Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update cluster role permissions to work with MetalLB 0.13.2+ #390

Merged
merged 1 commit into from
Mar 9, 2023

Conversation

ctreatma
Copy link
Contributor

@ctreatma ctreatma commented Mar 8, 2023

This updates the ClusterRole permissions in the deploy directory to allow CPEM to manage the CRDs used by MetalLB 0.13.2+.

I've tested this against a cluster built with equinix-labs/terraform-equinix-kubernetes-cluster, and was able to confirm that:

  • Both helm install ... deploy/chart and kubectl apply -f deploy/template/deployment.yaml succeed
  • With the updated permissions, CPEM is able to read & update MetalLB CRDs

After running into persistent cluster creation issues, switched to using cluster-api with a minikube-on-podman management cluster and was able to successfully get MetalLB to assign the CPEM-provisioned IP to a load balancer:

$ kubectl get svc
NAME         TYPE           CLUSTER-IP      EXTERNAL-IP      PORT(S)        AGE
kubernetes   ClusterIP      172.26.0.1      <none>           443/TCP        37m
nginx        LoadBalancer   172.26.78.247   147.28.154.166   80:32699/TCP   21m

Fixes #388

Fixes #388

Signed-off-by: Charles Treatman <ctreatman@equinix.com>
@ctreatma ctreatma marked this pull request as ready for review March 8, 2023 21:47
@cprivitere cprivitere merged commit a36a014 into main Mar 9, 2023
@cprivitere cprivitere deleted the service-account-permissions branch March 9, 2023 22:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[MetalLB] RBAC not allowing CPEM to work with metallb.io resources
2 participants