fix: wait sync rules before start auth controller

tkestack · Apr 29, 2020 · a0f537f · a0f537f
1 parent 235afe9
commit a0f537f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/cmd/tke-auth-controller/app/auth.go b/cmd/tke-auth-controller/app/auth.go
@@ -35,10 +35,10 @@ import (
 
 const (
 	policySyncPeriod      = 5 * time.Minute
-	concurrentPolicySyncs = 5
+	concurrentPolicySyncs = 10
 
 	projectPolicySyncPeriod      = 5 * time.Minute
-	concurrentProjectPolicySyncs = 5
+	concurrentProjectPolicySyncs = 10
 
 	localIdentitySyncPeriod      = 5 * time.Minute
 	concurrentLocalIdentitySyncs = 5

diff --git a/cmd/tke-auth-controller/app/context.go b/cmd/tke-auth-controller/app/context.go
@@ -144,7 +144,6 @@ func CreateControllerContext(cfg *config.Config, rootClientBuilder controller.Cl
 
 	rm := domainrolemanager.NewRoleManager(10)
 	enforcer.SetRoleManager(rm)
-	_ = enforcer.LoadPolicy()
 	enforcer.StartAutoLoadPolicy(cfg.CasbinReloadInterval)
 
 	ctx := ControllerContext{