Use sha instead of tag to prevent hijacking

mesosphere · Feb 5, 2020 · e43b602 · e43b602
1 parent e537795
commit e43b602
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/test/e2e-kind.sh b/test/e2e-kind.sh
@@ -109,7 +109,11 @@ install_certmanager() {
 
 install_dummylb() {
     echo 'Installing dummylb...'
-    docker_exec kubectl apply -f https://gitlab.com/joejulian/dummylb/-/raw/master/dummylb.yaml
+    DUMMYLB_SHA="cb4c17d70e63393f8de7cfa97d186aa06e781b3cd25bfff1f374b9d57159e80f"
+    DUMMYLB_REG="registry.gitlab.com/joejulian/dummylb"
+    curl -sL https://gitlab.com/joejulian/dummylb/-/raw/master/dummylb.yaml |
+      sed "s%image: $DUMMYLB_REG:latest%image: $DUMMYLB_REG@sha256:$DUMMYLB_SHA%" |
+      docker_exec kubectl apply -f -
     echo
 }