From a927b9bb81c3b0a81909341228f08a52db62a3bb Mon Sep 17 00:00:00 2001 From: Dom Del Nano Date: Thu, 17 Jul 2025 05:46:33 +0000 Subject: [PATCH 1/2] Use recent upstream curl to address security vulnerabilities Signed-off-by: Dom Del Nano (cherry picked from commit a67f69236ee3872bf9753b4ac114b3c6fdae7657) --- demos/k8ssandra/k8ssandra.yaml | 2 +- demos/sock-shop/sock-shop-loadgen.yaml | 2 +- k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml | 2 +- k8s/devinfra/buildbuddy-executor/values.yaml | 2 +- k8s/operator/helm/templates/csv-deleter.yaml | 2 +- k8s/vizier/base/kelvin_deployment.yaml | 2 +- k8s/vizier/base/patch_sentry.yaml | 2 +- k8s/vizier/base/query_broker_deployment.yaml | 2 +- k8s/vizier/bootstrap/cloud_connector_deployment.yaml | 2 +- k8s/vizier/etcd_metadata/base/metadata_deployment.yaml | 4 ++-- k8s/vizier/pem/base/pem_daemonset.yaml | 2 +- k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml | 2 +- k8s/vizier/sanitizer/kelvin_deployment.yaml | 2 +- .../jetstream_loadtest/k8s/subscriber_deployment.yaml | 2 +- .../protocol_loadtest/http/wrk/k8s/client_deployment.yaml | 2 +- .../protocol_loadtest/k8s/client/client_deployment.yaml | 2 +- 16 files changed, 17 insertions(+), 17 deletions(-) diff --git a/demos/k8ssandra/k8ssandra.yaml b/demos/k8ssandra/k8ssandra.yaml index 8a5de4dcce4..1a5a7cced81 100644 --- a/demos/k8ssandra/k8ssandra.yaml +++ b/demos/k8ssandra/k8ssandra.yaml @@ -86992,7 +86992,7 @@ spec: value: petclinic-backend - name: BACKEND_PORT value: "9966" - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 name: backend-load-generator initContainers: - command: diff --git a/demos/sock-shop/sock-shop-loadgen.yaml b/demos/sock-shop/sock-shop-loadgen.yaml index a323d3452fd..1e509b314ed 100644 --- a/demos/sock-shop/sock-shop-loadgen.yaml +++ b/demos/sock-shop/sock-shop-loadgen.yaml @@ -28,7 +28,7 @@ spec: initContainers: - name: wait-sock-shop - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -x; until timeout 2 curl -f "${SOCK_SHOP_HEALTH_ADDR}"; do echo "waiting for ${SOCK_SHOP_HEALTH_ADDR}"; diff --git a/k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml b/k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml index 2a5a6e8907a..4dc87353080 100644 --- a/k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml +++ b/k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml @@ -157,7 +157,7 @@ spec: - name: admin-create-if-not-exists imagePullPolicy: IfNotPresent # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -x; URL="${ADMIN_URL}/admin/health/ready"; until [ $(curl -k -m 0.5 -s -o /dev/null -w "%{http_code}" ${URL}) -eq 200 ]; do diff --git a/k8s/devinfra/buildbuddy-executor/values.yaml b/k8s/devinfra/buildbuddy-executor/values.yaml index 380d84dc4ae..3552b36f47e 100644 --- a/k8s/devinfra/buildbuddy-executor/values.yaml +++ b/k8s/devinfra/buildbuddy-executor/values.yaml @@ -37,7 +37,7 @@ config: extraInitContainers: - name: download-executor # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 # yamllint disable rule:line-length command: ['sh', '-c', 'set -e; curl -fsSL https://github.com/buildbuddy-io/buildbuddy/releases/download/v2.154.0/executor-enterprise-linux-amd64 > /bb-executor/executor; diff --git a/k8s/operator/helm/templates/csv-deleter.yaml b/k8s/operator/helm/templates/csv-deleter.yaml index f785a63e79f..38d8ce5afbb 100644 --- a/k8s/operator/helm/templates/csv-deleter.yaml +++ b/k8s/operator/helm/templates/csv-deleter.yaml @@ -15,7 +15,7 @@ spec: serviceAccountName: olm-operator-serviceaccount containers: - name: trigger-csv-finalizer - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: - /bin/sh - -c diff --git a/k8s/vizier/base/kelvin_deployment.yaml b/k8s/vizier/base/kelvin_deployment.yaml index 8d5edbbbada..a868443dd0e 100644 --- a/k8s/vizier/base/kelvin_deployment.yaml +++ b/k8s/vizier/base/kelvin_deployment.yaml @@ -34,7 +34,7 @@ spec: initContainers: - name: qb-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/healthz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/base/patch_sentry.yaml b/k8s/vizier/base/patch_sentry.yaml index 16eba74b58c..b915811710e 100644 --- a/k8s/vizier/base/patch_sentry.yaml +++ b/k8s/vizier/base/patch_sentry.yaml @@ -9,7 +9,7 @@ spec: initContainers: - name: cc-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/readyz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/base/query_broker_deployment.yaml b/k8s/vizier/base/query_broker_deployment.yaml index d7ede16caf0..564b47859f4 100644 --- a/k8s/vizier/base/query_broker_deployment.yaml +++ b/k8s/vizier/base/query_broker_deployment.yaml @@ -38,7 +38,7 @@ spec: initContainers: - name: mds-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/healthz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/bootstrap/cloud_connector_deployment.yaml b/k8s/vizier/bootstrap/cloud_connector_deployment.yaml index da510aa2f09..923af49ec57 100644 --- a/k8s/vizier/bootstrap/cloud_connector_deployment.yaml +++ b/k8s/vizier/bootstrap/cloud_connector_deployment.yaml @@ -36,7 +36,7 @@ spec: initContainers: - name: nats-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -xe; URL="${PROTOCOL}://${SERVICE_NAME}:${SERVICE_PORT}${HEALTH_PATH}"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/etcd_metadata/base/metadata_deployment.yaml b/k8s/vizier/etcd_metadata/base/metadata_deployment.yaml index bb983463ade..32382119d50 100644 --- a/k8s/vizier/etcd_metadata/base/metadata_deployment.yaml +++ b/k8s/vizier/etcd_metadata/base/metadata_deployment.yaml @@ -39,7 +39,7 @@ spec: initContainers: - name: nats-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -xe; URL="${PROTOCOL}://${SERVICE_NAME}:${SERVICE_PORT}${HEALTH_PATH}"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do @@ -57,7 +57,7 @@ spec: value: "http" - name: etcd-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 # yamllint disable rule:line-length command: ['sh', '-c', 'set -xe; ETCD_PATH="${PL_MD_ETCD_SERVER}"; diff --git a/k8s/vizier/pem/base/pem_daemonset.yaml b/k8s/vizier/pem/base/pem_daemonset.yaml index 6c4f89159c7..2c50c96cd0d 100644 --- a/k8s/vizier/pem/base/pem_daemonset.yaml +++ b/k8s/vizier/pem/base/pem_daemonset.yaml @@ -45,7 +45,7 @@ spec: initContainers: - name: qb-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/healthz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml b/k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml index 14198b40ade..6b533840608 100644 --- a/k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml +++ b/k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml @@ -42,7 +42,7 @@ spec: initContainers: - name: nats-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -xe; URL="${PROTOCOL}://${SERVICE_NAME}:${SERVICE_PORT}${HEALTH_PATH}"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/sanitizer/kelvin_deployment.yaml b/k8s/vizier/sanitizer/kelvin_deployment.yaml index 8d02f1f9d4a..1c6d9580d3a 100644 --- a/k8s/vizier/sanitizer/kelvin_deployment.yaml +++ b/k8s/vizier/sanitizer/kelvin_deployment.yaml @@ -15,7 +15,7 @@ spec: initContainers: - name: qb-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/healthz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/src/e2e_test/jetstream_loadtest/k8s/subscriber_deployment.yaml b/src/e2e_test/jetstream_loadtest/k8s/subscriber_deployment.yaml index 35bcb944e21..e08eb5fa21e 100644 --- a/src/e2e_test/jetstream_loadtest/k8s/subscriber_deployment.yaml +++ b/src/e2e_test/jetstream_loadtest/k8s/subscriber_deployment.yaml @@ -20,7 +20,7 @@ spec: initContainers: - name: wait-for-publisher # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 # yamllint disable rule:line-length command: ['sh', '-c', 'set -xe; URL="http://jetstream-publisher.${NS}.svc.cluster.local:8080/metrics"; diff --git a/src/e2e_test/protocol_loadtest/http/wrk/k8s/client_deployment.yaml b/src/e2e_test/protocol_loadtest/http/wrk/k8s/client_deployment.yaml index 3ff0a392fb8..b9c4d66ae6f 100644 --- a/src/e2e_test/protocol_loadtest/http/wrk/k8s/client_deployment.yaml +++ b/src/e2e_test/protocol_loadtest/http/wrk/k8s/client_deployment.yaml @@ -29,7 +29,7 @@ spec: initContainers: - name: server-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 # yamllint disable rule:line-length command: ['sh', '-c', 'set -xe; URL="${PROTOCOL}://${SERVICE_NAME}:${SERVICE_PORT}${HEALTH_PATH}"; diff --git a/src/e2e_test/protocol_loadtest/k8s/client/client_deployment.yaml b/src/e2e_test/protocol_loadtest/k8s/client/client_deployment.yaml index eb2ad3468e2..c8408f44853 100644 --- a/src/e2e_test/protocol_loadtest/k8s/client/client_deployment.yaml +++ b/src/e2e_test/protocol_loadtest/k8s/client/client_deployment.yaml @@ -17,7 +17,7 @@ spec: initContainers: - name: server-wait # yamllint disable-line rule:line-length - image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:multiarch-7.87.0@sha256:f7f265d5c64eb4463a43a99b6bf773f9e61a50aaa7cefaf564f43e42549a01dd + image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 # yamllint disable rule:line-length command: ['sh', '-c', 'set -xe; URL="http://${SERVICE_NAME}:${SERVICE_PORT}/"; From cc40eba130dc41f0c2b2c63fb0d444e5d3b61d44 Mon Sep 17 00:00:00 2001 From: Dom Del Nano Date: Wed, 23 Jul 2025 04:59:55 +0000 Subject: [PATCH 2/2] Copy image to ghcr.io/pixie-io Signed-off-by: Dom Del Nano --- demos/k8ssandra/k8ssandra.yaml | 2 +- demos/sock-shop/sock-shop-loadgen.yaml | 2 +- k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml | 2 +- k8s/devinfra/buildbuddy-executor/values.yaml | 2 +- k8s/operator/helm/templates/csv-deleter.yaml | 2 +- k8s/vizier/base/kelvin_deployment.yaml | 2 +- k8s/vizier/base/patch_sentry.yaml | 2 +- k8s/vizier/base/query_broker_deployment.yaml | 2 +- k8s/vizier/bootstrap/cloud_connector_deployment.yaml | 2 +- k8s/vizier/etcd_metadata/base/metadata_deployment.yaml | 4 ++-- k8s/vizier/pem/base/pem_daemonset.yaml | 2 +- k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml | 2 +- k8s/vizier/sanitizer/kelvin_deployment.yaml | 2 +- .../jetstream_loadtest/k8s/subscriber_deployment.yaml | 2 +- .../protocol_loadtest/http/wrk/k8s/client_deployment.yaml | 2 +- .../protocol_loadtest/k8s/client/client_deployment.yaml | 2 +- 16 files changed, 17 insertions(+), 17 deletions(-) diff --git a/demos/k8ssandra/k8ssandra.yaml b/demos/k8ssandra/k8ssandra.yaml index 1a5a7cced81..ae515ce9991 100644 --- a/demos/k8ssandra/k8ssandra.yaml +++ b/demos/k8ssandra/k8ssandra.yaml @@ -86992,7 +86992,7 @@ spec: value: petclinic-backend - name: BACKEND_PORT value: "9966" - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 name: backend-load-generator initContainers: - command: diff --git a/demos/sock-shop/sock-shop-loadgen.yaml b/demos/sock-shop/sock-shop-loadgen.yaml index 1e509b314ed..a88d3943b95 100644 --- a/demos/sock-shop/sock-shop-loadgen.yaml +++ b/demos/sock-shop/sock-shop-loadgen.yaml @@ -28,7 +28,7 @@ spec: initContainers: - name: wait-sock-shop - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -x; until timeout 2 curl -f "${SOCK_SHOP_HEALTH_ADDR}"; do echo "waiting for ${SOCK_SHOP_HEALTH_ADDR}"; diff --git a/k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml b/k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml index 4dc87353080..6d9e56e9547 100644 --- a/k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml +++ b/k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml @@ -157,7 +157,7 @@ spec: - name: admin-create-if-not-exists imagePullPolicy: IfNotPresent # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -x; URL="${ADMIN_URL}/admin/health/ready"; until [ $(curl -k -m 0.5 -s -o /dev/null -w "%{http_code}" ${URL}) -eq 200 ]; do diff --git a/k8s/devinfra/buildbuddy-executor/values.yaml b/k8s/devinfra/buildbuddy-executor/values.yaml index 3552b36f47e..c44dbaafc42 100644 --- a/k8s/devinfra/buildbuddy-executor/values.yaml +++ b/k8s/devinfra/buildbuddy-executor/values.yaml @@ -37,7 +37,7 @@ config: extraInitContainers: - name: download-executor # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 # yamllint disable rule:line-length command: ['sh', '-c', 'set -e; curl -fsSL https://github.com/buildbuddy-io/buildbuddy/releases/download/v2.154.0/executor-enterprise-linux-amd64 > /bb-executor/executor; diff --git a/k8s/operator/helm/templates/csv-deleter.yaml b/k8s/operator/helm/templates/csv-deleter.yaml index 38d8ce5afbb..871ea96c960 100644 --- a/k8s/operator/helm/templates/csv-deleter.yaml +++ b/k8s/operator/helm/templates/csv-deleter.yaml @@ -15,7 +15,7 @@ spec: serviceAccountName: olm-operator-serviceaccount containers: - name: trigger-csv-finalizer - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: - /bin/sh - -c diff --git a/k8s/vizier/base/kelvin_deployment.yaml b/k8s/vizier/base/kelvin_deployment.yaml index a868443dd0e..24199da3510 100644 --- a/k8s/vizier/base/kelvin_deployment.yaml +++ b/k8s/vizier/base/kelvin_deployment.yaml @@ -34,7 +34,7 @@ spec: initContainers: - name: qb-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/healthz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/base/patch_sentry.yaml b/k8s/vizier/base/patch_sentry.yaml index b915811710e..6b70e996cc9 100644 --- a/k8s/vizier/base/patch_sentry.yaml +++ b/k8s/vizier/base/patch_sentry.yaml @@ -9,7 +9,7 @@ spec: initContainers: - name: cc-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/readyz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/base/query_broker_deployment.yaml b/k8s/vizier/base/query_broker_deployment.yaml index 564b47859f4..0dd07341211 100644 --- a/k8s/vizier/base/query_broker_deployment.yaml +++ b/k8s/vizier/base/query_broker_deployment.yaml @@ -38,7 +38,7 @@ spec: initContainers: - name: mds-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/healthz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/bootstrap/cloud_connector_deployment.yaml b/k8s/vizier/bootstrap/cloud_connector_deployment.yaml index 923af49ec57..a1455015893 100644 --- a/k8s/vizier/bootstrap/cloud_connector_deployment.yaml +++ b/k8s/vizier/bootstrap/cloud_connector_deployment.yaml @@ -36,7 +36,7 @@ spec: initContainers: - name: nats-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -xe; URL="${PROTOCOL}://${SERVICE_NAME}:${SERVICE_PORT}${HEALTH_PATH}"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/etcd_metadata/base/metadata_deployment.yaml b/k8s/vizier/etcd_metadata/base/metadata_deployment.yaml index 32382119d50..08048d6c04e 100644 --- a/k8s/vizier/etcd_metadata/base/metadata_deployment.yaml +++ b/k8s/vizier/etcd_metadata/base/metadata_deployment.yaml @@ -39,7 +39,7 @@ spec: initContainers: - name: nats-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -xe; URL="${PROTOCOL}://${SERVICE_NAME}:${SERVICE_PORT}${HEALTH_PATH}"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do @@ -57,7 +57,7 @@ spec: value: "http" - name: etcd-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 # yamllint disable rule:line-length command: ['sh', '-c', 'set -xe; ETCD_PATH="${PL_MD_ETCD_SERVER}"; diff --git a/k8s/vizier/pem/base/pem_daemonset.yaml b/k8s/vizier/pem/base/pem_daemonset.yaml index 2c50c96cd0d..f6adc1743d3 100644 --- a/k8s/vizier/pem/base/pem_daemonset.yaml +++ b/k8s/vizier/pem/base/pem_daemonset.yaml @@ -45,7 +45,7 @@ spec: initContainers: - name: qb-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/healthz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml b/k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml index 6b533840608..4c14f85150f 100644 --- a/k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml +++ b/k8s/vizier/persistent_metadata/base/metadata_statefulset.yaml @@ -42,7 +42,7 @@ spec: initContainers: - name: nats-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -xe; URL="${PROTOCOL}://${SERVICE_NAME}:${SERVICE_PORT}${HEALTH_PATH}"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/k8s/vizier/sanitizer/kelvin_deployment.yaml b/k8s/vizier/sanitizer/kelvin_deployment.yaml index 1c6d9580d3a..10dad0558ec 100644 --- a/k8s/vizier/sanitizer/kelvin_deployment.yaml +++ b/k8s/vizier/sanitizer/kelvin_deployment.yaml @@ -15,7 +15,7 @@ spec: initContainers: - name: qb-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 command: ['sh', '-c', 'set -x; URL="https://${SERVICE_NAME}:${SERVICE_PORT}/healthz"; until [ $(curl -m 0.5 -s -o /dev/null -w "%{http_code}" -k ${URL}) -eq 200 ]; do diff --git a/src/e2e_test/jetstream_loadtest/k8s/subscriber_deployment.yaml b/src/e2e_test/jetstream_loadtest/k8s/subscriber_deployment.yaml index e08eb5fa21e..93feb8fa526 100644 --- a/src/e2e_test/jetstream_loadtest/k8s/subscriber_deployment.yaml +++ b/src/e2e_test/jetstream_loadtest/k8s/subscriber_deployment.yaml @@ -20,7 +20,7 @@ spec: initContainers: - name: wait-for-publisher # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 # yamllint disable rule:line-length command: ['sh', '-c', 'set -xe; URL="http://jetstream-publisher.${NS}.svc.cluster.local:8080/metrics"; diff --git a/src/e2e_test/protocol_loadtest/http/wrk/k8s/client_deployment.yaml b/src/e2e_test/protocol_loadtest/http/wrk/k8s/client_deployment.yaml index b9c4d66ae6f..475bb75719d 100644 --- a/src/e2e_test/protocol_loadtest/http/wrk/k8s/client_deployment.yaml +++ b/src/e2e_test/protocol_loadtest/http/wrk/k8s/client_deployment.yaml @@ -29,7 +29,7 @@ spec: initContainers: - name: server-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 # yamllint disable rule:line-length command: ['sh', '-c', 'set -xe; URL="${PROTOCOL}://${SERVICE_NAME}:${SERVICE_PORT}${HEALTH_PATH}"; diff --git a/src/e2e_test/protocol_loadtest/k8s/client/client_deployment.yaml b/src/e2e_test/protocol_loadtest/k8s/client/client_deployment.yaml index c8408f44853..ac0281209da 100644 --- a/src/e2e_test/protocol_loadtest/k8s/client/client_deployment.yaml +++ b/src/e2e_test/protocol_loadtest/k8s/client/client_deployment.yaml @@ -17,7 +17,7 @@ spec: initContainers: - name: server-wait # yamllint disable-line rule:line-length - image: alpine/curl:8.14.1@sha256:fe395e422d73daaf0ea6cf39b1ea50c999255b38d719856322cd11806c6b7286 + image: ghcr.io/pixie-io/pixie-oss-pixie-dev-public-curl:8.15.0@sha256:4026b29997dc7c823b51c164b71e2b51e0fd95cce4601f78202c513d97da2922 # yamllint disable rule:line-length command: ['sh', '-c', 'set -xe; URL="http://${SERVICE_NAME}:${SERVICE_PORT}/";