From 5d4ad07622d33e7c4ee98660dcfa4dcfe3155b57 Mon Sep 17 00:00:00 2001 From: Justin Mondal Date: Wed, 13 Aug 2025 15:35:20 +0000 Subject: [PATCH] Update sidecar versions to help resolve security risks --- charts/aws-efs-csi-driver/values.yaml | 6 +++--- deploy/kubernetes/base/controller-deployment.yaml | 4 ++-- deploy/kubernetes/base/node-daemonset.yaml | 4 ++-- deploy/kubernetes/overlays/stable/ecr/kustomization.yaml | 6 +++--- deploy/kubernetes/overlays/stable/kustomization.yaml | 6 +++--- 5 files changed, 13 insertions(+), 13 deletions(-) diff --git a/charts/aws-efs-csi-driver/values.yaml b/charts/aws-efs-csi-driver/values.yaml index 0029b93d4..629fc2e40 100644 --- a/charts/aws-efs-csi-driver/values.yaml +++ b/charts/aws-efs-csi-driver/values.yaml @@ -18,7 +18,7 @@ sidecars: livenessProbe: image: repository: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe - tag: v2.15.0-eks-1-33-3 + tag: v2.15.0-eks-1-33-9 pullPolicy: IfNotPresent resources: {} securityContext: @@ -27,7 +27,7 @@ sidecars: nodeDriverRegistrar: image: repository: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar - tag: v2.13.0-eks-1-33-3 + tag: v2.13.0-eks-1-33-9 pullPolicy: IfNotPresent resources: {} securityContext: @@ -36,7 +36,7 @@ sidecars: csiProvisioner: image: repository: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner - tag: v5.2.0-eks-1-33-3 + tag: v5.2.0-eks-1-33-9 pullPolicy: IfNotPresent resources: {} securityContext: diff --git a/deploy/kubernetes/base/controller-deployment.yaml b/deploy/kubernetes/base/controller-deployment.yaml index 629fab549..ba6b58d82 100644 --- a/deploy/kubernetes/base/controller-deployment.yaml +++ b/deploy/kubernetes/base/controller-deployment.yaml @@ -69,7 +69,7 @@ spec: periodSeconds: 10 failureThreshold: 5 - name: csi-provisioner - image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.2.0-eks-1-33-3 + image: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v5.2.0-eks-1-33-9 imagePullPolicy: IfNotPresent args: - --csi-address=$(ADDRESS) @@ -89,7 +89,7 @@ spec: allowPrivilegeEscalation: false readOnlyRootFilesystem: true - name: liveness-probe - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.15.0-eks-1-33-3 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.15.0-eks-1-33-9 imagePullPolicy: IfNotPresent args: - --csi-address=/csi/csi.sock diff --git a/deploy/kubernetes/base/node-daemonset.yaml b/deploy/kubernetes/base/node-daemonset.yaml index b5fb9218d..15deaee8a 100644 --- a/deploy/kubernetes/base/node-daemonset.yaml +++ b/deploy/kubernetes/base/node-daemonset.yaml @@ -91,7 +91,7 @@ spec: periodSeconds: 2 failureThreshold: 5 - name: csi-driver-registrar - image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.13.0-eks-1-33-3 + image: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.13.0-eks-1-33-9 imagePullPolicy: IfNotPresent args: - --csi-address=$(ADDRESS) @@ -115,7 +115,7 @@ spec: allowPrivilegeEscalation: false readOnlyRootFilesystem: true - name: liveness-probe - image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.15.0-eks-1-33-3 + image: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.15.0-eks-1-33-9 imagePullPolicy: IfNotPresent args: - --csi-address=/csi/csi.sock diff --git a/deploy/kubernetes/overlays/stable/ecr/kustomization.yaml b/deploy/kubernetes/overlays/stable/ecr/kustomization.yaml index 363cff38e..a3a81c757 100644 --- a/deploy/kubernetes/overlays/stable/ecr/kustomization.yaml +++ b/deploy/kubernetes/overlays/stable/ecr/kustomization.yaml @@ -8,10 +8,10 @@ images: newTag: v2.1.10 - name: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe newName: 602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/livenessprobe - newTag: v2.15.0-eks-1-33-3 + newTag: v2.15.0-eks-1-33-9 - name: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar newName: 602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/csi-node-driver-registrar - newTag: v2.13.0-eks-1-33-3 + newTag: v2.13.0-eks-1-33-9 - name: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner newName: 602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/csi-provisioner - newTag: v5.2.0-eks-1-33-3 + newTag: v5.2.0-eks-1-33-9 diff --git a/deploy/kubernetes/overlays/stable/kustomization.yaml b/deploy/kubernetes/overlays/stable/kustomization.yaml index 068b9bacf..f74934edf 100644 --- a/deploy/kubernetes/overlays/stable/kustomization.yaml +++ b/deploy/kubernetes/overlays/stable/kustomization.yaml @@ -6,8 +6,8 @@ images: - name: public.ecr.aws/efs-csi-driver/amazon/aws-efs-csi-driver newTag: v2.1.10 - name: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe - newTag: v2.15.0-eks-1-33-3 + newTag: v2.15.0-eks-1-33-9 - name: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar - newTag: v2.13.0-eks-1-33-3 + newTag: v2.13.0-eks-1-33-9 - name: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner - newTag: v5.2.0-eks-1-33-3 + newTag: v5.2.0-eks-1-33-9