Krzysztof Ostrowski

Does it not? I assumed that k8s fixed it in v1.29 https://github.com/kubernetes/kubernetes/blob/master/go.mod#L68 Curious why upstream doesn't fix it... ... Anyway, I will try to bump it then by hand. It...

Should be fixed. If not, please reopen. #298

We are currently very busy. I will try to discuss this with other maintainers and do my research, why it was made the way it is. Most probably (beware, I...

Yes, the digest part is pretty odd, I see it here too: [kube-rbac-proxy on quay.io](https://quay.io/repository/brancz/kube-rbac-proxy?tab=tags&tag=latest). I didn't set up the pipelines, but from what I see in the [Makefile](https://github.com/brancz/kube-rbac-proxy/blob/master/Makefile#L61-L63) the...

So you have a requirement to have a multi arch image? As it is open source, you can contribute to the project.

Sorry, I was busy. I will try to take a look this week.

I like that you moved transport-related code pieces to `transport.go`... ... but I am not quite convinced that unverified certs are a good thing or better than unencrypted traffic. If...

Hi, this commit that is merged into kube-rbac-proxy enables to specify the same header several times and all of them should be taken into consideration: https://github.com/brancz/kube-rbac-proxy/pull/171/commits/9fd649a785d49c2dba34a920e857c11a7a95ce99 Is this enough to...

Thx for reporting this to us. We will create an update. Most of the times the CVEs don't impact us directly, as we don't use those code paths.

Those are indirect dependencies. I would need to bump k8s.io, which would lead to a potential err on everyone using deprecated flags. I need to check how to resolve this.