appVersion for image version

Signed-off-by: Hung Nguyen <me@hnguy.com>

Author: hn23

stable/anchore-admission-controller/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: anchore-admission-controller
-version: 0.8.3
+version: 0.8.4
 appVersion: 0.8.3
 description: A kubernetes admission controller for validating and mutating webhooks that operates against Anchore Engine to make access decisions and annotations
 home: https://github.com/anchore/kubernetes-admission-controller

stable/anchore-admission-controller/templates/_helpers.tpl

@@ -37,3 +37,20 @@ app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
 {{- end }}
 app.kubernetes.io/managed-by: {{ .Release.Service }}
 {{- end -}}
+
+{{/*
+Resolve the image, replacing "latest" tag with AppVersion for the default upstream image.
+Existing customers pinning a specific tag are unaffected.
+*/}}
+{{- define "anchore-admission-controller.image" -}}
+{{- $parts := splitList ":" .Values.image -}}
+{{- $repo := first $parts -}}
+{{- $tag := last $parts -}}
+{{- $defaultRepo := "anchore/kubernetes-admission-controller" -}}
+{{- $isDefault := or (eq $repo $defaultRepo) (eq $repo (printf "docker.io/%s" $defaultRepo)) (eq $repo (printf "docker.io/library/%s" $defaultRepo)) -}}
+{{- if and $isDefault (or (eq $tag "latest") (eq $tag $repo)) -}}
+{{- printf "%s:v%s" $repo .Chart.AppVersion -}}
+{{- else -}}
+{{- .Values.image -}}
+{{- end -}}
+{{- end -}}

stable/anchore-admission-controller/templates/deployment.yaml

@@ -44,7 +44,7 @@ spec:
       {{- end }}
       containers:
       - name: {{ .Chart.Name }}
-        image: "{{ .Values.image.repository }}:v{{ .Values.image.tag | default .Chart.AppVersion }}"
+        image: {{ include "anchore-admission-controller.image" . }}
         imagePullPolicy: {{ .Values.imagePullPolicy }}
       {{- with .Values.containerSecurityContext }}
         securityContext: {{- toYaml . | nindent 10 }}

stable/anchore-admission-controller/values.yaml

@@ -5,7 +5,7 @@ fullnameOverride: Null
 replicaCount: 1
 logVerbosity: 3
 
-image: "anchore/kubernetes-admission-controller:v0.8.3"
+image: "anchore/kubernetes-admission-controller:latest"
 imagePullPolicy: IfNotPresent
 # ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
 imagePullSecrets: []