From 9b9422f7d005c3f4d4c514074eb8e600699aa7da Mon Sep 17 00:00:00 2001 From: danish9039 Date: Fri, 27 Feb 2026 08:03:45 +0530 Subject: [PATCH 1/3] sync(dex): bump Dex manifests to v2.45.0 Signed-off-by: danish9039 --- README.md | 8 ++++---- common/dex/base/deployment.yaml | 2 +- scripts/synchronize-dex-manifests.sh | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) mode change 100755 => 100644 scripts/synchronize-dex-manifests.sh diff --git a/README.md b/README.md index 01f607a2a1..ee95c0519e 100644 --- a/README.md +++ b/README.md @@ -81,10 +81,10 @@ This repository periodically synchronizes all official Kubeflow components from | Spark Operator | applications/spark/spark-operator | [2.4.0](https://github.com/kubeflow/spark-operator/tree/v2.4.0) | 9m | 41Mi | 0GB | | Istio | common/istio | [1.29.0](https://github.com/istio/istio/releases/tag/1.29.0) | 750m | 2364Mi | 0GB | | Knative | common/knative/knative-serving
common/knative/knative-eventing | [v1.21.1](https://github.com/knative/serving/releases/tag/knative-v1.21.1)
[v1.21.0](https://github.com/knative/eventing/releases/tag/knative-v1.21.0) | 1450m | 1038Mi | 0GB | -| Cert Manager | common/cert-manager | [1.19.4](https://github.com/cert-manager/cert-manager/releases/tag/v1.19.4) | 3m | 128Mi | 0GB | -| Dex | common/dex | [2.43.1](https://github.com/dexidp/dex/releases/tag/v2.43.1) | 3m | 27Mi | 0GB | -| OAuth2-Proxy | common/oauth2-proxy | [7.14.3](https://github.com/oauth2-proxy/oauth2-proxy/releases/tag/v7.14.3) | 3m | 27Mi | 0GB | -| **Total** | | | **4380m** | **12341Mi** | **65GB** | +| Cert Manager | common/cert-manager | [1.19.4](https://github.com/cert-manager/cert-manager/releases/tag/v1.19.4) | 3m | 128Mi | 0GB | +| Dex | common/dex | [2.45.0](https://github.com/dexidp/dex/releases/tag/v2.45.0) | 3m | 27Mi | 0GB | +| OAuth2-Proxy | common/oauth2-proxy | [7.14.3](https://github.com/oauth2-proxy/oauth2-proxy/releases/tag/v7.14.3) | 3m | 27Mi | 0GB | +| **Total** | | | **4380m** | **12341Mi** | **65GB** | diff --git a/common/dex/base/deployment.yaml b/common/dex/base/deployment.yaml index 2aea814a04..9a8ed48261 100644 --- a/common/dex/base/deployment.yaml +++ b/common/dex/base/deployment.yaml @@ -16,7 +16,7 @@ spec: spec: serviceAccountName: dex containers: - - image: ghcr.io/dexidp/dex:v2.44.0 + - image: ghcr.io/dexidp/dex:v2.45.0 name: dex command: ["dex", "serve", "/etc/dex/cfg/config.yaml"] ports: diff --git a/scripts/synchronize-dex-manifests.sh b/scripts/synchronize-dex-manifests.sh old mode 100755 new mode 100644 index b66ab1461a..085034197f --- a/scripts/synchronize-dex-manifests.sh +++ b/scripts/synchronize-dex-manifests.sh @@ -5,7 +5,7 @@ source "${SCRIPT_DIRECTORY}/library.sh" setup_error_handling COMPONENT_NAME="dex" REPOSITORY_NAME="dexidp/dex" -COMMIT="v2.43.1" +COMMIT="v2.45.0" BRANCH_NAME=${BRANCH_NAME:=synchronize-${COMPONENT_NAME}-manifests-${COMMIT?}} MANIFESTS_DIRECTORY=$(dirname $SCRIPT_DIRECTORY) DESTINATION_DIRECTORY=$MANIFESTS_DIRECTORY/common/${COMPONENT_NAME} From ad3e68196a86367e2532731b388014d1cd2270fe Mon Sep 17 00:00:00 2001 From: danish9039 Date: Sat, 28 Feb 2026 14:11:02 +0530 Subject: [PATCH 2/3] dex: set numeric runAs user Signed-off-by: danish9039 --- common/dex/base/deployment.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/common/dex/base/deployment.yaml b/common/dex/base/deployment.yaml index 9a8ed48261..237b97efb3 100644 --- a/common/dex/base/deployment.yaml +++ b/common/dex/base/deployment.yaml @@ -26,6 +26,8 @@ spec: allowPrivilegeEscalation: false seccompProfile: type: RuntimeDefault + runAsUser: 1001 + runAsGroup: 1001 runAsNonRoot: true capabilities: drop: From a2d7e82988cd247721b60d2b894ded6b89620c51 Mon Sep 17 00:00:00 2001 From: danish9039 Date: Sun, 1 Mar 2026 19:51:04 +0530 Subject: [PATCH 3/3] dex: keep sync script executable Signed-off-by: danish9039 --- scripts/synchronize-dex-manifests.sh | 0 1 file changed, 0 insertions(+), 0 deletions(-) mode change 100644 => 100755 scripts/synchronize-dex-manifests.sh diff --git a/scripts/synchronize-dex-manifests.sh b/scripts/synchronize-dex-manifests.sh old mode 100644 new mode 100755