From 183675e16bf35ad33a7091ea430cc847b5578fce Mon Sep 17 00:00:00 2001 From: Mikko Ylinen Date: Sat, 29 Oct 2022 00:04:34 +0300 Subject: [PATCH] deployments: update kube-rbac-proxy image and args Signed-off-by: Mikko Ylinen --- deployments/operator/default/manager_auth_proxy_patch.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/deployments/operator/default/manager_auth_proxy_patch.yaml b/deployments/operator/default/manager_auth_proxy_patch.yaml index aaa15547..1dfc28da 100644 --- a/deployments/operator/default/manager_auth_proxy_patch.yaml +++ b/deployments/operator/default/manager_auth_proxy_patch.yaml @@ -10,11 +10,12 @@ spec: spec: containers: - name: kube-rbac-proxy - image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0 + image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1 args: - "--secure-listen-address=0.0.0.0:8443" - "--upstream=http://127.0.0.1:8080/" - "--logtostderr=true" + - "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305" - "--v=10" ports: - containerPort: 8443