Pin ArgoCD to v3.2.6 #44

Merged
eblume merged 2 commits from feature/pin-argocd-v3.2.6 into main 2026-01-22 16:38:28 -08:00
7 changed files with 8 additions and 7 deletions
Showing only changes of commit 23c137cdd5 - Show all commits

Pin container image versions across all services

- transmission: latest → 4.0.6 (torrent + kiwix sidecar)
- miniflux: latest → 2.2.16
- kubectl: latest → 1.34.1 (matches k8s server 1.34.0)
- tailscale proxy: stable → v1.92.5
- tailscale k8s-operator: stable → v1.92.5

devpi remains on :latest with a TODO comment as it's a custom-built
image that needs semantic versioning in the build process.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Erich Blume 2026-01-22 16:32:30 -08:00

View file

@ -18,6 +18,7 @@ spec:
fsGroup: 1000 fsGroup: 1000
containers: containers:
- name: devpi - name: devpi
# TODO: Tag builds with semantic versions (e.g., v1.0.0) for reproducibility
image: registry.tail8d86e.ts.net/blumeops/devpi:latest image: registry.tail8d86e.ts.net/blumeops/devpi:latest
env: env:
- name: DEVPI_ROOT_PASSWORD - name: DEVPI_ROOT_PASSWORD

View file

@ -14,7 +14,7 @@ spec:
serviceAccountName: zim-watcher serviceAccountName: zim-watcher
containers: containers:
- name: watcher - name: watcher
image: bitnami/kubectl:latest image: bitnami/kubectl:1.34.1
command: ["/bin/bash", "-c"] command: ["/bin/bash", "-c"]
args: args:
- | - |

View file

@ -52,7 +52,7 @@ spec:
# Sidecar: Syncs declarative ZIM torrents to transmission # Sidecar: Syncs declarative ZIM torrents to transmission
- name: torrent-sync - name: torrent-sync
image: lscr.io/linuxserver/transmission:latest # Has transmission-remote CLI image: lscr.io/linuxserver/transmission:4.0.6 # Has transmission-remote CLI
command: ["/bin/bash", "-c"] command: ["/bin/bash", "-c"]
args: args:
- | - |

View file

@ -15,7 +15,7 @@ spec:
spec: spec:
containers: containers:
- name: miniflux - name: miniflux
image: ghcr.io/miniflux/miniflux:latest image: ghcr.io/miniflux/miniflux:2.2.16
ports: ports:
- containerPort: 8080 - containerPort: 8080
env: env:

View file

@ -5362,7 +5362,7 @@ spec:
valueFrom: valueFrom:
fieldRef: fieldRef:
fieldPath: metadata.uid fieldPath: metadata.uid
image: docker.io/tailscale/k8s-operator:stable image: docker.io/tailscale/k8s-operator:v1.92.5
imagePullPolicy: Always imagePullPolicy: Always
name: operator name: operator
volumeMounts: volumeMounts:

View file

@ -18,6 +18,6 @@ spec:
statefulSet: statefulSet:
pod: pod:
tailscaleContainer: tailscaleContainer:
image: docker.io/tailscale/tailscale:stable image: docker.io/tailscale/tailscale:v1.92.5
tailscaleInitContainer: tailscaleInitContainer:
image: docker.io/tailscale/tailscale:stable image: docker.io/tailscale/tailscale:v1.92.5

View file

@ -16,7 +16,7 @@ spec:
spec: spec:
containers: containers:
- name: transmission - name: transmission
image: lscr.io/linuxserver/transmission:latest image: lscr.io/linuxserver/transmission:4.0.6
env: env:
- name: PUID - name: PUID
value: "1000" value: "1000"