Upgrade the grpc_health_probe version to v0.4.11 to resolve security …

…vulnerability CVE-2022-27191 (#1875) * upgrade the grpc_health_probe version to v0.4.11 to resolve security vulnerability CVE-2022-27191 * increase batch size of tfjob-mnist-with-summaries * add primaryPodLabels to tfjob's example
kubeflow · May 27, 2022 · a9d92bd · a9d92bd
1 parent cc29580
commit a9d92bd
Show file tree

Hide file tree

Showing 11 changed files with 17 additions and 14 deletions.
diff --git a/cmd/db-manager/v1beta1/Dockerfile b/cmd/db-manager/v1beta1/Dockerfile
@@ -1,7 +1,7 @@
 # Build the Katib DB manager.
 FROM golang:alpine AS build-env
 
-ENV GRPC_HEALTH_PROBE_VERSION v0.4.6
+ENV GRPC_HEALTH_PROBE_VERSION v0.4.11
 
 WORKDIR /go/src/github.com/kubeflow/katib
 

diff --git a/cmd/katib-controller/v1beta1/Dockerfile b/cmd/katib-controller/v1beta1/Dockerfile
@@ -14,11 +14,11 @@ COPY pkg/ pkg/
 
 # Build the binary.
 RUN if [ "$(uname -m)" = "ppc64le" ]; then \
-    CGO_ENABLED=0 GOOS=linux GOARCH=ppc64le go build -a -o katib-controller  ./cmd/katib-controller/v1beta1; \
+    CGO_ENABLED=0 GOOS=linux GOARCH=ppc64le go build -a -o katib-controller ./cmd/katib-controller/v1beta1; \
     elif [ "$(uname -m)" = "aarch64" ]; then \
-    CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -a -o katib-controller  ./cmd/katib-controller/v1beta1; \
+    CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -a -o katib-controller ./cmd/katib-controller/v1beta1; \
     else \
-    CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o katib-controller  ./cmd/katib-controller/v1beta1; \
+    CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o katib-controller ./cmd/katib-controller/v1beta1; \
     fi
 
 # Copy the controller-manager into a thin image.

diff --git a/cmd/suggestion/chocolate/v1beta1/Dockerfile b/cmd/suggestion/chocolate/v1beta1/Dockerfile
@@ -2,7 +2,7 @@ FROM python:3.9
 
 ENV TARGET_DIR /opt/katib
 ENV SUGGESTION_DIR cmd/suggestion/chocolate/v1beta1
-ENV GRPC_HEALTH_PROBE_VERSION v0.4.6
+ENV GRPC_HEALTH_PROBE_VERSION v0.4.11
 
 RUN if [ "$(uname -m)" = "ppc64le" ] || [ "$(uname -m)" = "aarch64" ]; then \
     apt-get -y update && \

diff --git a/cmd/suggestion/goptuna/v1beta1/Dockerfile b/cmd/suggestion/goptuna/v1beta1/Dockerfile
@@ -1,7 +1,7 @@
 # Build the Goptuna Suggestion.
 FROM golang:alpine AS build-env
 
-ENV GRPC_HEALTH_PROBE_VERSION v0.4.6
+ENV GRPC_HEALTH_PROBE_VERSION v0.4.11
 
 WORKDIR /go/src/github.com/kubeflow/katib
 

diff --git a/cmd/suggestion/hyperband/v1beta1/Dockerfile b/cmd/suggestion/hyperband/v1beta1/Dockerfile
@@ -2,7 +2,7 @@ FROM python:3.9
 
 ENV TARGET_DIR /opt/katib
 ENV SUGGESTION_DIR cmd/suggestion/hyperband/v1beta1
-ENV GRPC_HEALTH_PROBE_VERSION v0.4.6
+ENV GRPC_HEALTH_PROBE_VERSION v0.4.11
 
 RUN if [ "$(uname -m)" = "ppc64le" ] || [ "$(uname -m)" = "aarch64" ]; then \
     apt-get -y update && \

diff --git a/cmd/suggestion/hyperopt/v1beta1/Dockerfile b/cmd/suggestion/hyperopt/v1beta1/Dockerfile
@@ -2,7 +2,7 @@ FROM python:3.9
 
 ENV TARGET_DIR /opt/katib
 ENV SUGGESTION_DIR cmd/suggestion/hyperopt/v1beta1
-ENV GRPC_HEALTH_PROBE_VERSION v0.4.6
+ENV GRPC_HEALTH_PROBE_VERSION v0.4.11
 
 RUN if [ "$(uname -m)" = "ppc64le" ] || [ "$(uname -m)" = "aarch64" ]; then \
     apt-get -y update && \

diff --git a/cmd/suggestion/nas/darts/v1beta1/Dockerfile b/cmd/suggestion/nas/darts/v1beta1/Dockerfile
@@ -2,7 +2,7 @@ FROM python:3.9
 
 ENV TARGET_DIR /opt/katib
 ENV SUGGESTION_DIR cmd/suggestion/nas/darts/v1beta1
-ENV GRPC_HEALTH_PROBE_VERSION v0.4.6
+ENV GRPC_HEALTH_PROBE_VERSION v0.4.11
 
 RUN if [ "$(uname -m)" = "ppc64le" ] || [ "$(uname -m)" = "aarch64" ]; then \
     apt-get -y update && \

diff --git a/cmd/suggestion/nas/enas/v1beta1/Dockerfile b/cmd/suggestion/nas/enas/v1beta1/Dockerfile
@@ -2,7 +2,7 @@ FROM python:3.9
 
 ENV TARGET_DIR /opt/katib
 ENV SUGGESTION_DIR cmd/suggestion/nas/enas/v1beta1
-ENV GRPC_HEALTH_PROBE_VERSION v0.4.6
+ENV GRPC_HEALTH_PROBE_VERSION v0.4.11
 # tensorflow community build for aarch64
 # https://github.com/tensorflow/build#tensorflow-builds
 ENV PIP_EXTRA_INDEX_URL https://snapshots.linaro.org/ldcg/python-cache/

diff --git a/cmd/suggestion/optuna/v1beta1/Dockerfile b/cmd/suggestion/optuna/v1beta1/Dockerfile
@@ -2,7 +2,7 @@ FROM python:3.9
 
 ENV TARGET_DIR /opt/katib
 ENV SUGGESTION_DIR cmd/suggestion/optuna/v1beta1
-ENV GRPC_HEALTH_PROBE_VERSION v0.4.6
+ENV GRPC_HEALTH_PROBE_VERSION v0.4.11
 
 RUN if [ "$(uname -m)" = "ppc64le" ] || [ "$(uname -m)" = "aarch64" ]; then \
     apt-get -y update && \

diff --git a/cmd/suggestion/skopt/v1beta1/Dockerfile b/cmd/suggestion/skopt/v1beta1/Dockerfile
@@ -2,7 +2,7 @@ FROM python:3.9
 
 ENV TARGET_DIR /opt/katib
 ENV SUGGESTION_DIR cmd/suggestion/skopt/v1beta1
-ENV GRPC_HEALTH_PROBE_VERSION v0.4.6
+ENV GRPC_HEALTH_PROBE_VERSION v0.4.11
 
 RUN if [ "$(uname -m)" = "ppc64le" ] || [ "$(uname -m)" = "aarch64" ]; then \
     apt-get -y update && \

diff --git a/examples/v1beta1/kubeflow-training-operator/tfjob-mnist-with-summaries.yaml b/examples/v1beta1/kubeflow-training-operator/tfjob-mnist-with-summaries.yaml
@@ -29,10 +29,13 @@ spec:
     - name: batch_size
       parameterType: int
       feasibleSpace:
-        min: "10"
-        max: "20"
+        min: "32"
+        max: "64"
   trialTemplate:
     primaryContainerName: tensorflow
+    # In this example we can collect metrics only from the Worker pods.
+    primaryPodLabels:
+      training.kubeflow.org/replica-type: worker
     trialParameters:
       - name: learningRate
         description: Learning rate for the training model