New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove rbac proxy #1030
Remove rbac proxy #1030
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
So to lazy to find which version of operator-sdk that I should be using to generate the bundle.
I'm a bit unsure if we should remove some stuff from the current bundle dir as well. Seems to be some remaning files.
port: 8443 | ||
protocol: TCP | ||
targetPort: https | ||
- name: metrics |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I added a new metrics service for the bundle.
@@ -24,6 +24,10 @@ bases: | |||
# [PROMETHEUS] To enable prometheus monitor, uncomment all sections with 'PROMETHEUS'. | |||
#- ../prometheus | |||
|
|||
resources: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Adding it as a resource
@@ -25,36 +25,42 @@ spec: | |||
securityContext: | |||
runAsNonRoot: true | |||
containers: | |||
- args: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Indentation, please ignore
config/manager/manager.yaml
Outdated
- --health-probe-bind-address=:8081 | ||
- --metrics-bind-address=127.0.0.1:9090 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added the port binding directly to manager.yaml
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
will 127.0.0.1 not make the metrics only available to the pod itself but not externally?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
why not 0.0.0.0:9090
imagePullPolicy: Always | ||
securityContext: | ||
allowPrivilegeEscalation: false | ||
ports: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added port
Thanks @NissesSenap I'll verify the metrics access and then get this merged. |
fixes #1017 and #1020