[surrealwolf]

Updates palworld_operator_image default (and the tfvars example) from sha256:89efffac… (commit b21803c2, 2026-07-29) to sha256:8036766feeb4… — Harbor tag 57e7f73, the exact digest the prd-apps controller is running (palworld-operator-controller-manager imageID). Prevents a future apply from downgrading the operator ~27 commits. Local (gitignored) terraform.tfvars updated to match.

The server-manager sidecar (dd00444c…, commit 57e9dcc) is set on the PalworldServer CR, which Terraform does not manage — unchanged.

Verification (no apply)

State backed up to ~/terraform-state-backups/rancher-deploy/20261004-203034/. Ran against a copy of state:
terraform plan -refresh=false -target=null_resource.deploy_palworld_operator_{prd,nprd,poc}_apps → Plan: 1 to add, 0 to change, 0 to destroy, with trigger palworld_operator_image = …@sha256:8036766f….

⚠️ Remaining drift (not fixed here — needs follow-up before any apply)

• null_resource.deploy_palworld_operator_prd_apps is not in state (operator was deployed out-of-band), so the plan shows a create; an apply re-runs the kubectl apply --server-side --force-conflicts provisioner.
• kubectl diff --server-side of the rendered templates/palworld-operator.yaml.tpl vs live: Deployment image identical (no change), but the template's CRD is older than live (drops modManager/serverManager schema etc., which the live palworld-server CR uses) and the ClusterRole lacks serviceaccounts, httproutes, and rbac roles/rolebindings permissions. Applying today would downgrade the CRD/RBAC. Template should be regenerated from operator commit 57e7f73 (or HEAD) before plan Upgrade CloudNativePG operator 1.28.0 → 1.30.0 #19.

---

Note

Low Risk
Config-only digest pin; no runtime or auth changes in this diff, though a full operator apply may still need template/CRD alignment separately.

Overview
Updates the palworld_operator_image digest pin from sha256:89efffac… to sha256:8036766feeb4… (Harbor tag 57e7f73) in variables.tf and terraform.tfvars.example, with comments noting the 2026-10-04 prd-apps imageID.

This aligns Terraform defaults with the controller already running in production so a future apply does not roll the operator back to an older build. No install flags, manifests, or deploy logic change—only the image reference and documentation in the example tfvars.

^{Reviewed by Cursor Bugbot for commit edf4792. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Approved. Cursor Bugbot completed successfully and there is no current approval-policy or review-state reason to withhold approval.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}