Skip to content

Commit

Permalink
Clean up IAM policy references
Browse files Browse the repository at this point in the history
The IAM policy controller has been removed.

Signed-off-by: Dale Haiducek <[email protected]>
  • Loading branch information
dhaiducek committed Feb 19, 2025
1 parent 5fcd45e commit 4d12f4d
Show file tree
Hide file tree
Showing 6 changed files with 1 addition and 17 deletions.
3 changes: 0 additions & 3 deletions add-ons/cluster_wide_proxy.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -67,9 +67,6 @@ apiVersion: agent.open-cluster-management.io/v1
certPolicyController:
enabled: true
proxyPolicy: Disabled
iamPolicyController:
enabled: true
proxyPolicy: Disabled
----
*Important:* Global proxy settings do not impact alert forwarding. To set up alert forwarding for {acm-short} hub clusters with a cluster-wide proxy, see link:../observability/customize_observability.adoc#forward-alerts[Forwarding alerts] for more details.
3 changes: 0 additions & 3 deletions add-ons/klusterlet_managed.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,6 @@ See the following available klusterlet add-ons:
- application-manager
- cert-policy-controller
- config-policy-controller
- iam-policy-controller
- governance-policy-framework
- search-collector
Expand All @@ -28,8 +27,6 @@ spec:
enabled: true
certPolicyController:
enabled: true
iamPolicyController:
enabled: true
policyController: <1>
enabled: true
searchCollector:
Expand Down
6 changes: 0 additions & 6 deletions add-ons/modify_endpoint.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,6 @@ spec:
enabled: true
certPolicyController:
enabled: true
iamPolicyController:
enabled: true
policyController:
enabled: true
searchCollector:
Expand All @@ -48,10 +46,6 @@ The following settings can be updated in the `klusterletaddonconfigs.agent.open-
| `true` or `false`
| This controller enforces certificate-based policies on the managed cluster.

| iamPolicyController
| `true` or `false`
| This controller enforces the IAM-based policy lifecycle on the managed cluster.

| policyController
| `true` or `false`
| This controller enforces all other policy rules on the managed cluster.
Expand Down
2 changes: 0 additions & 2 deletions clusters/cluster_lifecycle/import_cli.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -206,8 +206,6 @@ spec:
enabled: true
certPolicyController:
enabled: true
iamPolicyController:
enabled: true
policyController:
enabled: true
searchCollector:
Expand Down
2 changes: 1 addition & 1 deletion install/cleanup_reinstall.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ ACM_NAMESPACE=<namespace>
oc delete mch --all -n $ACM_NAMESPACE
oc delete apiservice v1.admission.cluster.open-cluster-management.io v1.admission.work.open-cluster-management.io
oc delete clusterimageset --all
oc delete clusterrole multiclusterengines.multicluster.openshift.io-v1-admin multiclusterengines.multicluster.openshift.io-v1-crdview multiclusterengines.multicluster.openshift.io-v1-edit multiclusterengines.multicluster.openshift.io-v1-view open-cluster-management:addons:application-manager open-cluster-management:admin-aggregate open-cluster-management:cert-policy-controller-hub open-cluster-management:cluster-manager-admin-aggregate open-cluster-management:config-policy-controller-hub open-cluster-management:edit-aggregate open-cluster-management:iam-policy-controller-hub open-cluster-management:policy-framework-hub open-cluster-management:view-aggregate
oc delete clusterrole multiclusterengines.multicluster.openshift.io-v1-admin multiclusterengines.multicluster.openshift.io-v1-crdview multiclusterengines.multicluster.openshift.io-v1-edit multiclusterengines.multicluster.openshift.io-v1-view open-cluster-management:addons:application-manager open-cluster-management:admin-aggregate open-cluster-management:cert-policy-controller-hub open-cluster-management:cluster-manager-admin-aggregate open-cluster-management:config-policy-controller-hub open-cluster-management:edit-aggregate open-cluster-management:policy-framework-hub open-cluster-management:view-aggregate
oc delete crd klusterletaddonconfigs.agent.open-cluster-management.io placementbindings.policy.open-cluster-management.io policies.policy.open-cluster-management.io userpreferences.console.open-cluster-management.io discoveredclusters.discovery.open-cluster-management.io discoveryconfigs.discovery.open-cluster-management.io
oc delete mutatingwebhookconfiguration ocm-mutating-webhook managedclustermutators.admission.cluster.open-cluster-management.io multicluster-observability-operator
oc delete validatingwebhookconfiguration channels.apps.open.cluster.management.webhook.validator application-webhook-validator multiclusterhub-operator-validating-webhook ocm-validating-webhook multicluster-observability-operator multiclusterengines.multicluster.openshift.io
Expand Down
2 changes: 0 additions & 2 deletions observability/grafana_labels.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,6 @@ data:
- feature.open-cluster-management.io/addon-cluster-proxy
- feature.open-cluster-management.io/addon-config-policy-controller
- feature.open-cluster-management.io/addon-governance-policy-framework
- feature.open-cluster-management.io/addon-iam-policy-controller
- feature.open-cluster-management.io/addon-observability-controller
- feature.open-cluster-management.io/addon-search-collector
- feature.open-cluster-management.io/addon-work-manager
Expand Down Expand Up @@ -56,7 +55,6 @@ data:
- feature.open-cluster-management.io/addon-cluster-proxy
- feature.open-cluster-management.io/addon-config-policy-controller
- feature.open-cluster-management.io/addon-governance-policy-framework
- feature.open-cluster-management.io/addon-iam-policy-controller
- feature.open-cluster-management.io/addon-observability-controller
- feature.open-cluster-management.io/addon-search-collector
- feature.open-cluster-management.io/addon-work-manager
Expand Down

0 comments on commit 4d12f4d

Please sign in to comment.