Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Update kiwigrid/k8s-sidecar #13979

Merged
merged 1 commit into from
Aug 28, 2024
Merged

Conversation

jlm0x017
Copy link
Contributor

What this PR does / why we need it:

1.27.5 is the latest at the time of change - https://hub.docker.com/r/kiwigrid/k8s-sidecar/tags

the kiwigrid/k8s-sidecar 1.24.3 image is reportedly vulnerable to the following CVE:
CVE-2023-29491
CVE-2023-52425
CVE-2023-7104
CVE-2024-28757

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:
just added #13978 that also bumps the chart version. they share the same chart version as I have no idea which will be approved first. If approved and committed the linked PR will need version bumped.

Checklist

  • Reviewed the CONTRIBUTING.md guide (required)
  • Documentation added
  • Tests updated
  • Title matches the required conventional commits format, see here
    • Note that Promtail is considered to be feature complete, and future development for logs collection will be in Grafana Alloy. As such, feat PRs are unlikely to be accepted unless a case can be made for the feature actually being a bug fix to existing behavior.
  • Changes that require user attention or interaction to upgrade are documented in docs/sources/setup/upgrade/_index.md
  • For Helm chart changes bump the Helm chart version in production/helm/loki/Chart.yaml and update production/helm/loki/CHANGELOG.md and production/helm/loki/README.md. Example PR
  • If the change is deprecating or removing a configuration option, update the deprecated-config.yaml and deleted-config.yaml files respectively in the tools/deprecated-config-checker directory. Example PR

@jlm0x017 jlm0x017 requested a review from a team as a code owner August 27, 2024 17:34
@CLAassistant
Copy link

CLAassistant commented Aug 27, 2024

CLA assistant check
All committers have signed the CLA.

@github-actions github-actions bot added area/helm type/docs Issues related to technical documentation; the Docs Squad uses this label across many repositories labels Aug 27, 2024
@jlm0x017 jlm0x017 mentioned this pull request Aug 27, 2024
7 tasks
@paul1r
Copy link
Collaborator

paul1r commented Aug 27, 2024

Hello! Thank you for the contribution.

I would ask that you address two items :

  • You've bumped version instead of appVersion. version references the version of Loki, not of the Helm chart.
  • Update production/helm/loki/CHANGELOG.md and production/helm/loki/README.md (as per the checklist) once you have the Helm version modified.

You correctly note that there is an ordering issue between this and the other PR. If you would like to finish this one before moving on to the other, I can ensure they are done in that order.

@paul1r paul1r self-assigned this Aug 27, 2024
1.27.5 is the latest at the time of change - https://hub.docker.com/r/kiwigrid/k8s-sidecar/tags

the kiwigrid/k8s-sidecar 1.24.3 image is reportedly vulnerable to the
following CVE:
CVE-2023-29491
CVE-2023-52425
CVE-2023-7104
CVE-2024-28757
@jlm0x017
Copy link
Contributor Author

@paul1r Thanks for the 👀. I've adjusted the call-outs you made. Please review and let me know if there's anything further I can do.

Copy link
Collaborator

@paul1r paul1r left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, thanks!

@paul1r paul1r merged commit 112f337 into grafana:main Aug 28, 2024
65 checks passed
pascal-sochacki pushed a commit to pascal-sochacki/loki that referenced this pull request Aug 29, 2024
pascal-sochacki pushed a commit to pascal-sochacki/loki that referenced this pull request Aug 29, 2024
mraboosk pushed a commit to mraboosk/loki that referenced this pull request Oct 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/helm size/S type/docs Issues related to technical documentation; the Docs Squad uses this label across many repositories
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants