Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: allow overrides of installed components in case of embargoed CVEs #4785

Merged
merged 6 commits into from
Aug 13, 2024

Conversation

timmy-wright
Copy link
Contributor

@timmy-wright timmy-wright commented Aug 7, 2024

What type of PR is this?

/kind feature

What this PR does / why we need it:

This PR adds the ability to specify overrides to AgentBaker components.json so that Microsoft has the capability of building VHDs with fixes for embargoed CVEs without having the details of the CVE in a public GIT repository. This means that when an embargoed VHD is announced, the AKS team can have the VHDs prepared, rolled out globally, and ready for use ahead of our usual release schedule.

A PR to add a README file to the aks-rp repo is here: https://msazure.visualstudio.com/CloudNativeCompute/_git/aks-rp/pullrequest/10610435

PRD links:

Screen snapshot of "run pipeline" screen

image

Screen snapshot of overrides being applied during a build

image

Which issue(s) this PR fixes:

Fixes #

Requirements:

Special notes for your reviewer:

Release note:

none

@coveralls
Copy link

coveralls commented Aug 7, 2024

Pull Request Test Coverage Report for Build 10362481300

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 71.005%

Totals Coverage Status
Change from base Build 10360530555: 0.0%
Covered Lines: 2564
Relevant Lines: 3611

💛 - Coveralls

@timmy-wright timmy-wright merged commit 9767514 into master Aug 13, 2024
19 checks passed
@timmy-wright timmy-wright deleted the timmy/overrides branch August 13, 2024 03:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants