Update debian-10 Docker images including fix for CVE-2020-1967 (#1687)

vmware-tanzu · Apr 22, 2020 · 5d678ae · 5d678ae
1 parent 14097bc
commit 5d678ae
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 11 deletions.
diff --git a/chart/kubeapps/Chart.yaml b/chart/kubeapps/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: kubeapps
-version: 3.5.2
+version: 3.5.3
 appVersion: DEVEL
 description: Kubeapps is a dashboard for your Kubernetes cluster that makes it easy to deploy and manage applications in your cluster using Helm
 icon: https://raw.githubusercontent.com/kubeapps/kubeapps/master/docs/img/logo.png

diff --git a/chart/kubeapps/requirements.lock b/chart/kubeapps/requirements.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: mongodb
   repository: https://charts.bitnami.com/bitnami
-  version: 7.10.10
+  version: 7.11.1
 - name: postgresql
   repository: https://charts.bitnami.com/bitnami
-  version: 8.7.3
-digest: sha256:7e97d57055d23341c105b6068792f35f31570b6fea8fd45c61d07440a57d3e1d
-generated: "2020-04-13T13:41:22.789787501+02:00"
+  version: 8.9.1
+digest: sha256:bec1eb6964d077d775be68be65a04a46a7244d426091b6179acf2df9076a76f2
+generated: "2020-04-22T10:21:48.840081009Z"
diff --git a/chart/kubeapps/requirements.yaml b/chart/kubeapps/requirements.yaml
@@ -1,6 +1,5 @@
 dependencies:
   - name: mongodb
-    # Versions above 7.8 (<7.10.2) contains an error 
     version: "> 7.10.2"
     repository: https://charts.bitnami.com/bitnami
     condition: mongodb.enabled

diff --git a/chart/kubeapps/values.yaml b/chart/kubeapps/values.yaml
@@ -105,7 +105,7 @@ frontend:
   image:
     registry: docker.io
     repository: bitnami/nginx
-    tag: 1.16.1-debian-10-r42
+    tag: 1.17.10-debian-10-r10
   ## Frontend service parameters
   ##
   service:
@@ -260,7 +260,7 @@ hooks:
   image:
     registry: docker.io
     repository: bitnami/kubectl
-    tag: 1.16.3-debian-10-r40
+    tag: 1.16.3-debian-10-r85
   ## Affinity for hooks' pods assignment
   ## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
   ##
@@ -590,7 +590,7 @@ securityContext:
 testImage:
   registry: docker.io
   repository: bitnami/nginx
-  tag: 1.16.1-debian-10-r42
+  tag: 1.17.10-debian-10-r10
 
 # Auth Proxy for OIDC support
 # ref: https://github.com/kubeapps/kubeapps/blob/master/docs/user/using-an-OIDC-provider.md
@@ -603,7 +603,7 @@ authProxy:
   image:
     registry: docker.io
     repository: bitnami/oauth2-proxy
-    tag: 5.0.0-debian-10-r19
+    tag: 5.1.0-debian-10-r24
   ## Mandatory parameters
   ##
   provider: ""

diff --git a/dashboard/Dockerfile b/dashboard/Dockerfile
@@ -7,5 +7,5 @@ RUN yarn install --frozen-lockfile
 COPY . /app
 RUN yarn run build
 
-FROM bitnami/nginx:1.16.1-debian-10-r42
+FROM bitnami/nginx:1.17.10-debian-10-r10
 COPY --from=build /app/build /app