operator: accept image SHA digests

Signed-off-by: Mikko Ylinen <[email protected]>

Author: mythi

pkg/apis/deviceplugin/v1/webhook_common.go

@@ -16,15 +16,23 @@ package v1
 
 import (
 	"path/filepath"
+	"regexp"
 	"strings"
 
 	"github.com/pkg/errors"
 	"k8s.io/apimachinery/pkg/util/version"
 )
 
+const sha256RE = "@sha256:[0-9a-f]{64}$"
+
 // common functions for webhooks
 
 func validatePluginImage(image, expectedImageName string, expectedMinVersion *version.Version) error {
+	imageRe := regexp.MustCompile(expectedImageName + sha256RE)
+	if imageRe.MatchString(image) {
+		return nil
+	}
+
 	// Ignore registry, vendor and extract the image name with the tag
 	parts := strings.SplitN(filepath.Base(image), ":", 2)
 	if len(parts) != 2 {
@@ -35,7 +43,7 @@ func validatePluginImage(image, expectedImageName string, expectedMinVersion *ve
 	versionStr := parts[1]
 
 	if imageName != expectedImageName {
-		return errors.Errorf("incorrect image name %q. Make sure you use '<vendor>/%s:<version>'", imageName, expectedImageName)
+		return errors.Errorf("incorrect image name %q. Make sure you use '<vendor>/%s.", strings.TrimSuffix(imageName, "@sha256"), expectedImageName)
 	}
 
 	ver, err := version.ParseSemantic(versionStr)