Skip to content
6 changes: 6 additions & 0 deletions helm-cluster-scoped/Chart.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
apiVersion: v2
name: ibm-odlm
description: A Helm chart for ibm-odlm
type: application
version: 4.3.9
appVersion: 4.3.9
3,973 changes: 3,973 additions & 0 deletions helm-cluster-scoped/templates/00-crd.yaml

Large diffs are not rendered by default.

2 changes: 2 additions & 0 deletions helm-cluster-scoped/templates/01-cluster-rbac.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
### no cluster rbac for ODLM
# if it is v3 -> v4 upgrade we need to add permission to cleanup certmanager, auditlogging and licensing CR
1 change: 1 addition & 0 deletions helm-cluster-scoped/templates/02-cluster-webhook.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
### no webhook for ODLM
12 changes: 12 additions & 0 deletions helm-cluster-scoped/values.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
imagePullPrefix: icr.io
imagePullSecret: ibm-entilement-key

# Note there are no leading or trailing /'s
imageRegistryNamespaceOperator: cpopen
imageRegistryNamespaceOperand: cpopen/cpfs

# other configuration you think you might need for your operator
# following are examples, not required:
operatorNamespace: ibm-common-services
servicesNamespace: service
operatorImage: quay.io/luzarragaben/odlm:nolm-controller3 # will update later
6 changes: 6 additions & 0 deletions helm/Chart.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
apiVersion: v2
name: ibm-odlm
description: A Helm chart for ibm-odlm
type: application
version: 4.3.9
appVersion: 4.3.9
220 changes: 220 additions & 0 deletions helm/templates/00-rbac.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,220 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: operand-deployment-lifecycle-manager
namespace: {{ .Values.operatorNamespace }}
rules:
- apiGroups:
- ""
resources:
- configmaps
- namespaces
- secrets
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- '*'
resources:
- '*'
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- k8s.keycloak.org
resources:
- keycloakrealmimports
- keycloaks
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- operator.ibm.com
resources:
- operandbindinfos
- operandbindinfos/finalizers
- operandbindinfos/status
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- operator.ibm.com
resources:
- operandconfigs
- operandconfigs/finalizers
- operandconfigs/status
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- operator.ibm.com
resources:
- operandregistries
- operandregistries/finalizers
- operandregistries/status
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- operator.ibm.com
resources:
- operandrequests
- operandrequests/finalizers
- operandrequests/status
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- operator.ibm.com
resources:
- operatorconfigs
- operatorconfigs/finalizers
- operatorconfigs/status
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- operators.coreos.com
resources:
- clusterserviceversions
- subscriptions
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- operators.coreos.com
resources:
- installplans
- operatorgroups
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- packages.operators.coreos.com
resources:
- packagemanifests
verbs:
- get
- list
- patch
- update
- watch
- apiGroups:
- route.openshift.io
resources:
- routes
verbs:
- create
- delete
- get
- list
- patch
- update
- watch

---

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: operand-deployment-lifecycle-manager
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: operand-deployment-lifecycle-manager
subjects:
- kind: ServiceAccount
name: operand-deployment-lifecycle-manager

---

apiVersion: v1
kind: ServiceAccount
metadata:
name: operand-deployment-lifecycle-manager
namespace: {{ .Values.operatorNamespace }}

---
### role only for olm
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: operand-deployment-lifecycle-manager.v4.3.9
namespace: {{ .Values.operatorNamespace }}
rules:
- apiGroups:
- operators.coreos.com
resourceNames:
- operand-deployment-lifecycle-manager.v4.3.9
resources:
- operatorconditions
verbs:
- get
- update
- patch

---
### rolebinding only for olm
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: operand-deployment-lifecycle-manager.v4.3.9
namespace: {{ .Values.operatorNamespace }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: operand-deployment-lifecycle-manager.v4.3.9
subjects:
- kind: ServiceAccount
name: operand-deployment-lifecycle-manager
Loading