Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restore route agent node update privilege #2225

Merged
merged 1 commit into from
Sep 2, 2022

Conversation

tpantelis
Copy link
Contributor

@tpantelis tpantelis commented Sep 2, 2022

The route agent needs to update the submariner.io/cniIfaceIp annotation on nodes for globalnet. This caused E2E failures, eg https://github.com/submariner-io/lighthouse/runs/8154953193?check_suite_focus=true.

The privilege was recently removed by #2008.

@tpantelis tpantelis requested a review from dfarrell07 September 2, 2022 14:01
@tpantelis tpantelis requested a review from Oats87 as a code owner September 2, 2022 14:01
@tpantelis tpantelis self-assigned this Sep 2, 2022
@tpantelis tpantelis requested a review from skitt as a code owner September 2, 2022 14:01
@submariner-bot
Copy link
Contributor

🤖 Created branch: z_pr2225/tpantelis/restore_routeagent_priv
🚀 Full E2E won't run until the "ready-to-test" label is applied. I will add it automatically once the PR has 2 approvals, or you can add it manually.

The route agent needs to update the "submariner.io/cniIfaceIp"
annotation on nodes for globalnet. This caused E2E failures, eg
https://github.com/submariner-io/lighthouse/runs/8154953193?check_suite_focus=true

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
@tpantelis tpantelis force-pushed the restore_routeagent_priv branch from dedd80d to 3f9a8dd Compare September 2, 2022 14:24
@tpantelis tpantelis enabled auto-merge (rebase) September 2, 2022 14:29
@tpantelis tpantelis added the ready-to-test When a PR is ready for full E2E testing label Sep 2, 2022
@tpantelis tpantelis merged commit 9f5bc58 into submariner-io:devel Sep 2, 2022
@submariner-bot
Copy link
Contributor

🤖 Closed branches: [z_pr2225/tpantelis/restore_routeagent_priv]

tpantelis added a commit to tpantelis/subctl that referenced this pull request Sep 2, 2022
...to pick up the changes in
submariner-io/submariner-operator#2225

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
@tpantelis tpantelis deleted the restore_routeagent_priv branch September 2, 2022 16:09
tpantelis added a commit to submariner-io/subctl that referenced this pull request Sep 5, 2022
...to pick up the changes in
submariner-io/submariner-operator#2225

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
skitt added a commit to skitt/submariner-operator that referenced this pull request Nov 3, 2022
... including follow-up partial reverts in submariner-io#2214 and submariner-io#2225.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
skitt added a commit to skitt/submariner-operator that referenced this pull request Nov 3, 2022
... including follow-up partial reverts in submariner-io#2214 and submariner-io#2225.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
tpantelis pushed a commit that referenced this pull request Nov 3, 2022
... including follow-up partial reverts in #2214 and #2225.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
dfarrell07 added a commit to dfarrell07/submariner-operator that referenced this pull request Nov 11, 2022
The submariner-gateway RBAC for pods duplicates the get permission, as
it's granted * elsewhere.

This was recently modified in submariner-io#2225 and submariner-io#2008.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
dfarrell07 added a commit to dfarrell07/submariner-operator that referenced this pull request Nov 11, 2022
The  RBAC for pods duplicates the get permission, as it's granted *
elsewhere.

This was recently modified in submariner-io#2225, submariner-io#2214, and submariner-io#2008.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
sridhargaddam pushed a commit to dfarrell07/submariner-operator that referenced this pull request Dec 17, 2022
The  RBAC for pods duplicates the get permission, as it's granted *
elsewhere.

This was recently modified in submariner-io#2225, submariner-io#2214, and submariner-io#2008.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ready-to-test When a PR is ready for full E2E testing
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants