Skip to content

Conversation

@lmilleri
Copy link
Member

  • Upgraded operator-sdk to v1.39.1. The main breaking change is to drop the deprecated kube-rbac-proxy
    (see commit description for details)
  • Bumped new operator version (v0.3.0)

@lmilleri lmilleri requested a review from a team as a code owner January 30, 2025 10:09
@lmilleri lmilleri requested a review from bpradipt January 30, 2025 10:22
kube-rbac-proxy was historically used to protect the metrics endpoint.
However, its usage has been discontinued in Kubebuilder. The default
scaffold now leverages the WithAuthenticationAndAuthorization feature
provided by controller-runtime.

This feature provides integrated support for securing metrics endpoints
by embedding authentication (authn) and authorization (authz) mechanisms
directly into the controller manager's metrics server, replacing the
need for kube-rbac-proxy to secure metrics endpoints.

Signed-off-by: Leonardo Milleri <[email protected]>
Signed-off-by: Leonardo Milleri <[email protected]>
Copy link
Member

@bpradipt bpradipt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@lmilleri lmilleri merged commit e77d97f into confidential-containers:main Feb 3, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants