NOTIC: Add rights to manage daemonsets

nebius · Dec 16, 2024 · bf4fc2d · bf4fc2d
1 parent dc1be9d
commit bf4fc2d
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 1 deletion.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -39,6 +39,7 @@ rules:
 - apiGroups:
   - apps
   resources:
+  - daemonsets
   - deployments
   - statefulsets
   verbs:

diff --git a/helm/soperator/templates/manager-rbac.yaml b/helm/soperator/templates/manager-rbac.yaml
@@ -40,6 +40,7 @@ rules:
 - apiGroups:
   - apps
   resources:
+  - daemonsets
   - deployments
   - statefulsets
   verbs:

diff --git a/internal/controller/clustercontroller/reconcile.go b/internal/controller/clustercontroller/reconcile.go
@@ -67,6 +67,7 @@ import (
 //+kubebuilder:rbac:groups=core,resources=serviceaccounts,verbs=get;list;watch;update;patch;delete;create
 //+kubebuilder:rbac:groups=k8s.mariadb.com,resources=mariadbs,verbs=get;list;watch;update;patch;delete;create
 //+kubebuilder:rbac:groups=k8s.mariadb.com,resources=grants,verbs=get;list;watch;update;patch;delete;create
+//+kubebuilder:rbac:groups=apps,resources=daemonsets,verbs=get;list;watch;update;patch;delete;create
 
 // SlurmClusterReconciler reconciles a SlurmCluster object
 type SlurmClusterReconciler struct {

diff --git a/internal/render/common/configmap.go b/internal/render/common/configmap.go
@@ -266,7 +266,6 @@ func RenderConfigMapSecurityLimits(componentType consts.ComponentType, cluster *
 
 func generateUnlimitedSecurityLimitsConfig() renderutils.ConfigFile {
 	res := &renderutils.MultilineStringConfig{}
-	res.AddLine("#Empty security limits file")
 	res.AddLine("# Set core file size to unlimited (-c)")
 	res.AddLine("*    soft    core        unlimited")
 	res.AddLine("*    hard    core        unlimited")