Only the latest release of each maintained Kubernetes-minor line (e.g. v0.33.x) receives security fixes.

Please do not open a public issue for security vulnerabilities. Instead, report them privately via GitHub security advisories.

Relevant areas for this project include:

• Handling of OTC AK/SK credentials (cloud.conf, the otc-cloud-config Secret)
• RBAC granted by the Helm chart / deploy manifests
• Behavior of the LoadBalancer controller against foreign (non-owned) OTC resources

We will acknowledge reports as quickly as possible and coordinate a fix and disclosure timeline with you.