Allow set work agent clusterrole in klusterlet

operator/v1/0000_00_operator.open-cluster-management.io_klusterlets.crd.yaml

@@ -135,8 +135,13 @@ spec:
                   description: WorkConfiguration contains the configuration of work
                   type: object
                   properties:
+                    clusterRoles:
+                      description: ClusterRoles is the clusterroles that work agent binds to. If it is empty, the default admin clusterrole in kubernetes is bound to the work agent.
+                      type: array
+                      items:
+                        type: string
                     featureGates:
-                      description: "FeatureGates represents the list of feature gates for work If it is set empty, default feature gates will be used. If it is set, featuregate/Foo is an example of one item in FeatureGates:   1. If featuregate/Foo does not exist, registration-operator will discard it   2. If featuregate/Foo exists and is false by default. It is now possible to set featuregate/Foo=[false|true]   3. If featuregate/Foo exists and is true by default. If a cluster-admin upgrading from 1 to 2 wants to continue having featuregate/Foo=false,  \the can set featuregate/Foo=false before upgrading. Let's say the cluster-admin wants featuregate/Foo=false."
+                      description: "FeatureGates represents the list of feature gates for work agent If it is set empty, default feature gates will be used. If it is set, featuregate/Foo is an example of one item in FeatureGates:   1. If featuregate/Foo does not exist, registration-operator will discard it   2. If featuregate/Foo exists and is false by default. It is now possible to set featuregate/Foo=[false|true]   3. If featuregate/Foo exists and is true by default. If a cluster-admin upgrading from 1 to 2 wants to continue having featuregate/Foo=false,  \the can set featuregate/Foo=false before upgrading. Let's say the cluster-admin wants featuregate/Foo=false."
                       type: array
                       items:
                         type: object

operator/v1/0001_00_operator.open-cluster-management.io_klusterlets.crd.yaml

@@ -135,8 +135,13 @@ spec:
               description: WorkConfiguration contains the configuration of work
               type: object
               properties:
+                clusterRoles:
+                  description: ClusterRoles is the clusterroles that work agent binds to. If it is empty, the default admin clusterrole in kubernetes is bound to the work agent.
+                  type: array
+                  items:
+                    type: string
                 featureGates:
-                  description: "FeatureGates represents the list of feature gates for work If it is set empty, default feature gates will be used. If it is set, featuregate/Foo is an example of one item in FeatureGates:   1. If featuregate/Foo does not exist, registration-operator will discard it   2. If featuregate/Foo exists and is false by default. It is now possible to set featuregate/Foo=[false|true]   3. If featuregate/Foo exists and is true by default. If a cluster-admin upgrading from 1 to 2 wants to continue having featuregate/Foo=false,  \the can set featuregate/Foo=false before upgrading. Let's say the cluster-admin wants featuregate/Foo=false."
+                  description: "FeatureGates represents the list of feature gates for work agent If it is set empty, default feature gates will be used. If it is set, featuregate/Foo is an example of one item in FeatureGates:   1. If featuregate/Foo does not exist, registration-operator will discard it   2. If featuregate/Foo exists and is false by default. It is now possible to set featuregate/Foo=[false|true]   3. If featuregate/Foo exists and is true by default. If a cluster-admin upgrading from 1 to 2 wants to continue having featuregate/Foo=false,  \the can set featuregate/Foo=false before upgrading. Let's say the cluster-admin wants featuregate/Foo=false."
                   type: array
                   items:
                     type: object

operator/v1/types.go

@@ -343,14 +343,31 @@ type KlusterletSpec struct {
 
 	// WorkConfiguration contains the configuration of work
 	// +optional
-	WorkConfiguration *WorkConfiguration `json:"workConfiguration,omitempty"`
+	WorkConfiguration *KlusterletWorkConfiguration `json:"workConfiguration,omitempty"`
 
 	// HubApiServerHostAlias contains the host alias for hub api server.
 	// registration-agent and work-agent will use it to communicate with hub api server.
 	// +optional
 	HubApiServerHostAlias *HubApiServerHostAlias `json:"hubApiServerHostAlias,omitempty"`
 }
 
+// KlusterletWorkConfiguration contains the configuration of work agent
+type KlusterletWorkConfiguration struct {
+	// ClusterRoles is the clusterroles that work agent binds to. If it is empty, the default admin clusterrole
+	// in kubernetes is bound to the work agent.
+	ClusterRoles []string `json:"clusterRoles,omitempty"`
+
+	// FeatureGates represents the list of feature gates for work agent
+	// If it is set empty, default feature gates will be used.
+	// If it is set, featuregate/Foo is an example of one item in FeatureGates:
+	//   1. If featuregate/Foo does not exist, registration-operator will discard it
+	//   2. If featuregate/Foo exists and is false by default. It is now possible to set featuregate/Foo=[false|true]
+	//   3. If featuregate/Foo exists and is true by default. If a cluster-admin upgrading from 1 to 2 wants to continue having featuregate/Foo=false,
+	//  	he can set featuregate/Foo=false before upgrading. Let's say the cluster-admin wants featuregate/Foo=false.
+	// +optional
+	FeatureGates []FeatureGate `json:"featureGates,omitempty"`
+}
+
 // ServerURL represents the apiserver url and ca bundle that is accessible externally
 type ServerURL struct {
 	// URL is the url of apiserver endpoint of the managed cluster.