OPS-4836 Fix vulnerability CVE-2022-0185

[titanlien]

comming release v.1.20.0

[danvaida]

LGTM but I wonder, how can I test this?

[titanlien]

LGTM but I wonder, how can I test this?

After we deployed it, we can verify this patch by

kubectl run -it ubutest2 --rm --image=ubuntu:20.04 /bin/bash                                                                                         
If you don't see a command prompt, try pressing enter.
root@ubutest2:/$ unshare -r
unshare: unshare failed: Operation not permitted

[snovikov]

as far as I understand you have to recreate all worker nodes?

[titanlien]

as far as I understand you have to recreate all worker nodes?

Yes, I hava to. In the meantime, I also update k8s image version. So it will recreate all nodes.