mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-31 06:26:19 -02:30
MohammadReza
f4eaac3a94
* chore(deps): bump node-feature-discovery to v0.19.0 Checked all intermediate releases (0.17.0, 0.18.0, 0.19.0) for breaking changes. v0.19.0's RBAC breaking change (nfd-topology-updater needs list+watch on pods) does not apply here: Kubespray does not deploy an nfd-topology-updater workload (only an unused ConfigMap template for it exists in this role). v0.19.0 also removed env/expandenv/getHostByName from NodeFeatureRule templates -- only affects user-authored custom NodeFeatureRule resources, not anything this role ships by default. * fix(nfd): add missing namespaces RBAC rule and fix nodefeaturegroups typo * fix(nfd): add missing delete verb to nfd-worker Role * chore(nfd): sync CRD manifest with upstream v0.19.0 * fix(nfd): drop removed gRPC-era flags/ports from nfd-master * fix(nfd): remove leftover crd-controller args block Previous commit added the new args but left the old -crd-controller and -metrics block in place instead of replacing it. * fix(nfd): drop removed gRPC-era flags from nfd-worker * chore(nfd): drop variables no longer read by any template * fix(nfd): align nfd-worker port naming and add health probes * fix(nfd): remove obsolete nfd-master Service * chore(nfd): register removed variables in validate_inventory * fix(nfd): clean up the obsolete Service manifest on disk * fix(nfd): add health probes and http port to nfd-gc * fix(nfd): align nfd-worker env and mounts with upstream
82 lines
1.1 KiB
Django/Jinja
82 lines
1.1 KiB
Django/Jinja
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: node-feature-discovery
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- namespaces
|
|
verbs:
|
|
- watch
|
|
- list
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- nodes
|
|
- nodes/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- list
|
|
- apiGroups:
|
|
- nfd.k8s-sigs.io
|
|
resources:
|
|
- nodefeatures
|
|
- nodefeaturerules
|
|
- nodefeaturegroups
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- nfd.k8s-sigs.io
|
|
resources:
|
|
- nodefeaturegroups/status
|
|
verbs:
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
resourceNames:
|
|
- "nfd-master.nfd.kubernetes.io"
|
|
verbs:
|
|
- get
|
|
- update
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: node-feature-discovery-gc
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- nodes
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- topology.node.k8s.io
|
|
resources:
|
|
- noderesourcetopologies
|
|
verbs:
|
|
- delete
|
|
- list
|
|
- apiGroups:
|
|
- nfd.k8s-sigs.io
|
|
resources:
|
|
- nodefeatures
|
|
verbs:
|
|
- delete
|
|
- list
|