feat: image digest opt

Author: bsgrigorov

charts/app-full/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 1.0.0
 - name: app-starter
   repository: file://../app-starter
-  version: 1.4.0
+  version: 1.4.1
 - name: app-extensions
   repository: file://../app-extensions
   version: 1.2.1
 - name: platform-extensions
   repository: file://../platform-extensions
   version: 1.5.0
-digest: sha256:c58ac50ea4a7687d87c5a283a36f2f2ebcd0f19661462e80a8b073cac21c4ff6
-generated: "2026-02-16T13:46:06.538848-08:00"
+digest: sha256:625ec9b4fe1132135d7561f4507c86b5931986b77aba92b33ab95b63866e9a10
+generated: "2026-02-22T03:27:17.120397-08:00"

charts/app-full/Chart.yaml

@@ -33,7 +33,7 @@ dependencies:
 
   # Core workload chart - always enabled
   - name: app-starter
-    version: "1.4.0"
+    version: "1.4.1"
     repository: "file://../app-starter"
     condition: app-starter.enabled
 

charts/app-starter/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: app-starter
 description: A streamlined, extensible Helm chart for deploying applications on Kubernetes
 type: application
-version: 1.4.0
+version: 1.4.1
 appVersion: "1.0.0"
 kubeVersion: ">=1.22.0-0"
 home: https://github.com/synkube/

charts/app-starter/templates/cronjob.yaml

@@ -64,10 +64,10 @@ spec:
           containers:
             - name: {{ $cronjob.name }}
               {{- if $cronjob.image }}
-              image: "{{ $cronjob.image.repository }}:{{ $cronjob.image.tag }}"
+              image: "{{ $cronjob.image.repository }}:{{ $cronjob.image.tag }}{{ if $cronjob.image.digest }}@{{ $cronjob.image.digest }}{{ end }}"
               imagePullPolicy: {{ $cronjob.image.pullPolicy }}
               {{- else if $.Values.image }}
-              image: "{{ $.Values.image.repository }}:{{ $.Values.image.tag }}"
+              image: "{{ $.Values.image.repository }}:{{ $.Values.image.tag }}{{ if $.Values.image.digest }}@{{ $.Values.image.digest }}{{ end }}"
               imagePullPolicy: {{ $.Values.image.pullPolicy }}
               {{- end }}
               {{- if $cronjob.env }}

charts/app-starter/templates/deployment.yaml

@@ -66,7 +66,7 @@ spec:
       {{- end }}
       containers:
         - name: {{ .Values.container.name | default .Chart.Name }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}{{ if .Values.image.digest }}@{{ .Values.image.digest }}{{ end }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           {{- with .Values.container.command }}
           command:

charts/app-starter/templates/statefullset.yaml

@@ -69,7 +69,7 @@ spec:
       {{- end }}
       containers:
         - name: {{ .Values.container.name | default .Chart.Name }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}{{ if .Values.image.digest }}@{{ .Values.image.digest }}{{ end }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           {{- with .Values.container.command }}
           command:

charts/app-starter/values.yaml

@@ -37,6 +37,8 @@ statefulSet:
 image:
   repository: nginx
   tag: latest
+  # Optional digest (e.g. sha256:...) appended as repository:tag@digest in pod templates.
+  digest: ""
   pullPolicy: IfNotPresent
 
 imagePullSecrets: []