cass-operator icon indicating copy to clipboard operation
cass-operator copied to clipboard

Update default version to fix CVEs

Open zencircle opened this issue 5 years ago • 6 comments

https://github.com/datastax/management-api-for-apache-cassandra/issues/83

zencircle avatar Mar 02 '21 21:03 zencircle

@zencircle You will also need to update the test here: https://github.com/zencircle/cass-operator/blob/patch-1/operator/pkg/apis/cassandra/v1beta1/cassandradatacenter_types_test.go#L45 to change the image version as well.

emerkle826 avatar Mar 05 '21 19:03 emerkle826

@emerkle826 I fixed all the issues, now its failing on ecr credentials

zencircle avatar Mar 15 '21 20:03 zencircle

@emerkle826 I fixed all the issues, now its failing on ecr credentials

I'm not 100% sure, but I believe the ECR failure is because you do not have AWS credentials configured. This is likely only going to pass for PRs based on branches in the datastax repo.

Also, there is some concern at the moment about changing the default Cassandra imaged used by cass-operator such that the process runs as the cassandra user (changes made to the Management API image as of v0.1.20). You can override the default image if you wish, however. Is this not a sufficient workaround?

emerkle826 avatar Mar 16 '21 15:03 emerkle826

Workaround is to patch the datacenter, dc1-patch.yaml

apiVersion: cassandra.datastax.com/v1beta1
kind: CassandraDatacenter
spec:
  serverImage: datastax/cassandra-mgmtapi-3_11_7:v0.1.22
kubectl patch cassdc dc1 --type merge -p "$(cat dc1-patch.yaml)"

zencircle avatar Mar 16 '21 16:03 zencircle

@emerkle826 Can you progress on this one ?

zencircle avatar May 07 '21 14:05 zencircle

@zencircle We've actually moved this repo to k8ssandra/cass-operator. Version 1.7.0 of cass-operator was released (just minutes ago as I type this) and can be found here: https://hub.docker.com/repository/docker/k8ssandra/cass-operator/tags?page=1&ordering=last_updated

Version 1.7.0 updates to Management API v0.1.25, which should have the updates you need.

emerkle826 avatar May 07 '21 14:05 emerkle826