Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade ingress addon to latest one. Current have CVE and unsupported!!! #313

Open
MonkzCode opened this issue Jan 13, 2025 · 2 comments
Open

Upgrade ingress addon to latest one. Current have CVE and unsupported!!! #313

MonkzCode opened this issue Jan 13, 2025 · 2 comments

Comments

@MonkzCode
Copy link

Canonical, please, update ingress addon to latest version.
By default, when someone enable ingress addon it version is 1.8.0. This version doesn't supported anymore, check version table - https://github.com/kubernetes/ingress-nginx
1.8.0 also have have CVEs, for an example - CVE-2024-7646 with score 8.8 :(
@claudiubelu
Copy link
Contributor

Hello, what version of microk8s are you using? The ingress addon was bumped to v1.11.2 in microk8s v1.31, as seen in this PR: #291 . Considering the severity, it could be cherry-picked to v1.30 as well.

@MonkzCode
Copy link
Author

Thanks for Your reply.
I use installed: v1.31.3 (7449) 168MB classic, but addon still 1.8.0, even i disable ingress and enable it again - it remains 1.8.0
Looks like i should simply change image version in DaemonSet

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@claudiubelu @MonkzCode