search

openshift / vsphere-problem-detector

OpenShift operator that monitors & reports issues with vSphere cluster
Apache License 2.0
10 stars 24 forks source link

OCPBUGS-26474,OCPBUGS-26475: [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 #151

Closed jsafrane closed 10 months ago

jsafrane commented 10 months ago

@openshift/storage

This is a manual cherry-pick of: https://github.com/openshift/vsphere-problem-detector/pull/137

jsafrane commented 10 months ago

/jira cherry-pick OCPBUGS-22641,OCPBUGS-23890

openshift-ci-robot commented 10 months ago

@jsafrane: Jira Issue OCPBUGS-22641 has been cloned as Jira Issue OCPBUGS-26474. Will retitle bug to link to clone.

Jira Issue OCPBUGS-23890 has been cloned as Jira Issue OCPBUGS-26475. Will retitle bug to link to clone. /retitle OCPBUGS-26474,OCPBUGS-26475: [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1

In response to [this](https://github.com/openshift/vsphere-problem-detector/pull/151#issuecomment-1881150258): >/jira cherry-pick OCPBUGS-22641,OCPBUGS-23890 > Instructions for interacting with me using PR comments are available [here](https://prow.ci.openshift.org/command-help?repo=openshift%2Fvsphere-problem-detector). If you have questions or suggestions related to my behavior, please file an issue against the [openshift-eng/jira-lifecycle-plugin](https://github.com/openshift-eng/jira-lifecycle-plugin/issues/new) repository.
openshift-ci-robot commented 10 months ago

@jsafrane: This pull request references Jira Issue OCPBUGS-26474, which is valid. The bug has been moved to the POST state.

6 validation(s) were run on this bug * bug is open, matching expected state (open) * bug target version (4.14.z) matches configured target version for branch (4.14.z) * bug is in the state New, which is one of the valid states (NEW, ASSIGNED, POST) * dependent bug [Jira Issue OCPBUGS-22641](https://issues.redhat.com//browse/OCPBUGS-22641) is in the state Verified, which is one of the valid states (VERIFIED, RELEASE PENDING, CLOSED (ERRATA), CLOSED (CURRENT RELEASE), CLOSED (DONE), CLOSED (DONE-ERRATA)) * dependent [Jira Issue OCPBUGS-22641](https://issues.redhat.com//browse/OCPBUGS-22641) targets the "4.15.0" version, which is one of the valid target versions: 4.15.0 * bug has dependents

No GitHub users were found matching the public email listed for the QA contact in Jira (wduan@redhat.com), skipping review request.

The bug has been updated to refer to the pull request using the external bug tracker.

This pull request references Jira Issue OCPBUGS-26475, which is valid. The bug has been moved to the POST state.

6 validation(s) were run on this bug * bug is open, matching expected state (open) * bug target version (4.14.z) matches configured target version for branch (4.14.z) * bug is in the state New, which is one of the valid states (NEW, ASSIGNED, POST) * dependent bug [Jira Issue OCPBUGS-23890](https://issues.redhat.com//browse/OCPBUGS-23890) is in the state Verified, which is one of the valid states (VERIFIED, RELEASE PENDING, CLOSED (ERRATA), CLOSED (CURRENT RELEASE), CLOSED (DONE), CLOSED (DONE-ERRATA)) * dependent [Jira Issue OCPBUGS-23890](https://issues.redhat.com//browse/OCPBUGS-23890) targets the "4.15.0" version, which is one of the valid target versions: 4.15.0 * bug has dependents

No GitHub users were found matching the public email listed for the QA contact in Jira (wduan@redhat.com), skipping review request.

The bug has been updated to refer to the pull request using the external bug tracker.

In response to [this](https://github.com/openshift/vsphere-problem-detector/pull/151): >@openshift/storage > >This is a manual cherry-pick of: >https://github.com/openshift/vsphere-problem-detector/pull/137 > Instructions for interacting with me using PR comments are available [here](https://prow.ci.openshift.org/command-help?repo=openshift%2Fvsphere-problem-detector). If you have questions or suggestions related to my behavior, please file an issue against the [openshift-eng/jira-lifecycle-plugin](https://github.com/openshift-eng/jira-lifecycle-plugin/issues/new) repository.
openshift-ci[bot] commented 10 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jsafrane

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/openshift/vsphere-problem-detector/blob/release-4.14/OWNERS)~~ [jsafrane] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
openshift-ci[bot] commented 10 months ago

@jsafrane: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-vsphere 05204bf4578be7ecc720389b6aa59468b3f35140 link true /test e2e-vsphere
ci/prow/e2e-vsphere-zones 05204bf4578be7ecc720389b6aa59468b3f35140 link false /test e2e-vsphere-zones

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
jsafrane commented 10 months ago

/label backport-risk-assessed

jsafrane commented 10 months ago

/close we've decided not to fix 4.14.z and wait for 4.15 GA instead. The amount of dependency changes is too big to be safe for a z-stream and moderate CVE.

openshift-ci[bot] commented 10 months ago

@jsafrane: Closed this PR.

In response to [this](https://github.com/openshift/vsphere-problem-detector/pull/151#issuecomment-1882658611): >/close >we've decided not to fix 4.14.z and wait for 4.15 GA instead. The amount of dependency changes is too big to be safe for a z-stream and moderate CVE. Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.
openshift-ci-robot commented 10 months ago

@jsafrane: An error was encountered removing this pull request from the external tracker bugs for bug OCPBUGS-26474 on the Jira server at https://issues.redhat.com/. No known errors were detected, please see the full error message for details.

Full error message. request failed. Please analyze the request body for more details. Status code: 401: {"errorMessages":["You do not have the permission to see the specified issue.","Login Required"],"errors":{}}

Please contact an administrator to resolve this issue, then request a bug refresh with /jira refresh.

This pull request references Jira Issue OCPBUGS-26475. The bug has been updated to no longer refer to the pull request using the external bug tracker. All external bug links have been closed. The bug has been moved to the NEW state.

In response to [this](https://github.com/openshift/vsphere-problem-detector/pull/151): >@openshift/storage > >This is a manual cherry-pick of: >https://github.com/openshift/vsphere-problem-detector/pull/137 > Instructions for interacting with me using PR comments are available [here](https://prow.ci.openshift.org/command-help?repo=openshift%2Fvsphere-problem-detector). If you have questions or suggestions related to my behavior, please file an issue against the [openshift-eng/jira-lifecycle-plugin](https://github.com/openshift-eng/jira-lifecycle-plugin/issues/new) repository.