From b36448c699da17d43e901190cf9639e9af1d2164 Mon Sep 17 00:00:00 2001 From: Toni Tauro Date: Mon, 19 Aug 2024 07:45:35 +0200 Subject: [PATCH] chore(ingressNginx): bump to 4.11.2 (#1299) Signed-off-by: Toni Tauro --- charts/infra-apps/Chart.yaml | 17 ++++------------- charts/infra-apps/README.md | 4 ++-- charts/infra-apps/values.yaml | 2 +- 3 files changed, 7 insertions(+), 16 deletions(-) diff --git a/charts/infra-apps/Chart.yaml b/charts/infra-apps/Chart.yaml index bf135ed6..586b677a 100644 --- a/charts/infra-apps/Chart.yaml +++ b/charts/infra-apps/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: infra-apps description: Argo CD app-of-apps config for infrastructure components type: application -version: 0.217.0 +version: 0.218.0 home: https://github.com/adfinis/helm-charts/tree/main/charts/infra-apps sources: - https://github.com/adfinis/helm-charts @@ -18,16 +18,7 @@ annotations: artifacthub.io/containsSecurityUpdates: "true" artifacthub.io/changes: | - kind: changed - description: "feat: Update Argo CD from 2.11.4 to 2.12.0" - links: - - name: "Argo CD 2.12.0 Release" - url: https://github.com/argoproj/argo-cd/releases/tag/v2.12.0 + description: "Update ingress-nginx to 4.11.2" - kind: changed - description: "chore: Update argo-cd Helm chart from 7.3.5 to 7.4.2" - links: - - name: "fix: Redis race condition due to optional REDIS_PASSWORD" - url: https://github.com/argoproj/argo-helm/pull/2839 - - name: "fix: Set TTL on redis-secret-init Job" - url: https://github.com/argoproj/argo-helm/pull/2861 - - name: "feat: Upgrade to Argo CD 2.12.0" - url: https://github.com/argoproj/argo-helm/pull/2820 + description: "Fixes CVE-2024-7646: Ingress-nginx Annotation Validation Bypass" + url: https://github.com/kubernetes/kubernetes/issues/126744 diff --git a/charts/infra-apps/README.md b/charts/infra-apps/README.md index f8ae793a..998213f9 100644 --- a/charts/infra-apps/README.md +++ b/charts/infra-apps/README.md @@ -1,6 +1,6 @@ # infra-apps -![Version: 0.217.0](https://img.shields.io/badge/Version-0.217.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) +![Version: 0.218.0](https://img.shields.io/badge/Version-0.218.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) Argo CD app-of-apps config for infrastructure components @@ -62,7 +62,7 @@ This chart is maintained by [Adfinis](https://adfinis.com/?pk_campaign=github&pk | ingressNginx.destination.namespace | string | `"infra-ingress"` | Namespace | | ingressNginx.enabled | bool | `false` | Configure nginx-ingress | | ingressNginx.repoURL | string | [repo](https://kubernetes.github.io/ingress-nginx) | Repo URL | -| ingressNginx.targetRevision | string | `"4.10.1"` | [ingress-nginx Helm chart](https://github.com/kubernetes/ingress-nginx/tree/main/charts/ingress-nginx) version | +| ingressNginx.targetRevision | string | `"4.11.2"` | [ingress-nginx Helm chart](https://github.com/kubernetes/ingress-nginx/tree/main/charts/ingress-nginx) version | | ingressNginx.values | object | [upstream values](https://github.com/kubernetes/ingress-nginx/blob/main/charts/ingress-nginx/values.yaml) | Helm values | | kubeEventExporter | object | DEPRECATED | [kubernetes-event-exporter](https://github.com/resmoio/kubernetes-event-exporter) is DEPRECATED, use "otel-collector" instead | | kubePrometheusStack | object | [example](./examples/prometheus.yaml) | [prometheus-operator](https://github.com/coreos/prometheus-operator) | diff --git a/charts/infra-apps/values.yaml b/charts/infra-apps/values.yaml index 1ec4d380..e00de57e 100644 --- a/charts/infra-apps/values.yaml +++ b/charts/infra-apps/values.yaml @@ -108,7 +108,7 @@ ingressNginx: # -- Chart chart: ingress-nginx # -- [ingress-nginx Helm chart](https://github.com/kubernetes/ingress-nginx/tree/main/charts/ingress-nginx) version - targetRevision: 4.10.1 + targetRevision: 4.11.2 # -- Helm values # @default -- [upstream values](https://github.com/kubernetes/ingress-nginx/blob/main/charts/ingress-nginx/values.yaml) values: {}