@phillip Well, I find Komodo's Automatic Updates too inflexible.
As you outlined in your article, it requires a rolling tag (like :latest) which brings its share of issues. What if a breaking change is introduced? What if someone published a malicious version?
Whereas GitOps+renovate allows for fine-grained updates and the use of versioned and pinned images (e.g. image:x.y.z@sha:256fff…).
For example, my renovate config does:
@axel Ah, that makes sense! I auto-update a couple less important containers. For most of them though, Komodo just notifies me of available updates, so I have a chance to check release notes in my RSS feed, then manually apply the updates.
The ability to delay auto-updates by a few days is awesome, and the extra control is pretty sweet. I’ll take a closer look at this setup. Thanks for sharing!
@phillip What you describe (checking releases notes in your RSS feed then manually applying updates) is what I was doing before, but I was growing tired of all the manual work and often did not update images for weeks. This is what ultimately drove me to Komodo and the GitOps workflow.