You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/book/src/reference/metrics.md
+8-3Lines changed: 8 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,6 +3,7 @@
3
3
By default, controller-runtime builds a global prometheus registry and
4
4
publishes [a collection of performance metrics](/reference/metrics-reference.md) for each controller.
5
5
6
+
6
7
<asideclass="note warning">
7
8
<h1>IMPORTANT: If you are using `kube-rbac-proxy`</h1>
8
9
@@ -11,10 +12,14 @@ Your projects will be affected and may fail to work if the image cannot be pulle
11
12
12
13
**Images provided under `gcr.io/kubebuilder/` will be unavailable from early 2025.**
13
14
14
-
-**Projects initialized with Kubebuilder versions `v3.14` or lower** utilize [kube-rbac-proxy](https://github.com/brancz/kube-rbac-proxy) to protect the metrics endpoint. Therefore, you might want to continue using kube-rbac-proxy by simply replacing the image or changing how the metrics endpoint is protected in your project.
15
+
-**Projects initialized with Kubebuilder versions `v3.14` or lower** utilize [kube-rbac-proxy](https://github.com/brancz/kube-rbac-proxy) to protect the metrics endpoint.
16
+
In this case, you might want to upgrade your project to the latest release or ensure that you have applied the same or similar code changes.
17
+
18
+
-**However, projects initialized with Kubebuilder versions `v4.1.0` or higher** have similar protection using `authn/authz`
19
+
enabled by default via Controller-Runtime's feature [WithAuthenticationAndAuthorization](https://pkg.go.dev/sigs.k8s.io/[email protected]/pkg/metrics/filters#WithAuthenticationAndAuthorization).
15
20
16
-
-**However, projects initialized with Kubebuilder versions `v4.1.0` or higher** have a similar protection using authn/authz enabled by default via Controller-Runtime's feature [WithAuthenticationAndAuthorization](https://pkg.go.dev/sigs.k8s.io/[email protected]/pkg/metrics/filters#WithAuthenticationAndAuthorization).
17
-
In this case, you might want to upgrade your project or simply ensure that you have applied the same code changes to it.
21
+
If you want to continue using [kube-rbac-proxy](https://github.com/brancz/kube-rbac-proxy) then you MUST change
22
+
your project to use the image from another source.
18
23
19
24
> This infrastructure is outside of our control, we cannot guarantee any timeline or any extensions.
20
25
> For further information, see: [kubebuilder/discussions/3907](https://github.com/kubernetes-sigs/kubebuilder/discussions/3907)
0 commit comments