Skip to content

fix: migrate kube-rbac-proxy image from deprecated gcr.io to registry.k8s.io#219

Open
amit-darji wants to merge 1 commit intotemporalio:mainfrom
amit-darji:patch-1
Open

fix: migrate kube-rbac-proxy image from deprecated gcr.io to registry.k8s.io#219
amit-darji wants to merge 1 commit intotemporalio:mainfrom
amit-darji:patch-1

Conversation

@amit-darji
Copy link

@amit-darji amit-darji commented Mar 7, 2026

What was changed

Updated the kube-rbac-proxy sidecar image reference in the Helm chart from:

gcr.io/kubebuilder/kube-rbac-proxy

to:

registry.k8s.io/kubebuilder/kube-rbac-proxy

Why?

The gcr.io registry is being discontinued. The kube-rbac-proxy project has officially announced the deprecation of gcr.io/kubebuilder/kube-rbac-proxy in favour of registry.k8s.io — the community-maintained Kubernetes image registry.
Continuing to use the old registry risks image pull failures on new installs or pod restarts once the registry is fully decommissioned, leading to silent deployment breakages.
Ref: https://github.com/kubernetes-sigs/kubebuilder/blob/master/designs/discontinue_usage_of_kube_rbac_proxy.md

Checklist

  1. Closes

  2. How was this tested:

  • Verified image is pullable from registry.k8s.io/kubebuilder/kube-rbac-proxy
  • Ran helm template to confirm chart renders correctly with the updated image reference
  • Deployed to a test cluster and confirmed kube-rbac-proxy sidecar starts successfully
  1. Any docs updates needed?

This is an internal image reference change with no user-facing configuration impact.

@amit-darji amit-darji requested review from a team and jlegrone as code owners March 7, 2026 09:20
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@gabriel-yahav
Copy link

@amit-darji
Thanks !
Will it be possible, once the PR is merge, to release a version of the chart with the fix ?
It affects my current running pods as I'm getting ImagePullBackOff at the moment.

@carlydf
Copy link
Collaborator

carlydf commented Mar 8, 2026

@gabriel-yahav, yes we will do a release once this is fixed! Sorry this slipped through the cracks. I also added a new CI check to make sure image-pull errors won't happen again with this chart.

@amit-darji I can merge this as soon as you sign the CLA

@kianjones9
Copy link
Contributor

thanks for fixing!

@jinjiaKarl
Copy link

Thanks for fixing it!

@nikoul
Copy link

nikoul commented Mar 9, 2026

Thank you, I have the same ImagePullBackOff issue other people described.

@Shivs11
Copy link
Member

Shivs11 commented Mar 9, 2026

@amit-darji - would be awesome if you can sign the CLA! we would love to get this in before @carlydf's #222 gets in!

carlydf added a commit that referenced this pull request Mar 9, 2026
<!--- Note to EXTERNAL Contributors -->
<!-- Thanks for opening a PR! 
If it is a significant code change, please **make sure there is an open
issue** for this.
We work best with you when we have accepted the idea first before you
code. -->

<!--- For ALL Contributors 👇 -->

## What was changed
Uses crane to verify all container image references rendered by the Helm
chart exist in their registries, catching broken or deprecated registry
paths (e.g. gcr.io deprecation) on every PR and weekly.

## Why?
We missed an un-pullable image (maintainer changed the image registry)
which needed to be fixed by #219 . Don't want that to happen again

## Checklist
<!--- add/delete as needed --->

1. Closes <!-- add issue number here -->

2. How was this tested:
<!--- Please describe how you tested your changes/how we can test them
-->

3. Any docs updates needed?
<!--- update README if applicable
      or point out where to update docs.temporal.io -->

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants