From 9e1ae286e9309d15e2d808f701e62cad3bc1acbf Mon Sep 17 00:00:00 2001 From: Casey Davenport Date: Wed, 13 Apr 2022 11:00:33 -0700 Subject: [PATCH] Increase Typha max fall behind window (#1906) --- pkg/render/typha.go | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/pkg/render/typha.go b/pkg/render/typha.go index e409f659d4..46843f35a3 100644 --- a/pkg/render/typha.go +++ b/pkg/render/typha.go @@ -330,7 +330,8 @@ func (c *typhaComponent) typhaRole() *rbacv1.ClusterRole { } if c.installation.KubernetesProvider != operator.ProviderOpenShift { // Allow access to the pod security policy in case this is enforced on the cluster - role.Rules = append(role.Rules, rbacv1.PolicyRule{APIGroups: []string{"policy"}, + role.Rules = append(role.Rules, rbacv1.PolicyRule{ + APIGroups: []string{"policy"}, Resources: []string{"podsecuritypolicies"}, Verbs: []string{"use"}, ResourceNames: []string{common.TyphaDeploymentName}, @@ -504,6 +505,7 @@ func (c *typhaComponent) typhaEnvVars() []v1.EnvVar { } typhaEnv := []v1.EnvVar{ + {Name: "TYPHA_SERVERMAXFALLBEHINDSECS", Value: "600"}, {Name: "TYPHA_LOGSEVERITYSCREEN", Value: "info"}, {Name: "TYPHA_LOGFILEPATH", Value: "none"}, {Name: "TYPHA_LOGSEVERITYSYS", Value: "none"}, @@ -541,7 +543,8 @@ func (c *typhaComponent) typhaEnvVars() []v1.EnvVar { if c.installation.CalicoNetwork != nil && c.installation.CalicoNetwork.MultiInterfaceMode != nil { typhaEnv = append(typhaEnv, v1.EnvVar{ Name: "MULTI_INTERFACE_MODE", - Value: c.installation.CalicoNetwork.MultiInterfaceMode.Value()}) + Value: c.installation.CalicoNetwork.MultiInterfaceMode.Value(), + }) } }