-
Epic
-
Resolution: Unresolved
-
Major
-
None
-
None
-
kube-rbac-proxy replacement
-
Upstream
-
False
-
None
-
False
-
Not Selected
-
To Do
-
60% To Do, 0% In Progress, 40% Done
The image `gcr.io/kubebuilder/kube-rbac-proxy` is deprecated and will become unavailable.
Projects using this image to secure metrics endpoints must migrate as soon as possible to avoid service disruptions.
It is recommended to replace its usage with the [`WithAuthenticationAndAuthorization`](https://pkg.go.dev/sigs.k8s.io/controller-runtime/pkg/metrics/filters#WithAuthenticationAndAuthorization) feature provided by [Controller-Runtime](https://github.com/kubernetes-sigs/controller-runtime).This feature provides integrated support for securing metrics endpoints by embedding authentication (authn) and authorization (authz) mechanisms directly into the controller manager's metrics server, replacing the need for (https://github.com/brancz/kube-rbac-proxy) to secure metrics endpoints.
For more information, see: https://github.com/kubernetes-sigs/kubebuilder/discussions/3907(https://github.com/kubernetes-sigs/kubebuilder/discussions/3907)
- impacts account
-
OCPSTRAT-1835 Transitioning from kube-rbac-proxy
- Closed
- links to