Strip sha256 hash

.gitea/workflows/deploy.yml

@@ -25,10 +25,6 @@ jobs:
           curl --fail --silent --show-error --location \
             --output "${RUNNER_TEMP}/helm.tar.gz" \
             "https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz"
-          curl --fail --silent --show-error --location \
-            --output "${RUNNER_TEMP}/helm.tar.gz.sha256sum" \
-            "https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz.sha256sum"
-          (cd "${RUNNER_TEMP}" && sha256sum --check helm.tar.gz.sha256sum)
           tar --extract --gzip --file "${RUNNER_TEMP}/helm.tar.gz" \
             --directory "${RUNNER_TEMP}" linux-amd64/helm
           mv "${RUNNER_TEMP}/linux-amd64/helm" "${RUNNER_TEMP}/helm"
@@ -56,10 +52,6 @@ jobs:
           curl --fail --silent --show-error --location \
             --output "${RUNNER_TEMP}/helm.tar.gz" \
             "https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz"
-          curl --fail --silent --show-error --location \
-            --output "${RUNNER_TEMP}/helm.tar.gz.sha256sum" \
-            "https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz.sha256sum"
-          (cd "${RUNNER_TEMP}" && sha256sum --check helm.tar.gz.sha256sum)
           tar --extract --gzip --file "${RUNNER_TEMP}/helm.tar.gz" \
             --directory "${RUNNER_TEMP}" linux-amd64/helm
           mv "${RUNNER_TEMP}/linux-amd64/helm" "${RUNNER_TEMP}/helm"
@@ -68,10 +60,6 @@ jobs:
           curl --fail --silent --show-error --location \
             --output "${RUNNER_TEMP}/kubectl" \
             "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl"
-          curl --fail --silent --show-error --location \
-            --output "${RUNNER_TEMP}/kubectl.sha256" \
-            "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256"
-          printf '%s  %s\n' "$(cat "${RUNNER_TEMP}/kubectl.sha256")" "${RUNNER_TEMP}/kubectl" | sha256sum --check
           chmod 0700 "${RUNNER_TEMP}/kubectl"
 
       - name: Configure Kubernetes access

README.md

@@ -40,7 +40,7 @@ No credential value or generated kubeconfig belongs in this repository.
 - Helm 3 or 4 for local rendering.
 - kubectl access with permission to create the initial namespaced resources.
 
-The nginx image is pinned by digest. No registry credentials, persistent
+The nginx image uses a readable version tag. No registry credentials, persistent
 volumes, cert-manager resources, or public Ingress are required.
 
 ## Install on brunner.ninja

values.yaml

@@ -7,7 +7,6 @@ replicaCount: 1
 image:
   repository: nginxinc/nginx-unprivileged
   tag: 1.29.4-alpine
-  digest: sha256:a6c4f61f456b85b8fdf7ec7ab28cc3e299440e6fb4a9dea520e5fd8fd440025e
   pullPolicy: IfNotPresent
 
 branding:
@@ -44,4 +43,3 @@ resources:
   limits:
     cpu: 100m
     memory: 64Mi
-