feat: update rbac proxy image.

The tag we were using had 5 critical vulnerabilities and: > Images provided under gcr.io/kubebuilder/ will be unavailable from March 18, 2025. https://book.kubebuilder.io/reference/metrics
kubeshop · Oct 23, 2024 · 1756baf · 1756baf
1 parent 5c2b0ba
commit 1756baf
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 52 deletions.
diff --git a/charts/testkube-operator/values.yaml b/charts/testkube-operator/values.yaml
@@ -63,20 +63,19 @@ image:
 args:
   - --logtostderr=true
 
-##Proxy Image parameters
-## image.registry Proxy image registry
-## image.repository Proxy image name
-## image.tag Proxy image tag
-## image.pullPolicy Proxy Image pull policy
-## image.pullSecret Proxy Image pull k8s secret name for private registries
+# Proxy settings
 proxy:
+  # Proxy Image parameters
   image:
-    registry: gcr.io
-    repository: kubebuilder/kube-rbac-proxy
-    tag: "v0.15.0"
-    pullPolicy: IfNotPresent
+    # -- Testkube Operator rbac-proxy image registry
+    registry: quay.io
+    # -- Testkube Operator rbac-proxy image repository
+    repository: brancz/kube-rbac-proxy
+    # -- Testkube Operator rbac-proxy image tag
+    tag: "v0.18.1"
+    # -- Testkube Operator rbac-proxy k8s secret for private registries
     pullSecrets: []
-  ## Resources limits and requests for kube-rbac-proxy container
+  # -- Testkube Operator rbac-proxy resource settings
   resources: {}
 
 ## Testkube API full name

diff --git a/charts/testkube/values-demo.yaml b/charts/testkube/values-demo.yaml
@@ -380,19 +380,6 @@ testkube-operator:
   installCRD: true
   priorityClassName: "highest-priority"
 
-  ##Proxy Image parameters
-  ## image.registry Proxy image registry
-  ## image.repository Proxy image name
-  ## image.tag Proxy image tag
-  ## image.pullPolicy Proxy Image pull policy
-  proxy:
-    image:
-      registry: gcr.io
-      repository: kubebuilder/kube-rbac-proxy
-      tag: "v0.8.0"
-    ## Proxy Container Port
-    containerPort: 8443
-
   resources:
     requests:
       memory: "200Mi"

diff --git a/charts/testkube/values-develop.yaml b/charts/testkube/values-develop.yaml
@@ -324,19 +324,6 @@ testkube-logs:
   nodeSelector: {}
 testkube-operator:
   priorityClassName: "highest-priority"
-  ##Proxy Image parameters
-  ## image.registry Proxy image registry
-  ## image.repository Proxy image name
-  ## image.tag Proxy image tag
-  ## image.pullPolicy Proxy Image pull policy
-  proxy:
-    image:
-      registry: gcr.io
-      repository: kubebuilder/kube-rbac-proxy
-      tag: "v0.8.0"
-    ## Proxy Container Port
-    containerPort: 8443
-
   useArgoCDSync: true
   purgeExecutions: false
 

diff --git a/charts/testkube/values-stage.yaml b/charts/testkube/values-stage.yaml
@@ -320,18 +320,6 @@ testkube-api:
 
 testkube-operator:
   priorityClassName: "highest-priority"
-  ##Proxy Image parameters
-  ## image.registry Proxy image registry
-  ## image.repository Proxy image name
-  ## image.tag Proxy image tag
-  ## image.pullPolicy Proxy Image pull policy
-  proxy:
-    image:
-      registry: gcr.io
-      repository: kubebuilder/kube-rbac-proxy
-      tag: "v0.8.0"
-    ## Proxy Container Port
-    containerPort: 8443
 
   resources: {}
   #    requests:

diff --git a/charts/testkube/values.yaml b/charts/testkube/values.yaml
@@ -909,11 +909,11 @@ testkube-operator:
     # Proxy Image parameters
     image:
       # -- Testkube Operator rbac-proxy image registry
-      registry: gcr.io
+      registry: quay.io
       # -- Testkube Operator rbac-proxy image repository
-      repository: kubebuilder/kube-rbac-proxy
+      repository: brancz/kube-rbac-proxy
       # -- Testkube Operator rbac-proxy image tag
-      tag: "v0.8.0"
+      tag: "v0.18.1"
       # -- Testkube Operator rbac-proxy k8s secret for private registries
       pullSecrets: []
     # -- Testkube Operator rbac-proxy resource settings