Rename API groups from *.antrea.tanzu.vmware.com to *.antrea.io

Extension API groups as well as CRD API groups are renamed from*.antrea.tanzu .vmware.com to *.antrea.io.Old version of extension API groups is not renamed. Legacy CRD API groups ops.antrea.tanzu.vmware.com, security.antrea.tanzu.vmware.com, core.antrea.tanzu.vmware.com are merged into crd.antrea.io. Legacy extension and CRD API groups are reservered. Legacy extension API groups can be used directly. For legacy API groups, option LegacyCRDMirroring should be enabled in feature gates.When the mirroring is enabled,if a legacy CRD is created with legacy API groups, mirroring-controllerwill create a new CRD with the Spec and Labels from the legacy CRD. Afterwards, the modification of Spec and Label in legacy CRD will be synchronized to new CRD automatically. In addition, the modification of Status in new CRD will also be synchronized to legacy CRD automatically. If legacy CRD is deleted, the corresponding new CRD will be deleted.
antrea-io · Mar 31, 2021 · a06736a · a06736a
1 parent 25c15ad
commit a06736a
Show file tree

Hide file tree

Showing 388 changed files with 25,379 additions and 4,293 deletions.
diff --git a/build/yamls/antrea-aks.yml b/build/yamls/antrea-aks.yml
diff --git a/build/yamls/antrea-eks.yml b/build/yamls/antrea-eks.yml
diff --git a/build/yamls/antrea-gke.yml b/build/yamls/antrea-gke.yml
diff --git a/build/yamls/antrea-ipsec.yml b/build/yamls/antrea-ipsec.yml
diff --git a/build/yamls/antrea.yml b/build/yamls/antrea.yml
diff --git a/build/yamls/base/agent-rbac.yml b/build/yamls/base/agent-rbac.yml
@@ -46,6 +46,7 @@ rules:
       - list
   - apiGroups:
       - clusterinformation.antrea.tanzu.vmware.com
+      - crd.antrea.io
     resources:
       - antreaagentinfos
     verbs:
@@ -56,6 +57,7 @@ rules:
   - apiGroups:
       - controlplane.antrea.tanzu.vmware.com
       - networking.antrea.tanzu.vmware.com
+      - controlplane.antrea.io
     resources:
       - networkpolicies
       - appliedtogroups
@@ -66,12 +68,14 @@ rules:
       - list
   - apiGroups:
       - controlplane.antrea.tanzu.vmware.com
+      - controlplane.antrea.io
     resources:
       - nodestatssummaries
     verbs:
       - create
   - apiGroups:
       - controlplane.antrea.tanzu.vmware.com
+      - controlplane.antrea.io
     resources:
       - networkpolicies/status
     verbs:
@@ -117,6 +121,7 @@ rules:
       - list
   - apiGroups:
       - ops.antrea.tanzu.vmware.com
+      - crd.antrea.io
     resources:
       - traceflows
       - traceflows/status

diff --git a/build/yamls/base/antctl.yml b/build/yamls/base/antctl.yml
@@ -13,6 +13,7 @@ rules:
   - apiGroups:
       - controlplane.antrea.tanzu.vmware.com
       - networking.antrea.tanzu.vmware.com
+      - controlplane.antrea.io
     resources:
       - networkpolicies
       - appliedtogroups
@@ -22,6 +23,7 @@ rules:
       - list
   - apiGroups:
       - stats.antrea.tanzu.vmware.com
+      - stats.antrea.io
     resources:
       - networkpolicystats
       - antreaclusternetworkpolicystats
@@ -31,20 +33,23 @@ rules:
       - list
   - apiGroups:
       - system.antrea.tanzu.vmware.com
+      - system.antrea.io
     resources:
       - controllerinfos
       - agentinfos
     verbs:
       - get
   - apiGroups:
       - system.antrea.tanzu.vmware.com
+      - system.antrea.io
     resources:
       - supportbundles
     verbs:
       - get
       - post
   - apiGroups:
       - system.antrea.tanzu.vmware.com
+      - system.antrea.io
     resources:
       - supportbundles/download
     verbs:

diff --git a/build/yamls/base/conf/antrea-controller.conf b/build/yamls/base/conf/antrea-controller.conf
@@ -36,3 +36,15 @@ featureGates:
 
 # TLS min version from: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13.
 #tlsMinVersion:
+
+# If Antrea is upgraded from version <= v0.13 and legacy CRDs is used, this option should be
+# enabled, otherwise the CRDs created with the legacy API groups will not take any effect and
+# work as expected. When the mirroring is enabled, if a legacy CRD is created with legacy API
+# groups, mirroring-controller will create a new CRD with the Spec and Labels from the legacy
+# CRD. Afterwards, the modification of Spec and Label in legacy CRD will be synchronized to new
+# CRD automatically. In addition, the modification of Status in new CRD will also be synchronized
+# to legacy CRD automatically. If a legacy CRD is deleted, the corresponding new CRD will be deleted.
+# Note that: to decouple a new CRD from the corresponding legacy CRD, the legacy CRD should be
+# annotated with "crd.antrea.io/stop-mirror". Afterwards, CRUD of new CRDs should be done through
+# the new API group.
+#legacyCRDMirroring: true
diff --git a/build/yamls/base/controller-rbac.yml b/build/yamls/base/controller-rbac.yml
@@ -29,22 +29,6 @@ rules:
       - get
       - watch
       - list
-  - apiGroups:
-      - clusterinformation.antrea.tanzu.vmware.com
-    resources:
-      - antreacontrollerinfos
-    verbs:
-      - get
-      - create
-      - update
-      - delete
-  - apiGroups:
-      - clusterinformation.antrea.tanzu.vmware.com
-    resources:
-      - antreaagentinfos
-    verbs:
-      - list
-      - delete
   - apiGroups:
       - authentication.k8s.io
     resources:
@@ -99,6 +83,9 @@ rules:
       - v1beta2.controlplane.antrea.tanzu.vmware.com
       - v1beta1.controlplane.antrea.tanzu.vmware.com
       - v1beta1.networking.antrea.tanzu.vmware.com
+      - v1alpha1.stats.antrea.io
+      - v1beta1.system.antrea.io
+      - v1beta2.controlplane.antrea.io
     verbs:
       - get
       - update
@@ -111,9 +98,110 @@ rules:
       - crdmutator.antrea.tanzu.vmware.com
       - crdvalidator.antrea.tanzu.vmware.com
       - labelsmutator.antrea.io
+      - crdmutator.antrea.io
+      - crdvalidator.antrea.io
+    verbs:
+      - get
+      - update
+  - apiGroups:
+      - crd.antrea.io
+    resources:
+      - antreacontrollerinfos
+    verbs:
+      - get
+      - create
+      - update
+      - delete
+  - apiGroups:
+      - crd.antrea.io
+    resources:
+      - antreaagentinfos
+    verbs:
+      - list
+      - delete
+  - apiGroups:
+      - crd.antrea.io
+    resources:
+      - clusternetworkpolicies
+      - networkpolicies
     verbs:
       - get
+      - watch
+      - list
       - update
+      - patch
+      - create
+      - delete
+  - apiGroups:
+      - crd.antrea.io
+    resources:
+      - clusternetworkpolicies/status
+      - networkpolicies/status
+    verbs:
+      - update
+  - apiGroups:
+      - crd.antrea.io
+    resources:
+      - tiers
+    verbs:
+      - get
+      - watch
+      - list
+      - update
+      - patch
+      - create
+      - delete
+  - apiGroups:
+      - crd.antrea.io
+    resources:
+      - traceflows
+      - traceflows/status
+    verbs:
+      - get
+      - watch
+      - list
+      - update
+      - patch
+      - create
+      - delete
+  - apiGroups:
+      - crd.antrea.io
+    resources:
+      - externalentities
+      - clustergroups
+    verbs:
+      - get
+      - watch
+      - list
+      - update
+      - patch
+      - create
+      - delete
+  - apiGroups:
+      - crd.antrea.io
+    resources:
+      - clustergroups/status
+    verbs:
+      - update
+  # Deprecated in v1.0.0.
+  - apiGroups:
+    - clusterinformation.antrea.tanzu.vmware.com
+    resources:
+      - antreacontrollerinfos
+    verbs:
+      - get
+      - create
+      - update
+      - delete
+  # Deprecated in v1.0.0.
+  - apiGroups:
+      - clusterinformation.antrea.tanzu.vmware.com
+    resources:
+      - antreaagentinfos
+    verbs:
+      - list
+      - delete
+  # Deprecated in v1.0.0.
   - apiGroups:
       - security.antrea.tanzu.vmware.com
     resources:
@@ -123,13 +211,19 @@ rules:
       - get
       - watch
       - list
+      - update
+      - patch
+      - create
+      - delete
+  # Deprecated in v1.0.0.
   - apiGroups:
       - security.antrea.tanzu.vmware.com
     resources:
       - clusternetworkpolicies/status
       - networkpolicies/status
     verbs:
       - update
+  # Deprecated in v1.0.0.
   - apiGroups:
       - security.antrea.tanzu.vmware.com
     resources:
@@ -138,8 +232,11 @@ rules:
       - get
       - watch
       - list
-      - create
       - update
+      - patch
+      - create
+      - delete
+  # Deprecated in v1.0.0.
   - apiGroups:
       - ops.antrea.tanzu.vmware.com
     resources:
@@ -153,17 +250,23 @@ rules:
       - patch
       - create
       - delete
+  # Deprecated in v1.0.0.
   - apiGroups:
-    - core.antrea.tanzu.vmware.com
+      - core.antrea.tanzu.vmware.com
     resources:
       - externalentities
       - clustergroups
     verbs:
       - get
       - watch
       - list
+      - update
+      - patch
+      - create
+      - delete
+  # Deprecated in v1.0.0.
   - apiGroups:
-    - core.antrea.tanzu.vmware.com
+      - core.antrea.tanzu.vmware.com
     resources:
       - clustergroups/status
     verbs: