aaron/infra-core
1
0
Fork 2
Code Issues Pull requests 12 Projects Releases 1 Packages Wiki Activity Actions

HOMELAB-304: fix(images): pin all :latest tags to specific versions #51

Merged
aaron merged 1 commit from plane/HOMELAB-304-sha-tags into live 2026-03-24 02:27:01 +00:00
Conversation 1 Commits 1 Files changed 6 +11 -11
aaron commented 2026-03-24 02:24:55 +00:00
Owner
Copy link

Summary

  • Pin all :latest container image tags to specific versions/SHAs
  • Custom images (lab-director, devenv, forgejo-runner): pinned to current Harbor SHAs/digests
  • External images (minio, playwright, docker-dind): pinned to specific release versions
  • Prevents stale deployments when CI fails silently (HOMELAB-283 Systemic Failure #3)

Files Changed

  • core/charts/apps/lab-director/values.yaml — backend/frontend SHA tags
  • core/charts/apps/dev-environment/values.yaml — pinned tag + IfNotPresent
  • core/charts/apps/outline/values.yaml — minio release version
  • core/charts/apps/plane/values.yaml — minio/mc release versions
  • core/manifests/apps/forgejo-runner/deployment.yaml — SHA digest + dind version
  • core/manifests/apps/playwright-mcp/deployment.yaml — SHA digest
## Summary - Pin all `:latest` container image tags to specific versions/SHAs - Custom images (lab-director, devenv, forgejo-runner): pinned to current Harbor SHAs/digests - External images (minio, playwright, docker-dind): pinned to specific release versions - Prevents stale deployments when CI fails silently (HOMELAB-283 Systemic Failure #3) ## Files Changed - `core/charts/apps/lab-director/values.yaml` — backend/frontend SHA tags - `core/charts/apps/dev-environment/values.yaml` — pinned tag + IfNotPresent - `core/charts/apps/outline/values.yaml` — minio release version - `core/charts/apps/plane/values.yaml` — minio/mc release versions - `core/manifests/apps/forgejo-runner/deployment.yaml` — SHA digest + dind version - `core/manifests/apps/playwright-mcp/deployment.yaml` — SHA digest
HOMELAB-304: fix(images): pin all :latest tags to specific versions
Some checks failed
Plan failed.
CI Review / pr-title (pull_request) Has been cancelled
Details
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / ai-review (pull_request) Has been cancelled
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
c46a98917c 
Replace :latest with SHA-based tags for custom images and pinned
releases for external images. Prevents stale deployments when CI
fails silently.

- lab-director backend/frontend: seed with current Harbor SHAs
- dev-environment: seed with pinned-20260324 tag
- minio: pin to RELEASE.2025-09-07T16-13-09Z
- minio/mc: pin to RELEASE.2025-08-13T08-35-41Z
- forgejo-runner: pin to SHA digest
- playwright-mcp: pin to SHA digest
- docker dind: pin to 27.5.1-dind
atlantis commented 2026-03-24 02:24:56 +00:00
Collaborator
Copy link

Plan Error

creating new workspace: mkdir /atlantis-data/repos/aaron/infra-core/51: read-only file system
**Plan Error** ``` creating new workspace: mkdir /atlantis-data/repos/aaron/infra-core/51: read-only file system ```
aaron merged commit 668ddcf7a2 into live 2026-03-24 02:27:01 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!51
No description provided.