Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use helm for pko #1073

Merged
merged 8 commits into from
Jan 20, 2025
Merged

Use helm for pko #1073

merged 8 commits into from
Jan 20, 2025

Conversation

janboll
Copy link
Collaborator

@janboll janboll commented Jan 9, 2025

What this PR does

Jira:
Link to demo recording:

Special notes for your reviewer

Copy link

Please rebase pull request.

@janboll janboll changed the title WIP use helm for pko Use helm for pko Jan 17, 2025
@janboll janboll marked this pull request as ready for review January 17, 2025 09:05
pko/Makefile Show resolved Hide resolved
pko/config.mk Outdated Show resolved Hide resolved
dev-infrastructure/configurations/global-roles.bicepparam Outdated Show resolved Hide resolved
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a more fine grained role we could use?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I used the same role used by the PKO team: https://github.com/package-operator/package-operator/blob/f564bbba288a9e3748c871c0eaec329de2ec4cd2/config/self-bootstrap-job.yaml.tpl#L16

So I'll have to ask, if we can reduce the access.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i think it also comes down to what packages this PKO instance will manage. as we develop a feeling about what kind of resources RVMO will bring in, we could narrow the role towards that.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed, cause the service account assigned to is used by the operator during runtime.

Copy link
Collaborator

@geoberle geoberle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM
afaiu the slack thread with the PKO folks, they are thinking about the removal of the image pin, hence we might be able to avoid our own build in the future

@janboll janboll merged commit d2c4cc1 into main Jan 20, 2025
11 checks passed
@janboll janboll deleted the refactor-pko branch January 20, 2025 09:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants