Skip to content

fix: update Milvus to 2.5.27 - #154

Open
miki3421 wants to merge 2 commits into
apache:0.9.0from
miki3421:fix/0.9.0-milvus-2.5.27
Open

miki3421 wants to merge 2 commits into
apache:0.9.0from
miki3421:fix/0.9.0-milvus-2.5.27

Conversation

@miki3421

Copy link
Copy Markdown
Contributor

Summary

  • update both Milvus deployment profiles from v2.5.2 to v2.5.27
  • add a regression test that keeps the full and slim manifests on the fixed image
  • retain the existing Milvus NetworkPolicy and tenant authentication model

This is the minimal patch-line upgrade that includes the fix for CVE-2026-26190 / GHSA-7ppg-37fh-vcr6.

Verification

  • python -m unittest discover -s tests: 120 passed
  • baseline K3s rollout: Milvus v2.5.27 ready
  • anonymous 9091 credential endpoint: HTTP 401
  • anonymous 9091 expression endpoint: HTTP 403
  • real Alpha action to Milvus 9091: blocked by NetworkPolicy
  • Alpha and Beta validation actions: PostgreSQL, MongoDB, Redis, S3, and Milvus all PASS
  • temporary probe action removed after the test

A companion openserverless-task PR updates the image catalog to the same version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants