mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-31 06:26:19 -02:30
MohammadReza
f4eaac3a94
* chore(deps): bump node-feature-discovery to v0.19.0 Checked all intermediate releases (0.17.0, 0.18.0, 0.19.0) for breaking changes. v0.19.0's RBAC breaking change (nfd-topology-updater needs list+watch on pods) does not apply here: Kubespray does not deploy an nfd-topology-updater workload (only an unused ConfigMap template for it exists in this role). v0.19.0 also removed env/expandenv/getHostByName from NodeFeatureRule templates -- only affects user-authored custom NodeFeatureRule resources, not anything this role ships by default. * fix(nfd): add missing namespaces RBAC rule and fix nodefeaturegroups typo * fix(nfd): add missing delete verb to nfd-worker Role * chore(nfd): sync CRD manifest with upstream v0.19.0 * fix(nfd): drop removed gRPC-era flags/ports from nfd-master * fix(nfd): remove leftover crd-controller args block Previous commit added the new args but left the old -crd-controller and -metrics block in place instead of replacing it. * fix(nfd): drop removed gRPC-era flags from nfd-worker * chore(nfd): drop variables no longer read by any template * fix(nfd): align nfd-worker port naming and add health probes * fix(nfd): remove obsolete nfd-master Service * chore(nfd): register removed variables in validate_inventory * fix(nfd): clean up the obsolete Service manifest on disk * fix(nfd): add health probes and http port to nfd-gc * fix(nfd): align nfd-worker env and mounts with upstream
22 lines
331 B
Django/Jinja
22 lines
331 B
Django/Jinja
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: node-feature-discovery-worker
|
|
namespace: {{ node_feature_discovery_namespace }}
|
|
rules:
|
|
- apiGroups:
|
|
- nfd.k8s-sigs.io
|
|
resources:
|
|
- nodefeatures
|
|
verbs:
|
|
- create
|
|
- get
|
|
- update
|
|
- delete
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- get
|