openshift
USHIFT-227: Cluster Policy Controller integration
Which issue(s) this PR addresses:
Closes USHIFT-227
This PR carry the following items:
- Enabling Cluster Policy Controller
- Disabling resource-quota and cluster-quota-reconciliation controllers.
- Creating of openshift-kube-controller-manager namespace (it's where the CreatedSCCRanges events happen)
- Applying csr-approver and namespace-security cluster roles and cluster role bindings. (required by the CPC)
@oglok would you also please update the PR description with all the necessary steps that were carried? It will be easier to follow the changes and why their were needed.
mmit are in most cases obsolete in the following one. Would it be possible to clean the commits first? Making sure only the
PR's commits are squashed and rebased.
/retest-required
Remaining retests: 2 against base HEAD 65c74b01120297105030a83e41fc0574d3fc9062 and 8 for PR HEAD 0c858649ec324d15530598b443ef3f67eae7a7cc in total
/retest-required
Remaining retests: 1 against base HEAD 65c74b01120297105030a83e41fc0574d3fc9062 and 7 for PR HEAD 0c858649ec324d15530598b443ef3f67eae7a7cc in total
The e2e-openshift-conformance-sig-storage is failing. Apparently, there is something in the Cluster Policy Controller preventing the CSI registrar container to work. Investigating.
There are two parameters in the node object that are not being written due to this PR (for whatever reason).
The following annotation:
csi.volume.kubernetes.io/nodeid: '{"topolvm.cybozu.com":"maxwell.ogloknet.com"}'
and the following label:
topology.topolvm.cybozu.com/node: maxwell.ogloknet.com
/retest-required
https://search.ci.openshift.org/?search=resource+Deployment%3Aopenshift-storage%2Ftopolvm-controller&maxAge=336h&context=-1&type=build-log&name=.-microshift-.&excludeName=&maxMatches=5&maxBytes=20971520&groupBy=job
[APPROVALNOTIFIER] This PR is APPROVED
This pull-request has been approved by: benluddy, mangelajo, oglok
The full list of commands accepted by this bot can be found here.
The pull request process is described here
- ~~OWNERS~~ [mangelajo,oglok]
Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment
![openshift-ci[bot] avatar](https://avatars.githubusercontent.com/in/91280?v=4 "Published by a pub.dev verified publisher"){kind=small}
/retest-required
Remaining retests: 2 against base HEAD e6980e25714fa6ae188c76aa52615388372e66a3 and 8 for PR HEAD 3a28b7a0962b10c6fbd147378455f2bc9bda08fd in total
@oglok: all tests passed!
Full PR test history. Your PR dashboard.
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.