flag pinning (#55)

Signed-off-by: Alex Jones <[email protected]>

Author: AlexsJones

Makefile

@@ -2,6 +2,7 @@
 # Image URL to use all building/pushing image targets
 IMG ?= controller:latest
 # ENVTEST_K8S_VERSION refers to the version of kubebuilder assets to be downloaded by envtest binary.
+FLAGD_VERSION=v0.0.3
 ENVTEST_K8S_VERSION = 1.23
 
 # Get the currently used golang install path (in GOPATH/bin, unless GOBIN is set)
@@ -45,6 +46,7 @@ manifests: controller-gen ## Generate WebhookConfiguration, ClusterRole and Cust
 
 .PHONY: generate
 generate: controller-gen ## Generate code containing DeepCopy, DeepCopyInto, and DeepCopyObject method implementations.
+	sed -i '' -e 's/INPUT_FLAGD_VERSION/${FLAGD_VERSION}/g' config/manager/manager.yaml
 	cp schemas/json-schema/flagd-definitions.json pkg/utils/flagd-definitions.json
 	$(CONTROLLER_GEN) object:headerFile="hack/boilerplate.go.txt" paths="./..."
 
@@ -98,12 +100,12 @@ release-manifests: manifests kustomize
 	$(KUSTOMIZE) build config/default > config/rendered/release.yaml
 
 .PHONY: deploy
-deploy: manifests kustomize ## Deploy controller to the K8s cluster specified in ~/.kube/config.
+deploy: generate manifests kustomize ## Deploy controller to the K8s cluster specified in ~/.kube/config.
 	cd config/manager && $(KUSTOMIZE) edit set image controller=${IMG}
 	$(KUSTOMIZE) build config/default | kubectl apply -f -
 
 .PHONY: undeploy
-undeploy: ## Undeploy controller from the K8s cluster specified in ~/.kube/config. Call with ignore-not-found=true to ignore resource not found errors during deletion.
+undeploy: generate ## Undeploy controller from the K8s cluster specified in ~/.kube/config. Call with ignore-not-found=true to ignore resource not found errors during deletion.
 	$(KUSTOMIZE) build config/default | kubectl delete --ignore-not-found=$(ignore-not-found) -f -
 
 CONTROLLER_GEN = $(shell pwd)/bin/controller-gen

config/manager/manager.yaml

@@ -34,6 +34,9 @@ spec:
         imagePullPolicy: Always
         image: controller:main
         name: manager
+        env:
+        - name: FLAGD_VERSION
+          value: INPUT_FLAGD_VERSION
         securityContext:
           allowPrivilegeEscalation: false
         livenessProbe:

webhooks/pod_webhook.go

@@ -5,6 +5,7 @@ import (
 	"encoding/json"
 	"fmt"
 	"net/http"
+	"os"
 
 	corev1alpha1 "github.com/open-feature/open-feature-operator/apis/core/v1alpha1"
 
@@ -19,10 +20,13 @@ import (
 
 // we likely want these to be configurable, eventually
 const (
-	FlagDTag             = "main"
 	FlagDImagePullPolicy = "Always"
 )
 
+var (
+	FlagDTag = "main"
+)
+
 // NOTE: RBAC not needed here.
 //+kubebuilder:rbac:groups="",resources=pods,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch;create;update;patch;delete
@@ -166,6 +170,10 @@ func (m *PodMutator) injectSidecar(pod *corev1.Pod, configMap string, featureFla
 		commandSequence = append(commandSequence, featureFlag.Spec.SyncProvider.Name)
 	}
 
+	if os.Getenv("FLAGD_VERSION") != "" {
+		FlagDTag = os.Getenv("FLAGD_VERSION")
+	}
+
 	pod.Spec.Containers = append(pod.Spec.Containers, corev1.Container{
 		Name:            "flagd",
 		Image:           "ghcr.io/open-feature/flagd:" + FlagDTag,