-
Notifications
You must be signed in to change notification settings - Fork 406
e2e/clusterworkspacedeletion: use correct root shard system:master client for deletion checks #1570
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
e2e/clusterworkspacedeletion: use correct root shard system:master client for deletion checks #1570
Conversation
/retest |
/approve |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: sttts The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/lgtm |
@@ -208,7 +208,7 @@ func TestWatchCacheEnabledForBuiltinTypes(t *testing.T) { | |||
} | |||
} | |||
|
|||
totalCacheHits, secretsCacheHit := collectCacheHitsFor(ctx, t, server.RootShardConfig(t), "/core/secrets") | |||
totalCacheHits, secretsCacheHit := collectCacheHitsFor(ctx, t, server.RootShardSystemMasterBaseConfig(t), "/core/secrets") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
mhm, wondering why the kcp-admin
doesn't work here
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
shouldn't kcp-admin
have access to the /metrics
endpoint?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
kcp-admin against the root shard will work. Note: my change here is just a rename, not a change in behaviour of RootShardConfig/RootShardSystemMasterBaseConfig. I.e. am just pointing out that this is a system:master user (was also before the rename).
…ient for deletion checks
7956913
to
12078ca
Compare
New changes are detected. LGTM label has been removed. |
Pure rebase. |
/lgtm |
The deletion checks have to skip authorization because authz would lead to 403 on deleted workspaces, i.e. you cannot look into the logical cluster then. Hence, we need a
system:master
client. We have that wired for the root shard.