-
Notifications
You must be signed in to change notification settings - Fork 354
Description
Security Updates Needed (new packages)
I was looking at the helm chart vulnerability reviews and it seems like we have an old version of Cassandra in there causing a lot of them. https://artifacthub.io/packages/helm/jaegertracing/jaeger/3.4.0?modal=security-report&event-id=920295d2-3ed1-4fb9-8d95-4fc526e0ddbf
The Cassnadra chart we are including is not even available anymore since 2022 : https://github.com/helm/charts/blob/master/README.md#status-of-the-project so we should either drop Cassandra or use a supported chart.
Please upgrade Cassandra to a newer version which is supported similar to what is used in Jaeger v2 chart.
Steps to reproduce
Review artifacthub findings : https://artifacthub.io/packages/helm/jaegertracing/jaeger/3.4.0?modal=security-report&event-id=920295d2-3ed1-4fb9-8d95-4fc526e0ddbf
Expected behavior
Jaeger v1 Helm chart runs on the current version of Cassandra without vulnerabilities.