Nimrod Gilboa Markevich 2834ae1e85 Support custom RBAC resources (#572) ...

Motivation: Allow users to change the default RBAC resources (ServiceAccount, ClusterRole, ClusterRoleBinding, Role and RoleBinding) without having Mizu delete them every run.

Adds app.kubernetes.io/created-by and app.kubernetes.io/managed-by labels to all resources.
The value of app.kubernetes.io/created-by is either mizu-cli or mizu-agent.
The value of app.kubernetes.io/managed-by is mizu.
When Mizu cleans resources (ctrl-c in tap cmd or mizu clean cmd) it removes all RBAC resources that have managed-by=mizu, and only those.

A user may have a ClusterRole named mizu-clusterrole. If it doesn't have the label app.kubernetes.io/managed-by=mizu, then Mizu won't overwrite it and won't delete it.
Other resources (deployments, services etc.) are always removed, regardless of their labels.

2022-01-04 09:48:22 +02:00

..

consts.go

Support custom RBAC resources (#572)

2022-01-04 09:48:22 +02:00

errors.go

TRA-3868 move tapped pod watch and tapper updating to shared (#416)

2021-11-01 14:12:32 +02:00

eventWatchHelper.go

API server stores tappers status (#531)

2021-12-15 14:52:49 +02:00

mizuTapperSyncer.go

Fix: [EKS] server could not find the requested resourceevents.events.k8s.io (#565)

2021-12-28 13:24:51 +02:00

podWatchHelper.go

Warn pods not starting (#493)

2021-11-22 15:30:10 +02:00

provider.go

Support custom RBAC resources (#572)

2022-01-04 09:48:22 +02:00

proxy.go

TRA-3913 support mizu via expose service (#440)

2021-11-08 11:23:03 +02:00

utils.go

Send pod info to tapper (#532)

2021-12-16 10:51:03 +02:00

watch.go

Use one channel for events instead of three (#495)

2021-11-23 15:06:27 +02:00

watchEvent.go

Use one channel for events instead of three (#495)

2021-11-23 15:06:27 +02:00