linkerd2/controller/k8s
Alejandro Pedraza 38ec59128e
refactor(multicluster): revert Link permissions back to Role (#13848)
#13783 moved the service mirror permissions on Links from a Role to a ClusterRole as a side-effect, and this change reverts that by refactoring the Links API to allow consuming a namespace-scoped API more easily.

- We introduce in our `k8s.API` type a field `L5dClient` alongside the broad `Client` one, which is constructed via the new function `NewL5dNamespacedAPI()`.
- In the service-mirror `main.go` we use that constructor to acquire `linksAPI`, which is used to configure the informer for handling Link events in this file.
- `linksAPI` is also passed down to instantiations of `RemoteClusterServiceWatcher`, where it's used for the direct kube-apiserver calls and for retrieving a Lister.
2025-03-22 05:44:35 -05:00
..
api.go refactor(multicluster): revert Link permissions back to Role (#13848) 2025-03-22 05:44:35 -05:00
api_resource.go fix(service-mirror): don't restart cluster watch upon Link status updates (#13579) 2025-01-22 12:35:15 -05:00
api_test.go Use metadata API in the proxy and tap injectors (#9650) 2022-11-16 09:21:39 -05:00
clientset.go smi: remove default functionality in linkerd (#7334) 2021-12-03 12:07:30 +05:30
k8s.go Add support for remote discovery (#11224) 2023-08-11 09:31:45 -07:00
metadata_api.go Fixed destination metrics warning when re-linking (#11253) 2023-08-16 15:27:31 -07:00
prometheus.go Fixed service-mirror metrics warning (#11246) 2023-08-16 13:34:50 -05:00
test_helper.go refactor(multicluster): revert Link permissions back to Role (#13848) 2025-03-22 05:44:35 -05:00