Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch away from authProxy in favor of NetworkPolicies (Kubebuilder deprecation) #440

Open
frittentheke opened this issue Aug 13, 2024 · 1 comment
Labels
enhancement New feature or request maintenance

Comments

@frittentheke
Copy link

Feature Description

Kubebuilder is discontinuing the use of Kube RBAC Proxy in favor of NetworkPolicies, see kubernetes-sigs/kubebuilder#3871

Suggested Solution (optional)

When switching to creating network policies, it might

Already existing or connected issues / PRs (optional)

While not immediately related to using a NetworkPolicy to protect the /metrics endpoints the same endpoint is also used to control (e.g. start / stop) the k6 instances. It might make sense to also add a NetworkPolicy protecting the runner pods from being contacted by any other source but the operator.

Related issues:

@frittentheke frittentheke added the enhancement New feature or request label Aug 13, 2024
@yorugac
Copy link
Collaborator

yorugac commented Aug 20, 2024

Hi @frittentheke, thanks for the issue! ATM, I hope this might be resolved with #235 actually 😄
For now, we can keep this open: let's see how it shapes up in the future 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request maintenance
Projects
None yet
Development

No branches or pull requests

2 participants