Skip to content

fix: preserve architecture tags in digest-pinned image checks - #822

Draft
weicao wants to merge 1 commit into
mainfrom
weicao/helm-image-tag-digest
Draft

weicao wants to merge 1 commit into
mainfrom
weicao/helm-image-tag-digest

Conversation

@weicao

@weicao weicao commented Oct 17, 2026

Copy link
Copy Markdown

A published single-platform image such as polardb-mysql:8.0.2.2.31.1-amd64@sha256:<digest> fails the Helm image check because ${image##*:} treats the digest as its tag and looks for multi-platform output. Extract the tag before the digest and after the repository path, while inspecting the complete pinned reference. Existing architecture-tag and dual-architecture requirements remain in place.

Validation: five offline regression tests cover 15 scenarios; the old checker fails all four tagged-digest/architecture/registry combinations, and the fixed checker passes all scenarios. Missing images and generic single-platform references still fail. Bash syntax and diff checks pass. A focused GitHub Actions job runs the regression without registry credentials.

This is one prerequisite for apecloud/apecloud-addons#2245. The addon currently pins apecloud-cd v0.1.78; adopting a reviewed release is separate. Its DockerHub matrix also rewrites ACR-only product images to an unpublished repository, which remains unresolved by this change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant