Merge pull request #392 from open-edge-platform/dev/hemanthk/kata_upgrade

Dev/hemanthk/kata upgrade

Author: hemanthsm

.trivyignore

@@ -19,11 +19,6 @@ CVE-2025-58187
 CVE-2025-58188
 CVE-2025-61724
 
-# TODO: Remove once kata-container release with upgraded runc is available.
-CVE-2025-31133
-CVE-2025-52565
-CVE-2025-52881
-
 # TODO: Remove once kata-container release with upgreaded containerd is available
 CVE-2024-25621
 CVE-2025-68121

helm/Makefile

@@ -88,7 +88,6 @@ docker-push: ## Push docker images.
 	@echo "Updating the version of trusted-workload to ${TRUSTED_WORKLOAD_VERSION}"
 	yq eval -i '.appVersion = "${TRUSTED_WORKLOAD_VERSION}"' trusted-workload/Chart.yaml
 	yq eval -i '.version = "${TRUSTED_WORKLOAD_VERSION}"' trusted-workload/Chart.yaml
-	yq eval -i '.image.tag = "${KATA_DEPLOY_VERSION}"' trusted-workload/charts/cc-runtimeclass/values.yaml
 
 helm-build-%:
 	rm -rf ${HELM_CHART_BUILD_DIR}$*.tgz;

helm/attestation-verifier/charts/trustagent/templates/daemonset-suefi.yaml

@@ -39,6 +39,7 @@ metadata:
           args:
             - >
               chown -R 503:500 /opt/verifier/* && chmod -R 751 /opt/verifier/*
+              chown -R 0:500 /opt/kata/*
           securityContext:
             runAsUser: 0
             privileged: false

helm/trusted-workload/Chart.yaml

@@ -27,12 +27,6 @@ version: 1.4.9-dev
 appVersion: "1.4.9-dev"
 
 dependencies:
-  - name: cc-operator
-    version: 0.1.0
-    repository: file://./charts/cc-operator
-  - name: cc-runtimeclass
-    version: 0.1.0
-    repository: file://./charts/cc-runtimeclass
   - name: nri-device-injector
     version: 0.1.0
     repository: file://./charts/nri-device-injector