-
Notifications
You must be signed in to change notification settings - Fork 107
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
update go and telegraf #1244
Closed
Closed
update go and telegraf #1244
Changes from all commits
Commits
Show all changes
11 commits
Select commit
Hold shift + click to select a range
5c39906
update trivyignore
5cb2ec8
update go version
c897150
update telegraf too
5e3f889
update trivyignore
5c5094d
update trivyignore
b650dec
set correct go version in github codeql action
ca1c4e5
update path
ef8a7c7
add go version needed
28fb7ca
update go version on windows as well
025ac8a
check if go version persists
5a0b77e
update go modules
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,52 +1,19 @@ | ||
#telegraf MEDIUM | ||
CVE-2023-39325 #same as CVE-2023-44487 | ||
CVE-2023-3978 | ||
CVE-2023-44487 #false positive according to Mariner team | ||
GHSA-jq35-85cj-fj4p | ||
GHSA-7ww5-4wqc-m92c | ||
GHSA-mhpq-9638-x6pw | ||
CVE-2023-48795 | ||
CVE-2023-50658 | ||
CVE-2024-28110 | ||
CVE-2024-24557 | ||
CVE-2024-29018 | ||
CVE-2024-27304 | ||
GHSA-7jwh-3vrq-q3m8 | ||
CVE-2024-27289 | ||
CVE-2024-27304 | ||
GHSA-7jwh-3vrq-q3m8 | ||
CVE-2024-24786 | ||
CVE-2024-24557 | ||
CVE-2023-45288 | ||
|
||
#telegraf HIGH | ||
GHSA-m425-mq94-257g | ||
CVE-2023-46129 | ||
CVE-2023-47090 | ||
CVE-2024-21626 | ||
CVE-2023-50658 | ||
CVE-2024-3154 | ||
|
||
# ruby HIGH | ||
CVE-2017-10784 | ||
|
||
#ruby MEDIUM | ||
CVE-2024-27281 | ||
|
||
#mariner MEDIUM | ||
CVE-2023-5678 | ||
|
||
#golang MEDIUM | ||
CVE-2023-48795 | ||
CVE-2024-24786 | ||
CVE-2023-45288 | ||
|
||
#stdlib | ||
CVE-2023-45283 | ||
CVE-2023-29406 | ||
CVE-2023-29409 | ||
CVE-2023-39318 | ||
CVE-2023-39319 | ||
CVE-2023-39326 | ||
CVE-2023-45284 | ||
CVE-2023-45289 | ||
CVE-2023-45290 | ||
CVE-2024-24783 | ||
CVE-2024-24784 | ||
CVE-2024-24785 | ||
|
||
#ruby MEDIUM | ||
CVE-2024-27281 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -42,7 +42,7 @@ Write-Host ('Finished Installing Fluentbit') | |
Write-Host ('Installing Telegraf'); | ||
try { | ||
# For next telegraf update, make sure to update config changes in telegraf.conf, tomlparser-prom-customconfig.rb and tomlparser-osm-config.rb | ||
$telegrafUri='https://dl.influxdata.com/telegraf/releases/telegraf-1.24.2_windows_amd64.zip' | ||
$telegrafUri='https://dl.influxdata.com/telegraf/releases/telegraf-1.29.4_windows_amd64.zip' | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. is this version working? in the past, we had issues with telegraf update on windows hence we didnt upgrade the version. |
||
Invoke-WebRequest -Uri $telegrafUri -OutFile /installation/telegraf.zip | ||
Expand-Archive -Path /installation/telegraf.zip -Destination /installation/telegraf | ||
Move-Item -Path /installation/telegraf/*/* -Destination /opt/telegraf/ -ErrorAction SilentlyContinue | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please validate the perf and functional tests for this update, and also review any issues on this telegraf version related to promethus, disk, diskio plugins.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lot of work to individually test all this. I was hoping to use CI/CD clusters for this. WDYT?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you please run some basic tests on both Linux and Windows to ensure this doesnt have any breaking change before we validate on CI/CD clusters. Primarily for windows, we have seen issues when we upgraded telegraf.