From cbf693fb4340219d9cf32c3ea419d15d0dcf3c8e Mon Sep 17 00:00:00 2001 From: Jakub Scholz Date: Fri, 27 Sep 2024 20:36:57 +0200 Subject: [PATCH] Prepare for 0.1.0 Signed-off-by: Jakub Scholz --- api/pom.xml | 2 +- examples/kafka-access-with-user.yaml | 20 ++++++ examples/kafka-access.yaml | 12 ++++ install/000-Namespace.yaml | 6 ++ install/010-ServiceAccount.yaml | 7 +++ install/020-ClusterRole.yaml | 41 ++++++++++++ install/030-ClusterRoleBinding.yaml | 14 +++++ install/040-Crd-kafkaaccess.yaml | 86 ++++++++++++++++++++++++++ install/050-Deployment.yaml | 57 +++++++++++++++++ operator/pom.xml | 2 +- packaging/install/050-Deployment.yaml | 2 +- pom.xml | 2 +- release.version | 2 +- strimzi-access-operator-0.1.0.tar.gz | Bin 0 -> 1802 bytes strimzi-access-operator-0.1.0.zip | Bin 0 -> 4725 bytes systemtest/pom.xml | 2 +- 16 files changed, 249 insertions(+), 6 deletions(-) create mode 100644 examples/kafka-access-with-user.yaml create mode 100644 examples/kafka-access.yaml create mode 100644 install/000-Namespace.yaml create mode 100644 install/010-ServiceAccount.yaml create mode 100644 install/020-ClusterRole.yaml create mode 100644 install/030-ClusterRoleBinding.yaml create mode 100644 install/040-Crd-kafkaaccess.yaml create mode 100644 install/050-Deployment.yaml create mode 100644 strimzi-access-operator-0.1.0.tar.gz create mode 100644 strimzi-access-operator-0.1.0.zip diff --git a/api/pom.xml b/api/pom.xml index 477390d..4133522 100644 --- a/api/pom.xml +++ b/api/pom.xml @@ -7,7 +7,7 @@ io.strimzi.kafka.access kafka-access-operator - 0.0.1-SNAPSHOT + 0.1.0 api diff --git a/examples/kafka-access-with-user.yaml b/examples/kafka-access-with-user.yaml new file mode 100644 index 0000000..16eb148 --- /dev/null +++ b/examples/kafka-access-with-user.yaml @@ -0,0 +1,20 @@ +# The operator will look up the Kafka instance specified and +# create a secret with the details to connect to the listener specified. +# It will also look up the KafkaUser specified and check it has the correct +# authentication mechanism to connect to the listener. If so it will add the +# user credentials to the secret it creates. +# If no listener is specified it will choose one based on the user authentication. +apiVersion: access.strimzi.io/v1alpha1 +kind: KafkaAccess +metadata: + name: my-kafka-access +spec: + kafka: + name: my-cluster + namespace: kafka + listener: tls + user: + kind: KafkaUser + apiGroup: kafka.strimzi.io + name: my-user + namespace: kafka diff --git a/examples/kafka-access.yaml b/examples/kafka-access.yaml new file mode 100644 index 0000000..fd07934 --- /dev/null +++ b/examples/kafka-access.yaml @@ -0,0 +1,12 @@ +# The operator will look up the Kafka instance specified and +# create a secret with the details to connect to the listener specified. +# If no listener is specified it will choose one, preferring an internal listener. +apiVersion: access.strimzi.io/v1alpha1 +kind: KafkaAccess +metadata: + name: my-kafka-access +spec: + kafka: + name: my-cluster + namespace: kafka + listener: plain diff --git a/install/000-Namespace.yaml b/install/000-Namespace.yaml new file mode 100644 index 0000000..7d930b8 --- /dev/null +++ b/install/000-Namespace.yaml @@ -0,0 +1,6 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: strimzi-access-operator + labels: + app: strimzi-access-operator diff --git a/install/010-ServiceAccount.yaml b/install/010-ServiceAccount.yaml new file mode 100644 index 0000000..90fcd85 --- /dev/null +++ b/install/010-ServiceAccount.yaml @@ -0,0 +1,7 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: strimzi-access-operator + labels: + app: strimzi-access-operator + namespace: strimzi-access-operator diff --git a/install/020-ClusterRole.yaml b/install/020-ClusterRole.yaml new file mode 100644 index 0000000..48f097c --- /dev/null +++ b/install/020-ClusterRole.yaml @@ -0,0 +1,41 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: strimzi-access-operator + labels: + app: strimzi-access-operator +rules: + - apiGroups: + - "access.strimzi.io" + resources: + - kafkaaccesses + - kafkaaccesses/status + verbs: + - get + - list + - watch + - create + - delete + - patch + - update + - apiGroups: + - "kafka.strimzi.io" + resources: + - kafkas + - kafkausers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch + - create + - delete + - patch + - update diff --git a/install/030-ClusterRoleBinding.yaml b/install/030-ClusterRoleBinding.yaml new file mode 100644 index 0000000..353e62b --- /dev/null +++ b/install/030-ClusterRoleBinding.yaml @@ -0,0 +1,14 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: strimzi-access-operator + labels: + app: strimzi-access-operator +subjects: + - kind: ServiceAccount + name: strimzi-access-operator + namespace: strimzi-access-operator +roleRef: + kind: ClusterRole + name: strimzi-access-operator + apiGroup: rbac.authorization.k8s.io diff --git a/install/040-Crd-kafkaaccess.yaml b/install/040-Crd-kafkaaccess.yaml new file mode 100644 index 0000000..57f83d9 --- /dev/null +++ b/install/040-Crd-kafkaaccess.yaml @@ -0,0 +1,86 @@ +# Generated by Fabric8 CRDGenerator, manual edits might get overwritten! +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: kafkaaccesses.access.strimzi.io + labels: + servicebinding.io/provisioned-service: "true" +spec: + group: access.strimzi.io + names: + kind: KafkaAccess + plural: kafkaaccesses + shortNames: + - ka + singular: kafkaaccess + scope: Namespaced + versions: + - name: v1alpha1 + schema: + openAPIV3Schema: + properties: + spec: + properties: + kafka: + properties: + listener: + type: string + name: + type: string + namespace: + type: string + required: + - name + type: object + user: + properties: + apiGroup: + type: string + kind: + type: string + name: + type: string + namespace: + type: string + required: + - apiGroup + - kind + - name + type: object + required: + - kafka + type: object + status: + properties: + binding: + properties: + name: + type: string + type: object + conditions: + items: + properties: + additionalProperties: + additionalProperties: + type: object + type: object + lastTransitionTime: + type: string + message: + type: string + reason: + type: string + status: + type: string + type: + type: string + type: object + type: array + observedGeneration: + type: integer + type: object + type: object + served: true + storage: true + subresources: + status: {} diff --git a/install/050-Deployment.yaml b/install/050-Deployment.yaml new file mode 100644 index 0000000..97ac141 --- /dev/null +++ b/install/050-Deployment.yaml @@ -0,0 +1,57 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: strimzi-access-operator + labels: + app: strimzi-access-operator + namespace: strimzi-access-operator +spec: + replicas: 1 + selector: + matchLabels: + app: strimzi-access-operator + strimzi.io/kind: access-operator + template: + metadata: + labels: + app: strimzi-access-operator + strimzi.io/kind: access-operator + spec: + serviceAccountName: strimzi-access-operator + volumes: + - name: strimzi-tmp + emptyDir: + medium: Memory + sizeLimit: 1Mi + containers: + - name: access-operator + image: quay.io/strimzi/access-operator:0.1.0 + ports: + - containerPort: 8080 + name: http + args: + - /opt/strimzi/bin/access_operator_run.sh + volumeMounts: + - name: strimzi-tmp + mountPath: /tmp + resources: + limits: + memory: 256Mi + cpu: 500m + requests: + memory: 256Mi + cpu: 100m + livenessProbe: + httpGet: + path: /healthy + port: http + initialDelaySeconds: 10 + periodSeconds: 30 + readinessProbe: + httpGet: + path: /ready + port: http + initialDelaySeconds: 10 + periodSeconds: 30 + strategy: + type: Recreate diff --git a/operator/pom.xml b/operator/pom.xml index 3963ab8..cf0c0d0 100644 --- a/operator/pom.xml +++ b/operator/pom.xml @@ -6,7 +6,7 @@ io.strimzi.kafka.access kafka-access-operator - 0.0.1-SNAPSHOT + 0.1.0 operator diff --git a/packaging/install/050-Deployment.yaml b/packaging/install/050-Deployment.yaml index ac0f183..97ac141 100644 --- a/packaging/install/050-Deployment.yaml +++ b/packaging/install/050-Deployment.yaml @@ -25,7 +25,7 @@ spec: sizeLimit: 1Mi containers: - name: access-operator - image: quay.io/strimzi/access-operator:latest + image: quay.io/strimzi/access-operator:0.1.0 ports: - containerPort: 8080 name: http diff --git a/pom.xml b/pom.xml index 3a1f0ac..00e057e 100644 --- a/pom.xml +++ b/pom.xml @@ -6,7 +6,7 @@ io.strimzi.kafka.access kafka-access-operator - 0.0.1-SNAPSHOT + 0.1.0 pom diff --git a/release.version b/release.version index 4adba7e..6e8bf73 100644 --- a/release.version +++ b/release.version @@ -1 +1 @@ -0.0.1-SNAPSHOT \ No newline at end of file +0.1.0 diff --git a/strimzi-access-operator-0.1.0.tar.gz b/strimzi-access-operator-0.1.0.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..7de262fbb56ca3eb30c899cbd76a2520276d42d5 GIT binary patch literal 1802 zcmV+l2le^%CNWFo~3g?u9+l{uy} z)NszY1eJ#bO|gUtU{NDX2o+iHo#BXnAwt6Q1R3w^r5@X({9@@~7A>%Ic1uHlVpR1y zS#=hG{(Y?QfIo;dKjD-> z*)@J3wm!FklRaX(q$SMs)yh(AwtH}Z%{KN zORco0_(a5#dIZumk3*G9yUp|pIk;(=0AX&(EXn9)Av?&lX>J0$p6AOZP3oQ04@ISj{4>M zUw7;dPyT-lc!}QXZWNk$A5B;2FFY00yF_npuF`QXUZDVoF*Mi2r%IxL&KC;Jq1oq4 zBJKoL(9ix+?6)IIe!!@HlhqmmRL+ANB6%!4az$n|q&ivF#F^ZABeGX%<4f^Iny@uZ zt5cvE3BIJ73*uYp>;#=F5tH+E7e6=2yAF90p(@v!={7E(gW|yHD5lAEsaW3Bvz`H_3eeh3`ds)IHQB~ZBF?5`rVhor_uy4 zEVPF!x?w9tkt!n(O=}Z%Y_2}KZz^1W)XpNLR#BP{ptP)8kZ9l`n@!5u4}&1zV=9PW zzulOpX3AjYNl9Co-dvp*p-q$Px^rJ;BuDyLnjuq7!?YIs(G1wkiwpRpjEXC^ z-gXMoK)27~d4T!09%hdNOKKCbia-?!8W?J080k-P31-Z$Ti5Qox<#rT7BMWD?bE9{n^|JMY3dn1TCsJ(^v?+s?74KPW{AB3mRIl z3xh#_NSLSB_pQWhh7F|&(j`VV1SOOU9vzW+I=`u`|UEZZZwDbqLhe!>fYtS%M64D~QLhc0?0Vc>E+Et>+Y zyv6$**;c~F+14Kejl9)mkgXyHol#0ArvweGK(Q0ePE?D->;i`*`w^AFlY6>Qs-pQu{zy2ffTK^Mi@niQddY2{avagbPQg8IYJ z+A0}%Q9MCI+YSojx^g9Q4@^!G6QfJWtWrXuH7%uht?ai%Rf<|8?Sf#Y7UhH;CH58S`cRkTUZcX=IP%TfddbTF sjNC3*Ng{oRw4WUH%rp`=fAc!B%AVRsPH=(~oZvaaf5)M`i2ynP00Ay=4FCWD literal 0 HcmV?d00001 diff --git a/strimzi-access-operator-0.1.0.zip b/strimzi-access-operator-0.1.0.zip new file mode 100644 index 0000000000000000000000000000000000000000..590e45481ab747a53e4400ad2f7a09e317e27ab1 GIT binary patch literal 4725 zcmbVPc|6nqAD=UZEXh%#RF-2Jg+^{7N9Lx8Wm7cQ4o6wVm&!Ruj2w~s%GIH7UuO|h zO^%$)QI6%PzHU{PXvhI6w@5 z#bMk$F1kSwE-ol67UJcN!XR*77zk8eK^}U@+KL;%X1}oDx_O9f#{r-csdXPFT_3aP)JO>HDEjDC8u<1BLZQxS-?%5FY5C zS%fD)+IAJn%kgT!I-g}rwtR5RXBXMFAzc?Yu6%Jz0BzbW?7# z*iJQ|m^5hKdV8{&8&U7wb61~(W=lzvwy6%&@p|yJyhH0=`eud2HD%Epx&^LuCu%cq z#bGE!7mdf_P#6m@G)l+K6Y1u8Zc}rjVjgd8fb!}u2I^nV&`0O*f|dz~QBC=ha!(-D zcCXCODM$h*=U=J+dQDFSnJFUE%2y>&p|P)nOBIFki-{ZY>`95%Io(@HxzmiF^S{Lk z0o972v0RR#=0HDFVSx4w$#~>jW5Uv*xf7R!vc2R9iz51cN)vLDN zRD26)%3{gpo}GfANci1}v(;ht*Rg~ePZIcKHcC{a}9STxa0 z>#FUgjkKRkSnhcd7uv25>@L}1sTrdL8OP~TjAVUcPnZUC0CTyoHr=wY8=7TRptPK- z==cb|-%$7^M=Up@2%1G+;RP5E6r?KJ>eJf0(LFeFWyV>7YH0_qhq&0DYna=%6>htp z1po%(Z}bGMq>W>{3>IGJx{DS;(t}zD$^sq7*-RX)ykQuR(BERmjw!1|Wp#s>)Y(vg-U2CK~v%v>q(NHyT#Ho&Oka=YH1-S>LCx-`> zKA8PpWMT8!neP${lBV?0v2E1Zu(S@=QvCod39Y^tULbOke_GU=!z!MT=ioa~vfJiu zOq^#tbs_6gp~#xySCWU_iNhlc5??4gkG@0+__ibx1j#_7#~qUdOVAZu9xp|7x?k=2 zBcGedwP$?}M)~4Q&tpu_S*O!TQve0jDb#Q`w16a&qA62l}YV zy`qSZb6a%xpUVM!aKSqq`V!}n-ILLMSLJ*FA|{iC^AV^aSX)|hi(=_L_8e$a&aB8) zM?*Z{rA`IEa9;l+C0%{~_nc?u@)d0i&l+mqJe&4Kzcb$=z*(WLkdWF|W1LE{bBryz zMkwtUiR!L9+HPXfY#=)2`O?6+RP!tcrJbW&kh`eDbbb6;T*`Bk4cEEA=3x#KIbKPF0-*9c` z42}nNp|xHY%@?Le1_&Qbyh!o_`WDDE>aM|scaM|$70tS@dshV)rjAD>srQ<<&DytN zC#GZ`#23`hdPGkErxTaKMYEk-s}kiShL{qPc^Uq~C{IyNGSP?!OBaq6>XM9jp`(@RammmCw|84@$(ng z>!Ua9Yk1(RGuake*O^SywXh^!3b2%*^Dc z19>3$NgY94daugw(WYTed&xfTX}EX0$iCqX!WAP*PqLK7h~wAYhYGx?md)-lBoTNN z^nFWyNovY@y~)myXFT2S)U76y_8`s4$Kcm9Y};W*Gz}S;^Vs`_PnAzoJQkUF9vB+Ex}z+m&Kj zTekXQ?8RlrDTA!yQU0%;E?1HtlVpuhtK;BR_H}Q5e?bFp>P?hC!owSl!u}7NR2{ls zOp9LZdGv7UFc0wO6#8dP^mD_Vhv2a&%%))@n5&yTh4NBYW#y=W`o+|wwy+&NrXw;o z9ogZIpwAam=b|UM>&KRQKRkieVfQri?C5kD`o$$AX_kGG)xCLp^mbOTxk>|8oFh0_<#UrHB*0nc-iEG6^q7aJnYjjZlERBubebu=AZei$U&OR@Fv z4jN!D2EqF>T62;jeTLmXWKY3i;G`A~6S-MU*NaD^oXLUZ!-U2tbV+;S3)|xZ0$ne# z&Zm1k_dpuCq@A``Oqn?4J2u--y$c)SYXnr8H-yR{9URyOD zxOkc9!|gw4n)F5B_S#~1_ zzl>4tyG6Rec3yDOYIfJNmqu&%Usnne50thhBZP--d=qMq)Uq&^8exGDI!rIMAbR{Z z--7>5j*YR~G-9U2a?dAFUOhhoM^JH8MDZI{A;*ZB5R>i@l*OK8q3LehidXylhiCjR zs@AXSWF+wF^3^;NJXk2}AggEm#{0}RyJK+0AY1aW!=_gibG9S*@v^e#No7%=RScR6 zHaG4StO$ok%U`nS`6XnkM(JK=x2WC+(bXrGVq0v_SXI{p)wPvwwM33q#vZBJvt90C z&|btSzv8)sZP0TViDQuuoy6^K*UHvJ(mZ`X!Jm)zaZR~iY#fNI{x#)m$iB{CIU2otv9OA>eZS(w0U~twu0J5awD$V% zW&(-hFM;%5;^@a1QVbY&n__$uOFzT6Fkh(U{n$tX{6Kp9+NbFq$`-Cz_|5qq=08*n!*n?0COA|H@l4-c5pJy z;d^@?bMTC-!A5vXE~eqXyD0n&|NEs4W+=N%x)l3)7W~^it*w3r_O0$12kS;-S?P?J u1l!oEA^$mMnd8AYBsTJ>;rYLK{5>*$gw8?FBmjVi{y9n458L?G-~IsCwDjWu literal 0 HcmV?d00001 diff --git a/systemtest/pom.xml b/systemtest/pom.xml index cdbdc0c..b556087 100644 --- a/systemtest/pom.xml +++ b/systemtest/pom.xml @@ -6,7 +6,7 @@ io.strimzi.kafka.access kafka-access-operator - 0.0.1-SNAPSHOT + 0.1.0 systemtest