chore: update kube-rbac-proxy args to disable http2 (#614)

jaideepr97 · varshab1210 · svghadi · web-flow · commit 15e270c9379f · 2023-10-31T14:27:07.000Z
* update to go 1.20; disable http2 for servers; upgrade k8s packages Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> * remove secure serving option for metrics Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> * Changing go version for CI Signed-off-by: varshab1210 <varshab1210@gmail.com> * Disable http/2 on webhook server Signed-off-by: Siddhesh Ghadi <sghadi1203@gmail.com> * Revert "Disable http/2 on webhook server" This reverts commit 6cff7f8. Previous changes work as expected. Signed-off-by: Siddhesh Ghadi <sghadi1203@gmail.com> * consume keycloak segmentation fault fix Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> * update kube-rbac-proxy image Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> * undo makefile changes Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> * disable http2 for kube-rbac-proxy Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> * switch to floating tag for kube-rbac-proxy image Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> * consume argocd-operator commit Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> * remove http2 disable command line arg Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> * disable http2 in kube-rbac-proxy container Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> --------- Signed-off-by: Jaideep Rao <jaideep.r97@gmail.com> Signed-off-by: varshab1210 <varshab1210@gmail.com> Signed-off-by: Siddhesh Ghadi <sghadi1203@gmail.com> Co-authored-by: varshab1210 <varshab1210@gmail.com> Co-authored-by: Siddhesh Ghadi <sghadi1203@gmail.com>
diff --git a/bundle/manifests/gitops-operator.clusterserviceversion.yaml b/bundle/manifests/gitops-operator.clusterserviceversion.yaml
@@ -931,6 +931,7 @@ spec:
                 - --tls-private-key-file=/etc/tls/private/tls.key
                 - --logtostderr=true
                 - --allow-paths=/metrics
+                - --http2-disable
                 image: registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.13
                 name: kube-rbac-proxy
                 ports:
diff --git a/config/default/manager_auth_proxy_patch.yaml b/config/default/manager_auth_proxy_patch.yaml
@@ -21,6 +21,7 @@ spec:
         - --tls-private-key-file=/etc/tls/private/tls.key
         - --logtostderr=true
         - --allow-paths=/metrics
+        - --http2-disable
         ports:
         - containerPort: 8443
           name: metrics
