linkerd2/pkg
Andrew Seigner ec5a0ca8d9
Authorization-aware control-plane components (#2349)
The control-plane components relied on a `--single-namespace` param,
passed from `linkerd install` into each individual component, to
determine which namespaces they were authorized to access, and whether
to support ServiceProfiles. This command-line flag was redundant given
the authorization rules encoded in the parent `linkerd install` output,
via [Cluster]Role[Binding]s.

Modify the control-plane components to query Kubernetes at startup to
determine which namespaces they are authorized to access, and whether
ServiceProfile support is available. This allows removal of the
`--single-namespace` flag on the components.

Also update `bin/test-cleanup` to cleanup the ServiceProfile CRD.

TODO:
- Remove `--single-namespace` flag on `linkerd install`, part of #2164

Signed-off-by: Andrew Seigner <siggy@buoyant.io>
2019-02-26 11:54:52 -08:00
..
addr lint: Enable scopelint (#2364) 2019-02-24 08:59:51 -08:00
admin Enable lint check for comments (#2023) 2019-01-02 14:03:59 -08:00
filesonly Enable lint check for comments (#2023) 2019-01-02 14:03:59 -08:00
flags Modify klog to be verbose when controller log-level is set to debug (#2221) 2019-02-07 13:48:42 -08:00
healthcheck Authorization-aware control-plane components (#2349) 2019-02-26 11:54:52 -08:00
k8s Authorization-aware control-plane components (#2349) 2019-02-26 11:54:52 -08:00
profiles Authorization-aware control-plane components (#2349) 2019-02-26 11:54:52 -08:00
prometheus Instrument k8s clients (#2243) 2019-02-18 09:10:02 -08:00
tls Enable gosimple linter, fix issues (#2356) 2019-02-22 17:19:07 -08:00
util Add go linting to CI config (#2018) 2018-12-20 15:33:09 -08:00
version lint: Enable scopelint (#2364) 2019-02-24 08:59:51 -08:00