From bbdb5ba832096347a5b9cc6c207d741280a0428d Mon Sep 17 00:00:00 2001
From: Joe Julian <me@joejulian.name>
Date: Wed, 5 Feb 2020 14:18:17 -0800
Subject: [PATCH] Use sha instead of tag to prevent hijacking

---
 test/e2e-kind.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/test/e2e-kind.sh b/test/e2e-kind.sh
index 1f6851b3b8..8fa9118f74 100755
--- a/test/e2e-kind.sh
+++ b/test/e2e-kind.sh
@@ -109,7 +109,11 @@ install_certmanager() {
 
 install_dummylb() {
     echo 'Installing dummylb...'
-    docker_exec kubectl apply -f https://gitlab.com/joejulian/dummylb/-/raw/master/dummylb.yaml
+    DUMMYLB_SHA="cb4c17d70e63393f8de7cfa97d186aa06e781b3cd25bfff1f374b9d57159e80f"
+    DUMMYLB_REG="registry.gitlab.com/joejulian/dummylb"
+    curl -sL https://gitlab.com/joejulian/dummylb/-/raw/master/dummylb.yaml |
+      sed "s%image: $DUMMYLB_REG:latest%image: $DUMMYLB_REG@sha256:$DUMMYLB_SHA%" |
+      docker_exec kubectl apply -f https://gitlab.com/joejulian/dummylb/-/raw/master/dummylb.yaml
     echo
 }