From 09ac5c671c30042f51940ac8d3db0e4e4cbe07bb Mon Sep 17 00:00:00 2001 From: Carlos Tolon Date: Thu, 3 Oct 2024 12:13:36 +0200 Subject: [PATCH] fix(deps): update to consume images from the `ext/sysdig` namespace, and the chart from https://charts.sysdig.com (#182) --- common-dev-assets | 2 +- main.tf | 21 +++++++++++---------- 2 files changed, 12 insertions(+), 11 deletions(-) diff --git a/common-dev-assets b/common-dev-assets index de9d7f6..51475f0 160000 --- a/common-dev-assets +++ b/common-dev-assets @@ -1 +1 @@ -Subproject commit de9d7f69f5bb2ac57ccabd68d01a0be85a424c07 +Subproject commit 51475f024f1be69161d763ee5b3af67c811ef242 diff --git a/main.tf b/main.tf index 83eef49..072437a 100644 --- a/main.tf +++ b/main.tf @@ -7,28 +7,29 @@ locals { ingestion_endpoint = var.endpoint_type == "private" ? "ingest.private.${var.region}.${local.scc_domain}" : "ingest.${var.region}.${local.scc_domain}" kspm_analyzer_image_repo = "kspm-analyzer" - kspm_analyzer_image_tag_digest = "1.44.7@sha256:578c7b2cc1b8ff74420bc4d293a212c831191b94c945afd55801ecc30bfe0753" # datasource: icr.io/ibm-iac/kspm-analyzer + kspm_analyzer_image_tag_digest = "1.44.7@sha256:e268be7472a12ff3cd867b65fe19a68e93c5bebae33468cb80bf8f49d36680dd" # datasource: icr.io/ext/sysdig/kspm-analyzer agent_kmodule_image_repo = "agent-kmodule" - agent_kmodule_image_tag_digest = "13.4.1@sha256:b24f1e611e7bbba810789299c228f0241cf11bbff03c369c80abfbe07469413a" # datasource: icr.io/ibm-iac/agent-kmodule + agent_kmodule_image_tag_digest = "13.4.1@sha256:c7cb53a773cfe78cc1fad4af344db641d77bcead2299991348361e58edcecbd8" # datasource: icr.io/ext/sysdig/agent-kmodule vuln_runtime_scanner_image_repo = "vuln-runtime-scanner" - vuln_runtime_scanner_image_tag_digest = "1.8.0@sha256:2cb5a33765445bfb072d1be2cd948bfdd3d1cf82f2be6c46f54388d4c88c6215" # datasource: icr.io/ibm-iac/vuln-runtime-scanner + vuln_runtime_scanner_image_tag_digest = "1.8.0@sha256:2cb5a33765445bfb072d1be2cd948bfdd3d1cf82f2be6c46f54388d4c88c6215" # datasource: icr.io/ext/sysdig/vuln-runtime-scanner vuln_host_scanner_image_repo = "vuln-host-scanner" - vuln_host_scanner_image_tag_digest = "0.12.1@sha256:3ed0069bfbe442d26229c556ebc6437b8193565abcdbe1535eb01954566a24cd" # datasource: icr.io/ibm-iac/vuln-host-scanner + vuln_host_scanner_image_tag_digest = "0.12.1@sha256:3ed0069bfbe442d26229c556ebc6437b8193565abcdbe1535eb01954566a24cd" # datasource: icr.io/ext/sysdig/vuln-host-scanner agent_slim_image_repo = "agent-slim" - agent_slim_image_tag_digest = "13.4.1@sha256:76642d9d20fb48585888e5baa6bcae7e6eebf1e3624a3665806dbb79e7c99039" # datasource: icr.io/ibm-iac/agent-slim + agent_slim_image_tag_digest = "13.4.1@sha256:76642d9d20fb48585888e5baa6bcae7e6eebf1e3624a3665806dbb79e7c99039" # datasource: icr.io/ext/sysdig/agent-slim kspm_collector_image_repo = "kspm-collector" - kspm_collector_image_tag_digest = "1.39.4@sha256:c9a1ce25478263b6ac9258c0977fd9cdc2963fb5a29342fc3a3e7c46341abb17" # datasource: icr.io/ibm-iac/kspm-collector + kspm_collector_image_tag_digest = "1.39.4@sha256:294cf7a9cfe5fc8249019c33056a20469fb64dda7a817fa4192beef0c00fe4e4" # datasource: icr.io/ext/sysdig/kspm-collector sbom_extractor_image_repo = "image-sbom-extractor" - sbom_extractor_image_tag_digest = "0.10.0@sha256:59543aa19bcdea4973f3d70351b8e1df60c5de998eb829c143a9f9deaed10a7b" # datasource: icr.io/ibm-iac/image-sbom-extractor + sbom_extractor_image_tag_digest = "0.10.0@sha256:59543aa19bcdea4973f3d70351b8e1df60c5de998eb829c143a9f9deaed10a7b" # datasource: icr.io/ext/sysdig/image-sbom-extractor runtime_status_integrator_image_repo = "runtime-status-integrator" - runtime_status_integrator_image_tag_digest = "0.10.0@sha256:524cadd672c276c04845081c6fff4999c37f860a60117821c60d173b9d50a0ab" # datasource: icr.io/ibm-iac/runtime-status-integrator + runtime_status_integrator_image_tag_digest = "0.10.0@sha256:524cadd672c276c04845081c6fff4999c37f860a60117821c60d173b9d50a0ab" # datasource: icr.io/ext/sysdig/runtime-status-integrator image_registry = "icr.io" - image_namespace = "ibm-iac" + image_namespace = "ext/sysdig" } resource "helm_release" "scc_wp_agent" { name = var.name - chart = "oci://icr.io/ibm-iac-charts/sysdig-deploy" + repository = "https://charts.sysdig.com" + chart = "sysdig-deploy" version = "1.65.2" namespace = var.namespace create_namespace = true