ack-fluid is a cache accelerator that is included in the cloud-native AI suite. By default, ack-fluid 0.7.0 to 0.9.6 are granted excessive role-based access control (RBAC) permissions. This may raise potential security risks. To ensure component security, we recommend that you update ack-fluid to 0.9.7 or later. This topic describes how to update ack-fluid.

Scope of impact

If the version of ack-fluid installed in your cluster is within the range of 0.7.0 to 0.9.6, you can update ack-fluid to 0.9.7 or later to fix this issue. This issue is fixed in ack-fluid 0.9.7 and later.

Update ack-fluid

You can use one of the following methods to update ack-fluid. We recommend that you update ack-fluid by using the Cloud-native AI Suite module of the Container Service for Kubernetes (ACK) console. This method does require additional configuration.

(Recommended) Update ack-fluid by using the Cloud-native AI Suite module

  1. Log on to the ACK console and click Clusters in the left-side navigation pane.
  2. On the Clusters page, click the name of a cluster and choose Applications > Cloud-native AI Suite in the left-side navigation pane.
  3. On the Cloud-native AI Suite page, find ack-fluid and click Upgrade in the Actions column.

    If the Upgrade button is not displayed, the latest version of ack-fluid is installed.

  4. In the Upgrade message, click Confirm.

Update ack-fluid by using the App Catalog module

  1. Log on to the ACK console and click Clusters in the left-side navigation pane.
  2. On the Clusters page, click the name of a cluster and choose Applications > Helm in the left-side navigation pane.
  3. On the Helm page, find ack-fluid and view the version of ack-fluid in the Chart Version column. If the version is within the range of 0.7.0 to 0.9.6, click Update in the Actions column.

    If the version is 0.9.7 or later, you do not need to update ack-fluid.

  4. In the Update Release panel, confirm that the new version is 0.9.7 or later and click OK.