Proposal: separate yurt-manager clients

luc99hen commented 1 month ago

What type of PR is this?

/kind documentation

What this PR does / why we need it:

Propose a plan for separating yurt-manager clients.

Which issue(s) this PR fixes:

Fixes #

Special notes for your reviewer:

Does this PR introduce a user-facing change?

other Note

codecov[bot] commented 1 month ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 55.61%. Comparing base (2154da8) to head (de14443). Report is 1 commits behind head on master.

Additional details and impacted files

```diff @@ Coverage Diff @@ ## master #2051 +/- ## ========================================== - Coverage 55.62% 55.61% -0.01% ========================================== Files 186 186 Lines 18072 18079 +7 ========================================== + Hits 10052 10055 +3 - Misses 6995 7001 +6 + Partials 1025 1023 -2 ``` | [Flag](https://app.codecov.io/gh/openyurtio/openyurt/pull/2051/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=openyurtio) | Coverage Δ | | |---|---|---| | [unittests](https://app.codecov.io/gh/openyurtio/openyurt/pull/2051/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=openyurtio) | `55.61% <ø> (-0.01%)` | :arrow_down: | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=openyurtio#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

rambohe-ch commented 1 month ago

@luc99hen Thank you for raising proposal to improve rbac management of yurt-manager component. and this proposal will reduce the security risk of OpenYurt cluster. moreover, it is easy for users to track the source controller that apply request to kube-apiserver.

I am looking forward to your code pull request.

rambohe-ch commented 1 month ago

@luc99hen At the same time, I think you can make a share presentation on the community meeting this week.