From cdd55f98caf877fd8002422413c97fad4d43d0d7 Mon Sep 17 00:00:00 2001
From: Wei Fu <weifu@microsoft.com>
Date: Sat, 11 May 2024 07:07:29 +0000
Subject: [PATCH] manifests/virtualcluster/nodecontrollers: use system
 flowcontrol

It's align with system:nodes:<node-name> users, like kubelet

Signed-off-by: Wei Fu <weifu@microsoft.com>
---
 .../templates/flowcontrol.yaml                | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 manifests/virtualcluster/nodecontrollers/templates/flowcontrol.yaml

diff --git a/manifests/virtualcluster/nodecontrollers/templates/flowcontrol.yaml b/manifests/virtualcluster/nodecontrollers/templates/flowcontrol.yaml
new file mode 100644
index 0000000..2569bb1
--- /dev/null
+++ b/manifests/virtualcluster/nodecontrollers/templates/flowcontrol.yaml
@@ -0,0 +1,27 @@
+apiVersion: flowcontrol.apiserver.k8s.io/v1beta3
+kind: FlowSchema
+metadata:
+  name: {{ .Values.name }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  distinguisherMethod:
+    type: ByUser
+  matchingPrecedence: 500
+  priorityLevelConfiguration:
+    name: system
+  rules:
+  - resourceRules:
+    - apiGroups:
+      - '*'
+      clusterScope: true
+      namespaces:
+      - '*'
+      resources:
+      - '*'
+      verbs:
+      - '*'
+    subjects:
+    - kind: ServiceAccount
+      serviceAccount:
+        name: {{ .Values.name }}
+        namespace: {{ .Release.Namespace }}