Splunk Operator: build is not hermetic

[paheath]

Please select the type of request

Bug

Tell us more

The image is built on ubi8:latest, meaning a build from the same commit could use a different base image depending on what latest points to at any given time. It would be preferable to point to a more specific tag or sha so old builds are repeatable.

[akondur]

Hey @paheath , can you check if this MR fixes the issue?

[paheath]

I would use the digest instead of a tag. I think docker-splunk needs the same change. https://github.com/splunk/docker-splunk/blob/9b55b6960ee00f54c19a25a86a178f998824711b/base/redhat-8/Dockerfile#L19

[akondur]

Hey @paheath , can you open a separate issue on the docker-splunk repo here? Meanwhile, we are evaluating the fix on the Splunk Operator side.

[paheath]

Done splunk/docker-splunk#682

[michal-tatusko-splunk]

Thank you for raising this bug. We will look into that shortly.