ImageUpdateAutomation replace digest in Kustomize patches

[patrycju]

Given following manifests, image-update-automation bumps versions in kustomize.yaml, but it does not touch envs patch.

apiVersion: image.toolkit.fluxcd.io/v1beta1
kind: ImageUpdateAutomation
metadata:
  name: example
  namespace: staging
spec:
  interval: 1m0s
  sourceRef:
    kind: GitRepository
    name: flux-system
    namespace: flux-system
  git:
    commit:
      author:
        email: [email protected]
        name: fluxcd
      messageTemplate: '{{range .Updated.Images}}{{println .}}{{end}}'
  update:
    path: ./
    strategy: Setters
---
apiVersion: image.toolkit.fluxcd.io/v1beta2
kind: ImageRepository
metadata:
  name: image1
  namespace: flux-system
spec:
  image: ghcr.io/example/image1
  interval: 1m0s
  secretRef:
    name: regcred
  accessFrom:
    namespaceSelectors:
    - matchLabels:
        kubernetes.io/metadata.name: staging
    - matchLabels:
        kubernetes.io/metadata.name: production
---
apiVersion: image.toolkit.fluxcd.io/v1beta2
kind: ImageRepository
metadata:
  name: image2
  namespace: flux-system
spec:
  image: ghcr.io/example/image2
  interval: 1m0s
  secretRef:
    name: regcred
  accessFrom:
    namespaceSelectors:
    - matchLabels:
        kubernetes.io/metadata.name: staging
    - matchLabels:
        kubernetes.io/metadata.name: production
---
# env-vars-patch.yaml file
- op: add
  path: /spec/template/spec/containers/0/env
  value:
  - name: WORKER_IMAGE
    value: ghcr.io/example/image1 # {"$imagepolicy": "staging:image1:name"}
  - name: WORKER_IMAGE_DIGEST
    value: sha256:[some digest] # {"$imagepolicy": "staging:image1:digest"}
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: staging
commonLabels:
  environment: staging
  stack: example
resources:
- [...]
images:
- name: ghcr.io/example/image2
  newName: ghcr.io/example/image2 # {"$imagepolicy": "staging:image2:name"}
  newTag: main # {"$imagepolicy": "staging:image2:tag"}
  digest: sha256:[some digest] # {"$imagepolicy": "staging:image2:digest"}
patches:
- path: env-vars-patch.yaml
  target:
    group: apps
    version: v1
    kind: Deployment
    name: image2

If image1 is in images in kustomization file, it works correctly, but it does not detect value to replace in env-vars-patch.yaml. However, image1 must be passed as env var to image2, so it cannot be in images.

How can I make it work?

[stefanprodan]

Flux image automation can only patch YAML with Kubernetes resources. YAML objects which don't have apiVersion and kind are ignored.