Upgrade kubernetes dependency to avoid CVE

dabradley commented 11 months ago

Our kubernetes dependency has been flagged for cve-2023-5528. This commit upgrades to the version which fixes this vulnerability. We shouldn't be affected since this only affects Windows nodes, but this upgrade will avoid any vulnerability scanners reporting this issue.

What type of PR is this?

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

Requirements:

[ ] uses conventional commit messages
[ ] includes documentation
[ ] adds unit tests
[ ] tested upgrade from previous version

Special notes for your reviewer:

Release note:

none

andyzhangx commented 11 months ago

/approve

k8s-ci-robot commented 11 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: andyzhangx, dabradley

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/kubernetes-sigs/azurelustre-csi-driver/blob/main/OWNERS)~~ [andyzhangx] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

kubernetes-sigs / azurelustre-csi-driver

Upgrade kubernetes dependency to avoid CVE #146