Merge pull request #827 from javipolo/disable-gcp-cloud-ops-agent

Disable google-cloud-ops-agent
containers · Nov 26, 2024 · 7a7edc7 · 7a7edc7
2 parents 26b10d2 + aed7857
commit 7a7edc7
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/training/cloud/gcp/cloud-setup.sh b/training/cloud/gcp/cloud-setup.sh
@@ -27,10 +27,13 @@ dnf install -y --nobest \
     vim
 mv /etc/selinux.tmp /etc/selinux
 
-# Install Google Ops Agent
-curl -sSo /tmp/add-google-cloud-ops-agent-repo.sh https://dl.google.com/cloudagents/add-google-cloud-ops-agent-repo.sh
-bash /tmp/add-google-cloud-ops-agent-repo.sh --also-install --remove-repo
-rm /tmp/add-google-cloud-ops-agent-repo.sh
+# The current version of google-cloud-ops-agent is impacted by a CVE: https://access.redhat.com/security/cve/CVE-2024-41110
+# It will be disable for the meantime
+#
+# # Install Google Ops Agent
+# curl -sSo /tmp/add-google-cloud-ops-agent-repo.sh https://dl.google.com/cloudagents/add-google-cloud-ops-agent-repo.sh
+# bash /tmp/add-google-cloud-ops-agent-repo.sh --also-install --remove-repo
+# rm /tmp/add-google-cloud-ops-agent-repo.sh
 
 # rpm-state is needed to remove microcode_ctl
 mkdir /var/lib/rpm-state