feat: ensure rbac permission and add some secret

Signed-off-by: YouXam <[email protected]>

Makefile

@@ -190,7 +190,6 @@ uninstall: manifests kustomize ## Uninstall CRDs from the K8s cluster specified
 
 .PHONY: deploy
 deploy: manifests kustomize ## Deploy controller to the K8s cluster specified in ~/.kube/config.
-	cd config/manager && $(KUSTOMIZE) edit set image controller=${IMG}
 	$(KUSTOMIZE) build config/default | $(KUBECTL) apply -f -
 
 .PHONY: undeploy

api/v1alpha1/aimodel_types.go

@@ -28,7 +28,7 @@ type AIModelSpec struct {
 	// INSERT ADDITIONAL SPEC FIELDS - desired state of cluster
 	// Important: Run "make" to regenerate code after modifying this file
 
-	// Type of the AIModel, could be "local" or "remote"
+	// The Type of the AIModel could be "local" or "remote"
 	Type string `json:"type"`
 
 	// Model is the name of the model

config/crd/bases/model.youxam.com_aimodels.yaml

@@ -75,7 +75,7 @@ spec:
                 format: int32
                 type: integer
               type:
-                description: Type of the AIModel, could be "local" or "remote"
+                description: The Type of the AIModel could be "local" or "remote"
                 type: string
             required:
             - image

config/manager/kustomization.yaml

@@ -6,3 +6,8 @@ images:
 - name: controller
   newName: youxam/uplion-aimodel-operator
   newTag: latest
+secretGenerator:
+- literals:
+  - PULSAR_ADMIN_URL="http://pulsar-local-broker.pulsar.svc.cluster.local:8080"
+  - PULSAR_URL="pulsar://pulsar-local-broker.pulsar.svc.cluster.local:6650"
+  name: manager-secret

config/manager/manager.yaml

@@ -89,8 +89,9 @@ spec:
             port: 8081
           initialDelaySeconds: 5
           periodSeconds: 10
-        # TODO(user): Configure the resources accordingly based on the project requirements.
-        # More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+        envFrom:
+          - secretRef:
+              name: manager-secret
         resources:
           limits:
             cpu: 500m

config/rbac/role.yaml

@@ -52,6 +52,18 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - keda.sh
+  resources:
+  - scaledobjects
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - model.youxam.com
   resources:

internal/controller/aimodel_controller.go

@@ -73,6 +73,7 @@ type AIModelReconciler struct {
 //+kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=core,resources=events,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=core,resources=pods,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=keda.sh,resources=scaledobjects,verbs=get;list;watch;create;update;patch;delete
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.

worker/demo.yaml

@@ -7,7 +7,8 @@ metadata:
 spec:
   type: local
   model: TinyLlama-1.1B
-  replicas: 4
+  msgBacklogThreshold: 2
+  replicas: 3
   image: youxam/uplion-aimodel-operator-test-worker:latest
 ---
 # Service