mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-03 18:47:04 +09:00
Aleksei Sviridkin
03668bcd1b
Re-vendors the coredns Helm chart from 1.43.2 to 1.46.0 (chart appVersion 1.12.3 -> 1.13.1), picking up the chart-tooling improvements (1.46 ServiceMonitor options, 1.45 customAnnotations/dnsConfig/podLabels/dnsPolicy, 1.44 multicluster RBAC). This is a chart-only refresh: the running CoreDNS image is deliberately KEPT at registry.k8s.io/coredns/coredns:v1.12.4. It is pinned to the 1.12 line that matches the Kubernetes-bundled kube-dns replacement, and v1.12.4 is the latest patch of that line (itself a security release). Advancing the image to the chart's 1.13.1 appVersion (or newer) would break the deliberate alignment with the bundled CoreDNS version and is a separate platform decision, not part of this chart refresh. The kube-dns overrides (k8sAppLabelOverride, service.name, serviceAccount.name) stay valid and the rendered Deployment still uses v1.12.4. Pins the update target to --version 1.46.0 for reproducible re-vendoring. Note: this does NOT close #2899 -- that ticket asks to advance the coredns *image* for CVE remediation, which conflicts with the kube-dns version alignment. Whether to move the bundled CoreDNS line forward (and thus the image) is a platform-level call, left open on the issue. Adaptations: - charts/: re-vendored via make update (helm pull coredns --version 1.46.0; upstream tests dropped per the existing recipe) - Makefile: pin update target to --version 1.46.0 Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>