aws/eks-distro

Issues

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2024-3177: Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

  #2938 opened 25 days ago by eks-distro-bot
  1

• K8s Security: [Security Advisory] CVE-2024-3744: azure-file-csi-driver discloses service account tokens in logs

  #3001 opened 25 days ago by eks-distro-bot
  1

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2024-3744: azure-file-csi-driver discloses service account tokens in logs

  #3002 opened 25 days ago by eks-distro-bot
  1

• K8s Security: [kubernetes-announce] Re: [Security Advisory] CVE-2024-3744: azure-file-csi-driver discloses service account tokens in logs

  #3036 opened 25 days ago by eks-distro-bot
  1

• K8s Security: Re: [Security Advisory] CVE-2024-3744: azure-file-csi-driver discloses service account tokens in logs

  #3035 opened 25 days ago by eks-distro-bot
  1

• Kops is unable to read kube-apiserver.docker_tag with error 403 Forbidden

  #2857 opened a month ago by GeorgeJose7
  3

• [Question]: Are the images in this repo are the same ones used for the EKS control plane?

  #3007 opened 2 months ago by omerxx
  0

• K8s Security: [Security Advisory] CVE-2024-3177: Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

  #2937 opened 2 months ago by eks-distro-bot
  0

• AWS::EKS::AccessEntry/AccessEntry: CREATE_FAILED ( eksctl create cluster )

  #2805 opened 4 months ago by luke2261git
  1

• K8s Security: [Ingress-nginx Security Advisory] CVE-2022-4886: Ingress-nginx `path` sanitization can be bypassed with `log_format` directive

  #2462 opened 5 months ago by eks-distro-bot
  0

• K8s Security: [Ingress-nginx Security Advisory] CVE-2023-5044: Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

  #2463 opened 5 months ago by eks-distro-bot
  0

• K8s Security: [Ingress-nginx Security Advisory] CVE-2023-5043: Ingress nginx annotation injection causes arbitrary command execution

  #2464 opened 5 months ago by eks-distro-bot
  0

• K8s Security: [Security Advisory] CVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes

  #2542 opened 7 months ago by eks-distro-bot
  0

• Create 1-29 Foundation

  #2555 opened 7 months ago by rcrozean
  1

• Discontinue support for k8s 1.23

  #2259 opened 7 months ago by bhavi-koduru
  1

• Remove deprecated flag `--short` from `kubectl version` calls in `kOps` execution against `v1.28` and elsewhere

  #2250 opened 7 months ago by danbudris
  0

• K8s Security: [kubernetes-announce] [Ingress-nginx Security Advisory] CVE-2023-5044: Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

  #2465 opened 7 months ago by eks-distro-bot
  1

• K8s Security: [kubernetes-announce] [Ingress-nginx Security Advisory] CVE-2023-5043: Ingress nginx annotation injection causes arbitrary command execution

  #2466 opened 7 months ago by eks-distro-bot
  1

• K8s Security: [kubernetes-announce] [Ingress-nginx Security Advisory] CVE-2022-4886: Ingress-nginx `path` sanitization can be bypassed with `log_format` directive

  #2467 opened 7 months ago by eks-distro-bot
  1

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes

  #2543 opened 7 months ago by eks-distro-bot
  1

• Ability to link EKS-D release to Platform Version on AWS EKS service

  #2329 opened 10 months ago by jrm16020
  5

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2023-3893: Insufficient input sanitization on kubernetes-csi-proxy leads to privilege escalation

  #2298 opened 10 months ago by eks-distro-bot
  0

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2023-3676: Insufficient input sanitization on Windows nodes leads to privilege escalation

  #2295 opened 10 months ago by eks-distro-bot
  0

• K8s Security: [Security Advisory] CVE-2023-3893: Insufficient input sanitization on kubernetes-csi-proxy leads to privilege escalation

  #2296 opened 10 months ago by eks-distro-bot
  0

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2023-3955: Insufficient input sanitization on Windows nodes leads to privilege escalation

  #2297 opened 10 months ago by eks-distro-bot
  0

• K8s Security: [Security Advisory] CVE-2023-3676: Insufficient input sanitization on Windows nodes leads to privilege escalation

  #2293 opened 10 months ago by eks-distro-bot
  0

• K8s Security: [Security Advisory] CVE-2023-3955: Insufficient input sanitization on Windows nodes leads to privilege escalation

  #2294 opened 10 months ago by eks-distro-bot
  0

• Releases: 1.23-1.28

  #2265 opened 10 months ago by adityavenneti
  0

• Can you support Semantic Versioning?

  #2258 opened a year ago by kubilaykaptanoglu
  2

• Clean out old images in ecr

  #2130 opened a year ago by kschumy
  0

• Create k8s v1.28

  #2206 opened a year ago by bhavi-koduru
  0

• K8s Security: [kubernetes-announce] [kOps Security Advisory] CVE-2023-1943: Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

  #2146 opened a year ago by eks-distro-bot
  1

• K8s Security: [kOps Security Advisory] CVE-2023-1943: Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

  #2145 opened a year ago by eks-distro-bot
  1

• RUN iptables-wrapper script in EKS_DISTRO_MINIMAL_BASE_IPTABLES image

  #2160 opened a year ago by jdn5126
  2

• K8s Security: [Security Advisory] CVE-2023-2727: Bypassing policies imposed by the ImagePolicyWebhook admission plugin

  #2120 opened a year ago by eks-distro-bot
  0

• K8s Security: [Security Advisory] CVE-2023-2728: Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin

  #2122 opened a year ago by eks-distro-bot
  0

• K8s Security: [Security Advisory] CVE-2023-2431: Bypass of seccomp profile enforcement

  #2118 opened a year ago by eks-distro-bot
  0

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2023-2728: Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin

  #2123 opened a year ago by eks-distro-bot
  0

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2023-2431: Bypass of seccomp profile enforcement

  #2119 opened a year ago by eks-distro-bot
  0

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2023-2727: Bypassing policies imposed by the ImagePolicyWebhook admission plugin

  #2121 opened a year ago by eks-distro-bot
  0

• ECR (not ECR Public) repository for EKS-D images

  #2019 opened a year ago by jbg
  2

• K8s Security: [Security Advisory] CVE-2023-2878: secrets-store-csi-driver discloses service account tokens in logs

  #2078 opened a year ago by eks-distro-bot
  2

• Unable to mount PV to EKS node after upgrading to v1.26

  #2080 opened a year ago by KqLLL
  2

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2023-2878: secrets-store-csi-driver discloses service account tokens in logs

  #2079 opened a year ago by eks-distro-bot
  2

• K8s Security: [kubernetes-announce] [Security Advisory] CVE-2023-1174, CVE-2023-1944: Network port exposure and ssh access using default password

  #1924 opened a year ago by eks-distro-bot
  2

• K8s Security: [Security Advisory] CVE-2023-1174, CVE-2023-1944: Network port exposure and ssh access using default password

  #1923 opened a year ago by eks-distro-bot
  1

• Remove 1.21 from supported versions

  #1764 opened a year ago by kschumy
  0

• Add standardized comment about removing code when a specificed version is no longer supported

  #1765 opened a year ago by kschumy
  0

• Publish docs for 1.25 when it is released

  #1750 opened a year ago by markapruett
  0

• Add webhooks patch for all versions

  #1749 opened a year ago by kschumy
  1