Comments (3)
# Copyright 2019 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# this contains fixes ---- sreenivas-ps
apiVersion: v1
kind: Namespace
metadata:
labels:
app: autoneg
control-plane: controller-manager
name: autoneg-system
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: autoneg
namespace: autoneg-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app: autoneg
name: autoneg-leader-election-role
namespace: autoneg-system
rules:
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- ""
resources:
- configmaps/status
verbs:
- get
- update
- patch
- apiGroups:
- ""
resources:
- events
verbs:
- create
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
creationTimestamp: null
labels:
app: autoneg
name: autoneg-manager-role
rules:
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- services/status
verbs:
- get
- patch
- update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app: autoneg
name: autoneg-proxy-role
rules:
- apiGroups:
- authentication.k8s.io
resources:
- tokenreviews
verbs:
- create
- apiGroups:
- authorization.k8s.io
resources:
- subjectaccessreviews
verbs:
- create
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app: autoneg
name: autoneg-leader-election-rolebinding
namespace: autoneg-system
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: autoneg-leader-election-role
subjects:
- kind: ServiceAccount
name: autoneg
namespace: autoneg-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app: autoneg
name: autoneg-manager-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: autoneg-manager-role
subjects:
- kind: ServiceAccount
name: autoneg
namespace: autoneg-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app: autoneg
name: autoneg-proxy-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: autoneg-proxy-role
subjects:
- kind: ServiceAccount
name: autoneg
namespace: autoneg-system
---
apiVersion: v1
kind: Service
metadata:
annotations:
prometheus.io/port: "8443"
prometheus.io/scheme: https
prometheus.io/scrape: "true"
labels:
app: autoneg
control-plane: controller-manager
name: autoneg-controller-manager-metrics-service
namespace: autoneg-system
spec:
ports:
- name: https
port: 8443
targetPort: https
selector:
app: autoneg
control-plane: controller-manager
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: autoneg
control-plane: controller-manager
name: autoneg-controller-manager
namespace: autoneg-system
spec:
replicas: 1
selector:
matchLabels:
app: autoneg
control-plane: controller-manager
template:
metadata:
labels:
app: autoneg
control-plane: controller-manager
spec:
containers:
- args:
- --metrics-addr=127.0.0.1:8080
- --enable-leader-election
command:
- /manager
image: ghcr.io/googlecloudplatform/gke-autoneg-controller/gke-autoneg-controller:v0.9.6
name: manager
resources:
limits:
cpu: 100m
memory: 30Mi
requests:
cpu: 100m
memory: 20Mi
securityContext:
allowPrivilegeEscalation: false
privileged: false
- args:
- --secure-listen-address=0.0.0.0:8443
- --upstream=http://127.0.0.1:8080/
- --logtostderr=true
- --v=10
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
name: kube-rbac-proxy
ports:
- containerPort: 8443
name: https
securityContext:
allowPrivilegeEscalation: false
privileged: false
securityContext:
runAsNonRoot: true
serviceAccountName: autoneg
terminationGracePeriodSeconds: 10
from gke-autoneg-controller.
I don't see that in the current deploy.yaml, are you sure you don't have an old one?
from gke-autoneg-controller.
@rosmo : hmmm, I do not remember but it had references to default service account. Thanks.
from gke-autoneg-controller.
Related Issues (20)
- Autoneg does not provide default configuration for max-rate-per-endpoint and max-connections-per-endpoint HOT 1
- capacityScaler can't be set to zero for global load balancer HOT 23
- Do you have plans for create Helm Chart for Autoneg installation? HOT 4
- #109 overrides external managed capacity scaling HOT 9
- Add "lifecycle" key in terraform module HOT 3
- Update Docker image HOT 5
- Workload identity 401 invalid credentials error
- Configurable default capacityScaler HOT 1
- Custom role error when recreating project
- Unauthorized metrics endpoint HOT 2
- error CONNECTION balancing mode is not supported for protocol HTTP, invalid HOT 8
- Observing ACCESS_TOKEN_SCOPE_INSUFFICIENT when creating service HOT 11
- NEGs are not deleted during service deletion HOT 7
- Update Ginkgo due to deprecation warning HOT 1
- Controller user agent hardcoded to 0.9.7-dev HOT 1
- Update guide or description of compatibility guarantees HOT 3
- Additional pod and container hardening HOT 1
- Mixed logging when configuring structured logging
- Unused ConfigMap in deploy manifest HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from gke-autoneg-controller.