Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update kubernetes dependency #198

Closed
stoneshi-yunify opened this issue Nov 11, 2021 · 3 comments
Closed

update kubernetes dependency #198

stoneshi-yunify opened this issue Nov 11, 2021 · 3 comments
Assignees
Labels
kind/feature Categorizes issue or PR as related to a new feature.

Comments

@stoneshi-yunify
Copy link
Contributor

What would you like to be added:
current this csi is using k8s.io/kubernetes v1.14.1 which reported by github Dependabot has security issues. github recommends upgrade k8s.io/kubernetes to version 1.19.15 or later.

I guess packages below will all be upgraded together:

	k8s.io/apiextensions-apiserver v0.0.0-20190823014223-07b4561f8b0e // indirect
	k8s.io/apimachinery v0.0.0-20190823012420-8ca64af22337
	k8s.io/apiserver v0.0.0-20190823053033-1316076af51c // indirect
	k8s.io/client-go v0.0.0-20190823012814-cdbd92c111cf
	k8s.io/cloud-provider v0.0.0-20190717025205-585d8110a88f // indirect
	k8s.io/klog v0.4.0
	k8s.io/kube-openapi v0.0.0-20190718094010-3cf2ea392886 // indirect
	k8s.io/kubernetes v1.14.1

Why is this needed:
for security issues.

@stoneshi-yunify stoneshi-yunify added the kind/feature Categorizes issue or PR as related to a new feature. label Nov 11, 2021
@f10atin9
Copy link
Contributor

f10atin9 commented Nov 15, 2021

In this issue , I saw that depending on k8s.io/kubernetes directly as a library, which is not recommend. Should we remove k8s.io/kubernetes and update other standalone modules at the same time?

@stoneshi-yunify
Copy link
Contributor Author

sure, go ahead

@f10atin9
Copy link
Contributor

The new module was found to be incompatible when updated, so this issue will be closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature.
Projects
None yet
Development

No branches or pull requests

2 participants