search

prometheus-community / helm-charts

Prometheus community Helm charts
Apache License 2.0
4.98k stars 4.99k forks source link

[kube-prometheus-stack] Prometheus Operator kube-webhook-certgen image version #4550

Open andreipantelimon opened 3 months ago

andreipantelimon commented 3 months ago

Describe the bug a clear and concise description of what the bug is.

Hey, We are using the kube-prometheus-stack in strict cloud environments and we need to keep up with the image versions regarding CVE's. Can the ingress-nginx/kube-webhook-certgen be upgraded to the latest v20231226-1a7112e06 version which fixes some high severity CVE's? Also are there any other implications in disabling the admissionWebhooks altogether, other than taking the risk of misconfiguring prometheus ? Is it used in any other place? Thanks guys

What's your helm version?

3.14.2

What's your kubectl version?

v1.28.4

Which chart?

kube-prometheus-stack

What's the chart version?

58.5.1

What happened?

No response

What you expected to happen?

No response

How to reproduce it?

No response

Enter the changed values of values.yaml?

No response

Enter the command that you execute and failing/misfunctioning.

helm install with the default values.yaml file

Anything else we need to know?

No response

jbiers commented 1 week ago

Any news on this issue? I'd be willing to open a PR to make this update happen, unless this is kept intentionally.