sync labels from klusterlet to all agent resources

Signed-off-by: Zhiwei Yin <zyin@redhat.com>
open-cluster-management-io · May 27, 2024 · 19eca1e · 19eca1e
1 parent a148049
commit 19eca1e
Show file tree

Hide file tree

Showing 36 changed files with 278 additions and 1 deletion.
diff --git a/.../klusterlet/managed/0000_01_work.open-cluster-management.io_appliedmanifestworks.crd.yaml b/.../klusterlet/managed/0000_01_work.open-cluster-management.io_appliedmanifestworks.crd.yaml
@@ -2,6 +2,14 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   name: appliedmanifestworks.work.open-cluster-management.io
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 spec:
   group: work.open-cluster-management.io
   names:

diff --git a/...sts/klusterlet/managed/0000_02_clusters.open-cluster-management.io_clusterclaims.crd.yaml b/...sts/klusterlet/managed/0000_02_clusters.open-cluster-management.io_clusterclaims.crd.yaml
@@ -2,6 +2,14 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   name: clusterclaims.cluster.open-cluster-management.io
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 spec:
   group: cluster.open-cluster-management.io
   names:

diff --git a/.../klusterlet/managed/0001_01_work.open-cluster-management.io_appliedmanifestworks.crd.yaml b/.../klusterlet/managed/0001_01_work.open-cluster-management.io_appliedmanifestworks.crd.yaml
@@ -3,6 +3,14 @@ kind: CustomResourceDefinition
 metadata:
   creationTimestamp: null
   name: appliedmanifestworks.work.open-cluster-management.io
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 spec:
   group: work.open-cluster-management.io
   names:

diff --git a/...sts/klusterlet/managed/0001_02_clusters.open-cluster-management.io_clusterclaims.crd.yaml b/...sts/klusterlet/managed/0001_02_clusters.open-cluster-management.io_clusterclaims.crd.yaml
@@ -2,6 +2,14 @@ apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
   name: clusterclaims.cluster.open-cluster-management.io
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 spec:
   group: cluster.open-cluster-management.io
   names:

diff --git a/manifests/klusterlet/managed/klusterlet-registration-clusterrole-addon-management.yaml b/manifests/klusterlet/managed/klusterlet-registration-clusterrole-addon-management.yaml
@@ -7,6 +7,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: open-cluster-management:{{ .KlusterletName }}-registration:addon-management
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 rules:
 # Allow agent to get/list/watch/create/delete/update/patch secrets.
 - apiGroups: [""]

diff --git a/manifests/klusterlet/managed/klusterlet-registration-clusterrole.yaml b/manifests/klusterlet/managed/klusterlet-registration-clusterrole.yaml
@@ -4,6 +4,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: open-cluster-management:{{ .KlusterletName }}-registration:agent
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 rules:
 # Allow agent to get/list/watch nodes
 # list nodes to calculates the capacity and allocatable resources of the managed cluster

diff --git a/...fests/klusterlet/managed/klusterlet-registration-clusterrolebinding-addon-management.yaml b/...fests/klusterlet/managed/klusterlet-registration-clusterrolebinding-addon-management.yaml
@@ -7,6 +7,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: open-cluster-management:{{ .KlusterletName }}-registration:addon-management
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

diff --git a/manifests/klusterlet/managed/klusterlet-registration-clusterrolebinding.yaml b/manifests/klusterlet/managed/klusterlet-registration-clusterrolebinding.yaml
@@ -3,6 +3,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: open-cluster-management:{{ .KlusterletName }}-registration:agent
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

diff --git a/manifests/klusterlet/managed/klusterlet-registration-serviceaccount.yaml b/manifests/klusterlet/managed/klusterlet-registration-serviceaccount.yaml
@@ -3,5 +3,13 @@ kind: ServiceAccount
 metadata:
   name: {{ .RegistrationServiceAccount }}
   namespace: {{ .KlusterletNamespace }}
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 imagePullSecrets:
 - name: open-cluster-management-image-pull-credentials
diff --git a/manifests/klusterlet/managed/klusterlet-work-clusterrole-execution.yaml b/manifests/klusterlet/managed/klusterlet-work-clusterrole-execution.yaml
@@ -6,6 +6,13 @@ metadata:
   name: open-cluster-management:{{ .KlusterletName }}-work:execution
   labels:
     open-cluster-management.io/aggregate-to-work: "true"
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 rules:
 # Allow agent to get/list/watch/create/delete crds.
 - apiGroups: ["apiextensions.k8s.io"]

diff --git a/manifests/klusterlet/managed/klusterlet-work-clusterrole.yaml b/manifests/klusterlet/managed/klusterlet-work-clusterrole.yaml
@@ -4,6 +4,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: open-cluster-management:{{ .KlusterletName }}-work:agent
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 rules:
 # Allow agent to managed appliedmanifestworks
 - apiGroups: ["work.open-cluster-management.io"]

diff --git a/manifests/klusterlet/managed/klusterlet-work-clusterrolebinding-aggregate.yaml b/manifests/klusterlet/managed/klusterlet-work-clusterrolebinding-aggregate.yaml
@@ -4,6 +4,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: open-cluster-management:{{ .KlusterletName }}-work:aggregate
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

diff --git a/manifests/klusterlet/managed/klusterlet-work-clusterrolebinding-execution-admin.yaml b/manifests/klusterlet/managed/klusterlet-work-clusterrolebinding-execution-admin.yaml
@@ -4,6 +4,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: open-cluster-management:{{ .KlusterletName }}-work:execution-admin
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

diff --git a/manifests/klusterlet/managed/klusterlet-work-clusterrolebinding-execution.yaml b/manifests/klusterlet/managed/klusterlet-work-clusterrolebinding-execution.yaml
@@ -3,6 +3,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: open-cluster-management:{{ .KlusterletName }}-work:execution
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

diff --git a/manifests/klusterlet/managed/klusterlet-work-clusterrolebinding.yaml b/manifests/klusterlet/managed/klusterlet-work-clusterrolebinding.yaml
@@ -3,6 +3,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: open-cluster-management:{{ .KlusterletName }}-work:agent
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

diff --git a/manifests/klusterlet/managed/klusterlet-work-serviceaccount.yaml b/manifests/klusterlet/managed/klusterlet-work-serviceaccount.yaml
@@ -3,5 +3,13 @@ kind: ServiceAccount
 metadata:
   name: {{ .WorkServiceAccount }}
   namespace: {{ .KlusterletNamespace }}
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 imagePullSecrets:
 - name: open-cluster-management-image-pull-credentials
diff --git a/manifests/klusterlet/management/klusterlet-agent-deployment.yaml b/manifests/klusterlet/management/klusterlet-agent-deployment.yaml
@@ -6,6 +6,11 @@ metadata:
   labels:
     app: klusterlet-agent
     createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 spec:
   replicas: {{ .Replica }}
   selector:

diff --git a/manifests/klusterlet/management/klusterlet-registration-clusterrole-addon-management.yaml b/manifests/klusterlet/management/klusterlet-registration-clusterrole-addon-management.yaml
@@ -4,6 +4,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: open-cluster-management:management:{{ .KlusterletName }}-registration:addon-management
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 rules:
 # Allow agent to get/list/watch/create/delete/update/patch secrets, registration agent needs secret permission for an 
 # arbitrary namespace to create hub-kubeconfig secret for an addon

diff --git a/...ts/klusterlet/management/klusterlet-registration-clusterrolebinding-addon-management.yaml b/...ts/klusterlet/management/klusterlet-registration-clusterrolebinding-addon-management.yaml
@@ -5,6 +5,14 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: open-cluster-management:management:{{ .KlusterletName }}-registration:addon-management
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

diff --git a/manifests/klusterlet/management/klusterlet-registration-deployment.yaml b/manifests/klusterlet/management/klusterlet-registration-deployment.yaml
@@ -6,6 +6,11 @@ metadata:
   labels:
     app: klusterlet-registration-agent
     createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 spec:
   replicas: {{ .Replica }}
   selector:

diff --git a/manifests/klusterlet/management/klusterlet-registration-role.yaml b/manifests/klusterlet/management/klusterlet-registration-role.yaml
@@ -5,6 +5,14 @@ kind: Role
 metadata:
   name: open-cluster-management:management:{{ .KlusterletName }}-registration:agent
   namespace: {{ .AgentNamespace }}
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 rules:
 # leader election needs to operate configmaps and leases
 - apiGroups: [""]

diff --git a/manifests/klusterlet/management/klusterlet-registration-rolebinding-extension-apiserver.yaml b/manifests/klusterlet/management/klusterlet-registration-rolebinding-extension-apiserver.yaml
@@ -3,6 +3,14 @@ kind: RoleBinding
 metadata:
   name: open-cluster-management:management:{{ .KlusterletName }}-registration:agent
   namespace: kube-system
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

diff --git a/manifests/klusterlet/management/klusterlet-registration-rolebinding.yaml b/manifests/klusterlet/management/klusterlet-registration-rolebinding.yaml
@@ -4,6 +4,14 @@ kind: RoleBinding
 metadata:
   name: open-cluster-management:management:{{ .KlusterletName }}-registration:agent
   namespace: {{ .AgentNamespace }}
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

diff --git a/manifests/klusterlet/management/klusterlet-registration-serviceaccount.yaml b/manifests/klusterlet/management/klusterlet-registration-serviceaccount.yaml
@@ -3,5 +3,13 @@ kind: ServiceAccount
 metadata:
   name: {{ .RegistrationServiceAccount }}
   namespace: {{ .AgentNamespace }}
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 imagePullSecrets:
 - name: open-cluster-management-image-pull-credentials
diff --git a/manifests/klusterlet/management/klusterlet-role-extension-apiserver.yaml b/manifests/klusterlet/management/klusterlet-role-extension-apiserver.yaml
@@ -7,6 +7,14 @@ kind: Role
 metadata:
   name: open-cluster-management:management:{{ .KlusterletName }}:extension-apiserver
   namespace: kube-system
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 rules:
 - apiGroups: [""]
   resources: ["configmaps"]

diff --git a/manifests/klusterlet/management/klusterlet-work-deployment.yaml b/manifests/klusterlet/management/klusterlet-work-deployment.yaml
@@ -6,6 +6,11 @@ metadata:
   labels:
     app: klusterlet-manifestwork-agent
     createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 spec:
   replicas: {{ .Replica }}
   selector:

diff --git a/manifests/klusterlet/management/klusterlet-work-role.yaml b/manifests/klusterlet/management/klusterlet-work-role.yaml
@@ -5,6 +5,14 @@ kind: Role
 metadata:
   name: open-cluster-management:management:{{ .KlusterletName }}-work:agent
   namespace: {{ .AgentNamespace }}
+  labels:
+    app: klusterlet-agent
+    createdBy: klusterlet
+    {{ if gt (len .Labels) 0 }}
+    {{ range $key, $value := .Labels }}
+    {{ $key }}: {{ $value }}
+    {{ end }}
+    {{ end }}
 rules:
 # leader election needs to operate configmaps and leases
 - apiGroups: [""]