fix(promtail): Fix bug with Promtail config reloading getting stuck i…

[MasslessParticle]

…ndefinitely (#12795)

Signed-off-by: Paulin Todev [email protected]
(cherry picked from commit 4d761ac)

What this PR does / why we need it:

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Checklist

• Reviewed the CONTRIBUTING.md guide (required)
• Documentation added
• Tests updated
• Title matches the required conventional commits format, see here
  • Note that Promtail is considered to be feature complete, and future development for logs collection will be in Grafana Alloy. As such, feat PRs are unlikely to be accepted unless a case can be made for the feature actually being a bug fix to existing behavior.
• Changes that require user attention or interaction to upgrade are documented in docs/sources/setup/upgrade/_index.md
• For Helm chart changes bump the Helm chart version in production/helm/loki/Chart.yaml and update production/helm/loki/CHANGELOG.md and production/helm/loki/README.md. Example PR
• If the change is deprecating or removing a configuration option, update the deprecated-config.yaml and deleted-config.yaml files respectively in the tools/deprecated-config-checker directory. Example PR

[github-actions]

Snyk scan found the following vulnerabilities:

• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
• high - [CVE-2023-45288] Allocation of Resources Without Limits or Throttling in golang.org/x/net/http2 v0.17.0. Fixed in ["0.23.0"]
  \nTo see more details on these vulnerabilities, and how/where to fix them, please run docker build -t grafana/loki:HEAD-a1b21eb -f cmd/loki/Dockerfile .
  ./tools/ensure-buildx-builder.sh on your branch. If these were not introduced by your PR, please considering fixing them in via a subsequent PR. Thanks!

[github-actions]

Trivy scan found the following vulnerabilities:

• HIGH, Target: usr/bin/loki, Type: gobinary The filepath package does not recognize paths with a ??\ prefix as sp ... in stdlib v1.21.3. Fixed in v1.20.11, 1.21.4, 1.20.12, 1.21.5
• HIGH, Target: usr/bin/loki, Type: gobinary golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS in stdlib v1.21.3. Fixed in v1.21.9, 1.22.2
  \nTo see more details on these vulnerabilities, and how/where to fix them, please run docker build -t grafana/loki:k190-f9d1886 -f cmd/loki/Dockerfile .
  ./tools/ensure-buildx-builder.sh on your branch. If these were not introduced by your PR, please considering fixing them in via a subsequent PR. Thanks!