chore(chart-deps): update trivy-operator to version 0.34.0 - #3435
Draft
svcAPLBot wants to merge 29 commits into
Draft
chore(chart-deps): update trivy-operator to version 0.34.0#3435svcAPLBot wants to merge 29 commits into
svcAPLBot wants to merge 29 commits into
Conversation
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Pull request overview
This PR upgrades the vendored trivy-operator Helm chart to 0.34.0 (with appVersion 0.32.0) and aligns associated defaults/docs to the new chart content.
Changes:
- Bump chart dependency/version references to
0.34.0(andappVersionto0.32.0) across the chart, chart index, andapps.yaml. - Update Trivy image default tag to
0.72.0. - Expand config audit coverage to include
PersistentVolume/PersistentVolumeClaimand update RBAC resources accordingly.
Reviewed changes
Copilot reviewed 11 out of 12 changed files in this pull request and generated 6 comments.
Show a summary per file
| File | Description |
|---|---|
| charts/trivy-operator/values.yaml | Updates Trivy image tag and extends supported config audit kinds. |
| charts/trivy-operator/templates/specs/rke2-cis-1.24.yaml | Updates compliance spec label version value. |
| charts/trivy-operator/templates/specs/k8s-pss-restricted-0.1.yaml | Updates compliance spec label version value. |
| charts/trivy-operator/templates/specs/k8s-pss-baseline-0.1.yaml | Updates compliance spec label version value. |
| charts/trivy-operator/templates/specs/k8s-nsa-1.0.yaml | Updates compliance spec label version value. |
| charts/trivy-operator/templates/specs/k8s-cis-1.23.yaml | Updates compliance spec label version value. |
| charts/trivy-operator/templates/specs/eks-cis-1.4.yaml | Updates compliance spec label version value. |
| charts/trivy-operator/README.md | Regenerates version/appVersion badges and value table entries to match updated defaults. |
| charts/trivy-operator/generated/role.yaml | Extends RBAC resource access for PV/PVC config audits. |
| charts/trivy-operator/Chart.yaml | Bumps chart version to 0.34.0 and appVersion to 0.32.0. |
| chart/chart-index/Chart.yaml | Updates the trivy-operator dependency version to 0.34.0. |
| apps.yaml | Updates the Trivy Operator appVersion metadata to 0.32.0. |
Comment on lines
6
to
10
| labels: | ||
| app.kubernetes.io/name: trivy-operator | ||
| app.kubernetes.io/instance: trivy-operator | ||
| app.kubernetes.io/version: 0.30.1 | ||
| app.kubernetes.io/version: 0.32.0 | ||
| app.kubernetes.io/managed-by: kubectl |
Comment on lines
7
to
11
| labels: | ||
| app.kubernetes.io/name: trivy-operator | ||
| app.kubernetes.io/instance: trivy-operator | ||
| app.kubernetes.io/version: 0.30.1 | ||
| app.kubernetes.io/version: 0.32.0 | ||
| app.kubernetes.io/managed-by: kubectl |
Comment on lines
7
to
11
| labels: | ||
| app.kubernetes.io/name: trivy-operator | ||
| app.kubernetes.io/instance: trivy-operator | ||
| app.kubernetes.io/version: 0.30.1 | ||
| app.kubernetes.io/version: 0.32.0 | ||
| app.kubernetes.io/managed-by: kubectl |
Comment on lines
7
to
11
| labels: | ||
| app.kubernetes.io/name: trivy-operator | ||
| app.kubernetes.io/instance: trivy-operator | ||
| app.kubernetes.io/version: 0.30.1 | ||
| app.kubernetes.io/version: 0.32.0 | ||
| app.kubernetes.io/managed-by: kubectl |
Comment on lines
7
to
11
| labels: | ||
| app.kubernetes.io/name: trivy-operator | ||
| app.kubernetes.io/instance: trivy-operator | ||
| app.kubernetes.io/version: 0.30.1 | ||
| app.kubernetes.io/version: 0.32.0 | ||
| app.kubernetes.io/managed-by: kubectl |
Comment on lines
6
to
10
| labels: | ||
| app.kubernetes.io/name: trivy-operator | ||
| app.kubernetes.io/instance: trivy-operator | ||
| app.kubernetes.io/version: 0.30.1 | ||
| app.kubernetes.io/version: 0.32.0 | ||
| app.kubernetes.io/managed-by: kubectl |
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 11 out of 12 changed files in this pull request and generated no new comments.
Comments suppressed due to low confidence (1)
apps.yaml:215
apps.yamlupdates Trivy OperatorappVersionto 0.32.0, but therelatedLinksURL still points to the old docs version (v0.16.4). This makes the in-repo app metadata inconsistent and sends readers to the wrong documentation for the version being shipped.
appVersion: 0.32.0
repo: https://github.com/aquasecurity/trivy-operator
maintainers: Aqua Security
relatedLinks:
- https://aquasecurity.github.io/trivy-operator/v0.16.4/
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 11 out of 12 changed files in this pull request and generated no new comments.
Suppressed comments (6)
charts/trivy-operator/templates/specs/k8s-pss-restricted-0.1.yaml:10
- Avoid hardcoding the app.kubernetes.io/version label here; it will drift the next time Chart.appVersion is bumped. Use the chart’s AppVersion template value instead to keep labels consistent across resources.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-baseline-0.1.yaml:10
- Avoid hardcoding the app.kubernetes.io/version label here; it will drift the next time Chart.appVersion is bumped. Use the chart’s AppVersion template value instead to keep labels consistent across resources.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-nsa-1.0.yaml:10
- Avoid hardcoding the app.kubernetes.io/version label here; it will drift the next time Chart.appVersion is bumped. Use the chart’s AppVersion template value instead to keep labels consistent across resources.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-cis-1.23.yaml:9
- Avoid hardcoding the app.kubernetes.io/version label here; it will drift the next time Chart.appVersion is bumped. Use the chart’s AppVersion template value instead to keep labels consistent across resources.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/eks-cis-1.4.yaml:9
- Avoid hardcoding the app.kubernetes.io/version label here; it will drift the next time Chart.appVersion is bumped. Use the chart’s AppVersion template value instead to keep labels consistent across resources.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/rke2-cis-1.24.yaml:10
- Avoid hardcoding the app.kubernetes.io/version label here; it will drift the next time Chart.appVersion is bumped. Use the chart’s AppVersion template value instead to keep labels consistent across resources.
app.kubernetes.io/version: 0.32.0
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 11 out of 12 changed files in this pull request and generated no new comments.
Suppressed comments (6)
charts/trivy-operator/templates/specs/k8s-cis-1.23.yaml:9
- The app.kubernetes.io/version label is hardcoded, which will drift on future chart upgrades. Since this is a Helm template already, use .Chart.AppVersion (as done in templates/_helpers.tpl) to keep the label consistent with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/eks-cis-1.4.yaml:9
- The app.kubernetes.io/version label is hardcoded, which will drift on future chart upgrades. Since this is a Helm template already, use .Chart.AppVersion (as done in templates/_helpers.tpl) to keep the label consistent with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/rke2-cis-1.24.yaml:10
- The app.kubernetes.io/version label is hardcoded, which will drift on future chart upgrades. Since this is a Helm template already, use .Chart.AppVersion (as done in templates/_helpers.tpl) to keep the label consistent with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-restricted-0.1.yaml:10
- The app.kubernetes.io/version label is hardcoded, which will drift on future chart upgrades. Since this is a Helm template already, use .Chart.AppVersion (as done in templates/_helpers.tpl) to keep the label consistent with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-baseline-0.1.yaml:10
- The app.kubernetes.io/version label is hardcoded, which will drift on future chart upgrades. Since this is a Helm template already, use .Chart.AppVersion (as done in templates/_helpers.tpl) to keep the label consistent with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-nsa-1.0.yaml:10
- The app.kubernetes.io/version label is hardcoded, which will drift on future chart upgrades. Since this is a Helm template already, use .Chart.AppVersion (as done in templates/_helpers.tpl) to keep the label consistent with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 11 out of 12 changed files in this pull request and generated no new comments.
Suppressed comments (7)
charts/trivy-operator/templates/specs/k8s-cis-1.23.yaml:9
- The compliance spec hard-codes
app.kubernetes.io/version. Since this value is the chart AppVersion and is already being updated, it should be templated (e.g..Chart.AppVersion) to avoid having to manually touch multiple files on every upgrade.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/eks-cis-1.4.yaml:9
- The compliance spec hard-codes
app.kubernetes.io/version. Template this from the chart AppVersion (instead of a literal) to prevent version drift during future chart upgrades.
app.kubernetes.io/version: 0.32.0
apps.yaml:215
- The Trivy Operator docs link is pinned to v0.16.4, but the appVersion was updated to 0.32.0. This makes the metadata inconsistent and can send users to outdated docs; update the link to match the new appVersion (or switch to an unversioned docs URL).
appVersion: 0.32.0
repo: https://github.com/aquasecurity/trivy-operator
maintainers: Aqua Security
relatedLinks:
- https://aquasecurity.github.io/trivy-operator/v0.16.4/
charts/trivy-operator/templates/specs/k8s-nsa-1.0.yaml:10
- The compliance spec hard-codes
app.kubernetes.io/version. Template this from the chart AppVersion (instead of a literal) to prevent version drift during future chart upgrades.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-restricted-0.1.yaml:10
- The compliance spec hard-codes
app.kubernetes.io/version. Template this from the chart AppVersion (instead of a literal) to prevent version drift during future chart upgrades.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/rke2-cis-1.24.yaml:10
- The compliance spec hard-codes
app.kubernetes.io/version. Template this from the chart AppVersion (instead of a literal) to prevent version drift during future chart upgrades.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-baseline-0.1.yaml:10
- The compliance spec hard-codes
app.kubernetes.io/version. Template this from the chart AppVersion (instead of a literal) to prevent version drift during future chart upgrades.
app.kubernetes.io/version: 0.32.0
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 11 out of 12 changed files in this pull request and generated no new comments.
Suppressed comments (6)
charts/trivy-operator/templates/specs/rke2-cis-1.24.yaml:10
- The compliance spec hard-codes app.kubernetes.io/version, which can drift from Chart.yaml appVersion (and the chart already has access to .Chart.AppVersion). Template this value so future bumps don’t require editing multiple files.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-restricted-0.1.yaml:10
- The compliance spec hard-codes app.kubernetes.io/version, which can drift from Chart.yaml appVersion (and the chart already has access to .Chart.AppVersion). Template this value so future bumps don’t require editing multiple files.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-baseline-0.1.yaml:10
- The compliance spec hard-codes app.kubernetes.io/version, which can drift from Chart.yaml appVersion (and the chart already has access to .Chart.AppVersion). Template this value so future bumps don’t require editing multiple files.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-nsa-1.0.yaml:10
- The compliance spec hard-codes app.kubernetes.io/version, which can drift from Chart.yaml appVersion (and the chart already has access to .Chart.AppVersion). Template this value so future bumps don’t require editing multiple files.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-cis-1.23.yaml:9
- The compliance spec hard-codes app.kubernetes.io/version, which can drift from Chart.yaml appVersion (and the chart already has access to .Chart.AppVersion). Template this value so future bumps don’t require editing multiple files.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/eks-cis-1.4.yaml:9
- The compliance spec hard-codes app.kubernetes.io/version, which can drift from Chart.yaml appVersion (and the chart already has access to .Chart.AppVersion). Template this value so future bumps don’t require editing multiple files.
app.kubernetes.io/version: 0.32.0
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 11 out of 12 changed files in this pull request and generated no new comments.
Suppressed comments (6)
charts/trivy-operator/templates/specs/rke2-cis-1.24.yaml:10
- The version label is hard-coded here, which duplicates Chart.yaml appVersion and can drift on future upgrades. Use the chart's AppVersion template so this stays in sync automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-restricted-0.1.yaml:10
- The version label is hard-coded here, which duplicates Chart.yaml appVersion and can drift on future upgrades. Use the chart's AppVersion template so this stays in sync automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-baseline-0.1.yaml:10
- The version label is hard-coded here, which duplicates Chart.yaml appVersion and can drift on future upgrades. Use the chart's AppVersion template so this stays in sync automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-nsa-1.0.yaml:10
- The version label is hard-coded here, which duplicates Chart.yaml appVersion and can drift on future upgrades. Use the chart's AppVersion template so this stays in sync automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-cis-1.23.yaml:9
- The version label is hard-coded here, which duplicates Chart.yaml appVersion and can drift on future upgrades. Use the chart's AppVersion template so this stays in sync automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/eks-cis-1.4.yaml:9
- The version label is hard-coded here, which duplicates Chart.yaml appVersion and can drift on future upgrades. Use the chart's AppVersion template so this stays in sync automatically.
app.kubernetes.io/version: 0.32.0
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 11 out of 12 changed files in this pull request and generated no new comments.
Suppressed comments (6)
charts/trivy-operator/templates/specs/rke2-cis-1.24.yaml:10
- This Helm template hard-codes the app version label, which requires manual updates on every chart bump. Prefer templating it from the chart metadata (or the existing labels helper) so it stays in sync with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-restricted-0.1.yaml:10
- This Helm template hard-codes the app version label, which requires manual updates on every chart bump. Prefer templating it from the chart metadata (or the existing labels helper) so it stays in sync with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-baseline-0.1.yaml:10
- This Helm template hard-codes the app version label, which requires manual updates on every chart bump. Prefer templating it from the chart metadata (or the existing labels helper) so it stays in sync with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-nsa-1.0.yaml:10
- This Helm template hard-codes the app version label, which requires manual updates on every chart bump. Prefer templating it from the chart metadata (or the existing labels helper) so it stays in sync with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-cis-1.23.yaml:9
- This Helm template hard-codes the app version label, which requires manual updates on every chart bump. Prefer templating it from the chart metadata (or the existing labels helper) so it stays in sync with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/eks-cis-1.4.yaml:9
- This Helm template hard-codes the app version label, which requires manual updates on every chart bump. Prefer templating it from the chart metadata (or the existing labels helper) so it stays in sync with Chart.yaml appVersion.
app.kubernetes.io/version: 0.32.0
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 11 out of 12 changed files in this pull request and generated no new comments.
Suppressed comments (6)
charts/trivy-operator/templates/specs/k8s-pss-baseline-0.1.yaml:10
- Hardcoding app.kubernetes.io/version requires touching multiple spec templates on every chart/appVersion bump and risks drifting from Chart.yaml. Use the chart’s appVersion to keep this label consistent automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-pss-restricted-0.1.yaml:10
- Hardcoding app.kubernetes.io/version requires touching multiple spec templates on every chart/appVersion bump and risks drifting from Chart.yaml. Use the chart’s appVersion to keep this label consistent automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-cis-1.23.yaml:9
- Hardcoding app.kubernetes.io/version requires touching multiple spec templates on every chart/appVersion bump and risks drifting from Chart.yaml. Use the chart’s appVersion to keep this label consistent automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/eks-cis-1.4.yaml:9
- Hardcoding app.kubernetes.io/version requires touching multiple spec templates on every chart/appVersion bump and risks drifting from Chart.yaml. Use the chart’s appVersion to keep this label consistent automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/rke2-cis-1.24.yaml:10
- Hardcoding app.kubernetes.io/version requires touching multiple spec templates on every chart/appVersion bump and risks drifting from Chart.yaml. Use the chart’s appVersion to keep this label consistent automatically.
app.kubernetes.io/version: 0.32.0
charts/trivy-operator/templates/specs/k8s-nsa-1.0.yaml:10
- Hardcoding app.kubernetes.io/version requires touching multiple spec templates on every chart/appVersion bump and risks drifting from Chart.yaml. Use the chart’s appVersion to keep this label consistent automatically.
app.kubernetes.io/version: 0.32.0
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR updates the dependency trivy-operator to version 0.34.0.