Merge pull request #211 from Abirdcfly/main

🌱 add test for "Enabled Aggregate API for Virtual Cluster"
kubernetes-sigs · Aug 20, 2021 · 6136cc8 · 6136cc8
2 parents 960cce4 + 3219cec
commit 6136cc8
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/virtualcluster/pkg/controller/controllers/clusterversion_controller_test.go b/virtualcluster/pkg/controller/controllers/clusterversion_controller_test.go
@@ -290,6 +290,14 @@ var defaultClusterVersion = &v1alpha1.ClusterVersionSpec{
 									"--enable-admission-plugins=NamespaceLifecycle,NodeRestriction,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota",
 									"--apiserver-count=1",
 									"--endpoint-reconciler-type=master-count",
+									"--enable-aggregator-routing=true",
+									"--requestheader-client-ca-file=/etc/kubernetes/pki/root/tls.crt",
+									"--requestheader-allowed-names=front-proxy-client",
+									"--requestheader-username-headers=X-Remote-User",
+									"--requestheader-group-headers=X-Remote-Group",
+									"--requestheader-extra-headers-prefix=X-Remote-Extra-",
+									"--proxy-client-key-file=/etc/kubernetes/pki/frontproxy/tls.key",
+									"--proxy-client-cert-file=/etc/kubernetes/pki/frontproxy/tls.crt",
 									"--v=2",
 								},
 								Ports: []corev1.ContainerPort{
@@ -334,6 +342,11 @@ var defaultClusterVersion = &v1alpha1.ClusterVersionSpec{
 										Name:      "apiserver-ca",
 										ReadOnly:  true,
 									},
+									{
+										MountPath: "/etc/kubernetes/pki/frontproxy",
+										Name:      "front-proxy-ca",
+										ReadOnly:  true,
+									},
 									{
 										MountPath: "/etc/kubernetes/pki/root",
 										Name:      "root-ca",
@@ -371,6 +384,15 @@ var defaultClusterVersion = &v1alpha1.ClusterVersionSpec{
 									},
 								},
 							},
+							{
+								Name: "front-proxy-ca",
+								VolumeSource: corev1.VolumeSource{
+									Secret: &corev1.SecretVolumeSource{
+										DefaultMode: pointer.Int32Ptr(420),
+										SecretName:  "front-proxy-ca",
+									},
+								},
+							},
 							{
 								Name: "serviceaccount-rsa",
 								VolumeSource: corev1.VolumeSource{