From ba89dfbb6bf4e350698b938ec2f7bef57ab2cac9 Mon Sep 17 00:00:00 2001 From: pasha-codefresh Date: Thu, 7 Sep 2023 17:12:15 +0300 Subject: [PATCH 1/2] Merge pull request from GHSA-g687-f2gx-6wm8 * feat: use untar with limiter Signed-off-by: pashakostohrys * feat: use untar with limiter Signed-off-by: pashakostohrys --------- Signed-off-by: pashakostohrys --- .../commands/argocd_repo_server.go | 8 ++++++ .../server-commands/argocd-repo-server.md | 2 ++ .../argocd-repo-server-deployment.yaml | 12 +++++++++ manifests/core-install.yaml | 12 +++++++++ manifests/ha/install.yaml | 12 +++++++++ manifests/ha/namespace-install.yaml | 12 +++++++++ manifests/install.yaml | 12 +++++++++ manifests/namespace-install.yaml | 12 +++++++++ reposerver/repository/repository.go | 6 +++-- util/helm/client.go | 25 ++++++++++++++----- util/helm/client_test.go | 11 ++++++-- util/helm/mocks/Client.go | 2 +- 12 files changed, 115 insertions(+), 11 deletions(-) diff --git a/cmd/argocd-repo-server/commands/argocd_repo_server.go b/cmd/argocd-repo-server/commands/argocd_repo_server.go index b9a0378b13ed5..0d2fd16343a2e 100644 --- a/cmd/argocd-repo-server/commands/argocd_repo_server.go +++ b/cmd/argocd-repo-server/commands/argocd_repo_server.go @@ -82,6 +82,8 @@ func NewCommand() *cobra.Command { allowOutOfBoundsSymlinks bool streamedManifestMaxTarSize string streamedManifestMaxExtractedSize string + helmManifestMaxExtractedSize string + disableManifestMaxExtractedSize bool ) var command = cobra.Command{ Use: cliName, @@ -120,6 +122,9 @@ func NewCommand() *cobra.Command { streamedManifestMaxExtractedSizeQuantity, err := resource.ParseQuantity(streamedManifestMaxExtractedSize) errors.CheckError(err) + helmManifestMaxExtractedSizeQuantity, err := resource.ParseQuantity(helmManifestMaxExtractedSize) + errors.CheckError(err) + askPassServer := askpass.NewServer() metricsServer := metrics.NewMetricsServer() cacheutil.CollectMetrics(redisClient, metricsServer) @@ -134,6 +139,7 @@ func NewCommand() *cobra.Command { AllowOutOfBoundsSymlinks: allowOutOfBoundsSymlinks, StreamedManifestMaxExtractedSize: streamedManifestMaxExtractedSizeQuantity.ToDec().Value(), StreamedManifestMaxTarSize: streamedManifestMaxTarSizeQuantity.ToDec().Value(), + HelmManifestMaxExtractedSize: helmManifestMaxExtractedSizeQuantity.ToDec().Value(), }, askPassServer) errors.CheckError(err) @@ -216,6 +222,8 @@ func NewCommand() *cobra.Command { command.Flags().BoolVar(&allowOutOfBoundsSymlinks, "allow-oob-symlinks", env.ParseBoolFromEnv("ARGOCD_REPO_SERVER_ALLOW_OUT_OF_BOUNDS_SYMLINKS", false), "Allow out-of-bounds symlinks in repositories (not recommended)") command.Flags().StringVar(&streamedManifestMaxTarSize, "streamed-manifest-max-tar-size", env.StringFromEnv("ARGOCD_REPO_SERVER_STREAMED_MANIFEST_MAX_TAR_SIZE", "100M"), "Maximum size of streamed manifest archives") command.Flags().StringVar(&streamedManifestMaxExtractedSize, "streamed-manifest-max-extracted-size", env.StringFromEnv("ARGOCD_REPO_SERVER_STREAMED_MANIFEST_MAX_EXTRACTED_SIZE", "1G"), "Maximum size of streamed manifest archives when extracted") + command.Flags().StringVar(&helmManifestMaxExtractedSize, "helm-manifest-max-extracted-size", env.StringFromEnv("ARGOCD_REPO_SERVER_HELM_MANIFEST_MAX_EXTRACTED_SIZE", "1G"), "Maximum size of helm manifest archives when extracted") + command.Flags().BoolVar(&disableManifestMaxExtractedSize, "disable-helm-manifest-max-extracted-size", env.ParseBoolFromEnv("ARGOCD_REPO_SERVER_DISABLE_HELM_MANIFEST_MAX_EXTRACTED_SIZE", false), "Disable maximum size of helm manifest archives when extracted") tlsConfigCustomizerSrc = tls.AddTLSFlagsToCmd(&command) cacheSrc = reposervercache.AddCacheFlagsToCmd(&command, func(client *redis.Client) { redisClient = client diff --git a/docs/operator-manual/server-commands/argocd-repo-server.md b/docs/operator-manual/server-commands/argocd-repo-server.md index 35d8cbe8dfed5..805c6beab6436 100644 --- a/docs/operator-manual/server-commands/argocd-repo-server.md +++ b/docs/operator-manual/server-commands/argocd-repo-server.md @@ -16,7 +16,9 @@ argocd-repo-server [flags] --address string Listen on given address for incoming connections (default "0.0.0.0") --allow-oob-symlinks Allow out-of-bounds symlinks in repositories (not recommended) --default-cache-expiration duration Cache expiration default (default 24h0m0s) + --disable-helm-manifest-max-extracted-size Disable maximum size of helm manifest archives when extracted --disable-tls Disable TLS on the gRPC endpoint + --helm-manifest-max-extracted-size string Maximum size of helm manifest archives when extracted (default "1G") -h, --help help for argocd-repo-server --logformat string Set the logging format. One of: text|json (default "text") --loglevel string Set the logging level. One of: debug|info|warn|error (default "info") diff --git a/manifests/base/repo-server/argocd-repo-server-deployment.yaml b/manifests/base/repo-server/argocd-repo-server-deployment.yaml index 0bb267168ac21..4a36b6a15880d 100644 --- a/manifests/base/repo-server/argocd-repo-server-deployment.yaml +++ b/manifests/base/repo-server/argocd-repo-server-deployment.yaml @@ -149,6 +149,18 @@ spec: key: reposerver.streamed.manifest.max.extracted.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true + - name: ARGOCD_REPO_SERVER_DISABLE_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + name: argocd-cmd-params-cm + key: reposerver.disable.helm.manifest.max.extracted.size + optional: true - name: ARGOCD_GIT_MODULES_ENABLED valueFrom: configMapKeyRef: diff --git a/manifests/core-install.yaml b/manifests/core-install.yaml index 1d2fbb970de48..6e493e54e6f33 100644 --- a/manifests/core-install.yaml +++ b/manifests/core-install.yaml @@ -19565,6 +19565,18 @@ spec: key: reposerver.streamed.manifest.max.extracted.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true + - name: ARGOCD_REPO_SERVER_DISABLE_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.disable.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true - name: ARGOCD_GIT_MODULES_ENABLED valueFrom: configMapKeyRef: diff --git a/manifests/ha/install.yaml b/manifests/ha/install.yaml index f5ad53b9a8c23..33710fe62fe6c 100644 --- a/manifests/ha/install.yaml +++ b/manifests/ha/install.yaml @@ -20843,6 +20843,18 @@ spec: key: reposerver.streamed.manifest.max.extracted.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true + - name: ARGOCD_REPO_SERVER_DISABLE_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.disable.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true - name: ARGOCD_GIT_MODULES_ENABLED valueFrom: configMapKeyRef: diff --git a/manifests/ha/namespace-install.yaml b/manifests/ha/namespace-install.yaml index f651a91ec1f85..27f8246975cc5 100644 --- a/manifests/ha/namespace-install.yaml +++ b/manifests/ha/namespace-install.yaml @@ -1944,6 +1944,18 @@ spec: key: reposerver.streamed.manifest.max.extracted.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true + - name: ARGOCD_REPO_SERVER_DISABLE_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.disable.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true - name: ARGOCD_GIT_MODULES_ENABLED valueFrom: configMapKeyRef: diff --git a/manifests/install.yaml b/manifests/install.yaml index b38877f0e91d9..5cc0129f63ebe 100644 --- a/manifests/install.yaml +++ b/manifests/install.yaml @@ -19898,6 +19898,18 @@ spec: key: reposerver.streamed.manifest.max.extracted.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true + - name: ARGOCD_REPO_SERVER_DISABLE_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.disable.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true - name: ARGOCD_GIT_MODULES_ENABLED valueFrom: configMapKeyRef: diff --git a/manifests/namespace-install.yaml b/manifests/namespace-install.yaml index 5e29426c69683..f0b1452c5792f 100644 --- a/manifests/namespace-install.yaml +++ b/manifests/namespace-install.yaml @@ -999,6 +999,18 @@ spec: key: reposerver.streamed.manifest.max.extracted.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true + - name: ARGOCD_REPO_SERVER_DISABLE_HELM_MANIFEST_MAX_EXTRACTED_SIZE + valueFrom: + configMapKeyRef: + key: reposerver.disable.helm.manifest.max.extracted.size + name: argocd-cmd-params-cm + optional: true - name: ARGOCD_GIT_MODULES_ENABLED valueFrom: configMapKeyRef: diff --git a/reposerver/repository/repository.go b/reposerver/repository/repository.go index d60ac5f06275d..f392c13276152 100644 --- a/reposerver/repository/repository.go +++ b/reposerver/repository/repository.go @@ -105,6 +105,8 @@ type RepoServerInitConstants struct { AllowOutOfBoundsSymlinks bool StreamedManifestMaxExtractedSize int64 StreamedManifestMaxTarSize int64 + HelmManifestMaxExtractedSize int64 + DisableHelmManifestMaxExtractedSize bool } // NewService returns a new instance of the Manifest service @@ -369,7 +371,7 @@ func (s *Service) runRepoOperation( if source.Helm != nil { helmPassCredentials = source.Helm.PassCredentials } - chartPath, closer, err := helmClient.ExtractChart(source.Chart, revision, helmPassCredentials) + chartPath, closer, err := helmClient.ExtractChart(source.Chart, revision, helmPassCredentials, s.initConstants.HelmManifestMaxExtractedSize, s.initConstants.DisableHelmManifestMaxExtractedSize) if err != nil { return err } @@ -2383,7 +2385,7 @@ func (s *Service) GetRevisionChartDetails(ctx context.Context, q *apiclient.Repo if err != nil { return nil, fmt.Errorf("helm client error: %v", err) } - chartPath, closer, err := helmClient.ExtractChart(q.Name, revision, false) + chartPath, closer, err := helmClient.ExtractChart(q.Name, revision, false, s.initConstants.HelmManifestMaxExtractedSize, s.initConstants.DisableHelmManifestMaxExtractedSize) if err != nil { return nil, fmt.Errorf("error extracting chart: %v", err) } diff --git a/util/helm/client.go b/util/helm/client.go index 8096b8009dbb4..5e96e0535b4c9 100644 --- a/util/helm/client.go +++ b/util/helm/client.go @@ -8,6 +8,7 @@ import ( "encoding/json" "errors" "fmt" + executil "github.com/argoproj/argo-cd/v2/util/exec" "io" "net/http" "net/url" @@ -25,7 +26,6 @@ import ( "oras.land/oras-go/v2/registry/remote/auth" "github.com/argoproj/argo-cd/v2/util/cache" - executil "github.com/argoproj/argo-cd/v2/util/exec" argoio "github.com/argoproj/argo-cd/v2/util/io" "github.com/argoproj/argo-cd/v2/util/io/files" "github.com/argoproj/argo-cd/v2/util/proxy" @@ -52,7 +52,7 @@ type indexCache interface { type Client interface { CleanChartCache(chart string, version string) error - ExtractChart(chart string, version string, passCredentials bool) (string, argoio.Closer, error) + ExtractChart(chart string, version string, passCredentials bool, manifestMaxExtractedSize int64, disableManifestMaxExtractedSize bool) (string, argoio.Closer, error) GetIndex(noCache bool) (*Index, error) GetTags(chart string, noCache bool) (*TagsList, error) TestHelmOCI() (bool, error) @@ -122,7 +122,21 @@ func (c *nativeHelmChart) CleanChartCache(chart string, version string) error { return os.RemoveAll(cachePath) } -func (c *nativeHelmChart) ExtractChart(chart string, version string, passCredentials bool) (string, argoio.Closer, error) { +func untarChart(tempDir string, cachedChartPath string, manifestMaxExtractedSize int64, disableManifestMaxExtractedSize bool) error { + if disableManifestMaxExtractedSize { + cmd := exec.Command("tar", "-zxvf", cachedChartPath) + cmd.Dir = tempDir + _, err := executil.Run(cmd) + return err + } + reader, err := os.Open(cachedChartPath) + if err != nil { + return err + } + return files.Untgz(tempDir, reader, manifestMaxExtractedSize, false) +} + +func (c *nativeHelmChart) ExtractChart(chart string, version string, passCredentials bool, manifestMaxExtractedSize int64, disableManifestMaxExtractedSize bool) (string, argoio.Closer, error) { // always use Helm V3 since we don't have chart content to determine correct Helm version helmCmd, err := NewCmdWithVersion("", HelmV3, c.enableOci, c.proxy) @@ -196,15 +210,14 @@ func (c *nativeHelmChart) ExtractChart(chart string, version string, passCredent if len(infos) != 1 { return "", nil, fmt.Errorf("expected 1 file, found %v", len(infos)) } + err = os.Rename(filepath.Join(tempDest, infos[0].Name()), cachedChartPath) if err != nil { return "", nil, err } } - cmd := exec.Command("tar", "-zxvf", cachedChartPath) - cmd.Dir = tempDir - _, err = executil.Run(cmd) + err = untarChart(tempDir, cachedChartPath, manifestMaxExtractedSize, disableManifestMaxExtractedSize) if err != nil { _ = os.RemoveAll(tempDir) return "", nil, err diff --git a/util/helm/client_test.go b/util/helm/client_test.go index 63b57b7fa5180..3cda26feb5f0e 100644 --- a/util/helm/client_test.go +++ b/util/helm/client_test.go @@ -4,6 +4,7 @@ import ( "bytes" "encoding/json" "fmt" + "math" "os" "strings" "testing" @@ -71,7 +72,7 @@ func TestIndex(t *testing.T) { func Test_nativeHelmChart_ExtractChart(t *testing.T) { client := NewClient("https://argoproj.github.io/argo-helm", Creds{}, false, "") - path, closer, err := client.ExtractChart("argo-cd", "0.7.1", false) + path, closer, err := client.ExtractChart("argo-cd", "0.7.1", false, math.MaxInt64, true) assert.NoError(t, err) defer io.Close(closer) info, err := os.Stat(path) @@ -79,9 +80,15 @@ func Test_nativeHelmChart_ExtractChart(t *testing.T) { assert.True(t, info.IsDir()) } +func Test_nativeHelmChart_ExtractChartWithLimiter(t *testing.T) { + client := NewClient("https://argoproj.github.io/argo-helm", Creds{}, false, "") + _, _, err := client.ExtractChart("argo-cd", "0.7.1", false, 100, false) + assert.Error(t, err, "error while iterating on tar reader: unexpected EOF") +} + func Test_nativeHelmChart_ExtractChart_insecure(t *testing.T) { client := NewClient("https://argoproj.github.io/argo-helm", Creds{InsecureSkipVerify: true}, false, "") - path, closer, err := client.ExtractChart("argo-cd", "0.7.1", false) + path, closer, err := client.ExtractChart("argo-cd", "0.7.1", false, math.MaxInt64, true) assert.NoError(t, err) defer io.Close(closer) info, err := os.Stat(path) diff --git a/util/helm/mocks/Client.go b/util/helm/mocks/Client.go index 31b5a11e25110..6dc25e4affd0b 100644 --- a/util/helm/mocks/Client.go +++ b/util/helm/mocks/Client.go @@ -29,7 +29,7 @@ func (_m *Client) CleanChartCache(chart string, version string) error { } // ExtractChart provides a mock function with given fields: chart, version -func (_m *Client) ExtractChart(chart string, version string, passCredentials bool) (string, io.Closer, error) { +func (_m *Client) ExtractChart(chart string, version string, passCredentials bool, manifestMaxExtractedSize int64, disableManifestMaxExtractedSize bool) (string, io.Closer, error) { ret := _m.Called(chart, version) var r0 string From 2ff95060a905b1351eedb22efd85f4e824516cda Mon Sep 17 00:00:00 2001 From: pashakostohrys Date: Mon, 11 Sep 2023 12:16:26 +0300 Subject: [PATCH 2/2] fix manifests generation --- manifests/base/kustomization.yaml | 2 +- manifests/core-install.yaml | 6 +++--- manifests/core-install/kustomization.yaml | 2 +- manifests/ha/base/kustomization.yaml | 2 +- manifests/ha/install.yaml | 10 +++++----- manifests/ha/namespace-install.yaml | 10 +++++----- manifests/install.yaml | 10 +++++----- manifests/namespace-install.yaml | 10 +++++----- 8 files changed, 26 insertions(+), 26 deletions(-) diff --git a/manifests/base/kustomization.yaml b/manifests/base/kustomization.yaml index 3be264a1eafd4..7be81fd547fcf 100644 --- a/manifests/base/kustomization.yaml +++ b/manifests/base/kustomization.yaml @@ -4,7 +4,7 @@ kind: Kustomization images: - name: quay.io/argoproj/argocd newName: quay.io/codefresh/argocd - newTag: v2.8.1-cap-CR-19754-deletion-fix + newTag: latest resources: - ./application-controller - ./dex diff --git a/manifests/core-install.yaml b/manifests/core-install.yaml index 6e493e54e6f33..c3e778e7d0d70 100644 --- a/manifests/core-install.yaml +++ b/manifests/core-install.yaml @@ -19589,7 +19589,7 @@ spec: value: /helm-working-dir - name: HELM_DATA_HOME value: /helm-working-dir - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always livenessProbe: failureThreshold: 3 @@ -19641,7 +19641,7 @@ spec: - -n - /usr/local/bin/argocd - /var/run/argocd/argocd-cmp-server - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest name: copyutil securityContext: allowPrivilegeEscalation: false @@ -19859,7 +19859,7 @@ spec: key: controller.kubectl.parallelism.limit name: argocd-cmd-params-cm optional: true - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always name: argocd-application-controller ports: diff --git a/manifests/core-install/kustomization.yaml b/manifests/core-install/kustomization.yaml index 214a45cde6295..66dd4c93f4989 100644 --- a/manifests/core-install/kustomization.yaml +++ b/manifests/core-install/kustomization.yaml @@ -12,4 +12,4 @@ resources: images: - name: quay.io/argoproj/argocd newName: quay.io/codefresh/argocd - newTag: v2.8.1-cap-CR-19754-deletion-fix + newTag: latest diff --git a/manifests/ha/base/kustomization.yaml b/manifests/ha/base/kustomization.yaml index 72cde331c60a1..be844b45bc7b3 100644 --- a/manifests/ha/base/kustomization.yaml +++ b/manifests/ha/base/kustomization.yaml @@ -11,7 +11,7 @@ patches: images: - name: quay.io/argoproj/argocd newName: quay.io/codefresh/argocd - newTag: v2.8.1-cap-CR-19754-deletion-fix + newTag: latest resources: - ../../base/application-controller - ../../base/applicationset-controller diff --git a/manifests/ha/install.yaml b/manifests/ha/install.yaml index 33710fe62fe6c..2cd44cb2fc5b7 100644 --- a/manifests/ha/install.yaml +++ b/manifests/ha/install.yaml @@ -20543,7 +20543,7 @@ spec: - -n - /usr/local/bin/argocd - /shared/argocd-dex - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always name: copyutil securityContext: @@ -20867,7 +20867,7 @@ spec: value: /helm-working-dir - name: HELM_DATA_HOME value: /helm-working-dir - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always livenessProbe: failureThreshold: 3 @@ -20919,7 +20919,7 @@ spec: - -n - /usr/local/bin/argocd - /var/run/argocd/argocd-cmp-server - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest name: copyutil securityContext: allowPrivilegeEscalation: false @@ -21214,7 +21214,7 @@ spec: key: server.enable.proxy.extension name: argocd-cmd-params-cm optional: true - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always livenessProbe: httpGet: @@ -21462,7 +21462,7 @@ spec: key: controller.kubectl.parallelism.limit name: argocd-cmd-params-cm optional: true - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always name: argocd-application-controller ports: diff --git a/manifests/ha/namespace-install.yaml b/manifests/ha/namespace-install.yaml index 27f8246975cc5..bd0c270591ffd 100644 --- a/manifests/ha/namespace-install.yaml +++ b/manifests/ha/namespace-install.yaml @@ -1644,7 +1644,7 @@ spec: - -n - /usr/local/bin/argocd - /shared/argocd-dex - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always name: copyutil securityContext: @@ -1968,7 +1968,7 @@ spec: value: /helm-working-dir - name: HELM_DATA_HOME value: /helm-working-dir - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always livenessProbe: failureThreshold: 3 @@ -2020,7 +2020,7 @@ spec: - -n - /usr/local/bin/argocd - /var/run/argocd/argocd-cmp-server - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest name: copyutil securityContext: allowPrivilegeEscalation: false @@ -2315,7 +2315,7 @@ spec: key: server.enable.proxy.extension name: argocd-cmd-params-cm optional: true - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always livenessProbe: httpGet: @@ -2563,7 +2563,7 @@ spec: key: controller.kubectl.parallelism.limit name: argocd-cmd-params-cm optional: true - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always name: argocd-application-controller ports: diff --git a/manifests/install.yaml b/manifests/install.yaml index 5cc0129f63ebe..3f1f872d07bc1 100644 --- a/manifests/install.yaml +++ b/manifests/install.yaml @@ -19644,7 +19644,7 @@ spec: - -n - /usr/local/bin/argocd - /shared/argocd-dex - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always name: copyutil securityContext: @@ -19922,7 +19922,7 @@ spec: value: /helm-working-dir - name: HELM_DATA_HOME value: /helm-working-dir - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always livenessProbe: failureThreshold: 3 @@ -19974,7 +19974,7 @@ spec: - -n - /usr/local/bin/argocd - /var/run/argocd/argocd-cmp-server - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest name: copyutil securityContext: allowPrivilegeEscalation: false @@ -20260,7 +20260,7 @@ spec: key: server.enable.proxy.extension name: argocd-cmd-params-cm optional: true - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always livenessProbe: httpGet: @@ -20506,7 +20506,7 @@ spec: key: controller.kubectl.parallelism.limit name: argocd-cmd-params-cm optional: true - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always name: argocd-application-controller ports: diff --git a/manifests/namespace-install.yaml b/manifests/namespace-install.yaml index f0b1452c5792f..a60485ed64a1a 100644 --- a/manifests/namespace-install.yaml +++ b/manifests/namespace-install.yaml @@ -745,7 +745,7 @@ spec: - -n - /usr/local/bin/argocd - /shared/argocd-dex - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always name: copyutil securityContext: @@ -1023,7 +1023,7 @@ spec: value: /helm-working-dir - name: HELM_DATA_HOME value: /helm-working-dir - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always livenessProbe: failureThreshold: 3 @@ -1075,7 +1075,7 @@ spec: - -n - /usr/local/bin/argocd - /var/run/argocd/argocd-cmp-server - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest name: copyutil securityContext: allowPrivilegeEscalation: false @@ -1361,7 +1361,7 @@ spec: key: server.enable.proxy.extension name: argocd-cmd-params-cm optional: true - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always livenessProbe: httpGet: @@ -1607,7 +1607,7 @@ spec: key: controller.kubectl.parallelism.limit name: argocd-cmd-params-cm optional: true - image: quay.io/codefresh/argocd:v2.8.1-cap-CR-19754-deletion-fix + image: quay.io/codefresh/argocd:latest imagePullPolicy: Always name: argocd-application-controller ports: