Skip to content

Add config-syncer-manager OCM addon chart - #529

Open
ArnobKumarSaha wants to merge 1 commit into
masterfrom
arnob-ocm-addon
Open

ArnobKumarSaha wants to merge 1 commit into
masterfrom
arnob-ocm-addon

Conversation

@ArnobKumarSaha

Copy link
Copy Markdown
Member

Hub-side installer chart for the config-syncer OCM addon manager: config-syncer/config-syncer-enterprise#36

charts/config-syncer-manager (new, based on fargocd-manager)

  • Deployment: runs config-syncer manager --registryFQDN=... --cluster-name=... from the -ent image.
  • ClusterRole: the permissions the addon-framework manager needs, including CSR approval for the csr registration driver. It also covers configmaps, secrets and namespaces, used for the per-cluster config-syncer-<cluster> mirror namespaces, and roles/rolebindings.
  • OCM objects: the ClusterManagementAddOn config-syncer (lifecycle addon-manager, installStrategy: Placements), a Placement and ManagedClusterSetBinding (placement.create), and a ManifestWorkReplicaSet that gives klusterlet-work the ClusterRole/ClusterRoleBinding permissions the agent chart needs.
  • API type and CRDs: a ConfigSyncerManager API type. OCM CRDs are imported through hack/scripts/import-crds.sh.

charts/config-syncer

  • New values: hub.kubeconfigSecretName and hub.namespace. When they are set, the chart mounts the hub kubeconfig and passes --hub-kubeconfig and --hub-namespace.

Testing

  • make gen fmt produces no diff, and helm lint passes for both charts.
  • helm template charts/config-syncer-manager | kubectl apply --dry-run=server passes on an OCM hub.
  • On hubs that already have the global Placement and SetBinding from another addon chart, install with --set placement.create=false.

Adds the hub-side installer chart for the config-syncer manager
subcommand, and hub.{kubeconfigSecretName,namespace} values to the
config-syncer chart so the agent can sync from OCM hub mirrors.

Signed-off-by: Arnob kumar saha <arnob@appscode.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant