Skip to content

Add HTTPS and Authn/Authz#107

Open
zeeke wants to merge 1 commit intok8snetworkplumbingwg:masterfrom
zeeke:replace-kube-rbac-proxy
Open

Add HTTPS and Authn/Authz#107
zeeke wants to merge 1 commit intok8snetworkplumbingwg:masterfrom
zeeke:replace-kube-rbac-proxy

Conversation

@zeeke
Copy link
Copy Markdown
Member

@zeeke zeeke commented Mar 20, 2026

This project used to be deployed with a sidecar container based on gcr.io/kubebuilder/kube-rbac-proxy to add HTTPS, Authentication and Authorization access to the metrics endpoint. That project has been deprecated, and these changes bring those functionality into the exporter itself.

New CLI flags:

  • --tls-cert-file / --tls-private-key-file: enable HTTPS mode
  • --tls-cipher-suites / --tls-curve-preferences / --tls-min-version
  • --enable-http2 (disabled by default, CVE-2023-39325)
  • --authentication-and-authorization: enable TokenReview/SubjectAccessReview

Refs

@gemini-code-assist
Copy link
Copy Markdown

Warning

Gemini encountered an error creating the summary. You can try again by commenting /gemini summary.

@zeeke zeeke force-pushed the replace-kube-rbac-proxy branch from d8ca026 to a3bbf9f Compare March 20, 2026 13:21
This project used to be deployed with a sidecar container based on
`gcr.io/kubebuilder/kube-rbac-proxy` to add HTTPS, Authentication
and Authorization access to the metrics endpoint. That project
has been deprecated, and these changes bring those functionality
into the exporter itself.

New CLI flags:
- --tls-cert-file / --tls-private-key-file: enable HTTPS mode
- --tls-cipher-suites / --tls-curve-preferences / --tls-min-version
- --enable-http2 (disabled by default, CVE-2023-39325)
- --authentication-and-authorization: enable TokenReview/SubjectAccessReview

Resolves: k8snetworkplumbingwg/sriov-network-operator#811

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Andrea Panattoni <apanatto@redhat.com>
@zeeke zeeke force-pushed the replace-kube-rbac-proxy branch from a3bbf9f to 9d1e78b Compare March 20, 2026 15:02
@zeeke
Copy link
Copy Markdown
Member Author

zeeke commented Mar 20, 2026

cc @SchSeba @Eoghan1232 ptal

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant