[AUTO-CHERRYPICK] Upgrade kured to 1.13.2 for CVEs on vendor code - branch main (#6713)

Co-authored-by: rlmenge <rachelmenge@microsoft.com>

SPECS/kured/kured-imagePullPolicy.patch

@@ -1,13 +1,25 @@
+From 492288d56314c65316a6d6f50b4b79c2eb0b267e Mon Sep 17 00:00:00 2001
+From: Rachel Menge <rachelmenge@microsoft.com>
+Date: Wed, 8 Nov 2023 10:51:46 -0800
+Subject: [PATCH] kured-imagePullPolicy patch updated for 1.13.2
+
+---
+ kured-ds.yaml | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
 diff --git a/kured-ds.yaml b/kured-ds.yaml
-index 15869c4..b226865 100644
+index 7721fa1..78322da 100644
 --- a/kured-ds.yaml
 +++ b/kured-ds.yaml
-@@ -32,7 +32,7 @@ spec:
-           image: docker.io/weaveworks/kured:1.9.1
-                  # If you find yourself here wondering why there is no
-                  # :latest tag on Docker Hub,see the FAQ in the README
+@@ -34,7 +34,7 @@ spec:
+           # If you find yourself here wondering why there is no
+           # :latest tag on Docker Hub,see the FAQ in the README
+           image: ghcr.io/kubereboot/kured:1.13.2
 -          imagePullPolicy: IfNotPresent
 +          imagePullPolicy: Always
            securityContext:
              privileged: true # Give permission to nsenter /proc/1/ns/mnt
-           env:
+           ports:
+-- 
+2.17.1
+

SPECS/kured/kured.signatures.json

@@ -1,6 +1,6 @@
 {
  "Signatures": {
-  "kured-1.9.1-vendor.tar.gz": "7743175bf349081f2ece085cd5dfd996621cf4bc8e2dc9b7bfd470e16d6a9516",
-  "kured-1.9.1.tar.gz": "3bd411b68f482c065ff64435f6efb16f7d0e50b438d8574f7e5ce73454710a8d"
+  "kured-1.13.2-vendor.tar.gz": "be2c5510693081a35abf911fd1bf0b7f202b1e59e3857e6f889fa101756cb7b5",
+  "kured-1.13.2.tar.gz": "9b90a12d2343387800f9e83690c01e2f2012b512c4b8d591334e78984b3a1528"
  }
 }

SPECS/kured/kured.spec

@@ -24,8 +24,8 @@
 %global debug_package %{nil}
 Summary:        Kubernetes daemonset to perform safe automatic node reboots
 Name:           kured
-Version:        1.9.1
-Release:        15%{?dist}
+Version:        1.13.2
+Release:        1%{?dist}
 License:        Apache-2.0
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -122,6 +122,9 @@ sed -i -e 's|image: .*|image: registry.opensuse.org/kubic/kured:%{version}|g' %{
 %{_datarootdir}/k8s-yaml/kured/kured.yaml
 
 %changelog
+* Mon Nov 06 2023 Rachel Menge <rachelmenge@microsoft.com> - 1.13.2-1
+- Upgrade to 1.13.2 for vendored go CVEs
+
 * Mon Oct 16 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.9.1-15
 - Bump release to rebuild with go 1.20.10
 

cgmanifest.json

@@ -8391,8 +8391,8 @@
         "type": "other",
         "other": {
           "name": "kured",
-          "version": "1.9.1",
-          "downloadUrl": "https://github.com/weaveworks/kured/archive/refs/tags/1.9.1.tar.gz"
+          "version": "1.13.2",
+          "downloadUrl": "https://github.com/weaveworks/kured/archive/refs/tags/1.13.2.tar.gz"
         }
       }
     },