fix(container): update image ghcr.io/crowdsecurity/crowdsec to v1.7.7#1462
Merged
fix(container): update image ghcr.io/crowdsecurity/crowdsec to v1.7.7#1462
Conversation
roybatty-bot
bot
added
area/kubernetes
size/XS
Contributor
Author
|
Path: @@ -10,8 +10,8 @@
version: v1
type: Opaque
data:
- csLapiSecret: WSsveG1HdWYgd2NlISpAK3YoOmE4L3dVPGIxVl1gM05dOVAwXyx9dShpcj5KbzJvdG84USllVXFZXmFkJjE9SA==
- registrationToken: YzN2R2dSSklPajJQMm9Ea2ZmOUJXczZSWE8zNUpraDN6VVJoZHFHa3JyajZuRVFl
+ csLapiSecret: XmUsPyR7LyJtIDhyQWBpQC84cz58a0FSayRWKndCLi5HfmAuPTwwZTsrJCwkIDdlTUxCdFhOMTh2XiRfPTJbOg==
+ registrationToken: NzRzQ1lVTER1ejM5M0E4OGRrOU5nU1NQQVRzeDdkWjF6SDluc283SjZiNzdGQ1hQ
---
# Source: crowdsec/templates/acquis-configmap.yaml
apiVersion: v1
@@ -493,7 +493,7 @@
spec:
initContainers:
- name: wait-for-lapi-and-register
- image: "ghcr.io/crowdsecurity/crowdsec:v1.7.6"
+ image: "ghcr.io/crowdsecurity/crowdsec:v1.7.7"
imagePullPolicy: IfNotPresent
command: ['sh', '-c', 'until nc "$LAPI_HOST" "$LAPI_PORT" -z; do echo waiting for lapi to start; sleep 5; done; ln -s /staging/etc/crowdsec /etc/crowdsec && cscli lapi register --machine "$USERNAME" -u "$LAPI_URL" --token "$REGISTRATION_TOKEN" && cp /etc/crowdsec/local_api_credentials.yaml /tmp_config/local_api_credentials.yaml']
resources:
@@ -526,7 +526,7 @@
value: "8080"
containers:
- name: crowdsec-agent
- image: "ghcr.io/crowdsecurity/crowdsec:v1.7.6"
+ image: "ghcr.io/crowdsecurity/crowdsec:v1.7.7"
imagePullPolicy: IfNotPresent
command: ['sh', '-c', 'cp /tmp_config/local_api_credentials.yaml /staging/etc/crowdsec/local_api_credentials.yaml && mv -n /staging/etc/crowdsec/* /etc/crowdsec_data/ && rm -rf /staging/etc/crowdsec && ln -s /etc/crowdsec_data /etc/crowdsec && ./docker_start.sh']
env:
@@ -616,7 +616,7 @@
template:
metadata:
annotations:
- checksum/lapi-secret: 144d9eaf3c65c3fbd570d815b5f9f3045fd04d4b90bf18382c17f85540935bae
+ checksum/lapi-secret: 4a541dfc08c27d68a066d8aed5e08ab48d39009287c7010a6a2bf64189cea838
checksum/lapi-configmap: fb931458352e77a792e597dd3ee4409d4c62939d87c1b75448226a73aaafc4a6
labels:
k8s-app: crowdsec
@@ -625,7 +625,7 @@
spec:
containers:
- name: crowdsec-lapi
- image: "ghcr.io/crowdsecurity/crowdsec:v1.7.6"
+ image: "ghcr.io/crowdsecurity/crowdsec:v1.7.7"
imagePullPolicy: IfNotPresent
env:
- name: LOCAL_API_URL |
|
KICS version: v2.1.20
|
Contributor
Author
✅
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| ✅ REPOSITORY | git_diff | yes | no | no | 0.25s | |
| ✅ REPOSITORY | secretlint | yes | no | no | 1.32s | |
| prettier | 1 | 1 | 2 | 0.44s | ||
| ✅ YAML | yamllint | 1 | 0 | 0 | 0.65s |
Detailed Issues
⚠️ YAML / prettier - 1 error
Checking formatting...
[warn] cluster/apps/security/crowdsec/app/helm-release.yaml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff
Show us your support by starring ⭐ the repository
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.7.6→v1.7.7Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
crowdsecurity/crowdsec (ghcr.io/crowdsecurity/crowdsec)
v1.7.7Compare Source
CrowdSec 1.7.7 brings 2 major changes:
RE2 by default on linux
CrowdsSec has supported for a long time using RE2 as the regexp engine, and with this release we make it the default.
CrowdSec has always used the builtin Go regexp package, which is a Go reimplementation of the RE2 library, but with known performance limitations.
The switch to RE2 will bring significantly increased regexp performance (one of the most critical part of CrowdSec) at the cost of slightly longer regexp compilation and higher baseline memory usage.
Other changes
Other notable changes include:
kindattribute for alerts used to identify its source (a scenario, a WAF rule, a manual decision creation, ...)cscli allowlist importcommandHTTP_PROXYenvironment variable in thenotification-httppluginFull changelog
New Features
Improvements
kindalert attribute (#4351) @blotusBug Fixes
Changes
Chore / Deps
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.