[WIP] Tuning parameters to make end-to-end testing work.
Please don't merge this patch, it's not ready yet.
When it's ready, this message will be gone.
- Disble Hugepage to avoid ngic-dp crash.
- Adding debug parameter in accelleran.
Change-Id: I98edeaef82d2bae9759bd1a4157694a709c3fbe8
diff --git a/mcord/cni-config/01-cni-service-account.yaml b/mcord/cni-config/01-cni-service-account.yaml
index 022e248..762cb77 100644
--- a/mcord/cni-config/01-cni-service-account.yaml
+++ b/mcord/cni-config/01-cni-service-account.yaml
@@ -29,22 +29,40 @@
- '*'
verbs:
- '*'
+#- apiGroups: [""]
+# resources: ["pods"]
+# verbs: ["get"]
+#- apiGroups: [""]
+# resources: ["pods/status"]
+# verbs: ["update"]
+#- apiGroups: ["k8s.cni.cncf.io"]
+# resources: ["*"]
+# verbs: ["get"]
---
apiVersion: v1
kind: ServiceAccount
metadata:
- name: sriov-dp
+ name: multus-sa
namespace: kube-system
---
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: v1
+kind: Secret
metadata:
- name: sriov-dp
+ name: multus-sa-secret
+ namespace: kube-system
+ annotations:
+ kubernetes.io/service-account.name: multus-sa
+type: kubernetes.io/service-account-token
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: multus-rb
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: pod-networks-operator
subjects:
- kind: ServiceAccount
- name: sriov-dp
+ name: multus-sa
namespace: kube-system