Skip to content

Conversation

@neolit123
Copy link
Member

The image and manifest we used was from the original author repo github.com/aojea/kindnetd. The project was later donated to k-sigs/kindnet.

Switch to using the latest image and manifest from the new project.

The old manifest also included the verb 'nodes/proxy', which is vulnerable as discussed in k/kubeadm ticket 3283.

fixes #3283

@k8s-ci-robot k8s-ci-robot added the area/kinder Issues to track work in the kinder tool label Feb 4, 2026
@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Feb 4, 2026
@neolit123 neolit123 changed the title kinder: switch to using the k-sigs/kindnet manfiest and image kinder: switch to using the k-sigs/kindnet manifest and image Feb 4, 2026
@k8s-ci-robot k8s-ci-robot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Feb 4, 2026
@neolit123 neolit123 force-pushed the 1.36-switch-to-ksigs-kindnet branch from c789c45 to 78992b3 Compare February 4, 2026 20:34
@neolit123 neolit123 added this to the v1.36 milestone Feb 4, 2026
@@ -204,7 +204,7 @@ func postInit(c *status.Cluster, wait time.Duration) error {
// Apply a CNI plugin using a hardcoded manifest
cmd := cp1.Command("kubectl", "apply", "--kubeconfig=/etc/kubernetes/admin.conf", "-f", "-")
cp1.Infof("applying kindnet version 0.5.4")
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
cp1.Infof("applying kindnet version 0.5.4")
cp1.Infof("applying kindnet version 1.0.0")

Only one nit.

Copy link
Member Author

@neolit123 neolit123 Feb 5, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

changed it to:

	cp1.Infof("applying kindnet manifest for image %s...", assets.KindnetImage100)

that will still indicate the version in the logs.

(and when we bump we don't need to touch this line)

The image and manifest we used was from the original author
repo github.com/aojea/kindnetd. The project was later
donated to k-sigs/kindnet.

Switch to using the latest image and manifest from
the new project.

The old manifest also included the verb 'nodes/proxy', which
is vulnerable as discussed in k/kubeadm ticket 3283.
@neolit123 neolit123 force-pushed the 1.36-switch-to-ksigs-kindnet branch from 78992b3 to 5830796 Compare February 5, 2026 10:08
@carlory
Copy link
Member

carlory commented Feb 5, 2026

/lgtm

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Feb 5, 2026
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: carlory, neolit123

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot merged commit b55d178 into kubernetes:main Feb 5, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. area/kinder Issues to track work in the kinder tool cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Use finegrained kubelet API authorization

3 participants