Skip to content
This repository has been archived by the owner on Apr 9, 2023. It is now read-only.

Install script doesn't preserves package versions for yq and jq #49

Open
bitphage opened this issue Dec 16, 2021 · 0 comments
Open

Install script doesn't preserves package versions for yq and jq #49

bitphage opened this issue Dec 16, 2021 · 0 comments
Labels
bug Something isn't working

Comments

@bitphage
Copy link

On recent kube-tools upgrade our github pipeline break due to upgrade of yq version from 3 to 4 with this change: 642a102

We were using branch v1 in the pipiline step: uses: stefanprodan/kube-tools@v1

And now we cannot just switch to a tag to achieve proper version pin (uses: stefanprodan/[email protected]) because install script doesn't have a version pin. https://github.com/stefanprodan/kube-tools/blob/v1.5.0/src/install.sh
Basically it means that docker image rebuild is not giving reproducible result, and that's really bad.
@stefanprodan stefanprodan mentioned this issue Dec 16, 2021
Merged
@stefanprodan stefanprodan added the bug Something isn't working label Dec 16, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@bitphage @stefanprodan