bug: Security: CVEs in suggested (EOL) image for fluentd

[max-allan]

Describe the issue

From the helm values file:

• fluent-operator/charts/fluent-operator/values.yaml

  Line 374 in 19bd593

  repository: "kubesphere/fluentd"

    repository: "kubesphere/fluentd"
    tag: "v1.15.3"

That image has (according to Grype) a lot of vulnerabilities:

 3 critical, 5 high, 22 medium, 1 low, 0 negligible

Also, fluentd 1.15.3 is EOL.

• https://github.com/fluent/fluentd/blob/master/SECURITY.md

Can we update the image to 1.16 or 1.17? Will the operator work with newer versions?

Anywhere that image is referenced will need updating, not just that location in the chart.

In addition, fluent-bit 2.2.2 is EOL in a few weeks time.

To Reproduce

See the values file

Expected behavior

Current/supported versions of fluentd and fluent-bit are used by default.

Your Environment

- Fluent Operator version: 2.8.0
- Container Runtime: any
- Operating system: any
- Kernel version: any

How did you install fluent operator?

Helm

Additional context

No response

[benjaminhuo]

@max-allan Good point, we do need hands to upgrade and test new version of fluentd and fluentbit

[SvenThies]

@max-allan can you confirm that this issue is closed with #1199. Can this issue be closed?

[benjaminhuo]

@max-allan can you confirm that this issue is closed with #1199. Can this issue be closed?

Yes, fluentd was upgraded to 1.17 in https://github.com/fluent/fluent-operator/blob/master/charts/fluent-operator/values.yaml#L383