Operator 3.94.0, impersonation -> subjectaccessreviews (#104)

Co-authored-by: t4lz <[email protected]>
metalbear-co · Sep 3, 2024 · e007e0b · e007e0b
1 parent 61fec57
commit e007e0b
Show file tree

Hide file tree

Showing 3 changed files with 47 additions and 59 deletions.
diff --git a/mirrord-operator/Chart.yaml b/mirrord-operator/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.7.1
+version: 1.7.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "3.93.0"
+appVersion: "3.94.0"
diff --git a/mirrord-operator/templates/cluster-role.yaml b/mirrord-operator/templates/cluster-role.yaml
@@ -67,23 +67,11 @@ rules:
   verbs:
   - patch
 - apiGroups:
-  - ''
-  - authentication.k8s.io
+  - authorization.k8s.io
   resources:
-  - groups
-  - users
-  - userextras/accesskeyid
-  - userextras/arn
-  - userextras/canonicalarn
-  - userextras/sessionname
-  - userextras/iam.gke.io/user-assertion
-  - userextras/user-assertion.cloud.google.com
-  - userextras/principalid
-  - userextras/oid
-  - userextras/username
-  - userextras/licensekey
+  - subjectaccessreviews
   verbs:
-  - impersonate
+  - create
 - apiGroups:
   - policies.mirrord.metalbear.co
   resources:

diff --git a/mirrord-operator/templates/crd.yaml b/mirrord-operator/templates/crd.yaml
@@ -121,15 +121,15 @@ spec:
                     type: string
                   name:
                     type: string
-                  workload_type:
+                  workloadType:
                     description: A workload that is a consumer of a queue that is being split.
                     enum:
                     - Deployment
                     - Rollout
                     type: string
                 required:
                 - name
-                - workload_type
+                - workloadType
                 type: object
               queues:
                 additionalProperties:
@@ -172,40 +172,40 @@ spec:
                 description: Optional even though it's currently the only field, because in the future there will be fields for other queue types.
                 nullable: true
                 properties:
-                  direct_env_vars:
+                  directEnvVars:
                     additionalProperties:
                       type: string
                     description: Names of env vars that contain the queue name directly in the pod template, without config map refs, mapped to their queue id.
                     type: object
-                  env_updates:
+                  envUpdates:
                     additionalProperties:
                       properties:
-                        original_name:
+                        originalName:
                           type: string
-                        output_name:
+                        outputName:
                           type: string
                       required:
-                      - original_name
-                      - output_name
+                      - originalName
+                      - outputName
                       type: object
                     type: object
-                  queue_names:
+                  queueNames:
                     additionalProperties:
                       properties:
-                        original_name:
+                        originalName:
                           type: string
-                        output_name:
+                        outputName:
                           type: string
                       required:
-                      - original_name
-                      - output_name
+                      - originalName
+                      - outputName
                       type: object
                     description: For each queue_id, the actual queue name as retrieved from the target's pod spec or config map, together with the name of its temporary output queue.
                     type: object
                 required:
-                - direct_env_vars
-                - env_updates
-                - queue_names
+                - directEnvVars
+                - envUpdates
+                - queueNames
                 type: object
             type: object
         required:
@@ -249,15 +249,15 @@ spec:
                     type: string
                   name:
                     type: string
-                  workload_type:
+                  workloadType:
                     description: A workload that is a consumer of a queue that is being split.
                     enum:
                     - Deployment
                     - Rollout
                     type: string
                 required:
                 - name
-                - workload_type
+                - workloadType
                 type: object
               queueFilters:
                 additionalProperties:
@@ -296,26 +296,26 @@ spec:
                       envUpdates:
                         additionalProperties:
                           properties:
-                            original_name:
+                            originalName:
                               type: string
-                            output_name:
+                            outputName:
                               type: string
                           required:
-                          - original_name
-                          - output_name
+                          - originalName
+                          - outputName
                           type: object
                         description: Env var name -> old and new queue names.
                         type: object
                       queueNames:
                         additionalProperties:
                           properties:
-                            original_name:
+                            originalName:
                               type: string
-                            output_name:
+                            outputName:
                               type: string
                           required:
-                          - original_name
-                          - output_name
+                          - originalName
+                          - outputName
                           type: object
                         description: Queue ID -> old and new queue names.
                         type: object
@@ -346,26 +346,26 @@ spec:
                   envUpdates:
                     additionalProperties:
                       properties:
-                        original_name:
+                        originalName:
                           type: string
-                        output_name:
+                        outputName:
                           type: string
                       required:
-                      - original_name
-                      - output_name
+                      - originalName
+                      - outputName
                       type: object
                     description: Env var name -> old and new queue names.
                     type: object
                   queueNames:
                     additionalProperties:
                       properties:
-                        original_name:
+                        originalName:
                           type: string
-                        output_name:
+                        outputName:
                           type: string
                       required:
-                      - original_name
-                      - output_name
+                      - originalName
+                      - outputName
                       type: object
                     description: Queue ID -> old and new queue names.
                     type: object
@@ -379,26 +379,26 @@ spec:
                   envUpdates:
                     additionalProperties:
                       properties:
-                        original_name:
+                        originalName:
                           type: string
-                        output_name:
+                        outputName:
                           type: string
                       required:
-                      - original_name
-                      - output_name
+                      - originalName
+                      - outputName
                       type: object
                     description: Env var name -> old and new queue names.
                     type: object
                   queueNames:
                     additionalProperties:
                       properties:
-                        original_name:
+                        originalName:
                           type: string
-                        output_name:
+                        outputName:
                           type: string
                       required:
-                      - original_name
-                      - output_name
+                      - originalName
+                      - outputName
                       type: object
                     description: Queue ID -> old and new queue names.
                     type: object