Krzysztof Ostrowski

Hm, as I am working on that, I am surprised that it claims that we have `go.opentelemetry.io/contrib/instrumentation v0.20.0`. We have already a replace directive to bump it to v0.44.0. So...

The CVEs are related to the HTTP/2 issue, right? We added the capability to disable HTTP/2.

Oh, thanks for the hint. I will check them out!

https://github.com/brancz/kube-rbac-proxy/pull/276, should solve it.

Hi, I will take a look, but CVEs in dependencies that are not within the code path of kube-rbac-proxy are not a priority. kube-rbac-proxy doesn't use any instrumentation itself. I...

Should be fixed with: https://github.com/brancz/kube-rbac-proxy/pull/287

Should be fixed. If not, please reopen. #298

Hi, @alebedev87. We are not eager to push for new features, until we get the repository accepted into k8s/sig-auth.

@alebedev87, I synced with the stakeholders and we would like to pause any new feature as long as we don't get accepted by k8s' sig-auth. I would keep this kind...

Sorry, I was busy. I will try to take a look this week.