kubernetes + podchaperon
This commit is contained in:
@@ -98,8 +98,8 @@ func (k *KubernetesService) CreateNamespace(ctx context.Context, ns string) erro
|
|||||||
namespace := &v1.Namespace{
|
namespace := &v1.Namespace{
|
||||||
ObjectMeta: metav1.ObjectMeta{
|
ObjectMeta: metav1.ObjectMeta{
|
||||||
Name: ns,
|
Name: ns,
|
||||||
Labels: map[string]string{
|
Annotations: map[string]string{
|
||||||
"multicluster-scheduler": "enabled",
|
"multicluster.admiralty.io/elect": "",
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
@@ -200,9 +200,9 @@ func (k *KubernetesService) ProvisionExecutionNamespace(ctx context.Context, ns
|
|||||||
}
|
}
|
||||||
role := "argo-role"
|
role := "argo-role"
|
||||||
if err := k.CreateRole(ctx, ns, role,
|
if err := k.CreateRole(ctx, ns, role,
|
||||||
[][]string{{"coordination.k8s.io"}, {""}, {""}},
|
[][]string{{"coordination.k8s.io"}, {""}, {""}, {"multicluster.admiralty.io"}},
|
||||||
[][]string{{"leases"}, {"secrets"}, {"pods"}},
|
[][]string{{"leases"}, {"secrets"}, {"pods"}, {"podchaperons"}},
|
||||||
[][]string{{"get", "create", "update"}, {"get"}, {"patch"}},
|
[][]string{{"get", "create", "update"}, {"get"}, {"patch"}, {"get", "list", "watch", "create", "update", "patch", "delete"}},
|
||||||
); err != nil {
|
); err != nil {
|
||||||
return err
|
return err
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user