ROX-20542: disable http/2 in operator kube-rbac-proxy to mitigate CVE…

…-2023-44487 (#1425)
stackrox · Oct 31, 2023 · 36b9ae1 · 36b9ae1
1 parent 4fe86a6
commit 36b9ae1
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/fleetshard/pkg/central/charts/data/rhacs-operator/templates/rhacs-operator-deployment.yaml b/fleetshard/pkg/central/charts/data/rhacs-operator/templates/rhacs-operator-deployment.yaml
@@ -30,6 +30,7 @@ spec:
       containers:
         - args:
             - --secure-listen-address=0.0.0.0:8443
+            - --http2-disable
             - --upstream=http://127.0.0.1:8080/
             - --logtostderr=true
             - --v=0
@@ -40,7 +41,7 @@ spec:
               value: quay.io/rhacs-eng
             - name: OPERATOR_CONDITION_NAME
               value: rhacs-operator.v3.74.0
-          image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.0
+          image: registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.13
           imagePullPolicy: IfNotPresent
           name: kube-rbac-proxy
           ports: