You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
K0smotron relies on k0s and we've seen some CVEs on some dependencies which we ignored entirely because they are only used in the tests and have no actual impact. However, we haven't updated this in a while and it's a matter of time that one dependency that we share has a CVE or that we can't bump at some point and becomes an actual issue.
For these reasons we thought we should keep k0s updated but #703 has shown that this is a very big and risky change as many things could go wrong. We agreed that the long term goal is removing github.com/k0sproject/k0s as a code dependency entirely.
This is a tracking issue to see where we have dependencies to it:
The two use cases I've identified are:
1- check-basic uses BootLooseSuite as a base framework, which is quite complex to deal with
2- Many checks use specific tests such as WaitForNodeReadyStatus which should be pretty self contained and small enough that we're comfortable just copying and pasting into the code.
The text was updated successfully, but these errors were encountered:
K0smotron relies on k0s and we've seen some CVEs on some dependencies which we ignored entirely because they are only used in the tests and have no actual impact. However, we haven't updated this in a while and it's a matter of time that one dependency that we share has a CVE or that we can't bump at some point and becomes an actual issue.
For these reasons we thought we should keep k0s updated but #703 has shown that this is a very big and risky change as many things could go wrong. We agreed that the long term goal is removing github.com/k0sproject/k0s as a code dependency entirely.
This is a tracking issue to see where we have dependencies to it:
The two use cases I've identified are:
1- check-basic uses BootLooseSuite as a base framework, which is quite complex to deal with
2- Many checks use specific tests such as
WaitForNodeReadyStatus
which should be pretty self contained and small enough that we're comfortable just copying and pasting into the code.The text was updated successfully, but these errors were encountered: