zerocopy: pin the image digest and pull with ghcr-secret

latest now names sha256:d34e9c1c (amd64+arm64); the digest fixes which bytes run. ghcr-pull exists in no cluster; ghcr-secret is the credential the other lux apps pull with. Co-authored-by: Hanzo Dev <[email protected]>
2026-09-22 23:31:05 -07:00
parent 1331b8ecae
commit aab4e7346a
1 changed files with 2 additions and 1 deletions
@@ -8,6 +8,7 @@ containerName: spa
 image:
  repository: ghcr.io/zap-proto/zerocopy
  tag: latest
+  digest: sha256:d34e9c1cb02107708d6c1f7aa5d7e3c50d7c250ac786d933d175acb794c60e94
  pullPolicy: Always
 partOf: zerocopy-app
 env:
@@ -46,7 +47,7 @@ ports:
  name: http
  servicePort: 80
 imagePullSecrets:
- name: ghcr-pull
+- name: ghcr-secret
 rollingUpdate:
  maxSurge: 25%
  maxUnavailable: 25%