fix(ee): add image digests + change pull policy (#561)

* add image digest

+

pull always

* revert whitespace changes

* update uid

* Revert "update uid"

This reverts commit ec44687.

helm-charts/mend-renovate-ee/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: mend-renovate-enterprise-edition
-version: 2.0.1
+version: 2.0.2
 appVersion: 8.0.0
 description: Mend Renovate Enterprise Edition
 home: https://github.com/mend/renovate-ce-ee

helm-charts/mend-renovate-ee/templates/server-deployment.yaml

@@ -41,7 +41,7 @@ spec:
       {{- end }}
       containers:
         - name: {{ .Chart.Name }}-server
-          image: "{{ .Values.renovateServer.image.repository }}:{{ .Values.renovateServer.image.tag }}"
+          image: "{{ .Values.renovateServer.image.repository }}:{{ .Values.renovateServer.image.version }}"
           imagePullPolicy: {{ .Values.renovateServer.image.pullPolicy }}
           {{- with .Values.renovateServer.containerSecurityContext }}
           securityContext: {{- toYaml . | nindent 12 }}

helm-charts/mend-renovate-ee/templates/worker-deployment.yaml

@@ -42,7 +42,7 @@ spec:
       {{- end }}
       containers:
         - name: {{ .Chart.Name }}-worker
-          image: "{{ .Values.renovateWorker.image.repository }}:{{ .Values.renovateWorker.image.tag }}"
+          image: "{{ .Values.renovateWorker.image.repository }}:{{ .Values.renovateWorker.image.version }}"
           imagePullPolicy: {{ .Values.renovateWorker.image.pullPolicy }}
           {{- with .Values.renovateWorker.containerSecurityContext }}
           securityContext: {{- toYaml . | nindent 12 }}

helm-charts/mend-renovate-ee/values.yaml

@@ -28,8 +28,8 @@ postgresql:
 renovateServer:
   image:
     repository: ghcr.io/mend/renovate-ee-server
-    tag: 8.0.0
-    pullPolicy: IfNotPresent
+    version: 8.0.0@sha256:594365b7080e4d24e25ac26dd05eebd64d33b8b752ead4bb3d8e7bdcb4d2aaed
+    pullPolicy: Always
 
   # Number of renovate-ee-server (for SQLite only 1 replica is allowed)
   replicas: 1
@@ -217,11 +217,11 @@ renovateServer:
 
   extraVolumes:
     [ ]
-    # - name: secrets-store-inline
-    #   csi:
-    #     driver: secrets-store.csi.k8s.io
-    #     readOnly: true
-    #     volumeAttributes:
+  #   - name: secrets-store-inline
+  #     csi:
+  #       driver: secrets-store.csi.k8s.io
+  #       readOnly: true
+  #       volumeAttributes:
   #       secretProviderClass: "some-secret-store"
 
   extraVolumeMounts:
@@ -238,8 +238,8 @@ renovateServer:
 renovateWorker:
   image:
     repository: ghcr.io/mend/renovate-ee-worker
-    tag: 8.0.0-full
-    pullPolicy: IfNotPresent
+    version: 8.0.0-full@sha256:9eb144e8f29b08a25bcc1a7361accb25ea6fe3b8292ce2cdfc3a152c4a5da1df
+    pullPolicy: Always
 
   # Optional: Sets the maximum execution duration of a Renovate CLI scan in minutes. Defaults to 60.
   mendRnvWorkerExecutionTimeout:
@@ -363,7 +363,7 @@ renovateWorker:
 
   extraVolumes:
     [ ]
-    # - name: secrets-store-inline
+  # - name: secrets-store-inline
   #   csi:
   #     driver: secrets-store.csi.k8s.io
   #     readOnly: true