From 8b30042967e145f37f9a216905c6653695919e12 Mon Sep 17 00:00:00 2001
From: Kyma Bot <kyma.bot@sap.com>
Date: Fri, 13 Dec 2024 20:51:20 +0100
Subject: [PATCH] Bumping test-infra and testimages (#12459)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
No eu.gcr.io/kyma-project/test-infra/ changes.
europe-docker.pkg.dev/kyma-project/prod/ changes: https://github.com/kyma-project/test-infra/compare/be6068ba...9b2c637a (2024‑12‑12 → 2024‑12‑13)
---
.github/actions/image-builder/action.yml | 2 +-
.github/workflows/autobump-docs-index-md.yml | 2 +-
.github/workflows/autobump-security-config.yaml | 2 +-
.github/workflows/image-autobumper.yml | 2 +-
.github/workflows/image-syncer.yml | 2 +-
.github/workflows/pull-validate-kaniko-build-config.yml | 2 +-
.../environments/dev/secrets-rotator/terraform.tfvars | 4 ++--
configs/terraform/environments/prod/terraform.tfvars | 4 ++--
configs/terraform/modules/cors-proxy/cors-proxy.tf | 2 +-
.../github-webhook-gateway/github-webhook-gateway.tf | 2 +-
.../modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf | 2 +-
.../secrets-leaks-log-scanner/github-issue-creator.tf | 2 +-
.../secrets-leaks-log-scanner/github-issue-finder.tf | 2 +-
.../secrets-leaks-log-scanner/secrets-leak-log-scanner.tf | 2 +-
.../security-dashboard-token/security-dashboard-token.tf | 2 +-
.../components/automated-approver_external-plugin.yaml | 2 +-
.../external-secrets/external_secrets_checker_prow.yaml | 6 +++---
prow/jobs/kyma-project/test-infra/kyma-bot.yaml | 2 +-
18 files changed, 22 insertions(+), 22 deletions(-)
diff --git a/.github/actions/image-builder/action.yml b/.github/actions/image-builder/action.yml
index 6a87f0937ed5..d1ce4c5c7660 100644
--- a/.github/actions/image-builder/action.yml
+++ b/.github/actions/image-builder/action.yml
@@ -82,7 +82,7 @@ runs:
id: prepare-tags
shell: bash
- - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20241212-be6068ba
+ - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20241213-9b2c637a
id: build
with:
args: --name=${{ inputs.image-name }} --context=${{ inputs.context }} --dockerfile=${{ inputs.dockerfile }} --azure-access-token=${{ inputs.ado-token }} --oidc-token=${{ inputs.oidc-token }} ${{ steps.prepare-build-args.outputs.build-args }} ${{ steps.prepare-tags.outputs.tags }} --export-tags=${{ inputs.export-tags }} --config=${{ inputs.config }} --env-file=${{ inputs.env-file }} --build-in-ado=true --use-go-internal-sap-modules=${{ inputs.use-go-internal-sap-modules }}
\ No newline at end of file
diff --git a/.github/workflows/autobump-docs-index-md.yml b/.github/workflows/autobump-docs-index-md.yml
index 0e2dd582e1a5..edd08d9a598b 100644
--- a/.github/workflows/autobump-docs-index-md.yml
+++ b/.github/workflows/autobump-docs-index-md.yml
@@ -59,6 +59,6 @@ jobs:
--workdir /github/test-infra \
--privileged \
--cap-drop ALL \
- europe-docker.pkg.dev/kyma-project/prod/markdown-index:v20241212-be6068ba \
+ europe-docker.pkg.dev/kyma-project/prod/markdown-index:v20241213-9b2c637a \
--config=${{ env.AUTOBUMP_CONFIG_PATH }} \
--labels-override=kind/chore,area/documentation
diff --git a/.github/workflows/autobump-security-config.yaml b/.github/workflows/autobump-security-config.yaml
index c6939ccc259a..fd8a915bb1de 100644
--- a/.github/workflows/autobump-security-config.yaml
+++ b/.github/workflows/autobump-security-config.yaml
@@ -71,7 +71,7 @@ jobs:
--rm \
--privileged \
--cap-drop ALL \
- europe-docker.pkg.dev/kyma-project/prod/image-detector:v20241212-be6068ba \
+ europe-docker.pkg.dev/kyma-project/prod/image-detector:v20241213-9b2c637a \
--terraform-dir=${{ env.TERRAFORM_CONFIGS_DIR }} \
--sec-scanner-config=${{ env.SEC_SCANNERS_CONFIG_PATH }} \
--autobump-config=${{ env.AUTOBUMP_CONFIG_PATH }}
diff --git a/.github/workflows/image-autobumper.yml b/.github/workflows/image-autobumper.yml
index 9f1db618dd34..e9026dc34a9c 100644
--- a/.github/workflows/image-autobumper.yml
+++ b/.github/workflows/image-autobumper.yml
@@ -4,7 +4,7 @@ on:
inputs:
docker-image:
description: 'Docker image with tag to be used'
- default: 'europe-docker.pkg.dev/kyma-project/prod/image-autobumper:v20241212-be6068ba'
+ default: 'europe-docker.pkg.dev/kyma-project/prod/image-autobumper:v20241213-9b2c637a'
type: string
autobump-config-path:
description: 'Path to the autobump config file, relative to the repository root'
diff --git a/.github/workflows/image-syncer.yml b/.github/workflows/image-syncer.yml
index a57473ca6f2d..1ee6fab73e29 100644
--- a/.github/workflows/image-syncer.yml
+++ b/.github/workflows/image-syncer.yml
@@ -100,7 +100,7 @@ jobs:
--workdir /github/workspace
--rm
--volume "$GITHUB_WORKSPACE:/github/workspace"
- europe-docker.pkg.dev/kyma-project/prod/image-syncer:v20241212-be6068ba
+ europe-docker.pkg.dev/kyma-project/prod/image-syncer:v20241213-9b2c637a
--images-file=/github/workspace/external-images.yaml
--access-token=${{ steps.authenticate_in_gcp.outputs.access_token }}
--dry-run=${{ steps.set_dry_run_flag.outputs.DRY_RUN }}
diff --git a/.github/workflows/pull-validate-kaniko-build-config.yml b/.github/workflows/pull-validate-kaniko-build-config.yml
index 941c94b86f6b..771d9ebefbec 100644
--- a/.github/workflows/pull-validate-kaniko-build-config.yml
+++ b/.github/workflows/pull-validate-kaniko-build-config.yml
@@ -50,7 +50,7 @@ jobs:
secrets: |-
ado-pat:${{ vars.GCP_KYMA_PROJECT_PROJECT_ID }}/${{ vars.IMAGE_BUILDER_ADO_PAT_GCP_SECRET_NAME }}
- - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20241212-be6068ba
+ - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20241213-9b2c637a
id: build
with:
args: --name=test-infra/ginkgo --context=. --dockerfile=images/ginkgo/Dockerfile --azure-access-token=${{ steps.secrets.outputs.ado-pat }} --oidc-token=${{ steps.get_oidc.outputs.jwt }} --env-file='envs' --build-in-ado=true --test-kaniko-build-config=true --config="./configs/image-builder-client-config.yaml"
\ No newline at end of file
diff --git a/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars b/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars
index 3e003169d418..9fe5caa90c0b 100644
--- a/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars
+++ b/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars
@@ -1,8 +1,8 @@
project_id = "sap-kyma-neighbors-dev"
region = "europe-west3"
service_account_keys_rotator_service_name = "service-account-keys-rotator"
-service_account_keys_rotator_image = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20241212-be6068ba" #gitleaks:allow
+service_account_keys_rotator_image = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20241213-9b2c637a" #gitleaks:allow
service_account_keys_cleaner_service_name = "service-account-keys-cleaner"
-service_account_keys_cleaner_image = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20241212-be6068ba" #gitleaks:allow
+service_account_keys_cleaner_image = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20241213-9b2c637a" #gitleaks:allow
service_account_key_latest_version_min_age = 24
service_account_keys_cleaner_scheduler_cron_schedule = "0 0 * * 1-5"
diff --git a/configs/terraform/environments/prod/terraform.tfvars b/configs/terraform/environments/prod/terraform.tfvars
index fbd65ef4ace4..1fb6d101c235 100644
--- a/configs/terraform/environments/prod/terraform.tfvars
+++ b/configs/terraform/environments/prod/terraform.tfvars
@@ -8,9 +8,9 @@ kyma_project_artifact_registry_collection = {
},
}
service_account_keys_rotator_service_name = "service-account-keys-rotator"
-service_account_keys_rotator_image = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20241212-be6068ba" #gitleaks:allow
+service_account_keys_rotator_image = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20241213-9b2c637a" #gitleaks:allow
service_account_keys_cleaner_service_name = "service-account-keys-cleaner"
-service_account_keys_cleaner_image = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20241212-be6068ba" #gitleaks:allow
+service_account_keys_cleaner_image = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20241213-9b2c637a" #gitleaks:allow
service_account_key_latest_version_min_age = 24
service_account_keys_cleaner_scheduler_cron_schedule = "0 0 * * 1-5"
diff --git a/configs/terraform/modules/cors-proxy/cors-proxy.tf b/configs/terraform/modules/cors-proxy/cors-proxy.tf
index afdfb8de2b97..3e9091b64977 100644
--- a/configs/terraform/modules/cors-proxy/cors-proxy.tf
+++ b/configs/terraform/modules/cors-proxy/cors-proxy.tf
@@ -28,7 +28,7 @@ resource "google_cloud_run_service" "cors_proxy" {
template {
spec {
containers {
- image = "europe-docker.pkg.dev/kyma-project/prod/cors-proxy:v20241212-be6068ba"
+ image = "europe-docker.pkg.dev/kyma-project/prod/cors-proxy:v20241213-9b2c637a"
env {
name = "COMPONENT_NAME"
value = "cors-proxy"
diff --git a/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf b/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf
index 19565f635831..4b0886cefc8f 100644
--- a/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf
+++ b/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf
@@ -67,7 +67,7 @@ resource "google_cloud_run_service" "github_webhook_gateway" {
spec {
service_account_name = google_service_account.github_webhook_gateway.email
containers {
- image = "europe-docker.pkg.dev/kyma-project/prod/github-webhook-gateway:v20241212-be6068ba"
+ image = "europe-docker.pkg.dev/kyma-project/prod/github-webhook-gateway:v20241213-9b2c637a"
env {
name = "PROJECT_ID"
value = var.gcp_project_id
diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf b/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf
index 3d468cbdb3a4..faadd8647160 100644
--- a/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf
+++ b/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf
@@ -47,7 +47,7 @@ resource "google_cloud_run_service" "gcs_bucket_mover" {
spec {
service_account_name = google_service_account.gcs_bucket_mover.email
containers {
- image = "europe-docker.pkg.dev/kyma-project/prod/move-gcs-bucket:v20241212-be6068ba"
+ image = "europe-docker.pkg.dev/kyma-project/prod/move-gcs-bucket:v20241213-9b2c637a"
env {
name = "PROJECT_ID"
value = var.gcp_project_id
diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf
index 14d6627caba7..8e85c70423a5 100644
--- a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf
+++ b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf
@@ -24,7 +24,7 @@ resource "google_cloud_run_service" "github_issue_creator" {
spec {
service_account_name = google_service_account.github_issue_creator.email
containers {
- image = "europe-docker.pkg.dev/kyma-project/prod/create-github-issue:v20241212-be6068ba"
+ image = "europe-docker.pkg.dev/kyma-project/prod/create-github-issue:v20241213-9b2c637a"
env {
name = "PROJECT_ID"
value = var.gcp_project_id
diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf
index 44ee89057733..9163fb8f7e7c 100644
--- a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf
+++ b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf
@@ -24,7 +24,7 @@ resource "google_cloud_run_service" "github_issue_finder" {
spec {
service_account_name = google_service_account.github_issue_finder.email
containers {
- image = "europe-docker.pkg.dev/kyma-project/prod/search-github-issue:v20241212-be6068ba"
+ image = "europe-docker.pkg.dev/kyma-project/prod/search-github-issue:v20241213-9b2c637a"
env {
name = "PROJECT_ID"
value = var.gcp_project_id
diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf b/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf
index 9604e02a1814..8c0fbcbaf7ff 100644
--- a/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf
+++ b/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf
@@ -23,7 +23,7 @@ resource "google_cloud_run_service" "secrets_leak_log_scanner" {
spec {
service_account_name = google_service_account.secrets_leak_log_scanner.email
containers {
- image = "europe-docker.pkg.dev/kyma-project/prod/scan-logs-for-secrets:v20241212-be6068ba" #gitleaks:allow
+ image = "europe-docker.pkg.dev/kyma-project/prod/scan-logs-for-secrets:v20241213-9b2c637a" #gitleaks:allow
env {
name = "PROJECT_ID"
value = var.gcp_project_id
diff --git a/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf b/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf
index 210c903f383f..634ec263c40c 100644
--- a/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf
+++ b/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf
@@ -31,7 +31,7 @@ resource "google_cloud_run_service" "security_dashboard_token" {
template {
spec {
containers {
- image = "europe-docker.pkg.dev/kyma-project/prod/dashboard-token-proxy:v20241212-be6068ba" #gitleaks:allow ignore gitleaks detection
+ image = "europe-docker.pkg.dev/kyma-project/prod/dashboard-token-proxy:v20241213-9b2c637a" #gitleaks:allow ignore gitleaks detection
env {
name = "CLIENT_SECRET"
value_from {
diff --git a/prow/cluster/components/automated-approver_external-plugin.yaml b/prow/cluster/components/automated-approver_external-plugin.yaml
index fc50043c74d5..8bbe31d3a0c6 100644
--- a/prow/cluster/components/automated-approver_external-plugin.yaml
+++ b/prow/cluster/components/automated-approver_external-plugin.yaml
@@ -16,7 +16,7 @@ spec:
spec:
containers:
- name: automated-approver
- image: europe-docker.pkg.dev/kyma-project/prod/automated-approver:v20241212-be6068ba
+ image: europe-docker.pkg.dev/kyma-project/prod/automated-approver:v20241213-9b2c637a
imagePullPolicy: Always
args:
- --dry-run=false
diff --git a/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml b/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml
index b14c80154a7d..b3343091bb03 100644
--- a/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml
+++ b/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml
@@ -13,7 +13,7 @@ spec:
spec:
containers:
- name: secret-checker-untrusted
- image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20241212-be6068ba #gitleaks:allow
+ image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20241213-9b2c637a #gitleaks:allow
imagePullPolicy: IfNotPresent
command:
- /externalsecretschecker
@@ -49,7 +49,7 @@ spec:
spec:
containers:
- name: secret-checker-trusted
- image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20241212-be6068ba #gitleaks:allow
+ image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20241213-9b2c637a #gitleaks:allow
imagePullPolicy: IfNotPresent
command:
- /externalsecretschecker
@@ -85,7 +85,7 @@ spec:
spec:
containers:
- name: secret-checker-prow
- image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20241212-be6068ba #gitleaks:allow
+ image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20241213-9b2c637a #gitleaks:allow
imagePullPolicy: IfNotPresent
command:
- /externalsecretschecker
diff --git a/prow/jobs/kyma-project/test-infra/kyma-bot.yaml b/prow/jobs/kyma-project/test-infra/kyma-bot.yaml
index 179a033502c1..60c2f38977aa 100644
--- a/prow/jobs/kyma-project/test-infra/kyma-bot.yaml
+++ b/prow/jobs/kyma-project/test-infra/kyma-bot.yaml
@@ -22,7 +22,7 @@ presubmits: # runs on PRs
spec:
serviceAccountName: sa-prowjob-gcp-logging-client
containers:
- - image: "europe-docker.pkg.dev/kyma-project/prod/usersmapchecker:v20241212-be6068ba"
+ - image: "europe-docker.pkg.dev/kyma-project/prod/usersmapchecker:v20241213-9b2c637a"
imagePullPolicy: Always
securityContext:
privileged: false