forked from gardener/gardener
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[operator] Manage Dashboard Web Terminal Controller Manager (gardener…
…#9646) * Documentation * Add component boilerplate * Integrate terminal component into `Garden` controller * Virtual garden access secret * Server certificate It's signed by the runtime CA which is auto-rotated each `30d`, so this server cert is also auto-rotated regularly. * Service * ConfigMap * Deployment * RBAC * CRD * ServiceMonitor * Webhook Configurations * Do not use Golang type for ConfigMap Without this, the resulting JSON-marshalled config looks like this: ``` { "kind": "ControllerManagerConfiguration", "apiVersion": "dashboard.gardener.cloud/v1alpha1", "server": { "healthProbes": { "bindAddress": "", "port": 8081 }, "metrics": { "bindAddress": "", "port": 8443 } }, "controllers": { "terminal": { "maxConcurrentReconciles": 0, "maxConcurrentReconcilesPerNamespace": 0, "tokenRequestExpirationSeconds": null }, "terminalHeartbeat": { "maxConcurrentReconciles": 0, "timeToLive": { "Duration": 0 } }, "serviceAccount": { "maxConcurrentReconciles": 0, "allowedServiceAccountNames": null } }, "webhooks": { "terminalValidation": { "maxObjectSize": 0 } }, "honourServiceAccountRefHostCluster": false, "leaderElection": { "leaderElect": true, "leaseDuration": "0s", "renewDeadline": "0s", "retryPeriod": "0s", "resourceLock": "", "resourceName": "", "resourceNamespace": "kube-system" } } ``` This makes the controller fail to start: ``` {"level":"error","ts":"2024-04-23T13:30:40Z","logger":"setup","msg":"error reading config","error":"controllers.terminal.maxConcurrentReconciles: Invalid value: 0: must be 1 or greater","stacktrace":"main.main\n\t/workspace/main.go:80\nruntime.main\n\t/usr/local/go/src/runtime/proc.go:271"} ``` * Enable `terminalEnabled` in frontend config when configured Otherwise, people have to provide a frontend configuration where this is set to true. * PodDisruptionBudget * VerticalPodAutoscaler * Address PR review feedback
- Loading branch information
Showing
31 changed files
with
2,730 additions
and
29 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.