mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-20 19:10:34 +00:00
Generate CRD and RBAC yaml templates from submariner-operator
The submariner-operator repo is the source of truth for the CRD and RBAC resource yaml used by subctl and the ACM add-on so we should use it for the helm charts as well. This will avoid having to duplicate changes from the submariner-operator repo. All the yaml is assembled in the pkg/embeddedyamls/yamls.go file in submariner-operator so download and extract the yaml into template files in the chart templates directories which can then be included in other manifest files. Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
This commit is contained in:
Tom Pantelis
committed by
Thomas Pantelis
Thomas Pantelis
parent
4967ab1b72
commit
028400610b
Executable
+100
@@ -0,0 +1,100 @@
|
||||
#!/bin/bash
|
||||
|
||||
set -e
|
||||
|
||||
BROKER_ROLE_TPL=submariner-k8s-broker/templates/_role.tpl
|
||||
OPERATOR_RBAC_YAML=submariner-operator/templates/operator-rbac.yaml
|
||||
GATEWAY_RBAC_YAML=submariner-operator/templates/gateway-rbac.yaml
|
||||
ROUTE_AGENT_RBAC_YAML=submariner-operator/templates/routeagent-rbac.yaml
|
||||
GLOBALNET_RBAC_YAML=submariner-operator/templates/globalnet-rbac.yaml
|
||||
SERVICE_DISC_RBAC_YAML=submariner-operator/templates/service-discovery-rbac.yaml
|
||||
OPENSHIFT_MONITORING_YAML=submariner-operator/templates/openshift-monitoring-rbac.yaml
|
||||
|
||||
function add_service_acct_ns() {
|
||||
sed -i '/- kind: ServiceAccount/a \ \ \ \ namespace: {{ .Release.Namespace }}' $1
|
||||
}
|
||||
|
||||
mkdir -p yamls
|
||||
cd yamls
|
||||
curl -L https://raw.githubusercontent.com/submariner-io/submariner-operator/refs/heads/$1/pkg/embeddedyamls/yamls.go | ../extract-yamls
|
||||
cd -
|
||||
|
||||
# Generate the CRDs for the broker chart
|
||||
mkdir -p submariner-k8s-broker/crds
|
||||
cat yamls/Deploy_submariner_crds_submariner_io_endpoints.yaml \
|
||||
yamls/Deploy_submariner_crds_submariner_io_clusters.yaml \
|
||||
yamls/Deploy_submariner_crds_submariner_io_gateways.yaml \
|
||||
yamls/Deploy_mcsapi_crds_multicluster_x_k8s_io_serviceexports.yaml \
|
||||
yamls/Deploy_mcsapi_crds_multicluster_x_k8s_io_serviceimports.yaml > submariner-k8s-broker/crds/crd.yaml
|
||||
|
||||
# Generate the client role yaml for the broker chart
|
||||
echo '{{- define "broker-role" -}}' > ${BROKER_ROLE_TPL}
|
||||
cat yamls/Config_broker_broker_client_role.yaml >> ${BROKER_ROLE_TPL}
|
||||
echo '{{- end -}}' >> ${BROKER_ROLE_TPL}
|
||||
sed -i -e 's/name:.*/name: {{ template "submariner-k8s-broker.fullname" \. }}-cluster/' ${BROKER_ROLE_TPL}
|
||||
|
||||
# Generate the CRDs for the operator chart
|
||||
mkdir -p submariner-operator/crds
|
||||
cat yamls/Deploy_crds_submariner_io_submariners.yaml \
|
||||
yamls/Deploy_crds_submariner_io_servicediscoveries.yaml \
|
||||
yamls/Deploy_crds_submariner_io_brokers.yaml > submariner-operator/crds/crd.yaml
|
||||
|
||||
# Generate the operator RBAC yaml for the operator chart
|
||||
echo '{{- if .Values.rbac.create -}}' > ${OPERATOR_RBAC_YAML}
|
||||
add_service_acct_ns yamls/Config_rbac_submariner_operator_cluster_role_binding.yaml
|
||||
cat yamls/Config_rbac_submariner_operator_service_account.yaml \
|
||||
yamls/Config_rbac_submariner_operator_role.yaml \
|
||||
yamls/Config_rbac_submariner_operator_role_binding.yaml \
|
||||
yamls/Config_rbac_submariner_operator_cluster_role.yaml \
|
||||
yamls/Config_rbac_submariner_operator_cluster_role_binding.yaml > ${OPERATOR_RBAC_YAML}
|
||||
echo '{{- end -}}' >> ${OPERATOR_RBAC_YAML}
|
||||
|
||||
# Generate the gateway RBAC yaml for the operator chart
|
||||
echo '{{- if .Values.rbac.create -}}' > ${GATEWAY_RBAC_YAML}
|
||||
add_service_acct_ns yamls/Config_rbac_submariner_gateway_cluster_role_binding.yaml
|
||||
cat yamls/Config_rbac_submariner_gateway_service_account.yaml \
|
||||
yamls/Config_rbac_submariner_gateway_role.yaml \
|
||||
yamls/Config_rbac_submariner_gateway_role_binding.yaml \
|
||||
yamls/Config_rbac_submariner_gateway_cluster_role.yaml \
|
||||
yamls/Config_rbac_submariner_gateway_cluster_role_binding.yaml > ${GATEWAY_RBAC_YAML}
|
||||
echo '{{- end -}}' >> ${GATEWAY_RBAC_YAML}
|
||||
|
||||
# Generate the routeagent RBAC yaml for the operator chart
|
||||
echo '{{- if .Values.rbac.create -}}' > ${ROUTE_AGENT_RBAC_YAML}
|
||||
add_service_acct_ns yamls/Config_rbac_submariner_route_agent_cluster_role_binding.yaml
|
||||
cat yamls/Config_rbac_submariner_route_agent_service_account.yaml \
|
||||
yamls/Config_rbac_submariner_route_agent_role.yaml \
|
||||
yamls/Config_rbac_submariner_route_agent_role_binding.yaml \
|
||||
yamls/Config_rbac_submariner_route_agent_cluster_role.yaml \
|
||||
yamls/Config_rbac_submariner_route_agent_cluster_role_binding.yaml > ${ROUTE_AGENT_RBAC_YAML}
|
||||
echo '{{- end -}}' >> ${ROUTE_AGENT_RBAC_YAML}
|
||||
|
||||
# Generate the globalnet RBAC yaml for the operator chart
|
||||
echo '{{- if .Values.rbac.create -}}' > ${GLOBALNET_RBAC_YAML}
|
||||
echo '{{- if .Values.broker.globalnet }}' > ${GLOBALNET_RBAC_YAML}
|
||||
add_service_acct_ns yamls/Config_rbac_submariner_globalnet_cluster_role_binding.yaml
|
||||
cat yamls/Config_rbac_submariner_globalnet_service_account.yaml \
|
||||
yamls/Config_rbac_submariner_globalnet_role.yaml \
|
||||
yamls/Config_rbac_submariner_globalnet_role_binding.yaml \
|
||||
yamls/Config_rbac_submariner_globalnet_cluster_role.yaml \
|
||||
yamls/Config_rbac_submariner_globalnet_cluster_role_binding.yaml >> ${GLOBALNET_RBAC_YAML}
|
||||
echo '{{- end -}}' >> ${GLOBALNET_RBAC_YAML}
|
||||
|
||||
# Generate the service discovery RBAC yaml for the operator chart
|
||||
echo '{{- if .Values.rbac.create -}}' > ${SERVICE_DISC_RBAC_YAML}
|
||||
echo '{{- if .Values.submariner.serviceDiscovery }}' > ${SERVICE_DISC_RBAC_YAML}
|
||||
add_service_acct_ns yamls/Config_rbac_lighthouse_agent_cluster_role_binding.yaml
|
||||
add_service_acct_ns yamls/Config_rbac_lighthouse_coredns_cluster_role_binding.yaml
|
||||
cat yamls/Config_rbac_lighthouse_agent_service_account.yaml \
|
||||
yamls/Config_rbac_lighthouse_agent_cluster_role.yaml \
|
||||
yamls/Config_rbac_lighthouse_agent_cluster_role_binding.yaml \
|
||||
yamls/Config_rbac_lighthouse_coredns_service_account.yaml \
|
||||
yamls/Config_rbac_lighthouse_coredns_cluster_role.yaml \
|
||||
yamls/Config_rbac_lighthouse_coredns_cluster_role_binding.yaml >> ${SERVICE_DISC_RBAC_YAML}
|
||||
echo '{{- end -}}' >> ${SERVICE_DISC_RBAC_YAML}
|
||||
|
||||
# Generate the openshift monitoring rbac yaml for the operator chart
|
||||
echo '{{- if .Values.rbac.create -}}' > ${OPENSHIFT_MONITORING_YAML}
|
||||
cat yamls/Config_openshift_rbac_submariner_metrics_reader_role.yaml \
|
||||
yamls/Config_openshift_rbac_submariner_metrics_reader_role_binding.yaml >> ${OPENSHIFT_MONITORING_YAML}
|
||||
echo '{{- end -}}' >> ${OPENSHIFT_MONITORING_YAML}
|
||||
Reference in New Issue
Block a user