kubernetes-sigs / hierarchical-namespaces

Home of the Hierarchical Namespace Controller (HNC). Adds hierarchical policies and delegated creation to Kubernetes namespaces for improved in-cluster multitenancy.
Apache License 2.0
610 stars 105 forks source link

ha-experimental has two deployments #291

Closed zfrhv closed 1 year ago

zfrhv commented 1 year ago

when applying ha-experimental.yaml there are two deployments,

total is 4 controller pods

is that on purpose or by accident?

erikgb commented 1 year ago

Yes I think so. At present the reconciler in HNC does not support leader election, so that is the single pod deployment. The deployment with 3 pods is to serve the webhooks - which is the most critical part of HNC (or any Kubernetes controller). But especially HNC, since one webhook is configured to match ALL namespaced resources.

erikgb commented 1 year ago

I am working on improving the "god" webhook configuration in https://github.com/kubernetes-sigs/hierarchical-namespaces/pull/285.

zfrhv commented 1 year ago

i see thank you