-
Notifications
You must be signed in to change notification settings - Fork 85
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Upgrade all Kubernetes dependencies #374
Comments
Is there anything pending about this issue? |
@iblancasa Thanks a million for your great work in bumping dependencies! This looks great now! I just scanned current main branch with trivy:
Closing issue as resolved by #375. |
thanks @erikgb and @iblancasa great to see |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
What would you like to be added:
Upgrade all Kubernetes dependencies to version 1.24 including controller-runtime to version 0.12.
I had a look at this, but it seems like a complex task that require more experience with the code-base than I currently have. There has been a lot of changes in envtest that require the bootstrapping of the envtest clusters to be rewritten.
CC: @kensipe @iblancasa
Why is this needed:
Scanning kuttl with a vulnerability scanner like Trivy, shows that we have quite a few vulnerabilities in our dependency tree. I had a look at this, and to me it seems like most of them are rooted in the fact that we depend on old Kubernetes dependencies versions that are not maintained anymore (EOL).
We currently depend on K8s 1.20, and I also think it is about time to upgrade this. K8s 1.20 is long passed EOL, and with the upcoming K8s 1.25 some APIs are removed - which are still used in kuttl.
The text was updated successfully, but these errors were encountered: