Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: add fleet networking rules #203

Merged
merged 5 commits into from
Jul 29, 2022

Conversation

mainred
Copy link
Member

@mainred mainred commented Jul 28, 2022

Description of your changes

  1. add fleet-networking resources rule to serviceaccount deployed for the joined member cluster
  2. use commit-hash as the default image version. This fix the issue that we always rewrite v0.1.0 image version whenever we push images.

I have:

  • Run make reviewable to ensure this PR is ready for review.

How has this code been tested

Special notes for your reviewer

APIGroups: []string{""},
Resources: []string{"events"},
}
FleetNetworkRule = rbacv1.PolicyRule{
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ryanzhang-oss , I did not add work api here because we are reusing module path the origin upstream sigs.k8s.io/work-api instead of like go.goms.io/work-api?

https://github.com/Azure/k8s-work-api/blob/v0.1.0/go.mod

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sure, I will add that later.

Makefile Outdated
else
HUB_AGENT_IMAGE_VERSION ?= $(TAG)
MEMBER_AGENT_IMAGE_VERSION ?= $(TAG)
REFRESH_TOKEN_IMAGE_VERSION ?= $(TAG)
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think we have the case to publish images with different versions at the same time.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

not her but might be needed in the publish CI

Copy link
Contributor

@ryanzhang-oss ryanzhang-oss left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it seems that we didn't change the publish image Action?

APIGroups: []string{""},
Resources: []string{"events"},
}
FleetNetworkRule = rbacv1.PolicyRule{
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sure, I will add that later.

Makefile Outdated
else
HUB_AGENT_IMAGE_VERSION ?= $(TAG)
MEMBER_AGENT_IMAGE_VERSION ?= $(TAG)
REFRESH_TOKEN_IMAGE_VERSION ?= $(TAG)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

not her but might be needed in the publish CI

Makefile Outdated Show resolved Hide resolved
Makefile Outdated
@@ -1,11 +1,15 @@
REGISTRY ?= ghcr.io
KIND_IMAGE ?= kindest/node:v1.23.3
ifndef TAG
HUB_AGENT_IMAGE_VERSION ?= $(shell git rev-parse --short=7 HEAD)
else
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we need an else here?
it seems that the below needs to be set in any case

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removed else

@mainred mainred force-pushed the add-fleet-networking-rules branch from cb08336 to 380b311 Compare July 29, 2022 01:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants