Keerthan Reddy Mala
Keerthan Reddy Mala
/triage accepted
The CVE doesn't impact the cloud provider as the fix path golang.org/x/net/html for the CVE is not used.
aws cloud provider uses the upstream kubernetes cloud library and the error is coming from the [upstream code](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/server/options/authentication.go#L372). It is using a [different flag](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/server/options/authentication.go#L283-L285) to override the kube config ....
/triage accepted
/test pull-cloud-provider-aws-e2e
will take a look at this today
>I'm curious if the ALBO has implemented this KEP yet? I don't think so, @oliviassss can you confirm?