Fixing CVEs and depricated pod images

Author: thakurmi

charts/aws-efs-csi-driver/values.yaml

@@ -18,7 +18,7 @@ sidecars:
   livenessProbe:
     image:
       repository: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe
-      tag: v2.14.0-eks-1-32-6
+      tag: v2.15.0-eks-1-33-3
       pullPolicy: IfNotPresent
     resources: {}
     securityContext:
@@ -27,7 +27,7 @@ sidecars:
   nodeDriverRegistrar:
     image:
       repository: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar
-      tag: v2.13.0-eks-1-32-6
+      tag: v2.13.0-eks-1-33-3
       pullPolicy: IfNotPresent
     resources: {}
     securityContext:
@@ -36,7 +36,7 @@ sidecars:
   csiProvisioner:
     image:
       repository: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner
-      tag: v5.2.0-eks-1-32-6
+      tag: v5.2.0-eks-1-33-3
       pullPolicy: IfNotPresent
     resources: {}
     securityContext:

deploy/kubernetes/base/controller-deployment.yaml

@@ -69,7 +69,7 @@ spec:
             periodSeconds: 10
             failureThreshold: 5
         - name: csi-provisioner
-          image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.2.0-eks-1-32-6
+          image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.2.0-eks-1-33-3
           imagePullPolicy: IfNotPresent
           args:
             - --csi-address=$(ADDRESS)
@@ -89,7 +89,7 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
         - name: liveness-probe
-          image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-6
+          image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.15.0-eks-1-33-3
           imagePullPolicy: IfNotPresent
           args:
             - --csi-address=/csi/csi.sock

deploy/kubernetes/base/node-daemonset.yaml

@@ -91,7 +91,7 @@ spec:
             periodSeconds: 2
             failureThreshold: 5
         - name: csi-driver-registrar
-          image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.13.0-eks-1-32-6
+          image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.13.0-eks-1-33-3
           imagePullPolicy: IfNotPresent
           args:
             - --csi-address=$(ADDRESS)
@@ -115,7 +115,7 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
         - name: liveness-probe
-          image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.14.0-eks-1-32-6
+          image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.15.0-eks-1-33-3
           imagePullPolicy: IfNotPresent
           args:
             - --csi-address=/csi/csi.sock

deploy/kubernetes/overlays/stable/ecr/kustomization.yaml

@@ -8,10 +8,10 @@ images:
     newTag: v2.1.8
   - name: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe
     newName: 602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/livenessprobe
-    newTag: v2.14.0-eks-1-32-6
+    newTag: v2.15.0-eks-1-33-3
   - name: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar
     newName: 602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/csi-node-driver-registrar
-    newTag: v2.13.0-eks-1-32-6
+    newTag: v2.13.0-eks-1-33-3
   - name: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner
     newName: 602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/csi-provisioner
-    newTag: v5.2.0-eks-1-32-6
+    newTag: v5.2.0-eks-1-33-3

deploy/kubernetes/overlays/stable/kustomization.yaml

@@ -6,8 +6,8 @@ images:
   - name: public.ecr.aws/efs-csi-driver/amazon/aws-efs-csi-driver
     newTag: v2.1.8
   - name: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe
-    newTag: v2.14.0-eks-1-32-6
+    newTag: v2.15.0-eks-1-33-3
   - name: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar
-    newTag: v2.13.0-eks-1-32-6
+    newTag: v2.13.0-eks-1-33-3
   - name: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner
-    newTag: v5.2.0-eks-1-32-6
+    newTag: v5.2.0-eks-1-33-3

examples/kubernetes/access_points/specs/example.yaml

@@ -67,7 +67,7 @@ metadata:
 spec:
   containers:
   - name: app
-    image: centos:7
+    image: rockylinux:8
     command: ["/bin/sh"]
     args: ["-c", "while true; do echo $(date -u) >> /data-dir1/out.txt; sleep 5; done"]
     volumeMounts:

examples/kubernetes/cross_account_mount/specs/pod-static-prov.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   containers:
   - name: app
-    image: centos:7
+    image: rockylinux:8
     command: ["/bin/sh"]
     args: ["-c", "while true; do echo $(date -u) >> /data/out.txt; sleep 5; done"]
     volumeMounts:

examples/kubernetes/cross_account_mount/specs/pod.yaml

@@ -18,7 +18,7 @@ metadata:
 spec:
   containers:
     - name: app
-      image: centos:7
+      image: rockylinux:8
       command: ["/bin/sh"]
       args: ["-c", "while true; do echo $(date -u) >> /data/out; sleep 5; done"]
       volumeMounts:

examples/kubernetes/dynamic_provisioning/specs/pod.yaml

@@ -18,7 +18,7 @@ metadata:
 spec:
   containers:
     - name: app
-      image: centos:7
+      image: rockylinux:8
       command: ["/bin/sh"]
       args: ["-c", "while true; do echo $(date -u) >> /data/out; sleep 5; done"]
       volumeMounts:

examples/kubernetes/encryption_in_transit/specs/pod.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   containers:
   - name: app
-    image: centos:7
+    image: rockylinux:8
     command: ["/bin/sh"]
     args: ["-c", "while true; do echo $(date -u) >> /data/out.txt; sleep 5; done"]
     volumeMounts: