04cc1633be
The kubeovn-plunger controller-runtime cache attempted cluster-wide list/watch on Deployments and Pods, which the namespace-scoped Role cannot satisfy. Additionally, the deployments rule relied on resourceNames, which does not restrict list/watch verbs and left the permission effectively unusable. Scope the manager cache to the kube-ovn namespace so list/watch hit the namespaced API, and drop resourceNames from the deployments rule. Wire --kube-ovn-namespace and --ovn-central-name through the Deployment so values are actually consumed. Co-Authored-By: Claude <noreply@anthropic.com> Signed-off-by: Andrei Kvapil <kvapss@gmail.com> |
||
|---|---|---|
| .. | ||
| backup-controller | ||
| backupstrategy-controller | ||
| cozypkg | ||
| cozystack-api | ||
| cozystack-controller | ||
| cozystack-operator | ||
| flux-plunger | ||
| kubeovn-plunger | ||
| lineage-controller-webhook | ||