automatic image updates from public repos with selected tags feature added

config/crd/bases/operator.andy.vendetti.ru_nodetainterconfigs.yaml

@@ -41,6 +41,33 @@ spec:
           spec:
             description: NodeTainterConfigSpec defines the desired state of NodeTainterConfig.
             properties:
+              imageUpdatePolicy:
+                description: ImageUpdatePolicy defines the policy for automatic image
+                  updates.
+                properties:
+                  checkInterval:
+                    default: 1h
+                    description: |-
+                      CheckInterval specifies how often to check for image updates (e.g., "5m", "1h", "15m").
+                      Minimum interval recommended: 5m to avoid rate limiting.
+                    pattern: ^([0-9]+(s|m|h))+$
+                    type: string
+                  enabled:
+                    description: Enabled toggles the image update feature.
+                    type: boolean
+                  monitoredTags:
+                    description: |-
+                      MonitoredTags is a list of keywords found in image tags that trigger update checks.
+                      Example: ["latest", "master", "dev"]
+                    items:
+                      type: string
+                    type: array
+                  restartAnnotation:
+                    description: |-
+                      RestartAnnotation is the annotation key used to trigger deployment restarts.
+                      If empty, a default will be used (e.g., "image-updater.my-operator.com/restartedAt").
+                    type: string
+                type: object
               labelRules:
                 additionalProperties:
                   type: string

config/rbac/role.yaml

@@ -21,6 +21,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - apps
   resources:

config/samples/operator_v1alpha1_nodetainterconfig.yaml

@@ -16,3 +16,8 @@ spec:
     cpuLimit: "500m"
     memoryLimit: "512Mi"
   optOutLabelKey: "andy.vendetti.ru/skip-resource-defaults"
+  imageUpdatePolicy:
+    enabled: true
+    checkInterval: "5m"
+    monitoredTags: ["latest", "dev"]
+    # restartAnnotation: "andy.vendetti.ru/restartedAt"