Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update CRD specs to use apiextensions v1 #712

Merged

Conversation

LucasRoesler
Copy link
Member

Description

  • Update helm chart RBAC templates to use the rbac.authorization.k8s.io/v1 group. The beta groups will be removed in k8s 1.20
  • Update CRD artifacts using the lastest generator: ./hack/update-crds.sh
  • Update helm chart yaml to use the new CRD specs that live in the apiextensions.k8s.io/v1 group. The beta groups will be removed in k8s 1.19

Motivation and Context

How Has This Been Tested?

Test the installation via

$ kind create cluster
$ helm upgrade openfaas --install chart/openfaas/ \
    --namespace openfaas \
    --set basic_auth=false \
    --set functionNamespace=openfaas-fn
Release "openfaas" does not exist. Installing it now.
NAME: openfaas
LAST DEPLOYED: Sat Nov 14 17:11:59 2020
NAMESPACE: openfaas
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
To verify that openfaas has started, run:

  kubectl -n openfaas get deployments -l "release=openfaas, app=openfaas"
$ kubectl api-versions | grep openfaas
openfaas.com/v1
$ kubectl get crds
NAME                    CREATED AT
profiles.openfaas.com   2020-11-14T16:11:59Z

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

  • My code follows the code style of this project.
  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.
  • I've read the CONTRIBUTION guide
  • I have signed-off my commits with git commit -s
  • I have added tests to cover my changes.
  • All new and existing tests passed.

@@ -377,6 +377,11 @@ It is recommended that you install OpenFaaS to ARM machines [using k3sup](https:

See also: [Kubernetes and Raspberry Pi in the docs](https://docs.openfaas.com/deployment/kubernetes)

## Kubernetes versioning
This Helm chart currently supports version 1.17+
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is 1.17 the absolute minimum version for v1?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I may have read the changlong incorrectly, but see #709 (comment)

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Although, I suspect that that API group isn't actually following the deprecation guidelines, since the v1 rbac group is documented in 1.15 https://v1-15.docs.kubernetes.io/docs/reference/access-authn-authz/rbac/

image

I will update this to 1.16+ since that is needed for the CRD update

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sounds good to me. 1.17 may be too aggressive for some users.

**What**
* Update helm chart RBAC templates to use the `rbac.authorization.k8s.io/v1` group. The beta groups will be removed in k8s 1.20
* Update CRD artifacts using the lastest generator: `./hack/update-crds.sh`
* Update helm chart yaml to use the new CRD specs that live in the `apiextensions.k8s.io/v1` group. The beta groups will be removed in k8s 1.19
* Update Chart readme with a section about service meshes

Test the installation via

```sh
$ kind create cluster
$ helm upgrade openfaas --install chart/openfaas/ \
    --namespace openfaas \
    --set basic_auth=false \
    --set functionNamespace=openfaas-fn
Release "openfaas" does not exist. Installing it now.
NAME: openfaas
LAST DEPLOYED: Sat Nov 14 17:11:59 2020
NAMESPACE: openfaas
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
To verify that openfaas has started, run:

  kubectl -n openfaas get deployments -l "release=openfaas, app=openfaas"
$ kubectl api-versions | grep openfaas
openfaas.com/v1
$ kubectl get crds
NAME                    CREATED AT
profiles.openfaas.com   2020-11-14T16:11:59Z
```

Signed-off-by: Lucas Roesler <roesler.lucas@gmail.com>
Copy link
Member

@alexellis alexellis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved. Thank you for the changes.

@@ -299,6 +299,13 @@ Some configurations in combination with client-side KeepAlive settings may becau

If you require TLS/SSL then please make use of an IngressController. A full guide is provided to [enable TLS for the OpenFaaS Gateway using cert-manager and Let's Encrypt](https://docs.openfaas.com/reference/ssl/kubernetes-with-cert-manager/).

### Service meshes
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Happy with this. Thank you

@@ -377,6 +385,11 @@ It is recommended that you install OpenFaaS to ARM machines [using k3sup](https:

See also: [Kubernetes and Raspberry Pi in the docs](https://docs.openfaas.com/deployment/kubernetes)

## Kubernetes versioning
This Helm chart currently supports version 1.16+
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@alexellis alexellis merged commit 269dbb9 into openfaas:master Nov 15, 2020
Copy link
Member

@alexellis alexellis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Leaving comments

@LucasRoesler LucasRoesler deleted the feature-update-crd-api-groups branch September 4, 2023 10:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Migrate CRDs to v1 namespace
2 participants