search

vmware-tanzu / community-edition

VMware Tanzu Community Edition is no longer an actively maintained project. Code is available for historical purposes only.
https://tanzucommunityedition.io/
Apache License 2.0
1.33k stars 306 forks source link

Upgrade CSI driver to 2.6.3 and CVE Fix #5655

Closed nikhilbarge closed 1 year ago

nikhilbarge commented 1 year ago

What this PR does / why we need it

Bump up vsphere-csi version to consume v2.6.3

Which issue(s) this PR fixes

Describe testing done for PR

create packageinstall and packagerepository and tested vsphere-csi package. logs: 

root@k8s-control-611-1677331959:~# kubectl create ns tanzu-package-repo-global
namespace/tanzu-package-repo-global created
root@k8s-control-611-1677331959:~# kapp deploy -a repo -f repo.yaml -y -n tanzu-package-repo-global
Target cluster 'https://10.168.160.252:6443' (nodes: k8s-control-611-1677331959, 5+)

Changes

Namespace                  Name              Kind               Conds.  Age  Op      Op st.  Wait to    Rs  Ri  
tanzu-package-repo-global  vsphere-pkg-repo  PackageRepository  -       -    create  -       reconcile  -   -  

Op:      1 create, 0 delete, 0 update, 0 noop, 0 exists
Wait to: 1 reconcile, 0 delete, 0 noop

4:16:59PM: ---- applying 1 changes [0/1 done] ----
4:16:59PM: create packagerepository/vsphere-pkg-repo (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:16:59PM: ---- waiting on 1 changes [0/1 done] ----
4:16:59PM: ongoing: reconcile packagerepository/vsphere-pkg-repo (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:16:59PM:  ^ Waiting for generation 1 to be observed
4:17:00PM: ongoing: reconcile packagerepository/vsphere-pkg-repo (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:17:00PM:  ^ Reconciling
4:17:02PM: ok: reconcile packagerepository/vsphere-pkg-repo (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:17:02PM: ---- applying complete [1/1 done] ----
4:17:02PM: ---- waiting complete [1/1 done] ----

Succeeded
root@k8s-control-611-1677331959:~# kubectl get packagerepository -A 
NAMESPACE                   NAME               AGE   DESCRIPTION
tanzu-package-repo-global   vsphere-pkg-repo   12s   Reconcile succeeded
root@k8s-control-611-1677331959:~# kapp deploy -a sacc -f sa.yaml -y 
Target cluster 'https://10.168.160.252:6443' (nodes: k8s-control-611-1677331959, 5+)

Changes

Namespace                  Name                                            Kind                Conds.  Age  Op      Op st.  Wait to    Rs  Ri  
(cluster)                  vsphere-csi-install-cluster-admin-role          ClusterRole         -       -    create  -       reconcile  -   -  
^                          vsphere-csi-install-cluster-admin-role-binding  ClusterRoleBinding  -       -    create  -       reconcile  -   -  
tanzu-package-repo-global  vsphere-csi-install-sa                          ServiceAccount      -       -    create  -       reconcile  -   -  

Op:      3 create, 0 delete, 0 update, 0 noop, 0 exists
Wait to: 3 reconcile, 0 delete, 0 noop

4:17:39PM: ---- applying 2 changes [0/3 done] ----
4:17:39PM: create clusterrole/vsphere-csi-install-cluster-admin-role (rbac.authorization.k8s.io/v1) cluster
4:17:39PM: create serviceaccount/vsphere-csi-install-sa (v1) namespace: tanzu-package-repo-global
4:17:39PM: ---- waiting on 2 changes [0/3 done] ----
4:17:39PM: ok: reconcile clusterrole/vsphere-csi-install-cluster-admin-role (rbac.authorization.k8s.io/v1) cluster
4:17:39PM: ok: reconcile serviceaccount/vsphere-csi-install-sa (v1) namespace: tanzu-package-repo-global
4:17:39PM: ---- applying 1 changes [2/3 done] ----
4:17:39PM: create clusterrolebinding/vsphere-csi-install-cluster-admin-role-binding (rbac.authorization.k8s.io/v1) cluster
4:17:39PM: ---- waiting on 1 changes [2/3 done] ----
4:17:39PM: ok: reconcile clusterrolebinding/vsphere-csi-install-cluster-admin-role-binding (rbac.authorization.k8s.io/v1) cluster
4:17:39PM: ---- applying complete [3/3 done] ----
4:17:39PM: ---- waiting complete [3/3 done] ----

Succeeded
root@k8s-control-611-1677331959:~# kapp deploy -a pkginstall-vsphere-csi -f packageinstall.yaml -y
Target cluster 'https://10.168.160.252:6443' (nodes: k8s-control-611-1677331959, 5+)

Changes

Namespace                  Name                    Kind            Conds.  Age  Op      Op st.  Wait to    Rs  Ri  
tanzu-package-repo-global  pkginstall-vsphere-csi  PackageInstall  -       -    create  -       reconcile  -   -  

Op:      1 create, 0 delete, 0 update, 0 noop, 0 exists
Wait to: 1 reconcile, 0 delete, 0 noop

4:17:52PM: ---- applying 1 changes [0/1 done] ----
4:17:52PM: create packageinstall/pkginstall-vsphere-csi (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:17:52PM: ---- waiting on 1 changes [0/1 done] ----
4:17:52PM: ongoing: reconcile packageinstall/pkginstall-vsphere-csi (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:17:52PM:  ^ Waiting for generation 1 to be observed
4:17:53PM: ongoing: reconcile packageinstall/pkginstall-vsphere-csi (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:17:53PM:  ^ Reconciling
4:18:52PM: ---- waiting on 1 changes [0/1 done] ----
4:18:53PM: ongoing: reconcile packageinstall/pkginstall-vsphere-csi (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:18:53PM:  ^ Reconciling
4:19:53PM: ---- waiting on 1 changes [0/1 done] ----
4:19:53PM: ongoing: reconcile packageinstall/pkginstall-vsphere-csi (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:19:53PM:  ^ Reconciling
4:20:54PM: ---- waiting on 1 changes [0/1 done] ----
4:20:54PM: ongoing: reconcile packageinstall/pkginstall-vsphere-csi (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:20:54PM:  ^ Reconciling
4:21:21PM: ok: reconcile packageinstall/pkginstall-vsphere-csi (packaging.carvel.dev/v1alpha1) namespace: tanzu-package-repo-global
4:21:21PM: ---- applying complete [1/1 done] ----
4:21:21PM: ---- waiting complete [1/1 done] ----

Succeeded
root@k8s-control-611-1677331959:~# kubectl get pods -A
NAMESPACE           NAME                                                 READY   STATUS    RESTARTS       AGE
kapp-controller     kapp-controller-6cb4bcfc8b-tk5nd                     2/2     Running   0              6m55s
kube-flannel        kube-flannel-ds-d276g                                1/1     Running   0              166m
kube-flannel        kube-flannel-ds-gqmp7                                1/1     Running   0              162m
kube-flannel        kube-flannel-ds-jjlfw                                1/1     Running   0              161m
kube-flannel        kube-flannel-ds-qhttm                                1/1     Running   0              160m
kube-flannel        kube-flannel-ds-xbjpq                                1/1     Running   0              161m
kube-flannel        kube-flannel-ds-zqn7f                                1/1     Running   0              164m
kube-system         coredns-565d847f94-b4v9q                             1/1     Running   0              166m
kube-system         coredns-565d847f94-tl7k4                             1/1     Running   0              166m
kube-system         etcd-k8s-control-507-1677331988                      1/1     Running   0              162m
kube-system         etcd-k8s-control-611-1677331959                      1/1     Running   0              166m
kube-system         etcd-k8s-control-659-1677331974                      1/1     Running   0              164m
kube-system         kube-apiserver-k8s-control-507-1677331988            1/1     Running   0              162m
kube-system         kube-apiserver-k8s-control-611-1677331959            1/1     Running   0              166m
kube-system         kube-apiserver-k8s-control-659-1677331974            1/1     Running   0              164m
kube-system         kube-controller-manager-k8s-control-507-1677331988   1/1     Running   0              162m
kube-system         kube-controller-manager-k8s-control-611-1677331959   1/1     Running   1 (164m ago)   166m
kube-system         kube-controller-manager-k8s-control-659-1677331974   1/1     Running   0              164m
kube-system         kube-proxy-89z9m                                     1/1     Running   0              161m
kube-system         kube-proxy-f8q2j                                     1/1     Running   0              166m
kube-system         kube-proxy-h55t8                                     1/1     Running   0              164m
kube-system         kube-proxy-j8lxs                                     1/1     Running   0              161m
kube-system         kube-proxy-vkdx2                                     1/1     Running   0              162m
kube-system         kube-proxy-z2rkl                                     1/1     Running   0              160m
kube-system         kube-scheduler-k8s-control-507-1677331988            1/1     Running   0              162m
kube-system         kube-scheduler-k8s-control-611-1677331959            1/1     Running   1 (164m ago)   166m
kube-system         kube-scheduler-k8s-control-659-1677331974            1/1     Running   0              164m
kube-system         vsphere-cloud-controller-manager-fbh6m               1/1     Running   0              160m
kube-system         vsphere-cloud-controller-manager-jv6lj               1/1     Running   0              160m
kube-system         vsphere-cloud-controller-manager-trldl               1/1     Running   0              160m
vmware-system-csi   vsphere-csi-controller-5b44946cff-8z7l6              6/6     Running   0              3m23s
vmware-system-csi   vsphere-csi-controller-5b44946cff-d6j24              6/6     Running   0              4m2s
vmware-system-csi   vsphere-csi-controller-5b44946cff-xnqzl              6/6     Running   0              2m48s
vmware-system-csi   vsphere-csi-node-8pxm7                               3/3     Running   0              3m31s
vmware-system-csi   vsphere-csi-node-8t8gb                               3/3     Running   0              2m57s
vmware-system-csi   vsphere-csi-node-dlm8w                               3/3     Running   0              41s
vmware-system-csi   vsphere-csi-node-gn6cc                               3/3     Running   0              75s
vmware-system-csi   vsphere-csi-node-jh5c2                               3/3     Running   0              2m23s
vmware-system-csi   vsphere-csi-node-jqclx                               3/3     Running   0              110s

Special notes for your reviewer

Bump up vsphere-csi version to consume v2.6.3 to include CVE fixes