nwangtw commented on issue #3338: Critical Zookeeper Vulnerability URL: https://github.com/apache/incubator-heron/issues/3338#issuecomment-532760374 > @joshfischer1108 the helm chart as it sits in the repo forces the use of the same image for heron tools as it does for zookeeper: > > https://github.com/apache/incubator-heron/blob/dd6da67da7972791639746dd9190fd919ba6986c/deploy/kubernetes/helm/templates/zookeeper.yaml#L83 > > I can work around that, but I did want to bring that to your attention as another potential issue. > > What is the latest version of zookeeper that has been tested with heron? I’m concerned about using an untested zookeeper heron combo in my environment. Am I being overly cautious? What tests have you guys run(if any) to verify this version of zookeeper doesn’t break anything? Sure thing. This is an easy/quick change at least. It is definitely not overly cautious. :) I have the same concern when making the change. Integration tests don't rely on zk so it is not covered. For us the zookeeper cluster is maintained by a different team and there could be internal changes, so I have no idea which version it is. :D But I feel it is a reasonable expectation for them to be compatible. This zk release has been a few month till now and it has been used by other project. So I am feeling relatively comfortable. Anyways, more testing is definitely a good idea.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
