panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Replaced wait-for-it image to resolve security issues

Browse Source 
This image was also outdated (no recent releases) and contains whole bunch of vulnerabilities

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>
This commit is contained in:
Marco Franssen
2023-02-18 13:04:07 +01:00
committed by Marco Franssen
parent a3f1901a6b
commit 109be1a3cc
3 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/README.md
+3 -3
View File
@@ -128,9 +128,9 @@ Kubernetes: `>=1.21.0-0`
| spire.clusterName | string | `"example-cluster"` | | | spire.clusterName | string | `"example-cluster"` | |
| spire.trustDomain | string | `"example.org"` | | | spire.trustDomain | string | `"example.org"` | |
| waitForIt.image.pullPolicy | string | `"IfNotPresent"` | | | waitForIt.image.pullPolicy | string | `"IfNotPresent"` | |
| waitForIt.image.registry | string | `"gcr.io"` | | | waitForIt.image.registry | string | `"cgr.dev"` | |
| waitForIt.image.repository | string | `"spiffe-io/wait-for-it"` | | | waitForIt.image.repository | string | `"chainguard/wait-for-it"` | |
| waitForIt.image.version | string | `""` | | | waitForIt.image.version | string | `"latest-20221215"` | |
| waitForIt.resources | object | `{}` | | | waitForIt.resources | object | `{}` | |
| workloadRegistrar.image.pullPolicy | string | `"IfNotPresent"` | | | workloadRegistrar.image.pullPolicy | string | `"IfNotPresent"` | |
| workloadRegistrar.image.registry | string | `"gcr.io"` | | | workloadRegistrar.image.registry | string | `"gcr.io"` | |
charts/spire/templates/agent-daemonset.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
# from https://github.com/lqhl/wait-for-it # from https://github.com/lqhl/wait-for-it
image: {{ template "spire.image" .Values.waitForIt }} image: {{ template "spire.image" .Values.waitForIt }}
imagePullPolicy: {{ .Values.waitForIt.image.pullPolicy }} imagePullPolicy: {{ .Values.waitForIt.image.pullPolicy }}
args: ["-t", "30", "{{ include "spire.fullname" . }}-server:8081"] args: ["-t", "30", "-h", "{{ include "spire.fullname" . }}-server", "-p", "8081"]
resources: resources:
{{- toYaml .Values.waitForIt.resources | nindent 12 }} {{- toYaml .Values.waitForIt.resources | nindent 12 }}
{{- with .Values.agent.nodeSelector }} {{- with .Values.agent.nodeSelector }}
charts/spire/values.yaml
+3 -3
View File
@@ -3,10 +3,10 @@ fullnameOverride: ""
waitForIt: waitForIt:
image: image:
registry: gcr.io registry: cgr.dev
repository: spiffe-io/wait-for-it repository: chainguard/wait-for-it
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
version: "" version: latest-20221215
resources: {} resources: {}
workloadRegistrar: workloadRegistrar: