OPSEXP-2403 Bump tags to fix activemq CVE-2023-46604 (#155)

Alfresco · Nov 20, 2023 · d6a8b9b · d6a8b9b
1 parent 36f8290
commit d6a8b9b
Show file tree

Hide file tree

Showing 20 changed files with 54 additions and 75 deletions.
diff --git a/charts/activemq/Chart.yaml b/charts/activemq/Chart.yaml
@@ -7,8 +7,8 @@ keywords:
 name: activemq
 sources:
   - https://github.com/Alfresco/alfresco-helm-charts
-version: 3.4.0
-appVersion: 5.17.5
+version: 3.4.1
+appVersion: 5.18.3
 dependencies:
   - name: alfresco-common
     version: 3.0.0

diff --git a/charts/activemq/README.md b/charts/activemq/README.md
@@ -1,6 +1,6 @@
 # activemq
 
-![Version: 3.4.0](https://img.shields.io/badge/Version-3.4.0-informational?style=flat-square) ![AppVersion: 5.17.5](https://img.shields.io/badge/AppVersion-5.17.5-informational?style=flat-square)
+![Version: 3.4.1](https://img.shields.io/badge/Version-3.4.1-informational?style=flat-square) ![AppVersion: 5.18.3](https://img.shields.io/badge/AppVersion-5.18.3-informational?style=flat-square)
 
 A Helm chart providing a basic Apache ActiveMQ deployment required to evaluate ACS (not meant to be used in production).
 

diff --git a/charts/alfresco-ai-transformer/Chart.yaml b/charts/alfresco-ai-transformer/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: alfresco-ai-transformer
 description: A Helm chart for deploying Alfresco ai transformer service
 type: application
-version: 0.4.0
-appVersion: 3.0.0
+version: 0.4.1
+appVersion: 3.0.1
 dependencies:
   - name: alfresco-common
     version: 2.1.0

diff --git a/charts/alfresco-ai-transformer/README.md b/charts/alfresco-ai-transformer/README.md
@@ -1,6 +1,6 @@
 # alfresco-ai-transformer
 
-![Version: 0.4.0](https://img.shields.io/badge/Version-0.4.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 3.0.0](https://img.shields.io/badge/AppVersion-3.0.0-informational?style=flat-square)
+![Version: 0.4.1](https://img.shields.io/badge/Version-0.4.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 3.0.1](https://img.shields.io/badge/AppVersion-3.0.1-informational?style=flat-square)
 
 A Helm chart for deploying Alfresco ai transformer service
 
@@ -26,7 +26,7 @@ A Helm chart for deploying Alfresco ai transformer service
 | image.internalPort | int | `8090` |  |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | image.repository | string | `"quay.io/alfresco/alfresco-ai-docker-engine"` |  |
-| image.tag | string | `"3.0.0"` |  |
+| image.tag | string | `"3.0.1"` |  |
 | livenessProbe.initialDelaySeconds | int | `10` |  |
 | livenessProbe.livenessPercent | int | `400` |  |
 | livenessProbe.livenessTransformPeriodSeconds | int | `600` |  |

diff --git a/charts/alfresco-ai-transformer/values.yaml b/charts/alfresco-ai-transformer/values.yaml
@@ -8,7 +8,7 @@ replicaCount: 2
 nodeSelector: {}
 image:
   repository: quay.io/alfresco/alfresco-ai-docker-engine
-  tag: 3.0.0
+  tag: 3.0.1
   pullPolicy: IfNotPresent
   internalPort: 8090
 service:

diff --git a/charts/alfresco-repository/Chart.yaml b/charts/alfresco-repository/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: alfresco-repository
 description: Alfresco content repository Helm chart
 type: application
-version: 0.1.0
-appVersion: 23.1.0
+version: 0.1.1
+appVersion: 23.1.1
 dependencies:
   - name: alfresco-common
     version: 3.0.0

diff --git a/charts/alfresco-repository/README.md b/charts/alfresco-repository/README.md
@@ -1,6 +1,6 @@
 # alfresco-repository
 
-![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 23.1.0](https://img.shields.io/badge/AppVersion-23.1.0-informational?style=flat-square)
+![Version: 0.1.1](https://img.shields.io/badge/Version-0.1.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 23.1.1](https://img.shields.io/badge/AppVersion-23.1.1-informational?style=flat-square)
 
 Alfresco content repository Helm chart
 
@@ -77,7 +77,7 @@ Alfresco content repository Helm chart
 | image.port | int | `8080` |  |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | image.repository | string | `"quay.io/alfresco/alfresco-content-repository"` |  |
-| image.tag | string | `"23.1.0"` |  |
+| image.tag | string | `"23.1.1"` |  |
 | imagePullSecrets | list | `[]` |  |
 | ingress.annotations | object | `{"nginx.ingress.kubernetes.io/affinity":"cookie","nginx.ingress.kubernetes.io/proxy-body-size":"5g","nginx.ingress.kubernetes.io/session-cookie-hash":"sha1","nginx.ingress.kubernetes.io/session-cookie-name":"alfrescoRepo"}` | provide annotations for nginx ingress (no toher ingress is supported at that point) |
 | ingress.enabled | bool | `true` | Toggle ingress |

diff --git a/charts/alfresco-repository/values.yaml b/charts/alfresco-repository/values.yaml
@@ -1,24 +1,19 @@
 # Default values for alfresco-repository.
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
-
 replicaCount: 1
-
 image:
   repository: quay.io/alfresco/alfresco-content-repository
   pullPolicy: IfNotPresent
-  tag: 23.1.0
+  tag: 23.1.1
   port: 8080
-
 strategy:
   type: RollingUpdate
   rollingUpdate:
     maxSurge: 1
     maxUnavailable: 0
-
 # -- How long to wait for tomcat to complete shutdown before killing it
 terminationGracePeriod: 60
-
 configuration:
   repository:
     # -- a configmap containing the "alfresco-global.properties" key populated
@@ -178,7 +173,6 @@ environment:
   # -- Set JVM options
   JAVA_OPTS: >-
     -XX:MaxRAMPercentage=80
-
 persistence:
   # -- Persist Contentsotre data
   enabled: false
@@ -193,11 +187,9 @@ persistence:
   data:
     mountPath: /usr/local/tomcat/alf_data
     subPath: alfresco-content-services/repository-data
-
 imagePullSecrets: []
 nameOverride: ""
 fullnameOverride: ""
-
 serviceAccount:
   # Specifies whether a service account should be created
   create: true
@@ -206,22 +198,17 @@ serviceAccount:
   # The name of the service account to use.
   # If not set and create is true, a name is generated using the fullname template
   name: "alfresco-repo-sa"
-
 podAnnotations: {}
-
 podSecurityContext:
   runAsNonRoot: true
   runAsUser: 33000
   runAsGroup: 1000
   fsGroup: 1000
-
 securityContext: {}
-
 service:
   name: repository
   type: ClusterIP
   port: 80
-
 ingress:
   # -- Toggle ingress
   enabled: true
@@ -242,15 +229,13 @@ ingress:
   #  - secretName: chart-example-tls
   #    hosts:
   #      - chart-example.local
-
 resources:
   requests:
     cpu: "250m"
     memory: "2Gi"
   limits:
     cpu: "4"
     memory: "8Gi"
-
 startupProbe:
   periodSeconds: 20
   failureThreshold: 9
@@ -270,28 +255,22 @@ livenessProbe:
   httpGet:
     path: /alfresco/api/-default-/public/alfresco/versions/1/probes/-live-
     port: http
-
 extraVolumes: []
 extraVolumeMounts: []
 extraSideContainers: []
 extraInitContainers: []
 command: []
 args: []
-
 nodeSelector: {}
-
 tolerations: []
-
 affinity: {}
-
 global:
   # -- If a private image registry a secret can be defined and passed to
   # kubernetes, see:
   # https://github.com/Alfresco/acs-deployment/blob/a924ad6670911f64f1bba680682d266dd4ea27fb/docs/helm/eks-deployment.md#docker-registry-secret
   alfrescoRegistryPullSecrets: quay-registry-secret
   # -- a fallback for .Values.known_urls that can be shared between charts
-  known_urls:
-
+  known_urls: null
 tags:
   # -- A chart tag used for Hyland's CI purpose. Do not set it to true.
   ci: false
diff --git a/charts/alfresco-search-enterprise/Chart.yaml b/charts/alfresco-search-enterprise/Chart.yaml
@@ -3,8 +3,8 @@ apiVersion: v2
 name: alfresco-search-enterprise
 description: A Helm chart for deploying Alfresco Elasticsearch connector
 type: application
-version: 3.0.1
-appVersion: 4.0.0
+version: 3.0.2
+appVersion: 4.0.0.1
 dependencies:
   - name: alfresco-common
     version: 3.0.0

diff --git a/charts/alfresco-search-enterprise/README.md b/charts/alfresco-search-enterprise/README.md
@@ -1,6 +1,6 @@
 # alfresco-search-enterprise
 
-![Version: 3.0.1](https://img.shields.io/badge/Version-3.0.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.0.0](https://img.shields.io/badge/AppVersion-4.0.0-informational?style=flat-square)
+![Version: 3.0.2](https://img.shields.io/badge/Version-3.0.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.0.0.1](https://img.shields.io/badge/AppVersion-4.0.0.1-informational?style=flat-square)
 
 A Helm chart for deploying Alfresco Elasticsearch connector
 
@@ -32,18 +32,18 @@ Please refer to the [documentation](https://github.com/Alfresco/acs-deployment/b
 | indexName | string | `"alfresco"` | Name of the existing search index, usually created by repo |
 | liveIndexing.content.image.pullPolicy | string | `"IfNotPresent"` |  |
 | liveIndexing.content.image.repository | string | `"quay.io/alfresco/alfresco-elasticsearch-live-indexing-content"` |  |
-| liveIndexing.content.image.tag | string | `"4.0.0"` |  |
+| liveIndexing.content.image.tag | string | `"4.0.0.1"` |  |
 | liveIndexing.content.replicaCount | int | `1` |  |
 | liveIndexing.mediation.image.pullPolicy | string | `"IfNotPresent"` |  |
 | liveIndexing.mediation.image.repository | string | `"quay.io/alfresco/alfresco-elasticsearch-live-indexing-mediation"` |  |
-| liveIndexing.mediation.image.tag | string | `"4.0.0"` |  |
+| liveIndexing.mediation.image.tag | string | `"4.0.0.1"` |  |
 | liveIndexing.metadata.image.pullPolicy | string | `"IfNotPresent"` |  |
 | liveIndexing.metadata.image.repository | string | `"quay.io/alfresco/alfresco-elasticsearch-live-indexing-metadata"` |  |
-| liveIndexing.metadata.image.tag | string | `"4.0.0"` |  |
+| liveIndexing.metadata.image.tag | string | `"4.0.0.1"` |  |
 | liveIndexing.metadata.replicaCount | int | `1` |  |
 | liveIndexing.path.image.pullPolicy | string | `"IfNotPresent"` |  |
 | liveIndexing.path.image.repository | string | `"quay.io/alfresco/alfresco-elasticsearch-live-indexing-path"` |  |
-| liveIndexing.path.image.tag | string | `"4.0.0"` |  |
+| liveIndexing.path.image.tag | string | `"4.0.0.1"` |  |
 | liveIndexing.path.replicaCount | int | `1` |  |
 | messageBroker.existingConfigMap.keys.url | string | `"BROKER_URL"` | Key within the configmap holding the URL of the message broker |
 | messageBroker.existingConfigMap.name | string | `nil` | Alternatively, provide message broker connection details via an existing configmap |
@@ -67,7 +67,7 @@ Please refer to the [documentation](https://github.com/Alfresco/acs-deployment/b
 | reindexing.enabled | bool | `true` | Create the one-shot job to trigger the reindexing of repo contents |
 | reindexing.image.pullPolicy | string | `"IfNotPresent"` |  |
 | reindexing.image.repository | string | `"quay.io/alfresco/alfresco-elasticsearch-reindexing"` |  |
-| reindexing.image.tag | string | `"4.0.0"` |  |
+| reindexing.image.tag | string | `"4.0.0.1"` |  |
 | reindexing.initcontainers.waitForRepository.resources.limits.cpu | string | `"0.25"` |  |
 | reindexing.initcontainers.waitForRepository.resources.limits.memory | string | `"10Mi"` |  |
 | reindexing.pathIndexingEnabled | bool | `true` |  |

diff --git a/charts/alfresco-search-enterprise/values.yaml b/charts/alfresco-search-enterprise/values.yaml
@@ -26,32 +26,32 @@ liveIndexing:
     image:
       repository: >-
         quay.io/alfresco/alfresco-elasticsearch-live-indexing-mediation
-      tag: 4.0.0
+      tag: 4.0.0.1
       pullPolicy: IfNotPresent
   content:
     image:
       repository: quay.io/alfresco/alfresco-elasticsearch-live-indexing-content
-      tag: 4.0.0
+      tag: 4.0.0.1
       pullPolicy: IfNotPresent
     replicaCount: 1
   metadata:
     image:
       repository: quay.io/alfresco/alfresco-elasticsearch-live-indexing-metadata
-      tag: 4.0.0
+      tag: 4.0.0.1
       pullPolicy: IfNotPresent
     replicaCount: 1
   path:
     image:
       repository: quay.io/alfresco/alfresco-elasticsearch-live-indexing-path
-      tag: 4.0.0
+      tag: 4.0.0.1
       pullPolicy: IfNotPresent
     replicaCount: 1
 reindexing:
   # -- Create the one-shot job to trigger the reindexing of repo contents
   enabled: true
   image:
     repository: quay.io/alfresco/alfresco-elasticsearch-reindexing
-    tag: 4.0.0
+    tag: 4.0.0.1
     pullPolicy: IfNotPresent
   pathIndexingEnabled: true
   repository:

diff --git a/charts/alfresco-share/Chart.yaml b/charts/alfresco-share/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: alfresco-share
 description: Alfresco Share Helm chart for Kubernetes
 type: application
-version: 0.2.0
-appVersion: 23.1.0
+version: 0.2.1
+appVersion: 23.1.1
 dependencies:
   - repository: https://alfresco.github.io/alfresco-helm-charts
     version: 2.1.0

diff --git a/charts/alfresco-share/README.md b/charts/alfresco-share/README.md
@@ -1,6 +1,6 @@
 # alfresco-share
 
-![Version: 0.2.0](https://img.shields.io/badge/Version-0.2.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 23.1.0](https://img.shields.io/badge/AppVersion-23.1.0-informational?style=flat-square)
+![Version: 0.2.1](https://img.shields.io/badge/Version-0.2.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 23.1.1](https://img.shields.io/badge/AppVersion-23.1.1-informational?style=flat-square)
 
 Alfresco Share Helm chart for Kubernetes
 
@@ -28,7 +28,7 @@ Alfresco Share Helm chart for Kubernetes
 | image.port | int | `8080` | Internal port where the pod is listening. Should only be changed is you use a custom image which uses a different port. |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | image.repository | string | `"quay.io/alfresco/alfresco-share"` |  |
-| image.tag | string | `"23.1.0"` |  |
+| image.tag | string | `"23.1.1"` |  |
 | imagePullSecrets | list | `[]` |  |
 | ingress.annotations."nginx.ingress.kubernetes.io/affinity" | string | `"cookie"` |  |
 | ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" | string | `"5g"` |  |

diff --git a/charts/alfresco-share/values.yaml b/charts/alfresco-share/values.yaml
@@ -20,7 +20,7 @@ repository:
 known_urls: null
 image:
   repository: quay.io/alfresco/alfresco-share
-  tag: 23.1.0
+  tag: 23.1.1
   pullPolicy: IfNotPresent
   # -- Internal port where the pod is listening. Should only be changed is you
   # use a custom image which uses a different port.

diff --git a/charts/alfresco-sync-service/Chart.yaml b/charts/alfresco-sync-service/Chart.yaml
@@ -8,8 +8,8 @@ keywords:
 name: alfresco-sync-service
 sources:
   - https://github.com/Alfresco/acs-deployment
-version: 4.5.0
-appVersion: 4.0.0
+version: 4.5.1
+appVersion: 4.0.1
 icon: https://avatars0.githubusercontent.com/u/391127?s=200&v=4
 dependencies:
   - name: alfresco-common

diff --git a/charts/alfresco-sync-service/README.md b/charts/alfresco-sync-service/README.md
@@ -1,6 +1,6 @@
 # alfresco-sync-service
 
-![Version: 4.5.0](https://img.shields.io/badge/Version-4.5.0-informational?style=flat-square) ![AppVersion: 4.0.0](https://img.shields.io/badge/AppVersion-4.0.0-informational?style=flat-square)
+![Version: 4.5.1](https://img.shields.io/badge/Version-4.5.1-informational?style=flat-square) ![AppVersion: 4.0.1](https://img.shields.io/badge/AppVersion-4.0.1-informational?style=flat-square)
 
 Alfresco Sync Service
 
@@ -39,7 +39,7 @@ Alfresco Sync Service
 | image.internalPort | int | `9090` |  |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | image.repository | string | `"quay.io/alfresco/service-sync"` |  |
-| image.tag | string | `"4.0.0"` |  |
+| image.tag | string | `"4.0.1"` |  |
 | ingress.extraAnnotations | object | `{}` | useful when running Sync service without SSL termination done by a load balancer, e.g. when ran on Minikube for testing purposes nginx.ingress.kubernetes.io/ssl-redirect: "false" |
 | ingress.path | string | `"/syncservice"` |  |
 | ingress.tls | list | `[]` |  |

diff --git a/charts/alfresco-sync-service/values.yaml b/charts/alfresco-sync-service/values.yaml
@@ -24,7 +24,7 @@ podSecurityContext:
   fsGroup: 1000
 image:
   repository: quay.io/alfresco/service-sync
-  tag: 4.0.0
+  tag: 4.0.1
   pullPolicy: IfNotPresent
   internalPort: 9090
 environment:

diff --git a/charts/alfresco-transform-service/Chart.yaml b/charts/alfresco-transform-service/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: alfresco-transform-service
 description: A Helm chart for deploying Alfresco Transform Services
 type: application
-version: 0.3.1
-appVersion: 4.0.0
+version: 0.3.2
+appVersion: 4.0.1
 dependencies:
   - name: alfresco-common
     version: 2.1.0