-
Notifications
You must be signed in to change notification settings - Fork 58
support run spoke agent outside of managed cluster #175
support run spoke agent outside of managed cluster #175
Conversation
20c834c
to
3c202a0
Compare
3c202a0
to
56660ff
Compare
56660ff
to
e8551a9
Compare
e8551a9
to
572e2f8
Compare
@@ -177,7 +193,8 @@ func (o *SpokeAgentOptions) RunSpokeAgent(ctx context.Context, controllerContext | |||
clientCertForHubController := managedcluster.NewClientCertForHubController( | |||
o.ClusterName, o.AgentName, o.ComponentNamespace, o.HubKubeconfigSecret, | |||
kubeconfigData, | |||
spokeKubeClient.CoreV1(), | |||
// store the secret in the cluster where the agent pod runs |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we should add some more comment here. Maybe also a TODO to revisit whether we should put secret for addon on agent cluster or spoke cluster.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
added here.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we should save the secret on spoke cluster for now instead of agent cluster. It can at least ensure that addon can still work today.
db0fb42
to
1ae7b80
Compare
Signed-off-by: zhujian <jiazhu@redhat.com>
1ae7b80
to
23bbde3
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/approve
leave @skeeey to review
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: qiujian16, zhujian7 The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/assign @skeeey |
Signed-off-by: zhujian <jiazhu@redhat.com>
865a3f5
to
65122b6
Compare
/lgtm |
Signed-off-by: zhujian jiazhu@redhat.com
The
registration-agent
pod can be deployed on a separate cluster from the managed cluster, and thehub-kubeconfig-secret
will be stored in the cluster where theregistration-agent
pod resides.related issue: open-cluster-management-io/registration-operator#158
todo:
cc @xuezhaojun @qiujian16