Merge pull request #378 from rfranzke/fix/clusterroles

Add missing owner reference to MCM cluster role
gardener-attic · Oct 21, 2019 · f60aa26 · f60aa26
2 parents f795f56 + 1054ea0
commit f60aa26
Show file tree

Hide file tree

Showing 25 changed files with 763 additions and 0 deletions.
diff --git a/...vider-alicloud/charts/internal/machine-controller-manager/seed/templates/clusterrole.yaml b/...vider-alicloud/charts/internal/machine-controller-manager/seed/templates/clusterrole.yaml
@@ -3,6 +3,13 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: extensions.gardener.cloud:{{ .Values.providerName }}:{{ .Release.Namespace }}:machine-controller-manager
+  ownerReferences:
+  - apiVersion: v1
+    kind: Namespace
+    name: {{ .Release.Namespace }}
+    uid: {{ .Values.namespace.uid }}
+    controller: true
+    blockOwnerDeletion: true
 rules:
 - apiGroups:
   - machine.sapcloud.io

diff --git a/controllers/provider-alicloud/example/20-crd-managedresource.yaml b/controllers/provider-alicloud/example/20-crd-managedresource.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: managedresources.resources.gardener.cloud
+spec:
+  group: resources.gardener.cloud
+  versions:
+  - name: v1alpha1
+    served: true
+    storage: true
+  version: v1alpha1
+  scope: Namespaced
+  names:
+    plural: managedresources
+    singular: managedresource
+    kind: ManagedResource
+    shortNames:
+    - mr
+  additionalPrinterColumns:
+  - name: Class
+    type: string
+    JSONPath: .spec.class
+  - name: Age
+    type: date
+    JSONPath: .metadata.creationTimestamp
+  subresources:
+    status: {}
diff --git a/controllers/provider-alicloud/example/20-crd-operatingsystemconfig.yaml b/controllers/provider-alicloud/example/20-crd-operatingsystemconfig.yaml
@@ -0,0 +1,32 @@
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: operatingsystemconfigs.extensions.gardener.cloud
+spec:
+  group: extensions.gardener.cloud
+  versions:
+  - name: v1alpha1
+    served: true
+    storage: true
+  version: v1alpha1
+  scope: Namespaced
+  names:
+    plural: operatingsystemconfigs
+    singular: operatingsystemconfig
+    kind: OperatingSystemConfig
+    shortNames:
+    - osc
+  additionalPrinterColumns:
+  - name: Type
+    type: string
+    description: The type of the operating system configuration.
+    JSONPath: .spec.type
+  - name: State
+    type: string
+    JSONPath: .status.lastOperation.state
+  - name: Age
+    type: date
+    JSONPath: .metadata.creationTimestamp
+  subresources:
+    status: {}
diff --git a/controllers/provider-alicloud/example/20-crd-vpa.yaml b/controllers/provider-alicloud/example/20-crd-vpa.yaml
@@ -0,0 +1,60 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: verticalpodautoscalers.autoscaling.k8s.io
+spec:
+  group: autoscaling.k8s.io
+  scope: Namespaced
+  names:
+    plural: verticalpodautoscalers
+    singular: verticalpodautoscaler
+    kind: VerticalPodAutoscaler
+    shortNames:
+    - vpa
+  version: v1beta1
+  versions:
+  - name: v1beta1
+    served: true
+    storage: false
+  - name: v1beta2
+    served: true
+    storage: true
+  validation:
+    # openAPIV3Schema is the schema for validating custom objects.
+    openAPIV3Schema:
+      properties:
+        spec:
+          required: []
+          properties:
+            targetRef:
+              type: object
+            updatePolicy:
+              properties:
+                updateMode:
+                  type: string
+            resourcePolicy:
+              properties:
+                containerPolicies:
+                  type: array
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: verticalpodautoscalercheckpoints.autoscaling.k8s.io
+spec:
+  group: autoscaling.k8s.io
+  scope: Namespaced
+  names:
+    plural: verticalpodautoscalercheckpoints
+    singular: verticalpodautoscalercheckpoint
+    kind: VerticalPodAutoscalerCheckpoint
+    shortNames:
+    - vpacheckpoint
+  version: v1beta1
+  versions:
+  - name: v1beta1
+    served: true
+    storage: false
+  - name: v1beta2
+    served: true
+    storage: true
diff --git a/...s/provider-aws/charts/internal/machine-controller-manager/seed/templates/clusterrole.yaml b/...s/provider-aws/charts/internal/machine-controller-manager/seed/templates/clusterrole.yaml
@@ -3,6 +3,13 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: extensions.gardener.cloud:{{ .Values.providerName }}:{{ .Release.Namespace }}:machine-controller-manager
+  ownerReferences:
+  - apiVersion: v1
+    kind: Namespace
+    name: {{ .Release.Namespace }}
+    uid: {{ .Values.namespace.uid }}
+    controller: true
+    blockOwnerDeletion: true
 rules:
 - apiGroups:
   - machine.sapcloud.io

diff --git a/controllers/provider-aws/example/20-crd-managedresource.yaml b/controllers/provider-aws/example/20-crd-managedresource.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: managedresources.resources.gardener.cloud
+spec:
+  group: resources.gardener.cloud
+  versions:
+  - name: v1alpha1
+    served: true
+    storage: true
+  version: v1alpha1
+  scope: Namespaced
+  names:
+    plural: managedresources
+    singular: managedresource
+    kind: ManagedResource
+    shortNames:
+    - mr
+  additionalPrinterColumns:
+  - name: Class
+    type: string
+    JSONPath: .spec.class
+  - name: Age
+    type: date
+    JSONPath: .metadata.creationTimestamp
+  subresources:
+    status: {}
diff --git a/controllers/provider-aws/example/20-crd-operatingsystemconfig.yaml b/controllers/provider-aws/example/20-crd-operatingsystemconfig.yaml
@@ -0,0 +1,32 @@
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: operatingsystemconfigs.extensions.gardener.cloud
+spec:
+  group: extensions.gardener.cloud
+  versions:
+  - name: v1alpha1
+    served: true
+    storage: true
+  version: v1alpha1
+  scope: Namespaced
+  names:
+    plural: operatingsystemconfigs
+    singular: operatingsystemconfig
+    kind: OperatingSystemConfig
+    shortNames:
+    - osc
+  additionalPrinterColumns:
+  - name: Type
+    type: string
+    description: The type of the operating system configuration.
+    JSONPath: .spec.type
+  - name: State
+    type: string
+    JSONPath: .status.lastOperation.state
+  - name: Age
+    type: date
+    JSONPath: .metadata.creationTimestamp
+  subresources:
+    status: {}
diff --git a/controllers/provider-aws/example/20-crd-vpa.yaml b/controllers/provider-aws/example/20-crd-vpa.yaml
@@ -0,0 +1,60 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: verticalpodautoscalers.autoscaling.k8s.io
+spec:
+  group: autoscaling.k8s.io
+  scope: Namespaced
+  names:
+    plural: verticalpodautoscalers
+    singular: verticalpodautoscaler
+    kind: VerticalPodAutoscaler
+    shortNames:
+    - vpa
+  version: v1beta1
+  versions:
+  - name: v1beta1
+    served: true
+    storage: false
+  - name: v1beta2
+    served: true
+    storage: true
+  validation:
+    # openAPIV3Schema is the schema for validating custom objects.
+    openAPIV3Schema:
+      properties:
+        spec:
+          required: []
+          properties:
+            targetRef:
+              type: object
+            updatePolicy:
+              properties:
+                updateMode:
+                  type: string
+            resourcePolicy:
+              properties:
+                containerPolicies:
+                  type: array
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: verticalpodautoscalercheckpoints.autoscaling.k8s.io
+spec:
+  group: autoscaling.k8s.io
+  scope: Namespaced
+  names:
+    plural: verticalpodautoscalercheckpoints
+    singular: verticalpodautoscalercheckpoint
+    kind: VerticalPodAutoscalerCheckpoint
+    shortNames:
+    - vpacheckpoint
+  version: v1beta1
+  versions:
+  - name: v1beta1
+    served: true
+    storage: false
+  - name: v1beta2
+    served: true
+    storage: true
diff --git a/...provider-azure/charts/internal/machine-controller-manager/seed/templates/clusterrole.yaml b/...provider-azure/charts/internal/machine-controller-manager/seed/templates/clusterrole.yaml
@@ -3,6 +3,13 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: extensions.gardener.cloud:{{ .Values.providerName }}:{{ .Release.Namespace }}:machine-controller-manager
+  ownerReferences:
+  - apiVersion: v1
+    kind: Namespace
+    name: {{ .Release.Namespace }}
+    uid: {{ .Values.namespace.uid }}
+    controller: true
+    blockOwnerDeletion: true
 rules:
 - apiGroups:
   - machine.sapcloud.io

diff --git a/controllers/provider-azure/example/20-crd-managedresource.yaml b/controllers/provider-azure/example/20-crd-managedresource.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: managedresources.resources.gardener.cloud
+spec:
+  group: resources.gardener.cloud
+  versions:
+  - name: v1alpha1
+    served: true
+    storage: true
+  version: v1alpha1
+  scope: Namespaced
+  names:
+    plural: managedresources
+    singular: managedresource
+    kind: ManagedResource
+    shortNames:
+    - mr
+  additionalPrinterColumns:
+  - name: Class
+    type: string
+    JSONPath: .spec.class
+  - name: Age
+    type: date
+    JSONPath: .metadata.creationTimestamp
+  subresources:
+    status: {}
diff --git a/controllers/provider-azure/example/20-crd-operatingsystemconfig.yaml b/controllers/provider-azure/example/20-crd-operatingsystemconfig.yaml
@@ -0,0 +1,32 @@
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: operatingsystemconfigs.extensions.gardener.cloud
+spec:
+  group: extensions.gardener.cloud
+  versions:
+  - name: v1alpha1
+    served: true
+    storage: true
+  version: v1alpha1
+  scope: Namespaced
+  names:
+    plural: operatingsystemconfigs
+    singular: operatingsystemconfig
+    kind: OperatingSystemConfig
+    shortNames:
+    - osc
+  additionalPrinterColumns:
+  - name: Type
+    type: string
+    description: The type of the operating system configuration.
+    JSONPath: .spec.type
+  - name: State
+    type: string
+    JSONPath: .status.lastOperation.state
+  - name: Age
+    type: date
+    JSONPath: .metadata.creationTimestamp
+  subresources:
+    status: {}