chore(deps): bump kube-bench from v0.6.6 to v0.6.9 (#1240)

Signed-off-by: Jose Donizetti <jdbjunior@gmail.com> Signed-off-by: Jose Donizetti <jdbjunior@gmail.com>
aquasecurity · Aug 10, 2022 · 73f3be9 · 73f3be9
1 parent 37af6ba
commit 73f3be9
Show file tree

Hide file tree

Showing 9 changed files with 11 additions and 11 deletions.
diff --git a/deploy/helm/values.yaml b/deploy/helm/values.yaml
@@ -191,7 +191,7 @@ compliance:
   # failEntriesLimit the flag to limit the number of fail entries per control check in the cluster compliance detail report
   failEntriesLimit: 10
 kubeBench:
-  imageRef: docker.io/aquasec/kube-bench:v0.6.6
+  imageRef: docker.io/aquasec/kube-bench:v0.6.9
 
 polaris:
   # createConfig indicates whether to create config objects

diff --git a/deploy/static/03-starboard-operator.config.yaml b/deploy/static/03-starboard-operator.config.yaml
@@ -34,7 +34,7 @@ metadata:
 data:
   vulnerabilityReports.scanner: "Trivy"
   configAuditReports.scanner: "Polaris"
-  kube-bench.imageRef: "docker.io/aquasec/kube-bench:v0.6.6"
+  kube-bench.imageRef: "docker.io/aquasec/kube-bench:v0.6.9"
   compliance.failEntriesLimit: "10"
 ---
 apiVersion: v1

diff --git a/deploy/static/starboard.yaml b/deploy/static/starboard.yaml
@@ -806,7 +806,7 @@ metadata:
 data:
   vulnerabilityReports.scanner: "Trivy"
   configAuditReports.scanner: "Polaris"
-  kube-bench.imageRef: "docker.io/aquasec/kube-bench:v0.6.6"
+  kube-bench.imageRef: "docker.io/aquasec/kube-bench:v0.6.9"
   compliance.failEntriesLimit: "10"
 ---
 apiVersion: v1

diff --git a/docs/settings.md b/docs/settings.md
@@ -60,7 +60,7 @@ configuration settings for common use cases. For example, switch Trivy from [Sta
 | `scanJob.tolerations`                          | N/A                                   | JSON representation of the [tolerations] to be applied to the scanner pods so that they can run on nodes with matching taints. Example: `'[{"key":"key1", "operator":"Equal", "value":"value1", "effect":"NoSchedule"}]'`           |
 | `scanJob.annotations`                          | N/A                                   | One-line comma-separated representation of the annotations which the user wants the scanner pods to be annotated with. Example: `foo=bar,env=stage` will annotate the scanner pods with the annotations `foo: bar` and `env: stage` |
 | `scanJob.templateLabel`                        | N/A                                   | One-line comma-separated representation of the template labels which the user wants the scanner pods to be labeled with. Example: `foo=bar,env=stage` will labeled the scanner pods with the labels `foo: bar` and `env: stage`     |
-| `kube-bench.imageRef`                          | `docker.io/aquasec/kube-bench:v0.6.6` | kube-bench image reference                                                                                                                                                                                                          |
+| `kube-bench.imageRef`                          | `docker.io/aquasec/kube-bench:v0.6.9` | kube-bench image reference                                                                                                                                                                                                          |
 | `kube-hunter.imageRef`                         | `docker.io/aquasec/kube-hunter:0.6.5` | kube-hunter image reference                                                                                                                                                                                                         |
 | `kube-hunter.quick`                            | `"false"`                             | Whether to use kube-hunter's "quick" scanning mode (subnet 24). Set to `"true"` to enable.                                                                                                                                          |
 | `compliance.failEntriesLimit`                  | `"10"`                                | Limit the number of fail entries per control check in the cluster compliance detail report.                                                                                                                                         |

diff --git a/itest/starboard/starboard_cli_test.go b/itest/starboard/starboard_cli_test.go
@@ -1263,7 +1263,7 @@ var _ = Describe("Starboard CLI", func() {
 						"Scanner": Equal(v1alpha1.Scanner{
 							Name:    "kube-bench",
 							Vendor:  "Aqua Security",
-							Version: "v0.6.6",
+							Version: "v0.6.9",
 						}),
 					}),
 				}))

diff --git a/pkg/kubebench/scanner_test.go b/pkg/kubebench/scanner_test.go
@@ -26,7 +26,7 @@ var (
 
 func TestKubeBenchPlugin_GetScanJobSpec(t *testing.T) {
 	config := starboard.ConfigData{
-		"kube-bench.imageRef": "docker.io/aquasec/kube-bench:v0.6.6",
+		"kube-bench.imageRef": "docker.io/aquasec/kube-bench:v0.6.9",
 	}
 	node := corev1.Node{
 		ObjectMeta: metav1.ObjectMeta{
@@ -96,7 +96,7 @@ func TestKubeBenchPlugin_GetScanJobSpec(t *testing.T) {
 		Containers: []corev1.Container{
 			{
 				Name:                     "kube-bench",
-				Image:                    "docker.io/aquasec/kube-bench:v0.6.6",
+				Image:                    "docker.io/aquasec/kube-bench:v0.6.9",
 				ImagePullPolicy:          corev1.PullIfNotPresent,
 				TerminationMessagePolicy: corev1.TerminationMessageFallbackToLogsOnError,
 				Command:                  []string{"sh"},
@@ -153,7 +153,7 @@ func TestKubeBenchPlugin_GetScanJobSpec(t *testing.T) {
 
 func TestKubeBenchPlugin_ParseCISKubeBenchOutput(t *testing.T) {
 	config := starboard.ConfigData{
-		"kube-bench.imageRef": "docker.io/aquasec/kube-bench:v0.6.6",
+		"kube-bench.imageRef": "docker.io/aquasec/kube-bench:v0.6.9",
 	}
 	var testCases = []struct {
 		name string

diff --git a/pkg/kubebench/testdata/goldenMultiple.json b/pkg/kubebench/testdata/goldenMultiple.json
@@ -2,7 +2,7 @@
     "scanner": {
         "name": "kube-bench",
         "vendor": "Aqua Security",
-        "version": "v0.6.6"
+        "version": "v0.6.9"
     },
     "summary": {
         "passCount": 82,

diff --git a/pkg/kubebench/testdata/goldenSingle.json b/pkg/kubebench/testdata/goldenSingle.json
@@ -2,7 +2,7 @@
     "scanner": {
         "name": "kube-bench",
         "vendor": "Aqua Security",
-        "version": "v0.6.6"
+        "version": "v0.6.9"
     },
     "summary": {
         "passCount": 41,

diff --git a/pkg/starboard/config.go b/pkg/starboard/config.go
@@ -83,7 +83,7 @@ func GetDefaultConfig() ConfigData {
 		keyVulnerabilityReportsScanner: "Trivy",
 		keyConfigAuditReportsScanner:   "Polaris",
 
-		"kube-bench.imageRef":         "docker.io/aquasec/kube-bench:v0.6.6",
+		"kube-bench.imageRef":         "docker.io/aquasec/kube-bench:v0.6.9",
 		"kube-hunter.imageRef":        "docker.io/aquasec/kube-hunter:0.6.5",
 		"kube-hunter.quick":           "false",
 		"compliance.failEntriesLimit": "10",