# HG changeset patch
# User drewp@bigasterisk.com
# Date 2023-06-06 17:52:50
# Node ID c2e12ba4d0b252075070393ed13d7e1abdc6c841
# Parent  9bff6004bd605ee0d835e1b39b7ab00ff3ba6149

update past  CVE-2023-33189

diff --git a/20-kube/20-pom-deploy.yaml b/20-kube/20-pom-deploy.yaml
--- a/20-kube/20-pom-deploy.yaml
+++ b/20-kube/20-pom-deploy.yaml
@@ -33,8 +33,14 @@ spec:
                   fieldPath: status.podIP
           # see https://hub.docker.com/r/pomerium/ingress-controller/tags but idk how to get the version number!
           # It's not even in the startup logs, just this: "pomerium_version":""
+          # 
           # I think sha-2c8038a is v0.21.3 (by date, https://www.pomerium.com/docs/releases/changelog)
-          image: pomerium/ingress-controller:sha-2c8038a
+          #
+          # sha-dd49d67 is 2023-05-30,
+          # https://github.com/pomerium/ingress-controller/commit/dd49d679ea077930229dff8aa319c58c77a767dc
+          # including 'current main branch' as of 2023-05-23 per
+          # https://github.com/pomerium/ingress-controller/commit/f79735129577344cc9fd766ff1b51df324990771
+          image: pomerium/ingress-controller:sha-dd49d67
           imagePullPolicy: IfNotPresent
           name: pomerium
           ports: