update the etcd base image to v1.4.2

The current base v1.3.0 has many CVEs[1] which are addressed in latest
versions of the bullseye

[1] ex:
CVE-2022-2509
CVE-2021-46828

Signed-off-by: Humble Chirammal <humble.devassy@gmail.com>
This commit is contained in:
Humble Chirammal 2023-04-27 16:47:54 +05:30
parent 78b56ce16d
commit 6c8be35fa8
2 changed files with 6 additions and 6 deletions

View File

@ -123,7 +123,7 @@ dependencies:
# Base images
- name: "registry.k8s.io/debian-base: dependents"
version: bullseye-v1.3.0
version: bullseye-v1.4.2
refPaths:
- path: cluster/images/etcd/Makefile
match: BASEIMAGE\?\=registry\.k8s\.io\/build-image\/debian-base:[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)

View File

@ -92,19 +92,19 @@ DOCKERFILE.windows = Dockerfile.windows
DOCKERFILE := ${DOCKERFILE.${OS}}
ifeq ($(ARCH),amd64)
BASEIMAGE?=registry.k8s.io/build-image/debian-base:bullseye-v1.3.0
BASEIMAGE?=registry.k8s.io/build-image/debian-base:bullseye-v1.4.2
endif
ifeq ($(ARCH),arm)
BASEIMAGE?=registry.k8s.io/build-image/debian-base-arm:bullseye-v1.3.0
BASEIMAGE?=registry.k8s.io/build-image/debian-base-arm:bullseye-v1.4.2
endif
ifeq ($(ARCH),arm64)
BASEIMAGE?=registry.k8s.io/build-image/debian-base-arm64:bullseye-v1.3.0
BASEIMAGE?=registry.k8s.io/build-image/debian-base-arm64:bullseye-v1.4.2
endif
ifeq ($(ARCH),ppc64le)
BASEIMAGE?=registry.k8s.io/build-image/debian-base-ppc64le:bullseye-v1.3.0
BASEIMAGE?=registry.k8s.io/build-image/debian-base-ppc64le:bullseye-v1.4.2
endif
ifeq ($(ARCH),s390x)
BASEIMAGE?=registry.k8s.io/build-image/debian-base-s390x:bullseye-v1.3.0
BASEIMAGE?=registry.k8s.io/build-image/debian-base-s390x:bullseye-v1.4.2
endif
BASE.windows = mcr.microsoft.com/windows/nanoserver