Skip to content

[Release v3.30] Add delete permission to tigera operator for ANP/BANP CRDs #10552

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: release-v3.30
Choose a base branch
from

Conversation

mazdakn
Copy link
Member

@mazdakn mazdakn commented Jun 12, 2025

Description

Add delete permission to tigera operator for ANP/BANP CRDs to allow ownership claim during migration from other CNIs. This fixes tigera/operator#3893

Pick of #10543

Related issues/PRs

Todos

  • Tests
  • Documentation
  • Release note

Release Note

Allow Operator to delete ANP/BANP CRDs to set owner refs when assuming control of pre-existing CRDs, for example on OCP.

Reminder for the reviewer

Make sure that this PR has the correct labels and milestone set.

Every PR needs one docs-* label.

  • docs-pr-required: This change requires a change to the documentation that has not been completed yet.
  • docs-completed: This change has all necessary documentation completed.
  • docs-not-required: This change has no user-facing impact and requires no docs.

Every PR needs one release-note-* label.

  • release-note-required: This PR has user-facing changes. Most PRs should have this label.
  • release-note-not-required: This PR has no user-facing changes.

Other optional labels:

  • cherry-pick-candidate: This PR should be cherry-picked to an earlier release. For bug fixes only.
  • needs-operator-pr: This PR is related to install and requires a corresponding change to the operator.

…lico#10543)

* Add delete permission to tigera operator for ANP/BANP CRDs

* Apply suggestions from code review

Co-authored-by: Casey Davenport <caseydavenport@users.noreply.github.com>

* markup

---------

Co-authored-by: Casey Davenport <caseydavenport@users.noreply.github.com>
@mazdakn mazdakn requested a review from a team as a code owner June 12, 2025 18:57
@mazdakn mazdakn added release-note-required Change has user-facing impact (no matter how small) docs-not-required Docs not required for this change labels Jun 12, 2025
@marvin-tigera marvin-tigera added this to the Calico v3.30.2 milestone Jun 12, 2025
@caseydavenport
Copy link
Member

@mazdakn I thought we chatted in Slack and decided that deleting the ANP CRD was a problem?

It's going to delete any AdminNetworkPolicy objects as part of it, which means that assuming ownership of the CRD is going to delete all the users policies 😬

@mazdakn mazdakn changed the title [Release v3.30] Add delete permission to tigera operator for ANP/BANP CRDs (#10543) [Release v3.30] Add delete permission to tigera operator for ANP/BANP CRDs Jun 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs-not-required Docs not required for this change release-note-required Change has user-facing impact (no matter how small)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants