fix(hello-openshift): use Red Hat httpd image for insecure-policy, remove stale sync-wave

butler54 · claude · butler54 · commit bb2c8dd38f3c · 2026-07-05T23:41:46.000Z
1. insecure-policy: switch from origin-hello-openshift to ubi9/httpd-24
   (same image as secure deployment, port 8080)
2. secure-configmap: remove unnecessary sync-wave annotation

Co-Authored-By: Claude Sonnet 4.5 &lt;noreply@anthropic.com&gt;
diff --git a/charts/coco-supported/hello-openshift/templates/insecure-policy-deployment.yaml b/charts/coco-supported/hello-openshift/templates/insecure-policy-deployment.yaml
@@ -19,9 +19,9 @@ spec:
       runtimeClassName: {{ include "hello-openshift.runtimeClassName" . }}
       containers:
         - name: hello-openshift
-          image: quay.io/openshift/origin-hello-openshift
+          image: registry.redhat.io/ubi9/httpd-24@sha256:68a91ff691092f455fea682330c499588747231c16516cd4f35aff821e6847f2
           ports:
-            - containerPort: 8888
+            - containerPort: 8080
           volumeMounts:
             - name: initdata
               mountPath: /opt/confidential-containers/initdata
diff --git a/charts/coco-supported/hello-openshift/templates/secure-configmap.yaml b/charts/coco-supported/hello-openshift/templates/secure-configmap.yaml
@@ -4,8 +4,6 @@ metadata:
   name: secure-web-content
   labels:
     app: secure
-  annotations:
-    argocd.argoproj.io/sync-wave: "5"
 data:
   index.html: |
     <!DOCTYPE html>
