feat(docker): use hardened images for kubectl and redis dependencies

related to WPB-23412

Author: lwille

charts/reaper/values.yaml

@@ -1,8 +1,8 @@
 image:
   # Use a kubectl image that includes a shell (sh/bash). Distroless images will fail to exec the script.
-  registry: docker.io
-  repository: bitnamilegacy/kubectl
-  tag: 1.32.4
+  registry: dhi.io
+  repository: kubectl
+  tag: 1.35.0
 podSecurityContext:
   allowPrivilegeEscalation: false
   capabilities:

charts/redis-ephemeral/values.yaml

@@ -1,6 +1,8 @@
 redis-ephemeral:
   image:
-    tag: "7.4.6"
+    registry: dhi.io
+    repository: redis
+    tag: "7.4.7"
 
   haMode:
     enabled: false

charts/restund/values.yaml

@@ -12,9 +12,9 @@ image:
 
 kubectlImage:
   # Use a kubectl image that includes a shell (sh/bash). Distroless images will fail to exec the script.
-  registry: docker.io
-  repository: bitnamilegacy/kubectl
-  tag: 1.32.4
+  registry: dhi.io
+  repository: kubectl
+  tag: 1.35.0
 
 # If you have multiple deployments of Restund running in one cluster, it is
 # important that they run on disjoint sets of nodes, you can use nodeSelector to enforce this

hack/helm_vars/redis-ephemeral/values.yaml

@@ -1,7 +1,7 @@
 redis-ephemeral:
   image:
-    registry: public.ecr.aws
-    repository: docker/library/redis
+    registry: dhi.io
+    repository: redis
 
   redisConfig: |
     requirepass very-secure-redis-master-password