Skip to content

Commit f38f0c9

Browse files
authored
Include tips for CVE resolution in driver parameters
Added tips for addressing CVEs in sidecar images.
1 parent 9fb17be commit f38f0c9

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

docs/driver-parameters.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -98,3 +98,6 @@ tags | azure disk [tags](https://docs.microsoft.com/en-us/azure/azure-resource-m
9898
userAgent | User agent used for [customer usage attribution](https://docs.microsoft.com/en-us/azure/marketplace/azure-partner-customer-usage-attribution) | | No | Generated Useragent formatted `driverName/driverVersion compiler/version (OS-ARCH)`
9999
subscriptionID | specify Azure subscription ID in which Azure disk will be created | Azure subscription ID | No | if not empty, `resourceGroup` must be provided, `incremental` must set as `false`
100100
location | specify Azure region in which Azure disk snapshot will be created, region name should only have lower-case letter or digit number. | `eastus2`, `westus`, etc. | No | if empty, driver will use the same region name as current k8s cluster
101+
102+
### Tips
103+
- If there are CVEs in the `livenessprobe` and `csi-node-driver-registrar` sidecar images, you can run `kubectl edit ds -n kube-system csi-azuredisk-node` to change the `imagePullPolicy` to `Always` for both sidecar containers. This will cause the CSI driver to restart and pull the latest patched images, thereby resolving the CVEs in these sidecar components.

0 commit comments

Comments
 (0)