Skip to content

[grafana] Fix for cve-2021-25742 is incorrect - not fixable here #1542

Closed

Description

#1481 introduced allow-snippet-annotations: false all configmaps in the chart. However, this configuration is only a valid input to ingress-nginx, via it's configmap (not modified or created by any chart in this repo). It looks like this linter is incorrectly flagging it - maybe that's why the change was made.

The correct fix is documented in the description of kubernetes/kubernetes#126811 under Mitigation and is outside the scope of this repository.

Suggest fix: kubernetes/ingress-nginx#1543 (reverts kubernetes/ingress-nginx#1481)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions