Allow reading Infrastructures from CAP*

[tomassedovic]

This lets the cluster-api-provider-* services read the Infrastructures
object under the config.openshift.io API group.

cluster-api-provider-openstack uses it to get the VIP addresses it needs
to configure on the OpenStack ports it creates.

[tomassedovic]

I'm not sure whether this is the right way of doing this. We've got some values in Infrastructure.PlatformStatus.OpenStack that we need to pass to cluster-api-provider-openstack because the cloud resources (the OpenStack Port specifically) needs them:

openshift/cluster-api-provider-openstack#52

There are other ways we could achieve this, but this is the simplest and cleanest from our point of view. However it does mean that CAPO needs to be able to read this object.

[celebdor]

I'm not sure whether this is the right way of doing this. We've got some values in Infrastructure.PlatformStatus.OpenStack that we need to pass to cluster-api-provider-openstack because the cloud resources (the OpenStack Port specifically) needs them:

openshift/cluster-api-provider-openstack#52

There are other ways we could achieve this, but this is the simplest and cleanest from our point of view. However it does mean that CAPO needs to be able to read this object.

I think it is perfectly legitimate for a machine controller to modify its behavior in accordance to the reported PlatformStatus that it is enabling.

[ingvagabund]

MAO is still owner of RBAC rules for all actuators. I don't think there is a better place for this. In the future we might break the RBAC rules per an actuator (for cost of adding some duplicity).

/approve

[openshift-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ingvagabund

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [ingvagabund]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[frobware]

/lgtm

[tomassedovic]

Thanks!