Skip to content

Commit 6750304

Browse files
committed
Use kube-rbac-proxy v0.8.0
Update the kube-rbac-proxy image to use v0.8.0, which runs as nonroot. This change was done in operator-sdk v1.5.0, but was not noted in the migration guide. See operator-framework/operator-sdk#4402
1 parent ea9571c commit 6750304

File tree

2 files changed

+2
-6
lines changed

2 files changed

+2
-6
lines changed

bundle/manifests/shipwright-operator.clusterserviceversion.yaml

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -428,15 +428,13 @@ spec:
428428
- --upstream=http://127.0.0.1:8080/
429429
- --logtostderr=true
430430
- --v=10
431-
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
431+
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
432432
name: kube-rbac-proxy
433433
ports:
434434
- containerPort: 8443
435435
name: https
436436
protocol: TCP
437437
resources: {}
438-
securityContext:
439-
runAsUser: 1000640000
440438
- args:
441439
- --health-probe-bind-address=:8081
442440
- --metrics-bind-address=127.0.0.1:8080

config/default/manager_auth_proxy_patch.yaml

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ spec:
1010
spec:
1111
containers:
1212
- name: kube-rbac-proxy
13-
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
13+
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
1414
args:
1515
- "--secure-listen-address=0.0.0.0:8443"
1616
- "--upstream=http://127.0.0.1:8080/"
@@ -20,8 +20,6 @@ spec:
2020
- containerPort: 8443
2121
protocol: TCP
2222
name: https
23-
securityContext:
24-
runAsUser: 1000640000
2523
- name: operator
2624
args:
2725
- "--health-probe-bind-address=:8081"

0 commit comments

Comments
 (0)