-
Notifications
You must be signed in to change notification settings - Fork 62
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[feat] update support kubernetes v1.25.x and fix security risk #43
base: main
Are you sure you want to change the base?
Conversation
🎉 Successfully Build Images. Docker RegistryOverview: https://hub.docker.com/u/gocrane
Coding RegistryOverview: https://finops.coding.net/public-artifacts/gocrane/crane/packages
Ghcr RegistryOverview: https://github.com/orgs/gocrane/packages?repo_name=crane
|
@qmhu PTAL |
Hi @dongjiang1989 : Do you meet problems in 1.25? The risk for upgrade version is high, we need to think carefully. |
In Kubernetes |
I mean do you deploy crane-scheduler in a 1.25 cluster and meet problem? |
Thank you for your response. While it's reassuring to know that the specific vulnerable features are not currently being used in our product, I would like to highlight that the identified vulnerability has been flagged in our recent security assessment. Our security team has thoroughly reviewed the issue and determined that it poses a significant risk to the overall security of our product. That's why we would like to incorporate latest vulnerability free binary in our system as soon as possible. |
What was the vulnerability that you discovered? I have reviewed the code you provided, but I didn't see any specific fixes for the identified vulnerability and security risk. Could you please provide more information? Do you mean there is some security risk in base image |
|
deploy current verson crane-scheduler with k8s 1.27,1.28, running error:
because since k8s 1.27 removed v1beta1.CSIStorageCapacity,and changed to v1.CSIStorageCapacity . this pr #43 version test works k8s 1.28. https://kubernetes.io/blog/2023/03/17/upcoming-changes-in-kubernetes-v1-27/ so, we need a new version. |
Is this version works in 1.18? We want to make sure the main code works for at lease 1.18 version. |
What type of PR is this?
/kind feature
What this PR does / why we need it:
v1.25.x
1.19.x
Notes