1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/node-feature-discovery.git synced 2025-03-18 14:28:25 +00:00
node-feature-discovery/deployment/base
adrianc 3f012c2d5a
Add support running with OwnerReferencesPermissionEnforcement
when OwnerReferencesPermissionEnforcement validating webhook is
enabled additional permissions are required to set/update owner ref
field. NFD worker sets/updates NodeFeature owner ref field to
the worker pod and owning daemonset.

owner reference can only be updated if the worker has delete permissions
for NodeFeatures.

if owner reference has blockOwnerDeletion (as the case for the daemonset
owner reference) then it requires update permissions to the finalizers
of the owner, to avoid this, we set blockOwnerDeleteion to false for all
owners referenced from NFD worker pod when setting/updating NodeFeature
owner ref.

Signed-off-by: adrianc <adrianc@nvidia.com>
2025-01-08 13:44:30 +02:00
..
gc chore/deployment: add resources requests and limits for helm and Kustomize 2024-03-22 14:27:44 +01:00
master deployment: add startupProbe for nfd-master 2024-12-12 20:00:49 +02:00
nfd-crds Update autogenerated code 2024-12-18 12:30:46 +02:00
noderesourcetopologies-crd nrt-api: Update to v0.1.0 to use v1alpha2 2023-02-09 12:03:18 +01:00
rbac Add support running with OwnerReferencesPermissionEnforcement 2025-01-08 13:44:30 +02:00
rbac-topologyupdater topology-updater: Add owner reference to NRT object 2024-03-15 16:36:27 +02:00
topologyupdater-daemonset nfd-topology-updater: Add liveness probe 2024-04-03 13:15:54 +03:00
worker-daemonset Cleanup for NodeFeature API being GA 2024-12-13 15:40:46 +02:00
worker-job Cleanup for NodeFeature API being GA 2024-12-13 15:40:46 +02:00