search

jetstack / tarmak

A toolkit for Kubernetes cluster provisioning and lifecycle management
Apache License 2.0
269 stars 49 forks source link

Disable sctp #784

Closed MattiasGees closed 5 years ago

MattiasGees commented 5 years ago

Signed-off-by: Mattias Gees mattias.gees@gmail.com

What this PR does / why we need it: This disables sctp for https://groups.google.com/forum/?pli=1#!topic/kubernetes-dev/SAiVrpl_kZk

Which issue this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged): fixes #

Special notes for your reviewer: We need to do this in the baseimage as after a disable you need a reboot.

Release note:

Disable SCTP for CVE-2019-3874
JoshVanL commented 5 years ago

/approve

jetstack-bot commented 5 years ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: JoshVanL, MattiasGees

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/jetstack/tarmak/blob/master/OWNERS)~~ [JoshVanL] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
simonswine commented 5 years ago

/lgtm