From e5ed2c21a33f5e5c943b7cffea2913e9fa98ccfd Mon Sep 17 00:00:00 2001
From: Celes Renata <celes@frameshift.net>
Date: Sun, 19 Apr 2026 20:54:02 +0000
Subject: [PATCH] fix: pin image SHA tags in Kargo promotions, 1min warehouse
 poll, auto-promote paper

---
 pipelines/kargo/project-config.yaml | 2 +-
 pipelines/kargo/stages/beta.yaml    | 7 +++++++
 pipelines/kargo/stages/live.yaml    | 7 +++++++
 pipelines/kargo/stages/paper.yaml   | 7 +++++++
 pipelines/kargo/warehouse.yaml      | 1 +
 5 files changed, 23 insertions(+), 1 deletion(-)

diff --git a/pipelines/kargo/project-config.yaml b/pipelines/kargo/project-config.yaml
index 9398d7d..fc24ed6 100644
--- a/pipelines/kargo/project-config.yaml
+++ b/pipelines/kargo/project-config.yaml
@@ -8,6 +8,6 @@ spec:
     - stage: beta
       autoPromotionEnabled: true
     - stage: paper
-      autoPromotionEnabled: false
+      autoPromotionEnabled: true
     - stage: live
       autoPromotionEnabled: false
diff --git a/pipelines/kargo/stages/beta.yaml b/pipelines/kargo/stages/beta.yaml
index 7336794..b835f58 100644
--- a/pipelines/kargo/stages/beta.yaml
+++ b/pipelines/kargo/stages/beta.yaml
@@ -18,3 +18,10 @@ spec:
             apps:
               - name: stonks-beta
                 namespace: argocd
+                sourceUpdates:
+                  - repoURL: http://gitea-service.git-server.svc.cluster.local:3000/admin/stonks-oracle.git
+                    helm:
+                      images:
+                        - repoURL: registry.celestium.life/stonks-oracle/query-api
+                          key: image.tag
+                          value: Tag
diff --git a/pipelines/kargo/stages/live.yaml b/pipelines/kargo/stages/live.yaml
index 901ee44..d8d4ed3 100644
--- a/pipelines/kargo/stages/live.yaml
+++ b/pipelines/kargo/stages/live.yaml
@@ -22,3 +22,10 @@ spec:
             apps:
               - name: stonks-live
                 namespace: argocd
+                sourceUpdates:
+                  - repoURL: http://gitea-service.git-server.svc.cluster.local:3000/admin/stonks-oracle.git
+                    helm:
+                      images:
+                        - repoURL: registry.celestium.life/stonks-oracle/query-api
+                          key: image.tag
+                          value: Tag
diff --git a/pipelines/kargo/stages/paper.yaml b/pipelines/kargo/stages/paper.yaml
index f4e530f..043752c 100644
--- a/pipelines/kargo/stages/paper.yaml
+++ b/pipelines/kargo/stages/paper.yaml
@@ -22,3 +22,10 @@ spec:
             apps:
               - name: stonks-paper
                 namespace: argocd
+                sourceUpdates:
+                  - repoURL: http://gitea-service.git-server.svc.cluster.local:3000/admin/stonks-oracle.git
+                    helm:
+                      images:
+                        - repoURL: registry.celestium.life/stonks-oracle/query-api
+                          key: image.tag
+                          value: Tag
diff --git a/pipelines/kargo/warehouse.yaml b/pipelines/kargo/warehouse.yaml
index 27e25c3..8969196 100644
--- a/pipelines/kargo/warehouse.yaml
+++ b/pipelines/kargo/warehouse.yaml
@@ -4,6 +4,7 @@ metadata:
   name: stonks-images
   namespace: stonks-oracle
 spec:
+  interval: 1m0s
   subscriptions:
     - image:
         repoURL: registry.celestium.life/stonks-oracle/query-api