Skip to content

feat(flipt, flipt-v2): support image.digest for tamper-resistant pinning #284

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kodiakhq merged 2 commits into from
May 29, 2026
Merged

feat(flipt, flipt-v2): support image.digest for tamper-resistant pinning #284

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
055f92e
feat(flipt, flipt-v2): support image.digest for tamper-resistant pinning
pawelfraczyk May 29, 2026
148a7be
chore: align chart versions with release-pipeline convention
pawelfraczyk May 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion charts/flipt-v2/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ description: >-
Flipt v2 is a Git-native, open-source feature flag solution with enhanced
authentication and multi-environment support.
type: application
version: 2.9.2
version: 2.9.3
appVersion: v2.9.0
maintainers:
- name: Flipt
Expand Down
1 change: 1 addition & 0 deletions charts/flipt-v2/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,6 +76,7 @@ flipt:
| `replicaCount` | int | `1` | Number of replicas |
| `image.repository` | string | `"docker.flipt.io/flipt/flipt"` | Image repository |
| `image.tag` | string | `""` | Image tag (defaults to chart appVersion) |
| `image.digest` | string | `""` | Optional image digest (e.g. `sha256:...`); appended to the image as `@digest` |
| `service.type` | string | `"ClusterIP"` | Kubernetes service type |
| `service.httpPort` | int | `8080` | HTTP service port |
| `service.grpcPort` | int | `9000` | gRPC service port |
Expand Down
2 changes: 1 addition & 1 deletion charts/flipt-v2/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ spec:
- name: {{ .Chart.Name }}
securityContext:
{{- toYaml .Values.securityContext | nindent 12 }}
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}{{- with .Values.image.digest }}@{{ . }}{{- end }}"
imagePullPolicy: {{ .Values.image.pullPolicy }}
command:
{{- toYaml .Values.image.command | nindent 12 }}
Expand Down
2 changes: 1 addition & 1 deletion charts/flipt-v2/templates/migration_job.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ spec:
- name: {{ .Chart.Name }}
securityContext:
{{- toYaml .Values.securityContext | nindent 12 }}
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}{{- with .Values.image.digest }}@{{ . }}{{- end }}"
imagePullPolicy: {{ .Values.image.pullPolicy }}
command:
- "./flipt"
Expand Down
6 changes: 6 additions & 0 deletions charts/flipt-v2/values.schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -180,6 +180,12 @@
"description": "Overrides the image tag whose default is the chart appVersion.",
"title": "tag",
"type": "string"
},
"digest": {
"default": "",
"description": "Optional image digest (e.g. sha256:abc123...). When set, it is appended to the image reference as `@digest` so the OCI runtime resolves by digest.",
"title": "digest",
"type": "string"
}
},
"title": "image",
Expand Down
3 changes: 3 additions & 0 deletions charts/flipt-v2/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,9 @@ image:
pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion.
tag: ""
# Optional image digest (e.g. sha256:abc123...). When set, it is appended to
# the image reference as `@digest` so the OCI runtime resolves by digest.
digest: ""
command: ["/flipt", "server"]

imagePullSecrets: []
Expand Down
2 changes: 1 addition & 1 deletion charts/flipt/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ name: flipt
home: https://flipt.io
description: Flipt is an open-source, self-hosted feature flag solution.
type: application
version: 0.87.6
version: 0.87.7
appVersion: v1.61.1
maintainers:
- name: Flipt
Expand Down
1 change: 1 addition & 0 deletions charts/flipt/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -98,6 +98,7 @@ You can also configure this chart using YAML. See the [values.yaml](https://gith
| `replicaCount` | int | `1` | Number of replicas |
| `image.repository` | string | `"docker.flipt.io/flipt/flipt"` | Image repository |
| `image.tag` | string | `""` | Image tag (defaults to chart appVersion) |
| `image.digest` | string | `""` | Optional image digest (e.g. `sha256:...`); appended to the image as `@digest` |
| `service.type` | string | `"ClusterIP"` | Kubernetes service type |
| `service.httpPort` | int | `8080` | HTTP service port |
| `service.grpcPort` | int | `9000` | gRPC service port |
Expand Down
2 changes: 1 addition & 1 deletion charts/flipt/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ spec:
- name: {{ .Chart.Name }}
securityContext:
{{- toYaml .Values.securityContext | nindent 12 }}
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}{{- with .Values.image.digest }}@{{ . }}{{- end }}"
imagePullPolicy: {{ .Values.image.pullPolicy }}
command:
{{- toYaml .Values.image.command | nindent 12 }}
Expand Down
2 changes: 1 addition & 1 deletion charts/flipt/templates/migration_job.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ spec:
- name: {{ .Chart.Name }}
securityContext:
{{- toYaml .Values.securityContext | nindent 12 }}
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}{{- with .Values.image.digest }}@{{ . }}{{- end }}"
imagePullPolicy: {{ .Values.image.pullPolicy }}
command:
- "./flipt"
Expand Down
6 changes: 6 additions & 0 deletions charts/flipt/values.schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -177,6 +177,12 @@
"description": "Overrides the image tag whose default is the chart appVersion.",
"title": "tag",
"type": "string"
},
"digest": {
"default": "",
"description": "Optional image digest (e.g. sha256:abc123...). When set, it is appended to the image reference as `@digest` so the OCI runtime resolves by digest.",
"title": "digest",
"type": "string"
}
},
"title": "image",
Expand Down
3 changes: 3 additions & 0 deletions charts/flipt/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,9 @@ image:
pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion.
tag: ""
# Optional image digest (e.g. sha256:abc123...). When set, it is appended to
# the image reference as `@digest` so the OCI runtime resolves by digest.
digest: ""
command: ["/flipt"]

imagePullSecrets: []
Expand Down
Loading