-
Notifications
You must be signed in to change notification settings - Fork 39.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ensure namespace exists as part of RBAC reconciliation #48480
Ensure namespace exists as part of RBAC reconciliation #48480
Conversation
d1edcff
to
f047ab3
Compare
cc @kubernetes/sig-auth-pr-reviews @kubernetes/sig-auth-bugs |
f047ab3
to
d5730f4
Compare
Removing label |
Thanks @liggitt! /lgtm So basically this makes the Role(Binding) bootstrapping wait until the namespace exists? |
You suck at vacation. /approve |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: deads2k, liggitt, luxas Associated issue: 335 The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these OWNERS Files:
You can indicate your approval by writing |
Automatic merge from submit-queue (batch tested with PRs 48480, 48353) |
@liggitt Ping me on the cherrypick as well and I'll lgtm |
Commit found in the "release-1.7" branch appears to be this PR. Removing the "cherrypick-candidate" label. If this is an error find help to get your PR picked. |
reconciliation can race with the controller that creates the namespaces containing the bootstrap roles. if it loses, it gets a NotFound error trying to create the namespaced role/rolebinding.
Fixes kubernetes/kubeadm#335