Skip to content

Kustomize should refer to specific versions of the docker image, not latest #3713

Open
@girlpunk

Description

Community Note

  • Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request. Searching for pre-existing feature requests helps us consolidate datapoints for identical requirements into a single place, thank you!
  • Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.
  • If you are interested in working on this issue or have submitted a pull request, please leave a comment.

Overview of the Issue

The StatefulSet created by Kustomize now refers to the "latest" tagged docker image. As per Docker best practices, the latest tag should not be used in any production environment:

You should avoid using the :latest tag when deploying containers in production, because this makes it hard to track which version of the image is running and hard to roll back.

Instead, the tag of the specific release should be used (for example, v0.25.0)

Reproduction Steps

It appears this was introduced in 89ccb86, as part of #3049

Logs

N/A

Environment details

Any deployment using Kustomize from v0.23.0-pre.20230125 or later

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingbuildRelating to how we build Atlantishelp wantedGood feature for contributorsquick-winIs obviously something Atlantis should do and will take <4 hrs work

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions