create update payload manifests

Dockerfile

@@ -9,3 +9,6 @@ RUN cd /go/src/github.com/openshift/service-serving-cert-signer && go build ./cm
 
 FROM centos:7
 COPY --from=0 /go/src/github.com/openshift/service-serving-cert-signer/service-serving-cert-signer /usr/bin/service-serving-cert-signer
+
+COPY manifests /manifests
+LABEL io.openshift.release.operator=true

manifests/01_serviceservingcertsigner_00_roles.yaml

@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: system:openshift:operator:service-cert-signer
+roleRef:
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  namespace: openshift-core-operators
+  name: openshift-service-cert-signer-operator

manifests/01_serviceservingcertsigner_01_namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    openshift.io/run-level: "1"
+  name: openshift-core-operators

manifests/01_serviceservingcertsigner_02_crd.yaml

@@ -0,0 +1,14 @@
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: servicecertsigneroperatorconfigs.servicecertsigner.config.openshift.io
+spec:
+  scope: Cluster
+  group: servicecertsigner.config.openshift.io
+  version: v1alpha1
+  names:
+    kind: ServiceCertSignerOperatorConfig
+    plural: servicecertsigneroperatorconfigs
+    singular: servicecertsigneroperatorconfig
+  subresources:
+    status: {}

manifests/01_serviceservingcertsigner_03_cm.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: openshift-core-operators
+  name: openshift-service-cert-signer-operator-config
+data:
+  operator-config.yaml: |
+    apiVersion: operator.openshift.io/v1alpha1
+    kind: GenericOperatorConfig

manifests/01_serviceservingcertsigner_04_deploy.yaml

@@ -0,0 +1,40 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  namespace: openshift-core-operators
+  name: openshift-service-cert-signer-operator
+  labels:
+    app: openshift-service-cert-signer-operator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: openshift-service-cert-signer-operator
+  template:
+    metadata:
+      name: openshift-service-cert-signer-operator
+      labels:
+        app: openshift-service-cert-signer-operator
+    spec:
+      serviceAccountName: openshift-service-cert-signer-operator
+      containers:
+      - name: operator
+        image: openshift/origin-service-serving-cert-signer:latest
+        imagePullPolicy: IfNotPresent
+        command: ["service-serving-cert-signer", "operator"]
+        args:
+        - "--config=/var/run/configmaps/config/operator-config.yaml"
+        - "-v=4"
+        volumeMounts:
+        - mountPath: /var/run/configmaps/config
+          name: config
+      volumes:
+      - name: serving-cert
+        secret:
+          defaultMode: 400
+          secretName: openshift-service-cert-signer-operator-serving-cert
+          optional: true
+      - name: config
+        configMap:
+          defaultMode: 440
+          name: openshift-service-cert-signer-operator-config

manifests/01_serviceservingcertsigner_05_sa.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  namespace: openshift-core-operators
+  name: openshift-service-cert-signer-operator
+  labels:
+    app: openshift-service-cert-signer-operator

manifests/01_serviceservingcertsigner_06_config.yaml

@@ -0,0 +1,11 @@
+apiVersion: servicecertsigner.config.openshift.io/v1alpha1
+kind: ServiceCertSignerOperatorConfig
+metadata:
+  name: instance
+spec:
+  managementState: Managed
+  imagePullSpec: openshift/origin-service-serving-cert-signer:latest
+  version: 3.10.0
+  logging:
+    level: 4
+  replicas: 1

manifests/image-references

@@ -0,0 +1,8 @@
+kind: ImageStream
+apiVersion: image.openshift.io/v1
+spec:
+  tags:
+  - name: service-serving-cert-signer
+    from:
+      kind: DockerImage
+      name: quay.io/openshift/origin-service-serving-cert-signer