Upgrade AWS SDK for Go from v1 to v2
lifecycle/rotten
The node-problem-detector is currently utilizing a version of the github.com/aws/aws-sdk-go that is approaching its end-of-life. According to the official AWS announcement, AWS SDK for Go v1 will reach its end-of-support on July 31, 2025.[[1](https://www.google.com/url?sa=E&q=https%3A%2F%2Fvertexaisearch.cloud.google.com%2Fgrounding-api-redirect%2FAUZIYQFgn78fuURAAr4xntpfpnHstv26ZRL3qbr2IxQkyoFNmX-J-N1wF1RDRPfSrJBJEtHu5uv_HqBRsQxdElyMnt_GJGuZ2bIJkMiF6R0-0Yhe3xoBdwNwHhGPJf-6SihpoVmWr38rbOo2k-61sxi3hJWdF8Lq4TJ4nA7wN7yUv-g0x1eUMgdxO49qPOZPTRRIJIhoQdWpYXVEe8GKiwZaRUky9Sc%3D)][[2](https://www.google.com/url?sa=E&q=https%3A%2F%2Fvertexaisearch.cloud.google.com%2Fgrounding-api-redirect%2FAUZIYQEJVK2rPbjxIjBf3ZGG1bfsQ6OcAbQ2r3x8d9uqxXnt2O9290L382zHu2OZ9MtJRQU4oHrSYowyTsXreyP9cFWH9fctLA05pBVElW5urS1Z1gBn48LCBGYUcT7Y7ghvZXkTenGmJEIhQJGVllbHqbg0etOt241NDZGbjBVB)][[3](https://www.google.com/url?sa=E&q=https%3A%2F%2Fvertexaisearch.cloud.google.com%2Fgrounding-api-redirect%2FAUZIYQHlnBiB9Dv6whqYK6E8BKjDXFnvpdERw9F93fzXDFRVuPN42WoU0MOnHUoGENXc6AiwiXKi2imtKM6z4neJJNrAJITItKJ7Wzlddd4ideqxmch58jA-NhjKLRzv0Q%3D%3D)] After this date, it will no longer receive updates, including critical bug fixes and security patches.[[1](https://www.google.com/url?sa=E&q=https%3A%2F%2Fvertexaisearch.cloud.google.com%2Fgrounding-api-redirect%2FAUZIYQFgn78fuURAAr4xntpfpnHstv26ZRL3qbr2IxQkyoFNmX-J-N1wF1RDRPfSrJBJEtHu5uv_HqBRsQxdElyMnt_GJGuZ2bIJkMiF6R0-0Yhe3xoBdwNwHhGPJf-6SihpoVmWr38rbOo2k-61sxi3hJWdF8Lq4TJ4nA7wN7yUv-g0x1eUMgdxO49qPOZPTRRIJIhoQdWpYXVEe8GKiwZaRUky9Sc%3D)][[2](https://www.google.com/url?sa=E&q=https%3A%2F%2Fvertexaisearch.cloud.google.com%2Fgrounding-api-redirect%2FAUZIYQEJVK2rPbjxIjBf3ZGG1bfsQ6OcAbQ2r3x8d9uqxXnt2O9290L382zHu2OZ9MtJRQU4oHrSYowyTsXreyP9cFWH9fctLA05pBVElW5urS1Z1gBn48LCBGYUcT7Y7ghvZXkTenGmJEIhQJGVllbHqbg0etOt241NDZGbjBVB)][[4](https://www.google.com/url?sa=E&q=https%3A%2F%2Fvertexaisearch.cloud.google.com%2Fgrounding-api-redirect%2FAUZIYQG_gn2b9Wmt_BH7s0Ir1ZyH89tOF04ZqBBBXbxwE6_UjlU9sBklQEGbFWaFRc0P8m61t-JM52ZAeX4C4ObWvH9pypMp84wvKGCBbye9UXWqcq-gdn-pJClj6jhK69_zdo7yf6uvg5OuoKUCfcmA4Q3nt8qRshuDdKCW5HjS4JOC9B_m6f8y0u0pG2020qD7D_NTuc_Yoj5rkJ03tG2l4nwQHXR7J5s01XkIfmSPckQy52CvtJw0F4pk0UuzDelbVVg%3D)]
A customer's vulnerability scanner has flagged the following dependency in /home/kubernetes/bin/node-problem-detector as an EOL version:
pkg:go/github.com/aws/aws-sdk-go(1.44.72)
This is also reflected in the go.sum file on line 114:
```
github.com/aws/aws-sdk-go v1.44.72 h1:i7J5XT7pjBjtl1OrdIhiQHzsG89wkZCcM1HhyK++3DI=
github.com/aws/aws-sdk-go v1.44.72/go.mod h1:y4AeaBuwd2Lk+GepC1E9v0qOiTws0MIWAX4oIKwKHZo=
```
To ensure the security and stability of the node-problem-detector, it is crucial to migrate from the EOL AWS SDK for Go v1 to v2. AWS has provided a migration guide to facilitate this transition.
Please prioritize this upgrade to mitigate any potential risks associated with using an unsupported SDK.
关闭于 2026-02-25 6 条评论