fix: bump fluentd img to kube-logging/fluentd:v1.16-full-build.122 (#…

…1808)

fix: bump fluentd image to kube-logging/fluentd:v1.16-full-build.122 (#1794)

* fix: use newer fluentd image to get rid of recent CVEs

* fix: update ignore list in `licenses.d2iq.yaml`

(cherry picked from commit f8bc628)

Co-authored-by: Andrei Sekretenko <asekretenko@users.noreply.github.com>

licenses.d2iq.yaml

@@ -19,12 +19,12 @@ ignore:
   - gcr.io/google_containers/pause:3.2
 
   # Fossa cannot scan and parse gemfile provided by the fluend project
-  # - container_image: ghcr.io/banzaicloud/fluentd:v1.14.6-alpine-5
+  # - container_image: ghcr.io/kube-logging/fluentd:v1.16-full-build.122
   #   sources:
   #     - url: https://github.com/fluent/fluentd
-  #       ref: ${image_tag%-alpine-5}
+  #       ref: v1.16.2
   #       license_path: LICENSE
-  - ghcr.io/banzaicloud/fluentd:v1.14.6-alpine-5
+  - ghcr.io/kube-logging/fluentd:v1.16-full-build.122
 
   # Fossa cannot scan C/CPP projects
   # See: https://docs.fossa.com/docs/c-cpp

services/logging-operator/4.2.3/defaults/cm.yaml

@@ -62,9 +62,9 @@ data:
     fluentd:
       podPriorityClassName: "dkp-critical-priority"
       image:
-        # Explicitly use the default image. This should be updated when logging-operator is upgraded.
-        repository: ghcr.io/banzaicloud/fluentd
-        tag: v1.14.6-alpine-5
+        # The image should be updated when logging-operator is upgraded.
+        repository: ghcr.io/kube-logging/fluentd
+        tag: v1.16-full-build.122
       resources:
        limits:
          memory: 400Mi