feat: expiration date in resource annotations

[parametalol]

Description

Add expired-at annotation to the namespace, central CR and central CR customization.

Checklist (Definition of Done)

• Unit and integration tests added
• Added test description under Test manual
• Documentation added if necessary (i.e. changes to dev setup, test execution, ...)
• CI and all relevant tests are passing
• Add the ticket number to the PR title if available, i.e. ROX-12345: ...
• Discussed security and business related topics privately. Will move any security and business related topics that arise to private communication channel.
• Add secret to app-interface Vault or Secrets Manager if necessary
• RDS changes were e2e tested manually
• Check AWS limits are reasonable for changes provisioning new resources

Test manual

Namespace annotation

kind: Namespace
metadata:
  annotations:
    rhacs.redhat.com/expired-at: "2024-02-05T12:01:20Z"
    rhacs.redhat.com/org-name: stubbed-name
  creationTimestamp: "2024-02-05T13:43:01Z"
  labels:
    kubernetes.io/metadata.name: rhacs-cn0cp84dvq3t6k6t1sng
    rhacs.redhat.com/org-id: "11009103"
    rhacs.redhat.com/tenant: cn0cp84dvq3t6k6t1sng
  name: rhacs-cn0cp84dvq3t6k6t1sng

Central CR annotation and custom annotation

apiVersion: platform.stackrox.io/v1alpha1
kind: Central
metadata:
  annotations:
    platform.stackrox.io/managed-services: "true"
    rhacs.redhat.com/expired-at: "2024-04-08T00:00:00Z"
    rhacs.redhat.com/org-name: stubbed-name
    rhacs.redhat.com/revision: "11"
  creationTimestamp: "2024-02-05T13:43:01Z"
...
spec:
  central:
    ...
  customize:
    annotations:
      rhacs.redhat.com/cluster-name: ""
      rhacs.redhat.com/environment: ""
      rhacs.redhat.com/expired-at: "2024-04-08T00:00:00Z"
      rhacs.redhat.com/org-name: stubbed-name

Central pod

apiVersion: v1
kind: Pod
metadata:
  annotations:
    email: [email protected]
    meta.helm.sh/release-name: test-eval-1
    meta.helm.sh/release-namespace: rhacs-cn0cp84dvq3t6k6t1sng
    owner: stackrox
    rhacs.redhat.com/cluster-name: ""
    rhacs.redhat.com/environment: ""
    rhacs.redhat.com/expired-at: "2024-04-08T00:00:00Z"
    rhacs.redhat.com/org-name: stubbed-name
    traffic.sidecar.istio.io/excludeInboundPorts: "8443"
  creationTimestamp: "2024-02-05T19:54:47Z"

[stehessel]

In general I think this could have been split into two PRs:

• Propagating expired-at to the namespace/pod labels.
• Reporting status changes in telemetry.

[stehessel]

Can you add the new annotations to the unit tests in reconciler_test.go?

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: 0x656b694d, stehessel
Once this PR has been reviewed and has the lgtm label, please assign vladbologa for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment