Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: bump kubectl to 1.30.5 with cve fix #2677

Merged
merged 1 commit into from
Oct 2, 2024
Merged

Conversation

SandhyaRavi2403
Copy link
Contributor

@SandhyaRavi2403 SandhyaRavi2403 commented Sep 30, 2024

What problem does this PR solve?:
bump kubectl image in apps to 1.30.5

`sandhya.ravi@GT9X7CVF5F kommander-applications % trivy i docker.io/bitnami/kubectl:1.30.5
2024-09-30T12:20:15+05:30 INFO Vulnerability scanning is enabled
2024-09-30T12:20:15+05:30 INFO Secret scanning is enabled
2024-09-30T12:20:15+05:30 INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-30T12:20:15+05:30 INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-09-30T12:20:18+05:30 INFO Detected OS family="debian" version="12.7"
2024-09-30T12:20:18+05:30 INFO [debian] Detecting vulnerabilities... os_version="12" pkg_num=127
2024-09-30T12:20:18+05:30 INFO Number of language-specific files num=5
2024-09-30T12:20:18+05:30 INFO [gobinary] Detecting vulnerabilities...
2024-09-30T12:20:18+05:30 INFO [bitnami] Detecting vulnerabilities...
2024-09-30T12:20:18+05:30 WARN Using severities from other vendors for some vulnerabilities. Read https://aquasecurity.github.io/trivy/v0.53/docs/scanner/vulnerability#severity-selection for details.

docker.io/bitnami/kubectl:1.30.5 (debian 12.7)

Total: 123 (UNKNOWN: 0, LOW: 83, MEDIUM: 28, HIGH: 11, CRITICAL: 1)`

Which issue(s) does this PR fix?:
https://jira.nutanix.com/browse/NCN-102768

Special notes for your reviewer:

Does this PR introduce a user-facing change?:


Checklist

  • If the PR adds a version bump, ensure there is no breaking change in Licensing model (or NA).
  • If a chart is changed or app configuration is significantly changed, the chart version is correctly incremented (so that apps are not automatically upgraded from a previous version of DKP).

Copy link
Contributor

✅ Created Kommander branch to test kommander-applications changes: https://github.com/mesosphere/kommander/tree/kapps/main/sandy/kubectl-cve-fix

@coveralls
Copy link

coveralls commented Sep 30, 2024

Pull Request Test Coverage Report for Build 11146410882

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 51.557%

Totals Coverage Status
Change from base Build 11135505891: 0.0%
Covered Lines: 149
Relevant Lines: 289

💛 - Coveralls

@SandhyaRavi2403 SandhyaRavi2403 added ok-to-test Signals mergebot that CI checks are ready to be kicked off and removed ok-to-test Signals mergebot that CI checks are ready to be kicked off labels Sep 30, 2024
@SandhyaRavi2403 SandhyaRavi2403 force-pushed the sandy/kubectl-cve-fix branch 2 times, most recently from f5bff95 to 58b0f98 Compare October 1, 2024 13:19
@SandhyaRavi2403
Copy link
Contributor Author

@mhrabovcin The tests for traefik is failing, https://github.com/mesosphere/kommander-applications/actions/runs/11146410931/job/30978433524?pr=2677#step:6:272
I am not very sure what needs to be updated here. could you suggest

@mhrabovcin
Copy link
Contributor

@SandhyaRavi2403 since this PR doesn't change the traefik configuration and the failing check is not required I think this can be investigated as a separate effort. We can merge this PR.

@mhrabovcin mhrabovcin merged commit 4980877 into main Oct 2, 2024
138 of 143 checks passed
@mhrabovcin mhrabovcin deleted the sandy/kubectl-cve-fix branch October 2, 2024 15:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants