Use chainguard nginx image

Signed-off-by: Marco Franssen <[email protected]>

charts/spire/README.md

@@ -87,9 +87,9 @@ Kubernetes: `>=1.21.0-0`
 | oidc.image.version | string | `""` |  |
 | oidc.insecureScheme.enabled | bool | `false` |  |
 | oidc.insecureScheme.nginx.image.pullPolicy | string | `"IfNotPresent"` |  |
-| oidc.insecureScheme.nginx.image.registry | string | `"docker.io"` |  |
-| oidc.insecureScheme.nginx.image.repository | string | `"nginx"` |  |
-| oidc.insecureScheme.nginx.image.version | string | `"alpine"` |  |
+| oidc.insecureScheme.nginx.image.registry | string | `"cgr.dev"` |  |
+| oidc.insecureScheme.nginx.image.repository | string | `"chainguard/nginx"` |  |
+| oidc.insecureScheme.nginx.image.version | float | `1.23` |  |
 | oidc.jwtIssuer | string | `"oidc-discovery.example.org"` |  |
 | oidc.logLevel | string | `"INFO"` |  |
 | oidc.nodeSelector."kubernetes.io/arch" | string | `"amd64"` |  |

charts/spire/values.yaml

@@ -175,10 +175,10 @@ oidc:
 
     nginx:
       image:
-        registry: docker.io
-        repository: nginx
+        registry: cgr.dev
+        repository: chainguard/nginx
         pullPolicy: IfNotPresent
-        version: alpine
+        version: 1.23
 
   acme:
     tosAccepted: false