-
Notifications
You must be signed in to change notification settings - Fork 4.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CVE-2017-14491 Documentation Hot Fixes and kops fixes #3563
CVE-2017-14491 Documentation Hot Fixes and kops fixes #3563
Conversation
/approve |
|
||
### Fixed kops Version Matrix | ||
|
||
| kops Version | Fixed | Released | Will Fix | URL | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Something went wrong with the formatting of this
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missed a column. Let me make a couple more tweaks with the color anyways
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
|
||
A vulnerability in dnsmasq, used by kube-dns, requires an upgrade to the kube-dns component. This component is the default DNS component installed in Kubernetes. The vulnerability may be externally exploitable. Links below exist with the full detail | ||
of the CVE. This is not a Kubernetes specific vunerability, but exists in dnsmasq. | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
How about a link here to the "hotfix instructions" which says "if you just want to fix a running cluster, or if you are not using kops, there is a simple procedure to manually update kube-dns"
|
||
If the configmap does not exist create an empty configmap. | ||
|
||
#### Installation of Hot Fix |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think you want to put "If the configmap does not exist ... " under the heading here
I'm going to lgtm this as it has the correct instructions in it, and then we can wordsmith etc |
/lgtm |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: chrislovecnm, justinsb The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these OWNERS Files:
You can indicate your approval by writing |
Automatic merge from submit-queue. |
No description provided.