Add missing changes for rbac-proxy and remove unused code (#583)

Signed-off-by: Jorge Turrado <[email protected]> Signed-off-by: Jorge Turrado <[email protected]>
kedacore · Jan 25, 2023 · 30108da · 30108da
1 parent 3f326b1
commit 30108da
Show file tree

Hide file tree

Showing 37 changed files with 14 additions and 746 deletions.
diff --git a/config/default/kustomize-config/metadataLabelTransformer.yaml b/config/default/kustomize-config/metadataLabelTransformer.yaml
@@ -3,7 +3,7 @@ kind: LabelTransformer
 metadata:
   name: metadataLabelTransformer
 labels:
-  app.kubernetes.io/version: e2e-test
+  app.kubernetes.io/version: main
   app.kubernetes.io/part-of: keda-http-add-on
 fieldSpecs:
 - path: metadata/labels

diff --git a/operator/config/rbac/auth_proxy_role.yaml → config/operator/auth_proxy_role.yaml b/operator/config/rbac/auth_proxy_role.yaml → config/operator/auth_proxy_role.yaml
diff --git a/.../config/rbac/auth_proxy_role_binding.yaml → config/operator/auth_proxy_role_binding.yaml b/.../config/rbac/auth_proxy_role_binding.yaml → config/operator/auth_proxy_role_binding.yaml
@@ -8,5 +8,5 @@ roleRef:
   name: proxy-role
 subjects:
 - kind: ServiceAccount
-  name: default
-  namespace: system
+  name: keda-http-add-on
+  namespace: keda
diff --git a/config/operator/kustomization.yaml b/config/operator/kustomization.yaml
@@ -1,4 +1,6 @@
 resources:
+- auth_proxy_role_binding.yaml
+- auth_proxy_role.yaml
 - operator.yaml
 - service-admin.yaml
 - service-metrics.yaml

diff --git a/config/operator/operator.yaml b/config/operator/operator.yaml
@@ -27,12 +27,17 @@ spec:
       serviceAccountName: keda-http-add-on
       containers:
         - name: kube-rbac-proxy
-          image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+          image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.0
           args:
           - --secure-listen-address=0.0.0.0:8443
           - --upstream=http://127.0.0.1:8080/
           - --logtostderr=true
           - --v=10
+          ports:
+          - containerPort: 8443
+            name: https
+          securityContext:
+            runAsNonRoot: true
           resources:
             requests:
               cpu: 10m

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -9,8 +9,10 @@ rules:
   - ""
   resources:
   - configmaps
+  - configmaps/status
   - endpoint
   - endpoints
+  - events
   - pods
   - services
   verbs:

diff --git a/operator/hack/boilerplate.go.txt → hack/boilerplate.go.txt b/operator/hack/boilerplate.go.txt → hack/boilerplate.go.txt
diff --git a/operator/config/certmanager/certificate.yaml b/operator/config/certmanager/certificate.yaml
diff --git a/operator/config/certmanager/kustomization.yaml b/operator/config/certmanager/kustomization.yaml
diff --git a/operator/config/certmanager/kustomizeconfig.yaml b/operator/config/certmanager/kustomizeconfig.yaml
diff --git a/operator/config/crd/bases/http.keda.sh_httpscaledobjects.yaml b/operator/config/crd/bases/http.keda.sh_httpscaledobjects.yaml
diff --git a/operator/config/crd/kustomization.yaml b/operator/config/crd/kustomization.yaml
diff --git a/operator/config/crd/kustomizeconfig.yaml b/operator/config/crd/kustomizeconfig.yaml
diff --git a/operator/config/crd/patches/cainjection_in_scaledobjects.yaml b/operator/config/crd/patches/cainjection_in_scaledobjects.yaml
diff --git a/operator/config/crd/patches/webhook_in_scaledobjects.yaml b/operator/config/crd/patches/webhook_in_scaledobjects.yaml