mirror of https://github.com/linkerd/linkerd2.git
e5d2460792
linkerd/linkerd2#1721 introduced a `--single-namespace` install flag, enabling the control-plane to function within a single namespace. With the introduction of ServiceProfiles, and upcoming identity changes, this single namespace mode of operation is becoming less viable. This change removes the `--single-namespace` install flag, and all underlying support. The control-plane must have cluster-wide access to operate. A few related changes: - Remove `--single-namespace` from `linkerd check`, this motivates combining some check categories, as we can always assume cluster-wide requirements. - Simplify the `k8s.ResourceAuthz` API, as callers no longer need to make a decision based on cluster-wide vs. namespace-wide access. Components either have access, or they error out. - Modify the web dashboard to always assume ServiceProfiles are enabled. Reverts #1721 Part of #2337 Signed-off-by: Andrew Seigner <siggy@buoyant.io> |
||
|---|---|---|
| .. | ||
| endpoint_listener.go | ||
| endpoint_listener_test.go | ||
| endpoints_watcher.go | ||
| endpoints_watcher_test.go | ||
| fallback_profile_listener.go | ||
| fallback_profile_listener_test.go | ||
| k8s_resolver.go | ||
| k8s_resolver_test.go | ||
| profile_listener.go | ||
| profile_listener_test.go | ||
| profile_watcher.go | ||
| profile_watcher_test.go | ||
| resolver.go | ||
| server.go | ||
| server_test.go | ||
| test_helper.go | ||