fix: bump karma container image to address critical CVEs (2.7) (#1773)

fix: bump karma container image to address critical CVEs (#1770) * fix: bump karma container image to address critical CVEs * chore: update licenses for karma * fix: use mesosphere repo source for karma image * fix: use karma chart version 2.0.2
mesosphere · Dec 19, 2023 · 591933e · 591933e
1 parent 2a6daa5
commit 591933e
Show file tree

Hide file tree

Showing 5 changed files with 6 additions and 6 deletions.
diff --git a/licenses.d2iq.yaml b/licenses.d2iq.yaml
@@ -218,10 +218,10 @@ resources:
     sources:
       - ref: ${image_tag}
         url: https://github.com/mesosphere/dkp-insights
-  - container_image: docker.io/mesosphere/karma:v0.88-d2iq-server-name
+  - container_image: docker.io/mesosphere/karma:v0.88-d2iq-server-name.1
     sources:
       - license_path: LICENSE
-        ref: ${image_tag%-d2iq-server-name}
+        ref: ${image_tag%-d2iq-server-name.1}
         url: https://github.com/prymitive/karma
   - container_image: docker.io/mesosphere/kommander2-appmanagement-config-api:${kommander}
     sources:

diff --git a/services/karma/2.0.2/defaults/cm.yaml → services/karma/2.0.3/defaults/cm.yaml b/services/karma/2.0.2/defaults/cm.yaml → services/karma/2.0.3/defaults/cm.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: karma-2.0.2-d2iq-defaults
+  name: karma-2.0.3-d2iq-defaults
   namespace: ${releaseNamespace}
 data:
   values.yaml: |
@@ -11,7 +11,7 @@ data:
       # TODO(https://jira.d2iq.com/browse/D2IQ-78091)
       # switch back to upstream
       repository: mesosphere/karma
-      tag: v0.88-d2iq-server-name
+      tag: v0.88-d2iq-server-name.1
 
     service:
       labels:

diff --git a/...s/karma/2.0.2/defaults/kustomization.yaml → ...s/karma/2.0.3/defaults/kustomization.yaml b/...s/karma/2.0.2/defaults/kustomization.yaml → ...s/karma/2.0.3/defaults/kustomization.yaml
diff --git a/services/karma/2.0.2/karma.yaml → services/karma/2.0.3/karma.yaml b/services/karma/2.0.2/karma.yaml → services/karma/2.0.3/karma.yaml
@@ -27,7 +27,7 @@ spec:
   releaseName: karma
   valuesFrom:
     - kind: ConfigMap
-      name: karma-2.0.2-d2iq-defaults
+      name: karma-2.0.3-d2iq-defaults
   targetNamespace: ${releaseNamespace}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -83,7 +83,7 @@ data:
   dashboardLink: "/dkp/kommander/monitoring/karma"
   docsLink: "https://github.com/prymitive/karma"
   # We override karma image:
-  # https://github.com/mesosphere/kommander-applications/blob/main/services/karma/2.0.2/defaults/cm.yaml#L14
+  # https://github.com/mesosphere/kommander-applications/blob/main/services/karma/2.0.3/defaults/cm.yaml#L14
   version: "0.88"
 ---
 apiVersion: cert-manager.io/v1

diff --git a/services/karma/2.0.2/kustomization.yaml → services/karma/2.0.3/kustomization.yaml b/services/karma/2.0.2/kustomization.yaml → services/karma/2.0.3/kustomization.yaml