-
Notifications
You must be signed in to change notification settings - Fork 3.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: Update kiwigrid/k8s-sidecar #13979
Conversation
555caa8
to
8846edd
Compare
Hello! Thank you for the contribution. I would ask that you address two items :
You correctly note that there is an ordering issue between this and the other PR. If you would like to finish this one before moving on to the other, I can ensure they are done in that order. |
8846edd
to
70d6b3d
Compare
1.27.5 is the latest at the time of change - https://hub.docker.com/r/kiwigrid/k8s-sidecar/tags the kiwigrid/k8s-sidecar 1.24.3 image is reportedly vulnerable to the following CVE: CVE-2023-29491 CVE-2023-52425 CVE-2023-7104 CVE-2024-28757
70d6b3d
to
328927d
Compare
@paul1r Thanks for the 👀. I've adjusted the call-outs you made. Please review and let me know if there's anything further I can do. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm, thanks!
What this PR does / why we need it:
1.27.5 is the latest at the time of change - https://hub.docker.com/r/kiwigrid/k8s-sidecar/tags
the kiwigrid/k8s-sidecar 1.24.3 image is reportedly vulnerable to the following CVE:
CVE-2023-29491
CVE-2023-52425
CVE-2023-7104
CVE-2024-28757
Which issue(s) this PR fixes:
Fixes #
Special notes for your reviewer:
just added #13978 that also bumps the chart version. they share the same chart version as I have no idea which will be approved first. If approved and committed the linked PR will need version bumped.
Checklist
CONTRIBUTING.md
guide (required)feat
PRs are unlikely to be accepted unless a case can be made for the feature actually being a bug fix to existing behavior.docs/sources/setup/upgrade/_index.md
production/helm/loki/Chart.yaml
and updateproduction/helm/loki/CHANGELOG.md
andproduction/helm/loki/README.md
. Example PRdeprecated-config.yaml
anddeleted-config.yaml
files respectively in thetools/deprecated-config-checker
directory. Example PR