wip: pull image using digest support

Author: iamayushm

client/argocdServer/k8sClient.go

@@ -70,11 +70,13 @@ func (impl ArgoK8sClientImpl) CreateAcdApp(appRequest *AppTemplate, cluster *rep
 		return "", err
 	}
 
-	config, err := rest.InClusterConfig()
-	if err != nil {
-		impl.logger.Errorw("error in config", "err", err)
-		return "", err
-	}
+	//config, err := rest.InClusterConfig()
+	//if err != nil {
+	//	impl.logger.Errorw("error in config", "err", err)
+	//	return "", err
+	//}
+	config := &rest.Config{Host: "https://172.191.203.220:16443", BearerToken: "cGVlZE4xWlZzVTFyQVpXZ2J2d2RQcGplQTI5NUJRYjdabEdMeXEyY1pWbz0K", TLSClientConfig: rest.TLSClientConfig{Insecure: true}}
+
 	config.GroupVersion = &schema.GroupVersion{Group: "argoproj.io", Version: "v1alpha1"}
 	config.NegotiatedSerializer = serializer.NewCodecFactory(runtime.NewScheme())
 	config.APIPath = "/apis"

pkg/pipeline/CiService.go

@@ -658,6 +658,7 @@ func (impl *CiServiceImpl) buildWfRequestForCiPipeline(pipeline *pipelineConfig.
 		RegistryDestinationImageMap: registryDestinationImageMap,
 		RegistryCredentialMap:       registryCredentialMap,
 		PluginArtifactStage:         pluginArtifactStage,
+		PullImageUsingDigest:        impl.config.PullImageUsingDigest,
 	}
 
 	if dockerRegistry != nil {

pkg/pipeline/WorkflowDagExecutor.go

@@ -197,6 +197,7 @@ type WorkflowDagExecutorImpl struct {
 	argoClientWrapperService            argocdServer.ArgoClientWrapperService
 	pipelineConfigListenerService       PipelineConfigListenerService
 	customTagService                    CustomTagService
+	CiCdConfig                          *types.CiCdConfig
 }
 
 const kedaAutoscaling = "kedaAutoscaling"
@@ -302,6 +303,7 @@ func NewWorkflowDagExecutorImpl(Logger *zap.SugaredLogger, pipelineRepository pi
 	argoClientWrapperService argocdServer.ArgoClientWrapperService,
 	pipelineConfigListenerService PipelineConfigListenerService,
 	customTagService CustomTagService,
+	CiCdConfig *types.CiCdConfig,
 ) *WorkflowDagExecutorImpl {
 	wde := &WorkflowDagExecutorImpl{logger: Logger,
 		pipelineRepository:            pipelineRepository,
@@ -378,6 +380,7 @@ func NewWorkflowDagExecutorImpl(Logger *zap.SugaredLogger, pipelineRepository pi
 		argoClientWrapperService:            argoClientWrapperService,
 		pipelineConfigListenerService:       pipelineConfigListenerService,
 		customTagService:                    customTagService,
+		CiCdConfig:                          CiCdConfig,
 	}
 	config, err := types.GetCdConfig()
 	if err != nil {
@@ -1637,12 +1640,13 @@ func (impl *WorkflowDagExecutorImpl) buildWFRequest(runner *pipelineConfig.CdWor
 			DataSource:   artifact.DataSource,
 			WorkflowId:   artifact.WorkflowId,
 		},
-		OrchestratorHost:  impl.config.OrchestratorHost,
-		OrchestratorToken: impl.config.OrchestratorToken,
-		CloudProvider:     impl.config.CloudProvider,
-		WorkflowExecutor:  workflowExecutor,
-		RefPlugins:        refPluginsData,
-		Scope:             scope,
+		OrchestratorHost:     impl.config.OrchestratorHost,
+		OrchestratorToken:    impl.config.OrchestratorToken,
+		CloudProvider:        impl.config.CloudProvider,
+		WorkflowExecutor:     workflowExecutor,
+		RefPlugins:           refPluginsData,
+		Scope:                scope,
+		PullImageUsingDigest: impl.config.PullImageUsingDigest,
 	}
 
 	extraEnvVariables := make(map[string]string)
@@ -2958,7 +2962,7 @@ func (impl *WorkflowDagExecutorImpl) TriggerPipeline(overrideRequest *bean.Value
 		manifestPushResponse := manifestPushService.PushChart(manifestPushTemplate, ctx)
 		if manifestPushResponse.Error != nil {
 			impl.logger.Errorw("Error in pushing manifest to git", "err", err, "git_repo_url", manifestPushTemplate.RepoUrl)
-			return releaseNo, manifest, err
+			return releaseNo, manifest, manifestPushResponse.Error
 		}
 		pipelineOverrideUpdateRequest := &chartConfig.PipelineOverride{
 			Id:                     valuesOverrideResponse.PipelineOverride.Id,
@@ -4072,6 +4076,11 @@ func (impl *WorkflowDagExecutorImpl) getReleaseOverride(envOverride *chartConfig
 	if strategy != nil {
 		deploymentStrategy = string(strategy.Strategy)
 	}
+
+	if impl.CiCdConfig.PullImageUsingDigest {
+		imageTag[imageTagLen-1] = fmt.Sprintf("%s@%s", imageTag[imageTagLen-1], artifact.ImageDigest)
+	}
+
 	releaseAttribute := app.ReleaseAttributes{
 		Name:           imageName,
 		Tag:            imageTag[imageTagLen-1],

pkg/pipeline/types/CiCdConfig.go

@@ -123,6 +123,7 @@ type CiCdConfig struct {
 	ExtBlobStorageSecretName                   string                       `env:"EXTERNAL_BLOB_STORAGE_SECRET_NAME" envDefault:"blob-storage-secret"`
 	UseArtifactListingQueryV2                  bool                         `env:"USE_ARTIFACT_LISTING_QUERY_V2" envDefault:"true"`
 	UseImageTagFromGitProviderForTagBasedBuild bool                         `env:"USE_IMAGE_TAG_FROM_GIT_PROVIDER_FOR_TAG_BASED_BUILD" envDefault:"false"` // this is being done for https://github.com/devtron-labs/devtron/issues/4263
+	PullImageUsingDigest                       bool                         `env:"PULL_IMAGE_USING_DIGEST" envDefault:"false"`
 }
 
 type CiConfig struct {

pkg/pipeline/types/Workflow.go

@@ -126,6 +126,7 @@ type WorkflowRequest struct {
 	RegistryCredentialMap       map[string]plugin.RegistryCredentials `json:"registryCredentialMap"`
 	PluginArtifactStage         string                                `json:"pluginArtifactStage"`
 	PushImageBeforePostCI       bool                                  `json:"pushImageBeforePostCI"`
+	PullImageUsingDigest        bool                                  `json:"pullImageUsingDigest"`
 	Type                        bean.WorkflowPipelineType
 	Pipeline                    *pipelineConfig.Pipeline
 	Env                         *repository.Environment