-
Notifications
You must be signed in to change notification settings - Fork 457
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
refactor clusterrole for kube-ovn #2833
Conversation
|
|
|
|
|
- endpoints | ||
- statefulsets | ||
- daemonsets | ||
- deployments |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
create/delete/update/patch 应该都不需要
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
endpoints 更新中,需要对 services 做 update 操作
vpc-nat-gw pod 是 sts 部署,需要 statefulsets 的权限
load-balancer service,创建deployment pod,需要deployment 相关权限
vpc switch-lb-rule 创建svc,并且创建endpoints,需要 endpoints 相关权限
基于以上考虑,这些参数放在一起,没有再细分
|
What type of this PR
原 sa 拆分为四个,分别为 ovn/ovn-ovs/kube-ovn-cni/kube-ovn-app
其中 ovn,考虑兼容性,为保留的原 sa 的名称,kube-onv-controller 绑定。同时,speaker、webhook 这种可以保证正常启动。
ovn-ovs, 为 ovn-central 和 ovs-ovn pod 启动,绑定的 serviceAccount
kube-ovn-cni,为 kube-ovn-cni 绑定使用
kube-ovn-app,为 kube-ovn-pinger 和 kube-ovn-monitor 绑定使用
Which issue(s) this PR fixes:
Fixes #2723
WHAT
🤖 Generated by Copilot at a546417
Improved the reliability of the e2e test for ovn-vpc-nat-gw by adding a readiness check for ovn eip objects.
🤖 Generated by Copilot at a546417
HOW
🤖 Generated by Copilot at a546417
ovnEipClient.CreateSync
withovnEipClient.Create
and await.PollImmediate
block to check theReady
status of the ovn eip object after creating it (link)wait
package to use thewait.PollImmediate
function (link)