Update pause and alpine images and skip scans for the alpine image

gardener · Nov 20, 2023 · 44427cc · 44427cc
1 parent 85c71b5
commit 44427cc
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 8 deletions.
diff --git a/charts/images.yaml b/charts/images.yaml
@@ -6,16 +6,23 @@
 images:
 - name: alpine
   repository: eu.gcr.io/gardener-project/3rd/alpine
-  tag: "3.15.8"
+  tag: "3.18.4"
+  labels:
+  - name: cloud.gardener.cnudie/dso/scanning-hints/binary_id/v1
+    value:
+      policy: skip
+      comment: >
+        The alpine container is not accessible from outside k8s clusters and not
+        interacted with from other containers or other systems.
 
 - name: pause-container
   sourceRepository: github.com/kubernetes/kubernetes/blob/master/build/pause/Dockerfile
   repository: registry.k8s.io/pause
-  tag: "3.7"
+  tag: "3.9"
   labels:
   - name: cloud.gardener.cnudie/dso/scanning-hints/binary_id/v1
     value:
       policy: skip
       comment: >
-        pause-container is not accessible from outside k8s clusters and not
-        interacted with from other containers or other systems
+        The pause container is not accessible from outside k8s clusters and not
+        interacted with from other containers or other systems.
diff --git a/test/integration/controller/lifecycle/lifecycle_test.go b/test/integration/controller/lifecycle/lifecycle_test.go
@@ -60,11 +60,11 @@ spec:
       priorityClassName: gardener-shoot-system-700
       containers:
       - name: pause-container
-        image: registry.k8s.io/pause:3.7
+        image: registry.k8s.io/pause:3.9
         imagePullPolicy: IfNotPresent
       initContainers:
       - name: rsyslog-configuration-cleaner
-        image: eu.gcr.io/gardener-project/3rd/alpine:3.15.8
+        image: eu.gcr.io/gardener-project/3rd/alpine:3.18.4
         imagePullPolicy: IfNotPresent
         securityContext:
           privileged: true
@@ -329,11 +329,11 @@ spec:
       priorityClassName: gardener-shoot-system-700
       containers:
       - name: pause
-        image: registry.k8s.io/pause:3.7
+        image: registry.k8s.io/pause:3.9
         imagePullPolicy: IfNotPresent
       initContainers:
       - name: rsyslog-relp-configurator
-        image: eu.gcr.io/gardener-project/3rd/alpine:3.15.8
+        image: eu.gcr.io/gardener-project/3rd/alpine:3.18.4
         imagePullPolicy: IfNotPresent
         securityContext:
           privileged: true