chore: update k0s images #3139
chore: update k0s images #3139
Conversation
|
This PR has been released (on staging) and is available for download with a embedded-cluster-smoke-test-staging-app license ID. Online Installer: Airgap Installer (may take a few minutes before the airgap bundle is built): Happy debugging! |
replicated-ci-ec
force-pushed
the
automation/k0s-image-dependencies
branch
6 times, most recently
from
1e977e6 to
a9dcea4
Compare
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| amd64: 3.9-amd64@sha256:86665160218b2b1368f5f47424f1ee0fae0816cdc2534d49b0c1d962fc3bfe51 | ||
| arm64: 3.9-arm64@sha256:32762831e8554e74cf8871498164fc460605442ca25bcd7d756a4abf2fc21ef8 | ||
| amd64: 3.9-amd64@sha256:0e70ddcd79ce98ae5c8c7454e460320324a5884cacdf13c2fb776678b24e20ab | ||
| arm64: 3.9-arm64@sha256:17817b12aa3cb3b4a60295dacdf9d1ac7647fa9931f1ba10cf3e4ae1fe2e1faf |
There was a problem hiding this comment.
Bug: Non-immutable image digests for identical tags
SHA256 digests are changing for images with identical version tags (e.g., v3.28.5-amd64, 1.13.1-amd64, 3.9-amd64). Container image digests should be immutable for a given version tag. Changing digests for the same version indicates either image re-tagging (breaking reproducibility and security verification) or incorrect digest values, both of which compromise supply chain security and deployment reliability.
| amd64: 3.10.1-amd64@sha256:06bc277a20f6332c914444e16a6619f6b481627b36911d21a28ac8ef53b53614 | ||
| arm64: 3.10.1-arm64@sha256:0a149ef51bd9c9d50f6838de19f3dafe2f0ad8ccb29edfc5dce1247f36816760 | ||
| amd64: 3.10.1-amd64@sha256:27593f35cd7bffd0fb846e29f65af942ad2fbdb2f7b15d342f01456c62e12730 | ||
| arm64: 3.10.1-arm64@sha256:c8cadc7161e328753e49d1566f56b93b926c87284921847118096ca2f4a60e3f |
There was a problem hiding this comment.
Bug: Immutable digests for same version tags broken.
SHA256 digests are changing for images with identical version tags (e.g., 1.13.1-amd64, v1.33.5-amd64, 3.10.1-amd64). Container image digests should be immutable for a given version tag. Changing digests for the same version indicates either image re-tagging (breaking reproducibility and security verification) or incorrect digest values, both of which compromise supply chain security and deployment reliability.
replicated-ci-ec
force-pushed
the
automation/k0s-image-dependencies
branch
3 times, most recently
from
ddcd7c3 to
fc0f7c8
Compare
replicated-ci-ec
force-pushed
the
automation/k0s-image-dependencies
branch
from
fc0f7c8 to
ab982c6
Compare
Automated changes by the image-deps-updater GitHub action