diff --git a/data-science-pipelines-operator/base/params.env b/data-science-pipelines-operator/base/params.env index e8adc3bc3..242717e0e 100644 --- a/data-science-pipelines-operator/base/params.env +++ b/data-science-pipelines-operator/base/params.env @@ -6,7 +6,8 @@ IMAGES_CACHE=registry.access.redhat.com/ubi8/ubi-minimal@sha256:e52fc1de73dc2879 IMAGES_MOVERESULTSIMAGE=registry.access.redhat.com/ubi8/ubi-micro@sha256:443db9a646aaf9374f95d266ba0c8656a52d70d0ffcc386a782cea28fa32e55d IMAGES_MARIADB=registry.redhat.io/rhel8/mariadb-103@sha256:cafc7364494fb7206c373a1235fd5da74399c19b5c34d87dd02aa07e8f343fa2 IMAGES_DSPO=quay.io/opendatahub/data-science-pipelines-operator@sha256:bd4f3cfc9688aeb4296a5f3f7274557adeca0a8811533da750f05b485a819a8d -IMAGES_OAUTHPROXY=registry.redhat.io/openshift4/ose-oauth-proxy@sha256:d0f2f1ef0bdc3aa1a70794ac8ac779271b634af83e939029ac5224ec0c815d7a +IMAGES_OAUTHPROXY=registry.redhat.io/openshift4/ose-oauth-proxy@sha256:ab112105ac37352a2a4916a39d6736f5db6ab4c29bad4467de8d613e80e9bb33 IMAGES_MLMDENVOY=quay.io/opendatahub/ds-pipelines-metadata-envoy@sha256:f2d5d430bbc925520f635f35698e604aae391ace39b15a5d601a9c9eb26dec2b IMAGES_MLMDGRPC=quay.io/opendatahub/ds-pipelines-metadata-grpc@sha256:2490aadb2227cc72fd9e698549a8cd3270b669a2faa24bb0603c37f1c71ac8c4 IMAGES_MLMDWRITER=quay.io/opendatahub/ds-pipelines-metadata-writer@sha256:89fc26374f8e58384628f6b178eb9b8e3ebb111fe395c529d0b65ba8adaa89f5 + diff --git a/model-mesh/odh-modelmesh-controller/internal/base/deployment.yaml.tmpl b/model-mesh/odh-modelmesh-controller/internal/base/deployment.yaml.tmpl index ab838e199..aba9769b7 100644 --- a/model-mesh/odh-modelmesh-controller/internal/base/deployment.yaml.tmpl +++ b/model-mesh/odh-modelmesh-controller/internal/base/deployment.yaml.tmpl @@ -136,7 +136,7 @@ spec: - '--openshift-delegate-urls={"/": {"namespace": "{{.AuthNamespace}}", "resource": "services", "verb": "get"}}' - '--openshift-sar={"namespace": "{{.AuthNamespace}}", "resource": "services", "verb": "get"}' - --skip-auth-regex='(^/metrics|^/apis/v1beta1/healthz)' - image: registry.redhat.io/openshift4/ose-oauth-proxy@sha256:4bef31eb993feb6f1096b51b4876c65a6fb1f4401fee97fa4f4542b6b7c9bc46 + image: registry.redhat.io/openshift4/ose-oauth-proxy@sha256:ab112105ac37352a2a4916a39d6736f5db6ab4c29bad4467de8d613e80e9bb33 ports: - containerPort: 8443 name: https diff --git a/modelmesh-monitoring/base/prometheus/odh-prometheus.yaml b/modelmesh-monitoring/base/prometheus/odh-prometheus.yaml index ccb6ef262..5402a9ab7 100644 --- a/modelmesh-monitoring/base/prometheus/odh-prometheus.yaml +++ b/modelmesh-monitoring/base/prometheus/odh-prometheus.yaml @@ -19,7 +19,7 @@ spec: - '--openshift-sar={"namespace": "$(DEPLOYMENT_NAMESPACE)", "resource": "services", "verb": "get"}' - '--openshift-delegate-urls={"/": {"namespace": "$(DEPLOYMENT_NAMESPACE)", "resource": "services", "verb": "get"}}' - '-skip-auth-regex=^/metrics' - image: 'registry.redhat.io/openshift4/ose-oauth-proxy@sha256:4bef31eb993feb6f1096b51b4876c65a6fb1f4401fee97fa4f4542b6b7c9bc46' + image: 'registry.redhat.io/openshift4/ose-oauth-proxy@sha256:ab112105ac37352a2a4916a39d6736f5db6ab4c29bad4467de8d613e80e9bb33' imagePullPolicy: Always env: - name: DEPLOYMENT_NAMESPACE diff --git a/odh-dashboard/base/kustomization.yaml b/odh-dashboard/base/kustomization.yaml index cc9bb1386..eae7b1c50 100644 --- a/odh-dashboard/base/kustomization.yaml +++ b/odh-dashboard/base/kustomization.yaml @@ -28,4 +28,4 @@ images: newTag: v2.12.0 - name: oauth-proxy newName: registry.redhat.io/openshift4/ose-oauth-proxy - newTag: v4.8 + digest: sha256:ab112105ac37352a2a4916a39d6736f5db6ab4c29bad4467de8d613e80e9bb33 diff --git a/odh-notebook-controller/odh-notebook-controller/manager/manager.yaml b/odh-notebook-controller/odh-notebook-controller/manager/manager.yaml index 7038db98a..5d7592e06 100644 --- a/odh-notebook-controller/odh-notebook-controller/manager/manager.yaml +++ b/odh-notebook-controller/odh-notebook-controller/manager/manager.yaml @@ -25,7 +25,7 @@ spec: imagePullPolicy: Always command: - /manager - args: ["--oauth-proxy-image", "registry.redhat.io/openshift4/ose-oauth-proxy:v4.10"] + args: ["--oauth-proxy-image", "registry.redhat.io/openshift4/ose-oauth-proxy@sha256:ab112105ac37352a2a4916a39d6736f5db6ab4c29bad4467de8d613e80e9bb33"] securityContext: allowPrivilegeEscalation: false ports: diff --git a/tests/resources/codeflare-stack/custom-nb-small.yaml b/tests/resources/codeflare-stack/custom-nb-small.yaml index f411a8a8c..a9d14473c 100644 --- a/tests/resources/codeflare-stack/custom-nb-small.yaml +++ b/tests/resources/codeflare-stack/custom-nb-small.yaml @@ -107,7 +107,7 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: registry.redhat.io/openshift4/ose-oauth-proxy:v4.10 + image: registry.redhat.io/openshift4/ose-oauth-proxy@sha256:ab112105ac37352a2a4916a39d6736f5db6ab4c29bad4467de8d613e80e9bb33 imagePullPolicy: Always livenessProbe: failureThreshold: 3