[kube-prometheus-stack]: bump grafana chart dependency to 6.45.0 and node-exporter to 4.8.0 #2773
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Signed-off-by: Stevo Slavić [email protected]
What this PR does / why we need it
This PR updates Grafana Helm chart dependency in kube-prometheus-stack Helm chart to help address a security vulnerability. Namely a new version (9.3.0) of Grafana has been released fixing a critical vulnerability and more. Grafana Helm chart version 6.44.11 has been released with the Grafana 9.3.0 update (see grafana/helm-charts#2033). This PR updates to the latest Grafana Helm chart.
In the same go prometheus-node-exporter chart is being bumped to 4.8.0, with among other things node-exporter binary bumped from 1.3.1 to 1.5.0 addressing multiple CVEs and a workaround prometheus/node_exporter#2530 for a kernel race condition prometheus/node_exporter#2500.
Which issue this PR fixes
(optional, in
fixes #<issue number>(, fixes #<issue_number>, ...)
format, will close that issue when PR gets merged)Special notes for your reviewer
Checklist
[prometheus-couchdb-exporter]
)