From 20d7e6ded48504fdd681e7a5ff9b468c4a6ef729 Mon Sep 17 00:00:00 2001 From: danielwindit Date: Tue, 10 Sep 2024 13:55:19 +0200 Subject: [PATCH 1/3] Update argorollouts_controller.go Need more permissions to run without namespace scope on Openshift Signed-off-by: Daniel Wind Signed-off-by: Daniel Wind --- controllers/argorollouts_controller.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/controllers/argorollouts_controller.go b/controllers/argorollouts_controller.go index 22b619a..5f29308 100644 --- a/controllers/argorollouts_controller.go +++ b/controllers/argorollouts_controller.go @@ -67,9 +67,9 @@ const ( //+kubebuilder:rbac:groups="",resources=configmaps;endpoints;events;pods;namespaces;secrets;serviceaccounts;services;services/finalizers,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups=apps,resources=podtemplates;deployments;replicasets,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups=apps,resources=deployments/finalizers,verbs=update -//+kubebuilder:rbac:groups="",resources=deployments,verbs=get;list;watch +//+kubebuilder:rbac:groups="",resources=deployments,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups="",resources=pods/eviction,verbs=create -//+kubebuilder:rbac:groups="",resources=podtemplates,verbs=get;list;watch +//+kubebuilder:rbac:groups="",resources=podtemplates,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups="appmesh.k8s.aws",resources=virtualnodes;virtualrouters,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups="appmesh.k8s.aws",resources=virtualservices,verbs=get;list;watch //+kubebuilder:rbac:groups="argoproj.io",resources=analysisruns;analysisruns/finalizers;experiments;experiments/finalizers,verbs=create;get;list;watch;update;patch;delete;deletecollection @@ -85,6 +85,7 @@ const ( //+kubebuilder:rbac:groups="networking.k8s.io",resources=ingresses,verbs=create;watch;get;update;patch;list //+kubebuilder:rbac:groups="split.smi-spec.io",resources=trafficsplits,verbs=create;watch;get;update;patch //+kubebuilder:rbac:groups="traefik.containo.us",resources=traefikservices,verbs=watch;get;update +//+kubebuilder:rbac:groups=traefik.io,resources=traefikservices,verbs=get;update;watch //+kubebuilder:rbac:groups="x.getambassador.io",resources=ambassadormappings;mappings,verbs=create;watch;get;update;list;delete //+kubebuilder:rbac:groups="apisix.apache.org",resources=apisixroutes,verbs=watch;get;update //+kubebuilder:rbac:groups="route.openshift.io",resources=routes,verbs=create;watch;get;update;patch;list From fcf3b8d945a7130c3364c057c9b41d695d55c2f4 Mon Sep 17 00:00:00 2001 From: danielwindit Date: Tue, 10 Sep 2024 13:57:23 +0200 Subject: [PATCH 2/3] Update manager.yaml Need a higher limit for the manager otherwise it gets OOM killed Signed-off-by: Daniel Wind Signed-off-by: Daniel Wind --- config/manager/manager.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml index 1e45d20..1b3bc08 100644 --- a/config/manager/manager.yaml +++ b/config/manager/manager.yaml @@ -1,4 +1,4 @@ -apiVersion: v1 +eapiVersion: v1 kind: Namespace metadata: labels: @@ -94,7 +94,7 @@ spec: resources: limits: cpu: 500m - memory: 128Mi + memory: 512Mi requests: cpu: 10m memory: 64Mi From 7eb76c68cd63a68198d0f7f232fdca0fa9f2a83b Mon Sep 17 00:00:00 2001 From: danielwindit Date: Tue, 10 Sep 2024 13:59:09 +0200 Subject: [PATCH 3/3] Update manager.yaml Removed type Signed-off-by: Daniel Wind Signed-off-by: Daniel Wind --- config/manager/manager.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml index 1b3bc08..72dd0bb 100644 --- a/config/manager/manager.yaml +++ b/config/manager/manager.yaml @@ -1,4 +1,4 @@ -eapiVersion: v1 +apiVersion: v1 kind: Namespace metadata: labels: