update configuration-as-code

[pniederlag]

currently kubernetes-operator "ships" version 1.19 which has some known security-flaws: https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1458

Please update the plugin (and it's companion configuration-as-code-support) to version 1.29

[pniederlag]

well, seems to have been tackled already by
33524f8#diff-8f513d08c37e5a503ac55f1fb38cc0a2 so it's probably rather a problem of missing a release or using an outdate image ...

[tomaszsek]

Hi @pniederlag

You can change version of base plugins in spec.master.basePlugins. New release will set up to date plugins if spec.master.basePlugins is empty.

Cheers

[pniederlag]

Thx for your support! It seems the non semver version properties are somehow tricky, I had to quote them. Seems to work.

If anyone needs to go that route, here is the patch on my jenkins_instance.yaml CRD

0001-bugfix-add-all-basePlugins.txt

[pawelprazak]

Yes, e.g. 1.0 is interpreted as a float and 1.0.0 is interpreted as a string, it's a YAML thing. For the record, as suggested above, use quotes for non-semver versions, e.g.: "1.0"

…

On Tue, Sep 3, 2019 at 2:50 PM Peter Niederlag ***@***.***> wrote: Thx for your support! It seems the non semver version properties are somehow tricky, I had to quote them. Seems to work. If anyone needs to go that route, here is the patch on my operator.yaml 0001-bugfix-add-all-basePlugins.txt <https://github.com/jenkinsci/kubernetes-operator/files/3569472/0001-bugfix-add-all-basePlugins.txt> — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#87?email_source=notifications&email_token=AAAL52VASOLJU4TEQYEIRB3QHZMSLA5CNFSM4ITEN522YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD5YCQSY#issuecomment-527444043>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAAL52S4SSKJBHZMKPDSBNTQHZMSLANCNFSM4ITEN52Q> .

[tomaszsek]

Fixed in https://github.com/jenkinsci/kubernetes-operator/releases/tag/v0.2.0