Docker tag and digest: which one Kubernetes runs

A Kubernetes image reference with a tag and a digest runs the digest and drops the tag. Tested on kind, and why both belong in one literal line.