Merge branch 'renovate/ironbank' into 'main'

Update Ironbank

See merge request !109

CHANGELOG.md

@@ -2,6 +2,11 @@
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 ---
+## [1.19.7-bb.0] - 2024-1-12
+### Added
+- Updated repo1 image to `1.19.7`
+- Updated TID image to `1.20.3`
+
 ## [1.19.6-bb.0] - 2024-1-12
 ### Added
 - Updated repo1 image to `1.19.6`

README.md

 # istio-operator
 
-![Version: 1.19.6-bb.0](https://img.shields.io/badge/Version-1.19.6--bb.0-informational?style=flat-square) ![AppVersion: 1.19.6](https://img.shields.io/badge/AppVersion-1.19.6-informational?style=flat-square)
+![Version: 1.19.7-bb.0](https://img.shields.io/badge/Version-1.19.7--bb.0-informational?style=flat-square) ![AppVersion: 1.19.7](https://img.shields.io/badge/AppVersion-1.19.7-informational?style=flat-square)
 
 Helm chart for deploying Istio operator
 
@@ -36,10 +36,10 @@ helm install istio-operator chart/
 |-----|------|---------|-------------|
 | hub | string | `"registry1.dso.mil/ironbank/opensource/istio"` |  |
 | image | string | `"operator"` |  |
-| tag | string | `"1.19.6"` |  |
+| tag | string | `"1.19.7"` |  |
 | enterprise | bool | `false` | Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support, validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription |
 | tidHub | string | `"registry1.dso.mil/ironbank/tetrate/istio"` |  |
-| tidTag | string | `"1.19.6-tetratefips-v0"` |  |
+| tidTag | string | `"1.20.3-tetratefips-v0"` |  |
 | imagePullSecrets | list | `[]` |  |
 | imagePullPolicy | string | `""` |  |
 | watchedNamespaces | string | `"istio-system"` |  |

chart/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v1
 name: istio-operator
 # This version is never actually shipped. istio/release-builder will replace it at build-time
 # with the appropriate version
-version: 1.19.6-bb.0
-appVersion: 1.19.6
+version: 1.19.7-bb.0
+appVersion: 1.19.7
 tillerVersion: ">=2.7.2"
 description: Helm chart for deploying Istio operator
 keywords:
@@ -15,11 +15,11 @@ engine: gotpl
 icon: https://istio.io/latest/favicons/android-192x192.png
 annotations:
   bigbang.dev/applicationVersions: |
-    - Istio Operator: 1.19.6
-    - Tetrate Istio Distro Operator: 1.20.2
+    - Istio Operator: 1.19.7
+    - Tetrate Istio Distro Operator: 1.20.3
   helm.sh/images: |
     - name: operator
-      image: registry1.dso.mil/ironbank/opensource/istio/operator:1.19.6
+      image: registry1.dso.mil/ironbank/opensource/istio/operator:1.19.7
     - name: tetrate-operator
       condition: enterprise
-      image: registry1.dso.mil/ironbank/tetrate/istio/operator:1.20.2-tetratefips-v0
+      image: registry1.dso.mil/ironbank/tetrate/istio/operator:1.20.3-tetratefips-v0

chart/Kptfile

@@ -5,7 +5,7 @@ metadata:
 upstream:
   type: git
   git:
-    commit: 1e08d21d684dfe61e9746abe24ea9f3c99acde62
+    commit: 692e556046b48ebc471205211c68a2c69e74a321
     repo: https://github.com/istio/istio
     directory: /manifests/charts/istio-operator
-    ref: 1.19.6
+    ref: 1.20.3

chart/templates/deployment.yaml

@@ -44,8 +44,6 @@ spec:
               - ALL
             privileged: false
             readOnlyRootFilesystem: true
-            runAsGroup: 1337
-            runAsUser: 1337
             runAsNonRoot: true
 {{- if .Values.operator.seccompProfile }}
             seccompProfile:

chart/values.yaml

 hub: registry1.dso.mil/ironbank/opensource/istio
 ## Added by Big Bang
 image: operator
-tag: 1.19.6
+tag: 1.19.7
 
 # -- Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support,
 # validated through the FIPs Boring Crypto module.
 # Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription
 enterprise: false
 tidHub: registry1.dso.mil/ironbank/tetrate/istio
-tidTag: 1.20.2-tetratefips-v0
+tidTag: 1.20.3-tetratefips-v0
 
 # ImagePullSecrets for operator ServiceAccount, list of secrets in the same namespace
 # used to pull operator image. Must be set for any cluster configured with private docker registry.

tests/images.txt

-registry1.dso.mil/ironbank/tetrate/istio/operator:1.20.2-tetratefips-v0
+registry1.dso.mil/ironbank/tetrate/istio/operator:1.20.3-tetratefips-v0