Update kube-bench version (#189)

castai · Nov 16, 2023 · 494bb65 · 494bb65
1 parent 6224592
commit 494bb65
Show file tree

Hide file tree

Showing 7 changed files with 9 additions and 6 deletions.
diff --git a/charts/castai-kvisor/values.yaml b/charts/castai-kvisor/values.yaml
@@ -26,7 +26,7 @@ imageScanSecret: ""
 
 # Controls `deployment.spec.strategy` field
 updateStrategy:
-  type: Recreate
+  type: RollingUpdate
 
 policyEnforcement:
   enabled: false

diff --git a/linters/kubebench/spec/aks.go b/linters/kubebench/spec/aks.go
@@ -29,7 +29,7 @@ func AKS(nodeName, jobName string) *batchv1.Job {
 					Containers: []corev1.Container{
 						{
 							Name:  "kube-bench",
-							Image: "ghcr.io/castai/kvisor/kube-bench:v0.7.0",
+							Image: kubeBenchImage,
 							SecurityContext: &corev1.SecurityContext{
 								ReadOnlyRootFilesystem:   lo.ToPtr(true),
 								AllowPrivilegeEscalation: lo.ToPtr(false),

diff --git a/linters/kubebench/spec/common.go b/linters/kubebench/spec/common.go
@@ -0,0 +1,3 @@
+package spec
+
+const kubeBenchImage = "ghcr.io/castai/kvisor/kube-bench:v0.8.0"
diff --git a/linters/kubebench/spec/eks.go b/linters/kubebench/spec/eks.go
@@ -29,7 +29,7 @@ func EKS(nodeName, jobName string) *batchv1.Job {
 					Containers: []corev1.Container{
 						{
 							Name:  "kube-bench",
-							Image: "ghcr.io/castai/kvisor/kube-bench:v0.7.0",
+							Image: kubeBenchImage,
 							SecurityContext: &corev1.SecurityContext{
 								ReadOnlyRootFilesystem:   lo.ToPtr(true),
 								AllowPrivilegeEscalation: lo.ToPtr(false),

diff --git a/linters/kubebench/spec/gke.go b/linters/kubebench/spec/gke.go
@@ -29,7 +29,7 @@ func GKE(nodeName, jobName string) *batchv1.Job {
 					Containers: []corev1.Container{
 						{
 							Name:  "kube-bench",
-							Image: "ghcr.io/castai/kvisor/kube-bench:v0.7.0",
+							Image: kubeBenchImage,
 							SecurityContext: &corev1.SecurityContext{
 								ReadOnlyRootFilesystem:   lo.ToPtr(true),
 								AllowPrivilegeEscalation: lo.ToPtr(false),

diff --git a/linters/kubebench/spec/master.go b/linters/kubebench/spec/master.go
@@ -44,7 +44,7 @@ func Master(nodeName, jobName string) *batchv1.Job {
 					Containers: []corev1.Container{
 						{
 							Name:  "kube-bench",
-							Image: "ghcr.io/castai/kvisor/kube-bench:v0.7.0",
+							Image: kubeBenchImage,
 							SecurityContext: &corev1.SecurityContext{
 								ReadOnlyRootFilesystem:   lo.ToPtr(true),
 								AllowPrivilegeEscalation: lo.ToPtr(false),

diff --git a/linters/kubebench/spec/node.go b/linters/kubebench/spec/node.go
@@ -29,7 +29,7 @@ func Node(nodeName, jobName string) *batchv1.Job {
 					Containers: []corev1.Container{
 						{
 							Name:  "kube-bench",
-							Image: "ghcr.io/castai/kvisor/kube-bench:v0.7.0",
+							Image: kubeBenchImage,
 							SecurityContext: &corev1.SecurityContext{
 								ReadOnlyRootFilesystem:   lo.ToPtr(true),
 								AllowPrivilegeEscalation: lo.ToPtr(false),
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		package spec

		const kubeBenchImage = "ghcr.io/castai/kvisor/kube-bench:v0.8.0"