diff --git a/Dockerfile b/Dockerfile index ab56c91..1428de9 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,7 @@ # Build the manager binary -FROM registry.access.redhat.com/ubi9/go-toolset:1.19.10-4 as builder +# For more details and updates, refer to +# https://catalog.redhat.com/software/containers/ubi9/go-toolset/61e5c00b4ec9945c18787690 +FROM registry.access.redhat.com/ubi9/go-toolset:1.19.13-4.1697647145 as builder # Copy the Go Modules manifests COPY go.mod go.mod @@ -17,9 +19,10 @@ COPY controllers/ controllers/ # Build RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o manager main.go -# Use distroless as minimal base image to package the manager binary -# Refer to https://github.com/GoogleContainerTools/distroless for more details -FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2-691 +# Use ubi-minimal as minimal base image to package the manager binary +# For more details and updates, refer to +# https://catalog.redhat.com/software/containers/ubi9/ubi-minimal/615bd9b4075b022acc111bf5 +FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2-750.1697625013 WORKDIR / COPY --from=builder /opt/app-root/src/manager / USER 65532:65532 diff --git a/config/default/manager_auth_proxy_patch.yaml b/config/default/manager_auth_proxy_patch.yaml index 275b939..6813de2 100644 --- a/config/default/manager_auth_proxy_patch.yaml +++ b/config/default/manager_auth_proxy_patch.yaml @@ -16,8 +16,9 @@ spec: drop: - "ALL" readOnlyRootFilesystem: true - image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.0 + image: gcr.io/kubebuilder/kube-rbac-proxy:v0.15.0 args: + - "--http2-disable" - "--secure-listen-address=0.0.0.0:8443" - "--upstream=http://127.0.0.1:8080/" - "--logtostderr=true"