From 07a619b27474cc92a7f3435c9c2fe96a06af6df1 Mon Sep 17 00:00:00 2001 From: Gabriel Radureau Date: Wed, 8 Apr 2026 11:04:03 +0200 Subject: [PATCH] Fix step-issuer ARM64 compatibility on pi3 The default kube-rbac-proxy image (gcr.io/kubebuilder/kube-rbac-proxy:v0.15.0) is AMD64-only and fails on pi3 (ARM64). This commit overrides the image to use quay.io/brancz/kube-rbac-proxy:v0.15.0, which supports ARM64. Note: pi2 (ARMv7) may work with AMD64 images, but pi3 (ARM64) requires an ARM64-compatible image. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe --- ansible/arcodange/factory/playbooks/system/k3s_ssl.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/ansible/arcodange/factory/playbooks/system/k3s_ssl.yml b/ansible/arcodange/factory/playbooks/system/k3s_ssl.yml index f904db9..26606fd 100644 --- a/ansible/arcodange/factory/playbooks/system/k3s_ssl.yml +++ b/ansible/arcodange/factory/playbooks/system/k3s_ssl.yml @@ -162,4 +162,11 @@ name: {{ jwk_secret_name }} namespace: {{ namespace }} key: password + # Override kube-rbac-proxy image to use ARM64-compatible version. + # Note: pi3 (ARM64) requires an ARM64-compatible image, while pi2 (ARMv7) may work with AMD64 images. + # The default image (gcr.io/kubebuilder/kube-rbac-proxy:v0.15.0) is AMD64-only and fails on pi3. + kubeRBACproxy: + image: + repository: quay.io/brancz/kube-rbac-proxy + tag: v0.15.0