Use kube-rbac-proxy v0.8.0

Update the kube-rbac-proxy image to use v0.8.0, which runs as nonroot. This change was done in operator-sdk v1.5.0, but was not noted in the migration guide. See operator-framework/operator-sdk#4402
adambkaplan · Dec 1, 2021 · aed64e1 · aed64e1
1 parent c3bbdd9
commit aed64e1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 6 deletions.
diff --git a/bundle/manifests/shipwright-operator.clusterserviceversion.yaml b/bundle/manifests/shipwright-operator.clusterserviceversion.yaml
@@ -428,15 +428,13 @@ spec:
                 - --upstream=http://127.0.0.1:8080/
                 - --logtostderr=true
                 - --v=10
-                image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+                image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
                 name: kube-rbac-proxy
                 ports:
                 - containerPort: 8443
                   name: https
                   protocol: TCP
                 resources: {}
-                securityContext:
-                  runAsUser: 1000640000
               - args:
                 - --health-probe-bind-address=:8081
                 - --metrics-bind-address=127.0.0.1:8080

diff --git a/config/default/manager_auth_proxy_patch.yaml b/config/default/manager_auth_proxy_patch.yaml
@@ -10,7 +10,7 @@ spec:
     spec:
       containers:
       - name: kube-rbac-proxy
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"
@@ -20,8 +20,6 @@ spec:
         - containerPort: 8443
           protocol: TCP
           name: https
-        securityContext:
-          runAsUser: 1000640000
       - name: operator
         args:
         - "--health-probe-bind-address=:8081"