Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added validation Warning KIA1701 and KIA1702 for WorkloadGroups #853

Merged
merged 6 commits into from
Jan 30, 2025
Merged
Show file tree
Hide file tree
Changes from 5 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
42 changes: 42 additions & 0 deletions content/en/docs/Features/validations.md
Original file line number Diff line number Diff line change
Expand Up @@ -1139,3 +1139,45 @@ This is a generic rule implemented by the Gateway, and each particular error sho
<i class="fas fa-exclamation-triangle text-warning"></i> Warning

![GWAPI](/images/documentation/features/GWAPI.png)

## Workload Groups {#workloadgroups}

### KIA1701 - Service Account not found in this namespace

WorkloadGroup describes a collection of workload instances. It enables specifying the properties of a single workload for bootstrap and provides a template for WorkloadEntry, using the specified service account from the same namespace.

A validation Warning message on a template means that, while the specified serviceAccount may exist, it is not referenced by any Pod in the same namespace.

#### Resolution

Correct the template to refer to an existing Service Account from the same namespace, make sure that the value is in correct format without a typo, and make sure at least one Pod references the Service Account.

#### Severity

<i class="fas fa-exclamation-triangle text-warning"></i> Warning

#### Example

{{< readfile file="/static/files/validation_examples/1701.yaml" code="true" lang="yaml" >}}

#### See Also

- [Istio documentation](https://istio.io/latestdocs/reference/config/networking/workload-group)
hhovsepy marked this conversation as resolved.
Show resolved Hide resolved

### KIA1702 - More than one Workload Group with duplicate labels found in the same namespace

The set of labels from Workload Group spec metadata will be associated with each workload instance during the bootstrap process.

A validation Warning message means that the labels set in this Workload Group spec metadata are also used in other Workload Group within this namespace.

#### Resolution

Set a unique set of labels.

#### Severity

<i class="fas fa-exclamation-triangle text-warning"></i> Warning

#### See Also

- [Istio documentation](https://istio.io/latest/docs/reference/config/networking/workload-group)
10 changes: 10 additions & 0 deletions static/files/validation_examples/1701.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
apiVersion: networking.istio.io/v1
kind: WorkloadGroup
metadata:
name: ratings-vm
namespace: bookinfo
labels:
app: ratings-vm
spec:
template:
serviceAccount: default
Loading