Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Skip webhook on kube-system by default for tap-injector/jaeger-injector #11649

Merged
merged 5 commits into from
Nov 30, 2023

Conversation

mikutas
Copy link
Contributor

@mikutas mikutas commented Nov 24, 2023

Fixes #11647

@mikutas mikutas marked this pull request as ready for review November 24, 2023 12:47
@mikutas mikutas requested a review from a team as a code owner November 24, 2023 12:47
Copy link
Member

@alpeb alpeb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @mikutas !

Comment on lines 287 to +292
namespaceSelector:
#matchExpressions:
#- key: runlevel
# operator: NotIn
# values: ["0","1"]
matchExpressions:
- key: kubernetes.io/metadata.name
operator: NotIn
values:
- kube-system
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think adding a doc comment just above namespaceSelector (like in the linkerd-control-plane chart) will avoid bin/helm-doc generating undesired entries for each one of these entries.

@@ -41,6 +41,7 @@ spec:
spec:
nodeSelector:
kubernetes.io/os: linux

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It appears this extraneous line was introduced in another change, so that's ok.

Signed-off-by: Takumi Sue <[email protected]>
@mikutas mikutas requested a review from alpeb November 27, 2023 23:25
@mikutas mikutas changed the title Skip webhook on kube-system by default Skip webhook on kube-system by default for tap-injector/jaeger-injector Nov 28, 2023
Copy link
Member

@alpeb alpeb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

Copy link
Member

@mateiidavid mateiidavid left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! Thanks @mikutas!

@mateiidavid mateiidavid merged commit 1da8fcc into linkerd:main Nov 30, 2023
31 checks passed
mateiidavid added a commit that referenced this pull request Nov 30, 2023
This edge release introduces new configuration values in the identity
controller for client-go's `QPS` and `Burst` settings. Default values for these
settings have also been raised from `5` (QPS) and `10` (Burst) to `100` and
`200` respectively.

* Added `namespaceSelector` fields for the tap-injector and jaeger-injector
  webhooks. The webhooks are now configured to skip `kube-system` by default
  ([#11649]; fixes [#11647]) (thanks @mikutas!)
* Added the ability to configure client-go's `QPS` and `Burst` settings in the
  identity controller ([#11644])
* Improved client-go logging visibility throughout the control plane's
  components ([#11632])
* Introduced `PodDisruptionBudgets` in the linkerd-viz Helm chart for tap and
  tap-injector ([#11628]; fixes [#11248]) (thanks @mcharriere!)

[#11649]: #11649
[#11647]: #11647
[#11644]: #11644
[#11632]: #11632
[#11628]: #11628
[#11248]: #11248

Signed-off-by: Matei David <[email protected]>
@mateiidavid mateiidavid mentioned this pull request Nov 30, 2023
mateiidavid added a commit that referenced this pull request Dec 1, 2023
This edge release introduces new configuration values in the identity
controller for client-go's `QPS` and `Burst` settings. Default values for these
settings have also been raised from `5` (QPS) and `10` (Burst) to `100` and
`200` respectively.

* Added `namespaceSelector` fields for the tap-injector and jaeger-injector
  webhooks. The webhooks are now configured to skip `kube-system` by default
  ([#11649]; fixes [#11647]) (thanks @mikutas!)
* Added the ability to configure client-go's `QPS` and `Burst` settings in the
  identity controller ([#11644])
* Improved client-go logging visibility throughout the control plane's
  components ([#11632])
* Introduced `PodDisruptionBudgets` in the linkerd-viz Helm chart for tap and
  tap-injector ([#11628]; fixes [#11248]) (thanks @mcharriere!)

[#11649]: #11649
[#11647]: #11647
[#11644]: #11644
[#11632]: #11632
[#11628]: #11628
[#11248]: #11248

Signed-off-by: Matei David <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Don't trigger any webhook on kube-system
3 participants