Thanks Matthias for the input, yes, I was expecting K8S client libraries would need go-restful, but if you look at the go-restful versions client-go and kube-openapi depend on, they are different from what Prometheus’s one, which is v2.16.0. It looks like Prometheus uses it somewhere under the
This is probably due to GitHub dependabot currently flagging a security
issue with go-restful (I hit the same issue yesterday).
On Fri, 10 Feb 2023 at 09:13, Matthias Rampke
wrote:
> You are on the right track with go mod graph: go-restful is a dependency
> of k8s.io/client-go and
You are on the right track with go mod graph: go-restful is a dependency of
k8s.io/client-go and k8s.io/kube-openapi, so colloquially "the Kubernetes
client library". Prometheus uses it for service discovery, fetching
information about pods, endpoints, and services. From a cursory look
through
Hello Prometheus team,
May I have a question about how Prometheus uses go-restful ?
We are using Prometheus 2.38.0 and from the binary, we can see go-restful
is compiled.
$go version -m prometheus |grep go-restful
dep github.com/emicklei/go-restful
4 matches
Mail list logo
