Support for providing SHA digest for the image in Helm chart

[elongl]

Description

This is my configuration:

images:
  airflow:
    repository: <REPO>
    tag: <TAG>

I'd like to be able to do the following:

images:
  airflow:
    repository: <REPO>
    digest: <SHA_DIGEST>

Additionally, I've tried supplying only the repository, or placing the digest as the tag, but both don't work because of this. The formatting is done by repo:tag while I need repo@digest.

Use case/motivation

I'm using Terraform to deploy Airflow.
I'm using the data source of aws_ecr_image in order to pick the latest image.
I want to supply to the helm_release of Airflow the image's digest rather than latest as according to the docs, it's bad practice.

Related issues

No response

Are you willing to submit a PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[boring-cyborg]

Thanks for opening your first issue here! Be sure to follow the issue template! If you are willing to raise PR to address this issue please do so, no need to wait for approval.

[potiuk]

Feel free to add the option. Sounds useful. Sounds like adding digest next to tag and make it either-or is a good idea.

BTW. you do not have to use latest, you can use actual TAG (2.5.2-python3.9 for example). It does not solve a problem if you want to be fixed on a specific cryptographic digest of course, so it might not be what you look for. Assigned you

[elongl]

@potiuk The thing is that I don't want to update the configuration files each time with the tag.
We also have several Terraform workspaces (several environments), and each might have a different deployment.
I want that for each of them, it'll just pick the latest one available.

However, using latest won't restart the containers and make sure that the correct image is used.
Therefore, I read the latest image using a data source, and then pass that to the manifest.

Great, will take a look at how to implement it soon enough.
Thanks for addressing.