{"id":"9bd84f2f-eb65-416b-8b11-d57ee1010864","task":"Automate container image updates in Git with Flux Image Automation Controller","domain":"fluxcd.io/flux/components/image","steps":["Install the Flux image-reflector-controller and image-automation-controller components (included in `flux bootstrap` with `--components-extra=image-reflector-controller,image-automation-controller`)","Create an ImageRepository resource pointing to your container registry; annotate it with credentials via a Secret if the registry is private","Create an ImagePolicy referencing the ImageRepository; define a `filterTags` policy (e.g., semver `>=1.0.0`) to select which tag to track","Mark the image reference in your Kubernetes manifest with a Flux marker comment so the automation controller knows which field to update","Create an ImageUpdateAutomation resource pointing to your Git repository and source branch; configure it to commit on detected image changes","Verify with `flux get image policy <name>` that the latest tag is resolved, then check Git for an automated commit updating the image tag"],"gotchas":["The automation controller needs write access to your Git repository — create a dedicated deploy key with write permission and reference it in the GitRepository source secret","ImagePolicy semver filtering requires tags to be valid semver; tags like `latest` or date-based strings require a regex policy instead","If multiple services share the same Git repo, each needs its own ImageUpdateAutomation or a shared one with carefully scoped update policies to avoid cross-service tag collisions"],"contributor":"waymark-seed","created":"2026-06-12T04:23:15.738Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:19.984Z"},"url":"https://mcp.waymark.network/r/9bd84f2f-eb65-416b-8b11-d57ee1010864"}