prometheus-community/helm-charts

[kube-prometheus-stack] Prometheus Operator kube-webhook-certgen image version

andreipantelimon opened this issue · 2 comments

Describe the bug a clear and concise description of what the bug is.

Hey,
We are using the kube-prometheus-stack in strict cloud environments and we need to keep up with the image versions regarding CVE's.
Can the ingress-nginx/kube-webhook-certgen be upgraded to the latest v20231226-1a7112e06 version which fixes some high severity CVE's?
Also are there any other implications in disabling the admissionWebhooks altogether, other than taking the risk of misconfiguring prometheus ? Is it used in any other place?
Thanks guys

What's your helm version?

3.14.2

What's your kubectl version?

v1.28.4

Which chart?

kube-prometheus-stack

What's the chart version?

58.5.1

What happened?

No response

What you expected to happen?

No response

How to reproduce it?

No response

Enter the changed values of values.yaml?

No response

Enter the command that you execute and failing/misfunctioning.

helm install with the default values.yaml file

Anything else we need to know?

No response