Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Helm to v3.6.1 #388

Merged
merged 1 commit into from
Jun 18, 2021
Merged

Update Helm to v3.6.1 #388

merged 1 commit into from
Jun 18, 2021

Conversation

hiddeco
Copy link
Member

@hiddeco hiddeco commented Jun 17, 2021

v3.6.1 is a a security update from Helm, ensuring that credentials are
always only passed to the defined repository host.

Based on Helm user reports, disabling this behavior may be required for
some Helm repository solutions like Artifactory, and may be done by
setting PassCredentials in the HelmRepositorySpec.

For more information, see:
GHSA-56hp-xqp3-w2jf

@hiddeco hiddeco added area/helm Helm related issues and pull requests area/ci CI related issues and pull requests labels Jun 17, 2021
stefanprodan
stefanprodan previously approved these changes Jun 17, 2021
@hiddeco hiddeco force-pushed the update-deps branch 3 times, most recently from 89e1dfd to 80f5a0b Compare June 18, 2021 08:48
@hiddeco hiddeco dismissed stefanprodan’s stale review June 18, 2021 08:48

More work is required

@hiddeco hiddeco force-pushed the update-deps branch 3 times, most recently from 5d07419 to 65ffe85 Compare June 18, 2021 10:29
v3.6.1 is a a security update from Helm, ensuring that credentials are
always only passed to the defined repository host.

Based on Helm user reports, disabling this behavior may be required for
some Helm repository solutions like Artifactory, and may be done by
setting `PassCredentials` in the `HelmRepositorySpec`.

For more information, see:
GHSA-56hp-xqp3-w2jf

Signed-off-by: Hidde Beydals <hello@hidde.co>
Copy link
Member

@stefanprodan stefanprodan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Thanks @hiddeco 🐎

@hiddeco hiddeco merged commit 4a0ce41 into main Jun 18, 2021
@hiddeco hiddeco deleted the update-deps branch June 18, 2021 10:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/ci CI related issues and pull requests area/helm Helm related issues and pull requests
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants