Hello all,

Following the vulnerability [0], with magnum rocky and the kubernetes driver
on fedora atomic you can use this tag "v1.11.5-1" [1] for new clusters. To upgrade
the apiserver in existing clusters, on the master node(s) you can run:
sudo atomic pull --storage ostree docker.io/openstackmagnum/kubernetes-apiserver:v1.11.5-1

I'll share instructions for magnum queens tomorrow morning CET time. 

Cheers,
Spyros
 

[0] https://github.com/kubernetes/kubernetes/issues/71411

[1] https://hub.docker.com/r/openstackmagnum/kubernetes-apiserver/tags/