Currently for classifier-agent (and all other sveltos microservices) all docker images are stored in docker-hub under namespace gianlucam76. Replace this to use namespace projectsveltos.

Deploy ClusterProfile with Reloader set to true. Have this ClusterProfile deploy a ConfigMap and a Deployment mounting the ConfigMap.

When ConfigMap is modified, a rolling upgrade for Deployment is triggered.
A Reloader instance is present in the managed cluster.

So far this is correct behaviour.

Reset ClusterProfile.Spec.Reloader to false.
Reloader instance is removed from managed cluster.

At this point any change in the ConfigMap should not trigger a rolling upgrade for the Deployment. Yet it still does.

YAML:

# nginx-config.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: nginx-config
  namespace: nginx
data:
  nginx.conf: |
    server {
      listen 80;
      server_name example.com;

      location / {
        root /usr/share/nginx/html;
        index index.html;
      }
    }

Store configmap.yaml in a file and create a ConfigMap with its content in the management cluster:

kubectl create configmap nginx-data --from-file configmap.yaml

# nginx-deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
  namespace: nginx
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
    spec:
      containers:
        - name: nginx
          image: nginx:latest
          ports:
            - containerPort: 80
          volumeMounts:
            - name: nginx-config-volume
              mountPath: /etc/nginx/conf.d/default.conf
              subPath: nginx.conf
      volumes:
        - name: nginx-config-volume
          configMap:
            name: nginx-config

Store deployment.yaml in a file and create a ConfigMap with its content in the management cluster:

kubectl create configmap nginx --from-file deployment.yaml

Create a ClusterProfile

apiVersion: config.projectsveltos.io/v1alpha1
kind: ClusterProfile
metadata:
  name: nginx
spec:
  clusterSelector: env=fv
  reloader: true
  syncMode: Continuous
  policyRefs:
  - name: nginx-data
    namespace: default
    kind: ConfigMap
  - name: nginx
    namespace: default
    kind: ConfigMap

Apply labels at the creation time for sveltos-agents. It may reuse the labels from classifier labels to sveltos-agent labels.

sveltos-agent must support being deployed:

1. in the managed cluster (this is current and should remain default behaviour)
2. in the management cluster

A new command line option is needed to tell sveltos-agent where it is deployed.

When running in the management cluster, should use the GetKubernetesRestConfig to get rest.Config to access managed cluster and use that one.

Sveltos-agent is already passed cluster info (namespace, name, cluster-type). Those info are required by GetKubernetesRestConfig.

Doing so require to grant sveltos-agent Secret read permission in the management cluster. Maybe another option would be to pass the Kubeconfig to access the managed cluster directly (as Classifier already has such permission).

When sveltos-agent is started in the management cluster, the run-mode option can only be set to "do-not-send-reports"
Meaning events and reports will be fetched by classifier (which is default behaviour).

1. Created a GKE cluster running Kubernetes version

2. Applied Classifier

apiVersion: lib.projectsveltos.io/v1alpha1
kind: Classifier
metadata:
  name: v1-27
spec:
  classifierLabels:
  - key: version
    value: v1-27
  kubernetesVersionConstraints:
  - comparison: GreaterThanOrEqualTo
    version: 1.27.0

3. Cluster was not classified as a match

I0804 09:05:36.270119 1 classifier_evaluation.go:94] "evaluating" classifier="v1-27"
I0804 09:05:36.274064 1 utils.go:50] "cluster version: v1.27.2-gke.1200"
I0804 09:05:36.274128 1 classifier_evaluation.go:152] "cluster version v1.27.2-gke.1200"
I0804 09:05:36.274284 1 classifier_evaluation.go:122] "isMatch false" classifier="v1-27"
I0804 09:05:36.274351 1 classifier_evaluation.go:522] "creating ClassifierReport" classifier="v1-27"

Method: isVersionAMatch needs to be fixed.