Azure / karpenter-provider-azure / 25641261676

94%

main: 94%

Build Type

Pull #1676

github

Committed by yewmsft

Commit Message

fix: wire LocalDNS reconciler to workload cluster apiserver

The LocalDNS reconciler inspects NetworkPolicy / CiliumNetworkPolicy /
CiliumClusterwideNetworkPolicy resources and the upstream node-local-dns
DaemonSet. These live on the workload cluster (the cluster Karpenter is
managing), not the underlay/CCP cluster where the Karpenter pod itself runs.

Previously the status controller received the in-cluster (CCP) Kubernetes
and dynamic clients, so on managed Karpenter the reconciler queried the
wrong apiserver and would fail RBAC checks against the CCP namespace's
karpenter-sa.

Expose a new workload-cluster dynamic client on the Operator (paired with
the existing upstream operator.KubernetesInterface, which already points
at the workload cluster) and thread both client pairs through to the
nodeclass status controller. NodeImageReconciler continues to use the
in-cluster client (it reads CCP-namespace ConfigMaps); LocalDNSReconciler
now uses the workload client.

Pull Request Pull Request #1676: feat: resolve LocalDNS state at NodeClass reconcile time

Coverage Stats

211 of 255 new or added lines in 8 files covered. (82.75%)

2 existing lines in 1 file now uncovered.

74492 of 78917 relevant lines covered (94.39%)

0.96 hits per line