mirror of https://github.com/linkerd/linkerd2.git
linkerd/linkerd2#1721 introduced a `--single-namespace` install flag, enabling the control-plane to function within a single namespace. With the introduction of ServiceProfiles, and upcoming identity changes, this single namespace mode of operation is becoming less viable. This change removes the `--single-namespace` install flag, and all underlying support. The control-plane must have cluster-wide access to operate. A few related changes: - Remove `--single-namespace` from `linkerd check`, this motivates combining some check categories, as we can always assume cluster-wide requirements. - Simplify the `k8s.ResourceAuthz` API, as callers no longer need to make a decision based on cluster-wide vs. namespace-wide access. Components either have access, or they error out. - Modify the web dashboard to always assume ServiceProfiles are enabled. Reverts #1721 Part of #2337 Signed-off-by: Andrew Seigner <siggy@buoyant.io> |
||
---|---|---|
.. | ||
testdata | ||
check.go | ||
check_test.go | ||
completion.go | ||
completion_test.go | ||
dashboard.go | ||
doc.go | ||
endpoints.go | ||
endpoints_test.go | ||
get.go | ||
get_test.go | ||
inject.go | ||
inject_test.go | ||
inject_util.go | ||
install-cni-plugin.go | ||
install-cni-plugin_test.go | ||
install-sp.go | ||
install-sp_test.go | ||
install.go | ||
install_test.go | ||
logs.go | ||
logs_test.go | ||
main_test.go | ||
metrics.go | ||
profile.go | ||
profile_test.go | ||
root.go | ||
routes.go | ||
routes_test.go | ||
stat.go | ||
stat_test.go | ||
tap.go | ||
tap_test.go | ||
top.go | ||
uninject.go | ||
uninject_test.go | ||
version.go | ||
version_test.go |