diff --git a/operators/stolostron-engine/0.2.2/manifests/multicluster-engine-operator-config_v1_configmap.yaml b/operators/stolostron-engine/0.2.2/manifests/multicluster-engine-operator-config_v1_configmap.yaml new file mode 100644 index 00000000000..6d9fcf68590 --- /dev/null +++ b/operators/stolostron-engine/0.2.2/manifests/multicluster-engine-operator-config_v1_configmap.yaml @@ -0,0 +1,17 @@ +apiVersion: v1 +data: + controller_manager_config.yaml: | + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + kind: ControllerManagerConfig + health: + healthProbeBindAddress: :8081 + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 + leaderElection: + leaderElect: true + resourceName: 797f9276.open-cluster-management.io +kind: ConfigMap +metadata: + name: multicluster-engine-operator-config diff --git a/operators/stolostron-engine/0.2.2/manifests/multicluster-engine-operator-webhook-service_v1_service.yaml b/operators/stolostron-engine/0.2.2/manifests/multicluster-engine-operator-webhook-service_v1_service.yaml new file mode 100644 index 00000000000..913daa30158 --- /dev/null +++ b/operators/stolostron-engine/0.2.2/manifests/multicluster-engine-operator-webhook-service_v1_service.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Service +metadata: + annotations: + service.beta.openshift.io/serving-cert-secret-name: multicluster-engine-operator-webhook + creationTimestamp: null + name: multicluster-engine-operator-webhook-service +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + control-plane: backplane-operator +status: + loadBalancer: {} diff --git a/operators/stolostron-engine/0.2.2/manifests/multicluster.openshift.io_multiclusterengines.yaml b/operators/stolostron-engine/0.2.2/manifests/multicluster.openshift.io_multiclusterengines.yaml new file mode 100644 index 00000000000..a46961c9594 --- /dev/null +++ b/operators/stolostron-engine/0.2.2/manifests/multicluster.openshift.io_multiclusterengines.yaml @@ -0,0 +1,217 @@ +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.10.0 + creationTimestamp: null + name: multiclusterengines.multicluster.openshift.io +spec: + group: multicluster.openshift.io + names: + kind: MultiClusterEngine + listKind: MultiClusterEngineList + plural: multiclusterengines + shortNames: + - mce + singular: multiclusterengine + scope: Cluster + versions: + - additionalPrinterColumns: + - description: The overall state of the MultiClusterEngine + jsonPath: .status.phase + name: Status + type: string + - jsonPath: .metadata.creationTimestamp + name: Age + type: date + name: v1 + schema: + openAPIV3Schema: + description: MultiClusterEngine is the Schema for the multiclusterengines + API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: MultiClusterEngineSpec defines the desired state of MultiClusterEngine + properties: + availabilityConfig: + description: 'Specifies deployment replication for improved availability. + Options are: Basic and High (default)' + type: string + imagePullSecret: + description: Override pull secret for accessing MultiClusterEngine + operand and endpoint images + type: string + nodeSelector: + additionalProperties: + type: string + description: Set the nodeselectors + type: object + overrides: + description: Developer Overrides + properties: + components: + description: Provides optional configuration for components + items: + description: ComponentConfig provides optional configuration + items for individual components + properties: + enabled: + type: boolean + name: + type: string + required: + - enabled + - name + type: object + type: array + imagePullPolicy: + description: Pull policy for the MCE images + type: string + infrastructureCustomNamespace: + description: Namespace to install Assisted Installer operator + type: string + type: object + targetNamespace: + description: Location where MCE resources will be placed + type: string + tolerations: + description: Tolerations causes all components to tolerate any taints. + items: + description: The pod this Toleration is attached to tolerates any + taint that matches the triple using the matching + operator . + properties: + effect: + description: Effect indicates the taint effect to match. Empty + means match all taint effects. When specified, allowed values + are NoSchedule, PreferNoSchedule and NoExecute. + type: string + key: + description: Key is the taint key that the toleration applies + to. Empty means match all taint keys. If the key is empty, + operator must be Exists; this combination means to match all + values and all keys. + type: string + operator: + description: Operator represents a key's relationship to the + value. Valid operators are Exists and Equal. Defaults to Equal. + Exists is equivalent to wildcard for value, so that a pod + can tolerate all taints of a particular category. + type: string + tolerationSeconds: + description: TolerationSeconds represents the period of time + the toleration (which must be of effect NoExecute, otherwise + this field is ignored) tolerates the taint. By default, it + is not set, which means tolerate the taint forever (do not + evict). Zero and negative values will be treated as 0 (evict + immediately) by the system. + format: int64 + type: integer + value: + description: Value is the taint value the toleration matches + to. If the operator is Exists, the value should be empty, + otherwise just a regular string. + type: string + type: object + type: array + type: object + status: + description: MultiClusterEngineStatus defines the observed state of MultiClusterEngine + properties: + components: + items: + description: ComponentCondition contains condition information for + tracked components + properties: + kind: + description: The resource kind this condition represents + type: string + lastTransitionTime: + description: LastTransitionTime is the last time the condition + changed from one status to another. + format: date-time + type: string + message: + description: Message is a human-readable message indicating + details about the last status change. + type: string + name: + description: The component name + type: string + reason: + description: Reason is a (brief) reason for the condition's + last status change. + type: string + status: + description: Status is the status of the condition. One of True, + False, Unknown. + type: string + type: + description: Type is the type of the cluster condition. + type: string + type: object + type: array + conditions: + items: + properties: + lastTransitionTime: + description: LastTransitionTime is the last time the condition + changed from one status to another. + format: date-time + type: string + lastUpdateTime: + description: The last time this condition was updated. + format: date-time + type: string + message: + description: Message is a human-readable message indicating + details about the last status change. + type: string + reason: + description: Reason is a (brief) reason for the condition's + last status change. + type: string + status: + description: Status is the status of the condition. One of True, + False, Unknown. + type: string + type: + description: Type is the type of the cluster condition. + type: string + type: object + type: array + currentVersion: + description: CurrentVersion is the most recent version successfully + installed + type: string + desiredVersion: + description: DesiredVersion is the version the operator is reconciling + towards + type: string + phase: + description: Latest observed overall state + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: null + storedVersions: null diff --git a/operators/stolostron-engine/0.2.2/manifests/stolostron-engine.v0.2.2.clusterserviceversion.yaml b/operators/stolostron-engine/0.2.2/manifests/stolostron-engine.v0.2.2.clusterserviceversion.yaml new file mode 100644 index 00000000000..7b03ec8a0f0 --- /dev/null +++ b/operators/stolostron-engine/0.2.2/manifests/stolostron-engine.v0.2.2.clusterserviceversion.yaml @@ -0,0 +1,2710 @@ +apiVersion: operators.coreos.com/v1alpha1 +kind: ClusterServiceVersion +metadata: + annotations: + alm-examples: '[{"apiVersion": "multicluster.openshift.io/v1", "kind": "MultiClusterEngine", "metadata": + {"name": "multiclusterengine"}, "spec": {}}]' + capabilities: Seamless Upgrades + categories: Integration & Delivery + certified: 'false' + createdAt: '2023-10-18T17:45:27Z' + description: Foundational components for central management of multiple OpenShift Container Platform + and Kubernetes clusters + operatorframework.io/suggested-namespace: stolostron-engine + operatorframework.io/initialization-resource: '{"apiVersion":"multicluster.openshift.io/v1", "kind":"MultiClusterEngine","metadata":{"name":"engine"},"spec": + {}}' + operators.openshift.io/infrastructure-features: '["disconnected", "proxy-aware", "fips"]' + repository: https://github.com/stolostron/stolostron + operators.operatorframework.io/internal-objects: '[]' + olm.skipRange: '>=0.2.0 <0.2.2' + containerImage: quay.io/stolostron/backplane-operator@sha256:aad47f3ecf4da5b4e480a4b1115e33d5e25a88dddb7904c4d301e70bedbdb72e + name: stolostron-engine.v0.2.2 + namespace: placeholder + labels: + operatorframework.io/arch.amd64: supported + operatorframework.io/os.linux: supported +spec: + displayName: Stolostron Engine + version: 0.2.2 + provider: + name: Red Hat + maintainers: + - email: acm-contact@redhat.com + name: Red Hat + maturity: pre-release + description: 'Stolostron Engine provides the foundational components that are necessary for the centralized + management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. + You can use the engine to create Red Hat OpenShift Container Platform clusters on selected providers, + or import existing Kubernetes-based clusters. After the clusters are managed, you can use the APIs + that are provided by the engine to distribute configuration based on placement policy. Placement policy + is a significant part of creating sophisticated multicluster management applications because you can + select the applicable clusters. ' + icon: + - base64data: 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 + mediatype: image/svg+xml + keywords: + - multiclusterengine + labels: + app: stolostron-engine + links: + - name: Documentation + url: https://github.com/stolostron/stolostron + selector: + matchLabels: + app: stolostron-engine + installModes: + - supported: true + type: OwnNamespace + - supported: false + type: SingleNamespace + - supported: false + type: MultiNamespace + - supported: false + type: AllNamespaces + customresourcedefinitions: + owned: + - description: MultiClusterEngine is the Schema for the multiclusterengines API + displayName: MultiCluster Engine + kind: MultiClusterEngine + name: multiclusterengines.multicluster.openshift.io + specDescriptors: + - description: 'Specifies deployment replication for improved availability. Options are: Basic and + High (default)' + displayName: Availability Configuration + path: availabilityConfig + x-descriptors: + - urn:alm:descriptor:com.tectonic.ui:advanced + - urn:alm:descriptor:com.tectonic.ui:select:High + - urn:alm:descriptor:com.tectonic.ui:select:Basic + - description: Override pull secret for accessing MultiClusterEngine operand and endpoint images + displayName: Image Pull Secret + path: imagePullSecret + x-descriptors: + - urn:alm:descriptor:io.kubernetes:Secret + - urn:alm:descriptor:com.tectonic.ui:advanced + - description: Developer Overrides + displayName: Developer Overrides + path: overrides + x-descriptors: + - urn:alm:descriptor:com.tectonic.ui:hidden + - description: Provides optional configuration for components + displayName: Component Configuration + path: overrides.components + x-descriptors: + - urn:alm:descriptor:com.tectonic.ui:hidden + - description: Namespace to install Assisted Installer operator + displayName: Custom Infrastructure Operator Namespace + path: overrides.infrastructureCustomNamespace + x-descriptors: + - urn:alm:descriptor:com.tectonic.ui:hidden + - description: Location where MCE resources will be placed + displayName: Target Namespace + path: targetNamespace + x-descriptors: + - urn:alm:descriptor:io.kubernetes:text + - urn:alm:descriptor:com.tectonic.ui:advanced + version: v1 + install: + strategy: deployment + spec: + clusterPermissions: + - rules: + - apiGroups: + - '' + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - configmaps + - configmaps/status + - namespaces + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - configmaps + - endpoints + - events + - namespaces + - persistentvolumeclaims + - secrets + - secrets/finalizers + - serviceaccounts + - serviceaccounts/finalizers + - services + - services/finalizers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - configmaps + - events + - namespaces + - secrets + - serviceaccounts + - services + - services/finalizers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - configmaps + - events + - secrets + - services + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - configmaps + - jobs + - namespaces + - pods + - secrets + verbs: + - list + - watch + - apiGroups: + - '' + resources: + - configmaps + - namespaces + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - configmaps + - secrets + verbs: + - '*' + - apiGroups: + - '' + resources: + - configmaps + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - configmaps/status + verbs: + - get + - patch + - update + - apiGroups: + - '' + resources: + - endpoints + - nodes + verbs: + - get + - list + - watch + - apiGroups: + - '' + resources: + - endpoints + - nodes + - pods + - secrets + - services + verbs: + - get + - list + - watch + - apiGroups: + - '' + resources: + - endpoints + - pods + - services + verbs: + - get + - list + - watch + - apiGroups: + - '' + resources: + - events + verbs: + - create + - patch + - apiGroups: + - '' + resources: + - events + - serviceaccounts + - services + verbs: + - '*' + - apiGroups: + - '' + resources: + - namespaces + verbs: + - create + - delete + - get + - list + - watch + - apiGroups: + - '' + resources: + - namespaces + - pods + - pods/portforward + - secrets + verbs: + - '*' + - apiGroups: + - '' + resources: + - namespaces + - secrets + verbs: + - delete + - get + - list + - watch + - apiGroups: + - '' + resources: + - nodes + verbs: + - get + - list + - watch + - apiGroups: + - '' + resources: + - nodes + - pods + verbs: + - get + - list + - watch + - apiGroups: + - '' + resources: + - persistentvolumeclaims + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - pods + verbs: + - list + - apiGroups: + - '' + resources: + - pods + - pods/log + verbs: + - get + - list + - watch + - apiGroups: + - '' + resources: + - secrets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - serviceaccounts + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + resources: + - serviceaccounts + - services + verbs: + - get + - list + - watch + - apiGroups: + - '' + resources: + - serviceaccounts/token + verbs: + - create + - apiGroups: + - '' + resources: + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + - apiextensions.k8s.io + - apps + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - customresourcedefinitions + - deployments + - serviceaccounts + verbs: + - create + - get + - list + - update + - apiGroups: + - '' + - batch + - hive.openshift.io + - tower.ansible.com + resources: + - ansiblejobs + - clusterdeployments + - jobs + - machinepools + - serviceaccounts + verbs: + - get + - apiGroups: + - '' + - batch + - tower.ansible.com + resources: + - ansiblejobs + - clusterdeployments + - jobs + - machinepools + - serviceaccounts + verbs: + - get + - apiGroups: + - '' + - batch + - tower.ansible.com + resources: + - ansiblejobs + - jobs + - secrets + - serviceaccounts + verbs: + - create + - apiGroups: + - '' + - coordination.k8s.io + resources: + - configmaps + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + - events.k8s.io + resources: + - configmaps + - endpoints + - events + - namespaces + - secrets + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + - events.k8s.io + resources: + - events + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - '' + - internal.open-cluster-management.io + resources: + - managedclusterinfos + - pods + - secrets + verbs: + - get + - apiGroups: + - '' + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - namespaces + - rolebindings + - roles + verbs: + - create + - get + - apiGroups: + - action.open-cluster-management.io + resources: + - managedclusteractions + verbs: + - create + - delete + - get + - list + - update + - watch + - apiGroups: + - action.open-cluster-management.io + resources: + - managedclusteractions + - managedclusteractions/status + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - action.open-cluster-management.io + resources: + - managedclusteractions/status + verbs: + - patch + - update + - apiGroups: + - addon.open-cluster-management.io + resources: + - addondeploymentconfigs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - addon.open-cluster-management.io + resources: + - addondeploymentconfigs + - addontemplates + verbs: + - get + - list + - watch + - apiGroups: + - addon.open-cluster-management.io + resources: + - addontemplates + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - addon.open-cluster-management.io + resources: + - clustermanagementaddons + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - addon.open-cluster-management.io + resources: + - clustermanagementaddons + - clustermanagementaddons/finalizers + - clustermanagementaddons/status + - managedclusteraddons + - managedclusteraddons/status + verbs: + - '*' + - apiGroups: + - addon.open-cluster-management.io + resources: + - clustermanagementaddons + - clustermanagementaddons/finalizers + - managedclusteraddons + - managedclusteraddons/finalizers + - managedclusteraddons/status + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - addon.open-cluster-management.io + resources: + - clustermanagementaddons + - managedclusteraddons + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - addon.open-cluster-management.io + resources: + - clustermanagementaddons/finalizers + verbs: + - update + - apiGroups: + - addon.open-cluster-management.io + resources: + - clustermanagementaddons/finalizers + - managedclusteraddons/finalizers + verbs: + - update + - apiGroups: + - addon.open-cluster-management.io + resources: + - clustermanagementaddons/status + - managedclusteraddons/status + verbs: + - patch + - update + - apiGroups: + - addon.open-cluster-management.io + resources: + - managedclusteraddons + verbs: + - create + - delete + - get + - list + - update + - watch + - apiGroups: + - addon.open-cluster-management.io + resources: + - managedclusteraddons + - managedclusteraddons/finalizers + verbs: + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - addon.open-cluster-management.io + resources: + - managedclusteraddons/finalizers + verbs: + - '*' + - update + - apiGroups: + - addon.open-cluster-management.io + resources: + - managedclusteraddons/status + verbs: + - patch + - update + - apiGroups: + - admission.hive.openshift.io + resources: + - clusterdeployments + - clusterimagesets + - clusterprovisions + - dnszones + - machinepools + - selectorsyncsets + - syncsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - admission.hive.openshift.io + resources: + - dnszones + verbs: + - get + - list + - watch + - apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + - validatingwebhookconfigurations + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - admissionregistration.k8s.io + resources: + - validatingwebhookconfigurations + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - agent-install.openshift.io + resources: + - agentclassifications + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - agent-install.openshift.io + resources: + - agentclassifications/finalizers + verbs: + - update + - apiGroups: + - agent-install.openshift.io + resources: + - agentclassifications/status + verbs: + - get + - patch + - update + - apiGroups: + - agent-install.openshift.io + resources: + - agents + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - agent-install.openshift.io + resources: + - agents + - agentserviceconfigs + - infraenvs + - nmstateconfigs + verbs: + - list + - watch + - apiGroups: + - agent-install.openshift.io + resources: + - agents + - infraenvs + verbs: + - get + - list + - update + - watch + - apiGroups: + - agent-install.openshift.io + resources: + - agents/ai-deprovision + verbs: + - update + - apiGroups: + - agent-install.openshift.io + resources: + - agents/status + verbs: + - get + - patch + - update + - apiGroups: + - agent-install.openshift.io + resources: + - agentserviceconfigs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - agent-install.openshift.io + resources: + - agentserviceconfigs/finalizers + verbs: + - update + - apiGroups: + - agent-install.openshift.io + resources: + - agentserviceconfigs/status + verbs: + - get + - patch + - update + - apiGroups: + - agent-install.openshift.io + resources: + - hypershiftagentserviceconfigs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - agent-install.openshift.io + resources: + - hypershiftagentserviceconfigs/finalizers + verbs: + - update + - apiGroups: + - agent-install.openshift.io + resources: + - hypershiftagentserviceconfigs/status + verbs: + - get + - patch + - update + - apiGroups: + - agent-install.openshift.io + resources: + - infraenvs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - agent-install.openshift.io + resources: + - infraenvs/status + verbs: + - get + - patch + - update + - apiGroups: + - agent-install.openshift.io + resources: + - nmstateconfigs + verbs: + - get + - list + - watch + - apiGroups: + - agent.open-cluster-management.io + - cluster.open-cluster-management.io + - operator.open-cluster-management.io + resources: + - klusterletaddonconfigs + - managedclusters + - multiclusterhubs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions/status + verbs: + - patch + - update + - apiGroups: + - apiregistration.k8s.io + resources: + - apiservices + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apiregistration.k8s.io + resources: + - apiservices + - apiservices/finalizers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - app.k8s.io + - apps.open-cluster-management.io + - argoproj.io + - policy.open-cluster-management.io + resources: + - applications + - applicationsets + - appprojects + - argocds + - channels + - gitopsclusters + - helmreleases + - multiclusterapplicationsetreports + - placementbindings + - placementrules + - policies + - policyautomations + - policysets + - subscriptionreports + - subscriptions + verbs: + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - daemonsets/finalizers + - deployments + - deployments/finalizers + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - deployments + - deployments/finalizers + verbs: + - create + - delete + - get + - list + - patch + - update + - apiGroups: + - apps + resources: + - deployments + - deployments/scale + verbs: + - '*' + - apiGroups: + - apps + resources: + - deployments + - replicasets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - deployments/finalizers + verbs: + - update + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - apiGroups: + - apps + resources: + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps.open-cluster-management.io + resources: + - deployables + - deployables/status + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - apps.openshift.io + resources: + - deploymentconfigs + verbs: + - get + - list + - watch + - apiGroups: + - authentication.k8s.io + resources: + - tokenrequests + verbs: + - create + - apiGroups: + - authentication.k8s.io + resources: + - tokenrequests + - tokenreviews + verbs: + - create + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authentication.k8s.io + - config.openshift.io + resources: + - clusterversions + - tokenreviews + verbs: + - create + - get + - apiGroups: + - authentication.open-cluster-management.io + resources: + - managedserviceaccounts + verbs: + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - authentication.open-cluster-management.io + resources: + - managedserviceaccounts/status + verbs: + - get + - patch + - update + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create + - get + - apiGroups: + - authorization.openshift.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - capi-provider.agent-install.openshift.io + resources: + - agentmachines + verbs: + - list + - watch + - apiGroups: + - certificates.k8s.io + resources: + - certificatesigningrequests + verbs: + - create + - get + - list + - watch + - apiGroups: + - certificates.k8s.io + resources: + - certificatesigningrequests + - certificatesigningrequests/approval + verbs: + - create + - get + - list + - patch + - update + - watch + - apiGroups: + - certificates.k8s.io + resources: + - certificatesigningrequests + - certificatesigningrequests/approval + - certificatesigningrequests/status + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - certificates.k8s.io + resources: + - certificatesigningrequests/approval + verbs: + - update + - apiGroups: + - certificates.k8s.io + resources: + - certificatesigningrequests/approval + - certificatesigningrequests/status + verbs: + - update + - apiGroups: + - certificates.k8s.io + resources: + - signers + verbs: + - '*' + - approve + - sign + - apiGroups: + - cluster.open-cluster-management.io + resources: + - addonplacementscores + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - addonplacementscores + - addonplacementscores/status + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - addonplacementscores + - managedclustersetbindings + - placements + verbs: + - get + - list + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - addonplacementscores/status + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - clustercurators + - clustercurators/status + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - clustercurators + - managedclusters + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - clustercurators + - managedclusters + - managedclustersetbindings + - managedclustersets + - placementdecisions + - placements + verbs: + - list + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - clustercurators/status + verbs: + - get + - patch + - update + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclusters + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclusters + - managedclusters/finalizers + - managedclusters/status + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclusters + - managedclustersetbindings + - managedclustersets + verbs: + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclusters + - managedclustersets + verbs: + - get + - list + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclusters/status + verbs: + - patch + - update + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclusters/status + - managedclustersetbindings/status + - managedclustersets/status + - placementdecisions/status + - placements/status + verbs: + - patch + - update + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclustersetbindings + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclustersets + - placementdecisions + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclustersets + - placementdecisions + - placementdecisions/status + verbs: + - get + - list + - update + - watch + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclustersets/bind + verbs: + - create + - apiGroups: + - cluster.open-cluster-management.io + resources: + - managedclustersets/join + verbs: + - create + - apiGroups: + - cluster.open-cluster-management.io + resources: + - placements/finalizers + verbs: + - update + - apiGroups: + - clusterview.open-cluster-management.io + resources: + - managedclusters + - managedclustersets + verbs: + - get + - list + - watch + - apiGroups: + - config.open-cluster-management.io + resources: + - klusterletconfigs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - config.openshift.io + resources: + - apiservers + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - clusteroperators + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - clusterversions + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - dnses + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - config.openshift.io + resources: + - ingresses + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - proxies + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + - console.openshift.io + - project.openshift.io + - tower.ansible.com + resources: + - ansiblejobs + - clusterversions + - consolelinks + - featuregates + - infrastructures + - projects + verbs: + - get + - list + - watch + - apiGroups: + - console.open-cluster-management.io + resources: + - userpreferences + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - console.openshift.io + resources: + - consoleclidownloads + verbs: + - create + - delete + - get + - list + - patch + - update + - apiGroups: + - console.openshift.io + resources: + - consoleplugins + - consolequickstarts + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - '*' + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - discovery.open-cluster-management.io + resources: + - discoveredclusters + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - discovery.open-cluster-management.io + resources: + - discoveredclusters + - discoveryconfigs + verbs: + - approve + - bind + - create + - delete + - deletecollection + - escalate + - get + - list + - patch + - update + - watch + - apiGroups: + - discovery.open-cluster-management.io + resources: + - discoveredclusters/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - discovery.open-cluster-management.io + resources: + - discoveredclusters/status + verbs: + - get + - patch + - update + - apiGroups: + - discovery.open-cluster-management.io + resources: + - discoveryconfigs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - discovery.open-cluster-management.io + resources: + - discoveryconfigs/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - discovery.open-cluster-management.io + resources: + - discoveryconfigs/status + verbs: + - get + - patch + - update + - apiGroups: + - extensions.hive.openshift.io + resources: + - '*' + verbs: + - '*' + - apiGroups: + - extensions.hive.openshift.io + resources: + - agentclusterinstalls + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - extensions.hive.openshift.io + resources: + - agentclusterinstalls/finalizers + verbs: + - update + - apiGroups: + - extensions.hive.openshift.io + resources: + - agentclusterinstalls/status + verbs: + - get + - patch + - update + - apiGroups: + - flowcontrol.apiserver.k8s.io + resources: + - flowschemas + - prioritylevelconfigurations + verbs: + - get + - list + - watch + - apiGroups: + - hive.openshift.io + resources: + - '*' + verbs: + - '*' + - apiGroups: + - hive.openshift.io + resources: + - clusterclaims + - clusterdeployments + - clusterdeprovisions + - clusterimagesets + - clusterpools + - clusterprovisions + - machinepools + verbs: + - list + - watch + - apiGroups: + - hive.openshift.io + resources: + - clusterclaims + - clusterdeployments + - clusterpools + - machinepools + verbs: + - '*' + - approve + - bind + - create + - delete + - deletecollection + - escalate + - get + - list + - patch + - update + - watch + - apiGroups: + - hive.openshift.io + resources: + - clusterclaims + - clusterpools + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - hive.openshift.io + resources: + - clusterdeployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - hive.openshift.io + resources: + - clusterdeployments + - selectorsyncsets + - syncsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - hive.openshift.io + resources: + - clusterdeployments/finalizers + verbs: + - update + - apiGroups: + - hive.openshift.io + resources: + - clusterdeployments/status + verbs: + - get + - patch + - update + - apiGroups: + - hive.openshift.io + resources: + - clusterimagesets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - hive.openshift.io + resources: + - hiveconfigs + verbs: + - create + - delete + - get + - list + - update + - watch + - apiGroups: + - hiveinternal.openshift.io + resources: + - '*' + verbs: + - '*' + - apiGroups: + - hiveinternal.openshift.io + resources: + - clustersyncs + verbs: + - get + - list + - watch + - apiGroups: + - hypershift.openshift.io + resources: + - hostedclusters + - nodepools + verbs: + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - imageregistry.open-cluster-management.io + resources: + - managedclusterimageregistries + verbs: + - get + - list + - watch + - apiGroups: + - imageregistry.open-cluster-management.io + resources: + - managedclusterimageregistries + - managedclusterimageregistries/status + verbs: + - approve + - bind + - create + - delete + - deletecollection + - escalate + - get + - list + - patch + - update + - watch + - apiGroups: + - internal.open-cluster-management.io + resources: + - managedclusterinfos + verbs: + - get + - list + - watch + - apiGroups: + - internal.open-cluster-management.io + resources: + - managedclusterinfos + - managedclusterinfos/status + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - internal.open-cluster-management.io + resources: + - managedclusterinfos/status + verbs: + - patch + - update + - apiGroups: + - metal3.io + resources: + - baremetalhosts + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - metal3.io + resources: + - baremetalhosts + - provisionings + verbs: + - list + - watch + - apiGroups: + - metal3.io + resources: + - preprovisioningimages + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - metal3.io + resources: + - preprovisioningimages/status + verbs: + - get + - patch + - update + - apiGroups: + - metal3.io + resources: + - provisionings + verbs: + - get + - apiGroups: + - migration.k8s.io + resources: + - storageversionmigrations + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - prometheusrules + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - multicluster.openshift.io + resources: + - multiclusterengines + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - multicluster.openshift.io + resources: + - multiclusterengines/finalizers + verbs: + - update + - apiGroups: + - multicluster.openshift.io + resources: + - multiclusterengines/status + verbs: + - get + - patch + - update + - apiGroups: + - operator.open-cluster-management.io + resources: + - clustermanagers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - operator.open-cluster-management.io + resources: + - clustermanagers/status + verbs: + - patch + - update + - apiGroups: + - operator.open-cluster-management.io + resources: + - klusterlets + verbs: + - create + - delete + - deletecollection + - escalate + - get + - list + - patch + - update + - watch + - apiGroups: + - operator.open-cluster-management.io + resources: + - multiclusterhubs + verbs: + - get + - list + - watch + - apiGroups: + - operator.openshift.io + resources: + - consoles + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - operators.coreos.com + resources: + - clusterserviceversions + verbs: + - get + - list + - apiGroups: + - operators.coreos.com + resources: + - operatorconditions + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - operators.coreos.com + resources: + - subscriptions + verbs: + - get + - list + - watch + - apiGroups: + - proxy.open-cluster-management.io + resources: + - clusterstatuses/aggregator + verbs: + - create + - get + - apiGroups: + - proxy.open-cluster-management.io + resources: + - managedproxyconfigurations + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - proxy.open-cluster-management.io + resources: + - managedproxyconfigurations + - managedproxyconfigurations/finalizers + - managedproxyconfigurations/status + - managedproxyserviceresolvers + - managedproxyserviceresolvers/finalizers + - managedproxyserviceresolvers/status + verbs: + - '*' + - apiGroups: + - proxy.open-cluster-management.io + resources: + - managedproxyconfigurations + - managedproxyserviceresolvers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - bind + - create + - delete + - escalate + - get + - list + - patch + - update + - watch + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - rolebindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterroles + - roles + verbs: + - bind + - create + - delete + - escalate + - get + - list + - patch + - update + - watch + - apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterroles/finalizers + verbs: + - get + - update + - apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - bind + - create + - delete + - escalate + - get + - list + - patch + - update + - watch + - apiGroups: + - rbac.authorization.k8s.io + resources: + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - register.open-cluster-management.io + resources: + - managedclusters/accept + verbs: + - update + - apiGroups: + - register.open-cluster-management.io + resources: + - managedclusters/clientcertificates + verbs: + - renew + - apiGroups: + - route.openshift.io + resources: + - routes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - get + - apiGroups: + - route.openshift.io + resources: + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - storage.k8s.io + resources: + - storageclasses + verbs: + - list + - watch + - apiGroups: + - submarineraddon.open-cluster-management.io + resources: + - submarinerconfigs + verbs: + - list + - watch + - apiGroups: + - velero.io + resources: + - backups + verbs: + - create + - apiGroups: + - view.open-cluster-management.io + resources: + - managedclusterviews + verbs: + - create + - delete + - get + - list + - update + - watch + - apiGroups: + - view.open-cluster-management.io + resources: + - managedclusterviews + - managedclusterviews/status + verbs: + - create + - get + - list + - patch + - update + - watch + - apiGroups: + - view.open-cluster-management.io + resources: + - managedclusterviews/status + verbs: + - patch + - update + - apiGroups: + - wgpolicyk8s.io + resources: + - policyreports + verbs: + - list + - watch + - apiGroups: + - work.open-cluster-management.io + resources: + - manifestworkreplicasets + verbs: + - create + - delete + - deletecollection + - get + - list + - patch + - update + - watch + - apiGroups: + - work.open-cluster-management.io + resources: + - manifestworkreplicasets/finalizers + verbs: + - update + - apiGroups: + - work.open-cluster-management.io + resources: + - manifestworkreplicasets/status + - manifestworks/status + verbs: + - patch + - update + - apiGroups: + - work.open-cluster-management.io + resources: + - manifestworks + verbs: + - create + - delete + - deletecollection + - execute-as + - get + - list + - patch + - update + - watch + - apiGroups: + - work.open-cluster-management.io + resources: + - manifestworks + - manifestworks/finalizers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + serviceAccountName: multicluster-engine-operator + permissions: + - rules: + - apiGroups: + - '' + resources: + - configmaps + verbs: + - get + - list + - watch + - create + - update + - patch + - delete + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - get + - list + - watch + - create + - update + - patch + - delete + - apiGroups: + - '' + resources: + - events + verbs: + - create + - patch + serviceAccountName: multicluster-engine-operator + deployments: + - label: + control-plane: backplane-operator + name: multicluster-engine-operator + spec: + replicas: 2 + selector: + matchLabels: + control-plane: backplane-operator + strategy: {} + template: + metadata: + labels: + control-plane: backplane-operator + spec: + containers: + - args: + - --leader-elect + command: + - /app/backplane-operator + env: + - name: POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: OPERAND_IMAGE_ADDON_MANAGER + value: quay.io/stolostron/addon-manager@sha256:4fab1c994cb23b0c5a64601657660910a2e43df35c8667471163870b30a8c1b2 + - name: OPERAND_IMAGE_APISERVER_NETWORK_PROXY + value: quay.io/stolostron/apiserver-network-proxy@sha256:dc74c7c67ca851f50b83d7a03f91d028214fd8a941f12edd4411b860dc7b763d + - name: OPERAND_IMAGE_ASSISTED_IMAGE_SERVICE + value: quay.io/stolostron/assisted-image-service@sha256:6d991d6eb496eb20be62f6e1f8d944b73338aa3ce06bf7891e02a8307bf18c91 + - name: OPERAND_IMAGE_ASSISTED_INSTALLER + value: quay.io/stolostron/assisted-installer@sha256:ff4489a342c0ac7d6b5e1167e1199f65c450b42cef964b80824aae81d5dfbadf + - name: OPERAND_IMAGE_ASSISTED_INSTALLER_AGENT + value: quay.io/stolostron/assisted-installer-agent@sha256:2c8fec020e355ace9704f75b823c9477ad2cac8efcd2ddbc1b91aae478d4dc19 + - name: OPERAND_IMAGE_ASSISTED_INSTALLER_CONTROLLER + value: quay.io/stolostron/assisted-installer-controller@sha256:2bddb7447ad69cd29b0bb1078bcb604ecf3a0ae704ab2440637d404d55a59c55 + - name: OPERAND_IMAGE_ASSISTED_SERVICE + value: quay.io/stolostron/assisted-service@sha256:e6dc6dc4330c8bfb5fa60a8309b48b73dde08b57fcb8d10492353f093f1d88e0 + - name: OPERAND_IMAGE_AWS_ENCRYPTION_PROVIDER + value: quay.io/stolostron/aws-encryption-provider@sha256:83f11e28004fcbb31d7ec6c34ef2d2ec7dd8fc175c5e0135f6ace9894c65bfd0 + - name: OPERAND_IMAGE_BACKPLANE_MUST_GATHER + value: quay.io/stolostron/backplane-must-gather@sha256:395b6958f53923de5fb11460dbef206c116240541cdc7a6d898a4d70fc60a0c9 + - name: OPERAND_IMAGE_BACKPLANE_OPERATOR + value: quay.io/stolostron/backplane-operator@sha256:aad47f3ecf4da5b4e480a4b1115e33d5e25a88dddb7904c4d301e70bedbdb72e + - name: OPERAND_IMAGE_BACKPLANE_OPERATOR_TEST + value: quay.io/stolostron/backplane-operator-test@sha256:74a1d5bfe39b4164c121058ad8b0d174d381e2b39fe07867dafd2d4e4ff347bf + - name: OPERAND_IMAGE_CLUSTER_API + value: quay.io/stolostron/cluster-api@sha256:7a04ac4e5bdaf29498af75b2b7c4ff19cb6223f2076c9373a3a955553243ddda + - name: OPERAND_IMAGE_CLUSTER_API_PROVIDER_AWS + value: quay.io/stolostron/cluster-api-aws-controller@sha256:22a57cf5b74d0692025f0b0f57c5f28f8b492ea13295e9101b63f57766ffff38 + - name: OPERAND_IMAGE_CLUSTER_API_PROVIDER_AGENT + value: quay.io/stolostron/cluster-api-provider-agent@sha256:f7b21252bb1a1df20546e5a65bd539abc9fa1ebc85e5c94f2ade9ac01378bd95 + - name: OPERAND_IMAGE_CLUSTER_API_PROVIDER_AZURE + value: quay.io/stolostron/cluster-api-provider-azure@sha256:f6e780adc1bf3fe64303fcb8c5d080ab639e62c62d0577a1bbae5b5f5bfa393d + - name: OPERAND_IMAGE_CLUSTER_API_PROVIDER_KUBEVIRT + value: quay.io/stolostron/cluster-api-provider-kubevirt@sha256:b76a201edcad4805e32c40d3f0ad3f61584a879aa00c9e49aae3b2985bfb5fbc + - name: OPERAND_IMAGE_CLUSTER_CURATOR_CONTROLLER + value: quay.io/stolostron/cluster-curator-controller@sha256:ac3f9487bf60f7656fbf3072fc1b13a5180895521bb2a1a65b2306a1df82afad + - name: OPERAND_IMAGE_CLUSTER_IMAGE_SET_CONTROLLER + value: quay.io/stolostron/cluster-image-set-controller@sha256:a8ac7c37a87e1f82ebc5d15e3976c7ca618abf2f9ba4ba77765e009251e2e523 + - name: OPERAND_IMAGE_CLUSTER_PROXY + value: quay.io/stolostron/cluster-proxy@sha256:ff4e75106b5a7a7b9cc6310ca207c02d26ce9f58aad772533687690294652e88 + - name: OPERAND_IMAGE_CLUSTER_PROXY_ADDON + value: quay.io/stolostron/cluster-proxy-addon@sha256:12122461ac2552deed542d75fd21f83d86ec3738598249924d8883eb2c725f6e + - name: OPERAND_IMAGE_CLUSTERCLAIMS_CONTROLLER + value: quay.io/stolostron/clusterclaims-controller@sha256:034de645ad01755095e0a6cb53d2b54fca95ff43b2a68f0246d639aae9db4dfb + - name: OPERAND_IMAGE_CLUSTERLIFECYCLE_STATE_METRICS + value: quay.io/stolostron/clusterlifecycle-state-metrics@sha256:55b2f0b0fcb37b996ec010e5f26d4136da9a8dde254694dd1e1862c1ce1dd27a + - name: OPERAND_IMAGE_CONSOLE_MCE + value: quay.io/stolostron/console-mce@sha256:617b7bdcc700ec7a79677923de8cc35447fa62d41a9e1e9b7c508ec169836c08 + - name: OPERAND_IMAGE_DISCOVERY_OPERATOR + value: quay.io/stolostron/discovery-operator@sha256:b1a66d877932b363b96281c9b610159aabc296864718427cbdc8688162f95671 + - name: OPERAND_IMAGE_DISCOVERY_OPERATOR_TESTS + value: quay.io/stolostron/discovery-operator-tests@sha256:577a852f1108bf6065b718fa1c554be917d980252d2c44ff00996cdc5a4da02a + - name: OPERAND_IMAGE_DISCOVERY_TESTSERVER + value: quay.io/stolostron/discovery-testserver@sha256:0c5ecfe86bf494f83ef4a3ecb9a9d8a05990dd7252e7e1c7c08ed477f7f11e1b + - name: OPERAND_IMAGE_FOUNDATION_E2E + value: quay.io/stolostron/foundation-e2e@sha256:6252f8608b227252214ff07254c902ec697b56c56d3e4c70a1ab76b472bf290e + - name: OPERAND_IMAGE_HELLOPROW_GO + value: quay.io/stolostron/helloprow-go@sha256:e055ab3773a248c22dbde9847a3289e8512ccc85c6e9015544fc4f59d14b9cad + - name: OPERAND_IMAGE_HELLOWORLD + value: quay.io/stolostron/helloworld@sha256:2ebcb2f2fda3bc522cc372eb3fe85b1f47a4dac9169eccffcfeff75c9eb3b7b5 + - name: OPERAND_IMAGE_OPENSHIFT_HIVE + value: quay.io/stolostron/hive@sha256:46ec77209df59ae416dbb4baedf4b9b5ee487ce3627bd327e9e903cbf02ebddb + - name: OPERAND_IMAGE_HYPERSHIFT_ADDON_OPERATOR + value: quay.io/stolostron/hypershift-addon-operator@sha256:6fe89c5963236fbaefb662bc3a3b969437f29b19456b9a8d9c55e3217e42046d + - name: OPERAND_IMAGE_HYPERSHIFT_ADDON_OPERATOR_CANARY_TEST + value: quay.io/stolostron/hypershift-addon-operator-canary-test@sha256:71cc69e674c04a3555faa1dc6f10efb32549e2d4c2935d3d3d729a9de8a67573 + - name: OPERAND_IMAGE_HYPERSHIFT_OPERATOR + value: quay.io/stolostron/hypershift-operator@sha256:a8178ddc05c0e7b11f4149115801038a3e124ff87d07e9f010c0ca168599359d + - name: OPERAND_IMAGE_KUBE_RBAC_PROXY_MCE + value: quay.io/stolostron/kube-rbac-proxy-mce@sha256:9d852d3c5e3767b35855cd0cb1425a5fee02665573eba7d10f963df911534df9 + - name: OPERAND_IMAGE_MANAGED_SERVICEACCOUNT + value: quay.io/stolostron/managed-serviceaccount@sha256:b2fcdd9ac9b7643f2d7bddc2f315026ce46d41b46db02669863f4b84f0020468 + - name: OPERAND_IMAGE_MANAGED_SERVICEACCOUNT_E2E + value: quay.io/stolostron/managed-serviceaccount-e2e@sha256:ed9d6b28b9e1b47df5cfd6deeb354935926559d71a80672eb8df6ba1bc6e7dd5 + - name: OPERAND_IMAGE_MANAGEDCLUSTER_IMPORT_CONTROLLER + value: quay.io/stolostron/managedcluster-import-controller@sha256:50fb19ba2c28426b76e09397e17877d267f1e77cb5bdcc3a74599220bd082ca4 + - name: OPERAND_IMAGE_MULTICLOUD_MANAGER + value: quay.io/stolostron/multicloud-manager@sha256:65861c12c72cf5fd1b5d5dc143152dd725e9be457f853ebe4db2d3f08cc1a8e9 + - name: OPERAND_IMAGE_PLACEMENT + value: quay.io/stolostron/placement@sha256:1a95241f5bfa0e8252c704d52d030dd9ec72634544156f6e588e16674a37e3cd + - name: OPERAND_IMAGE_POSTGRESQL_12 + value: quay.io/stolostron/postgresql-12-centos7@sha256:94727d70e0afbf4e167e078744f3a10ac9d82edc553d57b0ecbb5443264f07e1 + - name: OPERAND_IMAGE_PROVIDER_CREDENTIAL_CONTROLLER + value: quay.io/stolostron/provider-credential-controller@sha256:7b6f47acc1d6875b7832015617571fe7a3f6a087373b43d7a53cb86615ad1c2f + - name: OPERAND_IMAGE_REGISTRATION + value: quay.io/stolostron/registration@sha256:9157ab0ec62cd2be6e618248ac227b0224ddcaa9bf643aefb5535cdd39e1d25f + - name: OPERAND_IMAGE_REGISTRATION_OPERATOR + value: quay.io/stolostron/registration-operator@sha256:4d28262f2520319087a9f7efb51fa2cfafbca3866236b56925e8f6e44c9a0fef + - name: OPERAND_IMAGE_WORK + value: quay.io/stolostron/work@sha256:74bc1c948412e31e7d1ccebde136794606d80caf2adcc453c2f245f44dda7851 + - name: OPERATOR_VERSION + value: 0.2.2 + - name: OPERATOR_PACKAGE + value: stolostron-engine + image: quay.io/stolostron/backplane-operator@sha256:aad47f3ecf4da5b4e480a4b1115e33d5e25a88dddb7904c4d301e70bedbdb72e + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + name: backplane-operator + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + limits: + cpu: 100m + memory: 2Gi + requests: + cpu: 100m + memory: 20Mi + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + runAsNonRoot: true + serviceAccountName: multicluster-engine-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: multicluster-engine-operator-webhook + replaces: stolostron-engine.v0.2.1 + relatedImages: + - name: addon_manager + image: quay.io/stolostron/addon-manager@sha256:4fab1c994cb23b0c5a64601657660910a2e43df35c8667471163870b30a8c1b2 + - name: apiserver_network_proxy + image: quay.io/stolostron/apiserver-network-proxy@sha256:dc74c7c67ca851f50b83d7a03f91d028214fd8a941f12edd4411b860dc7b763d + - name: assisted_image_service + image: quay.io/stolostron/assisted-image-service@sha256:6d991d6eb496eb20be62f6e1f8d944b73338aa3ce06bf7891e02a8307bf18c91 + - name: assisted_installer + image: quay.io/stolostron/assisted-installer@sha256:ff4489a342c0ac7d6b5e1167e1199f65c450b42cef964b80824aae81d5dfbadf + - name: assisted_installer_agent + image: quay.io/stolostron/assisted-installer-agent@sha256:2c8fec020e355ace9704f75b823c9477ad2cac8efcd2ddbc1b91aae478d4dc19 + - name: assisted_installer_controller + image: quay.io/stolostron/assisted-installer-controller@sha256:2bddb7447ad69cd29b0bb1078bcb604ecf3a0ae704ab2440637d404d55a59c55 + - name: assisted_service + image: quay.io/stolostron/assisted-service@sha256:e6dc6dc4330c8bfb5fa60a8309b48b73dde08b57fcb8d10492353f093f1d88e0 + - name: aws_encryption_provider + image: quay.io/stolostron/aws-encryption-provider@sha256:83f11e28004fcbb31d7ec6c34ef2d2ec7dd8fc175c5e0135f6ace9894c65bfd0 + - name: backplane_must_gather + image: quay.io/stolostron/backplane-must-gather@sha256:395b6958f53923de5fb11460dbef206c116240541cdc7a6d898a4d70fc60a0c9 + - name: backplane_operator_test + image: quay.io/stolostron/backplane-operator-test@sha256:74a1d5bfe39b4164c121058ad8b0d174d381e2b39fe07867dafd2d4e4ff347bf + - name: cluster_api + image: quay.io/stolostron/cluster-api@sha256:7a04ac4e5bdaf29498af75b2b7c4ff19cb6223f2076c9373a3a955553243ddda + - name: cluster_api_provider_aws + image: quay.io/stolostron/cluster-api-aws-controller@sha256:22a57cf5b74d0692025f0b0f57c5f28f8b492ea13295e9101b63f57766ffff38 + - name: cluster_api_provider_agent + image: quay.io/stolostron/cluster-api-provider-agent@sha256:f7b21252bb1a1df20546e5a65bd539abc9fa1ebc85e5c94f2ade9ac01378bd95 + - name: cluster_api_provider_azure + image: quay.io/stolostron/cluster-api-provider-azure@sha256:f6e780adc1bf3fe64303fcb8c5d080ab639e62c62d0577a1bbae5b5f5bfa393d + - name: cluster_api_provider_kubevirt + image: quay.io/stolostron/cluster-api-provider-kubevirt@sha256:b76a201edcad4805e32c40d3f0ad3f61584a879aa00c9e49aae3b2985bfb5fbc + - name: cluster_curator_controller + image: quay.io/stolostron/cluster-curator-controller@sha256:ac3f9487bf60f7656fbf3072fc1b13a5180895521bb2a1a65b2306a1df82afad + - name: cluster_image_set_controller + image: quay.io/stolostron/cluster-image-set-controller@sha256:a8ac7c37a87e1f82ebc5d15e3976c7ca618abf2f9ba4ba77765e009251e2e523 + - name: cluster_proxy + image: quay.io/stolostron/cluster-proxy@sha256:ff4e75106b5a7a7b9cc6310ca207c02d26ce9f58aad772533687690294652e88 + - name: cluster_proxy_addon + image: quay.io/stolostron/cluster-proxy-addon@sha256:12122461ac2552deed542d75fd21f83d86ec3738598249924d8883eb2c725f6e + - name: clusterclaims_controller + image: quay.io/stolostron/clusterclaims-controller@sha256:034de645ad01755095e0a6cb53d2b54fca95ff43b2a68f0246d639aae9db4dfb + - name: clusterlifecycle_state_metrics + image: quay.io/stolostron/clusterlifecycle-state-metrics@sha256:55b2f0b0fcb37b996ec010e5f26d4136da9a8dde254694dd1e1862c1ce1dd27a + - name: console_mce + image: quay.io/stolostron/console-mce@sha256:617b7bdcc700ec7a79677923de8cc35447fa62d41a9e1e9b7c508ec169836c08 + - name: discovery_operator + image: quay.io/stolostron/discovery-operator@sha256:b1a66d877932b363b96281c9b610159aabc296864718427cbdc8688162f95671 + - name: discovery_operator_tests + image: quay.io/stolostron/discovery-operator-tests@sha256:577a852f1108bf6065b718fa1c554be917d980252d2c44ff00996cdc5a4da02a + - name: discovery_testserver + image: quay.io/stolostron/discovery-testserver@sha256:0c5ecfe86bf494f83ef4a3ecb9a9d8a05990dd7252e7e1c7c08ed477f7f11e1b + - name: foundation_e2e + image: quay.io/stolostron/foundation-e2e@sha256:6252f8608b227252214ff07254c902ec697b56c56d3e4c70a1ab76b472bf290e + - name: helloprow_go + image: quay.io/stolostron/helloprow-go@sha256:e055ab3773a248c22dbde9847a3289e8512ccc85c6e9015544fc4f59d14b9cad + - name: helloworld + image: quay.io/stolostron/helloworld@sha256:2ebcb2f2fda3bc522cc372eb3fe85b1f47a4dac9169eccffcfeff75c9eb3b7b5 + - name: openshift_hive + image: quay.io/stolostron/hive@sha256:46ec77209df59ae416dbb4baedf4b9b5ee487ce3627bd327e9e903cbf02ebddb + - name: hypershift_addon_operator + image: quay.io/stolostron/hypershift-addon-operator@sha256:6fe89c5963236fbaefb662bc3a3b969437f29b19456b9a8d9c55e3217e42046d + - name: hypershift_addon_operator_canary_test + image: quay.io/stolostron/hypershift-addon-operator-canary-test@sha256:71cc69e674c04a3555faa1dc6f10efb32549e2d4c2935d3d3d729a9de8a67573 + - name: hypershift_operator + image: quay.io/stolostron/hypershift-operator@sha256:a8178ddc05c0e7b11f4149115801038a3e124ff87d07e9f010c0ca168599359d + - name: kube_rbac_proxy_mce + image: quay.io/stolostron/kube-rbac-proxy-mce@sha256:9d852d3c5e3767b35855cd0cb1425a5fee02665573eba7d10f963df911534df9 + - name: managed_serviceaccount + image: quay.io/stolostron/managed-serviceaccount@sha256:b2fcdd9ac9b7643f2d7bddc2f315026ce46d41b46db02669863f4b84f0020468 + - name: managed_serviceaccount_e2e + image: quay.io/stolostron/managed-serviceaccount-e2e@sha256:ed9d6b28b9e1b47df5cfd6deeb354935926559d71a80672eb8df6ba1bc6e7dd5 + - name: managedcluster_import_controller + image: quay.io/stolostron/managedcluster-import-controller@sha256:50fb19ba2c28426b76e09397e17877d267f1e77cb5bdcc3a74599220bd082ca4 + - name: multicloud_manager + image: quay.io/stolostron/multicloud-manager@sha256:65861c12c72cf5fd1b5d5dc143152dd725e9be457f853ebe4db2d3f08cc1a8e9 + - name: placement + image: quay.io/stolostron/placement@sha256:1a95241f5bfa0e8252c704d52d030dd9ec72634544156f6e588e16674a37e3cd + - name: postgresql_12 + image: quay.io/stolostron/postgresql-12-centos7@sha256:94727d70e0afbf4e167e078744f3a10ac9d82edc553d57b0ecbb5443264f07e1 + - name: provider_credential_controller + image: quay.io/stolostron/provider-credential-controller@sha256:7b6f47acc1d6875b7832015617571fe7a3f6a087373b43d7a53cb86615ad1c2f + - name: registration + image: quay.io/stolostron/registration@sha256:9157ab0ec62cd2be6e618248ac227b0224ddcaa9bf643aefb5535cdd39e1d25f + - name: registration_operator + image: quay.io/stolostron/registration-operator@sha256:4d28262f2520319087a9f7efb51fa2cfafbca3866236b56925e8f6e44c9a0fef + - name: work + image: quay.io/stolostron/work@sha256:74bc1c948412e31e7d1ccebde136794606d80caf2adcc453c2f245f44dda7851 diff --git a/operators/stolostron-engine/0.2.2/metadata/annotations.yaml b/operators/stolostron-engine/0.2.2/metadata/annotations.yaml new file mode 100644 index 00000000000..3a546618c04 --- /dev/null +++ b/operators/stolostron-engine/0.2.2/metadata/annotations.yaml @@ -0,0 +1,7 @@ +annotations: + operators.operatorframework.io.bundle.mediatype.v1: registry+v1 + operators.operatorframework.io.bundle.manifests.v1: manifests/ + operators.operatorframework.io.bundle.metadata.v1: metadata/ + operators.operatorframework.io.bundle.package.v1: stolostron-engine + operators.operatorframework.io.bundle.channels.v1: community-0.2 + com.redhat.openshift.versions: v4.11-v4.14