Join GitHub today
GitHub is home to over 31 million developers working together to host and review code, manage projects, and build software together.Sign up
Fix service account to profile conversion #1012
Service account kube-controller compares service account (stored as profile) object from cache with object from etcd datastore. If these two objects are different, kube-controller will update etcd datastore. Current conversion from k8s service account to a profile resource use an empty map if there is no labelToApply. However, etcd would store empty map to nil. Hence object from cache (empty map) is regarded as different with object read from etcd (nil map). kube-controller will keep updating etcd datastore which is not necessary.
Namespace object does not have this issue since its' conversion set label to nil if there is no labelToApply.