-
Notifications
You must be signed in to change notification settings - Fork 50
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump github.com/gardener/gardener to 1.86.0 #327
Conversation
Since admission controllers now run the certificate controller, leader election must be enabled to prevent any interference.
1a2b35c
to
a79f9db
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for this huge change. I have a few questions.
Can you please adapt https://github.com/gardener/gardener-extension-networking-calico/blob/master/.github/workflows/vendor_gardener.yaml as well (revendor => tidy) similar to gardener/gardener-extension-shoot-networking-filter#111? |
Address review comments from similar PR gardener/gardener-extension-networking-calico#327.
Address review comment from similar PR gardener/gardener-extension-networking-calico#327.
Address review comments from similar PR gardener/gardener-extension-networking-calico#327.
Address review comments from similar PR gardener/gardener-extension-networking-calico#327.
Address review comments from similar PR gardener/gardener-extension-networking-calico#327.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
* Update `github.com/gardener/gardener` to `v1.86.0` * Remove vendor dir * Adjust paths after vendor removal * [make tidy] * [make generate] * Adjust admission webhook * Enable leader election for admission controller Since admission controllers now run the certificate controller, leader election must be enabled to prevent any interference. * Restrict admission controller permissions This change is mostly relevant for deployments without a virtual Garden cluster: In this case, the admission controller needed cluster-wide list/watch permissions for secrets. Restricting the cache to the `--webhook-config-namespace` namespace eliminates this requirement. * Address review comments Address review comments from similar PR gardener/gardener-extension-networking-calico#327.
Address review comments from similar PR gardener/gardener-extension-networking-calico#327.
* Update `github.com/gardener/gardener` to `v1.85.1` * Remove vendor dir * Adjust paths after vendor removal * [make tidy] * [make generate] * Adjust admission webhook * Enable leader election for admission controller Since admission controllers now run the certificate controller, leader election must be enabled to prevent any interference. * Update `github.com/gardener/gardener` to v1.86.0 * Restrict admission controller permissions This change is mostly relevant for deployments without a virtual Garden cluster: In this case, the admission controller needed cluster-wide list/watch permissions for secrets. Restricting the cache to the `--webhook-config-namespace` namespace eliminates this requirement. * Address review comments Address review comments from similar PR gardener/gardener-extension-networking-calico#327. * Replace hook-me with Make Target
* Update `github.com/gardener/gardener` to `v1.86.0` * Remove vendor dir * Adjust paths after vendor removal * [make tidy] * [make generate] * Adjust admission webhook * Enable leader election for admission controller Since admission controllers now run the certificate controller, leader election must be enabled to prevent any interference. * Restrict admission controller permissions This change is mostly relevant for deployments without a virtual Garden cluster: In this case, the admission controller needed cluster-wide list/watch permissions for secrets. Restricting the cache to the `--webhook-config-namespace` namespace eliminates this requirement. * Address review comments Address review comments from similar PR gardener/gardener-extension-networking-calico#327. * fix typo in makefile * Replace hook-me with Make Target --------- Co-authored-by: Andreas Burger <andreas.burger@sap.com>
* Update `github.com/gardener/gardener` to `v1.83.2` * Push adjustments for v1.83.2 * [make generate] * Update `github.com/gardener/gardener` to `v1.86.0` * Remove vendor dir * Adjust paths after vendor removal * [make tidy] * [make generate] * Adjust admission webhook * Enable leader election for admission controller Since admission controllers now run the certificate controller, leader election must be enabled to prevent any interference. * Address review comments Address review comments from similar PR gardener/gardener-extension-networking-calico#327.
Address review comment from similar PR gardener/gardener-extension-networking-calico#327.
* Update `github.com/gardener/gardener` to `v1.86.0` * Remove vendor dir * Adjust paths after vendor removal * [make tidy] * [make generate] * Adjust admission webhook * Enable leader election for admission controller Since admission controllers now run the certificate controller, leader election must be enabled to prevent any interference. * Remove namespace optimization The admission controller works with secrets from other namespaces. A restriction is not possible at this point. * Always set `to-runtime-apiserver` label This label is required because TLS secrets reside in the runtime cluster. * Address review comment Address review comment from similar PR gardener/gardener-extension-networking-calico#327. * Address review comments II
How to categorize this PR?
/area open-source
/kind enhancement
What this PR does / why we need it:
This PR updates the
github.com/gardener/gardener
dependency tov1.86.0
. As a consequence, admission CA and service certificates are now managed automatically. The vendor directory is removed as well.Which issue(s) this PR fixes:
Fixes #
Special notes for your reviewer:
Release note: