[security] further reduction of the 136 vulnerabilities (79 fixable) in helm chart v3.0.0 about pulsar-helm-chart HOT 8 CLOSED

upgrading kube-prometheus-stack sounds great!

The current state of v3.2.0:
241 vulnerabilities (200 fixable) have been detected in this package's images.

from pulsar-helm-chart.

Details for Part (1):

from pulsar-helm-chart.

Details for Part (2):
latest versions of tools included in helm chart, newer version available: red font:

• https://github.com/grafana/grafana/releases 9.2.3 (2022-10-31)
• https://github.com/kiwigrid/k8s-sidecar/releases v1.19.5 (2022-09-15)
• https://github.com/prometheus/prometheus/releases 2.39.1 (2022-10-07)
• https://github.com/prometheus/node_exporter/releases 1.4.0 (2022-09-24)
• https://github.com/prometheus-operator/prometheus-operator/releases 0.60.1 (2022-10-10)
• https://github.com/kubernetes/kube-state-metrics/releases v2.6.0 (2022-08-26)

from pulsar-helm-chart.

just openend an issues for Part (1): apache/pulsar#18348

so this is mostly about Part (2)

from pulsar-helm-chart.

update: todays state

206 vulnerabilities (123 fixable) have been detected in this package's images.

https://artifacthub.io/packages/helm/apache/pulsar?modal=security-report

from pulsar-helm-chart.

Closing this issue since the latest release is 3.2.0 . The next release 3.3.0 will upgrade kube-prometheus-stack to 56.x so that will address some problems.

from pulsar-helm-chart.

just an update on this:

The current state of v3.3.0:
205 vulnerabilities (150 fixable) have been detected in this package's images.
source: https://artifacthub.io/packages/helm/apache/pulsar?modal=security-report

from pulsar-helm-chart.

just an update on this:

The current state of v3.3.0: 205 vulnerabilities (150 fixable) have been detected in this package's images. source: https://artifacthub.io/packages/helm/apache/pulsar?modal=security-report

thanks @hpvd . There's 3.3.1 in voting, please see https://lists.apache.org/thread/2f3mx74o52xsxvt1y72phxk1jxl5tt60 .
In the Apache Pulsar Helm chart project, there is a shortage of active contributors to the project. I'd highly appreciate pull requests to address security vulnerabilities so that things could improve. This is a community driven project and it won't move forward without contributors that volunteer to improve things. If you would be interested in contributing, I could help in getting started.

from pulsar-helm-chart.