integr8ly / application-monitoring-operator

Operator for installing the Application Monitoring Stack on OpenShift (Prometheus, AlertManager, Grafana)
Apache License 2.0
30 stars 45 forks source link

MGDAPI-2072 - Address high CVEs discovered in grafana-operator image … #162

Closed valerymo closed 3 years ago

valerymo commented 3 years ago

Upgrade to latest - v3.10.2 version of grafana-operator. This version has no vulnerabilities. https://quay.io/repository/integreatly/grafana-operator?tab=tags It's replacing v3.10.1 that had 1 High and 18 total vulnerabilities.

Jira: https://issues.redhat.com/browse/MGDAPI-2072 PR in integreatly-operator: https://github.com/integr8ly/integreatly-operator/pull/1919

valerymo commented 3 years ago

/assign @pb82 Hello Peter, could you please look at this PR and approve if it looks ok. Changes done to complete moving to new grafana-operator image 3.10.2, to avoid valnurabilities in 3.10.1 image. This PR is going together with integrately-operator PR https://github.com/integr8ly/integreatly-operator/pull/1919 and Jira task - https://issues.redhat.com/browse/MGDAPI-2072 Thank you

KevFan commented 3 years ago

Performed local installation with operator-sdk version v0.15.2 as required by this operator. Ran the following commands to run the operator locally:

make cluster/install/local
make code/run

However to complete installation, I had to temporarily set the skip service account flag to false in Grafana CR due to https://github.com/integr8ly/application-monitoring-operator/pull/159 as grafana deployment could not complete without the service account for a local installation.

Verified grafana-operator image is using updated image quay.io/integreatly/grafana-operator:v3.10.2

image

/lgtm

openshift-ci[bot] commented 3 years ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: pb82

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/integr8ly/application-monitoring-operator/blob/master/OWNERS)~~ [pb82] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment