fix(redis): pin the Redis engine at 6.2.6 in both RedisFailover charts

The freshworks-oss operator's compiled-in default image moved from
redis:6.2.6-alpine to 7.2.4; Harbor pinned no image at all and apps/redis left
its sentinels unpinned, so an upgrade would move them silently. 7.2.4 rewrites
dump.rdb into a format 6.2.6 refuses to load, so a platform rollback would leave
Harbor's Redis crash-looping on its own data. Pin redis+sentinel (Harbor) and
the sentinel (apps/redis) at the version they run today; bump deliberately and
separately.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Andrei Kvapil <andrei.kvapil@aenix.io>

packages/apps/redis/templates/redisfailover.yaml

@@ -29,6 +29,11 @@ metadata:
     redis-failover.freshworks.com/operator-group: cozystack
 spec:
   sentinel:
+    # Pin the sentinel engine. The freshworks-oss operator's compiled-in default
+    # moved 6.2.6→7.2.4; the data pods run a deliberate versionMap image below,
+    # but the sentinels were on the old 6.2.6 default and must not silently jump
+    # on upgrade. Bump as a deliberate, separate change.
+    image: redis:6.2.6-alpine
     replicas: 3
     resources: {{- include "cozy-lib.resources.defaultingSanitize" (list .Values.resourcesPreset .Values.resources $) | nindent 6 }}
   redis:

packages/system/harbor/templates/redis.yaml

@@ -20,6 +20,12 @@ metadata:
     redis-failover.freshworks.com/operator-group: cozystack
 spec:
   sentinel:
+    # Pin the engine. The freshworks-oss operator's compiled-in default moved
+    # 6.2.6→7.2.4 between forks, and an unpinned image would silently jump on
+    # upgrade — with no rollback path, since 7.x rewrites the on-disk format
+    # 6.2.6 refuses to load. Keep Harbor's Redis on the version it runs today;
+    # bump it as a deliberate, separate change.
+    image: redis:6.2.6-alpine
     replicas: 3
     resources:
       limits:
@@ -29,6 +35,9 @@ spec:
         cpu: 250m
         memory: 128Mi
   redis:
+    # Pin the engine (see the sentinel note above): an upgrade must not rewrite
+    # Harbor's dump.rdb into a 7.x format a platform rollback can no longer load.
+    image: redis:6.2.6-alpine
     replicas: {{ .Values.redis.replicas }}
     resources:
       limits: