-
Notifications
You must be signed in to change notification settings - Fork 42
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Upgrade helm to v3.14.2 #2356
Upgrade helm to v3.14.2 #2356
Conversation
This pull request does not have a backport label. Could you fix it @jeniawhite? 🙏
|
📊 Allure Report - 💚 No failures were reported.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
CI, manifests, and tests are LGTM.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Approved.
Note: Existing customers with PSPs in their cluster will notice a change in their posture score because those findings will no longer be evaluated.
* Bump helm * Disable PSP feature leave rules * Bumping elastic-agent-autodiscover * Lint fixes * Linter empty space * Commenting out CI tests and removing codeblocks from core code * Comment out EKS PSP * Remove imports from CI tests * Update rules coverage (cherry picked from commit 0029a1a) # Conflicts: # go.mod # go.sum
* Upgrade helm to v3.14.2 (#2356) * Bump helm * Disable PSP feature leave rules * Bumping elastic-agent-autodiscover * Lint fixes * Linter empty space * Commenting out CI tests and removing codeblocks from core code * Comment out EKS PSP * Remove imports from CI tests * Update rules coverage (cherry picked from commit 0029a1a) # Conflicts: # go.mod # go.sum * Conflicts resolve * Fixing tidy --------- Co-authored-by: Evgeniy Belyi <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
* Bump helm * Disable PSP feature leave rules * Bumping elastic-agent-autodiscover * Lint fixes * Linter empty space * Commenting out CI tests and removing codeblocks from core code * Comment out EKS PSP * Remove imports from CI tests * Update rules coverage (cherry picked from commit 0029a1a) # Conflicts: # .github/workflows/ci.yml # go.mod # go.sum # resources/fetching/fetchers/k8s/kube_fetcher_test.go # resources/fetching/fetchers/k8s/kube_provider.go # security-policies/RULES.md # tests/product/tests/data/k8s/k8s_object_cases.py # tests/product/tests/data/k8s_object/eks_k8s_object_test_cases.py # tests/test_environments/k8s-objects-all-cases.yml
Summary of your changes
In order to handle
CVE-2024-26147
, we are required to bump helm version.Decided to remove the PSP fetching (left the rules) in order to bump the
helm
,elastic-agent-autodiscover
,k8s apis
.After this PR we should handle the PSP case scenario correctly and deliver a hotfix (backport) in order to support it fully.
Related Issues
Related:
Checklist
Introducing a new rule?