Skip to content

Fix: Pin injected AuthBridge images to cortex v0.7.0-alpha.10 #535

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cwiklik merged 2 commits into from
Sep 15, 2026
Merged

Fix: Pin injected AuthBridge images to cortex v0.7.0-alpha.10 #535

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0b01972
fix: Pin injected AuthBridge images to cortex v0.7.0-alpha.10
cwiklik Sep 15, 2026
eeb881a
Docs: Realign the e2e README with the four images actually loaded
cwiklik Sep 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions charts/operator/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -244,10 +244,10 @@ featureGates:
# proxy-sidecar / lite mode (always-on enforce-redirect egress capture).
defaults:
images:
envoyProxy: ghcr.io/rossoctl/cortex/authbridge-envoy:v0.7.0-alpha.3
authbridge: ghcr.io/rossoctl/cortex/authbridge:v0.7.0-alpha.3
authbridgeLite: ghcr.io/rossoctl/cortex/authbridge-lite:v0.7.0-alpha.3
proxyInit: ghcr.io/rossoctl/cortex/proxy-init:v0.7.0-alpha.3
envoyProxy: ghcr.io/rossoctl/cortex/authbridge-envoy:v0.7.0-alpha.10
authbridge: ghcr.io/rossoctl/cortex/authbridge:v0.7.0-alpha.10
authbridgeLite: ghcr.io/rossoctl/cortex/authbridge-lite:v0.7.0-alpha.10
proxyInit: ghcr.io/rossoctl/cortex/proxy-init:v0.7.0-alpha.10
pullPolicy: IfNotPresent

# Proxy settings
Expand Down
8 changes: 4 additions & 4 deletions operator/internal/webhook/config/defaults.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,18 +36,18 @@ func CompiledDefaults() *PlatformConfig {
// :latest on exactly the deploy paths the chart-layer pin doesn't cover.
// authbridge-envoy: combined image for envoy-sidecar mode
// (Envoy + ext_proc authbridge + spiffe-helper bundled).
EnvoyProxy: "ghcr.io/rossoctl/cortex/authbridge-envoy:v0.7.0-alpha.3",
EnvoyProxy: "ghcr.io/rossoctl/cortex/authbridge-envoy:v0.7.0-alpha.10",
// authbridge: combined image for proxy-sidecar mode (default
// deployment shape) — authbridge-proxy + spiffe-helper
// bundled, no Envoy, no gRPC.
AuthBridge: "ghcr.io/rossoctl/cortex/authbridge:v0.7.0-alpha.3",
AuthBridge: "ghcr.io/rossoctl/cortex/authbridge:v0.7.0-alpha.10",
// authbridge-lite: size-optimized variant for the "lite"
// mode. Same listener layout as AuthBridge but parsers
// (a2a/mcp/inference) are dropped.
AuthBridgeLite: "ghcr.io/rossoctl/cortex/authbridge-lite:v0.7.0-alpha.3",
AuthBridgeLite: "ghcr.io/rossoctl/cortex/authbridge-lite:v0.7.0-alpha.10",
// proxy-init: iptables init container, used by
// envoy-sidecar mode only.
ProxyInit: "ghcr.io/rossoctl/cortex/proxy-init:v0.7.0-alpha.3",
ProxyInit: "ghcr.io/rossoctl/cortex/proxy-init:v0.7.0-alpha.10",
PullPolicy: corev1.PullIfNotPresent,
},
Proxy: ProxyConfig{
Expand Down
2 changes: 1 addition & 1 deletion operator/test/e2e/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ End-to-end tests for the rossoctl-operator. The suite runs 25 specs:
- [kubectl](https://kubernetes.io/docs/tasks/tools/) — `brew install kubectl`
- Container runtime: **Docker** or **Podman**

The test suite auto-detects Docker vs Podman. No env vars needed. AuthBridge sidecar images (`authbridge-envoy`, `proxy-init`, `spiffe-helper`) are pulled from `ghcr.io/rossoctl/cortex` and loaded into Kind during setup.
The test suite auto-detects Docker vs Podman. No env vars needed. AuthBridge sidecar images (`authbridge-envoy`, `authbridge`, `authbridge-lite`, `proxy-init`) are pulled from `ghcr.io/rossoctl/cortex` and loaded into Kind during setup. `spiffe-helper` is not pulled separately — it is bundled into the combined `authbridge-envoy` and `authbridge` images.

## Run

Expand Down
8 changes: 4 additions & 4 deletions operator/test/e2e/e2e_suite_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,10 +66,10 @@ var (
// Keep tags in sync with charts/operator/values.yaml (defaults.images.*) so
// e2e exercises the images the chart actually ships, not :latest.
sidecarImages = []string{
"ghcr.io/rossoctl/cortex/authbridge-envoy:v0.7.0-alpha.3",
"ghcr.io/rossoctl/cortex/authbridge:v0.7.0-alpha.3",
"ghcr.io/rossoctl/cortex/authbridge-lite:v0.7.0-alpha.3",
"ghcr.io/rossoctl/cortex/proxy-init:v0.7.0-alpha.3",
"ghcr.io/rossoctl/cortex/authbridge-envoy:v0.7.0-alpha.10",
"ghcr.io/rossoctl/cortex/authbridge:v0.7.0-alpha.10",
"ghcr.io/rossoctl/cortex/authbridge-lite:v0.7.0-alpha.10",
"ghcr.io/rossoctl/cortex/proxy-init:v0.7.0-alpha.10",

@huang195 huang195 Sep 15, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit (pre-existing, and this PR is the natural place to fix it): operator/test/e2e/README.md:18 describes this list as pulling authbridge-envoy, proxy-init, and spiffe-helper — which no longer matches. spiffe-helper isn't pulled separately (it's bundled into the combined images, as config/defaults.go's own comments note), and authbridge and authbridge-lite are missing from the prose. Since the comment just above this list is what keeps it honest against values.yaml, worth realigning the README to the four images actually loaded.

}
)

Expand Down
Loading