if $values.args }}
           args: {{- toYaml $values.args | nindent 10 }}

charts/quickwit/templates/compactor-deployment.yaml

@@ -49,7 +49,7 @@ spec:
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: {{ include "quickwit.image" . | quote }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           {{- if $.Values.compactor.args }}
           args: {{- toYaml $.Values.compactor.args | nindent 10 }}

charts/quickwit/templates/control-plane-deployment.yaml

@@ -48,7 +48,7 @@ spec:
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: {{ include "quickwit.image" . | quote }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           {{- if $.Values.control_plane.args }}
           args: {{- toYaml $.Values.control_plane.args | nindent 10 }}
@@ -128,4 +128,4 @@ spec:
       topologySpreadConstraints:
         {{- toYaml $tsc | nindent 8 }}
       {{- end }}
-{{- end }}
+{{- end }}

charts/quickwit/templates/indexer-statefulset.yaml

@@ -54,7 +54,7 @@ spec:
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: {{ include "quickwit.image" . | quote }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           {{- if $.Values.indexer.args }}
           args: {{- toYaml $.Values.indexer.args | nindent 10 }}

charts/quickwit/templates/janitor-deployment.yaml

@@ -48,7 +48,7 @@ spec:
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: {{ include "quickwit.image" . | quote }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           {{- if $.Values.janitor.args }}
           args: {{- toYaml $.Values.janitor.args | nindent 10 }}

charts/quickwit/templates/job-create-indices.yaml

@@ -43,7 +43,7 @@ spec:
       - name: {{ $.Chart.Name }}
         securityContext:
           {{- toYaml $.Values.securityContext | nindent 10 }}
-        image: "{{ $.Values.image.repository }}:{{ $.Values.image.tag | default $.Chart.AppVersion }}"
+        image: {{ include "quickwit.image" $ | quote }}
         imagePullPolicy: {{ $.Values.image.pullPolicy }}
         {{- if $.Values.bootstrap.indexes.command }}
         command: {{- toYaml $.Values.bootstrap.indexes.command | nindent 8 }}

charts/quickwit/templates/job-create-sources.yaml

@@ -43,7 +43,7 @@ spec:
       - name: {{ $.Chart.Name }}
         securityContext:
           {{- toYaml $.Values.securityContext | nindent 10 }}
-        image: "{{ $.Values.image.repository }}:{{ $.Values.image.tag | default $.Chart.AppVersion }}"
+        image: {{ include "quickwit.image" $ | quote }}
         imagePullPolicy: {{ $.Values.image.pullPolicy }}
       {{- if $.Values.bootstrap.sources.command }}
         command: {{- toYaml $.Values.bootstrap.sources.command | nindent 8 }}

charts/quickwit/templates/searcher-statefulset.yaml

@@ -54,7 +54,7 @@ spec:
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: {{ include "quickwit.image" . | quote }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           {{- if $.Values.searcher.args }}
           args: {{- toYaml $.Values.searcher.args | nindent 10 }}

charts/quickwit/values.yaml

@@ -7,6 +7,8 @@ image:
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
   # tag: v0.8.2
+  # Overrides the image tag with an immutable image digest.
+  digest: ""
 
 imagePullSecrets: []
 nameOverride: ""