From 196ad735a2276bcb69ae868331029476b53dc58d Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 11 Nov 2026 02:36:21 +0000 Subject: [PATCH] chore(deps): update docker.io/badouralix/curl-jq docker digest to 7f3c18b --- .github/workflows/validate-coroot-security-progress.yaml | 2 +- .../cron-job-cronjob-failure-alert.yaml | 2 +- .../cron-job-velero-maintenance-oom-alert.yaml | 2 +- .../controllers/coroot/cron-job-cnpg-degraded-alert.yaml | 2 +- .../coroot/cron-job-crossplane-provider-unhealthy-alert.yaml | 2 +- .../controllers/coroot/cron-job-posture-staleness-alert.yaml | 2 +- .../coroot/cron-job-stranded-volume-attach-alert.yaml | 2 +- .../controllers/prune-protected-orphan-alert/cron-job.yaml | 2 +- .../coroot/components/security-progress/cron-job.yaml | 2 +- .../infrastructure/coroot/cron-job-alert-autosuppressor.yaml | 2 +- .../coroot/cron-job-application-health-reconciler.yaml | 2 +- .../infrastructure/coroot/cron-job-crossplane-sync-alerter.yaml | 2 +- .../infrastructure/coroot/cron-job-custom-cloud-pricing.yaml | 2 +- .../coroot/cron-job-risk-acceptance-reconciler.yaml | 2 +- .../coroot/cron-job-stranded-autoscaler-node-alerter.yaml | 2 +- 15 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/validate-coroot-security-progress.yaml b/.github/workflows/validate-coroot-security-progress.yaml index 8591d9967..eab7e839e 100644 --- a/.github/workflows/validate-coroot-security-progress.yaml +++ b/.github/workflows/validate-coroot-security-progress.yaml @@ -93,7 +93,7 @@ jobs: - name: Exercise the reconciler toolchain and Prometheus configuration shell: bash env: - RECONCILER_IMAGE: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + RECONCILER_IMAGE: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 PROMETHEUS_IMAGE: ghcr.io/coroot/prometheus:2.55.1-ubi9-0@sha256:c2a4f92f728411b834b7abd07764cf587e28749c377b157443569dea4f81f833 run: | set -euo pipefail diff --git a/k8s/bases/components/coroot-cronjob-failure-alert/cron-job-cronjob-failure-alert.yaml b/k8s/bases/components/coroot-cronjob-failure-alert/cron-job-cronjob-failure-alert.yaml index 34b12955b..62db1719d 100644 --- a/k8s/bases/components/coroot-cronjob-failure-alert/cron-job-cronjob-failure-alert.yaml +++ b/k8s/bases/components/coroot-cronjob-failure-alert/cron-job-cronjob-failure-alert.yaml @@ -80,7 +80,7 @@ spec: type: RuntimeDefault containers: - name: check - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent env: # Space-separated namespace/name:failure-threshold:stale-seconds diff --git a/k8s/bases/components/coroot-velero-maintenance-oom-alert/cron-job-velero-maintenance-oom-alert.yaml b/k8s/bases/components/coroot-velero-maintenance-oom-alert/cron-job-velero-maintenance-oom-alert.yaml index e5f243727..bda5d92d6 100644 --- a/k8s/bases/components/coroot-velero-maintenance-oom-alert/cron-job-velero-maintenance-oom-alert.yaml +++ b/k8s/bases/components/coroot-velero-maintenance-oom-alert/cron-job-velero-maintenance-oom-alert.yaml @@ -47,7 +47,7 @@ spec: type: RuntimeDefault containers: - name: check - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent env: - name: LOOKBACK_SECONDS diff --git a/k8s/bases/infrastructure/controllers/coroot/cron-job-cnpg-degraded-alert.yaml b/k8s/bases/infrastructure/controllers/coroot/cron-job-cnpg-degraded-alert.yaml index 5ad1ae770..cfacb507a 100644 --- a/k8s/bases/infrastructure/controllers/coroot/cron-job-cnpg-degraded-alert.yaml +++ b/k8s/bases/infrastructure/controllers/coroot/cron-job-cnpg-degraded-alert.yaml @@ -125,7 +125,7 @@ spec: type: RuntimeDefault containers: - name: check - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent env: - name: GRACE_SECONDS diff --git a/k8s/bases/infrastructure/controllers/coroot/cron-job-crossplane-provider-unhealthy-alert.yaml b/k8s/bases/infrastructure/controllers/coroot/cron-job-crossplane-provider-unhealthy-alert.yaml index 88b75af92..0e19f7d5f 100644 --- a/k8s/bases/infrastructure/controllers/coroot/cron-job-crossplane-provider-unhealthy-alert.yaml +++ b/k8s/bases/infrastructure/controllers/coroot/cron-job-crossplane-provider-unhealthy-alert.yaml @@ -87,7 +87,7 @@ spec: type: RuntimeDefault containers: - name: check - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent env: - name: GRACE_SECONDS diff --git a/k8s/bases/infrastructure/controllers/coroot/cron-job-posture-staleness-alert.yaml b/k8s/bases/infrastructure/controllers/coroot/cron-job-posture-staleness-alert.yaml index 31af4f374..41be03880 100644 --- a/k8s/bases/infrastructure/controllers/coroot/cron-job-posture-staleness-alert.yaml +++ b/k8s/bases/infrastructure/controllers/coroot/cron-job-posture-staleness-alert.yaml @@ -105,7 +105,7 @@ spec: type: RuntimeDefault containers: - name: check - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent env: # 48h: two full daily scan intervals, so a single missed or slow diff --git a/k8s/bases/infrastructure/controllers/coroot/cron-job-stranded-volume-attach-alert.yaml b/k8s/bases/infrastructure/controllers/coroot/cron-job-stranded-volume-attach-alert.yaml index 71f320b49..e5e9b354f 100644 --- a/k8s/bases/infrastructure/controllers/coroot/cron-job-stranded-volume-attach-alert.yaml +++ b/k8s/bases/infrastructure/controllers/coroot/cron-job-stranded-volume-attach-alert.yaml @@ -105,7 +105,7 @@ spec: type: RuntimeDefault containers: - name: check - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent env: - name: STALL_SECONDS diff --git a/k8s/bases/infrastructure/controllers/prune-protected-orphan-alert/cron-job.yaml b/k8s/bases/infrastructure/controllers/prune-protected-orphan-alert/cron-job.yaml index fa8e180f1..203bf3c62 100644 --- a/k8s/bases/infrastructure/controllers/prune-protected-orphan-alert/cron-job.yaml +++ b/k8s/bases/infrastructure/controllers/prune-protected-orphan-alert/cron-job.yaml @@ -107,7 +107,7 @@ spec: type: RuntimeDefault containers: - name: check - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent env: # Seven days between removing a manifest and deleting what it diff --git a/k8s/bases/infrastructure/coroot/components/security-progress/cron-job.yaml b/k8s/bases/infrastructure/coroot/components/security-progress/cron-job.yaml index 7c2c596da..e18ad92a9 100644 --- a/k8s/bases/infrastructure/coroot/components/security-progress/cron-job.yaml +++ b/k8s/bases/infrastructure/coroot/components/security-progress/cron-job.yaml @@ -31,7 +31,7 @@ spec: type: RuntimeDefault containers: - name: reconcile - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent command: [/bin/sh, /config/reconcile.sh] env: diff --git a/k8s/providers/hetzner/infrastructure/coroot/cron-job-alert-autosuppressor.yaml b/k8s/providers/hetzner/infrastructure/coroot/cron-job-alert-autosuppressor.yaml index 9f2cc1a61..895ce2304 100644 --- a/k8s/providers/hetzner/infrastructure/coroot/cron-job-alert-autosuppressor.yaml +++ b/k8s/providers/hetzner/infrastructure/coroot/cron-job-alert-autosuppressor.yaml @@ -219,7 +219,7 @@ spec: - name: autosuppressor # curl + jq, digest-pinned (same image as custom-cloud-pricing). # observability is exempt from disallow-latest-tag. - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent securityContext: allowPrivilegeEscalation: false diff --git a/k8s/providers/hetzner/infrastructure/coroot/cron-job-application-health-reconciler.yaml b/k8s/providers/hetzner/infrastructure/coroot/cron-job-application-health-reconciler.yaml index 0c7d82a08..13174d26b 100644 --- a/k8s/providers/hetzner/infrastructure/coroot/cron-job-application-health-reconciler.yaml +++ b/k8s/providers/hetzner/infrastructure/coroot/cron-job-application-health-reconciler.yaml @@ -152,7 +152,7 @@ spec: fsGroupChangePolicy: OnRootMismatch containers: - name: reconcile - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent securityContext: allowPrivilegeEscalation: false diff --git a/k8s/providers/hetzner/infrastructure/coroot/cron-job-crossplane-sync-alerter.yaml b/k8s/providers/hetzner/infrastructure/coroot/cron-job-crossplane-sync-alerter.yaml index a60e50c03..5536dfe2e 100644 --- a/k8s/providers/hetzner/infrastructure/coroot/cron-job-crossplane-sync-alerter.yaml +++ b/k8s/providers/hetzner/infrastructure/coroot/cron-job-crossplane-sync-alerter.yaml @@ -89,7 +89,7 @@ spec: - name: alerter # curl + jq, digest-pinned (same image as the autosuppressor). # observability is exempt from disallow-latest-tag. - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent securityContext: allowPrivilegeEscalation: false diff --git a/k8s/providers/hetzner/infrastructure/coroot/cron-job-custom-cloud-pricing.yaml b/k8s/providers/hetzner/infrastructure/coroot/cron-job-custom-cloud-pricing.yaml index 467b9500c..becad142e 100644 --- a/k8s/providers/hetzner/infrastructure/coroot/cron-job-custom-cloud-pricing.yaml +++ b/k8s/providers/hetzner/infrastructure/coroot/cron-job-custom-cloud-pricing.yaml @@ -87,7 +87,7 @@ spec: # JSON to parse). No official curl+jq image exists, so this is the # de-facto community one, digest-pinned; observability is exempt from # disallow-latest-tag. Swappable for any curl+jq image. - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent securityContext: allowPrivilegeEscalation: false diff --git a/k8s/providers/hetzner/infrastructure/coroot/cron-job-risk-acceptance-reconciler.yaml b/k8s/providers/hetzner/infrastructure/coroot/cron-job-risk-acceptance-reconciler.yaml index d07a2d3d8..a3ff85b39 100644 --- a/k8s/providers/hetzner/infrastructure/coroot/cron-job-risk-acceptance-reconciler.yaml +++ b/k8s/providers/hetzner/infrastructure/coroot/cron-job-risk-acceptance-reconciler.yaml @@ -47,7 +47,7 @@ spec: fsGroupChangePolicy: OnRootMismatch containers: - name: reconciler - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent securityContext: allowPrivilegeEscalation: false diff --git a/k8s/providers/hetzner/infrastructure/coroot/cron-job-stranded-autoscaler-node-alerter.yaml b/k8s/providers/hetzner/infrastructure/coroot/cron-job-stranded-autoscaler-node-alerter.yaml index 836ab636d..a6fe44ae3 100644 --- a/k8s/providers/hetzner/infrastructure/coroot/cron-job-stranded-autoscaler-node-alerter.yaml +++ b/k8s/providers/hetzner/infrastructure/coroot/cron-job-stranded-autoscaler-node-alerter.yaml @@ -92,7 +92,7 @@ spec: - name: alerter # curl + jq, digest-pinned (same image as the other alerters). # observability is exempt from disallow-latest-tag. - image: docker.io/badouralix/curl-jq@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc + image: docker.io/badouralix/curl-jq@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7 imagePullPolicy: IfNotPresent env: # Space-separated, and kept equal to the `pools[].name` list in