-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow environment provider jobs not bound to cluster #320
base: main
Are you sure you want to change the base?
Allow environment provider jobs not bound to cluster #320
Conversation
e7f6164
to
88bde48
Compare
Providers EnvironmentProviders `json:"providers"` | ||
Splitter Splitter `json:"splitter"` | ||
ServiceAccountName string `json:"serviceaccountname,omitempty"` | ||
SecretRefName string `json:"secretrefname,omitempty"` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
How much of this config is actually required by the EnvironmentRequest?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am adding only ServiceAccountName and SecretRefName as optional.
Can't say about the rest. Any changes there should be done separately.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this config
in this case is the SecretRefName
. If we are to remove the dependency to cluster then we should identify if that configuration is actually necessary and which parts of it that are and if we can fix it so that they are optional.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This change only allows starting environment provider jobs without a cluster.
They will be started by the default
SA, but won't succeed due to permissions.
To make them succeed will require service accounts not bound to cluster (like global-provider
instead of <cluster_name>-provider
).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In update 862f006 SecretRefName is replaced with JobConfig. The idea is to provide only the required variables.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Commit dc58833 works with 'etosctl testrun start'.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
When a environment request object is created via kubectl create
, the environment provider job is currently failing due to AssertionError: ActivityTriggered must exist for the environment provider
.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Environment requests can be now created without cluster. Verified with registry.nordix.org/eiffel/etos-environment-provider:d5e65c2f
.
$ kubectl create -n etos-ns -f env_request.yaml
...
$ kubectl get environmentrequests -n etos-ns
NAME READY REASON MESSAGE
quicktest-qhb2m-hkt0b True Done Successfully provisioned an environment
Applicable Issues
Description of the Change
This change adds handling of environment requests that do not have cluster-label set.
Alternate Designs
Possible Drawbacks
Sign-off
Developer's Certificate of Origin 1.1
By making a contribution to this project, I certify that:
(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or
(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or
(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.
(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.
Signed-off-by: [email protected]