Files
teleport/docs/pages/reference/infrastructure-as-code
Julia Ogris 466fccde36 operator: Add role v9 CRD kind (#68737)
* operator: Add role v9 CRD kind

Register a TeleportRoleV9 kind with the Kubernetes operator so v9
roles can be managed declaratively. The reconciler reuses the shared
RoleV6 storage type with a version override, the same way the v7 and
v8 kinds do.

Generated changes:

    make -C integrations/operator generate

* operator: Drop preserve-unknown on app_resources

Setting x-kubernetes-preserve-unknown-fields on app_resources rule items
relaxed the CRD schema to store fields it does not declare, so the operator
could reject them on decode. That keeps invalid data in cluster state and is
hard to walk back once shipped, even after Kubernetes field validation
improves. Rely on the structural schema and server-side field validation to
reject unknown fields at the API server instead, and drop the tests that
asserted the operator-side rejection.

* operator: Match the reconciler factory signature

The scoped operator work added an OperatorMetadata parameter to
ReconcilerFactory and updated every existing role reconciler. The v9
reconciler was written before that change, so master and this branch each
compile alone but not once merged, and the merge queue rejects the result.

Take the parameter and ignore it, as the v6 to v8 reconcilers do.
2026-08-10 23:51:57 +00:00
..