Remove kube-rbac-proxy (#1918)

Author: Amulyam24

config/default/kustomization.yaml

@@ -27,11 +27,7 @@ resources:
 - credentials.yaml
 
 patchesStrategicMerge:
-  # Protect the /metrics endpoint by putting it behind auth.
-  # If you want your controller-manager to expose the /metrics
-  # endpoint w/o any authn/z, please comment the following line.
 - manager_credentials_patch.yaml
-- manager_auth_proxy_patch.yaml
 - manager_image_patch.yaml
 - manager_pull_policy.yaml
 

config/default/manager_auth_proxy_patch.yaml

@@ -28,7 +28,8 @@ spec:
         args:
         - "--leader-elect"
         - "--provider-id-fmt=${PROVIDER_ID_FORMAT:=v2}"
-        - "--metrics-bind-addr=127.0.0.1:8080"
+        - "--diagnostics-address=${CAPIBM_DIAGNOSTICS_ADDRESS:=:8443}"
+        - "--insecure-diagnostics=${CAPIBM_INSECURE_DIAGNOSTICS:=false}"
         - "--service-endpoint=${SERVICE_ENDPOINT:=none}"
         - "--v=${LOGLEVEL:=0}"
         image: controller:latest
@@ -37,6 +38,9 @@ spec:
           - containerPort: 9440
             name: healthz
             protocol: TCP
+          - containerPort: 8443
+            name: metrics
+            protocol: TCP
         readinessProbe:
           httpGet:
             path: /readyz

config/manager/manager.yaml

@@ -3,11 +3,4 @@ resources:
 - role_binding.yaml
 - leader_election_role.yaml
 - leader_election_role_binding.yaml
-# Comment the following 4 lines if you want to disable
-# the auth proxy (https://github.com/brancz/kube-rbac-proxy)
-# which protects your /metrics endpoint.
-- auth_proxy_service.yaml
-- auth_proxy_role.yaml
-- auth_proxy_role_binding.yaml
-- auth_proxy_client_clusterrole.yaml
 - service_account.yaml