chore(argo-cd): upgrade Dex to 2.35 to avoid CVE-2022-39222 (#1507)

* chore(argo-cd): upgrade Dex to 2.35 to avoid CVE-2022-39222

Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>

* update image tag

Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>

Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>
main argo-cd-5.5.8
Michael Crenshaw 2022-10-03 20:58:12 -04:00 committed by GitHub
parent 0b5ab6da18
commit 332173bd77
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 5 additions and 5 deletions

View File

@ -1,8 +1,8 @@
apiVersion: v2
appVersion: v2.4.12
appVersion: v2.4.13
description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
name: argo-cd
version: 5.5.7
version: 5.5.8
home: https://github.com/argoproj/argo-helm
icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png
sources:
@ -22,4 +22,4 @@ dependencies:
condition: redis-ha.enabled
annotations:
artifacthub.io/changes: |
- "[Fixed]: v5.5.0 Upgrade guide heading in README"
- "[Fixed]: Upgrade Dex to v2.35.0 to avoid CVE-2022-39222 and update app version to v2.4.13"

View File

@ -699,7 +699,7 @@ NAME: my-release
| dex.extraContainers | list | `[]` | Additional containers to be added to the dex pod |
| dex.image.imagePullPolicy | string | `""` (defaults to global.image.imagePullPolicy) | Dex imagePullPolicy |
| dex.image.repository | string | `"ghcr.io/dexidp/dex"` | Dex image repository |
| dex.image.tag | string | `"v2.32.0"` | Dex image tag |
| dex.image.tag | string | `"v2.35.0-distroless"` | Dex image tag |
| dex.imagePullSecrets | list | `[]` | Secrets with credentials to pull images from a private registry |
| dex.initContainers | list | `[]` | Init containers to add to the dex pod |
| dex.initImage.imagePullPolicy | string | `""` (defaults to global.image.imagePullPolicy) | Argo CD init image imagePullPolicy |

View File

@ -687,7 +687,7 @@ dex:
# -- Dex image repository
repository: ghcr.io/dexidp/dex
# -- Dex image tag
tag: v2.32.0
tag: v2.35.0-distroless
# -- Dex imagePullPolicy
# @default -- `""` (defaults to global.image.imagePullPolicy)
imagePullPolicy: ""