Skip to content

Conversation

@EIjo
Copy link
Contributor

@EIjo EIjo commented Oct 13, 2025

A new CVE was discovered in REDIS CVE-2025-49844. This will be fixed in Redis release 8.2.2. Because we currently use legacy bitnami docker images that do not get security patches, we decided to move away from the current helm chart and use the OT-CONTAINER-KIT chart that uses the official Redis docker image.

This PR will implement a radar-redis chart with default config passed to the redis-cluster CRD chart of OT-CONTAINER-KIT. In addition, the OT-CONTAINER-KIT operator chart named redis-operator with the responsibility of deploying the redis-cluster CRD.

With this PR, Radar-kubernetes has to be updated as well in another PR.

Checklist

  • Chart version bumped in Chart.yaml according to semver.
  • Variables are documented in the README.md
  • Title of the PR starts with chart name (e.g. [<name_of_the_chart>])

@EIjo EIjo requested a review from pvannierop October 13, 2025 14:58
@EIjo EIjo self-assigned this Oct 13, 2025
@github-actions
Copy link

github-actions bot commented Oct 13, 2025

Great PR! Please pay attention to the following items before merging:

Files matching charts/*/values.yaml:

  • Is the PR adding a new container? Please reviewer, add it to the models (internal process)
  • Is the PR adding a new parameter? Please, ensure it’s documented in the README.md

This is an automatically generated QA checklist based on modified files.

@EIjo EIjo force-pushed the security/redis-cve branch from 1ab757f to da744bf Compare October 14, 2025 12:25
@EIjo EIjo requested a review from pvannierop October 14, 2025 12:30
Copy link
Contributor

@pvannierop pvannierop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Staan nog een paar comments open.

@EIjo EIjo requested a review from pvannierop October 15, 2025 12:32
Copy link
Contributor

@pvannierop pvannierop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Almost there! Finally, update the .github/workflows/scheduled-snyk-docker.yaml with the new external charts or docker images. When the docker image is mentioned in the external chart, add it to the INCLUDE_CHARTS. When, the docker image is not stated, as often happens when deploying a workload with an operator, hard-code the docker image in the INCLUDE_IMAGES section. Also, do cleanup of obsolete Redis references in these sections.

@EIjo EIjo changed the title redis chart update to radar-redis and redis-operator [redis] chart update to radar-redis and redis-operator Oct 16, 2025
@EIjo EIjo force-pushed the security/redis-cve branch from a6dbb7f to f1b3689 Compare October 16, 2025 08:28
Copy link
Contributor

@pvannierop pvannierop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@pvannierop pvannierop merged commit 882132d into main Oct 16, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants