[October 2023] Container image updates

[jakemulley]

🟢 - low, OK to leave for now
🟠 - medium, within the next 2 sprints/4 weeks
🔴 - urgent, within this sprint

calico-apiserver

container image	urgency	latest version for k8s 1.24	link to issue
docker.io/calico/apiserver:v3.25.0	🟢	v3.26	n/a

calico-system

container image	urgency	latest version for k8s 1.24	link to issue
docker.io/calico/csi:v3.25.0	🟢	v3.26	n/a
docker.io/calico/kube-controllers:v3.25.0	🟢	v3.26	n/a
docker.io/calico/node-driver-registrar:v3.25.0	🟢	v3.26	n/a
docker.io/calico/node:v3.25.0	🟢	v3.26	n/a
docker.io/calico/typha:v3.25.0	🟢	v3.26	n/a

cert-manager

container image	urgency	latest version for k8s 1.24	link to issue
quay.io/jetstack/cert-manager-cainjector:v1.13.1	🟢	v1.13.1	n/a
quay.io/jetstack/cert-manager-controller:v1.13.1	🟢	v1.13.1	n/a
quay.io/jetstack/cert-manager-webhook:v1.13.1	🟢	v1.13.1	n/a

external-secrets-operator

container image	urgency	latest version for k8s 1.24	link to issue
ghcr.io/external-secrets/external-secrets:v0.8.1	🟢	v0.9.6	n/a

gatekeeper-system

container image	urgency	latest version for k8s 1.24	link to issue
openpolicyagent/gatekeeper:v3.13.0	🟢	v3.13.3	n/a

ingress-controllers

container image	urgency	latest version for k8s 1.24	link to issue
debian:bookworm-slim	🟢	latest	n/a
fluent/fluent-bit:2.1.8-amd64	🟢	v2.1.10	n/a
ministryofjustice/cloud-platform-custom-error-pages:0.6	🟢	managed by us	n/a
registry.k8s.io/ingress-nginx/controller:v1.8.4	🟢	latest	n/a

kube-system

container image	urgency	latest version for k8s 1.24	link to issue
602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon-k8s-cni:v1.15.0-eksbuild.2	🟢	v1.15.0-eksbuild.2	n/a
602401143452.dkr.ecr.eu-west-2.amazonaws.com/amazon/aws-network-policy-agent:v1.0.2-eksbuild.1	🟢	v1.0.2-eksbuild.1	n/a
602401143452.dkr.ecr.eu-west-2.amazonaws.com/eks/coredns:v1.9.3-eksbuild.7	🟢	v1.9.3-eksbuild.7	n/a
602401143452.dkr.ecr.eu-west-2.amazonaws.com/eks/kube-proxy:v1.24.17-minimal-eksbuild.2	🟢	v1.24.17-minimal-eksbuild.2	n/a
amazon/aws-efs-csi-driver:v1.4.0 - WE MAY TURN THIS OFF AS CURRENTLY NOT USABLE FOR CP USERS	🟠	v1.7.x	#4877
docker.io/bitnami/external-dns:0.12.2-debian-11-r22	🟢	v0.13.x	n/a
registry.k8s.io/descheduler/descheduler:v0.24.1	🟢	v0.24.x	n/a
k8s.gcr.io/sig-storage/csi-attacher:v3.4.0	🟢	v4.4.0	#4876
k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.5.1	🟢	v2.9.0	#4876
k8s.gcr.io/sig-storage/csi-provisioner:v3.1.0	🟢	v3.5.0	#4876
k8s.gcr.io/sig-storage/csi-resizer:v1.4.0	🟢	v1.9.0	#4876
k8s.gcr.io/sig-storage/livenessprobe:v2.6.0	🟢	v2.10.0	#4876
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.11.2	🟢	v1.24.0	#4876
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v2.1.1-eks-1-18-13	🟠	v3.6.0	tbd
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.2.0-eks-1-18-13	🟠	v2.11.0	tbd
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.1.0-eks-1-18-13	🟠	v2.9.0	tbd
registry.k8s.io/autoscaling/cluster-autoscaler:v1.24.3	🟢	v1.24.3	n/a
registry.k8s.io/metrics-server/metrics-server:v0.6.2	🟢	v0.6.4	n/a

kuberhealthy

container image	urgency	latest version for k8s 1.24	link to issue
754256621582.dkr.ecr.eu-west-2.amazonaws.com/webops/cloud-platform-kuberhealthy-checks:1.4	🟢	managed by us	n/a
docker.io/kuberhealthy/daemonset-check:v3.3.0	🟢	latest	n/a
docker.io/kuberhealthy/deployment-check:v1.9.0	🟢	latest	n/a
docker.io/kuberhealthy/dns-resolution-check:v1.5.0	🟢	latest	n/a
docker.io/kuberhealthy/kuberhealthy:v2.7.1	🟢	latest	n/a

kuberos

container image	urgency	latest version for k8s 1.24	link to issue
ministryofjustice/cloud-platform-kuberos:2.5.0	🟢	managed by us	n/a

logging

container image	urgency	latest version for k8s 1.24	link to issue
fluent/fluent-bit:2.1.8	🟢	v2.10.0	n/a
gcr.io/heptio-images/eventrouter:v0.3	🟠	deprecated	tbd

overprovision

container image	urgency	latest version for k8s 1.24	link to issue
registry.k8s.io/cpa/cluster-proportional-autoscaler:1.8.6	🟢	v1.8.9	n/a
registry.k8s.io/pause:3.9	🟢	v3.9	n/a

tigera-operator

container image	urgency	latest version for k8s 1.24	link to issue
quay.io/tigera/operator:v1.29.1	🟢	v1.31.1	n/a

velero

container image	urgency	latest version for k8s 1.24	link to issue
velero/velero:v1.11.1	🟢	v1.11.1	n/a

monitoring

container image	urgency	latest version for k8s 1.24	link to issue
docker.io/bitnami/redis:6.2.6-debian-10-r120	🟢	7.2.1-debian-11-r26	n/a
docker.io/bitnami/thanos:0.28.1-scratch-r0	🟢	v0.32.4	n/a
grafana/grafana:9.2.4	🟠	v9.5.13 or v10.1.x	tbd
ministryofjustice/prometheus-ecr-exporter:0.2.0	🟢	managed by us	n/a
prom/cloudwatch-exporter:v0.15.0	🟢	v0.15.4	n/a
quay.io/kiwigrid/k8s-sidecar:1.19.2	🟠	v1.25.2	tbd
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1	🟠	v7.5.1	tbd
quay.io/prometheus-operator/prometheus-config-reloader:v0.60.1	🟠	v0.68.0	tbd
quay.io/prometheus-operator/prometheus-operator:v0.60.1	🟠	v0.68.0	tbd
quay.io/prometheus/alertmanager:v0.24.0	🟢	v0.26.0	n/a
quay.io/prometheus/node-exporter:v1.3.1	🟠	v1.6.1	tbd
quay.io/prometheus/prometheus:v2.39.1	🟠	v2.47.2	tbd
quay.io/pusher/oauth2_proxy:v3.2.0	removed	removed	n/a
quay.io/thanos/thanos:v0.28.0	🟠	v0.32.4	tbd
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0	🟠	v2.10.0	tbd

[jakemulley]

Superseded by #5149.