From e6152b379f9c2a175f395b3b0983ddb11ee04b2c Mon Sep 17 00:00:00 2001
From: Joakim Olsson <joakim@unbound.se>
Date: Sun, 3 Nov 2024 20:37:33 +0100
Subject: [PATCH] fix: no digest pinning of own image

Adds a package rule to disable updates for the
'unboundsoftware/schemas' package in Kubernetes.
Modifies the image reference in the deployment
configuration to remove the specific SHA256 hash
and use a dynamic commit tag instead. This
improves maintainability and aligns with the
latest deployment practices.
---
 k8s/deploy.yaml |  2 +-
 renovate.json   | 11 +++++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/k8s/deploy.yaml b/k8s/deploy.yaml
index 0e955e9..062ebf9 100644
--- a/k8s/deploy.yaml
+++ b/k8s/deploy.yaml
@@ -55,7 +55,7 @@ spec:
           periodSeconds: 5
           timeoutSeconds: 5
         imagePullPolicy: IfNotPresent
-        image: registry.gitlab.com/unboundsoftware/schemas@sha256:198d7bfdf921d57b7bf491a4ea4a5c674e6af71904459b972eb0bcd9254aa588:${COMMIT}
+        image: registry.gitlab.com/unboundsoftware/schemas:${COMMIT}
         ports:
         - name: api
           containerPort: 8080
diff --git a/renovate.json b/renovate.json
index 5db72dd..345d9f1 100644
--- a/renovate.json
+++ b/renovate.json
@@ -2,5 +2,16 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended"
+  ],
+  "packageRules": [
+    {
+      "matchManagers": [
+        "kubernetes"
+      ],
+      "matchPackageNames": [
+        "registry.gitlab.com/unboundsoftware/schemas"
+      ],
+      "enabled": false
+    }
   ]
 }