Skip to content

Commit aa8d2d3

Browse files
myasnikovdaniilmyasnikovdaniil
committed
fix(opensearch-operator): replace deprecated kube-rbac-proxy image
The gcr.io/kubebuilder/kube-rbac-proxy image is no longer available since GCR was deprecated. Replace it with quay.io/brancz/kube-rbac-proxy from the original upstream author. Applied as a local patch in patches/ because upstream chart 2.8.1+ drops kubeRbacProxy entirely but also bumps CRDs to controller-gen v0.19.0 with significant schema changes — out of scope for this fix. Assisted-By: Claude <[email protected]> Signed-off-by: Myasnikov Daniil <[email protected]>
1 parent e846777 commit aa8d2d3

3 files changed

Lines changed: 13 additions & 1 deletion

File tree

‎packages/system/opensearch-operator/Makefile‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,3 +8,4 @@ update:
88
helm repo add opensearch-operator https://opensearch-project.github.io/opensearch-k8s-operator/
99
helm repo update opensearch-operator
1010
helm pull opensearch-operator/opensearch-operator --version 2.8.0 --untar --untardir charts
11+
patch --no-backup-if-mismatch -p4 < patches/fix-kube-rbac-proxy-image.patch

‎packages/system/opensearch-operator/charts/opensearch-operator/values.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -113,7 +113,7 @@ kubeRbacProxy:
113113
initialDelaySeconds: 10
114114

115115
image:
116-
repository: "gcr.io/kubebuilder/kube-rbac-proxy"
116+
repository: "quay.io/brancz/kube-rbac-proxy"
117117
tag: "v0.15.0"
118118

119119
## If this is set to true, RoleBindings will be used instead of ClusterRoleBindings, inorder to restrict ClusterRoles

‎packages/system/opensearch-operator/patches/fix-kube-rbac-proxy-image.patch‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
--- a/packages/system/opensearch-operator/charts/opensearch-operator/values.yaml
2+
+++ b/packages/system/opensearch-operator/charts/opensearch-operator/values.yaml
3+
@@ -113,7 +113,7 @@
4+
initialDelaySeconds: 10
5+
6+
image:
7+
- repository: "gcr.io/kubebuilder/kube-rbac-proxy"
8+
+ repository: "quay.io/brancz/kube-rbac-proxy"
9+
tag: "v0.15.0"
10+
11+
## If this is set to true, RoleBindings will be used instead of ClusterRoleBindings, inorder to restrict ClusterRoles

0 commit comments

Comments
 (0)