Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reduce latency of availability of security release Docker images #6596

Closed
htuch opened this issue Apr 15, 2019 · 0 comments · Fixed by #8695
Closed

Reduce latency of availability of security release Docker images #6596

htuch opened this issue Apr 15, 2019 · 0 comments · Fixed by #8695
Assignees
@lizan
Labels
area/build area/security help wanted Needs help!

Comments

@htuch
Copy link
Member

htuch commented Apr 15, 2019

There was a window of ~50 minutes between the release tagging of the Envoy 1.9.1 branch and availability of Docker images. Ideally we shrink this to allow users to upgrade faster. There are a few options:

  1. Allow build/push of the Docker images from the private security repository.
  2. Make more effective use of Bazel caching by warming on the private security repository. We thought we were doing this in recent CVEs, but that didn't seem to work.

Action item for CVE-2019-9900
Action item for CVE-2019-9901
@mattklein123 mattklein123 mentioned this issue Aug 20, 2019
Closed
@lizan lizan mentioned this issue Oct 21, 2019
Merged
lizan added a commit that referenced this issue Oct 22, 2019
@lizan
Enable tag release from azp (#8695)
37544e6 
Description:
Risk Level: Low
Testing: Tested in security release repo
Docs Changes: N/A
Release Notes: N/A
Fixes #6596

Signed-off-by: Lizan Zhou <[email protected]>
derekargueta pushed a commit to derekargueta/envoy that referenced this issue Oct 24, 2019
@lizan @derekargueta
Enable tag release from azp (envoyproxy#8695)
f83da84 
Description:
Risk Level: Low
Testing: Tested in security release repo
Docs Changes: N/A
Release Notes: N/A
Fixes envoyproxy#6596

Signed-off-by: Lizan Zhou <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@lizan lizan

Labels
area/build area/security help wanted Needs help!
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Enable tag release from azp lizan/envoy
2 participants
@lizan @htuch