Limit the OperatorPolicy watches to the managed cluster namespace

Always having a clusterwide watch is incompatible with hosted mode and does not match ConfigurationPolicy. Related: https://issues.redhat.com/browse/ACM-11952 Signed-off-by: mprahl <mprahl@users.noreply.github.com>
open-cluster-management-io · May 31, 2024 · 319f92d · 319f92d
1 parent 3a75ad9
commit 319f92d
Show file tree

Hide file tree

Showing 2 changed files with 92 additions and 80 deletions.
diff --git a/main.go b/main.go
@@ -228,6 +228,11 @@ func main() {
 				"metadata.namespace": watchNamespace,
 			}),
 		}
+		cacheByObject[&policyv1beta1.OperatorPolicy{}] = cache.ByObject{
+			Field: fields.SelectorFromSet(fields.Set{
+				"metadata.namespace": watchNamespace,
+			}),
+		}
 	} else {
 		log.Info("Skipping restrictions on the ConfigurationPolicy cache because watchNamespace is empty")
 	}