Update the Controller Manager
By default, config/default/manager_auth_proxy_patch.yaml uses an uncertified kubebuilder image. In order to pass certification, it'll need to be changed to the certified image.
Edit the controller manager
vi config/default/manager_auth_proxy_patch.yaml
Replace the image with the certified version, registry.redhat.io/openshift4/ose-kube-rbac-proxy
# This patch inject a sidecar container which is a HTTP proxy for the
# controller manager, it performs RBAC authorization against the Kubernetes API using SubjectAccessReviews.
apiVersion: apps/v1
kind: Deployment
metadata:
name: controller-manager
namespace: system
spec:
template:
spec:
containers:
- name: kube-rbac-proxy
#use this certified image
image: registry.redhat.io/openshift4/ose-kube-rbac-proxy:latest
Copy link