From 7c265348466eb940037d1157bd81584384204e35 Mon Sep 17 00:00:00 2001 From: Steven Terhar Date: Wed, 14 Apr 2021 14:38:47 +0000 Subject: [PATCH 1/2] Update GitLab to the 13.10.3 Security Release --- Dockerfile | 15 ++++++++++++--- build-scripts/build.sh | 2 +- hardening_manifest.yaml | 10 +++++----- 3 files changed, 18 insertions(+), 9 deletions(-) diff --git a/Dockerfile b/Dockerfile index efcde8e..ef04300 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,17 +1,26 @@ -ARG GITLAB_VERSION=v13.10.0-ubi8 +ARG GITLAB_VERSION=v13.10.3-ubi8 ARG BASE_REGISTRY=nexus-docker-secure.levelup-nexus.svc.cluster.local:18082 ARG BASE_IMAGE=gitlab/gitlab/gitlab-ruby -ARG BASE_TAG=13.10.0 +ARG BASE_TAG=13.10.3 ARG RUBY_IMAGE=${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} FROM ${RUBY_IMAGE} -ARG GITLAB_EXPORTER_VERSION=10.0.0 +ARG GITLAB_EXPORTER_VERSION=10.1.0 ARG GITLAB_USER=git ARG DNF_OPTS +LABEL source="https://gitlab.com/gitlab-org/build/CNG/-/tree/master/gitlab-exporter" \ + name="GitLab Exporter" \ + maintainer="GitLab Distribution Team" \ + vendor="GitLab" \ + version=${GITLAB_EXPORTER_VERSION} \ + release=${GITLAB_EXPORTER_VERSION} \ + summary="Prometheus Web exporter for GitLab." \ + description="Prometheus Web exporter for GitLab." + ENV CONFIG_TEMPLATE_DIRECTORY=/var/opt/gitlab-exporter/templates ENV CONFIG_DIRECTORY=/etc/gitlab-exporter ENV CONFIG_FILENAME=gitlab-exporter.yml diff --git a/build-scripts/build.sh b/build-scripts/build.sh index e659e93..2b37018 100755 --- a/build-scripts/build.sh +++ b/build-scripts/build.sh @@ -4,7 +4,7 @@ set -euxo pipefail -TAG=${1:-13.10.0} +TAG=${1:-13.10.3} REPOSITORY=${2:-} DOCKER_OPTS=${DOCKER_OPTS:-""} diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml index 9cff4d3..329ba67 100644 --- a/hardening_manifest.yaml +++ b/hardening_manifest.yaml @@ -5,12 +5,12 @@ name: "gitlab/gitlab/gitlab-exporter" # The most specific version should be the first tag and will be shown # on ironbank.dsop.io tags: - - "13.10.0" + - "13.10.3" - "latest" # Build args passed to Dockerfile ARGs args: BASE_IMAGE: "gitlab/gitlab/gitlab-ruby" - BASE_TAG: "13.10.0" + BASE_TAG: "13.10.3" # Docker image labels labels: org.opencontainers.image.title: "Gitlab Exporter" @@ -22,7 +22,7 @@ labels: org.opencontainers.image.url: "https://about.gitlab.com/" ## Name of the distributing entity, organization or individual org.opencontainers.image.vendor: "Gitlab" - org.opencontainers.image.version: "13.10.0" + org.opencontainers.image.version: "13.10.3" ## Keywords to help with search (ex. "cicd,gitops,golang") mil.dso.ironbank.image.keywords: "gitlab, git, gitops" ## This value can be "opensource" or "commercial" @@ -43,8 +43,8 @@ maintainers: username: "alfontaine" email: "alan.fontaine@centauricorp.com" resources: - - url: "https://gitlab-ubi.s3.amazonaws.com/ubi8-build-dependencies-v13.10.0-ubi8/gitlab-exporter.tar.gz" + - url: "https://gitlab-ubi.s3.amazonaws.com/ubi8-build-dependencies-v13.10.3-ubi8/gitlab-exporter.tar.gz" filename: "gitlab-exporter.tar.gz" validation: type: "sha256" - value: "b68af8a73952b7b1d27094159cafbe48753e5d7aadfda2facc08370af53a221e" + value: "38bbedb402c3ff652eaf7a103253f998a0fb26e8a641d30f341d88a9d2fc05c4" -- GitLab From 33832996a389c3e8d8c23a67d19a3c01aeb49be4 Mon Sep 17 00:00:00 2001 From: Steven Terhar Date: Wed, 14 Apr 2021 14:49:31 +0000 Subject: [PATCH 2/2] Update Dockerfile - remove label --- Dockerfile | 9 --------- 1 file changed, 9 deletions(-) diff --git a/Dockerfile b/Dockerfile index ef04300..e4778ca 100644 --- a/Dockerfile +++ b/Dockerfile @@ -12,15 +12,6 @@ ARG GITLAB_EXPORTER_VERSION=10.1.0 ARG GITLAB_USER=git ARG DNF_OPTS -LABEL source="https://gitlab.com/gitlab-org/build/CNG/-/tree/master/gitlab-exporter" \ - name="GitLab Exporter" \ - maintainer="GitLab Distribution Team" \ - vendor="GitLab" \ - version=${GITLAB_EXPORTER_VERSION} \ - release=${GITLAB_EXPORTER_VERSION} \ - summary="Prometheus Web exporter for GitLab." \ - description="Prometheus Web exporter for GitLab." - ENV CONFIG_TEMPLATE_DIRECTORY=/var/opt/gitlab-exporter/templates ENV CONFIG_DIRECTORY=/etc/gitlab-exporter ENV CONFIG_FILENAME=gitlab-exporter.yml -- GitLab