chore(deps): update neuvector package dependencies

common/zarf.yaml

@@ -13,7 +13,7 @@ components:
     charts:
       - name: crd
         url: https://neuvector.github.io/neuvector-helm/
-        version: 2.8.10
+        version: 2.8.11
         namespace: neuvector
         gitPath: charts/crd
       - name: uds-neuvector-config
@@ -24,7 +24,7 @@ components:
           - ../chart/values.yaml
       - name: core
         url: https://neuvector.github.io/neuvector-helm/
-        version: 2.8.10
+        version: 2.8.11
         namespace: neuvector
         gitPath: charts/core
         valuesFiles:

releaser.yaml

@@ -4,10 +4,10 @@
 flavors:
   - name: upstream
     # renovate-uds: datasource=docker depName=docker.io/neuvector/controller versioning=docker
-    version: 5.4.8-uds.0
+    version: 5.4.9-uds.0
   - name: registry1
     # renovate-uds: datasource=docker depName=registry1.dso.mil/ironbank/neuvector/neuvector/controller versioning=docker
-    version: 5.4.8-uds.0
+    version: 5.4.9-uds.0
   - name: unicorn
     # renovate-uds: datasource=docker depName=quay.io/rfcurated/neuvector/controller versioning=docker extractVersion=^(?<version>\d+\.\d+\.\d+)(?:-.*)?$
-    version: 5.4.8-uds.0
+    version: 5.4.9-uds.0

tests/neuvector.test.ts

@@ -11,7 +11,7 @@ const url = `https://neuvector.admin.uds.dev`;
 test.use({ baseURL: url });
 
 test("validate system health", async ({ page }) => {
-  test.setTimeout(60_000);
+  test.setTimeout(120_000);
   await test.step("check sso", async () => {
     const eulaPromise = page.waitForResponse(res => res.url().startsWith(`${url}/eula`));
     await page.goto("/");

tests/playwright.config.ts

@@ -14,7 +14,7 @@ export const authFile = `${playwrightDir}/auth/user.json`;
 export default defineConfig({
   fullyParallel: true,
   forbidOnly: !!process.env.CI, // fail CI if you accidentally leave `test.only` in source
-  retries: 2, // NeuVector can be slow clustering on install and does not have great healthprobes
+  retries: 4, // NeuVector can be slow clustering on install and does not have great healthprobes
   workers: 20, // Support up to 20 parallel workers
   timeout: 45000, // 45 second timeout for tests
   reporter: [

values/registry1-values.yaml

@@ -3,7 +3,7 @@
 
 registry: registry1.dso.mil
 # renovate: datasource=docker depName=registry1.dso.mil/ironbank/neuvector/neuvector/controller versioning=docker
-tag: "5.4.8"
+tag: "5.4.9"
 manager:
   image:
     repository: ironbank/neuvector/neuvector/manager

values/unicorn-values.yaml

@@ -6,7 +6,7 @@ autoGenerateCert: true
 
 registry: quay.io
 # renovate: datasource=docker depName=quay.io/rfcurated/neuvector/controller versioning=docker
-tag: 5.4.8-jammy-scratch-fips-rfcurated
+tag: 5.4.9-jammy-scratch-fips-rfcurated
 
 manager:
   image:

values/upstream-values.yaml

@@ -3,7 +3,7 @@
 
 registry: docker.io
 # renovate: datasource=docker depName=docker.io/neuvector/controller versioning=docker
-tag: "5.4.8"
+tag: "5.4.9"
 manager:
   image:
     repository: neuvector/manager

zarf.yaml

@@ -35,11 +35,11 @@ components:
         valuesFiles:
           - values/upstream-values.yaml
     images:
-      - docker.io/neuvector/controller:5.4.8
-      - docker.io/neuvector/manager:5.4.8
+      - docker.io/neuvector/controller:5.4.9
+      - docker.io/neuvector/manager:5.4.9
       - docker.io/neuvector/updater:latest
       - docker.io/neuvector/scanner:latest
-      - docker.io/neuvector/enforcer:5.4.8
+      - docker.io/neuvector/enforcer:5.4.9
 
   - name: neuvector
     required: true
@@ -53,11 +53,11 @@ components:
         valuesFiles:
           - values/registry1-values.yaml
     images:
-      - registry1.dso.mil/ironbank/neuvector/neuvector/controller:5.4.8
-      - registry1.dso.mil/ironbank/neuvector/neuvector/manager:5.4.8
+      - registry1.dso.mil/ironbank/neuvector/neuvector/controller:5.4.9
+      - registry1.dso.mil/ironbank/neuvector/neuvector/manager:5.4.9
       - registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal:9.7
       - registry1.dso.mil/ironbank/neuvector/neuvector/scanner:6
-      - registry1.dso.mil/ironbank/neuvector/neuvector/enforcer:5.4.8
+      - registry1.dso.mil/ironbank/neuvector/neuvector/enforcer:5.4.9
 
   - name: neuvector
     required: true
@@ -71,8 +71,8 @@ components:
         valuesFiles:
           - values/unicorn-values.yaml
     images:
-      - quay.io/rfcurated/neuvector/controller:5.4.8-jammy-scratch-fips-rfcurated
-      - quay.io/rfcurated/neuvector/manager:5.4.8-jammy-scratch-fips-rfcurated
-      - quay.io/rfcurated/neuvector/enforcer:5.4.8-jammy-scratch-fips-rfcurated
+      - quay.io/rfcurated/neuvector/controller:5.4.9-jammy-scratch-fips-rfcurated
+      - quay.io/rfcurated/neuvector/manager:5.4.9-jammy-scratch-fips-rfcurated
+      - quay.io/rfcurated/neuvector/enforcer:5.4.9-jammy-scratch-fips-rfcurated
       - quay.io/rfcurated/curl:8.18.0-jammy-scratch-fips-rfcurated
       - quay.io/rfcurated/neuvector/scanner:latest-jammy-scratch-fips-rfcurated