Skip to content

Commit 4025657

Browse files
zhaohuabingzhaohuabing
committed
simplify
Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
1 parent 846891d commit 4025657

33 files changed

Lines changed: 470 additions & 468 deletions

‎charts/gateway-helm/templates/_rbac.tpl‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ All namespaced resources for Envoy Gateway RBAC.
1818
All cluster scoped resources for Envoy Gateway RBAC.
1919
*/}}
2020
{{- define "eg.rbac.cluster" -}}
21-
- {{ include "eg.rbac.cluster.basic" . | nindent 2 | trim }}
21+
{{ include "eg.rbac.cluster.basic" . }}
2222
- {{ include "eg.rbac.cluster.gateway.networking" . | nindent 2 | trim }}
2323
- {{ include "eg.rbac.cluster.gateway.networking.status" . | nindent 2 | trim }}
2424
- {{ include "eg.rbac.cluster.multiclusterservices" . | nindent 2 | trim }}
@@ -157,16 +157,16 @@ Cluster scope
157157
*/}}
158158

159159
{{- define "eg.rbac.cluster.basic" -}}
160-
apiGroups:
161-
- ""
162-
resources:
163-
- nodes
164-
- namespaces
165-
- serviceaccounts
166-
verbs:
167-
- get
168-
- list
169-
- watch
160+
- apiGroups:
161+
- ""
162+
resources:
163+
- nodes
164+
- namespaces
165+
- serviceaccounts
166+
verbs:
167+
- get
168+
- list
169+
- watch
170170
- apiGroups:
171171
- autoscaling
172172
resources:

‎internal/cmd/server.go‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -178,7 +178,9 @@ func startRunners(ctx context.Context, cfg *config.Server, runnerErrors *message
178178
// The Elected channel is used to block the tasks that are waiting for the leader to be elected.
179179
// It will be closed once the leader is elected in the controller manager.
180180
cfg.Elected = make(chan struct{})
181-
// ProviderClient is a runtime-only channel for sharing the k8s provider client with the infra runner.
181+
// ProviderClient is a channel for sharing the k8s provider client between the provider runner and the infrastructure runner.
182+
// It will be initialized if the provider type is kubernetes, and the provider runner will send the client to this channel once it's created.
183+
// The infrastructure runner will receive the client from this channel when it starts, and use it to create the manager.
182184
cfg.ProviderClient = make(chan client.Client, 1)
183185

184186
// Setup the Extension Manager

‎internal/envoygateway/config/config.go‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,8 +41,9 @@ type Server struct {
4141
Logger logging.Logger
4242
// Elected chan is used to signal when an EG instance is elected as leader.
4343
Elected chan struct{}
44-
// ProviderClient is used to pass the Kubernetes provider client from the provider
45-
// runner to the infrastructure runner for direct client injection.
44+
// ProviderClient is a channel for sharing the k8s provider client between the provider runner and the infrastructure runner.
45+
// It will be initialized if the provider type is kubernetes, and the provider runner will send the client to this channel once it's created.
46+
// The infrastructure runner will receive the client from this channel when it starts, and use it to create the manager.
4647
ProviderClient chan client.Client
4748
// Stdout is the writer for standard output.
4849
Stdout io.Writer

‎internal/infrastructure/runner/runner.go‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,6 @@ package runner
77

88
import (
99
"context"
10-
"fmt"
1110
"sync"
1211

1312
"github.com/telepresenceio/watchable"
@@ -117,7 +116,8 @@ func (r *Runner) updateProxyInfraFromSubscription(ctx context.Context, sub <-cha
117116
func(update message.Update[string, *ir.Infra], errChan chan error) {
118117
r.Logger.Info("received an update", "key", update.Key, "delete", update.Delete)
119118

120-
// Handle rate limit infra once on first IR update.
119+
// Since the rate limit infra is shared by all proxy infra, we only need to create it once when the first IR
120+
// update is received.
121121
r.rateLimitInfraOnce.Do(func() {
122122
if r.EnvoyGateway.RateLimit != nil {
123123
if err := r.mgr.CreateOrUpdateRateLimitInfra(ctx); err != nil {

‎internal/provider/runner/runner.go‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -86,9 +86,8 @@ func (r *Runner) createKubernetesProvider(ctx context.Context, errors message.Ru
8686
return nil, fmt.Errorf("failed to create provider %s: %w", egv1a1.ProviderTypeKubernetes, err)
8787
}
8888

89-
if r.ProviderClient != nil {
90-
r.ProviderClient <- p.GetClient()
91-
}
89+
// Send the kube client to the provider client channel for the infrastructure runner to use.
90+
r.ProviderClient <- p.GetClient()
9291

9392
return p, err
9493
}

‎test/e2e/tests/ratelimit.go‎

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ var RateLimitCIDRMatchTest = suite.ConformanceTest{
7373
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
7474
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
7575
// Wait for the ratelimit server to be running and ready.
76-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
76+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
7777
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
7878
types.NamespacedName{Name: "ratelimit-all-ips", Namespace: ns},
7979
suite.ControllerName, gwapiv1.ParentReference{
@@ -139,7 +139,7 @@ var RateLimitCIDRInvertMatchAlwaysEnforceTest = suite.ConformanceTest{
139139
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
140140
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
141141
// Wait for the ratelimit server to be running and ready.
142-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
142+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
143143
ratelimitHeader := make(map[string]string)
144144
expectOkResp := http.ExpectedResponse{
145145
Request: http.Request{
@@ -207,7 +207,7 @@ var RateLimitCIDRInvertAlwaysExemptTest = suite.ConformanceTest{
207207
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
208208
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
209209
// Wait for the ratelimit server to be running and ready.
210-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
210+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
211211
expectOkResp := http.ExpectedResponse{
212212
Request: http.Request{
213213
Path: "/never-limited",
@@ -239,7 +239,7 @@ var RateLimitMethodMatchTest = suite.ConformanceTest{
239239
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
240240
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
241241
// Wait for the ratelimit server to be running and ready.
242-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
242+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
243243

244244
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
245245
types.NamespacedName{Name: "ratelimit-method-match", Namespace: ns},
@@ -330,7 +330,7 @@ var RateLimitPathMatchTest = suite.ConformanceTest{
330330
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
331331
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
332332
// Wait for the ratelimit server to be running and ready.
333-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
333+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
334334

335335
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
336336
types.NamespacedName{Name: "ratelimit-path-match", Namespace: ns},
@@ -448,7 +448,7 @@ var RateLimitHeaderMatchTest = suite.ConformanceTest{
448448
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
449449
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
450450
// Wait for the ratelimit server to be running and ready.
451-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
451+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
452452

453453
// TODO: this seems not right,
454454
// BTP targets to HTTPRoute instead of Gateway,
@@ -536,7 +536,7 @@ var GlobalRateLimitHeaderInvertMatchTest = suite.ConformanceTest{
536536
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
537537
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
538538
// Wait for the ratelimit server to be running and ready.
539-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
539+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
540540

541541
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
542542
types.NamespacedName{Name: "ratelimit-anded-headers-with-invert", Namespace: ns},
@@ -634,7 +634,7 @@ var RateLimitHeadersDisabled = suite.ConformanceTest{
634634
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
635635
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
636636
// Wait for the ratelimit server to be running and ready.
637-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
637+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
638638

639639
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
640640
types.NamespacedName{Name: "ratelimit-headers-disabled-btp", Namespace: ns},
@@ -734,7 +734,7 @@ var RateLimitBasedJwtClaimsTest = suite.ConformanceTest{
734734
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
735735
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
736736
// Wait for the ratelimit server to be running and ready.
737-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
737+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
738738

739739
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
740740
types.NamespacedName{Name: "ratelimit-specific-user", Namespace: ns},
@@ -878,7 +878,7 @@ var RateLimitMultipleListenersTest = suite.ConformanceTest{
878878
gwNN := types.NamespacedName{Name: "eg-rate-limit", Namespace: ns}
879879
gwHost := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
880880
// Wait for the ratelimit server to be running and ready.
881-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
881+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
882882

883883
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
884884
types.NamespacedName{Name: "ratelimit-all-ips", Namespace: ns},
@@ -944,7 +944,7 @@ var RateLimitHeadersAndCIDRMatchTest = suite.ConformanceTest{
944944
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
945945
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
946946
// Wait for the ratelimit server to be running and ready.
947-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
947+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
948948

949949
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
950950
types.NamespacedName{Name: "ratelimit-headers-and-cidr", Namespace: ns},
@@ -1071,7 +1071,7 @@ var UsageRateLimitTest = suite.ConformanceTest{
10711071
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
10721072
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
10731073
// Wait for the ratelimit server to be running and ready.
1074-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
1074+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
10751075

10761076
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
10771077
types.NamespacedName{Name: "usage-rate-limit", Namespace: ns},
@@ -1151,7 +1151,7 @@ var RateLimitGlobalSharedCidrMatchTest = suite.ConformanceTest{
11511151
// Get gateway address for the second route
11521152
gwAddr2 := kubernetes.GatewayAndHTTPRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), route2NN)
11531153
// Wait for the ratelimit server to be running and ready.
1154-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
1154+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
11551155

11561156
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
11571157
types.NamespacedName{Name: "ratelimit-all-ips", Namespace: ns},
@@ -1230,7 +1230,7 @@ var RateLimitGlobalSharedGatewayHeaderMatchTest = suite.ConformanceTest{
12301230
// Get gateway address for the second route
12311231
gwAddr2 := kubernetes.GatewayAndHTTPRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), route2NN)
12321232
// Wait for the ratelimit server to be running and ready.
1233-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
1233+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
12341234

12351235
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
12361236
types.NamespacedName{Name: "ratelimit-header-match-gateway", Namespace: ns},
@@ -1343,7 +1343,7 @@ var RateLimitGlobalMergeTest = suite.ConformanceTest{
13431343
gwAddr1 := kubernetes.GatewayAndHTTPRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), route1NN)
13441344
gwAddr2 := kubernetes.GatewayAndHTTPRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), route2NN)
13451345
// Wait for the ratelimit server to be running and ready.
1346-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
1346+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
13471347

13481348
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
13491349
types.NamespacedName{Name: "ratelimit-headers-route-policy", Namespace: ns},
@@ -1543,7 +1543,7 @@ var RateLimitGlobalShadowModeTest = suite.ConformanceTest{
15431543
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
15441544
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, shadowRouteNN)
15451545
// Wait for the ratelimit server to be running and ready.
1546-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
1546+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
15471547

15481548
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
15491549
types.NamespacedName{Name: "shadow-mode-ratelimit", Namespace: ns},
@@ -1599,7 +1599,7 @@ var RateLimitQueryParametersTest = suite.ConformanceTest{
15991599
gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
16001600
gwAddr := kubernetes.GatewayAndRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), &gwapiv1.HTTPRoute{}, false, routeNN)
16011601
// Wait for the ratelimit server to be running and ready.
1602-
WaitForPods(t, suite.Client, ns, map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
1602+
WaitForPods(t, suite.Client,"envoy-gateway-system", map[string]string{"app.kubernetes.io/component": "ratelimit"}, corev1.PodRunning, &PodReady)
16031603

16041604
BackendTrafficPolicyMustBeAccepted(t, suite.Client,
16051605
types.NamespacedName{Name: "ratelimit-query-parameters", Namespace: ns},

‎test/helm/gateway-helm/certgen-annotations.out.yaml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -69,22 +69,22 @@ rules:
6969
- get
7070
- list
7171
- watch
72-
- apiGroups:
73-
- autoscaling
74-
resources:
75-
- horizontalpodautoscalers
76-
verbs:
77-
- get
78-
- list
79-
- watch
80-
- apiGroups:
81-
- policy
82-
resources:
83-
- poddisruptionbudgets
84-
verbs:
85-
- get
86-
- list
87-
- watch
72+
- apiGroups:
73+
- autoscaling
74+
resources:
75+
- horizontalpodautoscalers
76+
verbs:
77+
- get
78+
- list
79+
- watch
80+
- apiGroups:
81+
- policy
82+
resources:
83+
- poddisruptionbudgets
84+
verbs:
85+
- get
86+
- list
87+
- watch
8888
- apiGroups:
8989
- gateway.networking.k8s.io
9090
resources:

‎test/helm/gateway-helm/certgen-args.out.yaml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -69,22 +69,22 @@ rules:
6969
- get
7070
- list
7171
- watch
72-
- apiGroups:
73-
- autoscaling
74-
resources:
75-
- horizontalpodautoscalers
76-
verbs:
77-
- get
78-
- list
79-
- watch
80-
- apiGroups:
81-
- policy
82-
resources:
83-
- poddisruptionbudgets
84-
verbs:
85-
- get
86-
- list
87-
- watch
72+
- apiGroups:
73+
- autoscaling
74+
resources:
75+
- horizontalpodautoscalers
76+
verbs:
77+
- get
78+
- list
79+
- watch
80+
- apiGroups:
81+
- policy
82+
resources:
83+
- poddisruptionbudgets
84+
verbs:
85+
- get
86+
- list
87+
- watch
8888
- apiGroups:
8989
- gateway.networking.k8s.io
9090
resources:

‎test/helm/gateway-helm/certgen-labels.out.yaml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -69,22 +69,22 @@ rules:
6969
- get
7070
- list
7171
- watch
72-
- apiGroups:
73-
- autoscaling
74-
resources:
75-
- horizontalpodautoscalers
76-
verbs:
77-
- get
78-
- list
79-
- watch
80-
- apiGroups:
81-
- policy
82-
resources:
83-
- poddisruptionbudgets
84-
verbs:
85-
- get
86-
- list
87-
- watch
72+
- apiGroups:
73+
- autoscaling
74+
resources:
75+
- horizontalpodautoscalers
76+
verbs:
77+
- get
78+
- list
79+
- watch
80+
- apiGroups:
81+
- policy
82+
resources:
83+
- poddisruptionbudgets
84+
verbs:
85+
- get
86+
- list
87+
- watch
8888
- apiGroups:
8989
- gateway.networking.k8s.io
9090
resources:

‎test/helm/gateway-helm/certjen-custom-scheduling.out.yaml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -69,22 +69,22 @@ rules:
6969
- get
7070
- list
7171
- watch
72-
- apiGroups:
73-
- autoscaling
74-
resources:
75-
- horizontalpodautoscalers
76-
verbs:
77-
- get
78-
- list
79-
- watch
80-
- apiGroups:
81-
- policy
82-
resources:
83-
- poddisruptionbudgets
84-
verbs:
85-
- get
86-
- list
87-
- watch
72+
- apiGroups:
73+
- autoscaling
74+
resources:
75+
- horizontalpodautoscalers
76+
verbs:
77+
- get
78+
- list
79+
- watch
80+
- apiGroups:
81+
- policy
82+
resources:
83+
- poddisruptionbudgets
84+
verbs:
85+
- get
86+
- list
87+
- watch
8888
- apiGroups:
8989
- gateway.networking.k8s.io
9090
resources:

0 commit comments

Comments
 (0)