Deprecate spec.secretRef field in Seed API (gardener#8064)

nickytd · Jun 13, 2023 · 9c07652 · 9c07652
1 parent 930db44
commit 9c07652
Show file tree

Hide file tree

Showing 5 changed files with 16 additions and 1 deletion.
diff --git a/docs/api-reference/core.md b/docs/api-reference/core.md
@@ -1431,6 +1431,8 @@ Kubernetes core/v1.SecretReference
 <em>(Optional)</em>
 <p>SecretRef is a reference to a Secret object containing the Kubeconfig of the Kubernetes
 cluster to be registered as Seed.</p>
+<p>Deprecated: This field is deprecated, gardenlet must run in the Seed cluster,
+hence it should use the in-cluster rest config via ServiceAccount to communicate with the Seed cluster.</p>
 </td>
 </tr>
 <tr>
@@ -9569,6 +9571,8 @@ Kubernetes core/v1.SecretReference
 <em>(Optional)</em>
 <p>SecretRef is a reference to a Secret object containing the Kubeconfig of the Kubernetes
 cluster to be registered as Seed.</p>
+<p>Deprecated: This field is deprecated, gardenlet must run in the Seed cluster,
+hence it should use the in-cluster rest config via ServiceAccount to communicate with the Seed cluster.</p>
 </td>
 </tr>
 <tr>
@@ -9911,6 +9915,8 @@ Kubernetes core/v1.SecretReference
 <em>(Optional)</em>
 <p>SecretRef is a reference to a Secret object containing the Kubeconfig of the Kubernetes
 cluster to be registered as Seed.</p>
+<p>Deprecated: This field is deprecated, gardenlet must run in the Seed cluster,
+hence it should use the in-cluster rest config via ServiceAccount to communicate with the Seed cluster.</p>
 </td>
 </tr>
 <tr>

diff --git a/pkg/apis/core/types_seed.go b/pkg/apis/core/types_seed.go
@@ -70,6 +70,9 @@ type SeedSpec struct {
 	Provider SeedProvider
 	// SecretRef is a reference to a Secret object containing the Kubeconfig of the Kubernetes
 	// cluster to be registered as Seed.
+	//
+	// Deprecated: This field is deprecated, gardenlet must run in the Seed cluster,
+	// hence it should use the in-cluster rest config via ServiceAccount to communicate with the Seed cluster.
 	SecretRef *corev1.SecretReference
 	// Settings contains certain settings for this seed cluster.
 	Settings *SeedSettings

diff --git a/pkg/apis/core/v1beta1/generated.proto b/pkg/apis/core/v1beta1/generated.proto
diff --git a/pkg/apis/core/v1beta1/types_seed.go b/pkg/apis/core/v1beta1/types_seed.go
@@ -74,6 +74,9 @@ type SeedSpec struct {
 	Provider SeedProvider `json:"provider" protobuf:"bytes,4,opt,name=provider"`
 	// SecretRef is a reference to a Secret object containing the Kubeconfig of the Kubernetes
 	// cluster to be registered as Seed.
+	//
+	// Deprecated: This field is deprecated, gardenlet must run in the Seed cluster,
+	// hence it should use the in-cluster rest config via ServiceAccount to communicate with the Seed cluster.
 	// +optional
 	SecretRef *corev1.SecretReference `json:"secretRef,omitempty" protobuf:"bytes,5,opt,name=secretRef"`
 	// Taints describes taints on the seed.

diff --git a/pkg/openapi/openapi_generated.go b/pkg/openapi/openapi_generated.go