diff --git a/cluster-scope/base/core/configmaps/kubevirt/configmap-ui-settings.yaml b/cluster-scope/base/core/configmaps/kubevirt/configmap-ui-settings.yaml new file mode 100644 index 00000000..67649252 --- /dev/null +++ b/cluster-scope/base/core/configmaps/kubevirt/configmap-ui-settings.yaml @@ -0,0 +1,16 @@ +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: kubevirt-ui-features + namespace: default +data: + autocomputeCPULimitsEnabled: "false" + autocomputeCPULimitsPreviewEnabled: "false" + automaticSubscriptionActivationKey: "" + automaticSubscriptionOrganizationId: "" + disabledGuestSystemLogsAccess: "false" + kubevirtApiserverProxy: "true" + loadBalancerEnabled: "false" + nodePortAddress: "" + nodePortEnabled: "false" diff --git a/cluster-scope/base/core/configmaps/kubevirt/configmap-user-settings.yaml b/cluster-scope/base/core/configmaps/kubevirt/configmap-user-settings.yaml new file mode 100644 index 00000000..e2e556b9 --- /dev/null +++ b/cluster-scope/base/core/configmaps/kubevirt/configmap-user-settings.yaml @@ -0,0 +1,8 @@ +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: kubevirt-user-settings + namespace: default +data: + ignored_placeholder: '' diff --git a/cluster-scope/base/core/configmaps/kubevirt/kustomization.yaml b/cluster-scope/base/core/configmaps/kubevirt/kustomization.yaml new file mode 100644 index 00000000..a96a4baf --- /dev/null +++ b/cluster-scope/base/core/configmaps/kubevirt/kustomization.yaml @@ -0,0 +1,5 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - configmap-ui-settings.yaml + - configmap-user-settings.yaml diff --git a/cluster-scope/base/rbac.authorization.k8s.io/rolebindings/kubevirt/kustomization.yaml b/cluster-scope/base/rbac.authorization.k8s.io/rolebindings/kubevirt/kustomization.yaml new file mode 100644 index 00000000..d762088c --- /dev/null +++ b/cluster-scope/base/rbac.authorization.k8s.io/rolebindings/kubevirt/kustomization.yaml @@ -0,0 +1,5 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - rolebinding-kubevirt-ui-features-reader.yaml + - rolebinding-kubevirt-user-settings-reader.yaml diff --git a/cluster-scope/base/rbac.authorization.k8s.io/rolebindings/kubevirt/rolebinding-kubevirt-ui-features-reader.yaml b/cluster-scope/base/rbac.authorization.k8s.io/rolebindings/kubevirt/rolebinding-kubevirt-ui-features-reader.yaml new file mode 100644 index 00000000..6c2ab3df --- /dev/null +++ b/cluster-scope/base/rbac.authorization.k8s.io/rolebindings/kubevirt/rolebinding-kubevirt-ui-features-reader.yaml @@ -0,0 +1,14 @@ +--- +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: kubevirt-ui-features-reader-binding + namespace: default +subjects: +- kind: Group + apiGroup: rbac.authorization.k8s.io + name: 'system:authenticated' +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: kubevirt-ui-features-reader diff --git a/cluster-scope/base/rbac.authorization.k8s.io/rolebindings/kubevirt/rolebinding-kubevirt-user-settings-reader.yaml b/cluster-scope/base/rbac.authorization.k8s.io/rolebindings/kubevirt/rolebinding-kubevirt-user-settings-reader.yaml new file mode 100644 index 00000000..f907ec7e --- /dev/null +++ b/cluster-scope/base/rbac.authorization.k8s.io/rolebindings/kubevirt/rolebinding-kubevirt-user-settings-reader.yaml @@ -0,0 +1,14 @@ +--- +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: kubevirt-user-settings-reader-binding + namespace: default +subjects: +- kind: Group + apiGroup: rbac.authorization.k8s.io + name: 'system:authenticated' +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: kubevirt-user-settings-reader diff --git a/cluster-scope/base/rbac.authorization.k8s.io/roles/kubevirt/kustomization.yaml b/cluster-scope/base/rbac.authorization.k8s.io/roles/kubevirt/kustomization.yaml new file mode 100644 index 00000000..d97bb1a0 --- /dev/null +++ b/cluster-scope/base/rbac.authorization.k8s.io/roles/kubevirt/kustomization.yaml @@ -0,0 +1,5 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - role-kubevirt-ui-features-reader.yaml + - role-kubevirt-user-settings-reader.yaml diff --git a/cluster-scope/base/rbac.authorization.k8s.io/roles/kubevirt/role-kubevirt-ui-features-reader.yaml b/cluster-scope/base/rbac.authorization.k8s.io/roles/kubevirt/role-kubevirt-ui-features-reader.yaml new file mode 100644 index 00000000..f8df3733 --- /dev/null +++ b/cluster-scope/base/rbac.authorization.k8s.io/roles/kubevirt/role-kubevirt-ui-features-reader.yaml @@ -0,0 +1,17 @@ +--- +kind: Role +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: kubevirt-ui-features-reader + namespace: default +rules: +- verbs: + - list + - get + - watch + apiGroups: + - '' + resources: + - configmaps + resourceNames: + - kubevirt-ui-features diff --git a/cluster-scope/base/rbac.authorization.k8s.io/roles/kubevirt/role-kubevirt-user-settings-reader.yaml b/cluster-scope/base/rbac.authorization.k8s.io/roles/kubevirt/role-kubevirt-user-settings-reader.yaml new file mode 100644 index 00000000..9afd232d --- /dev/null +++ b/cluster-scope/base/rbac.authorization.k8s.io/roles/kubevirt/role-kubevirt-user-settings-reader.yaml @@ -0,0 +1,18 @@ +--- +kind: Role +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: kubevirt-user-settings-reader + namespace: default +rules: +- verbs: + - list + - get + - update + - patch + apiGroups: + - '' + resources: + - configmaps + resourceNames: + - kubevirt-user-settings diff --git a/cluster-scope/bundles/virt/kustomization.yaml b/cluster-scope/bundles/virt/kustomization.yaml index c9eef568..131617a1 100644 --- a/cluster-scope/bundles/virt/kustomization.yaml +++ b/cluster-scope/bundles/virt/kustomization.yaml @@ -6,3 +6,6 @@ resources: - ../../base/core/namespaces/openshift-cnv - ../../base/operators.coreos.com/operatorgroups/kubevirt-hyperconverged-group - ../../base/operators.coreos.com/subscriptions/hco-operatorhub + - ../../base/core/configmaps/kubevirt + - ../../base/rbac.authorization.k8s.io/roles/kubevirt + - ../../base/rbac.authorization.k8s.io/rolebindings/kubevirt