[1.27] CVE 2023 44487 fixes

kubernetes-sigs / descheduler

Descheduler for Kubernetes

https://sigs.k8s.io/descheduler

Apache License 2.0

4.43k stars 664 forks source link

[1.27] CVE 2023 44487 fixes #1272

Closed ingvagabund closed 11 months ago

ingvagabund commented 11 months ago

Backporting https://github.com/kubernetes-sigs/descheduler/pull/1270

ingvagabund commented 11 months ago

@a7i @knelasevero ptal

a7i commented 11 months ago

/approve

k8s-ci-robot commented 11 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: a7i

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/kubernetes-sigs/descheduler/blob/release-1.27/OWNERS)~~ [a7i] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

knelasevero commented 11 months ago

/lgtm