-
Notifications
You must be signed in to change notification settings - Fork 100
Refactor deploymentForMCPServer for platform detection. (#1063) (#1285) #1500
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Refactor deploymentForMCPServer for platform detection. (#1063) (#1285) #1500
Conversation
e94903e
to
2961795
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I thinks this is great, just a few questions/comments inline
It will be so nice to do all of this code in one place when we implement #1497 😄 |
2961795
to
f17cb67
Compare
@ChrisJBurns What's the relative order of operations here with respect to #1497? Wondering if we can get this in prior, or if we need to do #1497 first then update here? What do you think? |
… (stacklok#1285) Signed-off-by: Roddie Kieley <rkieley@redhat.com> Co-authored-by: Cursor claude-4-sonnet <cursor@redhat.com>
f17cb67
to
d4e8cce
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
sorry for the delay in reviewing. I like this version. It's been 2 days since the last push, so whoever wanted to add more comments had their chance.
The PR#1301 for #1285 set the security context for ProxyRunner deployments without taking into account kubernetes platform differences and detection as was introduced for #1063 via PR#1253.
This addresses that concern by refactoring the code dealing with security context, encapsulating that specific functionality better than was previously done for either #1063 or #1285.
Also while this should not directly impact #1483, assuming the operator was running it would have required manual changes to the MCPServer instances Deployment to remove the incorrectly set runAsUser, runAsGroup, and fsGroup values once it was so mentioning here.
I am marking this as Draft; while it works well here there is a good bit of code addition and change so having @jhrozek and/or @ChrisJBurns take a look as a follow up to #1063 is probably in order.
Feel free to modify/update as require and feedback welcome.