feature(nx-cloud): add values for more control over images

Author: s-wojciechowski

charts/nx-cloud/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: nx-cloud
 description: Nx Cloud Helm Chart
 type: application
-version: 1.1.0-rc1
+version: 1.1.0-rc2
 maintainers:
   - name: nx
     url: "https://nx.app/"

charts/nx-cloud/ci/basic-values.yaml

@@ -1,4 +1,5 @@
 global:
+  imageRegistry: "docker.io"
   nxCloudAppURL: "https://nx.test"
   mongodbConnectionString:
     secretName: nx-cloud-credentials
@@ -53,6 +54,8 @@ frontend:
     resources: null
 
 api:
+  image:
+    digest: sha256:034e529bbf353fe6ac2fffe551fa0edc5165f1dc1eba26cae86d104b75d896c1
   valkey:
     clientProvider: "redisson"
     useSentinel: true

charts/nx-cloud/templates/_helpers.tpl

@@ -84,3 +84,25 @@ Strip http:// or https:// prefixes from a URL
 {{- define "nxCloud.stripURLProtocol" -}}
 {{- regexReplaceAll "^https?://" . "" -}}
 {{- end -}}
+
+{{/*
+Construct the image reference with support for both tag and digest.
+If digest is specified, it takes precedence over tag.
+If global.imageRegistry is specified, it will be prepended to the repository.
+Usage: {{ include "nxCloud.image" (dict "image" .Values.api.image "global" .Values.global) }}
+*/}}
+{{- define "nxCloud.image" -}}
+{{- $registry := .global.imageRegistry | default "" -}}
+{{- $repository := .image.repository -}}
+{{- $digest := .image.digest | default "" -}}
+{{- $tag := .image.tag | default .global.imageTag -}}
+{{- $fullRepository := $repository -}}
+{{- if $registry -}}
+{{- $fullRepository = printf "%s/%s" (trimSuffix "/" $registry) $repository -}}
+{{- end -}}
+{{- if $digest -}}
+{{- printf "%s@%s" $fullRepository $digest -}}
+{{- else -}}
+{{- printf "%s:%s" $fullRepository $tag -}}
+{{- end -}}
+{{- end -}}

charts/nx-cloud/templates/aggregator/cronjob.yaml

@@ -45,7 +45,7 @@ spec:
           {{- end }}
           containers:
             - name: nx-cloud-aggregator
-              image: {{ .Values.aggregator.image.repository }}:{{ .Values.aggregator.image.tag | default .Values.global.imageTag }}
+              image: {{ include "nxCloud.image" (dict "image" .Values.aggregator.image "global" .Values.global) }}
               imagePullPolicy: {{ .Values.aggregator.image.pullPolicy | default .Values.global.imagePullPolicy | quote }}
               {{- if .Values.aggregator.cronjob.resources }}
               resources: {{- toYaml .Values.aggregator.cronjob.resources | nindent 16 }}

charts/nx-cloud/templates/api/deployment.yaml

@@ -66,7 +66,7 @@ spec:
       {{- end }}
       containers:
         - name: nx-cloud-nx-api
-          image: {{ .Values.api.image.repository }}:{{ .Values.api.image.tag | default .Values.global.imageTag }}
+          image: {{ include "nxCloud.image" (dict "image" .Values.api.image "global" .Values.global) }}
           imagePullPolicy: {{ .Values.api.image.pullPolicy | default .Values.global.imagePullPolicy | quote }}
           {{- if or .Values.config.agentConfigs .Values.api.deployment.volumeMounts }}
           volumeMounts:

charts/nx-cloud/templates/file-server/deployment.yaml

@@ -61,7 +61,7 @@ spec:
       {{- end }}
       containers:
         - name: nx-cloud-file-server
-          image: {{ .Values.fileServer.image.repository }}:{{ .Values.fileServer.image.tag | default .Values.global.imageTag }}
+          image: {{ include "nxCloud.image" (dict "image" .Values.fileServer.image "global" .Values.global) }}
           imagePullPolicy: {{ .Values.fileServer.image.pullPolicy | default .Values.global.imagePullPolicy | quote }}
           {{- if .Values.fileServer.deployment.resources }}
           resources: {{- toYaml .Values.fileServer.deployment.resources | nindent 12 }}

charts/nx-cloud/templates/frontend/deployment.yaml

@@ -56,7 +56,7 @@ spec:
       {{- end }}
       containers:
         - name: nx-cloud-frontend
-          image: {{ .Values.frontend.image.repository }}:{{ .Values.frontend.image.tag | default .Values.global.imageTag }}
+          image: {{ include "nxCloud.image" (dict "image" .Values.frontend.image "global" .Values.global) }}
           imagePullPolicy: {{ .Values.frontend.image.pullPolicy | default .Values.global.imagePullPolicy }}
           {{- if .Values.frontend.deployment.resources }}
           resources: {{- toYaml .Values.frontend.deployment.resources | nindent 12 }}

charts/nx-cloud/values.schema.json

@@ -15,6 +15,17 @@
             "type": "string"
           }
         },
+        "podLabels": {
+          "type": "object",
+          "description": "Global pod labels to apply to all pods",
+          "additionalProperties": {
+            "type": "string"
+          }
+        },
+        "imageRegistry": {
+          "type": "string",
+          "description": "Global image registry to prepend to all image repositories (optional)"
+        },
         "imageTag": {
           "type": "string",
           "description": "Global image tag for all NX Cloud components",
@@ -410,13 +421,17 @@
           "type": "string",
           "description": "Image tag"
         },
+        "digest": {
+          "type": "string",
+          "description": "Image digest (takes precedence over tag if specified)"
+        },
         "pullPolicy": {
           "type": "string",
           "description": "Image pull policy",
           "enum": ["Always", "IfNotPresent", "Never", ""]
         }
       },
-      "required": ["repository", "tag"]
+      "required": ["repository"]
     },
     "serviceConfig": {
       "type": "object",

charts/nx-cloud/values.yaml

@@ -1,6 +1,7 @@
 global:
   labels: {}
   podLabels: {}
+  imageRegistry: ""
   imageTag: "2025.07.1"
   imagePullPolicy: IfNotPresent
   imagePullSecrets: []
@@ -35,6 +36,7 @@ fileServer:
   image:
     repository: "nxprivatecloud/nx-cloud-file-server"
     tag: ""
+    digest: ""
     pullPolicy: IfNotPresent
 
   service:
@@ -105,6 +107,7 @@ aggregator:
   image:
     repository: "nxprivatecloud/nx-cloud-aggregator"
     tag: ""
+    digest: ""
     pullPolicy: IfNotPresent
 
   cronjob:
@@ -154,6 +157,7 @@ frontend:
   image:
     repository: "nxprivatecloud/nx-cloud-frontend"
     tag: ""
+    digest: ""
     pullPolicy: ""
 
   service:
@@ -230,6 +234,7 @@ api:
   image:
     repository: "nxprivatecloud/nx-cloud-nx-api"
     tag: ""
+    digest: ""
     pullPolicy: ""
 
   service: