fix(redis-operator): adding cluster role patch to fix redis operator bug

This deployment and crd allow us to use https://operatorhub.io/
this source is very usefull for operator deployments

base/cert-manager/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: cert-manager
+
+resources:
+- https://github.com/cert-manager/cert-manager/releases/download/v1.13.3/cert-manager.yaml

base/cloudnative-pg-operator/configurations/cnpg-cluster.yaml

@@ -0,0 +1,12 @@
+---
+nameReference:
+- kind: Secret
+  fieldSpecs:
+  - path: spec/superuserSecret/name
+    kind: Cluster
+  - path: spec/bootstrap/initdb/secret/name
+    kind: Cluster
+  - path: spec/backup/barmanObjectStore/s3Credentials/accessKeyId/name
+    kind: Cluster
+  - path: spec/backup/barmanObjectStore/s3Credentials/secretAccessKey/name
+    kind: Cluster

base/cloudnative-pg-operator/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v1.21.1/cnpg-1.21.1.yaml
+
+configurations:
+  - ./configurations/cnpg-cluster.yaml

base/kustomization.yaml

@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- https://github.com/cert-manager/cert-manager/releases/download/v1.10.0/cert-manager.yaml
+- ./olm
+- ./metallb
+- ./rabbitmq
+- ./postgresql
+- ./redis
+- ./minio
+- ./metrics
+- ./nginx
+- ./cloudnative-pg-operator

base/local-path-provisionner/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - github.com/rancher/local-path-provisioner/deploy?ref=v0.0.23
+

base/longhorn/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml
+- ./resources/storage-class.yaml

base/longhorn/resources/storage-class.yaml

@@ -0,0 +1,11 @@
+kind: StorageClass
+apiVersion: storage.k8s.io/v1
+metadata:
+  name: longhorn
+provisioner: driver.longhorn.io
+allowVolumeExpansion: true
+parameters:
+  numberOfReplicas: "3"
+  staleReplicaTimeout: "2880" # 48 hours in minutes
+  fromBackup: ""
+  fsType: "ext4"

base/mattermost-operator/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ./resources/namespace.yaml
+  - https://raw.githubusercontent.com/mattermost/mattermost-operator/master/docs/mattermost-operator/mattermost-operator.yaml

base/mattermost-operator/resources/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: mattermost-operator

base/metallb/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: metallb-system
+
+resources:
+  - ./secrets
+  - github.com/metallb/metallb/config/native?ref=v0.13.7

base/metallb/secrets/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: metallb-system
+
+secretGenerator:
+- name: memberlist
+  literals:
+  - secretkey=FiXmEiAmNoTaReAlSeCr3tAnDineedtobereplacewithapropersecretforyourinfrastruture 

base/metrics/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- https://github.com/kubernetes-sigs/metrics-server/releases/download/v0.6.4/high-availability-1.21+.yaml
+
+patches:
+- path: ./patches/high-availability-1.21+.yaml

base/metrics/patches/high-availability-1.21+.yaml

@@ -0,0 +1,17 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: metrics-server
+  namespace: kube-system
+spec:
+  replicas: 3
+  template:
+    spec:
+      containers:
+      - name: metrics-server
+        args:
+        - --cert-dir=/tmp
+        - --secure-port=4443
+        - --kubelet-preferred-address-types=Hostname
+        - --kubelet-use-node-status-port
+        - --metric-resolution=15s

base/minio/configurations/tenants.minio.min.io.yaml

@@ -0,0 +1,14 @@
+---
+nameReference:
+- kind: Secret
+  fieldSpecs:
+  - path: spec/credsSecret/name
+    kind: Tenant
+- kind: Secret
+  fieldSpecs:
+  - path: spec/configuration/name
+    kind: Tenant
+- kind: Secret
+  fieldSpecs:
+  - path: spec/users/name
+    kind: Tenant

base/minio/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: minio-operator
+commonAnnotations:
+  operator.min.io/authors: "MinIO, Inc."
+  operator.min.io/license: "AGPLv3"
+  operator.min.io/support: "https://subnet.min.io"
+
+resources:
+- github.com/minio/operator/resources?ref=v5.0.10
+
+configurations:
+- ./configurations/tenants.minio.min.io.yaml

base/nginx/kustomization.yaml

@@ -0,0 +1,2 @@
+resources:
+  - https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.4.0/deploy/static/provider/cloud/deploy.yaml

base/olm/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- https://github.com/operator-framework/operator-lifecycle-manager/releases/download/v0.27.0/olm.yaml
+- resources/mandatory-operators

base/olm/resources/mandatory-operators/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- ./resources/redis-operator.yaml
+- ./resources/minio-operator.yaml
+- ./resources/cloudnative-pg.yaml
+- ./resources/rabbitmq-cluster-operator.yaml

base/olm/resources/mandatory-operators/patches/redis-operator-clusterrole.yaml

@@ -0,0 +1,90 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: redis-operator.*
+rules:
+- apiGroups:
+  - redis.redis.opstreelabs.in
+  resources:
+  - rediss
+  - redisclusters
+  - redis
+  - rediscluster
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - redis.redis.opstreelabs.in
+  resources:
+  - redis/finalizers
+  - rediscluster/finalizers
+  verbs:
+  - update
+- apiGroups:
+  - redis.redis.opstreelabs.in
+  resources:
+  - redis/status
+  - rediscluster/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  - pods/exec
+  - services
+  - configmaps
+  - pods
+  - persistentvolumes
+  - persistentvolumeclaims
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - apps
+  resources:
+  - statefulsets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - policy
+  resources:
+  - poddisruptionbudgets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch

base/olm/resources/mandatory-operators/resources/cloudnative-pg.yaml

@@ -0,0 +1,12 @@
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: my-cloudnative-pg
+  namespace: operators
+spec:
+  channel: stable-v1
+  #startingCSV: 1.22.1
+  #installPlanApproval: Manual
+  name: cloudnative-pg
+  source: operatorhubio-catalog
+  sourceNamespace: olm

base/olm/resources/mandatory-operators/resources/minio-operator.yaml

@@ -0,0 +1,11 @@
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: my-minio-operator
+  namespace: operators
+spec:
+  channel: stable
+  startingCSV: "minio-operator.v5.0.3"
+  name: minio-operator
+  source: operatorhubio-catalog
+  sourceNamespace: olm

base/olm/resources/mandatory-operators/resources/rabbitmq-cluster-operator.yaml

@@ -0,0 +1,12 @@
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: my-rabbitmq-cluster-operator
+  namespace: operators
+spec:
+  channel: stable
+  #  startingCSV: 2.7.0
+  #  installPlanApproval: Manual
+  name: rabbitmq-cluster-operator
+  source: operatorhubio-catalog
+  sourceNamespace: olm

base/olm/resources/mandatory-operators/resources/redis-operator.yaml

@@ -0,0 +1,11 @@
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: my-redis-operator
+  namespace: operators
+spec:
+  channel: stable
+  startingCSV: "redis-operator.v0.15.1"
+  name: redis-operator
+  source: operatorhubio-catalog
+  sourceNamespace: olm

base/postgresql/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: postgresql-operator
+
+resources:
+  - namespace.yaml
+  - github.com/zalando/postgres-operator/manifests?ref=v1.9.0
+  - github.com/zalando/postgres-operator/ui/manifests?ref=v1.9.0
+
+

base/postgresql/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: postgresql-operator

base/rabbitmq/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: rabbitmq-operator
+
+resources:
+  #- namespace.yaml
+- https://github.com/rabbitmq/cluster-operator/releases/download/v2.5.0/cluster-operator.yml

base/rabbitmq/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: rabbitmq-operator

base/redis/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: redis-operator
+
+resources:
+  - namespace.yaml
+  - github.com/spotahome/redis-operator/manifests/kustomize/overlays/default?ref=v1.2.4
+

base/redis/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: redis-operator

crds/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- https://github.com/operator-framework/operator-lifecycle-manager/releases/download/v0.27.0/crds.yaml
+- https://raw.githubusercontent.com/ory/k8s/v0.30.0/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml

kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+bases:
+- ./crds
+- ./base