tectonic manifests

cmd/openshift-install/main.go

@@ -37,6 +37,7 @@ func main() {
 	case manifestsCommand.FullCommand():
 		targetAssets = []asset.Asset{
 			assetStock.Manifests(),
+			assetStock.Tectonic(),
 		}
 	}
 

pkg/asset/ignition/BUILD.bazel

@@ -17,6 +17,7 @@ go_library(
         "//pkg/asset/ignition/content:go_default_library",
         "//pkg/asset/installconfig:go_default_library",
         "//pkg/asset/kubeconfig:go_default_library",
+        "//pkg/asset/manifests:go_default_library",
         "//pkg/asset/tls:go_default_library",
         "//pkg/types:go_default_library",
         "//vendor/github.com/coreos/ignition/config/util:go_default_library",
@@ -28,7 +29,6 @@ go_library(
 go_test(
     name = "go_default_test",
     srcs = [
-        "bootstrap_test.go",
         "master_test.go",
         "testasset_test.go",
         "testutils_test.go",
@@ -37,7 +37,6 @@ go_test(
     embed = [":go_default_library"],
     deps = [
         "//pkg/asset:go_default_library",
-        "//pkg/asset/ignition/content:go_default_library",
         "//vendor/github.com/stretchr/testify/assert:go_default_library",
         "//vendor/github.com/vincent-petithory/dataurl:go_default_library",
     ],

pkg/asset/manifests/BUILD.bazel

@@ -9,6 +9,7 @@ go_library(
         "network-operator.go",
         "operators.go",
         "stock.go",
+        "tectonic.go",
         "template.go",
         "utils.go",
     ],
@@ -18,7 +19,14 @@ go_library(
         "//pkg/asset:go_default_library",
         "//pkg/asset/installconfig:go_default_library",
         "//pkg/asset/kubeconfig:go_default_library",
-        "//pkg/asset/manifests/content:go_default_library",
+        "//pkg/asset/manifests/content/bootkube:go_default_library",
+        "//pkg/asset/manifests/content/tectonic/ingress:go_default_library",
+        "//pkg/asset/manifests/content/tectonic/rbac:go_default_library",
+        "//pkg/asset/manifests/content/tectonic/secrets:go_default_library",
+        "//pkg/asset/manifests/content/tectonic/security:go_default_library",
+        "//pkg/asset/manifests/content/tectonic/updater:go_default_library",
+        "//pkg/asset/manifests/content/tectonic/updater/appversions:go_default_library",
+        "//pkg/asset/manifests/content/tectonic/updater/operators:go_default_library",
         "//pkg/asset/tls:go_default_library",
         "//pkg/rhcos:go_default_library",
         "//pkg/types:go_default_library",

pkg/asset/manifests/content/01-tectonic-namespace.go → pkg/asset/manifests/content/bootkube/01-tectonic-namespace.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// TectonicNamespace is the constant to represent contents of Tectonic_Namespace.yaml file

pkg/asset/manifests/content/02-ingress-namespace.go → pkg/asset/manifests/content/bootkube/02-ingress-namespace.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// IngressNamespace is the constant to represent contents of Ingress_Namespace.yaml file

pkg/asset/manifests/content/03-openshift-web-console-namespace.go → pkg/asset/manifests/content/bootkube/03-openshift-web-console-namespace.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// OpenshiftWebConsoleNamespace is the constant to represent contents of Openshift_WebConsoleNamespace.yaml file

pkg/asset/manifests/content/04-openshift-machine-config-operator.go → pkg/asset/manifests/content/bootkube/04-openshift-machine-config-operator.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// OpenshiftMachineConfigOperator is the constant to represent contents of Openshift_MachineConfigOperator.yaml file

pkg/asset/manifests/content/05-openshift-cluster-api-namespace.go → pkg/asset/manifests/content/bootkube/05-openshift-cluster-api-namespace.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// OpenshiftClusterAPINamespace is the constant to represent contents of Openshift_ClusterApiNamespace.yaml file

pkg/asset/manifests/content/BUILD.bazel → pkg/asset/manifests/content/bootkube/BUILD.bazel

@@ -27,6 +27,6 @@ go_library(
         "pull.go",
         "tectonic-network-operator.go",
     ],
-    importpath = "github.com/openshift/installer/pkg/asset/manifests/content",
+    importpath = "github.com/openshift/installer/pkg/asset/manifests/content/bootkube",
     visibility = ["//visibility:public"],
 )

pkg/asset/manifests/content/app-version-kind.go → pkg/asset/manifests/content/bootkube/app-version-kind.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// AppVersionKind is the constant to represent contents of App_VersionKind.yaml file

pkg/asset/manifests/content/app-version-mao.go → pkg/asset/manifests/content/bootkube/app-version-mao.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// AppVersionMao is the constant to represent contents of App_VersionMao.yaml file

pkg/asset/manifests/content/app-version-tectonic-network.go → pkg/asset/manifests/content/bootkube/app-version-tectonic-network.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// AppVersionTectonicNetwork is the constant to represent contents of App_VersionTectonicNetwork.yaml file

pkg/asset/manifests/content/cluster-apiserver-certs.go → pkg/asset/manifests/content/bootkube/cluster-apiserver-certs.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/ign-config.go → pkg/asset/manifests/content/bootkube/ign-config.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/kube-apiserver-secret.go → pkg/asset/manifests/content/bootkube/kube-apiserver-secret.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/kube-cloud-config.go → pkg/asset/manifests/content/bootkube/kube-cloud-config.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/kube-controller-manager-secret.go → pkg/asset/manifests/content/bootkube/kube-controller-manager-secret.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/machine-api-operator.go → pkg/asset/manifests/content/bootkube/machine-api-operator.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// MachineAPIOperator is the constant to represent contents of Machine_Api_Operator.yaml file

pkg/asset/manifests/content/machine-config-operator-00-config-crd.go → pkg/asset/manifests/content/bootkube/machine-config-operator-00-config-crd.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// MachineConfigOperator00ConfigCrd is the constant to represent contents of Machine_ConfigOperator00ConfigCrd.yaml file

pkg/asset/manifests/content/machine-config-operator-01-images-configmap.go → pkg/asset/manifests/content/bootkube/machine-config-operator-01-images-configmap.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// MachineConfigOperator01ImagesConfigmap is the constant to represent contents of Machine_ConfigOperator01ImagesConfigmap.yaml file

pkg/asset/manifests/content/machine-config-operator-02-rbac.go → pkg/asset/manifests/content/bootkube/machine-config-operator-02-rbac.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// MachineConfigOperator02Rbac is the constant to represent contents of manifest file machine-config-operator-02-rbac.yaml

pkg/asset/manifests/content/machine-config-operator-03-deployment.go → pkg/asset/manifests/content/bootkube/machine-config-operator-03-deployment.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/machine-config-server-tls-secret.go → pkg/asset/manifests/content/bootkube/machine-config-server-tls-secret.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/openshift-apiserver-secret.go → pkg/asset/manifests/content/bootkube/openshift-apiserver-secret.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/operatorstatus-crd.go → pkg/asset/manifests/content/bootkube/operatorstatus-crd.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 const (
 	// OperatorstatusCrd is the constant to represent contents of Operatorstatus_Crd.yaml file

pkg/asset/manifests/content/pull.go → pkg/asset/manifests/content/bootkube/pull.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/tectonic-network-operator.go → pkg/asset/manifests/content/bootkube/tectonic-network-operator.go

@@ -1,4 +1,4 @@
-package content
+package bootkube
 
 import (
 	"text/template"

pkg/asset/manifests/content/tectonic/ingress/BUILD.bazel

@@ -0,0 +1,12 @@
+load("@io_bazel_rules_go//go:def.bzl", "go_library")
+
+go_library(
+    name = "go_default_library",
+    srcs = [
+        "cluster-config.go",
+        "pull.go",
+        "svc-account.go",
+    ],
+    importpath = "github.com/openshift/installer/pkg/asset/manifests/content/tectonic/ingress",
+    visibility = ["//visibility:public"],
+)

pkg/asset/manifests/content/tectonic/ingress/cluster-config.go

@@ -0,0 +1,23 @@
+package ingress
+
+import (
+	"text/template"
+)
+
+var (
+	// ClusterConfig  is the variable/constant representing the contents of the respective file
+	ClusterConfig = template.Must(template.New("cluster-config.yaml").Parse(`
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: cluster-config-v1
+  namespace: openshift-ingress
+data:
+  ingress-config: |
+    apiVersion: v1
+    kind: TectonicIngressOperatorConfig
+    type: {{.IngressKind}}
+    statsPassword: {{.IngressStatusPassword}}
+    statsUsername: admin
+`))
+)

pkg/asset/manifests/content/tectonic/ingress/pull.go

@@ -0,0 +1,23 @@
+package ingress
+
+import (
+	"text/template"
+)
+
+var (
+	// Pull  is the variable/constant representing the contents of the respective file
+	Pull = template.Must(template.New("pull.json").Parse(`
+{
+  "apiVersion": "v1",
+  "kind": "Secret",
+  "type": "kubernetes.io/dockerconfigjson",
+  "metadata": {
+    "namespace": "openshift-ingress",
+    "name": "coreos-pull-secret"
+  },
+  "data": {
+    ".dockerconfigjson": "{{.PullSecret}}"
+  }
+}
+`))
+)

pkg/asset/manifests/content/tectonic/ingress/svc-account.go

@@ -0,0 +1,12 @@
+package ingress
+
+const (
+	// SvcAccount  is the variable/constant representing the contents of the respective file
+	SvcAccount = `
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: tectonic-ingress-controller-operator
+  namespace: openshift-ingress
+`
+)

pkg/asset/manifests/content/tectonic/rbac/BUILD.bazel

@@ -0,0 +1,13 @@
+load("@io_bazel_rules_go//go:def.bzl", "go_library")
+
+go_library(
+    name = "go_default_library",
+    srcs = [
+        "binding-admin.go",
+        "binding-discovery.go",
+        "role-admin.go",
+        "role-user.go",
+    ],
+    importpath = "github.com/openshift/installer/pkg/asset/manifests/content/tectonic/rbac",
+    visibility = ["//visibility:public"],
+)

pkg/asset/manifests/content/tectonic/rbac/binding-admin.go

@@ -0,0 +1,22 @@
+package rbac
+
+const (
+	// BindingAdmin  is the variable/constant representing the contents of the respective file
+	BindingAdmin = `
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: admin-user
+subjects:
+  - kind: ServiceAccount
+    namespace: tectonic-system
+    name: default
+  - kind: ServiceAccount
+    namespace: openshift-ingress
+    name: tectonic-ingress-controller-operator
+roleRef:
+  kind: ClusterRole
+  name: cluster-admin
+  apiGroup: rbac.authorization.k8s.io
+`
+)

pkg/asset/manifests/content/tectonic/rbac/binding-discovery.go

@@ -0,0 +1,20 @@
+package rbac
+
+const (
+	// BindingDiscovery  is the variable/constant representing the contents of the respective file
+	BindingDiscovery = `
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: discovery
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:discovery
+subjects:
+- kind: Group
+  name: 'system:unauthenticated'
+- kind: Group
+  name: 'system:authenticated'
+`
+)

pkg/asset/manifests/content/tectonic/rbac/role-admin.go

@@ -0,0 +1,17 @@
+package rbac
+
+const (
+	// RoleAdmin  is the variable/constant representing the contents of the respective file
+	RoleAdmin = `
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: admin
+rules:
+  - apiGroups: ["*"]
+    resources: ["*"]
+    verbs: ["*"]
+  - nonResourceURLs: ["*"]
+    verbs: ["*"]
+`
+)