🚨 [Action Required]: Ensure Your Users Are Not Impacted by Upcoming Deprecation

[Camila Macedo]

Hi Everyone,

I promise this will be the last reminder on this topic. 🙂

I only want to ensure you’re fully prepared and aware of it.

Key Update

Please take a moment to check if your project uses the image gcr.io/kubebuilder/kube-rbac-proxy and ensure the required changes are in place to avoid any impact on your users.

Please make sure that your users no longer use versions of your solution with this image.

⚠️ If your solution relies on this image, it will fail to function in any scenario that requires pulling the image once it becomes unavailable.

 

Also, please ensure your metrics endpoint is protected using an alternative approach as suggested in the guidance.

Simply removing the manifests from your project is not good enough.

Unprotected metrics endpoints may expose sensitive data such as system performance and application behaviour, creating security vulnerabilities.

👉 You will find all the guidance and answers to your questions in this discussion: https://github.com/kubernetes-sigs/kubebuilder/discussions/3907

Using gcr.io/kubebuilder/kube-rbac-proxy? What To Do?

You must replace the deprecated image gcr.io/kubebuilder/kube-rbac-proxy with an alternative approach ASAP. For example:

Replace kube-rbac-proxy solution with WithAuthenticationAndAuthorization:

You can fully upgrade your project to use the latest scaffolds provided by Kubebuilder or manually make the necessary changes. 

Refer to the FAQ and Discussion for detailed instructions on manually updating your project and testing the changes.

Please remember to advise your users to move forward with your latest release, which no longer relies on this image.  

When will the image no longer be available?

The image will no longer be pullable sometime in early 2025. Unfortunately, we cannot guarantee specific timelines or potential extensions. 

According to the announcement, images provided under GRC will be unavailable after March 18, 2025. 

🚨  However, gcr.io/kubebuilder/ may become unavailable before this date due to infrastructure deprecation efforts.
You and your users MUST migrate as soon as possible.

If you have any questions, please don’t hesitate to reach out in the Kubebuilder Slack channel or comment on the discussion topic.

Thank you for your attention!

CAMILA MACEDO

SOFTWARE ENGINEER,

BLOG: www.dev4devs.com