fix: curlimages CVE fix (#2389)

* fix: curlimages CVE fix * fix: curlimages CVE fix * fix: curlimages CVE fix * fix: curlimages CVE fix * build: Updated licenses.d2iq.yaml * fix: curlimages CVE fix * fix: curlimages CVE fix * fix: curlimages CVE fix --------- Co-authored-by: d2iq-mergebot <ci-mergebot@d2iq.com>
mesosphere · Jul 15, 2024 · 204921d · 204921d
1 parent 93325d7
commit 204921d
Show file tree

Hide file tree

Showing 13 changed files with 10 additions and 10 deletions.
diff --git a/licenses.d2iq.yaml b/licenses.d2iq.yaml
@@ -54,7 +54,7 @@ ignore:
   #     - url: https://github.com/curl/curl
   #       ref: curl-${image_tag//./_}
   #       license_path: COPYING
-  - docker.io/curlimages/curl:7.88.1
+  - docker.io/curlimages/curl:8.8.0
 
   # This is added as part of `kubetunnel` project, but we only use cURL from
   # this project.

diff --git a/services/gatekeeper/3.16.3/constraints.yaml → services/gatekeeper/3.16.4/constraints.yaml b/services/gatekeeper/3.16.3/constraints.yaml → services/gatekeeper/3.16.4/constraints.yaml
@@ -9,7 +9,7 @@ spec:
   wait: true
   interval: 6h
   retryInterval: 1m
-  path: ./services/gatekeeper/3.16.3/constraints
+  path: ./services/gatekeeper/3.16.4/constraints
   sourceRef:
     kind: GitRepository
     name: management

diff --git a/...3/constraints/enforce-helmrelease-sa.yaml → ...4/constraints/enforce-helmrelease-sa.yaml b/...3/constraints/enforce-helmrelease-sa.yaml → ...4/constraints/enforce-helmrelease-sa.yaml
diff --git a/...constraints/enforce-kustomization-sa.yaml → ...constraints/enforce-kustomization-sa.yaml b/...constraints/enforce-kustomization-sa.yaml → ...constraints/enforce-kustomization-sa.yaml
diff --git a/...atekeeper/3.16.3/constrainttemplates.yaml → ...atekeeper/3.16.4/constrainttemplates.yaml b/...atekeeper/3.16.3/constrainttemplates.yaml → ...atekeeper/3.16.4/constrainttemplates.yaml
@@ -9,7 +9,7 @@ spec:
   wait: true
   interval: 6h
   retryInterval: 1m
-  path: ./services/gatekeeper/3.16.3/constrainttemplates
+  path: ./services/gatekeeper/3.16.4/constrainttemplates
   sourceRef:
     kind: GitRepository
     name: management

diff --git a/...plates/enforce-sa-constrainttemplate.yaml → ...plates/enforce-sa-constrainttemplate.yaml b/...plates/enforce-sa-constrainttemplate.yaml → ...plates/enforce-sa-constrainttemplate.yaml
diff --git a/services/gatekeeper/3.16.3/defaults/cm.yaml → services/gatekeeper/3.16.4/defaults/cm.yaml b/services/gatekeeper/3.16.3/defaults/cm.yaml → services/gatekeeper/3.16.4/defaults/cm.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: gatekeeper-3.16.3-d2iq-defaults
+  name: gatekeeper-3.16.4-d2iq-defaults
   namespace: ${releaseNamespace}
 data:
   values.yaml: |
@@ -26,7 +26,7 @@ data:
         priorityClassName: system-cluster-critical
         image:
           repository: curlimages/curl
-          tag: 7.88.1
+          tag: 8.8.0
     controllerManager:
       tlsMinVersion: 1.2
     upgradeCRDs:

diff --git a/...keeper/3.16.3/defaults/kustomization.yaml → ...keeper/3.16.4/defaults/kustomization.yaml b/...keeper/3.16.3/defaults/kustomization.yaml → ...keeper/3.16.4/defaults/kustomization.yaml
diff --git a/...ices/gatekeeper/3.16.3/kustomization.yaml → ...ices/gatekeeper/3.16.4/kustomization.yaml b/...ices/gatekeeper/3.16.3/kustomization.yaml → ...ices/gatekeeper/3.16.4/kustomization.yaml
diff --git a/services/gatekeeper/3.16.3/release.yaml → services/gatekeeper/3.16.4/release.yaml b/services/gatekeeper/3.16.3/release.yaml → services/gatekeeper/3.16.4/release.yaml
@@ -10,7 +10,7 @@ spec:
   wait: true
   interval: 6h
   retryInterval: 1m
-  path: ./services/gatekeeper/3.16.3/release
+  path: ./services/gatekeeper/3.16.4/release
   sourceRef:
     kind: GitRepository
     name: management

diff --git a/...ekeeper/3.16.3/release/kustomization.yaml → ...ekeeper/3.16.4/release/kustomization.yaml b/...ekeeper/3.16.3/release/kustomization.yaml → ...ekeeper/3.16.4/release/kustomization.yaml
diff --git a/...es/gatekeeper/3.16.3/release/release.yaml → ...es/gatekeeper/3.16.4/release/release.yaml b/...es/gatekeeper/3.16.3/release/release.yaml → ...es/gatekeeper/3.16.4/release/release.yaml
@@ -25,7 +25,7 @@ spec:
   releaseName: kommander-gatekeeper
   valuesFrom:
     - kind: ConfigMap
-      name: gatekeeper-3.16.3-d2iq-defaults
+      name: gatekeeper-3.16.4-d2iq-defaults
     - kind: ConfigMap
       name: gatekeeper-overrides
       optional: true
@@ -88,7 +88,7 @@ spec:
   releaseName: gatekeeper-proxy-mutations
   valuesFrom:
     - kind: ConfigMap
-      name: gatekeeper-3.16.3-d2iq-defaults
+      name: gatekeeper-3.16.4-d2iq-defaults
     - kind: ConfigMap
       name: gatekeeper-overrides
       optional: true
diff --git a/services/gatekeeper/bootstrap/kustomization.yaml b/services/gatekeeper/bootstrap/kustomization.yaml
@@ -5,8 +5,8 @@ kind: Kustomization
 #
 # Also see chart/kommander-bootstrap/templates/flux-resources.yaml
 resources:
-  - ../3.16.3/
-  - ../3.16.3/defaults/
+  - ../3.16.4/
+  - ../3.16.4/defaults/
 patches:
   - patch: |
       - op: replace