Update image version in manifest to v0.2.4

manifests/Kptfile

@@ -1,22 +1,8 @@
-# Copyright 2021 Google LLC
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
 apiVersion: kpt.dev/v1
 kind: Kptfile
 metadata:
  name: gatekeeper-securitycenter
  annotations:
- config.kubernetes.io/local-config: 'true'
+ config.kubernetes.io/local-config: "true"
 info:
  description: kpt package for gatekeeper-securitycenter

manifests/README.md

@@ -16,7 +16,7 @@ This package assumes that you have already created the
 ### Fetch this package
 
 ```sh
-VERSION=v0.2.3
+VERSION=v0.2.4
 kpt pkg get https://github.com/GoogleCloudPlatform/gatekeeper-securitycenter.git/manifests@$VERSION manifests
 ```
 

manifests/cluster-role-binding.yaml

@@ -11,7 +11,6 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
@@ -23,6 +22,6 @@ roleRef:
  kind: ClusterRole
  apiGroup: rbac.authorization.k8s.io
 subjects:
-- name: gatekeeper-securitycenter-controller
- namespace: gatekeeper-securitycenter
- kind: ServiceAccount
+ - name: gatekeeper-securitycenter-controller
+  namespace: gatekeeper-securitycenter
+  kind: ServiceAccount

manifests/cluster-role.yaml

@@ -11,18 +11,17 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
  name: gatekeeper-securitycenter-view-all
  labels:
  gatekeeper-securitycenter/system: 'yes'
 rules:
-- resources:
- - '*'
- apiGroups:
- - '*'
- verbs:
- - get
- - list
+ - resources:
+  - '*'
+  apiGroups:
+  - '*'
+  verbs:
+  - get
+  - list

manifests/config-map.yaml

@@ -11,7 +11,6 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-
 apiVersion: v1
 kind: ConfigMap
 metadata:

manifests/deployment.yaml

@@ -11,7 +11,6 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -39,38 +38,38 @@ spec:
  spec:
  serviceAccountName: gatekeeper-securitycenter-controller
  containers:
- - name: manager
- image: ko://github.com/googlecloudplatform/gatekeeper-securitycenter # kpt-set: ${image}
- args:
- - findings
- - manager
- - --source=$(SOURCE)
- - --cluster=$(CLUSTER)
- - --interval=120 # kpt-set: --interval=${interval}
- - --dry-run=false # kpt-set: --dry-run=${dry-run}
- env:
- - name: SOURCE
- valueFrom:
- configMapKeyRef:
- name: gatekeeper-securitycenter-config
- key: SOURCE_NAME
- - name: CLUSTER
- valueFrom:
- configMapKeyRef:
- name: gatekeeper-securitycenter-config
- key: CLUSTER_NAME
- - name: DEBUG
- value: "false" # kpt-set: ${debug-env}
- resources:
- requests:
- cpu: 250m # kpt-set: ${request-cpu}
- memory: 512Mi # kpt-set: ${request-memory}
- securityContext:
- allowPrivilegeEscalation: false
- capabilities:
- drop:
- - all
- readOnlyRootFilesystem: true
- runAsGroup: 65532
- runAsNonRoot: true
- runAsUser: 65532
+  - name: manager
+  image: ghcr.io/googlecloudplatform/gatekeeper-securitycenter:v0.2.4@sha256:e6498c4337a0e3af05b7b6d84f1664474853e24398b580f1274c9a2efe9332af # kpt-set: ${image}
+  args:
+  - findings
+  - manager
+  - --source=$(SOURCE)
+  - --cluster=$(CLUSTER)
+  - --interval=120 # kpt-set: --interval=${interval}
+  - --dry-run=false # kpt-set: --dry-run=${dry-run}
+  env:
+  - name: SOURCE
+  valueFrom:
+  configMapKeyRef:
+  name: gatekeeper-securitycenter-config
+  key: SOURCE_NAME
+  - name: CLUSTER
+  valueFrom:
+  configMapKeyRef:
+  name: gatekeeper-securitycenter-config
+  key: CLUSTER_NAME
+  - name: DEBUG
+  value: "false" # kpt-set: ${debug-env}
+  resources:
+  requests:
+  cpu: 250m # kpt-set: ${request-cpu}
+  memory: 512Mi # kpt-set: ${request-memory}
+  securityContext:
+  allowPrivilegeEscalation: false
+  capabilities:
+  drop:
+  - all
+  readOnlyRootFilesystem: true
+  runAsGroup: 65532
+  runAsNonRoot: true
+  runAsUser: 65532

manifests/namespace.yaml

@@ -11,7 +11,6 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-
 apiVersion: v1
 kind: Namespace
 metadata:

manifests/service-account.yaml

@@ -11,7 +11,6 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-
 apiVersion: v1
 kind: ServiceAccount
 metadata: