Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug 1912409: Fix flow schema deployment #920

Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
37 changes: 37 additions & 0 deletions bindata/network/ovn-kubernetes/007-flowschema.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
apiVersion: flowcontrol.apiserver.k8s.io/v1alpha1
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this must not use v1alpha1. v1alpha1 is subject to going away. Please switch to v1beta1 asap.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK, I will file a PR momentarily for that. Thanks for letting us now

Copy link
Contributor

@tkashem tkashem Jan 7, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@alexanderConstantinescu based on the discussion with @sttts we should leave the version to v1alpha1 for 4.7. We should set the version to v1beta1 in 4.8.
Please see https://bugzilla.redhat.com/show_bug.cgi?id=1913399#c1

kind: FlowSchema
metadata:
name: openshift-ovn-kubernetes
annotations:
include.release.openshift.io/self-managed-high-availability: "true"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This annotation only makes sense for things in manifests/ (so should be removed both here and from the sdn one)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK, will change.

spec:
distinguisherMethod:
type: ByUser
matchingPrecedence: 500
priorityLevelConfiguration:
name: system
rules:
- nonResourceRules:
- nonResourceURLs:
- '*'
verbs:
- '*'
resourceRules:
- apiGroups:
- '*'
clusterScope: true
namespaces:
- '*'
resources:
- '*'
verbs:
- '*'
subjects:
- kind: ServiceAccount
serviceAccount:
name: ovn-kubernetes-controller
namespace: openshift-ovn-kubernetes
- kind: ServiceAccount
serviceAccount:
name: ovn-kubernetes-node
namespace: openshift-ovn-kubernetes