Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade Cassandra Package in Jaeger v1 chart #631

Open
jkowall opened this issue Feb 13, 2025 · 0 comments
Open

Upgrade Cassandra Package in Jaeger v1 chart #631

jkowall opened this issue Feb 13, 2025 · 0 comments
Labels
good first issue Good for newcomers help wanted Extra attention is needed

Comments

@jkowall
Copy link
Contributor

jkowall commented Feb 13, 2025

Security Updates Needed (new packages)

I was looking at the helm chart vulnerability reviews and it seems like we have an old version of Cassandra in there causing a lot of them. https://artifacthub.io/packages/helm/jaegertracing/jaeger/3.4.0?modal=security-report&event-id=920295d2-3ed1-4fb9-8d95-4fc526e0ddbf

The Cassnadra chart we are including is not even available anymore since 2022 : https://github.com/helm/charts/blob/master/README.md#status-of-the-project so we should either drop Cassandra or use a supported chart.

Please upgrade Cassandra to a newer version which is supported similar to what is used in Jaeger v2 chart.

Steps to reproduce

Review artifacthub findings : https://artifacthub.io/packages/helm/jaegertracing/jaeger/3.4.0?modal=security-report&event-id=920295d2-3ed1-4fb9-8d95-4fc526e0ddbf

Expected behavior

Jaeger v1 Helm chart runs on the current version of Cassandra without vulnerabilities.

@jkowall jkowall added good first issue Good for newcomers help wanted Extra attention is needed labels Feb 13, 2025
@jkowall jkowall changed the title [Bug]: Upgrade Cassandra Package in Javer v1 chart Upgrade Cassandra Package in Jaeger v1 chart Feb 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
good first issue Good for newcomers help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

1 participant