diff --git a/.trivyignore b/.trivyignore index 1b6a7090b..3a8089422 100644 --- a/.trivyignore +++ b/.trivyignore @@ -1,11 +1,10 @@ # related to telegraf #[vishwa] - Fix telegraf & test all for next release - see work item #https://msazure.visualstudio.com/InfrastructureInsights/_workitems/edit/13322134 -CVE-2021-43816 -CVE-2022-23648 -CVE-2022-24450 -CVE-2022-26652 +# Unfixed as of 4/28/2022 CVE-2019-3826 CVE-2022-27191 + +#still present in mdsd telegraf CVE-2021-42836 # ruby in /usr/lib diff --git a/kubernetes/linux/setup.sh b/kubernetes/linux/setup.sh index 709c8f1c4..c478af0e5 100644 --- a/kubernetes/linux/setup.sh +++ b/kubernetes/linux/setup.sh @@ -40,10 +40,10 @@ sudo apt-get install jq=1.5+dfsg-2 -y #used to setcaps for ruby process to read /proc/env sudo apt-get install libcap2-bin -y -wget https://dl.influxdata.com/telegraf/releases/telegraf-1.20.3_linux_$ARCH.tar.gz -tar -zxvf telegraf-1.20.3_linux_$ARCH.tar.gz +wget https://dl.influxdata.com/telegraf/releases/telegraf-1.22.2_linux_$ARCH.tar.gz +tar -zxvf telegraf-1.22.2_linux_$ARCH.tar.gz -mv /opt/telegraf-1.20.3/usr/bin/telegraf /opt/telegraf +mv /opt/telegraf-1.22.2/usr/bin/telegraf /opt/telegraf chmod 544 /opt/telegraf diff --git a/kubernetes/windows/setup.ps1 b/kubernetes/windows/setup.ps1 index af9e4b40e..2fd429e43 100644 --- a/kubernetes/windows/setup.ps1 +++ b/kubernetes/windows/setup.ps1 @@ -35,7 +35,7 @@ Write-Host ('Finished Installing Fluentbit') Write-Host ('Installing Telegraf'); try { - $telegrafUri='https://dl.influxdata.com/telegraf/releases/telegraf-1.20.3_windows_amd64.zip' + $telegrafUri='https://dl.influxdata.com/telegraf/releases/telegraf-1.22.2_windows_amd64.zip' Invoke-WebRequest -Uri $telegrafUri -OutFile /installation/telegraf.zip Expand-Archive -Path /installation/telegraf.zip -Destination /installation/telegraf Move-Item -Path /installation/telegraf/*/* -Destination /opt/telegraf/ -ErrorAction SilentlyContinue