feat(helm): allow specifying operator image digest (#146)

Author: jimrollenhagen

dist/chart/templates/_helpers.tpl

@@ -48,3 +48,15 @@ Dynamically calculates safe truncation to ensure total name length <= 63 chars.
 {{- printf "%s-%s" $fullname $suffix | trunc 63 | trimSuffix "-" }}
 {{- end }}
 {{- end }}
+
+{{/*
+Util function for generating the image URL based on the provided options.
+Cribbed from the cert-manager organization.
+*/}}
+{{- define "clickhouse-operator.image" -}}
+{{- $defaultTag := index . 1 -}}
+{{- with index . 0 -}}
+{{ printf .repository }}
+{{- if .digest -}}{{ printf "@%s" .digest }}{{- else -}}{{ printf ":%s" (default $defaultTag .tag) }}{{- end -}}
+{{- end }}
+{{- end }}

dist/chart/templates/manager/manager.yaml

@@ -65,7 +65,7 @@ spec:
           {{-   $env = append $env (dict "name" "WATCH_NAMESPACE" "value" (join "," .Values.watchNamespaces)) }}
           {{- end }}
           env: {{ toYaml $env | nindent 22 }}
-          image: "{{ .Values.manager.image.repository }}:{{ default .Chart.AppVersion .Values.manager.image.tag }}"
+          image: "{{ include "clickhouse-operator.image" (tuple .Values.manager.image $.Chart.AppVersion) }}"
           imagePullPolicy: {{ .Values.manager.image.pullPolicy }}
           livenessProbe:
             httpGet:

dist/chart/values.yaml

@@ -17,6 +17,9 @@ manager:
 
     image:
         repository: ghcr.io/clickhouse/clickhouse-operator
+        ## Digest of the image to use. Tag is used if unset.
+        ##
+        ## digest: sha256:abc123
         ## Tag of the image to use. Defaults to the chart's appVersion if not set.
         ##
         ## tag: latest