[UPGRADE] Upgrade component to the latest version: Hashicorp Vault #1864

rafzei · 2020-11-17T22:10:18Z

Is your feature request related to a problem? Please describe.
In epiphany we use version of Hashicorp Vault where some vulnerabilities were found:
CVE-2020-25816, CVE-2020-16251, CVE-2020-16250, CVE-2020-12757,CVE-2020-13223

Describe the solution you'd like

Upgrade Hashicorp Vault to at least 1.5.5 or to the latest version if possible (1.6.0)
Backport to supported Epiphany versions (please consider creating new issues for this purpose)

Describe alternatives you've considered

We should also consider updating helm chart with vault agent since in version 0.4.0 which we use in epiphany, official Vault image is in 1.3.2 version.

rafzei added the status/grooming-needed label Nov 17, 2020

rafzei added this to the S20201203 milestone Nov 17, 2020

mkyc modified the milestones: S20201203, S20201217 Nov 19, 2020

rpudlowski93 added area/vault and removed status/grooming-needed labels Nov 23, 2020

mkyc modified the milestones: S20201217, S20201231 Dec 4, 2020

mkyc modified the milestones: S20201231, S20210114 Dec 17, 2020

ar3ndt self-assigned this Jan 12, 2021

ar3ndt linked a pull request Jan 14, 2021 that will close this issue

Upgrade Vault to latest version #1962

Merged

mkyc modified the milestones: S20210114, S20210128 Jan 14, 2021

ar3ndt closed this as completed in #1962 Jan 25, 2021

Provide feedback