[prometheus-developers] pushgateway new release to address jquery css vuln. when?

2020-09-23 Thread Don450
My question is, when will the next release of  pushgateway?
https://coderelease.io/github/repository/prometheus/pushgateway  

The need is to address security concern jquery < 3.5.0 (pushgateway v1.2.0 
release has jquery-3.4.1) CSS vuln.

*This change has already been merged into master (updated to jquery-3.5.1)*
https://github.com/prometheus/pushgateway/commit/3056a39317756d7225dbb1c88765e83091915211
 


Details of security concern:

https://www.tenable.com/plugins/nessus/136929 

  According to the self-reported version in the script, the version of 
JQuery hosted on the remote web server is greater than or equal to 1.2 and 
prior to 3.5.0. It is, therefore, affected by multiple cross site scripting 
vulnerabilities.  

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to prometheus-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-developers/350f8552-fba3-41bd-be1d-976b89b15ca5n%40googlegroups.com.


Re: [prometheus-developers] Prometheus Persistence Volume(Kubernetes)

2020-09-23 Thread Bjoern Rabenstein
On 21.09.20 00:27, prabin...@gmail.com wrote:
> Memory Consumed by prometheus is keep on increasing day by day . Though Number
> of  Targets are same.

Yes, Prometheus uses as much RAM as possible for mmap'ing, making your
queries faster.

> What is is the persistence volume of prometheus , or how we can evaluate the
> same and limit our memory consumtion.

You don't have to. When the OS needs the RAM, it will simply take it
away from Prometheus.

There is a certain amount of memory that Prometheus needs to exist. If
you don't have enough for that, it will OOM.

You can look at
https://www.robustperception.io/how-much-ram-does-prometheus-2-x-need-for-cardinality-and-ingestion
, although a lot has been optimized over the last 1.5 years since that
article was published.

-- 
Björn Rabenstein
[PGP-ID] 0x851C3DA17D748D03
[email] bjo...@rabenste.in

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to prometheus-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-developers/20200923145747.GH29792%40jahnn.