From 1016f1a7cb076f4ebbac3907e9ab72eb9c800ef8 Mon Sep 17 00:00:00 2001
From: Alan Walsh <alwalsh@iu.edu>
Date: Mon, 9 Mar 2026 17:18:55 -0400
Subject: [PATCH 1/2] feat(ardac1prd): pin image tags to 2026.03

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 ardac1prd/portal.ardac.org/values.yaml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/ardac1prd/portal.ardac.org/values.yaml b/ardac1prd/portal.ardac.org/values.yaml
index 2ead25b..81e5612 100644
--- a/ardac1prd/portal.ardac.org/values.yaml
+++ b/ardac1prd/portal.ardac.org/values.yaml
@@ -36,6 +36,8 @@ ambassador:
 
 arborist:
   enabled: true
+  image:
+    tag: "2026.03"
   externalSecrets:
     dbcreds: "ardac1prd-default-arborist-creds"
 
@@ -44,6 +46,8 @@ argo-wrapper:
 
 audit:
   enabled: true
+  image:
+    tag: "2026.03"
   serviceAccount:
     annotations:
       eks.amazonaws.com/role-arn: "arn:aws:iam::742378880825:role/gen3_service/ardac1prd-default-audit-sa"
@@ -53,6 +57,8 @@ audit:
 
 aws-es-proxy:
   enabled: true
+  image:
+    tag: "2026.03"
   esEndpoint: "vpc-ardac1prd-gen3-metadata-34ztrt3iey3wvgd36nrpf5gk5m.us-east-1.es.amazonaws.com"
   externalSecrets:
     awsCreds: "ardac1prd-default-aws-es-proxy-creds"
@@ -69,6 +75,8 @@ dicom-viewer:
 
 fence:
   enabled: true
+  image:
+    tag: "2026.03"
   serviceAccount:
     annotations:
       eks.amazonaws.com/role-arn: "arn:aws:iam::742378880825:role/gen3_service/ardac1prd-default-fence-sa"
@@ -100,6 +108,8 @@ grafana:
 
 guppy:
   enabled: true
+  image:
+    tag: "2026.03"
   indices:
     - index: ardac_case
       type: case
@@ -120,6 +130,8 @@ guppy:
 
 hatchery:
   enabled: true
+  image:
+    tag: "2026.03"
 
   hatchery:
     sidecarContainer:
@@ -176,6 +188,8 @@ hatchery:
 
 indexd:
   enabled: true
+  image:
+    tag: "2026.03"
   defaultPrefix: "dg.XXXX/"
   externalSecrets:
     dbcreds: "ardac1prd-default-indexd-creds"
@@ -183,6 +197,8 @@ indexd:
 
 manifestservice:
   enabled: true
+  image:
+    tag: "2026.03"
   serviceAccount:
     annotations:
       eks.amazonaws.com/role-arn: "arn:aws:iam::742378880825:role/gen3_service/ardac1prd-default-manifestservice-sa"
@@ -197,6 +213,8 @@ metadata:
 
 peregrine:
   enabled: true
+  image:
+    tag: "2026.03"
   externalSecrets:
     dbcreds: "ardac1prd-default-peregrine-creds"
 
@@ -1482,9 +1500,13 @@ requestor:
 
 revproxy:
   enabled: true
+  image:
+    tag: "2026.03"
 
 sheepdog:
   enabled: true
+  image:
+    tag: "2026.03"
   replicaCount: 5
   externalSecrets:
     dbcreds: "ardac1prd-default-sheepdog-creds"
@@ -1497,6 +1519,8 @@ sower:
 
 wts:
   enabled: true
+  image:
+    tag: "2026.03"
   externalSecrets:
     dbcreds: "ardac1prd-default-wts-creds"
     createWtsOidcClientSecret: false

From 855f4a50e2700ae41114ec59a016d14431f2c286 Mon Sep 17 00:00:00 2001
From: Alan Walsh <alwalsh@iu.edu>
Date: Mon, 9 Mar 2026 17:41:40 -0400
Subject: [PATCH 2/2] feat(ardac1prd): add explicit image repository values

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 ardac1prd/portal.ardac.org/values.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/ardac1prd/portal.ardac.org/values.yaml b/ardac1prd/portal.ardac.org/values.yaml
index 81e5612..424398b 100644
--- a/ardac1prd/portal.ardac.org/values.yaml
+++ b/ardac1prd/portal.ardac.org/values.yaml
@@ -37,6 +37,7 @@ ambassador:
 arborist:
   enabled: true
   image:
+    repository: quay.io/cdis/arborist
     tag: "2026.03"
   externalSecrets:
     dbcreds: "ardac1prd-default-arborist-creds"
@@ -47,6 +48,7 @@ argo-wrapper:
 audit:
   enabled: true
   image:
+    repository: quay.io/cdis/audit-service
     tag: "2026.03"
   serviceAccount:
     annotations:
@@ -58,6 +60,7 @@ audit:
 aws-es-proxy:
   enabled: true
   image:
+    repository: quay.io/cdis/aws-es-proxy
     tag: "2026.03"
   esEndpoint: "vpc-ardac1prd-gen3-metadata-34ztrt3iey3wvgd36nrpf5gk5m.us-east-1.es.amazonaws.com"
   externalSecrets:
@@ -76,6 +79,7 @@ dicom-viewer:
 fence:
   enabled: true
   image:
+    repository: quay.io/cdis/fence
     tag: "2026.03"
   serviceAccount:
     annotations:
@@ -109,6 +113,7 @@ grafana:
 guppy:
   enabled: true
   image:
+    repository: quay.io/cdis/guppy
     tag: "2026.03"
   indices:
     - index: ardac_case
@@ -131,6 +136,7 @@ guppy:
 hatchery:
   enabled: true
   image:
+    repository: quay.io/cdis/hatchery
     tag: "2026.03"
 
   hatchery:
@@ -189,6 +195,7 @@ hatchery:
 indexd:
   enabled: true
   image:
+    repository: quay.io/cdis/indexd
     tag: "2026.03"
   defaultPrefix: "dg.XXXX/"
   externalSecrets:
@@ -198,6 +205,7 @@ indexd:
 manifestservice:
   enabled: true
   image:
+    repository: quay.io/cdis/manifestservice
     tag: "2026.03"
   serviceAccount:
     annotations:
@@ -214,6 +222,7 @@ metadata:
 peregrine:
   enabled: true
   image:
+    repository: quay.io/cdis/peregrine
     tag: "2026.03"
   externalSecrets:
     dbcreds: "ardac1prd-default-peregrine-creds"
@@ -1501,11 +1510,13 @@ requestor:
 revproxy:
   enabled: true
   image:
+    repository: quay.io/cdis/nginx
     tag: "2026.03"
 
 sheepdog:
   enabled: true
   image:
+    repository: quay.io/cdis/sheepdog
     tag: "2026.03"
   replicaCount: 5
   externalSecrets:
@@ -1520,6 +1531,7 @@ sower:
 wts:
   enabled: true
   image:
+    repository: quay.io/cdis/workspace-token-service
     tag: "2026.03"
   externalSecrets:
     dbcreds: "ardac1prd-default-wts-creds"