From 53f87b1ecb48420fdbd6054d1c26f48898b48a5f Mon Sep 17 00:00:00 2001
From: Oleksandr Berezovskyi <berezovskyi.oleksandr@gmail.com>
Date: Mon, 23 Mar 2026 23:06:48 +0200
Subject: [PATCH] fix(k8s/pihole): pin image tags and set IfNotPresent pull
 policy

---
 kubernetes/app/pihole/deployment.yaml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/kubernetes/app/pihole/deployment.yaml b/kubernetes/app/pihole/deployment.yaml
index 9d24555..2c0ed02 100644
--- a/kubernetes/app/pihole/deployment.yaml
+++ b/kubernetes/app/pihole/deployment.yaml
@@ -19,7 +19,8 @@ spec:
     spec:
       initContainers:
         - name: fix-permissions
-          image: busybox:latest
+          image: busybox:1.37
+          imagePullPolicy: IfNotPresent
           command: ["sh", "-c", "chown 1000:1000 /data"]
           volumeMounts:
             - name: pihole-ftl-db
@@ -94,7 +95,8 @@ spec:
               mountPath: /data
 
         - name: dnscrypt-proxy
-          image: klutchell/dnscrypt-proxy:latest
+          image: klutchell/dnscrypt-proxy:v2.1.15
+          imagePullPolicy: IfNotPresent
           env:
             - name: TZ
               value: Europe/Kyiv