Skip to content

Commit 3aa0c28

Browse files
hsmatulishsmatulis
authored
fix: bump libc and manifests (#1797)
We forgot about libc images in 0.17 I bumped manifests because check-image CI was failing, but I don't think it matters.. Used script: ``` BRANCH=release/0.17 PR_BRANCH=vulnfix0172 CHECKOUT_DIR=~/Repos bash ./hack/release-vulnfix.sh ```
2 parents 6361baf + c64b93e commit 3aa0c28

File tree

9 files changed

+20
-20
lines changed

9 files changed

+20
-20
lines changed

‎charts/values.global.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -24,22 +24,22 @@ images:
2424
tag: gke_distroless_20251007.00_p0
2525
alertmanager:
2626
image: gke.gcr.io/prometheus-engine/alertmanager
27-
tag: "v0.27.0-gmp.3-gke.0"
27+
tag: "v0.27.0-gmp.4-gke.0"
2828
prometheus:
2929
image: gke.gcr.io/prometheus-engine/prometheus
3030
tag: "v2.53.4-gmp.0-gke.1"
3131
configReloader:
3232
image: gke.gcr.io/prometheus-engine/config-reloader
33-
tag: "v0.15.4-gke.0"
33+
tag: "v0.17.0-gke.0"
3434
operator:
3535
image: gke.gcr.io/prometheus-engine/operator
36-
tag: "v0.15.4-gke.0"
36+
tag: "v0.17.0-gke.0"
3737
ruleEvaluator:
3838
image: gke.gcr.io/prometheus-engine/rule-evaluator
39-
tag: "v0.15.4-gke.0"
39+
tag: "v0.17.0-gke.0"
4040
datasourceSyncer:
4141
image: gke.gcr.io/prometheus-engine/datasource-syncer
42-
tag: "v0.15.4-gke.0"
42+
tag: "v0.17.0-gke.0"
4343
resources:
4444
alertManager:
4545
limits:

‎cmd/config-reloader/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,6 @@ RUN if [ "${TARGETARCH}" = "arm64" ] && [ "${BUILDARCH}" != "arm64" ]; then \
4242
cmd/config-reloader/*.go
4343

4444

45-
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20250807.00_p0
45+
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20251007.00_p0@sha256:06e60d7033d3b97a1be5aa0093b7c75312a8856fa413194e6d187b79d4b34f64
4646
COPY --from=buildbase /app/config-reloader /bin/config-reloader
4747
ENTRYPOINT ["/bin/config-reloader"]

‎cmd/datasource-syncer/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ RUN if [ "${TARGETARCH}" = "arm64" ] && [ "${BUILDARCH}" != "arm64" ]; then \
4242
cmd/datasource-syncer/*.go
4343

4444

45-
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20250807.00_p0
45+
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20251007.00_p0@sha256:06e60d7033d3b97a1be5aa0093b7c75312a8856fa413194e6d187b79d4b34f64
4646
COPY --from=buildbase /app/datasource-syncer /bin/datasource-syncer
4747
ENTRYPOINT ["/bin/datasource-syncer"]
4848

‎cmd/datasource-syncer/datasource-syncer.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ spec:
4141
- linux
4242
containers:
4343
- name: datasource-syncer-init
44-
image: gke.gcr.io/prometheus-engine/datasource-syncer:v0.15.4-gke.0
44+
image: gke.gcr.io/prometheus-engine/datasource-syncer:v0.17.0-gke.0
4545
args:
4646
- "--datasource-uids=$DATASOURCE_UIDS"
4747
- "--grafana-api-endpoint=$GRAFANA_API_ENDPOINT"
@@ -79,7 +79,7 @@ spec:
7979
- linux
8080
containers:
8181
- name: datasource-syncer
82-
image: gke.gcr.io/prometheus-engine/datasource-syncer:v0.15.4-gke.0
82+
image: gke.gcr.io/prometheus-engine/datasource-syncer:v0.17.0-gke.0
8383
args:
8484
- "--datasource-uids=$DATASOURCE_UIDS"
8585
- "--grafana-api-endpoint=$GRAFANA_API_ENDPOINT"

‎cmd/frontend/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,6 @@ RUN if [ "${TARGETARCH}" = "arm64" ] && [ "${BUILDARCH}" != "arm64" ]; then \
5555
cmd/frontend/*.go
5656

5757

58-
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20250807.00_p0
58+
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20251007.00_p0@sha256:06e60d7033d3b97a1be5aa0093b7c75312a8856fa413194e6d187b79d4b34f64
5959
COPY --from=appbase /app/frontend /bin/frontend
6060
ENTRYPOINT ["/bin/frontend"]

‎cmd/operator/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,6 @@ RUN if [ "${TARGETARCH}" = "arm64" ] && [ "${BUILDARCH}" != "arm64" ]; then \
4343
cmd/operator/*.go
4444

4545

46-
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20250807.00_p0
46+
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20251007.00_p0@sha256:06e60d7033d3b97a1be5aa0093b7c75312a8856fa413194e6d187b79d4b34f64
4747
COPY --from=buildbase /app/operator /bin/operator
4848
ENTRYPOINT ["/bin/operator"]

‎cmd/rule-evaluator/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,6 @@ RUN if [ "${TARGETARCH}" = "arm64" ] && [ "${BUILDARCH}" != "arm64" ]; then \
4444
cmd/rule-evaluator/*.go
4545

4646

47-
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20250807.00_p0
47+
FROM gke.gcr.io/gke-distroless/libc:gke_distroless_20251007.00_p0@sha256:06e60d7033d3b97a1be5aa0093b7c75312a8856fa413194e6d187b79d4b34f64
4848
COPY --from=buildbase /app/rule-evaluator /bin/rule-evaluator
4949
ENTRYPOINT ["/bin/rule-evaluator"]

‎manifests/operator.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -373,7 +373,7 @@ spec:
373373
readOnlyRootFilesystem: true
374374
containers:
375375
- name: config-reloader
376-
image: gke.gcr.io/prometheus-engine/config-reloader:v0.15.4-gke.0
376+
image: gke.gcr.io/prometheus-engine/config-reloader:v0.17.0-gke.0
377377
args:
378378
- --config-file=/prometheus/config/config.yaml
379379
- --config-file-output=/prometheus/config_out/config.yaml
@@ -552,7 +552,7 @@ spec:
552552
priorityClassName: gmp-critical
553553
containers:
554554
- name: operator
555-
image: gke.gcr.io/prometheus-engine/operator:v0.15.4-gke.0
555+
image: gke.gcr.io/prometheus-engine/operator:v0.17.0-gke.0
556556
args:
557557
- "--operator-namespace=gmp-system"
558558
- "--public-namespace=gmp-public"
@@ -674,7 +674,7 @@ spec:
674674
readOnlyRootFilesystem: true
675675
containers:
676676
- name: evaluator
677-
image: gke.gcr.io/prometheus-engine/rule-evaluator:v0.15.4-gke.0
677+
image: gke.gcr.io/prometheus-engine/rule-evaluator:v0.17.0-gke.0
678678
args:
679679
- --config.file=/prometheus/config_out/config.yaml
680680
- --web.listen-address=:19092
@@ -716,7 +716,7 @@ spec:
716716
privileged: false
717717
readOnlyRootFilesystem: true
718718
- name: config-reloader
719-
image: gke.gcr.io/prometheus-engine/config-reloader:v0.15.4-gke.0
719+
image: gke.gcr.io/prometheus-engine/config-reloader:v0.17.0-gke.0
720720
args:
721721
- --config-file=/prometheus/config/config.yaml
722722
- --config-file-output=/prometheus/config_out/config.yaml
@@ -846,7 +846,7 @@ spec:
846846
readOnlyRootFilesystem: true
847847
containers:
848848
- name: alertmanager
849-
image: gke.gcr.io/prometheus-engine/alertmanager:v0.27.0-gmp.3-gke.0
849+
image: gke.gcr.io/prometheus-engine/alertmanager:v0.27.0-gmp.4-gke.0
850850
args:
851851
- --config.file=/alertmanager/config_out/config.yaml
852852
- --storage.path=/alertmanager-data
@@ -882,7 +882,7 @@ spec:
882882
privileged: false
883883
readOnlyRootFilesystem: true
884884
- name: config-reloader
885-
image: gke.gcr.io/prometheus-engine/config-reloader:v0.15.4-gke.0
885+
image: gke.gcr.io/prometheus-engine/config-reloader:v0.17.0-gke.0
886886
args:
887887
- --config-file=/alertmanager/config.yaml
888888
- --config-file-output=/alertmanager/config_out/config.yaml

‎manifests/rule-evaluator.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -131,7 +131,7 @@ spec:
131131
mountPath: /prometheus/config_out
132132
containers:
133133
- name: evaluator
134-
image: gke.gcr.io/prometheus-engine/rule-evaluator:v0.15.4-gke.0
134+
image: gke.gcr.io/prometheus-engine/rule-evaluator:v0.17.0-gke.0
135135
args:
136136
- "--config.file=/prometheus/config_out/config.yaml"
137137
- "--web.listen-address=:9092"
@@ -169,7 +169,7 @@ spec:
169169
privileged: false
170170
readOnlyRootFilesystem: true
171171
- name: config-reloader
172-
image: gke.gcr.io/prometheus-engine/config-reloader:v0.15.4-gke.0
172+
image: gke.gcr.io/prometheus-engine/config-reloader:v0.17.0-gke.0
173173
args:
174174
- --config-file=/prometheus/config/config.yaml
175175
- --config-file-output=/prometheus/config_out/config.yaml

0 commit comments

Comments
 (0)