Skip to content

Commit

Permalink
Update vector to 0.34.0 and switch to distroless-static images (#56)
Browse files Browse the repository at this point in the history
Co-authored-by: Raymond Tordoff <rtordoff@palantir.com>
  • Loading branch information
rtordoff and Raymond Tordoff committed Jun 18, 2024
1 parent 4cfd1a8 commit d931d3d
Show file tree
Hide file tree
Showing 3 changed files with 9 additions and 5 deletions.
6 changes: 3 additions & 3 deletions charts/beta/vector/Chart.lock
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
dependencies:
- name: vector
repository: https://helm.vector.dev
version: 0.33.0
digest: sha256:f36fdb20f580068c3ba93e4527229d78965df9f24f5810ded52e8971869a7ac2
generated: "2024-06-06T17:10:54.234636-06:00"
version: 0.34.0
digest: sha256:4349d26f5357ba666ed03f2e8450fd334d5d5c3ad76195cf82d506d7ac572e1c
generated: "2024-06-18T11:07:27.972542-06:00"
4 changes: 2 additions & 2 deletions charts/beta/vector/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,13 +12,13 @@ description: A Vector chart that can be used with Palantir FedStart
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
type: application

version: 0.33.0001
version: 0.34.0001

# Be aware that using helm dependencies has undesirable side affects, where you cannot remove
# subchart config keys by setting them to null. If this type of configuration override is necessary,
# comment out the dependencies block below. See the following github issue for more details:
# https://github.com/helm/helm/issues/9027
dependencies:
- name: vector
version: "0.33.0"
version: "0.34.0"
repository: https://helm.vector.dev
4 changes: 4 additions & 0 deletions charts/beta/vector/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -122,6 +122,10 @@ vector:
# cpu: 200m
# memory: 256Mi

# Use distroless-static images instead of distroless-libc to reduce CVE footprint
image:
base: distroless-static

# podSecurityContext -- Ensures the pod is not run as root.
podSecurityContext:
runAsNonRoot: true
Expand Down

0 comments on commit d931d3d

Please sign in to comment.