WIP: Initial Operator Implementation

.github/dependabot.yml

@@ -0,0 +1,29 @@
+# =============
+# This file is automatically generated from the templates in stackabletech/operator-templating
+# DON'T MANUALLY EDIT THIS FILE
+# =============
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "type/dependencies"
+    reviewers:
+      - "stackabletech/developers"
+
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "type/dependencies"
+    reviewers:
+      - "stackabletech/rust-developers"
+    ignore:
+      # We never want to be notified about a kube-rs update.
+      # It often contains breaking changes so it has to be updated manually anyway
+      # and it needs to be updated together with kube-runtime, kube-derive etc.
+      - dependency-name: "kube*"
+      - dependency-name: "k8s-openapi"

.github/pull_request_template.md

@@ -0,0 +1,8 @@
+## Description
+
+## Review Checklist
+- [ ] Code contains useful comments
+- [ ] (Integration-)Test cases added (or not applicable)
+- [ ] Documentation added (or not applicable)
+- [ ] Changelog updated (or not applicable)
+- [ ] Cargo.toml only contains references to git tags (not specific commits or branches)

.github/workflows/daily_security.yml

@@ -0,0 +1,19 @@
+# =============
+# This file is automatically generated from the templates in stackabletech/operator-templating
+# DON'T MANUALLY EDIT THIS FILE
+# =============
+name: Security audit
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/[email protected]
+      - uses: actions-rs/[email protected]
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/docker.yml

@@ -0,0 +1,21 @@
+# =============
+# This file is automatically generated from the templates in stackabletech/operator-templating
+# DON'T MANUALLY EDIT THIS FILE
+# =============
+name: Docker
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    name: Build Docker image
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/[email protected]
+      - shell: bash
+        env:
+          NEXUS_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
+        run: make docker

.github/workflows/rust.yml

@@ -0,0 +1,117 @@
+# =============
+# This file is automatically generated from the templates in stackabletech/operator-templating
+# DON'T MANUALLY EDIT THIS FILE
+# =============
+name: Rust
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+env:
+  CARGO_TERM_COLOR: always
+  CARGO_INCREMENTAL: '0'
+  CARGO_PROFILE_DEV_DEBUG: '0'
+  RUSTFLAGS: "-D warnings -W rust-2021-compatibility"
+
+jobs:
+
+  test:
+    name: Run tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/[email protected]
+      - uses: actions-rs/[email protected]
+        with:
+          profile: minimal
+          toolchain: stable
+          override: true
+      - uses: Swatinem/[email protected]
+      - uses: actions-rs/[email protected]
+        with:
+          command: test
+      - uses: actions-rs/[email protected]
+        with:
+          command: clean
+
+  rustfmt:
+    name: Run rustfmt
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/[email protected]
+      - uses: actions-rs/[email protected]
+        with:
+          profile: minimal
+          toolchain: stable
+          components: rustfmt
+          override: true
+      - uses: actions-rs/[email protected]
+        with:
+          command: fmt
+          args: --all -- --check
+
+  doc:
+    name: Run rustdoc
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/[email protected]
+      - uses: actions-rs/[email protected]
+        with:
+          profile: minimal
+          toolchain: stable
+          components: rustfmt
+          override: true
+      - uses: Swatinem/[email protected]
+      - uses: actions-rs/[email protected]
+        with:
+          command: doc
+          args: --document-private-items
+
+  clippy:
+    name: Run clippy
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/[email protected]
+      - uses: actions-rs/[email protected]
+        with:
+            profile: minimal
+            toolchain: stable
+            components: clippy
+            override: true
+      # We need this due to: https://github.com/actions-rs/clippy-check/issues/2
+      - name: Check workflow permissions
+        id: check_permissions
+        uses: scherermichael-oss/[email protected]
+        with:
+          required-permission: write
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Run clippy action to produce annotations
+        uses: actions-rs/clippy-check@v1
+        if: steps.check_permissions.outputs.has-permission
+        with:
+          args: --all-targets -- -D warnings
+          token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Run clippy manually without annotations
+        if: ${{ !steps.check_permissions.outputs.has-permission }}
+        run: cargo clippy --all-targets -- -D warnings
+
+  cargo-deny:
+    name: Run cargo deny
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        checks:
+          - advisories
+          - bans licenses sources
+
+    # Prevent sudden announcement of a new advisory from failing ci:
+    continue-on-error: ${{ matrix.checks == 'advisories' }}
+
+    steps:
+      - uses: actions/[email protected]
+      - uses: EmbarkStudios/[email protected]
+        with:
+          command: check ${{ matrix.checks }}

.gitignore

@@ -0,0 +1,4 @@
+target/
+.idea/
+*.iml
+