Comments (6)
In the context of the original image, yes, there is just one, but a lot of organizations repackage the project AFAIK.
Also I would bind myself to an image / distro. I am really hesitant about that. I gave the example of mkcert
as I was curious how they manage different possibilities.
E.g. bitnami uses mini-debian? kubebuilder seems to do some repackging too? Red Hat uses a RHEL image.
I can reach out for a second opinion to other maintainers.
from kube-rbac-proxy.
Wouldn't it be better to specify --oidc-ca-file=/etc/ssl/certs/ca-certificates.crt
?
This is also a very specific path: There are at least 4 different paths in Linux distributions.
I am not completely convinced that the added complexity is worth it, but I might be missing context.
from kube-rbac-proxy.
The default
location is based on the base image gcr.io/distroless/static:nonroot
. I guess mkcert
needs to consider all those options as it shall run/support different env. In the case here, the base image is not a moving part or at least we know the exact env on which the kube-rbac-proxy
needs to run. It can check a set of 'default' locations but we always know which one will be used at the end. IMHO it is a fair trade off.
from kube-rbac-proxy.
Yep it is a valid case. Different distributions manage the case differently. Just for a reference here are some links:
- RedHat
- Debian
- openSuSE
Probably these locations can also change with new releases, but still a set of default locations can be compiled, taking care for the majority of the cases. No objections at all.
from kube-rbac-proxy.
I talked to @s-urbaniak and he wasn't convinced either. I hope you are not disappointed.
Thx for your frequent contributions.
from kube-rbac-proxy.
@ibihim No not at all. The project owners/maintainers decide on if or how to solve cases.
from kube-rbac-proxy.
Related Issues (20)
- Bump golang version HOT 2
- Sig-Auth Pre-Acceptance 2nd Review HOT 10
- Cut a new release with golang version 1.20 HOT 3
- Add livenessProbe support for kube-rbac-proxy HOT 2
- Twistlock reporting CVE PRISMA-2022-0227 HOT 2
- kube-rbac-proxy failing authentication and authorization intermittently with error: HOT 2
- Option to output the logs as JSON HOT 1
- vulnerabilities on kube-rbac-proxy v0.14.2 HOT 2
- Image of kube-rbac-proxy new version (v0.14.3) wasn't pushed to quay.io repository HOT 4
- vulnerabilities on kube-rbac-proxy v0.14.4 HOT 6
- Can they be friends --ignore-path and --allow-path? HOT 3
- CVE high security vulnerabilities found in image: quay.io/brancz/kube-rbac-proxy:v0.15.0 HOT 14
- Compability with new K8S versions HOT 2
- Can kube rbac proxy be used for kubeedge? HOT 3
- CVE vulnerabilities found for golang-runtime:1.20.4 (usr/local/bin/kube-rbac-proxy) HOT 3
- Multi Arch Image pulled from quay.io does not work in arm64/graviton nodes HOT 3
- 0.16 Image does not appear to be available HOT 3
- CVE-2023-47108 "Vulnerability detected affecting otelgrpc v0.42.0" found in kube-rbac-proxy v0.16.0 HOT 7
- [HELP] Trying to expose Hubble UI with kube-rbac-proxy HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kube-rbac-proxy.