-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update kubebuilder from v4.1.0 to v4.1.1 (#341)
Co-authored-by: update-generated-files-action <41898282+github-actions[bot]@users.noreply.github.com>
- Loading branch information
1 parent
74dc6ae
commit 4efc748
Showing
2 changed files
with
39 additions
and
32 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -63,6 +63,7 @@ func main() { | |
| var probeAddr string | ||
| var secureMetrics bool | ||
| var enableHTTP2 bool | ||
| var tlsOpts []func(*tls.Config) | ||
| flag.StringVar(&metricsAddr, "metrics-bind-address", "0", "The address the metrics endpoint binds to. "+ | ||
| "Use :8443 for HTTPS or :8080 for HTTP, or leave as 0 to disable the metrics service.") | ||
| flag.StringVar(&probeAddr, "health-probe-bind-address", ":8081", "The address the probe endpoint binds to.") | ||
|
|
@@ -92,7 +93,6 @@ func main() { | |
| c.NextProtos = []string{"http/1.1"} | ||
| } | ||
|
|
||
| tlsOpts := []func(*tls.Config){} | ||
| if !enableHTTP2 { | ||
| tlsOpts = append(tlsOpts, disableHTTP2) | ||
| } | ||
|
|
@@ -101,28 +101,33 @@ func main() { | |
| TLSOpts: tlsOpts, | ||
| }) | ||
|
|
||
| // Metrics endpoint is enabled in 'config/default/kustomization.yaml'. The Metrics options configure the server. | ||
| // More info: | ||
| // - https://pkg.go.dev/sigs.k8s.io/[email protected]/pkg/metrics/server | ||
| // - https://book.kubebuilder.io/reference/metrics.html | ||
| metricsServerOptions := metricsserver.Options{ | ||
| BindAddress: metricsAddr, | ||
| SecureServing: secureMetrics, | ||
| // TODO(user): TLSOpts is used to allow configuring the TLS config used for the server. If certificates are | ||
| // not provided, self-signed certificates will be generated by default. This option is not recommended for | ||
| // production environments as self-signed certificates do not offer the same level of trust and security | ||
| // as certificates issued by a trusted Certificate Authority (CA). The primary risk is potentially allowing | ||
| // unauthorized access to sensitive metrics data. Consider replacing with CertDir, CertName, and KeyName | ||
| // to provide certificates, ensuring the server communicates using trusted and secure certificates. | ||
| TLSOpts: tlsOpts, | ||
| } | ||
|
|
||
| if secureMetrics { | ||
| // FilterProvider is used to protect the metrics endpoint with authn/authz. | ||
| // These configurations ensure that only authorized users and service accounts | ||
| // can access the metrics endpoint. The RBAC are configured in 'config/rbac/kustomization.yaml'. More info: | ||
| // https://pkg.go.dev/sigs.k8s.io/[email protected]/pkg/metrics/filters#WithAuthenticationAndAuthorization | ||
| metricsServerOptions.FilterProvider = filters.WithAuthenticationAndAuthorization | ||
| } | ||
|
|
||
| mgr, err := ctrl.NewManager(ctrl.GetConfigOrDie(), ctrl.Options{ | ||
| Scheme: scheme, | ||
| // Metrics endpoint is enabled in 'config/default/kustomization.yaml'. The Metrics options configure the server. | ||
| // More info: | ||
| // - https://pkg.go.dev/sigs.k8s.io/[email protected]/pkg/metrics/server | ||
| // - https://book.kubebuilder.io/reference/metrics.html | ||
| Metrics: metricsserver.Options{ | ||
| BindAddress: metricsAddr, | ||
| SecureServing: secureMetrics, | ||
| // TODO(user): TLSOpts is used to allow configuring the TLS config used for the server. If certificates are | ||
| // not provided, self-signed certificates will be generated by default. This option is not recommended for | ||
| // production environments as self-signed certificates do not offer the same level of trust and security | ||
| // as certificates issued by a trusted Certificate Authority (CA). The primary risk is potentially allowing | ||
| // unauthorized access to sensitive metrics data. Consider replacing with CertDir, CertName, and KeyName | ||
| // to provide certificates, ensuring the server communicates using trusted and secure certificates. | ||
| TLSOpts: tlsOpts, | ||
| // FilterProvider is used to protect the metrics endpoint with authn/authz. | ||
| // These configurations ensure that only authorized users and service accounts | ||
| // can access the metrics endpoint. The RBAC are configured in 'config/rbac/kustomization.yaml'. More info: | ||
| // https://pkg.go.dev/sigs.k8s.io/[email protected]/pkg/metrics/filters#WithAuthenticationAndAuthorization | ||
| FilterProvider: filters.WithAuthenticationAndAuthorization, | ||
| }, | ||
| Scheme: scheme, | ||
| Metrics: metricsServerOptions, | ||
| WebhookServer: webhookServer, | ||
| HealthProbeBindAddress: probeAddr, | ||
| LeaderElection: enableLeaderElection, | ||
|
|
||