Skip to content

build(hub-afd): [PATCH 05/08] hub-afd-controller-manager binary + Hel…#384

Open
rchincha wants to merge 1 commit into
Azure:mainfrom
rchincha:rchinchani/afd-05-binary-chart
Open

build(hub-afd): [PATCH 05/08] hub-afd-controller-manager binary + Hel…#384
rchincha wants to merge 1 commit into
Azure:mainfrom
rchincha:rchinchani/afd-05-binary-chart

Conversation

@rchincha

Copy link
Copy Markdown

…m chart + Dockerfile

Part 05 of an 8-patch split of #373. Introduces the sibling binary that hosts the AFD reconcilers, along with its container image build, Helm chart, and Makefile targets.

  • cmd/hub-afd-controller-manager/main.go — entry point for the AFD binary. Runs under its own Workload-Identity federated subject so ATM-only tenants do not inherit AFD write permissions (SFI-NS253, docs/first-party/001 §7).
  • cmd/hub-net-controller-manager/main.go — no longer registers AFD reconcilers (they moved to the new binary).
  • charts/hub-afd-controller-manager/** — new Helm chart sibling to hub-net-controller-manager (Deployment, RBAC, PDB, values).
  • docker/hub-afd-controller-manager.Dockerfile — image build recipe.
  • Makefile — adds hub-afd-controller-manager targets (build, image, push) mirroring the hub-net targets.

The AFD reconcilers themselves land in PATCH 06/07/08 and are registered against the manager set up here.

Copilot-Session: a8fabc68-e113-49ef-b82d-d99a8502da11

What type of PR is this?

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes #

Requirements:

How has this code been tested

Special notes for your reviewer

…m chart + Dockerfile

Part 05 of an 8-patch split of Azure#373. Introduces the sibling binary that
hosts the AFD reconcilers, along with its container image build, Helm
chart, and Makefile targets.

- cmd/hub-afd-controller-manager/main.go — entry point for the AFD
  binary. Runs under its own Workload-Identity federated subject so
  ATM-only tenants do not inherit AFD write permissions
  (SFI-NS253, docs/first-party/001 §7).
- cmd/hub-net-controller-manager/main.go — no longer registers AFD
  reconcilers (they moved to the new binary).
- charts/hub-afd-controller-manager/** — new Helm chart sibling to
  hub-net-controller-manager (Deployment, RBAC, PDB, values).
- docker/hub-afd-controller-manager.Dockerfile — image build recipe.
- Makefile — adds hub-afd-controller-manager targets (build, image,
  push) mirroring the hub-net targets.

The AFD reconcilers themselves land in PATCH 06/07/08 and are
registered against the manager set up here.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: a8fabc68-e113-49ef-b82d-d99a8502da11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant