Add Cilium v1.14.4

isovalent · Nov 27, 2023 · 82dfaba · 82dfaba
1 parent f971e0e
commit 82dfaba
Show file tree

Hide file tree

Showing 183 changed files with 31,457 additions and 0 deletions.
diff --git a/Makefile.releases b/Makefile.releases
@@ -612,3 +612,13 @@ images.operator.all: images.operator.v1.14.3 generate.configs.v1.14.3
 generate.configs.all: generate.configs.v1.14.3
 
 images.operator.v1.14.3 generate.configs.v1.14.3: cilium_version=1.14.3
+
+
+# Cilium v1.14.4
+
+images.all: images.operator.v1.14.4
+
+images.operator.all: images.operator.v1.14.4 generate.configs.v1.14.4
+generate.configs.all: generate.configs.v1.14.4
+
+images.operator.v1.14.4 generate.configs.v1.14.4: cilium_version=1.14.4
diff --git a/bundles/cilium.v1.14.4/manifests/cilium.clusterserviceversion.yaml b/bundles/cilium.v1.14.4/manifests/cilium.clusterserviceversion.yaml
diff --git a/bundles/cilium.v1.14.4/manifests/cilium.operator.cilium.io.crd.yaml b/bundles/cilium.v1.14.4/manifests/cilium.operator.cilium.io.crd.yaml
@@ -0,0 +1,41 @@
+# Copyright 2017-2020 Authors of Cilium
+# SPDX-License-Identifier: Apache-2.0
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: ciliumconfigs.cilium.io
+spec:
+  group: cilium.io
+  names:
+    kind: CiliumConfig
+    listKind: CiliumConfigList
+    plural: ciliumconfigs
+    singular: ciliumconfig
+  scope: Namespaced
+  versions:
+    - name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          description: Schema for the CiliumConfigs API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: Spec defines the desired state of CiliumConfig
+              type: object
+              x-kubernetes-preserve-unknown-fields: true
+            status:
+              description: Status defines the observed state of CiliumConfig
+              type: object
+              x-kubernetes-preserve-unknown-fields: true
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}
diff --git a/bundles/cilium.v1.14.4/metadata/annotations.yaml b/bundles/cilium.v1.14.4/metadata/annotations.yaml
@@ -0,0 +1,11 @@
+annotations:
+  operators.operatorframework.io.bundle.channel.default.v1: "1.14"
+  operators.operatorframework.io.bundle.channels.v1: "1.14"
+  operators.operatorframework.io.bundle.manifests.v1: manifests/
+  operators.operatorframework.io.bundle.mediatype.v1: registry+v1
+  operators.operatorframework.io.bundle.metadata.v1: metadata/
+  operators.operatorframework.io.bundle.package.v1: cilium
+  operators.operatorframework.io.metrics.builder: operator-sdk-v1.0.1
+  operators.operatorframework.io.metrics.mediatype.v1: metrics+v1
+  operators.operatorframework.io.metrics.project_layout: helm.sdk.operatorframework.io/v1
+  com.redhat.openshift.versions: "v4.9"
diff --git a/manifests/cilium.v1.14.4/cluster-network-03-cilium-ciliumconfigs-crd.yaml b/manifests/cilium.v1.14.4/cluster-network-03-cilium-ciliumconfigs-crd.yaml
@@ -0,0 +1,41 @@
+# Copyright 2017-2020 Authors of Cilium
+# SPDX-License-Identifier: Apache-2.0
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: ciliumconfigs.cilium.io
+spec:
+  group: cilium.io
+  names:
+    kind: CiliumConfig
+    listKind: CiliumConfigList
+    plural: ciliumconfigs
+    singular: ciliumconfig
+  scope: Namespaced
+  versions:
+    - name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          description: Schema for the CiliumConfigs API
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: Spec defines the desired state of CiliumConfig
+              type: object
+              x-kubernetes-preserve-unknown-fields: true
+            status:
+              description: Status defines the observed state of CiliumConfig
+              type: object
+              x-kubernetes-preserve-unknown-fields: true
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}
diff --git a/manifests/cilium.v1.14.4/cluster-network-06-cilium-00000-cilium-namespace.yaml b/manifests/cilium.v1.14.4/cluster-network-06-cilium-00000-cilium-namespace.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  annotations:
+    openshift.io/node-selector: ""
+  labels:
+    name: cilium
+    openshift.io/cluster-logging: "true"
+    openshift.io/cluster-monitoring: "true"
+    openshift.io/run-level: "0"
+  name: cilium
diff --git a/manifests/cilium.v1.14.4/cluster-network-06-cilium-00001-cilium-olm-serviceaccount.yaml b/manifests/cilium.v1.14.4/cluster-network-06-cilium-00001-cilium-olm-serviceaccount.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    name: cilium-olm
+  name: cilium-olm
+  namespace: cilium
diff --git a/manifests/cilium.v1.14.4/cluster-network-06-cilium-00002-cilium-olm-deployment.yaml b/manifests/cilium.v1.14.4/cluster-network-06-cilium-00002-cilium-olm-deployment.yaml
@@ -0,0 +1,75 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    name: cilium-olm
+  name: cilium-olm
+  namespace: cilium
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      name: cilium-olm
+  template:
+    metadata:
+      labels:
+        name: cilium-olm
+    spec:
+      containers:
+        - command:
+            - /usr/local/bin/helm-operator
+            - run
+            - --watches-file=watches.yaml
+            - --enable-leader-election
+            - --leader-election-id=cilium-olm
+            - --zap-devel
+            - --metrics-addr=localhost:8082
+            - --health-probe-bind-address=localhost:8081
+          env:
+            - name: WATCH_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
+            - name: RELATED_IMAGE_CILIUM
+              value: quay.io/cilium/cilium@sha256:4981767b787c69126e190e33aee93d5a076639083c21f0e7c29596a519c64a2e
+            - name: RELATED_IMAGE_HUBBLE_RELAY
+              value: quay.io/cilium/hubble-relay@sha256:ca81622fd9f04c1316bf4144bde5dbce613758810f6022f6c706b14c9c0815db
+            - name: RELATED_IMAGE_CILIUM_OPERATOR
+              value: quay.io/cilium/operator-generic@sha256:f0f05e4ba3bb1fe0e4b91144fa4fea637701aba02e6c00b23bd03b4a7e1dfd55
+            - name: RELATED_IMAGE_PREFLIGHT
+              value: quay.io/cilium/cilium@sha256:4981767b787c69126e190e33aee93d5a076639083c21f0e7c29596a519c64a2e
+            - name: RELATED_IMAGE_CLUSTERMESH
+              value: quay.io/cilium/clustermesh-apiserver@sha256:828a74eea2a15c4196633dc50e4b92ba3a5e3ed8418c2a33e255a9281a1ce42f
+            - name: RELATED_IMAGE_CERTGEN
+              value: quay.io/cilium/certgen@sha256:f09fccb919d157fc0a83de20011738192a606250c0ee3238e3610b6cb06c0981
+            - name: RELATED_IMAGE_HUBBLE_UI_BE
+              value: quay.io/cilium/hubble-ui-backend@sha256:f88a73a120521eeafbcdbd908f517117f6557bf61e115847853fac371f0d774c
+            - name: RELATED_IMAGE_HUBBLE_UI_FE
+              value: quay.io/cilium/hubble-ui@sha256:e15af59a2ded739e420be82de6cbdd0ce22f8d3f00e3a10b3d2d2734e074a394
+            - name: RELATED_IMAGE_ETCD_OPERATOR
+              value: quay.io/cilium/cilium-etcd-operator@sha256:00cf2c0ab5204b5c5ace7d5e2696a7d5ab3f19d96c088201f39bfea8822c0861
+            - name: RELATED_IMAGE_NODEINIT
+              value: quay.io/cilium/startup-script@sha256:a1454ca1f93b69ecd2c43482c8e13dc418ae15e28a46009f5934300a20afbdba
+            - name: RELATED_IMAGE_CLUSTERMESH_ETCD
+              value: quay.io/coreos/etcd@sha256:a67fb152d4c53223e96e818420c37f11d05c2d92cf62c05ca5604066c37295e9
+          image: registry.connect.redhat.com/isovalent/cilium-olm:f565c9dcd25c48a3ef7016f8e47d243f0c49051a-v1.14.4
+          name: operator
+          ports:
+            - containerPort: 9443
+              name: https
+              protocol: TCP
+          resources:
+            requests:
+              cpu: 100m
+              memory: 512Mi
+          volumeMounts:
+            - mountPath: /tmp
+              name: tmp
+      hostNetwork: true
+      serviceAccount: cilium-olm
+      terminationGracePeriodSeconds: 10
+      tolerations:
+        - operator: Exists
+      volumes:
+        - emptyDir: {}
+          name: tmp
diff --git a/manifests/cilium.v1.14.4/cluster-network-06-cilium-00003-cilium-olm-service.yaml b/manifests/cilium.v1.14.4/cluster-network-06-cilium-00003-cilium-olm-service.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    name: cilium-olm
+  name: cilium-olm
+  namespace: cilium
+spec:
+  ports:
+    - name: https
+      port: 443
+      targetPort: 9443
+  selector:
+    name: cilium-olm
diff --git a/...fests/cilium.v1.14.4/cluster-network-06-cilium-00004-cilium-olm-leader-election-role.yaml b/...fests/cilium.v1.14.4/cluster-network-06-cilium-00004-cilium-olm-leader-election-role.yaml
@@ -0,0 +1,24 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: cilium-olm-leader-election
+  namespace: cilium
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - create
diff --git a/manifests/cilium.v1.14.4/cluster-network-06-cilium-00005-cilium-olm-role.yaml b/manifests/cilium.v1.14.4/cluster-network-06-cilium-00005-cilium-olm-role.yaml
@@ -0,0 +1,66 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: cilium-olm
+  namespace: cilium
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - namespaces
+    verbs:
+      - get
+  - apiGroups:
+      - cilium.io
+    resources:
+      - ciliumconfigs
+      - ciliumconfigs/status
+    verbs:
+      - list
+  - apiGroups:
+      - cilium.io
+    resources:
+      - ciliumconfigs
+      - ciliumconfigs/status
+      - ciliumconfigs/finalizers
+    verbs:
+      - get
+      - patch
+      - update
+      - watch
+      - list
+      - delete
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - create
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+    verbs:
+      - '*'
+  - apiGroups:
+      - ""
+    resources:
+      - serviceaccounts
+      - configmaps
+      - secrets
+      - services
+    verbs:
+      - '*'
+  - apiGroups:
+      - apps
+    resources:
+      - deployments
+      - daemonsets
+    verbs:
+      - '*'
+  - apiGroups:
+      - monitoring.coreos.com
+    resources:
+      - servicemonitors
+    verbs:
+      - '*'
diff --git a/manifests/cilium.v1.14.4/cluster-network-06-cilium-00006-leader-election-rolebinding.yaml b/manifests/cilium.v1.14.4/cluster-network-06-cilium-00006-leader-election-rolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: leader-election
+  namespace: cilium
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: leader-election
+subjects:
+  - kind: ServiceAccount
+    name: cilium-olm
+    namespace: cilium
diff --git a/manifests/cilium.v1.14.4/cluster-network-06-cilium-00007-cilium-olm-rolebinding.yaml b/manifests/cilium.v1.14.4/cluster-network-06-cilium-00007-cilium-olm-rolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: cilium-olm
+  namespace: cilium
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: cilium-olm
+subjects:
+  - kind: ServiceAccount
+    name: cilium-olm
+    namespace: cilium
diff --git a/manifests/cilium.v1.14.4/cluster-network-06-cilium-00008-cilium-cilium-olm-clusterrole.yaml b/manifests/cilium.v1.14.4/cluster-network-06-cilium-00008-cilium-cilium-olm-clusterrole.yaml
@@ -0,0 +1,35 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: cilium-cilium-olm
+rules:
+  - apiGroups:
+      - security.openshift.io
+    resourceNames:
+      - hostnetwork
+    resources:
+      - securitycontextconstraints
+    verbs:
+      - use
+  - apiGroups:
+      - rbac.authorization.k8s.io
+    resources:
+      - roles
+      - rolebindings
+      - clusterroles
+      - clusterrolebindings
+    verbs:
+      - create
+      - get
+      - patch
+      - update
+      - delete
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - services/status
+    verbs:
+      - patch
+      - update