Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add ServicePackageName to ack-user-config and ack-user secrets #311

Merged

Conversation

acornett21
Copy link
Contributor

Issue #, if available:

Description of changes:
Add in support for service specific configmaps and secret so that a cluster admin can configure each service differently, or the same if they so choose.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Signed-off-by: Adam D. Cornett adc@redhat.com

…t each controller can have its own configuration

Signed-off-by: Adam D. Cornett <adc@redhat.com>
@acornett21
Copy link
Contributor Author

@komish Please take a look.

@ack-bot ack-bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Mar 22, 2022
@ack-bot
Copy link
Collaborator

ack-bot commented Mar 22, 2022

Hi @acornett21. Thanks for your PR.

I'm waiting for a aws-controllers-k8s member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@komish
Copy link
Contributor

komish commented Mar 24, 2022

This seems reasonable enough. It does, however, mean that administrators who want the same configuration for all installed controllers would effectively have to duplicate configmaps and secrets, right? Was there a user request requesting the feature?

Either way, this looks like it should accomplish this and seems useful 👍

@RedbackThomson
Copy link
Contributor

This seems reasonable enough. It does, however, mean that administrators who want the same configuration for all installed controllers would effectively have to duplicate configmaps and secrets, right? Was there a user request requesting the feature?

Either way, this looks like it should accomplish this and seems useful 👍

The current method means that you cannot install multiple controllers with separate permissions, though - which is arguably a larger security concern. I think this PR does a good job of trading off that security concern for your ease of use concern.

@acornett21
Copy link
Contributor Author

This seems reasonable enough. It does, however, mean that administrators who want the same configuration for all installed controllers would effectively have to duplicate configmaps and secrets, right? Was there a user request requesting the feature?

Yeah you are correct, it's a trade off, they would need to duplicate if they wanted the same configuration. And yes, this granularity was asked for by a user int he Kube slack channel.

@a-hilaly
Copy link
Member

/ok-to-test

@ack-bot ack-bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Mar 28, 2022
Copy link
Collaborator

@jaypipes jaypipes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 doh, sorry for the delay in review/merge @acornett21!

@jaypipes
Copy link
Collaborator

jaypipes commented May 3, 2022

/lgtm

@ack-bot ack-bot added the lgtm Indicates that a PR is ready to be merged. label May 3, 2022
@ack-bot
Copy link
Collaborator

ack-bot commented May 3, 2022

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: acornett21, jaypipes

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ack-bot ack-bot merged commit 52584bb into aws-controllers-k8s:main May 3, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved lgtm Indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add support for controller specific secrets and configmaps
6 participants