-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ensure when non-admin is NOT enabled, the creation of NABCR/NARCR returns a proper error message #43
Comments
Is the expectation that the NAB/NAR CR will have an error status ? I believe it would not be possible as the NAC controllers (NAB/NAR) would not exist if non-admin feature is not enabled. Is the expectation something different ? |
as discussed, look what happens when a velero CR is created and no velero deployment is live and have consistent behavior |
What does happen when that is the case? |
@shawn-hurley currently when there is no controller running the Could you tell me what is the expected behavior in the following cases:
Isn't that overall k8s issue with objects that do not have any controller managing them rather than OADP responsibility? |
I hope we have some way of alerting users that the resources they will create will have no effect. I would even prefer that we prevent the users from taking this action.
I think that the same is true as the above statement.
I think the only situation where this could happen is:
For 2, I don't think there is anything we can do. For 1, I thought that OLM would delete the aggregation to admin on deletion, so the user should be unable to create. If that is not the case, then just like for 2, there is not a lot we can do. I don't think that just because we can't do a lot ourselves for 3 doesn't mean we should make the experience worse for the first two. Inconsistent behavior is fine if it is because it is degrading nicely IM). Which, in this case, given the constraints, we are doing the best we can to alert the user to the situation based on what tools we have available. Let me know if you want to talk about this more |
As a note, if you uninstall operator through CLI or UI, CRDs are not deleted. It is a manual extra step |
@shawn-hurley do you have an example operator that does this warning/error message about CRDs missing controllers deployed? |
The problem is that we do have a controller installed right, we have OADP, and when OADP is installed now things appear. |
agree, I think the problem is not a NAC problem, but OADP itself, because this happens to velero objects (velero controller only appears after creating DPA) |
@shawn-hurley Is the expectation that the DPA status tells that the user's that "Non-Admin feature not enabled but NAB CR found, please enable NAC for processing this NAB request" For first case, non-admin user will need access to OADP install NS for viewing DPA status, right ? |
I was thinking that you could have a web hook that would prevent the user from creating the resource would be the correct thing The next option, would be to consider a way for the NAB CRD's to not be installed unless the user wanted NAC |
No description provided.
The text was updated successfully, but these errors were encountered: