CLD-906: Update the version of 3rd party images to Resolve High/Critical Severity Vulnerabilities (#162)

* update curlimages/curl version to 8.4.0 to fix hign severity security vulnerability

* update fluent-bit version to 2.1.10 to resolve critical security issue

* update template test for image version change

Author: pengzhouml

README.md

@@ -114,7 +114,7 @@ Following table lists all the parameters supported by the latest MarkLogic Helm
 | `image.tag`                                         | Image tag for MarkLogic image                                                                                                                                                          | `11.0.3-centos-1.0.2`      |
 | `image.pullPolicy`                                  | Image pull policy for MarkLogic image                                                                                                                                                  | `IfNotPresent`             |
 | `initContainerImage.repository`                     | Repository for initContainer image                                                                                                                                                     | `curlimages/curl`          |
-| `initContainerImage.tag`                            | Image tag for initContainer image                                                                                                                                                      | `7.87.0`                   |
+| `initContainerImage.tag`                            | Image tag for initContainer image                                                                                                                                                      | `8.4.0`                    |
 | `initContainerImage.pullPolicy`                     | Pull policy for initContainer image                                                                                                                                                    | `IfNotPresent`             |
 | `imagePullSecrets`                                  | Registry secret names as an array                                                                                                                                                      | `[]`                       |
 | `resources`                                         | The resource requests and limits for MarkLogic container                                                                                                                               | `{}`                       |
@@ -172,7 +172,7 @@ Following table lists all the parameters supported by the latest MarkLogic Helm
 | `startupProbe.failureThreshold`                     | Failure threshold for startup probe                                                                                                                                                    | `30`                       |
 | `startupProbe.successThreshold`                     | Success threshold for startup probe                                                                                                                                                    | `1`                        |
 | `logCollection.enabled`                             | Parameter to enable cluster wide log collection of Marklogic server logs                                                                                                               | `false`                    |
-| `logCollection.image`                               | Image repository and tag for fluent-bit container                                                                                                                                      | `fluent/fluent-bit:2.0.6`  |
+| `logCollection.image`                               | Image repository and tag for fluent-bit container                                                                                                                                      | `fluent/fluent-bit:2.1.10` |
 | `logCollection.resources.requests.cpu`              | The requested cpu resource for the fluent-bit container                                                                                                                                | `100m`                     |
 | `logCollection.resources.requests.memory`           | The requested memory resource for the fluent-bit container                                                                                                                             | `128Mi`                    |
 | `logCollection.resources.limits.cpu`                | The cpu resource limit for the fluent-bit container                                                                                                                                    | `100m`                     |

charts/values.yaml

@@ -34,7 +34,7 @@ image:
 ## Init container image parameters
 initContainerImage:
   repository: curlimages/curl
-  tag: 7.87.0
+  tag: 8.4.0
   pullPolicy: IfNotPresent
 
 ## Configure the imagePullSecrets to pull the image from private repository that requires credential
@@ -282,7 +282,7 @@ startupProbe:
 ## And export them to a logging backend specified in the outputs section below
 logCollection:
   enabled: false
-  image: fluent/fluent-bit:2.0.6
+  image: fluent/fluent-bit:2.1.10
   resources:
     requests:
       cpu: "100m"

test/template/template_test.go

@@ -85,7 +85,7 @@ func TestChartTemplateLogCollection(t *testing.T) {
 
 	// Verify the image matches
 	expectedImage1 := "marklogicdb/marklogic-db:latest"
-	expectedImage2 := "fluent/fluent-bit:2.0.6"
+	expectedImage2 := "fluent/fluent-bit:2.1.10"
 
 	statefulSetContainers := statefulset.Spec.Template.Spec.Containers
 	require.Equal(t, len(statefulSetContainers), 2)