Merge pull request #3054 from teoincontatto/main

operator stackgres-certified (1.6.0-rc1)
redhat-openshift-ecosystem · Nov 2, 2023 · 8d266d3 · 8d266d3
2 parents 25139a1 + b5941df
commit 8d266d3
Show file tree

Hide file tree

Showing 26 changed files with 51,268 additions and 1 deletion.
diff --git a/...rs/stackgres-certified/1.6.0-rc1/manifests/stackgres-certified.clusterserviceversion.yaml b/...rs/stackgres-certified/1.6.0-rc1/manifests/stackgres-certified.clusterserviceversion.yaml
diff --git a/...d/1.6.0-rc1/manifests/stackgres-editor-role_rbac.authorization.k8s.io_v1_clusterrole.yaml b/...d/1.6.0-rc1/manifests/stackgres-editor-role_rbac.authorization.k8s.io_v1_clusterrole.yaml
@@ -0,0 +1,25 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  labels:
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: stackgres
+    app.kubernetes.io/instance: editor-role
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: clusterrole
+    app.kubernetes.io/part-of: stackgres
+  name: stackgres-editor-role
+rules:
+  - apiGroups:
+      - stackgres.io
+    resources:
+      - '*'
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
diff --git a/operators/stackgres-certified/1.6.0-rc1/manifests/stackgres-operator_v1_service.yaml b/operators/stackgres-certified/1.6.0-rc1/manifests/stackgres-operator_v1_service.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  creationTimestamp: null
+  name: stackgres-operator
+spec:
+  ports:
+    - port: 443
+      targetPort: 8443
+  selector:
+    app: stackgres-operator
+status:
+  loadBalancer: {}
diff --git a/...ified/1.6.0-rc1/manifests/stackgres-restapi_rbac.authorization.k8s.io_v1_clusterrole.yaml b/...ified/1.6.0-rc1/manifests/stackgres-restapi_rbac.authorization.k8s.io_v1_clusterrole.yaml
@@ -0,0 +1,27 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  name: stackgres-restapi
+rules:
+  - apiGroups:
+      - ''
+    resources:
+      - users
+      - groups
+      - serviceaccount
+    verbs:
+      - impersonate
+  - apiGroups:
+      - authorization.k8s.io
+    resources:
+      - subjectaccessreviews
+    verbs:
+      - create
+  - apiGroups:
+      - ''
+    resources:
+      - secrets
+    verbs:
+      - get
+      - list
diff --git a/....6.0-rc1/manifests/stackgres-restapi_rbac.authorization.k8s.io_v1_clusterrolebinding.yaml b/....6.0-rc1/manifests/stackgres-restapi_rbac.authorization.k8s.io_v1_clusterrolebinding.yaml
@@ -0,0 +1,20 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  creationTimestamp: null
+  labels:
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: stackgres
+    app.kubernetes.io/instance: restapi-rolebinding
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: clusterrolebinding
+    app.kubernetes.io/part-of: stackgres
+  name: stackgres-restapi
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: stackgres-restapi
+subjects:
+  - kind: ServiceAccount
+    name: restapi
+    namespace: system
diff --git a/...d/1.6.0-rc1/manifests/stackgres-viewer-role_rbac.authorization.k8s.io_v1_clusterrole.yaml b/...d/1.6.0-rc1/manifests/stackgres-viewer-role_rbac.authorization.k8s.io_v1_clusterrole.yaml
@@ -0,0 +1,27 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  labels:
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: stackgres
+    app.kubernetes.io/instance: viewer-role
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: clusterrole
+    app.kubernetes.io/part-of: stackgres
+  name: stackgres-viewer-role
+rules:
+  - apiGroups:
+      - stackgres.io
+    resources:
+      - '*'
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - stackgres.io
+    resources:
+      - sgconfigs/status
+    verbs:
+      - get
diff --git a/....0-rc1/manifests/stackgres-webconsole-admin_rbac.authorization.k8s.io_v1_clusterrole.yaml b/....0-rc1/manifests/stackgres-webconsole-admin_rbac.authorization.k8s.io_v1_clusterrole.yaml
@@ -0,0 +1,130 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  name: stackgres-webconsole-admin
+rules:
+  - apiGroups:
+      - ''
+      - batch
+    resources:
+      - pods/exec
+      - configmaps
+      - secrets
+      - jobs
+    verbs:
+      - create
+  - apiGroups:
+      - ''
+    resources:
+      - pods/exec
+    verbs:
+      - get
+  - apiGroups:
+      - ''
+      - batch
+    resources:
+      - configmaps
+      - secrets
+      - jobs
+    verbs:
+      - delete
+  - apiGroups:
+      - ''
+    resources:
+      - configmaps
+      - secrets
+    verbs:
+      - patch
+      - update
+  - apiGroups:
+      - ''
+      - batch
+      - storage.k8s.io
+    resources:
+      - namespaces
+      - storageclasses
+      - pods
+      - services
+      - configmaps
+      - secrets
+      - persistentvolumes
+      - persistentvolumeclaims
+      - events
+      - jobs
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - stackgres.io
+    resources:
+      - sgclusters
+      - sgpgconfigs
+      - sginstanceprofiles
+      - sgpoolconfigs
+      - sgbackupconfigs
+      - sgbackups
+      - sgdistributedlogs
+      - sgdbops
+      - sgobjectstorages
+      - sgscripts
+      - sgshardedclusters
+    verbs:
+      - create
+      - watch
+      - list
+      - get
+      - update
+      - patch
+      - delete
+  - apiGroups:
+      - stackgres.io
+    resources:
+      - sgconfigs
+    verbs:
+      - watch
+      - list
+      - get
+      - update
+      - patch
+  - apiGroups:
+      - apiextensions.k8s.io
+    resourceNames:
+      - sgconfigs.stackgres.io
+      - sgclusters.stackgres.io
+      - sginstanceprofiles.stackgres.io
+      - sgpgconfigs.stackgres.io
+      - sgpoolconfigs.stackgres.io
+      - sgbackups.stackgres.io
+      - sgbackupconfigs.stackgres.io
+      - sgobjectstorages.stackgres.io
+      - sgdbops.stackgres.io
+      - sgdistributedlogs.stackgres.io
+      - sgshardedclusters.stackgres.io
+      - sgscripts.stackgres.io
+    resources:
+      - customresourcedefinitions
+    verbs:
+      - get
+  - apiGroups:
+      - apiextensions.k8s.io
+    resources:
+      - customresourcedefinitions
+    verbs:
+      - list
+  - apiGroups:
+      - rbac.authorization.k8s.io
+    resources:
+      - roles
+      - rolebindings
+      - clusterroles
+      - clusterrolebindings
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
diff --git a/...manifests/stackgres-webconsole-admin_rbac.authorization.k8s.io_v1_clusterrolebinding.yaml b/...manifests/stackgres-webconsole-admin_rbac.authorization.k8s.io_v1_clusterrolebinding.yaml
@@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  creationTimestamp: null
+  labels:
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: stackgres
+    app.kubernetes.io/instance: webconsole-admin-rolebinding
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: clusterrolebinding
+    app.kubernetes.io/part-of: stackgres
+  name: stackgres-webconsole-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: stackgres-webconsole-admin
+subjects:
+  - kind: User
+    name: admin
diff --git a/...0-rc1/manifests/stackgres-webconsole-reader_rbac.authorization.k8s.io_v1_clusterrole.yaml b/...0-rc1/manifests/stackgres-webconsole-reader_rbac.authorization.k8s.io_v1_clusterrole.yaml
@@ -0,0 +1,89 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  name: stackgres-webconsole-reader
+rules:
+  - apiGroups:
+      - ''
+      - batch
+    resources:
+      - pods/exec
+    verbs:
+      - create
+  - apiGroups:
+      - ''
+    resources:
+      - pods/exec
+    verbs:
+      - get
+  - apiGroups:
+      - ''
+      - batch
+      - storage.k8s.io
+    resources:
+      - namespaces
+      - storageclasses
+      - pods
+      - services
+      - configmaps
+      - secrets
+      - persistentvolumes
+      - persistentvolumeclaims
+      - events
+      - jobs
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - stackgres.io
+    resources:
+      - sgclusters
+      - sgpgconfigs
+      - sginstanceprofiles
+      - sgpoolconfigs
+      - sgbackupconfigs
+      - sgbackups
+      - sgdistributedlogs
+      - sgdbops
+      - sgobjectstorages
+      - sgscripts
+      - sgshardedclusters
+    verbs:
+      - watch
+      - list
+      - get
+  - apiGroups:
+      - stackgres.io
+    resources:
+      - sgconfigs
+    verbs:
+      - watch
+      - list
+      - get
+  - apiGroups:
+      - apiextensions.k8s.io
+    resourceNames:
+      - sgconfigs.stackgres.io
+      - sgclusters.stackgres.io
+      - sginstanceprofiles.stackgres.io
+      - sgpgconfigs.stackgres.io
+      - sgpoolconfigs.stackgres.io
+      - sgbackups.stackgres.io
+      - sgbackupconfigs.stackgres.io
+      - sgobjectstorages.stackgres.io
+      - sgdbops.stackgres.io
+      - sgdistributedlogs.stackgres.io
+      - sgshardedclusters.stackgres.io
+      - sgscripts.stackgres.io
+    resources:
+      - customresourcedefinitions
+    verbs:
+      - get
+  - apiGroups:
+      - apiextensions.k8s.io
+    resources:
+      - customresourcedefinitions
+    verbs:
+      - list