Update ap-vendor-packages (#2081)

* Fix CVEs in vendor pacakages

* Update fluentd version from 1.16.2-2 to 1.16.3

* Update kibana version 8.9.2 to 8.11.4

* Update nginx version from 1.9.4-1 to 1.9.5

* Update to fix ap-vendor packages

* fix cve in prometheus

* Update values.yaml

* Update ap-openresty 1.25.3

* Update registry version 3.18.5

* Updating ap-vendor packages

* Updating ap-vendor packages

* Update ap-init- 3.18.4-2 to 3.18.5

* Update kubestate version from 2.8.2 -> 2.10.1

* Update nats-exporter  0.13.0 -> 0.13.0-1

* Updating blackbox-exporter from 0.24.0-4 -> 0.24.0-5

* Update prometheus-postgres-exporter  0.15.0-2  -> 0.15.0-3

* Update ap-vendor packages

* Update config.yml

* fix nats image

* revert registry image version

---------

Co-authored-by: pgvishnuram <vishnu@astronomer.io>

.circleci/config.yml

@@ -360,34 +360,34 @@ workflows:
                 - quay.io/astronomer/ap-alertmanager:0.26.0
                 - quay.io/astronomer/ap-astro-ui:0.32.9
                 - quay.io/astronomer/ap-auth-sidecar:1.25.2-3
-                - quay.io/astronomer/ap-awsesproxy:1.5.0-4
-                - quay.io/astronomer/ap-base:3.18.4-2
-                - quay.io/astronomer/ap-blackbox-exporter:0.24.0-4
+                - quay.io/astronomer/ap-awsesproxy:1.5.0-6
+                - quay.io/astronomer/ap-base:3.18.5
+                - quay.io/astronomer/ap-blackbox-exporter:0.24.0-5
                 - quay.io/astronomer/ap-cli-install:0.26.21
                 - quay.io/astronomer/ap-commander:0.32.10
                 - quay.io/astronomer/ap-configmap-reloader:0.12.0
-                - quay.io/astronomer/ap-curator:8.0.8-5
+                - quay.io/astronomer/ap-curator:8.0.8-6
                 - quay.io/astronomer/ap-db-bootstrapper:0.31.9
                 - quay.io/astronomer/ap-default-backend:0.28.22
-                - quay.io/astronomer/ap-elasticsearch-exporter:1.6.0
-                - quay.io/astronomer/ap-elasticsearch:8.9.2
-                - quay.io/astronomer/ap-fluentd:1.16.2-2
+                - quay.io/astronomer/ap-elasticsearch-exporter:1.7.0
+                - quay.io/astronomer/ap-elasticsearch:8.11.4
+                - quay.io/astronomer/ap-fluentd:1.16.3
                 - quay.io/astronomer/ap-grafana:10.2.2
                 - quay.io/astronomer/ap-houston-api:0.32.24
-                - quay.io/astronomer/ap-init:3.18.4-3
-                - quay.io/astronomer/ap-kibana:8.9.2
-                - quay.io/astronomer/ap-kube-state:2.8.2
-                - quay.io/astronomer/ap-nats-exporter:0.12.0-2
-                - quay.io/astronomer/ap-nats-server:2.10.2-2
-                - quay.io/astronomer/ap-nats-streaming:0.25.5-1
-                - quay.io/astronomer/ap-nginx-es:1.25.2-3
-                - quay.io/astronomer/ap-nginx:1.9.4-1
+                - quay.io/astronomer/ap-init:3.18.5
+                - quay.io/astronomer/ap-kibana:8.11.4
+                - quay.io/astronomer/ap-kube-state:2.10.1
+                - quay.io/astronomer/ap-nats-exporter:0.13.0-1
+                - quay.io/astronomer/ap-nats-server:2.10.9-1
+                - quay.io/astronomer/ap-nats-streaming:0.25.6
+                - quay.io/astronomer/ap-nginx-es:1.25.3
+                - quay.io/astronomer/ap-nginx:1.9.5
                 - quay.io/astronomer/ap-node-exporter:1.7.0
-                - quay.io/astronomer/ap-openresty:1.21.4-13
+                - quay.io/astronomer/ap-openresty:1.25.3
                 - quay.io/astronomer/ap-pgbouncer-krb:1.17.0-9
-                - quay.io/astronomer/ap-postgres-exporter:0.15.0-2
+                - quay.io/astronomer/ap-postgres-exporter:0.15.0-3
                 - quay.io/astronomer/ap-postgresql:15.4.0-1
-                - quay.io/astronomer/ap-prometheus:2.45.1
+                - quay.io/astronomer/ap-prometheus:2.45.2
                 - quay.io/astronomer/ap-registry:3.16.5-1
                 - quay.io/astronomer/ap-vector:0.32.2-1
           context:
@@ -399,34 +399,34 @@ workflows:
                 - quay.io/astronomer/ap-alertmanager:0.26.0
                 - quay.io/astronomer/ap-astro-ui:0.32.9
                 - quay.io/astronomer/ap-auth-sidecar:1.25.2-3
-                - quay.io/astronomer/ap-awsesproxy:1.5.0-4
-                - quay.io/astronomer/ap-base:3.18.4-2
-                - quay.io/astronomer/ap-blackbox-exporter:0.24.0-4
+                - quay.io/astronomer/ap-awsesproxy:1.5.0-6
+                - quay.io/astronomer/ap-base:3.18.5
+                - quay.io/astronomer/ap-blackbox-exporter:0.24.0-5
                 - quay.io/astronomer/ap-cli-install:0.26.21
                 - quay.io/astronomer/ap-commander:0.32.10
                 - quay.io/astronomer/ap-configmap-reloader:0.12.0
-                - quay.io/astronomer/ap-curator:8.0.8-5
+                - quay.io/astronomer/ap-curator:8.0.8-6
                 - quay.io/astronomer/ap-db-bootstrapper:0.31.9
                 - quay.io/astronomer/ap-default-backend:0.28.22
-                - quay.io/astronomer/ap-elasticsearch-exporter:1.6.0
-                - quay.io/astronomer/ap-elasticsearch:8.9.2
-                - quay.io/astronomer/ap-fluentd:1.16.2-2
+                - quay.io/astronomer/ap-elasticsearch-exporter:1.7.0
+                - quay.io/astronomer/ap-elasticsearch:8.11.4
+                - quay.io/astronomer/ap-fluentd:1.16.3
                 - quay.io/astronomer/ap-grafana:10.2.2
                 - quay.io/astronomer/ap-houston-api:0.32.24
-                - quay.io/astronomer/ap-init:3.18.4-3
-                - quay.io/astronomer/ap-kibana:8.9.2
-                - quay.io/astronomer/ap-kube-state:2.8.2
-                - quay.io/astronomer/ap-nats-exporter:0.12.0-2
-                - quay.io/astronomer/ap-nats-server:2.10.2-2
-                - quay.io/astronomer/ap-nats-streaming:0.25.5-1
-                - quay.io/astronomer/ap-nginx-es:1.25.2-3
-                - quay.io/astronomer/ap-nginx:1.9.4-1
+                - quay.io/astronomer/ap-init:3.18.5
+                - quay.io/astronomer/ap-kibana:8.11.4
+                - quay.io/astronomer/ap-kube-state:2.10.1
+                - quay.io/astronomer/ap-nats-exporter:0.13.0-1
+                - quay.io/astronomer/ap-nats-server:2.10.9-1
+                - quay.io/astronomer/ap-nats-streaming:0.25.6
+                - quay.io/astronomer/ap-nginx-es:1.25.3
+                - quay.io/astronomer/ap-nginx:1.9.5
                 - quay.io/astronomer/ap-node-exporter:1.7.0
-                - quay.io/astronomer/ap-openresty:1.21.4-13
+                - quay.io/astronomer/ap-openresty:1.25.3
                 - quay.io/astronomer/ap-pgbouncer-krb:1.17.0-9
-                - quay.io/astronomer/ap-postgres-exporter:0.15.0-2
+                - quay.io/astronomer/ap-postgres-exporter:0.15.0-3
                 - quay.io/astronomer/ap-postgresql:15.4.0-1
-                - quay.io/astronomer/ap-prometheus:2.45.1
+                - quay.io/astronomer/ap-prometheus:2.45.2
                 - quay.io/astronomer/ap-registry:3.16.5-1
                 - quay.io/astronomer/ap-vector:0.32.2-1
           context:

charts/elasticsearch/values.yaml

@@ -10,23 +10,23 @@ tolerations: []
 images:
   es:
     repository: quay.io/astronomer/ap-elasticsearch
-    tag: 8.9.2
+    tag: 8.11.4
     pullPolicy: IfNotPresent
   init:
     repository: quay.io/astronomer/ap-base # needs root permissions for sysctl changes
-    tag: 3.18.4-2
+    tag: 3.18.5
     pullPolicy: IfNotPresent
   curator:
     repository: quay.io/astronomer/ap-curator
-    tag: 8.0.8-5
+    tag: 8.0.8-6
     pullPolicy: IfNotPresent
   exporter:
     repository: quay.io/astronomer/ap-elasticsearch-exporter
-    tag: 1.6.0
+    tag: 1.7.0
     pullPolicy: IfNotPresent
   nginx:
     repository: quay.io/astronomer/ap-nginx-es
-    tag: 1.25.2-3
+    tag: 1.25.3
     pullPolicy: IfNotPresent
 
 common:

charts/external-es-proxy/values.yaml

@@ -7,11 +7,11 @@ replicaCount: 1
 images:
   esproxy:
     repository: quay.io/astronomer/ap-openresty
-    tag: 1.21.4-13
+    tag: 1.25.3
     pullPolicy: IfNotPresent
   awsproxy:
     repository: quay.io/astronomer/ap-awsesproxy
-    tag: 1.5.0-4
+    tag: 1.5.0-6
     pullPolicy: IfNotPresent
 
 imagePullSecrets: []

charts/fluentd/values.yaml

@@ -9,7 +9,7 @@ container:
 images:
   fluentd:
     repository: quay.io/astronomer/ap-fluentd
-    tag: 1.16.2-2
+    tag: 1.16.3
     pullPolicy: IfNotPresent
 
 elasticsearch:

charts/kibana/values.yaml

@@ -5,11 +5,11 @@ tolerations: []
 images:
   kibana:
     repository: quay.io/astronomer/ap-kibana
-    tag: 8.9.2
+    tag: 8.11.4
     pullPolicy: IfNotPresent
   init:
     repository: quay.io/astronomer/ap-init
-    tag: 3.18.4-3
+    tag: 3.18.5
     pullPolicy: IfNotPresent
 
 securityContext:

charts/kube-state/values.yaml

@@ -9,7 +9,7 @@ tolerations: []
 images:
   kubeState:
     repository: quay.io/astronomer/ap-kube-state
-    tag: 2.8.2
+    tag: 2.10.1
     pullPolicy: IfNotPresent
 
 securityContext:

charts/nats/values.yaml

@@ -6,11 +6,11 @@
 images:
   nats:
     repository: quay.io/astronomer/ap-nats-server
-    tag: 2.10.2-2
+    tag: 2.10.9-1
     pullPolicy: IfNotPresent
   exporter:
     repository: quay.io/astronomer/ap-nats-exporter
-    tag: 0.12.0-2
+    tag: 0.13.0-1
     pullPolicy: IfNotPresent
 
 

charts/nginx/values.yaml

@@ -9,7 +9,7 @@ tolerations: []
 images:
   nginx:
     repository: quay.io/astronomer/ap-nginx
-    tag: 1.9.4-1
+    tag: 1.9.5
     pullPolicy: IfNotPresent
   defaultBackend:
     repository: quay.io/astronomer/ap-default-backend

charts/prometheus-blackbox-exporter/values.yaml

@@ -14,7 +14,7 @@ strategy:
 
 image:
   repository: quay.io/astronomer/ap-blackbox-exporter
-  tag: 0.24.0-4
+  tag: 0.24.0-5
   pullPolicy: IfNotPresent
 
   ## Optionally specify an array of imagePullSecrets.

charts/prometheus-postgres-exporter/values.yaml

@@ -9,7 +9,7 @@ replicaCount: 2
 
 image:
   repository: quay.io/astronomer/ap-postgres-exporter
-  tag: 0.15.0-2
+  tag: 0.15.0-3
   pullPolicy: IfNotPresent
 
 

charts/prometheus/values.yaml

@@ -18,7 +18,7 @@ replicas: 1
 images:
   prometheus:
     repository: quay.io/astronomer/ap-prometheus
-    tag: 2.45.1
+    tag: 2.45.2
     pullPolicy: IfNotPresent
   configReloader:
     repository: quay.io/astronomer/ap-configmap-reloader

charts/stan/values.yaml

@@ -6,15 +6,15 @@
 images:
   init:
     repository: quay.io/astronomer/ap-init
-    tag: 3.18.4-3
+    tag: 3.18.5
     pullPolicy: IfNotPresent
   stan:
     repository: quay.io/astronomer/ap-nats-streaming
-    tag: 0.25.5-1
+    tag: 0.25.6
     pullPolicy: IfNotPresent
   exporter:
     repository: quay.io/astronomer/ap-nats-exporter
-    tag: 0.12.0-2
+    tag: 0.13.0-1
     pullPolicy: IfNotPresent
 
 

values.yaml

@@ -21,7 +21,7 @@ global:
     hostDirectory: /etc/docker/certs.d
     certCopier:
       repository: quay.io/astronomer/ap-base
-      tag: 3.18.4-2
+      tag: 3.18.5
       pullPolicy: IfNotPresent
   # Global flag to enable to user to enable/disable Astronomer platform
   # level Network Policy