From 926f4c612187c02f4ef8c0175a8c5c6d017c82c2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jarom=C3=ADr=20Hradil?= <jaromir.hradil@cesnet.cz>
Date: Tue, 11 Mar 2025 09:50:38 +0100
Subject: [PATCH] Updating eosc deployments based on security recommendations

---
 common/deployments/hub-production.yaml     | 4 ++--
 common/deployments/hub-staging.yaml        | 4 ++--
 common/playbooks/files/jupyterhub-jwt.yaml | 2 +-
 eosc-devel/deployments/fullhub.yaml        | 4 ++--
 eosc-testing/deployments/hub.yaml          | 2 +-
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/common/deployments/hub-production.yaml b/common/deployments/hub-production.yaml
index 332658e..872fdb7 100644
--- a/common/deployments/hub-production.yaml
+++ b/common/deployments/hub-production.yaml
@@ -50,7 +50,7 @@ singleuser:
               app.kubernetes.io/instance: cluster-ingress
   image:
     name: eginotebooks/single-user-eosc
-    tag: "sha-405f47f"
+    tag: "sha-56f331e"
   profileList:
     - display_name: Small Environment - 2 vCPU / 4 GB RAM
       description: >
@@ -159,7 +159,7 @@ hub:
   image:
     name: eginotebooks/hub
     # k8s-hub 4.0.0
-    tag: "sha-b20ead2"
+    tag: "sha-aef23d2"
   loadRoles:
     #user scopes required for user initiated sharing API
     user:
diff --git a/common/deployments/hub-staging.yaml b/common/deployments/hub-staging.yaml
index 0724870..2100ac8 100644
--- a/common/deployments/hub-staging.yaml
+++ b/common/deployments/hub-staging.yaml
@@ -50,7 +50,7 @@ singleuser:
               app.kubernetes.io/instance: cluster-ingress
   image:
     name: eginotebooks/single-user-eosc
-    tag: "sha-405f47f"
+    tag: "sha-56f331e"
   profileList:
     - display_name: Small Environment - 2 vCPU / 4 GB RAM
       description: >
@@ -159,7 +159,7 @@ hub:
   image:
     name: eginotebooks/hub
     # k8s-hub 4.0.0
-    tag: "sha-b20ead2"
+    tag: "sha-aef23d2"
   loadRoles:
     #user scopes required for user initiated sharing API
     user:
diff --git a/common/playbooks/files/jupyterhub-jwt.yaml b/common/playbooks/files/jupyterhub-jwt.yaml
index 09bd516..d43cb16 100644
--- a/common/playbooks/files/jupyterhub-jwt.yaml
+++ b/common/playbooks/files/jupyterhub-jwt.yaml
@@ -20,7 +20,7 @@ spec:
       containers:
         - name: jwt
           # recommended to keep it in sync with */deployments/*.yaml
-          image: eginotebooks/hub:sha-b20ead2
+          image: eginotebooks/hub:sha-aef23d2
           args:
             - fastapi
             - run
diff --git a/eosc-devel/deployments/fullhub.yaml b/eosc-devel/deployments/fullhub.yaml
index 758f47b..1991c22 100644
--- a/eosc-devel/deployments/fullhub.yaml
+++ b/eosc-devel/deployments/fullhub.yaml
@@ -50,7 +50,7 @@ singleuser:
               app.kubernetes.io/instance: cluster-ingress
   image:
     name: eginotebooks/single-user-eosc
-    tag: "sha-405f47f"
+    tag: "sha-56f331e"
   profileList:
     - display_name: Small Environment - 2 vCPU / 4 GB RAM
       description: >
@@ -160,7 +160,7 @@ hub:
   image:
     name: eginotebooks/hub
     # k8s-hub 4.0.0
-    tag: "sha-b20ead2"
+    tag: "sha-aef23d2"
   loadRoles:
     #user roles required for user initiated sharing API
     user:
diff --git a/eosc-testing/deployments/hub.yaml b/eosc-testing/deployments/hub.yaml
index fc226b4..8851feb 100644
--- a/eosc-testing/deployments/hub.yaml
+++ b/eosc-testing/deployments/hub.yaml
@@ -160,7 +160,7 @@ hub:
   image:
     name: eginotebooks/hub
     # k8s-hub 4.0.0
-    tag: "sha-8d43cfe"
+    tag: "sha-aef23d2"
   loadRoles:
     #user roles required for user initiated sharing API
     user:
-- 
GitLab