upgrade hyperkube images (#470)

CVE-2018-1002105: proxy request handling in kube-apiserver can leave vulnerable TCP connections kubernetes/kubernetes#71411
giantswarm · Dec 3, 2018 · b447add · b447add
1 parent b2ded8f
commit b447add
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 13 deletions.
diff --git a/v_3_5_2/master_template.go b/v_3_5_2/master_template.go
@@ -781,7 +781,7 @@ write_files:
           serviceAccountName: kube-proxy
           containers:
             - name: kube-proxy
-              image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.4
+              image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.11
               command:
               - /hyperkube
               - proxy
@@ -1617,7 +1617,7 @@ write_files:
       priorityClassName: core-pods
       containers:
       - name: k8s-api-server
-        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.4
+        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.11
         env:
         - name: HOST_IP
           valueFrom:
@@ -1739,7 +1739,7 @@ write_files:
       priorityClassName: core-pods
       containers:
       - name: k8s-controller-manager
-        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.4
+        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.11
         command:
         - /hyperkube
         - controller-manager
@@ -1812,7 +1812,7 @@ write_files:
       priorityClassName: core-pods
       containers:
       - name: k8s-scheduler
-        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.4
+        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.11
         command:
         - /hyperkube
         - scheduler
@@ -2104,7 +2104,7 @@ coreos:
       RestartSec=0
       TimeoutStopSec=10
       EnvironmentFile=/etc/network-environment
-      Environment="IMAGE={{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.4"
+      Environment="IMAGE={{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.11"
       Environment="NAME=%p.service"
       Environment="NETWORK_CONFIG_CONTAINER="
       ExecStartPre=/usr/bin/docker pull $IMAGE

diff --git a/v_3_5_2/worker_template.go b/v_3_5_2/worker_template.go
@@ -257,7 +257,7 @@ coreos:
       RestartSec=0
       TimeoutStopSec=10
       EnvironmentFile=/etc/network-environment
-      Environment="IMAGE={{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.4"
+      Environment="IMAGE={{ .RegistryDomain }}/giantswarm/hyperkube:v1.10.11"
       Environment="NAME=%p.service"
       Environment="NETWORK_CONFIG_CONTAINER="
       ExecStartPre=/usr/bin/docker pull $IMAGE

diff --git a/v_3_6_3/master_template.go b/v_3_6_3/master_template.go
@@ -938,7 +938,7 @@ write_files:
           serviceAccountName: kube-proxy
           containers:
             - name: kube-proxy
-              image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.1-cec4fb8023db783fbf26fb056bf6c76abfcd96cf-giantswarm
+              image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.5
               command:
               - /hyperkube
               - proxy
@@ -1716,7 +1716,7 @@ write_files:
       priorityClassName: system-node-critical
       containers:
       - name: k8s-api-server
-        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.1-cec4fb8023db783fbf26fb056bf6c76abfcd96cf-giantswarm
+        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.5
         env:
         - name: HOST_IP
           valueFrom:
@@ -1839,7 +1839,7 @@ write_files:
       priorityClassName: system-node-critical
       containers:
       - name: k8s-controller-manager
-        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.1-cec4fb8023db783fbf26fb056bf6c76abfcd96cf-giantswarm
+        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.5
         command:
         - /hyperkube
         - controller-manager
@@ -1912,7 +1912,7 @@ write_files:
       priorityClassName: system-node-critical
       containers:
       - name: k8s-scheduler
-        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.1-cec4fb8023db783fbf26fb056bf6c76abfcd96cf-giantswarm
+        image: {{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.5
         command:
         - /hyperkube
         - scheduler
@@ -2216,7 +2216,7 @@ coreos:
       RestartSec=0
       TimeoutStopSec=10
       EnvironmentFile=/etc/network-environment
-      Environment="IMAGE={{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.1-cec4fb8023db783fbf26fb056bf6c76abfcd96cf-giantswarm"
+      Environment="IMAGE={{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.5
       Environment="NAME=%p.service"
       Environment="NETWORK_CONFIG_CONTAINER="
       ExecStartPre=/usr/bin/docker pull $IMAGE

diff --git a/v_3_6_3/worker_template.go b/v_3_6_3/worker_template.go
@@ -311,7 +311,7 @@ coreos:
       RestartSec=0
       TimeoutStopSec=10
       EnvironmentFile=/etc/network-environment
-      Environment="IMAGE={{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.1-cec4fb8023db783fbf26fb056bf6c76abfcd96cf-giantswarm"
+      Environment="IMAGE={{ .RegistryDomain }}/giantswarm/hyperkube:v1.11.5
       Environment="NAME=%p.service"
       Environment="NETWORK_CONFIG_CONTAINER="
       ExecStartPre=/usr/bin/docker pull $IMAGE

diff --git a/v_3_7_3/cloudconfig.go b/v_3_7_3/cloudconfig.go
@@ -13,7 +13,7 @@ import (
 
 const (
 	defaultRegistryDomain = "quay.io"
-	kubernetesImage       = "giantswarm/hyperkube:v1.12.2"
+	kubernetesImage       = "giantswarm/hyperkube:v1.12.3"
 	etcdImage             = "giantswarm/etcd:v3.3.9"
 )