fix: patch and bump kubecost images to fix cve

mesosphere · Nov 24, 2024 · cfe0e0e · cfe0e0e
1 parent 41e05ab
commit cfe0e0e
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/licenses.d2iq.yaml b/licenses.d2iq.yaml
@@ -568,10 +568,10 @@ resources:
       - url: https://github.com/opencost/opencost
         ref: v${image_tag#prod-}
         license_path: LICENSE
-  - container_image: gcr.io/kubecost1/frontend:prod-1.108.1
+  - container_image: ghcr.io/mesosphere/dkp-container-images/gcr.io/kubecost1/frontend:prod-1.108.1-d2iq.0
     sources:
       - url: https://github.com/opencost/opencost
-        ref: v1.108.1
+        ref: v1.108.1-d2iq.0
         license_path: LICENSE
   - container_image: registry.k8s.io/pause:3.10
     sources:

diff --git a/services/centralized-kubecost/0.37.7/defaults/cm.yaml b/services/centralized-kubecost/0.37.7/defaults/cm.yaml
@@ -13,6 +13,8 @@ data:
 
     cost-analyzer:
       fullnameOverride: "kommander-kubecost-cost-analyzer"
+      kubecostFrontend:
+        fullImageName: ghcr.io/mesosphere/dkp-container-images/gcr.io/kubecost1/frontend:prod-1.108.1-d2iq.0
       priority:
         enabled: true
         name: dkp-high-priority

diff --git a/services/kubecost/0.37.8/defaults/cm.yaml b/services/kubecost/0.37.8/defaults/cm.yaml
@@ -12,6 +12,8 @@ data:
         priorityClassName: dkp-high-priority
 
     cost-analyzer:
+      kubecostFrontend:
+        fullImageName: ghcr.io/mesosphere/dkp-container-images/gcr.io/kubecost1/frontend:prod-1.108.1-d2iq.0
       priority:
         enabled: true
         name: dkp-high-priority