{"id":581,"date":"2024-02-02T16:28:43","date_gmt":"2024-02-02T15:28:43","guid":{"rendered":"https:\/\/www.slash-mnt.com\/?p=581"},"modified":"2026-07-26T19:09:53","modified_gmt":"2026-07-26T17:09:53","slug":"garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape","status":"publish","type":"post","link":"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/","title":{"rendered":"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Si vous maintenez un cluster Kubernetes, vous vous \u00eates sans d\u00e9j\u00e0 vu mettre \u00e0 jour les images de vos pods. Que ce soit parce qu&#8217;une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9tect\u00e9e ou de nouveaux bufixes, mettre \u00e0 jour les versions de patchs (ou mineures) des services qui tournent sur son cluster est un besoin voire une bonne pratique.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Plusieurs mani\u00e8res de faire pour y arriver :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><code>kubectl rollout restart -n &lt;namespace&gt; pod\/&lt;pod-id&gt;<\/code><\/li>\n\n\n\n<li><code>kubectl set image -n &lt;namespace&gt; deployment\/&lt;deployment-name&gt; &lt;container&gt;=&lt;image&gt;:&lt;tag&gt;<\/code><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cela n\u00e9cessite de conna\u00eetre l&#8217;ensemble de ses services pour venir y appliquer ces commandes et d\u00e9clencher le t\u00e9l\u00e9chargement de ces nouvelles images.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dans tous les cas, cela reste quelque chose de fastidieux et qu&#8217;il faut pr\u00e9voir \u00e0 l&#8217;avance ou bien \u00eatre capable de r\u00e9agir suite \u00e0 une alerte.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_88 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#Lalternative\" >L&#8217;alternative<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#Comment_ca_fonctionne\" >Comment \u00e7a fonctionne ?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#Customisation_de_krar\" >Customisation de krar<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#Resultat\" >R\u00e9sultat<\/a><\/li><\/ul><\/nav><\/div>\n<h2 id=\"wp-block-themeisle-blocks-advanced-heading-2e405520\" class=\"wp-block-themeisle-blocks-advanced-heading wp-block-themeisle-blocks-advanced-heading-2e405520\"><span class=\"ez-toc-section\" id=\"Lalternative\"><\/span>L&#8217;alternative<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"64\" height=\"70\" src=\"https:\/\/www.slash-mnt.com\/wp-content\/uploads\/2024\/02\/logo-small.png\" alt=\"Logo du projet krar\" class=\"wp-image-584\" srcset=\"https:\/\/www.slash-mnt.com\/wp-content\/uploads\/2024\/02\/logo-small.png 64w, https:\/\/www.slash-mnt.com\/wp-content\/uploads\/2024\/02\/logo-small-11x12.png 11w\" sizes=\"(max-width: 64px) 100vw, 64px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">A <code>\/mnt<\/code> nous adoptons une solution un peu diff\u00e9rente : <a href=\"https:\/\/github.com\/slash-mnt\/krar\">krar<\/a>. Concr\u00e8tement il s&#8217;agit d&#8217;un chart Helm qui lancera des CronJob d\u00e9fini par l&#8217;utilisateur et qui viendra r\u00e9aliser ces mises \u00e0 jour \u00e0 votre place sur les ressources cibl\u00e9es. Aujourd&#8217;hui <a href=\"https:\/\/github.com\/slash-mnt\/krar\">krar<\/a> est capable de relancer une ressource (Deployment, DaemonSet et Statefulset) afin de provoquer un comportement de Kubernetes : t\u00e9l\u00e9charger le tag de l&#8217;image qui a pu \u00eatre mis \u00e0 jour depuis le dernier lancement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">krar ne fonctionne pas seulement qu&#8217;avec les ressources o\u00f9 est d\u00e9fini <code>imagePullPolicy: Always<\/code> mais c&#8217;est tout de m\u00eame pr\u00e9conis\u00e9 pour \u00e9viter tout quiproquo.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Il s&#8217;agit d&#8217;un Keel en plus l\u00e9ger, qui se consacre seulement sur cet aspect. Aucun <code>controller<\/code> n&#8217;est n\u00e9cessaire.<\/p>\n\n\n\n<h2 id=\"wp-block-themeisle-blocks-advanced-heading-33b12265\" class=\"wp-block-themeisle-blocks-advanced-heading wp-block-themeisle-blocks-advanced-heading-33b12265\"><span class=\"ez-toc-section\" id=\"Comment_ca_fonctionne\"><\/span>Comment \u00e7a fonctionne ?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Le fonctionnement est simple : il suffit d&#8217;ajouter une annotation aux ressources que l&#8217;on souhaite.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Exemple : <code>krar.slash-mnt.com\/rollout-policy: once-a-month<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ce qui pourrait donner le Deployment suivante :<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#282A36\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#f6f6f4;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly># From https:\/\/kubernetes.io\/docs\/concepts\/workloads\/controllers\/deployment\/\napiVersion: apps\/v1\nkind: Deployment\nmetadata:\n  name: nginx-deployment\n  labels:\n    app: nginx\n    krar.slash-mnt.com\/rollout-policy: once-a-month\nspec:\n  replicas: 3\n  selector:\n    matchLabels:\n      app: nginx\n  template:\n    metadata:\n      labels:\n        app: nginx\n    spec:\n      containers:\n      - name: nginx\n        image: nginx:1.25\n        ports:\n        - containerPort: 80<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki dracula-soft\" style=\"background-color: #282A36\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #7B7F8B\"># From https:\/\/kubernetes.io\/docs\/concepts\/workloads\/controllers\/deployment\/<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">apiVersion<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">apps\/v1<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">kind<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">Deployment<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">metadata<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">name<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">nginx-deployment<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">labels<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">app<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">nginx<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">krar.slash-mnt.com\/rollout-policy<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">once-a-month<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">spec<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">replicas<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #BF9EEE\">3<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">selector<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">matchLabels<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">      <\/span><span style=\"color: #97E1F1\">app<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">nginx<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">template<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">metadata<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">      <\/span><span style=\"color: #97E1F1\">labels<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #97E1F1\">app<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">nginx<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">spec<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">      <\/span><span style=\"color: #97E1F1\">containers<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">      <\/span><span style=\"color: #F286C4\">-<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #97E1F1\">name<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">nginx<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #97E1F1\">image<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">nginx:1.25<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #97E1F1\">ports<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #F286C4\">-<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #97E1F1\">containerPort<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #BF9EEE\">80<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h2 id=\"wp-block-themeisle-blocks-advanced-heading-8843c2bb\" class=\"wp-block-themeisle-blocks-advanced-heading wp-block-themeisle-blocks-advanced-heading-8843c2bb\"><span class=\"ez-toc-section\" id=\"Customisation_de_krar\"><\/span>Customisation de krar<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Tout se joue dans le <code>values.yaml<\/code> :<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#282A36\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#f6f6f4;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>image:\n  repository: alpine\n  pullPolicy: IfNotPresent\n  # Overrides the image tag whose default is the chart appVersion.\n  tag: 3.19.1\n\nimagePullSecrets: []\nnameOverride: \"\"\nfullnameOverride: \"\"\n\nresources:\n  requests:\n    memory: 10Mi\n\npodAnnotations: {}\npodLabels: {}\n\npodSecurityContext: {}\n  # fsGroup: 2000\n\nsecurityContext: {}\n  # capabilities:\n  #   drop:\n  #   - ALL\n  # readOnlyRootFilesystem: true\n  # runAsNonRoot: true\n  # runAsUser: 1000\n\nnodeSelector: {}\ntolerations: []\naffinity: {}\n\nroleClusterAnnotations: {}\nroleClusterBindingAnnotations: {}\nserviceAccountAnnotations: {}\n\njobs:\n  - name: once-a-month\n    schedule: 0 0 1 * *\n    podLabels: []\n    filter:\n      label:\n        domain: krar.slash-mnt.com\n        name: rollout-policy\n        policyName: \"\" # Overrides the job name.\n      resources:\n        - deployments\n        - statefulsets\n        - daemonsets\n      namespaces:\n        all: true\n        specific: []\n\ncluster:\n  kubernetes:\n    version: 1.17.5<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki dracula-soft\" style=\"background-color: #282A36\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #97E1F1\">image<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">repository<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">alpine<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">pullPolicy<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">IfNotPresent<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #7B7F8B\"># Overrides the image tag whose default is the chart appVersion.<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">tag<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #BF9EEE\">3.19.1<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">imagePullSecrets<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> []<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">nameOverride<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #DEE492\">&quot;&quot;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">fullnameOverride<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #DEE492\">&quot;&quot;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">resources<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">requests<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">memory<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">10Mi<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">podAnnotations<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> {}<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">podLabels<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> {}<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">podSecurityContext<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> {}<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #7B7F8B\"># fsGroup: 2000<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">securityContext<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> {}<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #7B7F8B\"># capabilities:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #7B7F8B\">#   drop:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #7B7F8B\">#   - ALL<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #7B7F8B\"># readOnlyRootFilesystem: true<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #7B7F8B\"># runAsNonRoot: true<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #7B7F8B\"># runAsUser: 1000<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">nodeSelector<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> {}<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">tolerations<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> []<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">affinity<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> {}<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">roleClusterAnnotations<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> {}<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">roleClusterBindingAnnotations<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> {}<\/span><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">serviceAccountAnnotations<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> {}<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">jobs<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #F286C4\">-<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #97E1F1\">name<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">once-a-month<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">schedule<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">0 0 1 * *<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">podLabels<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> []<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">filter<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">      <\/span><span style=\"color: #97E1F1\">label<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #97E1F1\">domain<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">krar.slash-mnt.com<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #97E1F1\">name<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">rollout-policy<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #97E1F1\">policyName<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #DEE492\">&quot;&quot;<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #7B7F8B\"># Overrides the job name.<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">      <\/span><span style=\"color: #97E1F1\">resources<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #F286C4\">-<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">deployments<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #F286C4\">-<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">statefulsets<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #F286C4\">-<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #E7EE98\">daemonsets<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">      <\/span><span style=\"color: #97E1F1\">namespaces<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #97E1F1\">all<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #BF9EEE\">true<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">        <\/span><span style=\"color: #97E1F1\">specific<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> []<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color: #97E1F1\">cluster<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">  <\/span><span style=\"color: #97E1F1\">kubernetes<\/span><span style=\"color: #F286C4\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F6F6F4\">    <\/span><span style=\"color: #97E1F1\">version<\/span><span style=\"color: #F286C4\">:<\/span><span style=\"color: #F6F6F4\"> <\/span><span style=\"color: #BF9EEE\">1.17.5<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h2 id=\"wp-block-themeisle-blocks-advanced-heading-f78ddad2\" class=\"wp-block-themeisle-blocks-advanced-heading wp-block-themeisle-blocks-advanced-heading-f78ddad2\"><span class=\"ez-toc-section\" id=\"Resultat\"><\/span>R\u00e9sultat<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Plus besoin de venir p\u00e9riodiquement mettre \u00e0 jour ses ressources. Tout se fait automatiquement sur les ressources cibl\u00e9es. Evidemment, toutes les autres restent sous votre vigilance ;).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">krar est maintenu par \/mnt. Toutes propositions d&#8217;am\u00e9liorations peuvent \u00eatre d\u00e9clar\u00e9es sur le repository Github <a href=\"https:\/\/github.com\/slash-mnt\/krar\">https:\/\/github.com\/slash-mnt\/krar<\/a>. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Si vous maintenez un cluster Kubernetes, vous vous \u00eates sans d\u00e9j\u00e0 vu mettre \u00e0 jour les images de vos pods. Que ce soit parce qu&#8217;une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9tect\u00e9e ou de nouveaux bufixes, mettre \u00e0 jour les versions de patchs (ou mineures) des services qui tournent sur son cluster est un besoin voire une bonne&hellip;&nbsp;<a href=\"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/\" rel=\"bookmark\">Read More &raquo;<span class=\"screen-reader-text\">Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":583,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"[\"content\",\"tags\",\"comments\"]","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[14],"tags":[18,20,15,19],"class_list":["post-581","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kubernetes","tag-automatisation","tag-helm","tag-kubernetes","tag-securite"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9 - \/mnt<\/title>\n<meta name=\"description\" content=\"Si vous maintenez un cluster Kubernetes, vous vous \u00eates sans d\u00e9j\u00e0 vu mettre \u00e0 jour les images de vos pods. Que ce soit parce qu&#039;une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9 - \/mnt\" \/>\n<meta property=\"og:description\" content=\"Si vous maintenez un cluster Kubernetes, vous vous \u00eates sans d\u00e9j\u00e0 vu mettre \u00e0 jour les images de vos pods. Que ce soit parce qu&#039;une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/\" \/>\n<meta property=\"og:site_name\" content=\"\/mnt\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-02T15:28:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-26T17:09:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.slash-mnt.com\/wp-content\/uploads\/2024\/02\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Paul Rey\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Paul Rey\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/\"},\"author\":{\"name\":\"Paul Rey\",\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/#\\\/schema\\\/person\\\/c1ab9da41528662641aeeaeae843ce24\"},\"headline\":\"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9\",\"datePublished\":\"2024-02-02T15:28:43+00:00\",\"dateModified\":\"2026-07-26T17:09:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/\"},\"wordCount\":354,\"image\":{\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.slash-mnt.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png\",\"keywords\":[\"Automatisation\",\"Helm\",\"Kubernetes\",\"S\u00e9curit\u00e9\"],\"articleSection\":[\"kubernetes\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/\",\"url\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/\",\"name\":\"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9 - \\\/mnt\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.slash-mnt.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png\",\"datePublished\":\"2024-02-02T15:28:43+00:00\",\"dateModified\":\"2026-07-26T17:09:53+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/#\\\/schema\\\/person\\\/c1ab9da41528662641aeeaeae843ce24\"},\"description\":\"Si vous maintenez un cluster Kubernetes, vous vous \u00eates sans d\u00e9j\u00e0 vu mettre \u00e0 jour les images de vos pods. Que ce soit parce qu'une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.slash-mnt.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png\",\"contentUrl\":\"https:\\\/\\\/www.slash-mnt.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png\",\"width\":1024,\"height\":1024,\"caption\":\"A man in his couch in a lightful room with green plants\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/2024\\\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.slash-mnt.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/#website\",\"url\":\"https:\\\/\\\/www.slash-mnt.com\\\/\",\"name\":\"\\\/mnt\",\"description\":\"Your hiking guide to the Cloud\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.slash-mnt.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.slash-mnt.com\\\/#\\\/schema\\\/person\\\/c1ab9da41528662641aeeaeae843ce24\",\"name\":\"Paul Rey\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c4538cce7bce2418ec97551a4f349f8b7ca674bd1c466a0e3101e8c778ded60?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c4538cce7bce2418ec97551a4f349f8b7ca674bd1c466a0e3101e8c778ded60?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c4538cce7bce2418ec97551a4f349f8b7ca674bd1c466a0e3101e8c778ded60?s=96&d=mm&r=g\",\"caption\":\"Paul Rey\"},\"sameAs\":[\"https:\\\/\\\/www.slash-mnt.com\"],\"url\":\"https:\\\/\\\/www.slash-mnt.com\\\/en\\\/author\\\/prey\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9 - \/mnt","description":"Si vous maintenez un cluster Kubernetes, vous vous \u00eates sans d\u00e9j\u00e0 vu mettre \u00e0 jour les images de vos pods. Que ce soit parce qu'une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/","og_locale":"en_GB","og_type":"article","og_title":"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9 - \/mnt","og_description":"Si vous maintenez un cluster Kubernetes, vous vous \u00eates sans d\u00e9j\u00e0 vu mettre \u00e0 jour les images de vos pods. Que ce soit parce qu'une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9","og_url":"https:\/\/www.slash-mnt.com\/en\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/","og_site_name":"\/mnt","article_published_time":"2024-02-02T15:28:43+00:00","article_modified_time":"2026-07-26T17:09:53+00:00","og_image":[{"width":1024,"height":1024,"url":"https:\/\/www.slash-mnt.com\/wp-content\/uploads\/2024\/02\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png","type":"image\/png"}],"author":"Paul Rey","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Paul Rey","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#article","isPartOf":{"@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/"},"author":{"name":"Paul Rey","@id":"https:\/\/www.slash-mnt.com\/#\/schema\/person\/c1ab9da41528662641aeeaeae843ce24"},"headline":"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9","datePublished":"2024-02-02T15:28:43+00:00","dateModified":"2026-07-26T17:09:53+00:00","mainEntityOfPage":{"@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/"},"wordCount":354,"image":{"@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#primaryimage"},"thumbnailUrl":"https:\/\/www.slash-mnt.com\/wp-content\/uploads\/2024\/02\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png","keywords":["Automatisation","Helm","Kubernetes","S\u00e9curit\u00e9"],"articleSection":["kubernetes"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/","url":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/","name":"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9 - \/mnt","isPartOf":{"@id":"https:\/\/www.slash-mnt.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#primaryimage"},"image":{"@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#primaryimage"},"thumbnailUrl":"https:\/\/www.slash-mnt.com\/wp-content\/uploads\/2024\/02\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png","datePublished":"2024-02-02T15:28:43+00:00","dateModified":"2026-07-26T17:09:53+00:00","author":{"@id":"https:\/\/www.slash-mnt.com\/#\/schema\/person\/c1ab9da41528662641aeeaeae843ce24"},"description":"Si vous maintenez un cluster Kubernetes, vous vous \u00eates sans d\u00e9j\u00e0 vu mettre \u00e0 jour les images de vos pods. Que ce soit parce qu'une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9","breadcrumb":{"@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#primaryimage","url":"https:\/\/www.slash-mnt.com\/wp-content\/uploads\/2024\/02\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png","contentUrl":"https:\/\/www.slash-mnt.com\/wp-content\/uploads\/2024\/02\/sryther_a_man_in_his_couch_in_a_lightful_room_with_green_plants_e1c64c4f-a204-4ae4-bb49-cae229c6f63a.png","width":1024,"height":1024,"caption":"A man in his couch in a lightful room with green plants"},{"@type":"BreadcrumbList","@id":"https:\/\/www.slash-mnt.com\/2024\/garder-les-services-de-son-cluster-k8s-a-jour-depuis-son-canape\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.slash-mnt.com\/"},{"@type":"ListItem","position":2,"name":"Garder les services de son cluster k8s \u00e0 jour depuis son canap\u00e9"}]},{"@type":"WebSite","@id":"https:\/\/www.slash-mnt.com\/#website","url":"https:\/\/www.slash-mnt.com\/","name":"\/mnt","description":"Your hiking guide to the Cloud","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.slash-mnt.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.slash-mnt.com\/#\/schema\/person\/c1ab9da41528662641aeeaeae843ce24","name":"Paul Rey","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/8c4538cce7bce2418ec97551a4f349f8b7ca674bd1c466a0e3101e8c778ded60?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c4538cce7bce2418ec97551a4f349f8b7ca674bd1c466a0e3101e8c778ded60?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c4538cce7bce2418ec97551a4f349f8b7ca674bd1c466a0e3101e8c778ded60?s=96&d=mm&r=g","caption":"Paul Rey"},"sameAs":["https:\/\/www.slash-mnt.com"],"url":"https:\/\/www.slash-mnt.com\/en\/author\/prey\/"}]}},"_links":{"self":[{"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/posts\/581","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/comments?post=581"}],"version-history":[{"count":8,"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/posts\/581\/revisions"}],"predecessor-version":[{"id":806,"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/posts\/581\/revisions\/806"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/media\/583"}],"wp:attachment":[{"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/media?parent=581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/categories?post=581"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.slash-mnt.com\/en\/wp-json\/wp\/v2\/tags?post=581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}