Merge pull request redhat-et#1 from Gregory-Pereira/migrate-op1st-arg…

…ocd-to-rosa

Migrate op1st argocd to rosa

.aicoe-ci.yaml

@@ -0,0 +1,2 @@
+---
+check: []

.gitignore

@@ -0,0 +1,3 @@
+argocd/.creds
+sealed-secrets/helper-scripts.md
+.creds

.pre-commit-config.yaml

@@ -0,0 +1,43 @@
+---
+exclude: scripts|argocd/overlays/dev/configs|argocd/overlays/moc-infra/configs|.github/workflows
+
+repos:
+  - repo: https://github.com/Lucas-C/pre-commit-hooks
+    rev: v1.1.9
+    hooks:
+      - id: remove-tabs
+
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v3.3.0
+    hooks:
+      - id: trailing-whitespace
+      - id: check-merge-conflict
+      - id: end-of-file-fixer
+      - id: check-added-large-files
+        args:
+          - '--maxkb=600'
+      - id: check-case-conflict
+      - id: check-json
+      - id: check-symlinks
+      - id: detect-private-key
+
+  - repo: https://github.com/adrienverge/yamllint.git
+    rev: v1.25.0
+    hooks:
+      - id: yamllint
+        files: \.(yaml|yml)$
+        types: [file, yaml]
+        entry: yamllint --strict -c yamllint-config.yaml
+
+  - repo: https://github.com/os-climate/osc-trino-acl-dsl
+    rev: v0.3.1
+    hooks:
+      # manage rules.json files using a DSL for trino ACL
+      # this check enforces that rules.json is consistent with dsl file
+      # https://github.com/os-climate/osc-trino-acl-dsl/blob/main/.pre-commit-hooks.yaml
+      - id: trino-acl-dsl-check
+        files: |
+          (?x)^(.*/)?(
+            trino-acl-dsl\.yaml|
+            rules\.json
+          )$

.prow.yaml

@@ -0,0 +1,58 @@
+presubmits:
+  - name: kustomize-build
+    decorate: true
+    max_concurrency: 1
+    skip_if_only_changed: "^docs/|\\.md$|^(OWNERS|LICENSE)$|^\\."
+    skip_report: false
+    context: aicoe-ci/prow/kustomize-build
+    spec:
+      containers:
+        - image: quay.io/operate-first/opf-toolbox:latest
+          command:
+            - "test-kustomize-build"
+          resources:
+            requests:
+              memory: "256Mi"
+              cpu: "1500m"
+            limits:
+              memory: "500Mi"
+              cpu: "2"
+
+  - name: kubeval-validation
+    decorate: true
+    max_concurrency: 1
+    skip_if_only_changed: "^docs/|\\.md$|^(OWNERS|LICENSE)$|^\\."
+    skip_report: false
+    context: aicoe-ci/prow/kubeval-validation
+    spec:
+      containers:
+        - image: quay.io/operate-first/opf-toolbox:latest
+          command:
+            - "test-kubeval-validation"
+          resources:
+            requests:
+              memory: "512Mi"
+              cpu: "1500m"
+            limits:
+              memory: "2Gi"
+              cpu: "2"
+
+  - name: pre-commit
+    decorate: true
+    skip_report: false
+    always_run: true
+    context: aicoe-ci/prow/pre-commit
+    spec:
+      containers:
+        - image: quay.io/thoth-station/thoth-precommit-py38:v0.12.5
+          command:
+            - "pre-commit"
+            - "run"
+            - "--all-files"
+          resources:
+            requests:
+              memory: "500Mi"
+              cpu: "4"
+            limits:
+              memory: "2Gi"
+              cpu: "4"

README.md

@@ -0,0 +1,44 @@
+# Dex
+
+**Warning** This component will be deprecated and replaced by a Keycloak deployment soon. [blueprint#30](https://github.com/operate-first/blueprint/issues/30)
+
+## Change required user access permissions
+
+Update the `dex-cm.yaml` in the target overlay:
+
+```yaml
+...
+connectors:
+  - type: openshift
+    ...
+    config:
+      ...
+      groups:
+        - list
+        - of
+        - user
+        - groups
+```
+
+## Adding a new client
+
+Please add a new static client into the `dex-cm.yaml`:
+
+```yaml
+staticClients:
+  - id: CLIENT_ID
+    name: VERBOSE NAME
+    redirectURIs:
+      - base_url/suffix/for/callback
+    secretEnv: CLIENT_SECRET
+```
+
+- `id: CLIENT_ID` will be used as the application client identity (mostly referred to as `ClientId`)
+- `name: VERBOSE NAME` is just a name descriptor
+- `base_url` is the client application's base URL
+- `/suffix/for/callback` is the application OIDC callback endpoint, please consult API documentation of the application
+- `CLIENT_SECRET` is a variable name from `dex-client-secrets.yaml` loaded at runtime from environment. Don't use `$` here, value gets evaluated automatically.
+
+Then specify the `CLIENT_SECRET` in `dex-clients.enc.yaml` in your target overlays.
+
+Provide the same `CLIENT_ID` and `CLIENT_SECRET` to the connected applications. These are the credentials the application can use to identify itself against Dex server.

acme-operator/base/deployment.yaml

@@ -0,0 +1,24 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: openshift-acme
+spec:
+  selector:
+    matchLabels:
+      app: openshift-acme
+  replicas: 1
+  strategy:
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: openshift-acme
+    spec:
+      serviceAccountName: openshift-acme
+      containers:
+        - name: openshift-acme
+          image: quay.io/tnozicka/openshift-acme:controller
+          imagePullPolicy: Always
+          args:
+            - --exposer-image=quay.io/tnozicka/openshift-acme:exposer
+            - --loglevel=4

acme-operator/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- deployment.yaml
+- serviceaccount.yaml

acme-operator/base/serviceaccount.yaml

@@ -0,0 +1,6 @@
+kind: ServiceAccount
+apiVersion: v1
+metadata:
+  name: openshift-acme
+  labels:
+    app: openshift-acme

acme-operator/overlays/rosa/issuer-letsencrypt-live.yaml

@@ -0,0 +1,12 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: letsencrypt-live
+  annotations:
+    acme.openshift.io/priority: "100"
+    argocd.argoproj.io/compare-options: IgnoreExtraneous
+  labels:
+    managed-by: "openshift-acme"
+    type: "CertIssuer"
+data:
+  "cert-issuer.types.acme.openshift.io": '{"type":"ACME","acmeCertIssuer":{"directoryUrl":"https://acme-v02.api.letsencrypt.org/directory"}}'

acme-operator/overlays/rosa/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../../base
+# - issuer-letsencrypt-live.yaml
+namespace: acme-operator

apex/overlays/rosa/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - sealed-secrets

apex/overlays/rosa/sealed-secrets/apex-api-cert-sealed.yaml

@@ -0,0 +1,25 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: apex-api-cert
+  namespace: apex
+spec:
+  encryptedData:
+    tls.crt: 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
+    tls.key: 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
+  template:
+    metadata:
+      annotations:
+        cert-manager.io/alt-names: api.apex-hosted.cloud
+        cert-manager.io/certificate-name: apex-api-cert
+        cert-manager.io/common-name: api.apex-hosted.cloud
+        cert-manager.io/ip-sans: ""
+        cert-manager.io/issuer-group: cert-manager.io
+        cert-manager.io/issuer-kind: Issuer
+        cert-manager.io/issuer-name: letsencrypt
+        cert-manager.io/uri-sans: ""
+      creationTimestamp: null
+      name: apex-api-cert
+      namespace: apex
+    type: kubernetes.io/tls