feat: bump kubectl to 1.30.5 with cve fix (#2677)

apptests/appscenarios/contants.go

@@ -21,5 +21,5 @@ const (
 
 	// Velero constants
 	kubetoolsImageRepository = "bitnami/kubectl"
-	kubetoolsImageTag        = "1.29.6"
+	kubetoolsImageTag        = "1.30.5"
 )

common/build/list-images-values.yaml

@@ -1,3 +1,3 @@
 secretName: unused
 commonName: unused
-kubectlImage: bitnami/kubectl:1.29.6
+kubectlImage: bitnami/kubectl:1.30.5

licenses.d2iq.yaml

@@ -574,7 +574,7 @@ resources:
       - url: https://github.com/NVIDIA/cuda-samples
         ref: v12.5
         license_path: LICENSE
-  - container_image: docker.io/bitnami/kubectl:1.29.6
+  - container_image: docker.io/bitnami/kubectl:1.30.5
     sources:
       - url: https://github.com/kubernetes/kubectl
         ref: v0${image_tag#1}

services/ai-navigator-app/0.2.5/defaults/cm.yaml

@@ -112,4 +112,4 @@ data:
     tolerations: []
 
     affinity: {}
-    kubectlImage: ${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}
+    kubectlImage: ${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}

services/centralized-kubecost/0.37.5/defaults/cm.yaml

@@ -8,7 +8,7 @@ data:
     ---
     hooks:
       clusterID:
-        kubectlImage: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+        kubectlImage: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
         priorityClassName: dkp-high-priority
 
     cost-analyzer:

services/centralized-kubecost/0.37.5/post-install-jobs/post-install-jobs.yaml

@@ -42,7 +42,7 @@ spec:
       priorityClassName: dkp-high-priority
       containers:
         - name: kubectl
-          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
           command:
             - sh
             - -c

services/centralized-kubecost/0.37.5/release/release.yaml

@@ -73,7 +73,7 @@ spec:
       priorityClassName: dkp-high-priority
       containers:
         - name: kubectl
-          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
           command:
             - sh
             - "-c"

services/dex/2.14.0/defaults/cm.yaml

@@ -7,7 +7,7 @@ data:
   values.yaml: |-
     ---
     priorityClassName: "dkp-critical-priority"
-    kubectlImage: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+    kubectlImage: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
     image: mesosphere/dex
     imageTag: v2.41.1-d2iq.1
     resources:

services/grafana-loki/0.79.4/grafana-loki-pre-install-jobs/pre-install.yaml

@@ -46,7 +46,7 @@ spec:
       priorityClassName: dkp-critical-priority
       containers:
         - name: pre-install
-          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
           command:
             - sh
             - -c

services/istio/1.23.2/defaults/cm.yaml

@@ -30,7 +30,7 @@ data:
           prometheus.kommander.d2iq.io/select: "true"
     global:
       image: ${kubetoolsImageRepository:=bitnami/kubectl}
-      tag: ${kubetoolsImageTag:=1.29.6}
+      tag: ${kubetoolsImageTag:=1.30.5}
       priorityClassName: "dkp-critical-priority"
     operator:
       # expose metrics for prometheus scraping

services/knative/1.10.5/defaults/cm.yaml

@@ -8,7 +8,7 @@ data:
     global:
       priorityClassName: "dkp-high-priority"
       image: ${kubetoolsImageRepository:=bitnami/kubectl}
-      tag: ${kubetoolsImageTag:=1.29.6}
+      tag: ${kubetoolsImageTag:=1.30.5}
     eventing:
       enabled: false
     eventing-sources:

services/kommander/0.13.0/dynamic-helmreleases/cluster-observer/list-images-values.yaml

@@ -1,2 +1,2 @@
 hooks:
-  kubectlImage: "bitnami/kubectl:1.29.6"
+  kubectlImage: "bitnami/kubectl:1.30.5"

services/kube-prometheus-stack/63.0.0/defaults/cm.yaml

@@ -22,7 +22,7 @@ data:
     mesosphereResources:
       create: true
       hooks:
-        kubectlImage: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+        kubectlImage: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
       rules:
         # addon alert rules are defaulted to false to prevent potential misfires if addons
         # are disabled.

services/kubecost/0.37.6/defaults/cm.yaml

@@ -8,7 +8,7 @@ data:
     ---
     hooks:
       clusterID:
-        kubectlImage: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+        kubectlImage: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
         priorityClassName: dkp-high-priority
 
     cost-analyzer:

services/kubefed/0.10.5/defaults/cm.yaml

@@ -35,7 +35,7 @@ data:
       postInstallJob:
         repository: bitnami
         image: kubectl
-        tag: 1.29.6
+        tag: 1.30.5
     webhook:
       annotations:
         secret.reloader.stakater.com/reload: "kubefed-root-ca"

services/kubetunnel/0.0.36/defaults/cm.yaml

@@ -17,7 +17,7 @@ data:
     hooks:
       kubectlImage:
         repository: "${kubetoolsImageRepository:=bitnami/kubectl}"
-        tag: "${kubetoolsImageTag:=1.29.6}"
+        tag: "${kubetoolsImageTag:=1.30.5}"
     controller:
       manager:
         resources:

services/nkp-insights-management/1.2.2/defaults/cm.yaml

@@ -34,7 +34,7 @@ data:
     insightsCRIngress:
       globalRateLimitAverageQPS: 100
       globalRateLimitBurst: 100
-    kubectlImage: bitnami/kubectl:1.29.6
+    kubectlImage: bitnami/kubectl:1.30.5
     managementCM:
       backendTokenTTL: 1h
       insightsTTL: 72h

services/nkp-insights/1.2.2/defaults/cm.yaml

@@ -429,7 +429,7 @@ data:
             cpu: 100m
             memory: 512Mi
       schedule: '@every 35m'
-    kubectlImage: bitnami/kubectl:1.29.6
+    kubectlImage: bitnami/kubectl:1.30.5
     nova:
       baseEvaluationTimeout: 1m
       enabled: true

services/project-grafana-loki/0.79.4/defaults/cm.yaml

@@ -27,7 +27,7 @@ data:
     ####################################################################
 
     # this is used in object-bucket-claims overrides
-    kubectlImage: bitnami/kubectl:1.29.6
+    kubectlImage: bitnami/kubectl:1.30.5
 
     loki:
       ingesterFullname: loki-ingester

services/rook-ceph-cluster/1.14.5/defaults/cm.yaml

@@ -244,7 +244,7 @@ data:
           memory: "100Mi"
 
     # this is used in object-bucket-claims overrides
-    kubectlImage: bitnami/kubectl:1.29.6
+    kubectlImage: bitnami/kubectl:1.30.5
 
     #################################################################
     ## BEGIN NKP specific config overrides                         ##

services/rook-ceph-cluster/1.14.5/pre-install/ceph-crd-check.yaml

@@ -47,7 +47,7 @@ spec:
       restartPolicy: OnFailure
       containers:
         - name: pre-install
-          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
           command:
             - sh
             - -c
@@ -57,7 +57,7 @@ spec:
                 sleep 30
               done
         - name: pre-upgrade
-          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
           command:
             - sh
             - -c

services/thanos/15.7.23/jobs/jobs.yaml

@@ -43,7 +43,7 @@ spec:
       priorityClassName: dkp-critical-priority
       containers:
         - name: kubectl
-          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+          image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
           command:
             - sh
             - "-c"

services/traefik/27.0.2/defaults/cm.yaml

@@ -39,7 +39,7 @@ data:
         app: traefik
       initContainers:
       - name: initialize-middleware
-        image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.29.6}"
+        image: "${kubetoolsImageRepository:=bitnami/kubectl}:${kubetoolsImageTag:=1.30.5}"
         command:
           - bash
         args:

services/velero/7.1.4/defaults/cm.yaml

@@ -56,4 +56,4 @@ data:
       image:
         # If we don't override the version here, upstream chart will pull an image dynamically based on k8s cluster version.
         # which makes it harder to build airgapped tar bundles. So to make bundle collection predictable, we override the tag here.
-        tag: "${kubetoolsImageTag:=1.29.6}"
+        tag: "${kubetoolsImageTag:=1.30.5}"