Add service account selector support

Signed-off-by: wgrayson <[email protected]>
antrea-io · Dec 4, 2021 · 32414cc · 32414cc
1 parent 4851df5
commit 32414cc
Show file tree

Hide file tree

Showing 17 changed files with 970 additions and 6 deletions.
diff --git a/build/yamls/antrea-aks.yml b/build/yamls/antrea-aks.yml
@@ -656,6 +656,39 @@ spec:
                         matchLabels:
                           x-kubernetes-preserve-unknown-fields: true
                       type: object
+                    serviceAccounts:
+                      items:
+                        properties:
+                          name:
+                            type: string
+                          namespace:
+                            type: string
+                          selector:
+                            properties:
+                              matchExpressions:
+                                items:
+                                  properties:
+                                    key:
+                                      type: string
+                                    operator:
+                                      enum:
+                                      - In
+                                      - NotIn
+                                      - Exists
+                                      - DoesNotExist
+                                      type: string
+                                    values:
+                                      items:
+                                        pattern: ^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$
+                                        type: string
+                                      type: array
+                                  type: object
+                                type: array
+                              matchLabels:
+                                x-kubernetes-preserve-unknown-fields: true
+                            type: object
+                        type: object
+                      type: array
                   type: object
                 type: array
               egress:
@@ -803,6 +836,45 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccounts:
+                            items:
+                              oneOf:
+                              - required:
+                                - name
+                                - namespace
+                              - required:
+                                - selector
+                              properties:
+                                name:
+                                  type: string
+                                namespace:
+                                  type: string
+                                selector:
+                                  properties:
+                                    matchExpressions:
+                                      items:
+                                        properties:
+                                          key:
+                                            type: string
+                                          operator:
+                                            enum:
+                                            - In
+                                            - NotIn
+                                            - Exists
+                                            - DoesNotExist
+                                            type: string
+                                          values:
+                                            items:
+                                              pattern: ^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$
+                                              type: string
+                                            type: array
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      x-kubernetes-preserve-unknown-fields: true
+                                  type: object
+                              type: object
+                            type: array
                         type: object
                       type: array
                     toServices:
@@ -951,6 +1023,45 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccounts:
+                            items:
+                              oneOf:
+                              - required:
+                                - name
+                                - namespace
+                              - required:
+                                - selector
+                              properties:
+                                name:
+                                  type: string
+                                namespace:
+                                  type: string
+                                selector:
+                                  properties:
+                                    matchExpressions:
+                                      items:
+                                        properties:
+                                          key:
+                                            type: string
+                                          operator:
+                                            enum:
+                                            - In
+                                            - NotIn
+                                            - Exists
+                                            - DoesNotExist
+                                            type: string
+                                          values:
+                                            items:
+                                              pattern: ^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$
+                                              type: string
+                                            type: array
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      x-kubernetes-preserve-unknown-fields: true
+                                  type: object
+                              type: object
+                            type: array
                         type: object
                       type: array
                     name:
@@ -3606,6 +3717,7 @@ rules:
   - namespaces
   - services
   - configmaps
+  - serviceaccounts
   verbs:
   - get
   - watch

diff --git a/build/yamls/antrea-eks.yml b/build/yamls/antrea-eks.yml
@@ -656,6 +656,39 @@ spec:
                         matchLabels:
                           x-kubernetes-preserve-unknown-fields: true
                       type: object
+                    serviceAccounts:
+                      items:
+                        properties:
+                          name:
+                            type: string
+                          namespace:
+                            type: string
+                          selector:
+                            properties:
+                              matchExpressions:
+                                items:
+                                  properties:
+                                    key:
+                                      type: string
+                                    operator:
+                                      enum:
+                                      - In
+                                      - NotIn
+                                      - Exists
+                                      - DoesNotExist
+                                      type: string
+                                    values:
+                                      items:
+                                        pattern: ^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$
+                                        type: string
+                                      type: array
+                                  type: object
+                                type: array
+                              matchLabels:
+                                x-kubernetes-preserve-unknown-fields: true
+                            type: object
+                        type: object
+                      type: array
                   type: object
                 type: array
               egress:
@@ -803,6 +836,45 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccounts:
+                            items:
+                              oneOf:
+                              - required:
+                                - name
+                                - namespace
+                              - required:
+                                - selector
+                              properties:
+                                name:
+                                  type: string
+                                namespace:
+                                  type: string
+                                selector:
+                                  properties:
+                                    matchExpressions:
+                                      items:
+                                        properties:
+                                          key:
+                                            type: string
+                                          operator:
+                                            enum:
+                                            - In
+                                            - NotIn
+                                            - Exists
+                                            - DoesNotExist
+                                            type: string
+                                          values:
+                                            items:
+                                              pattern: ^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$
+                                              type: string
+                                            type: array
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      x-kubernetes-preserve-unknown-fields: true
+                                  type: object
+                              type: object
+                            type: array
                         type: object
                       type: array
                     toServices:
@@ -951,6 +1023,45 @@ spec:
                               matchLabels:
                                 x-kubernetes-preserve-unknown-fields: true
                             type: object
+                          serviceAccounts:
+                            items:
+                              oneOf:
+                              - required:
+                                - name
+                                - namespace
+                              - required:
+                                - selector
+                              properties:
+                                name:
+                                  type: string
+                                namespace:
+                                  type: string
+                                selector:
+                                  properties:
+                                    matchExpressions:
+                                      items:
+                                        properties:
+                                          key:
+                                            type: string
+                                          operator:
+                                            enum:
+                                            - In
+                                            - NotIn
+                                            - Exists
+                                            - DoesNotExist
+                                            type: string
+                                          values:
+                                            items:
+                                              pattern: ^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$
+                                              type: string
+                                            type: array
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      x-kubernetes-preserve-unknown-fields: true
+                                  type: object
+                              type: object
+                            type: array
                         type: object
                       type: array
                     name:
@@ -3606,6 +3717,7 @@ rules:
   - namespaces
   - services
   - configmaps
+  - serviceaccounts
   verbs:
   - get
   - watch