-
Notifications
You must be signed in to change notification settings - Fork 4.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add service account for attach-detach controller #10892
Conversation
Rules: []authorizationapi.PolicyRule{ | ||
// shared informer on PVs | ||
{ | ||
Verbs: sets.NewString("list", "watch"), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
do we need get
on any of the list/watch resources?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we need it on nodes, which is accounted for.
questions on a couple permissions, test fixture update needed, LGTM otherwise |
228a17b
to
d3c7021
Compare
@liggitt light is green and in-situ test checked out, i can haz merge? |
Is this 1.3.0? |
@@ -44,6 +44,9 @@ const ( | |||
InfraPersistentVolumeBinderControllerServiceAccountName = "pv-binder-controller" | |||
PersistentVolumeBinderControllerRoleName = "system:pv-binder-controller" | |||
|
|||
InfraAttachDetachControllerServiceAccountName = "attach-detach-controller" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we want this named "pv-…" for consistency with the others?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm cool with that, I'll rename tonight.
yep |
d3c7021
to
dd1ce84
Compare
LGTM, [merge] |
Evaluated for origin merge up to dd1ce84 |
continuous-integration/openshift-jenkins/merge SUCCESS (https://ci.openshift.redhat.com/jenkins/job/test_pr_origin/8851/) |
Adds a service account for the attach-detach controller.