From 980c9f1c535c4899dc79ca7e240549f6858561ed Mon Sep 17 00:00:00 2001 From: Mikko Ylinen Date: Mon, 21 Nov 2022 15:35:12 +0200 Subject: [PATCH] deployments: update kube-rbac-proxy image and args Signed-off-by: Mikko Ylinen --- deployments/operator/default/manager_auth_proxy_patch.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/deployments/operator/default/manager_auth_proxy_patch.yaml b/deployments/operator/default/manager_auth_proxy_patch.yaml index b4ea3ce09..1dfc28da2 100644 --- a/deployments/operator/default/manager_auth_proxy_patch.yaml +++ b/deployments/operator/default/manager_auth_proxy_patch.yaml @@ -10,11 +10,12 @@ spec: spec: containers: - name: kube-rbac-proxy - image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.0 + image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1 args: - "--secure-listen-address=0.0.0.0:8443" - "--upstream=http://127.0.0.1:8080/" - "--logtostderr=true" + - "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305" - "--v=10" ports: - containerPort: 8443