From 2c1391082d40aa0d78695e34707a7b9ae4f31ba0 Mon Sep 17 00:00:00 2001 From: Grzegorz Grasza Date: Tue, 14 Apr 2026 11:36:38 +0200 Subject: [PATCH] [ipa] fix kube-rbac-proxy image pull failure The idm-operator-controller-manager pod has a kube-rbac-proxy sidecar container that references gcr.io/kubebuilder/kube-rbac- proxy:v0.5.0. This image is no longer available on gcr.io (Google Container Registry is being deprecated), causing ErrImagePull/ImagePullBackOff and preventing the Deployment from becoming Available. Replace with registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0 which is the current canonical location. Assisted-by: Claude Opus 4 (Anthropic) Change-Id: Idcbff92540f1e6b02463d1a704a80ed3906465e5 Signed-off-by: Grzegorz Grasza --- roles/ipa/tasks/run_ipa_setup.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/ipa/tasks/run_ipa_setup.yml b/roles/ipa/tasks/run_ipa_setup.yml index d3e7739c1..7ae2b3f6d 100644 --- a/roles/ipa/tasks/run_ipa_setup.yml +++ b/roles/ipa/tasks/run_ipa_setup.yml @@ -65,6 +65,7 @@ oc create -f config/rbac/scc.yaml (cd config/default && kustomize edit set namespace "{{ cifmw_ipa_namespace }}") (cd config/manager && kustomize edit set image controller=quay.io/freeipa/freeipa-operator:nightly) + (cd config/default && kustomize edit set image gcr.io/kubebuilder/kube-rbac-proxy=registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0) kustomize build config/default | kubectl apply -f - - name: Wait for it to be deployed