image-policy P3 (#17) Batch A: nextcloud-aio pin pullPolicy (IfNotPresent)

All 9 AIO containers (database, nextcloud, fulltextsearch, imaginary, onlyoffice,
redis, talk, notify-push via strategic-merge; apache via a new containers block)
omitted imagePullPolicy -> sticky Always. Set explicit IfNotPresent (pinned AIO
images, boot-safe). Lane B.

Author: tillo

envuassu/nextcloud/kustomize/nextcloud-aio-apache-deployment.yaml

@@ -14,6 +14,9 @@ spec:
     rollingUpdate: null
   template:
     spec:
+      containers:
+        - name: nextcloud-aio-apache
+          imagePullPolicy: IfNotPresent
       affinity:
         podAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:

envuassu/nextcloud/kustomize/nextcloud-aio-database-deployment.yaml

@@ -8,6 +8,7 @@ spec:
     spec:
       containers:
         - name: nextcloud-aio-database
+          imagePullPolicy: IfNotPresent
           env:
             - name: POSTGRES_PASSWORD
               $patch: delete

envuassu/nextcloud/kustomize/nextcloud-aio-fulltextsearch-deployment.yaml

@@ -13,6 +13,7 @@ spec:
     spec:
       containers:
         - name: nextcloud-aio-fulltextsearch
+          imagePullPolicy: IfNotPresent
           # The chart derives ELASTIC_PASSWORD from the FULLTEXTSEARCH_PASSWORD
           # value, which we intentionally leave unset (no secrets in git) — so it
           # renders EMPTY and the ES `elastic` user ends up with no usable

envuassu/nextcloud/kustomize/nextcloud-aio-imaginary-deployment.yaml

@@ -8,6 +8,7 @@ spec:
     spec:
       containers:
         - name: nextcloud-aio-imaginary
+          imagePullPolicy: IfNotPresent
           env:
             - name: IMAGINARY_SECRET
               $patch: delete

envuassu/nextcloud/kustomize/nextcloud-aio-nextcloud-deployment.yaml

@@ -13,6 +13,7 @@ spec:
     spec:
       containers:
         - name: nextcloud-aio-nextcloud
+          imagePullPolicy: IfNotPresent
           env:
             - name: ADMIN_PASSWORD
               $patch: delete

envuassu/nextcloud/kustomize/nextcloud-aio-notify-push-deployment.yaml

@@ -13,6 +13,7 @@ spec:
     spec:
       containers:
         - name: nextcloud-aio-notify-push
+          imagePullPolicy: IfNotPresent
           env:
             - name: POSTGRES_PASSWORD
               $patch: delete

envuassu/nextcloud/kustomize/nextcloud-aio-onlyoffice-deployment.yaml

@@ -8,6 +8,7 @@ spec:
     spec:
       containers:
         - name: nextcloud-aio-onlyoffice
+          imagePullPolicy: IfNotPresent
           env:
             - name: JWT_SECRET
               $patch: delete

envuassu/nextcloud/kustomize/nextcloud-aio-redis-deployment.yaml

@@ -8,6 +8,7 @@ spec:
     spec:
       containers:
         - name: nextcloud-aio-redis
+          imagePullPolicy: IfNotPresent
           env:
             - name: REDIS_HOST_PASSWORD
               $patch: delete

envuassu/nextcloud/kustomize/nextcloud-aio-talk-deployment.yaml

@@ -18,6 +18,7 @@ spec:
             topologyKey: kubernetes.io/hostname
       containers:
         - name: nextcloud-aio-talk
+          imagePullPolicy: IfNotPresent
           env:
             - name: INTERNAL_SECRET
               $patch: delete