From 926f4c612187c02f4ef8c0175a8c5c6d017c82c2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jarom=C3=ADr=20Hradil?= <jaromir.hradil@cesnet.cz> Date: Tue, 11 Mar 2025 09:50:38 +0100 Subject: [PATCH] Updating eosc deployments based on security recommendations --- common/deployments/hub-production.yaml | 4 ++-- common/deployments/hub-staging.yaml | 4 ++-- common/playbooks/files/jupyterhub-jwt.yaml | 2 +- eosc-devel/deployments/fullhub.yaml | 4 ++-- eosc-testing/deployments/hub.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/common/deployments/hub-production.yaml b/common/deployments/hub-production.yaml index 332658e..872fdb7 100644 --- a/common/deployments/hub-production.yaml +++ b/common/deployments/hub-production.yaml @@ -50,7 +50,7 @@ singleuser: app.kubernetes.io/instance: cluster-ingress image: name: eginotebooks/single-user-eosc - tag: "sha-405f47f" + tag: "sha-56f331e" profileList: - display_name: Small Environment - 2 vCPU / 4 GB RAM description: > @@ -159,7 +159,7 @@ hub: image: name: eginotebooks/hub # k8s-hub 4.0.0 - tag: "sha-b20ead2" + tag: "sha-aef23d2" loadRoles: #user scopes required for user initiated sharing API user: diff --git a/common/deployments/hub-staging.yaml b/common/deployments/hub-staging.yaml index 0724870..2100ac8 100644 --- a/common/deployments/hub-staging.yaml +++ b/common/deployments/hub-staging.yaml @@ -50,7 +50,7 @@ singleuser: app.kubernetes.io/instance: cluster-ingress image: name: eginotebooks/single-user-eosc - tag: "sha-405f47f" + tag: "sha-56f331e" profileList: - display_name: Small Environment - 2 vCPU / 4 GB RAM description: > @@ -159,7 +159,7 @@ hub: image: name: eginotebooks/hub # k8s-hub 4.0.0 - tag: "sha-b20ead2" + tag: "sha-aef23d2" loadRoles: #user scopes required for user initiated sharing API user: diff --git a/common/playbooks/files/jupyterhub-jwt.yaml b/common/playbooks/files/jupyterhub-jwt.yaml index 09bd516..d43cb16 100644 --- a/common/playbooks/files/jupyterhub-jwt.yaml +++ b/common/playbooks/files/jupyterhub-jwt.yaml @@ -20,7 +20,7 @@ spec: containers: - name: jwt # recommended to keep it in sync with */deployments/*.yaml - image: eginotebooks/hub:sha-b20ead2 + image: eginotebooks/hub:sha-aef23d2 args: - fastapi - run diff --git a/eosc-devel/deployments/fullhub.yaml b/eosc-devel/deployments/fullhub.yaml index 758f47b..1991c22 100644 --- a/eosc-devel/deployments/fullhub.yaml +++ b/eosc-devel/deployments/fullhub.yaml @@ -50,7 +50,7 @@ singleuser: app.kubernetes.io/instance: cluster-ingress image: name: eginotebooks/single-user-eosc - tag: "sha-405f47f" + tag: "sha-56f331e" profileList: - display_name: Small Environment - 2 vCPU / 4 GB RAM description: > @@ -160,7 +160,7 @@ hub: image: name: eginotebooks/hub # k8s-hub 4.0.0 - tag: "sha-b20ead2" + tag: "sha-aef23d2" loadRoles: #user roles required for user initiated sharing API user: diff --git a/eosc-testing/deployments/hub.yaml b/eosc-testing/deployments/hub.yaml index fc226b4..8851feb 100644 --- a/eosc-testing/deployments/hub.yaml +++ b/eosc-testing/deployments/hub.yaml @@ -160,7 +160,7 @@ hub: image: name: eginotebooks/hub # k8s-hub 4.0.0 - tag: "sha-8d43cfe" + tag: "sha-aef23d2" loadRoles: #user roles required for user initiated sharing API user: -- GitLab