chore(linter): ignore latest-tag

.kube-linter.yaml

@@ -1,4 +1,6 @@
 checks:
+  exclude:
+  - latest-tag
   ignorePaths:
-  - ./deploy//dev/**
+  - ./deploy/dev/**
   - ./**/inflated/**

Makefile

@@ -0,0 +1,4 @@
+.PHONY: lint
+
+lint:
+	go run golang.stackrox.io/kube-linter/cmd/kube-linter@latest lint .

deploy/Makefile

@@ -1,4 +1,4 @@
-.PHONY: dev prod inflate
+.PHONY: dev prod inflate lint
 
 dev:
 	@kubectl kustomize --enable-helm dev

deploy/base/deploy-drone-runner.yaml

@@ -24,7 +24,7 @@ spec:
     spec:
       containers:
       - name: drone-runner
-        image: drone/drone-runner-kube@sha256:8fcd1ee0ddfa1b035190d4e50ff90735657f91c7e2cb8db7b7989df8de40e86e
+        image: drone/drone-runner-kube:latest
         ports:
         - name: http
           protocol: TCP

deploy/base/deploy-element.yaml

@@ -25,7 +25,8 @@ spec:
     spec:
       containers:
       - name: element
-        image: vectorim/element-web:v1.11.40
+        image: vectorim/element-web:latest
+        imagePullPolicy: IfNotPresent
         volumeMounts:
           - name: config
             mountPath: /app/config.json

deploy/base/deploy-invidious.yaml

@@ -25,7 +25,7 @@ spec:
         runAsGroup: 1000
         runAsNonRoot: true
       initContainers:
-      - image: alpine/git:2.40.1
+      - image: alpine/git:latest
         imagePullPolicy: IfNotPresent
         name: init-invidious-repo
         volumeMounts:
@@ -43,7 +43,7 @@ spec:
             cpu: 500m
         securityContext:
           readOnlyRootFilesystem: true
-      - image: jbergknoff/postgresql-client@sha256:45e175ebb700cfd46e23a610477c3576550055ef40c394e663623946a5eced39
+      - image: jbergknoff/postgresql-client:latest
         imagePullPolicy: IfNotPresent
         name: init-invidious-db
         volumeMounts:
@@ -94,7 +94,7 @@ spec:
         workingDir: /data/repo
         command: ["sh", "docker/init-invidious-db.sh"]
       containers:
-      - image: quay.io/invidious/invidious:ac0c0609bb8b652e630c3603cd9dbb1c87fbdf44
+      - image: quay.io/invidious/invidious:latest
         imagePullPolicy: Always
         name: invidious
         ports:

deploy/base/deploy-netflux-homepage.yaml

@@ -23,7 +23,7 @@ spec:
         app.kubernetes.io/instance: netflux-homepage
     spec:
       containers:
-      - image: netfluxio/homepage@sha256:fc253db170fddf4c4cf60aa4e1cefd4f9becb1305aba0929034d2b7636b6aad1
+      - image: netfluxio/homepage:latest
         imagePullPolicy: Always
         name: netflux-homepage
         ports:

deploy/base/deploy-solar-toolkit-gateway.yaml

@@ -23,7 +23,7 @@ spec:
         app.kubernetes.io/instance: solar-toolkit-gateway
     spec:
       containers:
-      - image: netfluxio/solar-toolkit@sha256:a2251b90278bf66c04980fb4e16353195f2dbd07690df2922b61a7cf09aea049
+      - image: netfluxio/solar-toolkit:latest
         imagePullPolicy: Always
         name: solar-toolkit
         ports:

deploy/base/statefulset-gitea.yaml

@@ -114,7 +114,7 @@ spec:
       containers:
       - name: gitea
         image: gitea/gitea:1.20.5-rootless
-        imagePullPolicy: Always
+        imagePullPolicy: IfNotPresent
         ports:
         - name: http
           protocol: TCP

deploy/base/statefulset-radicale.yaml

@@ -27,8 +27,8 @@ spec:
         runAsNonRoot: true
       containers:
       - name: radicale
-        image: tomsquest/docker-radicale:3.1.8.3
-        imagePullPolicy: IfNotPresent
+        image: tomsquest/docker-radicale:latest
+        imagePullPolicy: Always
         ports:
         - name: caldav
           protocol: TCP

deploy/base/statefulset-synapse.yaml

@@ -30,8 +30,8 @@ spec:
         runAsUser: 991
         runAsGroup: 991
       containers:
-      - image: matrixdotorg/synapse:v1.91.2
-        imagePullPolicy: IfNotPresent
+      - image: matrixdotorg/synapse:latest
+        imagePullPolicy: Always
         name: synapse
         ports:
         - name: http