-
Notifications
You must be signed in to change notification settings - Fork 349
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
⚠️ Action Required: Replace Deprecated gcr.io/kubebuilder/kube-rbac-proxy #1905
Comments
/assign @daemon1024 @rksharma95 @camilamacedo86 To address the deprecation of
Could you please confirm which approach you'd prefer to proceed with? Additionally, if there are any specific constraints or considerations for the project, let me know so I can factor them into the implementation. Looking forward to your guidance! |
Hi @abhashsolanki18, Thank you for looking into that. As described in: kubernetes-sigs/kubebuilder#3907 The best option to move forward is by adopting WithAuthenticationAndAuthorization with the following recommended steps:
Check out the FAQ section: "How can I manually change my project to switch to Controller-Runtime's built-in auth protection?" for detailed instructions. Please, let me know if you need any further information or help to move forward here. |
@camilamacedo86 @abhashsolanki18 thanks for reporting this issue 🙌 . we're looking into the suggested solutions. will let you know if any help needed. thanks again. |
Description
gcr.io/kubebuilder/kube-rbac-proxy
is deprecated and will become unavailable.You must move as soon as possible, sometime from early 2025, the GCR will go away.
If your project uses
gcr.io/kubebuilder/kube-rbac-proxy
, it will be affected.Your project may fail to work if the image cannot be pulled. You must take action as soon as possible.
However, if your project is no longer using this image, no action is required, and you can close this issue.
Using the image
gcr.io/kubebuilder/kube-rbac-proxy
?kube-rbac-proxy was historically used to protect the metrics endpoint. However, its usage has been discontinued in Kubebuilder. The default scaffold now leverages the
WithAuthenticationAndAuthorization
feature provided by Controller-Runtime.This feature provides integrated support for securing metrics endpoints by embedding authentication (
authn
) and authorization (authz
) mechanisms directly into the controller manager's metrics server, replacing the need for (https://github.com/brancz/kube-rbac-proxy) to secure metrics endpoints.What To Do?
You must replace the deprecated image
gcr.io/kubebuilder/kube-rbac-proxy
with an alternative approach. For example:WithAuthenticationAndAuthorization
:For further information, suggestions, and guidance:
We sincerely apologize for any inconvenience this may cause.
Thank you for your cooperation and understanding! 🙏
The text was updated successfully, but these errors were encountered: