Description
CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations, ReadOnlyPort is set to 10255. For example, the default behavior of a K3s online installation might allow unauthenticated access to this port, exposing credentials.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
K3s K3s
Default version status: unaffected
1.32 to < 1.32.4-rc1+k3saffected
References
- https://github.com/f1veT/BUG/issues/2 ↗
- https://cloud.google.com/kubernetes-engine/docs/how-to/disable-kubelet-readonly-port ↗
- https://github.com/k3s-io/k3s/issues/12164 ↗
- https://github.com/k3s-io/k3s/commit/097b63e588e3c844cdf9b967bcd0a69f4fc0aa0a ↗
- https://github.com/k3s-io/k3s/compare/v1.32.3+k3s1...v1.32.4-rc1+k3s1 ↗