ci: Copy 7.54.0 csv to main (#1522)

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
pull/1523/head
che-bot 2022-09-23 08:21:28 +02:00 committed by GitHub
parent 5373f5320d
commit 67ef02b72d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
14 changed files with 1890 additions and 1356 deletions

View File

@ -58,6 +58,7 @@ metadata:
"components": {},
"containerRegistry": {},
"devEnvironments": {},
"gitServices": {},
"networking": {}
}
}
@ -65,8 +66,8 @@ metadata:
capabilities: Seamless Upgrades
categories: Developer Tools
certified: "false"
containerImage: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e
createdAt: "2022-09-02T08:44:51Z"
containerImage: quay.io/eclipse/che-operator@sha256:2c61b1a8dfe3010a2df42481b969a674d2ee0ca3097e0319d0be1199de945fd6
createdAt: "2022-09-22T20:03:34Z"
description: A Kube-native development solution that delivers portable and collaborative
developer workspaces.
operatorframework.io/suggested-namespace: openshift-operators
@ -76,7 +77,7 @@ metadata:
operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
repository: https://github.com/eclipse-che/che-operator
support: Eclipse Foundation
name: eclipse-che-preview-openshift.v7.53.0
name: eclipse-che-preview-openshift.v7.54.0
namespace: placeholder
spec:
apiservicedefinitions: {}
@ -129,6 +130,10 @@ spec:
- description: Che components configuration.
displayName: Components
path: components
- description: A configuration that allows users to work with remote Git
repositories.
displayName: Git Services
path: gitServices
- description: Networking, Che authentication, and TLS configuration.
displayName: Networking
path: networking
@ -136,6 +141,44 @@ spec:
images.
displayName: Container registry
path: containerRegistry
- description: Enables users to work with repositories hosted on Bitbucket
(bitbucket.org or self-hosted).
displayName: Bitbucket
path: gitServices.bitbucket
- description: 'Kubernetes secret, that contains Base64-encoded Bitbucket
OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application
link consumer key and Bitbucket Application link shared secret must
be stored in `private.key`, `consumer.key` and `shared_secret` keys
respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/.
For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer
secret must be stored in `id` and `secret` keys respectively. See the
following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.'
displayName: Secret Name
path: gitServices.bitbucket[0].secretName
x-descriptors:
- urn:alm:descriptor:io.kubernetes:Secret
- description: Enables users to work with repositories hosted on GitHub
(github.com or GitHub Enterprise).
displayName: GitHub
path: gitServices.github
- description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth
Client id and GitHub OAuth Client secret, that stored in `id` and `secret`
keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.'
displayName: Secret Name
path: gitServices.github[0].secretName
x-descriptors:
- urn:alm:descriptor:io.kubernetes:Secret
- description: Enables users to work with repositories hosted on GitLab
(gitlab.com or self-hosted).
displayName: GitLab
path: gitServices.gitlab
- description: 'Kubernetes secret, that contains Base64-encoded GitHub Application
id and GitLab Application Client secret, that stored in `id` and `secret`
keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.'
displayName: Secret Name
path: gitServices.gitlab[0].secretName
x-descriptors:
- urn:alm:descriptor:io.kubernetes:Secret
statusDescriptors:
- description: Specifies the current phase of the Che deployment.
displayName: ChePhase
@ -258,6 +301,48 @@ spec:
path: devWorkspace.enable
x-descriptors:
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
- description: A configuration that allows users to work with remote Git
repositories.
displayName: Git Services
path: gitServices
- description: Enables users to work with repositories hosted on Bitbucket
(bitbucket.org or self-hosted).
displayName: Bitbucket
path: gitServices.bitbucket
- description: 'Kubernetes secret, that contains Base64-encoded Bitbucket
OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application
link consumer key and Bitbucket Application link shared secret must
be stored in `private.key`, `consumer.key` and `shared_secret` keys
respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/.
For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer
secret must be stored in `id` and `secret` keys respectively. See the
following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.'
displayName: Secret Name
path: gitServices.bitbucket[0].secretName
x-descriptors:
- urn:alm:descriptor:io.kubernetes:Secret
- description: Enables users to work with repositories hosted on GitHub
(github.com or GitHub Enterprise).
displayName: GitHub
path: gitServices.github
- description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth
Client id and GitHub OAuth Client secret, that stored in `id` and `secret`
keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.'
displayName: Secret Name
path: gitServices.github[0].secretName
x-descriptors:
- urn:alm:descriptor:io.kubernetes:Secret
- description: Enables users to work with repositories hosted on GitLab
(gitlab.com or self-hosted).
displayName: GitLab
path: gitServices.gitlab
- description: 'Kubernetes secret, that contains Base64-encoded GitHub Application
id and GitLab Application Client secret, that stored in `id` and `secret`
keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.'
displayName: Secret Name
path: gitServices.gitlab[0].secretName
x-descriptors:
- urn:alm:descriptor:io.kubernetes:Secret
- description: Kubernetes Image Puller configuration
displayName: Kubernetes Image Puller
path: imagePuller
@ -472,6 +557,8 @@ spec:
resources:
- clusterrolebindings
- clusterroles
- roles
- rolebindings
verbs:
- list
- create
@ -479,16 +566,6 @@ spec:
- update
- get
- delete
- apiGroups:
- rbac.authorization.k8s.io
resources:
- roles
- rolebindings
verbs:
- get
- create
- update
- delete
- apiGroups:
- authorization.openshift.io
resources:
@ -700,26 +777,7 @@ spec:
- get
- update
- watch
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings
verbs:
- '*'
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings/finalizers
verbs:
- update
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings/status
verbs:
- get
- patch
- update
- list
- apiGroups:
- monitoring.coreos.com
resources:
@ -762,64 +820,37 @@ spec:
- get
- list
- watch
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings
- components
verbs:
- get
- list
- watch
- apiGroups:
- workspace.devfile.io
resources:
- devworkspaces
- devworkspacetemplates
verbs:
- create
- delete
- deletecollection
- patch
- update
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings
- components
verbs:
- create
- delete
- deletecollection
- patch
- update
- apiGroups:
- ""
resources:
- configmaps
- devworkspaceoperatorconfigs
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- patch
- update
- apiGroups:
- ""
- controller.devfile.io
resources:
- configmaps/status
- devworkspaceroutings/finalizers
verbs:
- update
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings/status
verbs:
- get
- patch
- update
- patch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- authentication.k8s.io
resources:
@ -832,230 +863,6 @@ spec:
- subjectaccessreviews
verbs:
- create
- apiGroups:
- ""
resourceNames:
- workspace-preferences-configmap
resources:
- configmaps
verbs:
- create
- delete
- get
- patch
- apiGroups:
- ""
resources:
- configmaps
- persistentvolumeclaims
- pods
- secrets
- serviceaccounts
verbs:
- '*'
- apiGroups:
- ""
resources:
- events
- namespaces
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods/exec
verbs:
- create
- apiGroups:
- ""
resourceNames:
- workspace-credentials-secret
resources:
- secrets
verbs:
- create
- delete
- get
- patch
- apiGroups:
- ""
resources:
- services
verbs:
- '*'
- apiGroups:
- admissionregistration.k8s.io
resources:
- mutatingwebhookconfigurations
- validatingwebhookconfigurations
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resourceNames:
- devworkspace-controller
resources:
- deployments/finalizers
verbs:
- update
- apiGroups:
- apps
- extensions
resources:
- deployments
verbs:
- get
- list
- watch
- apiGroups:
- apps
- extensions
resources:
- deployments
- replicasets
verbs:
- '*'
- apiGroups:
- apps
- extensions
resources:
- replicasets
verbs:
- get
- list
- watch
- apiGroups:
- authorization.k8s.io
resources:
- localsubjectaccessreviews
- subjectaccessreviews
verbs:
- create
- apiGroups:
- batch
resources:
- jobs
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- config.openshift.io
resourceNames:
- cluster
resources:
- proxies
verbs:
- get
- apiGroups:
- controller.devfile.io
resources:
- '*'
verbs:
- '*'
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings
verbs:
- '*'
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings/status
verbs:
- get
- patch
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- get
- update
- apiGroups:
- metrics.k8s.io
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- monitoring.coreos.com
resources:
- servicemonitors
verbs:
- create
- get
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- '*'
- apiGroups:
- oauth.openshift.io
resources:
- oauthclients
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterrolebindings
- clusterroles
- rolebindings
- roles
verbs:
- create
- get
- list
- update
- watch
- apiGroups:
- route.openshift.io
resources:
- routes
verbs:
- '*'
- apiGroups:
- route.openshift.io
resources:
- routes/custom-host
verbs:
- create
- apiGroups:
- workspace.devfile.io
resources:
- '*'
verbs:
- '*'
- nonResourceURLs:
- /metrics
verbs:
- get
serviceAccountName: che-operator
deployments:
- name: che-operator
@ -1093,15 +900,15 @@ spec:
- name: OPERATOR_NAME
value: che-operator
- name: CHE_VERSION
value: 7.53.0
value: 7.54.0
- name: RELATED_IMAGE_che_server
value: quay.io/eclipse/che-server@sha256:3a6a25a28fb742acb4729113fed92c63bc56b2c4daf8d93c6576689d7dd6a669
value: quay.io/eclipse/che-server@sha256:ed3b76026f9afc52b858190a10440ec121b0110c4c5fce6035d664cfa79e6b3c
- name: RELATED_IMAGE_dashboard
value: quay.io/eclipse/che-dashboard@sha256:db5c199ebff922a5fa9acccedfccee5b94e6109c1b1200c676788533bcef8363
value: quay.io/eclipse/che-dashboard@sha256:a77776fa65bea708fc1f7cd968e5d8fa53fab48b5065a0bedbbd162d5936a699
- name: RELATED_IMAGE_plugin_registry
value: quay.io/eclipse/che-plugin-registry@sha256:0b8df587b660df479e63510fedcd38b2d756d560dc0a5199588d37195f3386b2
value: quay.io/eclipse/che-plugin-registry@sha256:7e96b6abead4f89d28a2628ccfc89f5ac113dab601eec8813f7f8f9979a04353
- name: RELATED_IMAGE_devfile_registry
value: quay.io/eclipse/che-devfile-registry@sha256:db013e7e7e1d53245cde3ca1961e21f51c022c6b4c809f258002248f2c2a694a
value: quay.io/eclipse/che-devfile-registry@sha256:5f6eaf3ebcff47799da62112112a0630c3bb55ed81067d53e80b439fd8a56314
- name: RELATED_IMAGE_che_tls_secrets_creation_job
value: quay.io/eclipse/che-tls-secret-creator@sha256:54df0ccf598d230e278d512c3b44bdf24edb280f71da32643db46e0120bfaee0
- name: RELATED_IMAGE_postgres
@ -1112,8 +919,6 @@ spec:
value: quay.io/eclipse/che--traefik@sha256:4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3
- name: RELATED_IMAGE_single_host_gateway_config_sidecar
value: quay.io/che-incubator/configbump@sha256:175ff2ba1bd74429de192c0a9facf39da5699c6da9f151bd461b3dc8624dd532
- name: RELATED_IMAGE_devworkspace_controller
value: quay.io/devfile/devworkspace-controller@sha256:b1903b796fc6bc91125b8a6cf58dfa2cc21706d16bdd5a25a25ff2da83f47705
- name: RELATED_IMAGE_gateway_authentication_sidecar
value: quay.io/openshift/origin-oauth-proxy@sha256:0e72ed64cdf76828392ef8cfe4ee49d644a013ac00ff1590d6c53774d77615e3
- name: RELATED_IMAGE_gateway_authorization_sidecar
@ -1190,12 +995,12 @@ spec:
value: quay.io/eclipse/che-plugin-sidecar@sha256:2ba8fffe6f2d64f82896367a34fdb657672984548c7904f906178e8e08294277
- name: RELATED_IMAGE_che_plugin_sidecar_plugin_registry_image_IBZWQYJSGU3DUYTCGQYDIZTGMFQTCMRVGY2WEZLCGEZGENDDMQ4DCNRQMNTGCM3GMYZWKZRTMJSTIMRQGQZTAYJWGU3DEZRRMZSTIOBWGM4WGYTGGFTA____
value: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f
- name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUNJQGI3DMMDFME2DMNLGGI4TQMLCGUZGGZJYMNTGENJTGFQWKMRTHAYDGN3GME2GCY3BMJRWINBVMMZTKOJWGM2TAOLCGA4DKODGMI3Q____
value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7
- name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUYRWGRQTIMBRHA3WMN3BMJSTKNTGHFTDIZDFMRSTIYZRGE4TSZBYG5SWIYLEHAYDMZJSMVRTIOBQGJTGCZLCGJRGINJQMQYWGZDGHFQQ____
value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a
- name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNRRGA4WENJVHAYTGY3EHE4DOOJUMMZWCZRVMJSDAN3EGBSDGMDBMRSWGNTEGUYDINJWGRSDQNBSMQ3TSZBZGVTDANZTMIZTIZLGMMYQ____
value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1
- name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUOBVGNRTMN3DGA3TMNZTME4DONZYGI3WKMDCGU4GEZBXHE2GIYTCGQ3WKOJSG42DONJVME3DSYRWGUZWEYJRMRQTMNLFHEYTKNBSGA4A____
value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208
- name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUZRXMI2DSZBUG43WEZBTGIYTAZRSHEYDQMBXMUZWKMLCGBQTIYZWMQYDENDDGQ4DENBRMI3GKZRUGBTDANLEMI4TONDCHFSDEMJWGIYQ____
value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621
- name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNDCMQYDMMBYHEZTINTFMQ4DGMZRMQ4GCYTCMZSTAZBZMYYWMYTFHFTDEODEG4ZGCZBRG42TENJYGE3TGMDEMRSTQM3GGRSWGOJQMQ3A____
value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6
- name: RELATED_IMAGE_che_editor_jupyter_plugin_registry_image_IBZWQYJSGU3DUOBTGQZTSYLFHFSWIY3BMEZWCOJXGUZTMNZUGIZTCNLBG44TCMTGHEZWKNBZHFTDIOJYGQ3WIYJQHE2GGNBYGAYDGMLFMFSTIYTBGQ3Q____
value: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47
- name: RELATED_IMAGE_dirigible_openshift_plugin_registry_image_IBZWQYJSGU3DUMZTGY2TMMZVMQYWKMBUGAZTMOJXMRSWCMBWG42GEYTCMRRTONBZMM2GEZJSMRRDEOJYGE4GCOJTMI4GKMLFGUZWGM3DGUYTINBRGEZQ____
@ -1207,15 +1012,17 @@ spec:
- name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNJTMNSWGNJYMRSDCOJQMRSDCZJQGYYTAMBUG44GCZJYG44WIN3DGI4GCYTEHBTGGOBYGNSDKZTEMY2WEZJTMVRDMZJZGQZWMZJVMU3Q____
value: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7
- name: RELATED_IMAGE_che_code_plugin_registry_image_NFXHG2LEMVZHG___
value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44
value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966
- name: RELATED_IMAGE_che_code_plugin_registry_image_IBZWQYJSGU3DUNTBHFRTCZJXMIZTMYTBMJSTINLDGRSTONRRMM2WKNLFGAZWGMBQGU2DQNZZGMZWGMZRMI2WMMRXMM3DONTGMI4DGZRSMEZDEN3GGZTA____
value: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f
- name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNBZHE4DMZTFMQ3WMNDFGI2TKNLBGE2TIYZYGU3DOOJVMM3DQOLCHAZTMNZSGA3GENRTMVRTGNZUGI3GMZJSMM4GKNBTMY2TMMZQMU2A____
value: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4
- name: RELATED_IMAGE_che_idea_plugin_registry_image_NZSXQ5A_
value: quay.io/che-incubator/che-idea@sha256:2a88672127b5cb4a583402250b15078a8bb8f2f7d400e3f6af2aae795f46018a
value: quay.io/che-incubator/che-idea@sha256:f6a10da8889b342945ff3a18a561b2c276518ddf5a6a90abd8589d251d38125f
- name: RELATED_IMAGE_che_idea_plugin_registry_image_IBZWQYJSGU3DUYRWMM4TGZJYGNRWMMRRGU3TAZLCGYYDIOJQGBSWCOBRG5TDIOBTGZTDIMBVGQZDENZUMJRDMY3BMZRGMNLEMI3GENLBG5TDAYRWHFRA____
value: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b
- name: RELATED_IMAGE_che_pycharm_plugin_registry_image_NZSXQ5A_
value: quay.io/che-incubator/che-pycharm@sha256:8d403ceaaa3e38a813fbc8398e48a3dd410499907daf1e544fd2532ccee9289a
value: quay.io/che-incubator/che-pycharm@sha256:35c286bf0d98f5cf66f15b73379741f770f7d840229e78a3a8a61fa49af38a83
- name: RELATED_IMAGE_che_pycharm_plugin_registry_image_IBZWQYJSGU3DUYZQMU3GMMLCGAZTAZDDGAYWKZBTMJQWCNJUHAYTIOBSMM3GCYRWGI2DKNTFHE2DGNDDGBTDQYRVGRSWEOLDMQZGEOBYGU2GGNJZG5RA____
value: quay.io/che-incubator/che-pycharm@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b
- name: RELATED_IMAGE_che_buildah_base_plugin_registry_image_IBZWQYJSGU3DUNBRG4ZDAM3EHA3DEOLFMRSDSMTGGE4DOYLGMQZWKYTCGNSDQZDDGI4DGMZYMQZTIOBQHFSWENZVMZTGGMTFGA4GCNBQGBTDQZBVGZRA____
@ -1225,7 +1032,7 @@ spec:
- name: RELATED_IMAGE_che_buildkit_base_plugin_registry_image_IBZWQYJSGU3DUZLGMZQTSODEMQZGGZLEGMYGENJSGBRDENLBMZTGMMLBHA4DAZBRGIYWGZRWMIZWMODBMI2DEYJVGE2DSZLBMRQTINTCME3TSM3DMU4Q____
value: quay.io/eclipse/che-buildkit-base@sha256:effa98dd2ced30b520b25afff1a880d121cf6b3f8ab42a5149eada46ba793ce9
- name: RELATED_IMAGE_che_code_devfile_registry_image_NFXHG2LEMVZHG___
value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44
value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966
- name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGBSTCOBZMQ4Q____
value: quay.io/devfile/universal-developer-image@sha256:66369ff476b6bd035f5a992d505b0e2a624f46a7d180acb61c41086a37739eea
- name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGMYDKNLFGZSA____
@ -1240,15 +1047,15 @@ spec:
value: quay.io/eclipse/che--centos--mysql-57-centos7@sha256:e08ee4d43b7356607685b69bde6335e27cf20c020f345b6c6c59400183882764
- name: RELATED_IMAGE_che__mariadb_devfile_registry_image_GEYC4NZOGEWTKYJYGAYDSMZWHFSWKNJXMM4DKYRWMY2GCMBYGQYDMMJUG5RGIOLDGUYDKY3EMU3GEOBSGUYGIMJWMEZDOZBSME2WMZLCMZSGKYLEG4______
value: quay.io/eclipse/che--mariadb@sha256:5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7
- name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKMZOGA______
value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a
- name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKMZOGA______
value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1
- name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKMZOGA______
value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7
- name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKNBOGA______
value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621
- name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKNBOGA______
value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6
- name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKNBOGA______
value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208
- name: RELATED_IMAGE_ubi_minimal_devfile_registry_image_
value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7
image: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e
value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:e58664de16551db29fb0eaaeb3c4a44eaf95ad89a5b2399a1107041c4f2d6d34
image: quay.io/eclipse/che-operator@sha256:2c61b1a8dfe3010a2df42481b969a674d2ee0ca3097e0319d0be1199de945fd6
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 10
@ -1323,7 +1130,12 @@ spec:
resources:
- jobs
verbs:
- '*'
- create
- delete
- get
- update
- watch
- list
- apiGroups:
- route.openshift.io
resources:
@ -1336,15 +1148,15 @@ spec:
resources:
- roles
- rolebindings
verbs:
- '*'
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterroles
- clusterrolebindings
verbs:
- '*'
- list
- create
- watch
- update
- get
- delete
- apiGroups:
- ""
resources:
@ -1468,6 +1280,37 @@ spec:
- patch
- update
- watch
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
serviceAccountName: che-operator
strategy: deployment
installModes:
@ -1499,8 +1342,29 @@ spec:
maturity: stable
provider:
name: Eclipse Foundation
version: 7.53.0
version: 7.54.0
webhookdefinitions:
- admissionReviewVersions:
- v1
- v1beta1
containerPort: 443
deploymentName: che-operator
failurePolicy: Fail
generateName: vchecluster.kb.io
rules:
- apiGroups:
- org.eclipse.che
apiVersions:
- v2
operations:
- CREATE
- UPDATE
resources:
- checlusters
sideEffects: None
targetPort: 9443
type: ValidatingAdmissionWebhook
webhookPath: /validate-org-eclipse-che-v2-checluster
- admissionReviewVersions:
- v1
- v2
@ -1514,9 +1378,9 @@ spec:
type: ConversionWebhook
webhookPath: /convert
relatedImages:
- name: che-operator-7.53.0
image: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e
# tag: quay.io/eclipse/che-operator:7.53.0
- name: che-operator-7.54.0
image: quay.io/eclipse/che-operator@sha256:2c61b1a8dfe3010a2df42481b969a674d2ee0ca3097e0319d0be1199de945fd6
# tag: quay.io/eclipse/che-operator:7.54.0
- name: kube-rbac-proxy-v0.11.0
image: quay.io/brancz/kube-rbac-proxy@sha256:b62289c3f3f883ee76dd4e8879042dd19abff743340e451cb59f9654fc472e4f
# tag: quay.io/brancz/kube-rbac-proxy:v0.11.0
@ -1526,9 +1390,6 @@ spec:
- name: header-rewrite-proxy-latest
image: quay.io/che-incubator/header-rewrite-proxy@sha256:bd7873b8feef35f218f54c6251ea224bea2c8bf202a328230019a0ba2941245d
# tag: quay.io/che-incubator/header-rewrite-proxy:latest
- name: devworkspace-controller-v0.15.2
image: quay.io/devfile/devworkspace-controller@sha256:b1903b796fc6bc91125b8a6cf58dfa2cc21706d16bdd5a25a25ff2da83f47705
# tag: quay.io/devfile/devworkspace-controller:v0.15.2
- name: che--centos--postgresql-13-centos7-1-71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2
image: quay.io/eclipse/che--centos--postgresql-13-centos7@sha256:71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2
# tag: quay.io/eclipse/che--centos--postgresql-13-centos7:1-71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2
@ -1538,18 +1399,18 @@ spec:
- name: che--traefik-v2.8.1-4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3
image: quay.io/eclipse/che--traefik@sha256:4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3
# tag: quay.io/eclipse/che--traefik:v2.8.1-4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3
- name: che-dashboard-7.53.0
image: quay.io/eclipse/che-dashboard@sha256:db5c199ebff922a5fa9acccedfccee5b94e6109c1b1200c676788533bcef8363
# tag: quay.io/eclipse/che-dashboard:7.53.0
- name: che-devfile-registry-7.53.0
image: quay.io/eclipse/che-devfile-registry@sha256:db013e7e7e1d53245cde3ca1961e21f51c022c6b4c809f258002248f2c2a694a
# tag: quay.io/eclipse/che-devfile-registry:7.53.0
- name: che-plugin-registry-7.53.0
image: quay.io/eclipse/che-plugin-registry@sha256:0b8df587b660df479e63510fedcd38b2d756d560dc0a5199588d37195f3386b2
# tag: quay.io/eclipse/che-plugin-registry:7.53.0
- name: che-server-7.53.0
image: quay.io/eclipse/che-server@sha256:3a6a25a28fb742acb4729113fed92c63bc56b2c4daf8d93c6576689d7dd6a669
# tag: quay.io/eclipse/che-server:7.53.0
- name: che-dashboard-7.54.0
image: quay.io/eclipse/che-dashboard@sha256:a77776fa65bea708fc1f7cd968e5d8fa53fab48b5065a0bedbbd162d5936a699
# tag: quay.io/eclipse/che-dashboard:7.54.0
- name: che-devfile-registry-7.54.0
image: quay.io/eclipse/che-devfile-registry@sha256:5f6eaf3ebcff47799da62112112a0630c3bb55ed81067d53e80b439fd8a56314
# tag: quay.io/eclipse/che-devfile-registry:7.54.0
- name: che-plugin-registry-7.54.0
image: quay.io/eclipse/che-plugin-registry@sha256:7e96b6abead4f89d28a2628ccfc89f5ac113dab601eec8813f7f8f9979a04353
# tag: quay.io/eclipse/che-plugin-registry:7.54.0
- name: che-server-7.54.0
image: quay.io/eclipse/che-server@sha256:ed3b76026f9afc52b858190a10440ec121b0110c4c5fce6035d664cfa79e6b3c
# tag: quay.io/eclipse/che-server:7.54.0
- name: che-tls-secret-creator-alpine-01a4c34
image: quay.io/eclipse/che-tls-secret-creator@sha256:54df0ccf598d230e278d512c3b44bdf24edb280f71da32643db46e0120bfaee0
# tag: quay.io/eclipse/che-tls-secret-creator:alpine-01a4c34
@ -1640,15 +1501,15 @@ spec:
- name: che-plugin-sidecar-@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f
image: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f
# tag: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f
- name: che-theia-@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7
image: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7
# tag: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7
- name: che-machine-exec-@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a
image: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a
# tag: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a
- name: che-theia-endpoint-runtime-binary-@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1
image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1
# tag: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1
- name: che-theia-@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208
image: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208
# tag: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208
- name: che-machine-exec-@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621
image: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621
# tag: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621
- name: che-theia-endpoint-runtime-binary-@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6
image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6
# tag: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6
- name: che-editor-jupyter-@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47
image: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47
# tag: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47
@ -1665,19 +1526,22 @@ spec:
image: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7
# tag: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7
- name: che-code-insiders
image: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44
image: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966
# tag: quay.io/che-incubator/che-code:insiders
- name: che-code-@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f
image: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f
# tag: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f
- name: universal-developer-image-@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4
image: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4
# tag: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4
- name: che-idea-next
image: quay.io/che-incubator/che-idea@sha256:2a88672127b5cb4a583402250b15078a8bb8f2f7d400e3f6af2aae795f46018a
image: quay.io/che-incubator/che-idea@sha256:f6a10da8889b342945ff3a18a561b2c276518ddf5a6a90abd8589d251d38125f
# tag: quay.io/che-incubator/che-idea:next
- name: che-idea-@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b
image: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b
# tag: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b
- name: che-pycharm-next
image: quay.io/che-incubator/che-pycharm@sha256:8d403ceaaa3e38a813fbc8398e48a3dd410499907daf1e544fd2532ccee9289a
image: quay.io/che-incubator/che-pycharm@sha256:35c286bf0d98f5cf66f15b73379741f770f7d840229e78a3a8a61fa49af38a83
# tag: quay.io/che-incubator/che-pycharm:next
- name: che-pycharm-@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b
image: quay.io/che-incubator/che-pycharm@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b
@ -1712,15 +1576,15 @@ spec:
- name: che--mariadb-10.7.1-5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7
image: quay.io/eclipse/che--mariadb@sha256:5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7
# tag: quay.io/eclipse/che--mariadb:10.7.1-5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7
- name: che-machine-exec-7.53.0
image: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a
# tag: quay.io/eclipse/che-machine-exec:7.53.0
- name: che-theia-endpoint-runtime-binary-7.53.0
image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1
# tag: quay.io/eclipse/che-theia-endpoint-runtime-binary:7.53.0
- name: che-theia-7.53.0
image: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7
# tag: quay.io/eclipse/che-theia:7.53.0
- name: che-machine-exec-7.54.0
image: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621
# tag: quay.io/eclipse/che-machine-exec:7.54.0
- name: che-theia-endpoint-runtime-binary-7.54.0
image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6
# tag: quay.io/eclipse/che-theia-endpoint-runtime-binary:7.54.0
- name: che-theia-7.54.0
image: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208
# tag: quay.io/eclipse/che-theia:7.54.0
- name: ubi-minimal-
image: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7
image: registry.access.redhat.com/ubi8/ubi-minimal@sha256:e58664de16551db29fb0eaaeb3c4a44eaf95ad89a5b2399a1107041c4f2d6d34
# tag: registry.access.redhat.com/ubi8/ubi-minimal

View File

@ -1138,6 +1138,81 @@ spec:
required:
- enable
type: object
gitServices:
description: A configuration that allows users to work with remote
Git repositories.
properties:
bitbucket:
description: Enables users to work with repositories hosted
on Bitbucket (bitbucket.org or self-hosted).
items:
description: BitBucketService enables users to work with repositories
hosted on Bitbucket (bitbucket.org or self-hosted).
properties:
endpoint:
default: https://bitbucket.org
description: Bitbucket server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded
Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0:
private key, Bitbucket Application link consumer key
and Bitbucket Application link shared secret must be
stored in `private.key`, `consumer.key` and `shared_secret`
keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/.
For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket
OAuth consumer secret must be stored in `id` and `secret`
keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.'
type: string
required:
- secretName
type: object
type: array
github:
description: Enables users to work with repositories hosted
on GitHub (github.com or GitHub Enterprise).
items:
description: GitHubService enables users to work with repositories
hosted on GitHub (GitHub.com or GitHub Enterprise).
properties:
endpoint:
default: https://github.com
description: GitHub server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded
GitHub OAuth Client id and GitHub OAuth Client secret,
that stored in `id` and `secret` keys respectively.
See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.'
type: string
required:
- endpoint
- secretName
type: object
type: array
gitlab:
description: Enables users to work with repositories hosted
on GitLab (gitlab.com or self-hosted).
items:
description: GitLabService enables users to work with repositories
hosted on GitLab (gitlab.com or self-hosted).
properties:
endpoint:
default: https://gitlab.com
description: GitLab server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded
GitHub Application id and GitLab Application Client
secret, that stored in `id` and `secret` keys respectively.
See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.'
type: string
required:
- endpoint
- secretName
type: object
type: array
type: object
imagePuller:
description: Kubernetes Image Puller configuration
properties:
@ -1266,6 +1341,11 @@ spec:
images involved in a Che deployment. This is particularly
useful to install Eclipse Che in a restricted environment.
type: string
allowAutoProvisionUserNamespace:
description: Indicates if is allowed to automatically create
a user namespace. If it set to false, then user namespace
must be pre-created by a cluster administrator.
type: boolean
allowUserDefinedWorkspaceNamespaces:
description: Deprecated. The value of this flag is ignored.
Defines that a user is allowed to specify a Kubernetes namespace,
@ -4242,8 +4322,7 @@ spec:
defining `nonProxyHosts` in a custom resource leads
to merging non-proxy hosts lists from the cluster
proxy configuration, and the ones defined in the custom
resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.
See also the `proxyURL` fields.'
resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.'
items:
type: string
type: array
@ -4256,8 +4335,7 @@ spec:
Operator respects OpenShift cluster-wide proxy configuration,
defining `url` in a custom resource leads to overriding
the cluster proxy configuration. See the following
page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.
See also the `proxyPort` and `nonProxyHosts` fields.'
page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.'
type: string
type: object
type: object
@ -4767,219 +4845,6 @@ spec:
devWorkspace:
description: DevWorkspace Operator configuration.
properties:
deployment:
description: Deployment override options.
properties:
containers:
description: List of containers belonging to the pod.
items:
description: Container custom settings.
properties:
env:
description: List of environment variables to
set in the container.
items:
description: EnvVar represents an environment
variable present in a Container.
properties:
name:
description: Name of the environment variable.
Must be a C_IDENTIFIER.
type: string
value:
description: 'Variable references $(VAR_NAME)
are expanded using the previous defined
environment variables in the container
and any service environment variables.
If a variable cannot be resolved, the
reference in the input string will be
unchanged. The $(VAR_NAME) syntax can
be escaped with a double $$, ie: $$(VAR_NAME).
Escaped references will never be expanded,
regardless of whether the variable exists
or not. Defaults to "".'
type: string
valueFrom:
description: Source for the environment
variable's value. Cannot be used if value
is not empty.
properties:
configMapKeyRef:
description: Selects a key of a ConfigMap.
properties:
key:
description: The key to select.
type: string
name:
description: 'Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
TODO: Add other useful fields.
apiVersion, kind, uid?'
type: string
optional:
description: Specify whether the
ConfigMap or its key must be defined
type: boolean
required:
- key
type: object
fieldRef:
description: 'Selects a field of the
pod: supports metadata.name, metadata.namespace,
`metadata.labels[''<KEY>'']`, `metadata.annotations[''<KEY>'']`,
spec.nodeName, spec.serviceAccountName,
status.hostIP, status.podIP, status.podIPs.'
properties:
apiVersion:
description: Version of the schema
the FieldPath is written in terms
of, defaults to "v1".
type: string
fieldPath:
description: Path of the field to
select in the specified API version.
type: string
required:
- fieldPath
type: object
resourceFieldRef:
description: 'Selects a resource of
the container: only resources limits
and requests (limits.cpu, limits.memory,
limits.ephemeral-storage, requests.cpu,
requests.memory and requests.ephemeral-storage)
are currently supported.'
properties:
containerName:
description: 'Container name: required
for volumes, optional for env
vars'
type: string
divisor:
anyOf:
- type: integer
- type: string
description: Specifies the output
format of the exposed resources,
defaults to "1"
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
resource:
description: 'Required: resource
to select'
type: string
required:
- resource
type: object
secretKeyRef:
description: Selects a key of a secret
in the pod's namespace
properties:
key:
description: The key of the secret
to select from. Must be a valid
secret key.
type: string
name:
description: 'Name of the referent.
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
TODO: Add other useful fields.
apiVersion, kind, uid?'
type: string
optional:
description: Specify whether the
Secret or its key must be defined
type: boolean
required:
- key
type: object
type: object
required:
- name
type: object
type: array
image:
description: Container image. Omit it or leave
it empty to use the default container image
provided by the Operator.
type: string
imagePullPolicy:
description: Image pull policy. Default value
is `Always` for `nightly`, `next` or `latest`
images, and `IfNotPresent` in other cases.
enum:
- Always
- IfNotPresent
- Never
type: string
name:
description: Container name.
type: string
resources:
description: Compute resources required by this
container.
properties:
limits:
description: Describes the maximum amount
of compute resources allowed.
properties:
cpu:
anyOf:
- type: integer
- type: string
description: CPU, in cores. (500m = .5
cores)
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
memory:
anyOf:
- type: integer
- type: string
description: Memory, in bytes. (500Gi
= 500GiB = 500 * 1024 * 1024 * 1024)
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
request:
description: Describes the minimum amount
of compute resources required.
properties:
cpu:
anyOf:
- type: integer
- type: string
description: CPU, in cores. (500m = .5
cores)
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
memory:
anyOf:
- type: integer
- type: string
description: Memory, in bytes. (500Gi
= 500GiB = 500 * 1024 * 1024 * 1024)
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
type: object
type: object
type: array
securityContext:
description: Security options the pod should run with.
properties:
fsGroup:
description: A special supplemental group that applies
to all containers in a pod. The default value
is `1724`.
format: int64
type: integer
runAsUser:
description: The UID to run the entrypoint of the
container process. The default value is `1724`.
format: int64
type: integer
type: object
type: object
runningLimit:
description: The maximum number of running workspaces per
user.
@ -5540,6 +5405,7 @@ spec:
name: universal-developer-image
defaultEditor: eclipse/che-theia/latest
defaultNamespace:
autoProvision: true
template: <username>-che
secondsOfInactivityBeforeIdling: 1800
secondsOfRunBeforeIdling: -1
@ -7060,9 +6926,16 @@ spec:
type: string
defaultNamespace:
default:
autoProvision: true
template: <username>-che
description: User's default namespace.
properties:
autoProvision:
default: true
description: Indicates if is allowed to automatically create
a user namespace. If it set to false, then user namespace
must be pre-created by a cluster administrator.
type: boolean
template:
default: <username>-che
description: If you don't create the user namespaces in
@ -7211,6 +7084,81 @@ spec:
type: string
type: object
type: object
gitServices:
description: A configuration that allows users to work with remote
Git repositories.
properties:
bitbucket:
description: Enables users to work with repositories hosted
on Bitbucket (bitbucket.org or self-hosted).
items:
description: BitBucketService enables users to work with repositories
hosted on Bitbucket (bitbucket.org or self-hosted).
properties:
endpoint:
default: https://bitbucket.org
description: Bitbucket server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded
Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0:
private key, Bitbucket Application link consumer key
and Bitbucket Application link shared secret must be
stored in `private.key`, `consumer.key` and `shared_secret`
keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/.
For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket
OAuth consumer secret must be stored in `id` and `secret`
keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.'
type: string
required:
- secretName
type: object
type: array
github:
description: Enables users to work with repositories hosted
on GitHub (github.com or GitHub Enterprise).
items:
description: GitHubService enables users to work with repositories
hosted on GitHub (GitHub.com or GitHub Enterprise).
properties:
endpoint:
default: https://github.com
description: GitHub server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded
GitHub OAuth Client id and GitHub OAuth Client secret,
that stored in `id` and `secret` keys respectively.
See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.'
type: string
required:
- endpoint
- secretName
type: object
type: array
gitlab:
description: Enables users to work with repositories hosted
on GitLab (gitlab.com or self-hosted).
items:
description: GitLabService enables users to work with repositories
hosted on GitLab (gitlab.com or self-hosted).
properties:
endpoint:
default: https://gitlab.com
description: GitLab server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded
GitHub Application id and GitLab Application Client
secret, that stored in `id` and `secret` keys respectively.
See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.'
type: string
required:
- endpoint
- secretName
type: object
type: array
type: object
networking:
default:
auth:

View File

@ -1,121 +1,443 @@
--- /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/generated/openshift/org.eclipse.che_checlusters.yaml 2022-09-02 08:44:51.945214027 +0000
+++ /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml 2022-09-02 08:44:51.953214136 +0000
@@ -2199,6 +2199,10 @@
description: Deprecated in favor of `disableInternalClusterSVCNames`.
type: boolean
workspaceDefaultComponents:
+ default:
+ - container:
+ image: quay.io/devfile/universal-developer-image:ubi8-38da5c2
+ name: universal-developer-image
description: Default components applied to DevWorkspaces. These
default components are meant to be used when a Devfile does
not contain any components.
@@ -3700,6 +3704,7 @@
type: object
type: array
workspaceDefaultEditor:
+ default: eclipse/che-theia/latest
description: The default editor to workspace create with. It
could be a plugin ID or a URI. The plugin ID must have `publisher/plugin/version`.
The URI must start from `http`.
@@ -3780,6 +3785,14 @@
description: Configuration settings related to the persistent storage
used by the Che installation.
properties:
+ perWorkspaceStrategyPVCStorageClassName:
+ description: Storage class for the Persistent Volume Claims
+ dedicated to the Che workspaces. When omitted or left blank,
+ a default storage class is used.
+ type: string
+ perWorkspaceStrategyPvcClaimSize:
+ description: Size of the persistent volume claim for workspaces.
+ type: string
postgresPVCStorageClassName:
description: Storage class for the Persistent Volume Claim dedicated
to the PostgreSQL database. When omitted or left blank, a
@@ -5521,15 +5534,24 @@
--- /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/generated/openshift/org.eclipse.che_checlusters.yaml 2022-09-22 20:03:34.712796204 +0000
+++ /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml 2022-09-22 20:03:34.720796215 +0000
@@ -1138,6 +1138,81 @@
required:
- enable
type: object
devEnvironments:
default:
+ defaultComponents:
+ - container:
+ image: quay.io/devfile/universal-developer-image:ubi8-38da5c2
+ name: universal-developer-image
+ defaultEditor: eclipse/che-theia/latest
+ gitServices:
+ description: A configuration that allows users to work with remote
+ Git repositories.
+ properties:
+ bitbucket:
+ description: Enables users to work with repositories hosted
+ on Bitbucket (bitbucket.org or self-hosted).
+ items:
+ description: BitBucketService enables users to work with repositories
+ hosted on Bitbucket (bitbucket.org or self-hosted).
+ properties:
+ endpoint:
+ default: https://bitbucket.org
+ description: Bitbucket server endpoint URL.
+ type: string
+ secretName:
+ description: 'Kubernetes secret, that contains Base64-encoded
+ Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0:
+ private key, Bitbucket Application link consumer key
+ and Bitbucket Application link shared secret must be
+ stored in `private.key`, `consumer.key` and `shared_secret`
+ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/.
+ For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket
+ OAuth consumer secret must be stored in `id` and `secret`
+ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.'
+ type: string
+ required:
+ - secretName
+ type: object
+ type: array
+ github:
+ description: Enables users to work with repositories hosted
+ on GitHub (github.com or GitHub Enterprise).
+ items:
+ description: GitHubService enables users to work with repositories
+ hosted on GitHub (GitHub.com or GitHub Enterprise).
+ properties:
+ endpoint:
+ default: https://github.com
+ description: GitHub server endpoint URL.
+ type: string
+ secretName:
+ description: 'Kubernetes secret, that contains Base64-encoded
+ GitHub OAuth Client id and GitHub OAuth Client secret,
+ that stored in `id` and `secret` keys respectively.
+ See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.'
+ type: string
+ required:
+ - endpoint
+ - secretName
+ type: object
+ type: array
+ gitlab:
+ description: Enables users to work with repositories hosted
+ on GitLab (gitlab.com or self-hosted).
+ items:
+ description: GitLabService enables users to work with repositories
+ hosted on GitLab (gitlab.com or self-hosted).
+ properties:
+ endpoint:
+ default: https://gitlab.com
+ description: GitLab server endpoint URL.
+ type: string
+ secretName:
+ description: 'Kubernetes secret, that contains Base64-encoded
+ GitHub Application id and GitLab Application Client
+ secret, that stored in `id` and `secret` keys respectively.
+ See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.'
+ type: string
+ required:
+ - endpoint
+ - secretName
+ type: object
+ type: array
+ type: object
imagePuller:
description: Kubernetes Image Puller configuration
properties:
@@ -1266,6 +1341,11 @@
images involved in a Che deployment. This is particularly
useful to install Eclipse Che in a restricted environment.
type: string
+ allowAutoProvisionUserNamespace:
+ description: Indicates if is allowed to automatically create
+ a user namespace. If it set to false, then user namespace
+ must be pre-created by a cluster administrator.
+ type: boolean
allowUserDefinedWorkspaceNamespaces:
description: Deprecated. The value of this flag is ignored.
Defines that a user is allowed to specify a Kubernetes namespace,
@@ -4242,8 +4322,7 @@
defining `nonProxyHosts` in a custom resource leads
to merging non-proxy hosts lists from the cluster
proxy configuration, and the ones defined in the custom
- resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.
- See also the `proxyURL` fields.'
+ resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.'
items:
type: string
type: array
@@ -4256,8 +4335,7 @@
Operator respects OpenShift cluster-wide proxy configuration,
defining `url` in a custom resource leads to overriding
the cluster proxy configuration. See the following
- page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.
- See also the `proxyPort` and `nonProxyHosts` fields.'
+ page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.'
type: string
type: object
type: object
@@ -4767,219 +4845,6 @@
devWorkspace:
description: DevWorkspace Operator configuration.
properties:
- deployment:
- description: Deployment override options.
- properties:
- containers:
- description: List of containers belonging to the pod.
- items:
- description: Container custom settings.
- properties:
- env:
- description: List of environment variables to
- set in the container.
- items:
- description: EnvVar represents an environment
- variable present in a Container.
- properties:
- name:
- description: Name of the environment variable.
- Must be a C_IDENTIFIER.
- type: string
- value:
- description: 'Variable references $(VAR_NAME)
- are expanded using the previous defined
- environment variables in the container
- and any service environment variables.
- If a variable cannot be resolved, the
- reference in the input string will be
- unchanged. The $(VAR_NAME) syntax can
- be escaped with a double $$, ie: $$(VAR_NAME).
- Escaped references will never be expanded,
- regardless of whether the variable exists
- or not. Defaults to "".'
- type: string
- valueFrom:
- description: Source for the environment
- variable's value. Cannot be used if value
- is not empty.
- properties:
- configMapKeyRef:
- description: Selects a key of a ConfigMap.
- properties:
- key:
- description: The key to select.
- type: string
- name:
- description: 'Name of the referent.
- More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
- TODO: Add other useful fields.
- apiVersion, kind, uid?'
- type: string
- optional:
- description: Specify whether the
- ConfigMap or its key must be defined
- type: boolean
- required:
- - key
- type: object
- fieldRef:
- description: 'Selects a field of the
- pod: supports metadata.name, metadata.namespace,
- `metadata.labels[''<KEY>'']`, `metadata.annotations[''<KEY>'']`,
- spec.nodeName, spec.serviceAccountName,
- status.hostIP, status.podIP, status.podIPs.'
- properties:
- apiVersion:
- description: Version of the schema
- the FieldPath is written in terms
- of, defaults to "v1".
- type: string
- fieldPath:
- description: Path of the field to
- select in the specified API version.
- type: string
- required:
- - fieldPath
- type: object
- resourceFieldRef:
- description: 'Selects a resource of
- the container: only resources limits
- and requests (limits.cpu, limits.memory,
- limits.ephemeral-storage, requests.cpu,
- requests.memory and requests.ephemeral-storage)
- are currently supported.'
- properties:
- containerName:
- description: 'Container name: required
- for volumes, optional for env
- vars'
- type: string
- divisor:
- anyOf:
- - type: integer
- - type: string
- description: Specifies the output
- format of the exposed resources,
- defaults to "1"
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- resource:
- description: 'Required: resource
- to select'
- type: string
- required:
- - resource
- type: object
- secretKeyRef:
- description: Selects a key of a secret
- in the pod's namespace
- properties:
- key:
- description: The key of the secret
- to select from. Must be a valid
- secret key.
- type: string
- name:
- description: 'Name of the referent.
- More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
- TODO: Add other useful fields.
- apiVersion, kind, uid?'
- type: string
- optional:
- description: Specify whether the
- Secret or its key must be defined
- type: boolean
- required:
- - key
- type: object
- type: object
- required:
- - name
- type: object
- type: array
- image:
- description: Container image. Omit it or leave
- it empty to use the default container image
- provided by the Operator.
- type: string
- imagePullPolicy:
- description: Image pull policy. Default value
- is `Always` for `nightly`, `next` or `latest`
- images, and `IfNotPresent` in other cases.
- enum:
- - Always
- - IfNotPresent
- - Never
- type: string
- name:
- description: Container name.
- type: string
- resources:
- description: Compute resources required by this
- container.
- properties:
- limits:
- description: Describes the maximum amount
- of compute resources allowed.
- properties:
- cpu:
- anyOf:
- - type: integer
- - type: string
- description: CPU, in cores. (500m = .5
- cores)
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- memory:
- anyOf:
- - type: integer
- - type: string
- description: Memory, in bytes. (500Gi
- = 500GiB = 500 * 1024 * 1024 * 1024)
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- type: object
- request:
- description: Describes the minimum amount
- of compute resources required.
- properties:
- cpu:
- anyOf:
- - type: integer
- - type: string
- description: CPU, in cores. (500m = .5
- cores)
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- memory:
- anyOf:
- - type: integer
- - type: string
- description: Memory, in bytes. (500Gi
- = 500GiB = 500 * 1024 * 1024 * 1024)
- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
- x-kubernetes-int-or-string: true
- type: object
- type: object
- type: object
- type: array
- securityContext:
- description: Security options the pod should run with.
- properties:
- fsGroup:
- description: A special supplemental group that applies
- to all containers in a pod. The default value
- is `1724`.
- format: int64
- type: integer
- runAsUser:
- description: The UID to run the entrypoint of the
- container process. The default value is `1724`.
- format: int64
- type: integer
- type: object
- type: object
runningLimit:
description: The maximum number of running workspaces per
user.
@@ -5540,6 +5405,7 @@
name: universal-developer-image
defaultEditor: eclipse/che-theia/latest
defaultNamespace:
+ autoProvision: true
template: <username>-che
secondsOfInactivityBeforeIdling: 1800
secondsOfRunBeforeIdling: -1
storage:
- pvcStrategy: common
+ pvcStrategy: per-user
description: Development environment default configuration options.
properties:
defaultComponents:
+ default:
+ - container:
+ image: quay.io/devfile/universal-developer-image:ubi8-38da5c2
+ name: universal-developer-image
description: Default components applied to DevWorkspaces. These
default components are meant to be used when a Devfile, that
does not contain any components.
@@ -7031,6 +7053,7 @@
type: object
type: array
defaultEditor:
+ default: eclipse/che-theia/latest
description: The default editor to workspace create with. It
could be a plugin ID or a URI. The plugin ID must have `publisher/plugin/version`
format. The URI must start from `http://` or `https://`.
@@ -7087,11 +7110,27 @@
type: integer
storage:
@@ -7060,9 +6926,16 @@
type: string
defaultNamespace:
default:
- pvcStrategy: common
+ pvcStrategy: per-user
description: Workspaces persistent storage.
+ autoProvision: true
template: <username>-che
description: User's default namespace.
properties:
- pvc:
- description: PVC settings.
+ perUserStrategyPvcConfig:
+ description: PVC settings when using the `per-user` PVC
+ strategy.
+ properties:
+ claimSize:
+ description: Persistent Volume Claim size. To update
+ the claim size, the storage class that provisions
+ it must support resizing.
+ type: string
+ storageClass:
+ description: Storage class for the Persistent Volume
+ Claim. When omitted or left blank, a default storage
+ class is used.
+ type: string
+ type: object
+ perWorkspaceStrategyPvcConfig:
+ description: PVC settings when using the `per-workspace`
+ PVC strategy.
properties:
claimSize:
description: Persistent Volume Claim size. To update
@@ -7105,12 +7144,15 @@
type: string
type: object
pvcStrategy:
- default: common
- description: Persistent volume claim strategy for the Che
- server. Only the `common` strategy (all workspaces PVCs
- in one volume) is supported . For details, see https://github.com/eclipse/che/issues/21185.
+ default: per-user
+ description: 'Persistent volume claim strategy for the Che
+ server. The supported strategies are: `per-user` (all
+ workspaces PVCs in one volume) and ''per-workspace'' (each
+ workspace is given its own individual PVC). For details,
+ see https://github.com/eclipse/che/issues/21185.'
enum:
- common
+ - per-user
- per-workspace
+ autoProvision:
+ default: true
+ description: Indicates if is allowed to automatically create
+ a user namespace. If it set to false, then user namespace
+ must be pre-created by a cluster administrator.
+ type: boolean
template:
default: <username>-che
description: If you don't create the user namespaces in
@@ -7211,6 +7084,81 @@
type: string
type: object
type: object
+ gitServices:
+ description: A configuration that allows users to work with remote
+ Git repositories.
+ properties:
+ bitbucket:
+ description: Enables users to work with repositories hosted
+ on Bitbucket (bitbucket.org or self-hosted).
+ items:
+ description: BitBucketService enables users to work with repositories
+ hosted on Bitbucket (bitbucket.org or self-hosted).
+ properties:
+ endpoint:
+ default: https://bitbucket.org
+ description: Bitbucket server endpoint URL.
+ type: string
+ secretName:
+ description: 'Kubernetes secret, that contains Base64-encoded
+ Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0:
+ private key, Bitbucket Application link consumer key
+ and Bitbucket Application link shared secret must be
+ stored in `private.key`, `consumer.key` and `shared_secret`
+ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/.
+ For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket
+ OAuth consumer secret must be stored in `id` and `secret`
+ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.'
+ type: string
+ required:
+ - secretName
+ type: object
+ type: array
+ github:
+ description: Enables users to work with repositories hosted
+ on GitHub (github.com or GitHub Enterprise).
+ items:
+ description: GitHubService enables users to work with repositories
+ hosted on GitHub (GitHub.com or GitHub Enterprise).
+ properties:
+ endpoint:
+ default: https://github.com
+ description: GitHub server endpoint URL.
+ type: string
+ secretName:
+ description: 'Kubernetes secret, that contains Base64-encoded
+ GitHub OAuth Client id and GitHub OAuth Client secret,
+ that stored in `id` and `secret` keys respectively.
+ See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.'
+ type: string
+ required:
+ - endpoint
+ - secretName
+ type: object
+ type: array
+ gitlab:
+ description: Enables users to work with repositories hosted
+ on GitLab (gitlab.com or self-hosted).
+ items:
+ description: GitLabService enables users to work with repositories
+ hosted on GitLab (gitlab.com or self-hosted).
+ properties:
+ endpoint:
+ default: https://gitlab.com
+ description: GitLab server endpoint URL.
+ type: string
+ secretName:
+ description: 'Kubernetes secret, that contains Base64-encoded
+ GitHub Application id and GitLab Application Client
+ secret, that stored in `id` and `secret` keys respectively.
+ See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.'
+ type: string
+ required:
+ - endpoint
+ - secretName
+ type: object
+ type: array
+ type: object
networking:
default:
auth:

View File

@ -13,7 +13,7 @@
apiVersion: v1
description: A Helm chart for deploying Eclipse Che on a Kubernetes
name: eclipse-che
version: 7.53.0
version: 7.54.0
annotations:
artifacthub.io/license: EPL-2.0
artifacthub.io/links: |
@ -36,7 +36,7 @@ annotations:
artifacthub.io/crdsExamples: "- apiVersion: org.eclipse.che/v2\n kind: CheCluster\n\
\ metadata:\n name: eclipse-che\n namespace: eclipse-che\n spec:\n \
\ components: {}\n devEnvironments: {}\n networking: {}\n containerRegistry:\
\ {}\n"
\ {}\n gitServices: {}\n"
artifacthub.io/crds: |-
- kind: CheCluster
version: v2

View File

@ -756,6 +756,60 @@ spec:
required:
- enable
type: object
gitServices:
description: A configuration that allows users to work with remote Git repositories.
properties:
bitbucket:
description: Enables users to work with repositories hosted on Bitbucket (bitbucket.org or self-hosted).
items:
description: BitBucketService enables users to work with repositories hosted on Bitbucket (bitbucket.org or self-hosted).
properties:
endpoint:
default: https://bitbucket.org
description: Bitbucket server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application link consumer key and Bitbucket Application link shared secret must be stored in `private.key`, `consumer.key` and `shared_secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer secret must be stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.'
type: string
required:
- secretName
type: object
type: array
github:
description: Enables users to work with repositories hosted on GitHub (github.com or GitHub Enterprise).
items:
description: GitHubService enables users to work with repositories hosted on GitHub (GitHub.com or GitHub Enterprise).
properties:
endpoint:
default: https://github.com
description: GitHub server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth Client id and GitHub OAuth Client secret, that stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.'
type: string
required:
- endpoint
- secretName
type: object
type: array
gitlab:
description: Enables users to work with repositories hosted on GitLab (gitlab.com or self-hosted).
items:
description: GitLabService enables users to work with repositories hosted on GitLab (gitlab.com or self-hosted).
properties:
endpoint:
default: https://gitlab.com
description: GitLab server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded GitHub Application id and GitLab Application Client secret, that stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.'
type: string
required:
- endpoint
- secretName
type: object
type: array
type: object
imagePuller:
description: Kubernetes Image Puller configuration
properties:
@ -836,6 +890,9 @@ spec:
airGapContainerRegistryOrganization:
description: Optional repository name of an alternate container registry to pull images from. This value overrides the container registry organization defined in all the default container images involved in a Che deployment. This is particularly useful to install Eclipse Che in a restricted environment.
type: string
allowAutoProvisionUserNamespace:
description: Indicates if is allowed to automatically create a user namespace. If it set to false, then user namespace must be pre-created by a cluster administrator.
type: boolean
allowUserDefinedWorkspaceNamespaces:
description: Deprecated. The value of this flag is ignored. Defines that a user is allowed to specify a Kubernetes namespace, or an OpenShift project, which differs from the default. It's NOT RECOMMENDED to set to `true` without OpenShift OAuth configured. The OpenShift infrastructure also uses this property.
type: boolean
@ -2741,7 +2798,7 @@ spec:
description: The secret name that contains `user` and `password` for a proxy server. The secret must have a `app.kubernetes.io/part-of=che.eclipse.org` label.
type: string
nonProxyHosts:
description: 'A list of hosts that can be reached directly, bypassing the proxy. Specify wild card domain use the following form `.<DOMAIN>`, for example: - localhost - my.host.com - 123.42.12.32 Use only when a proxy configuration is required. The Operator respects OpenShift cluster-wide proxy configuration, defining `nonProxyHosts` in a custom resource leads to merging non-proxy hosts lists from the cluster proxy configuration, and the ones defined in the custom resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. See also the `proxyURL` fields.'
description: 'A list of hosts that can be reached directly, bypassing the proxy. Specify wild card domain use the following form `.<DOMAIN>`, for example: - localhost - my.host.com - 123.42.12.32 Use only when a proxy configuration is required. The Operator respects OpenShift cluster-wide proxy configuration, defining `nonProxyHosts` in a custom resource leads to merging non-proxy hosts lists from the cluster proxy configuration, and the ones defined in the custom resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.'
items:
type: string
type: array
@ -2749,7 +2806,7 @@ spec:
description: Proxy server port.
type: string
url:
description: 'URL (protocol+hostname) of the proxy server. Use only when a proxy configuration is required. The Operator respects OpenShift cluster-wide proxy configuration, defining `url` in a custom resource leads to overriding the cluster proxy configuration. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. See also the `proxyPort` and `nonProxyHosts` fields.'
description: 'URL (protocol+hostname) of the proxy server. Use only when a proxy configuration is required. The Operator respects OpenShift cluster-wide proxy configuration, defining `url` in a custom resource leads to overriding the cluster proxy configuration. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.'
type: string
type: object
type: object
@ -3126,162 +3183,6 @@ spec:
devWorkspace:
description: DevWorkspace Operator configuration.
properties:
deployment:
description: Deployment override options.
properties:
containers:
description: List of containers belonging to the pod.
items:
description: Container custom settings.
properties:
env:
description: List of environment variables to set in the container.
items:
description: EnvVar represents an environment variable present in a Container.
properties:
name:
description: Name of the environment variable. Must be a C_IDENTIFIER.
type: string
value:
description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".'
type: string
valueFrom:
description: Source for the environment variable's value. Cannot be used if value is not empty.
properties:
configMapKeyRef:
description: Selects a key of a ConfigMap.
properties:
key:
description: The key to select.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?'
type: string
optional:
description: Specify whether the ConfigMap or its key must be defined
type: boolean
required:
- key
type: object
fieldRef:
description: 'Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels[''<KEY>'']`, `metadata.annotations[''<KEY>'']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.'
properties:
apiVersion:
description: Version of the schema the FieldPath is written in terms of, defaults to "v1".
type: string
fieldPath:
description: Path of the field to select in the specified API version.
type: string
required:
- fieldPath
type: object
resourceFieldRef:
description: 'Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.'
properties:
containerName:
description: 'Container name: required for volumes, optional for env vars'
type: string
divisor:
anyOf:
- type: integer
- type: string
description: Specifies the output format of the exposed resources, defaults to "1"
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
resource:
description: 'Required: resource to select'
type: string
required:
- resource
type: object
secretKeyRef:
description: Selects a key of a secret in the pod's namespace
properties:
key:
description: The key of the secret to select from. Must be a valid secret key.
type: string
name:
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?'
type: string
optional:
description: Specify whether the Secret or its key must be defined
type: boolean
required:
- key
type: object
type: object
required:
- name
type: object
type: array
image:
description: Container image. Omit it or leave it empty to use the default container image provided by the Operator.
type: string
imagePullPolicy:
description: Image pull policy. Default value is `Always` for `nightly`, `next` or `latest` images, and `IfNotPresent` in other cases.
enum:
- Always
- IfNotPresent
- Never
type: string
name:
description: Container name.
type: string
resources:
description: Compute resources required by this container.
properties:
limits:
description: Describes the maximum amount of compute resources allowed.
properties:
cpu:
anyOf:
- type: integer
- type: string
description: CPU, in cores. (500m = .5 cores)
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
memory:
anyOf:
- type: integer
- type: string
description: Memory, in bytes. (500Gi = 500GiB = 500 * 1024 * 1024 * 1024)
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
request:
description: Describes the minimum amount of compute resources required.
properties:
cpu:
anyOf:
- type: integer
- type: string
description: CPU, in cores. (500m = .5 cores)
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
memory:
anyOf:
- type: integer
- type: string
description: Memory, in bytes. (500Gi = 500GiB = 500 * 1024 * 1024 * 1024)
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
type: object
type: object
type: array
securityContext:
description: Security options the pod should run with.
properties:
fsGroup:
description: A special supplemental group that applies to all containers in a pod. The default value is `1724`.
format: int64
type: integer
runAsUser:
description: The UID to run the entrypoint of the container process. The default value is `1724`.
format: int64
type: integer
type: object
type: object
runningLimit:
description: The maximum number of running workspaces per user.
type: string
@ -3701,6 +3602,7 @@ spec:
name: universal-developer-image
defaultEditor: eclipse/che-theia/latest
defaultNamespace:
autoProvision: true
template: <username>-che
secondsOfInactivityBeforeIdling: 1800
secondsOfRunBeforeIdling: -1
@ -4637,9 +4539,14 @@ spec:
type: string
defaultNamespace:
default:
autoProvision: true
template: <username>-che
description: User's default namespace.
properties:
autoProvision:
default: true
description: Indicates if is allowed to automatically create a user namespace. If it set to false, then user namespace must be pre-created by a cluster administrator.
type: boolean
template:
default: <username>-che
description: If you don't create the user namespaces in advance, this field defines the Kubernetes namespace created when you start your first workspace. You can use `<username>` and `<userid>` placeholders, such as che-workspace-<username>.
@ -4740,6 +4647,60 @@ spec:
type: string
type: object
type: object
gitServices:
description: A configuration that allows users to work with remote Git repositories.
properties:
bitbucket:
description: Enables users to work with repositories hosted on Bitbucket (bitbucket.org or self-hosted).
items:
description: BitBucketService enables users to work with repositories hosted on Bitbucket (bitbucket.org or self-hosted).
properties:
endpoint:
default: https://bitbucket.org
description: Bitbucket server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application link consumer key and Bitbucket Application link shared secret must be stored in `private.key`, `consumer.key` and `shared_secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer secret must be stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.'
type: string
required:
- secretName
type: object
type: array
github:
description: Enables users to work with repositories hosted on GitHub (github.com or GitHub Enterprise).
items:
description: GitHubService enables users to work with repositories hosted on GitHub (GitHub.com or GitHub Enterprise).
properties:
endpoint:
default: https://github.com
description: GitHub server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth Client id and GitHub OAuth Client secret, that stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.'
type: string
required:
- endpoint
- secretName
type: object
type: array
gitlab:
description: Enables users to work with repositories hosted on GitLab (gitlab.com or self-hosted).
items:
description: GitLabService enables users to work with repositories hosted on GitLab (gitlab.com or self-hosted).
properties:
endpoint:
default: https://gitlab.com
description: GitLab server endpoint URL.
type: string
secretName:
description: 'Kubernetes secret, that contains Base64-encoded GitHub Application id and GitLab Application Client secret, that stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.'
type: string
required:
- endpoint
- secretName
type: object
type: array
type: object
networking:
default:
auth:

View File

@ -0,0 +1,54 @@
#
# Copyright (c) 2019-2021 Red Hat, Inc.
# This program and the accompanying materials are made
# available under the terms of the Eclipse Public License 2.0
# which is available at https://www.eclipse.org/legal/epl-2.0/
#
# SPDX-License-Identifier: EPL-2.0
#
# Contributors:
# Red Hat, Inc. - initial API and implementation
#
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/component: che-operator
app.kubernetes.io/instance: che
app.kubernetes.io/name: che
app.kubernetes.io/part-of: che.eclipse.org
name: che-operator-leader-election
namespace: eclipse-che
rules:
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch

View File

@ -0,0 +1,30 @@
#
# Copyright (c) 2019-2021 Red Hat, Inc.
# This program and the accompanying materials are made
# available under the terms of the Eclipse Public License 2.0
# which is available at https://www.eclipse.org/legal/epl-2.0/
#
# SPDX-License-Identifier: EPL-2.0
#
# Contributors:
# Red Hat, Inc. - initial API and implementation
#
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/component: che-operator
app.kubernetes.io/instance: che
app.kubernetes.io/name: che
app.kubernetes.io/part-of: che.eclipse.org
name: che-operator-leader-election
namespace: eclipse-che
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: che-operator-leader-election
subjects:
- kind: ServiceAccount
name: che-operator
namespace: eclipse-che

View File

@ -86,6 +86,8 @@ rules:
resources:
- clusterrolebindings
- clusterroles
- roles
- rolebindings
verbs:
- list
- create
@ -93,16 +95,6 @@ rules:
- update
- get
- delete
- apiGroups:
- rbac.authorization.k8s.io
resources:
- roles
- rolebindings
verbs:
- get
- create
- update
- delete
- apiGroups:
- authorization.openshift.io
resources:
@ -314,26 +306,7 @@ rules:
- get
- update
- watch
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings
verbs:
- '*'
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings/finalizers
verbs:
- update
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings/status
verbs:
- get
- patch
- update
- list
- apiGroups:
- monitoring.coreos.com
resources:
@ -376,64 +349,37 @@ rules:
- get
- list
- watch
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings
- components
verbs:
- get
- list
- watch
- apiGroups:
- workspace.devfile.io
resources:
- devworkspaces
- devworkspacetemplates
verbs:
- create
- delete
- deletecollection
- patch
- update
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings
- components
verbs:
- create
- delete
- deletecollection
- patch
- update
- apiGroups:
- ""
resources:
- configmaps
- devworkspaceoperatorconfigs
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- patch
- update
- apiGroups:
- ""
- controller.devfile.io
resources:
- configmaps/status
- devworkspaceroutings/finalizers
verbs:
- update
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings/status
verbs:
- get
- patch
- update
- patch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- authentication.k8s.io
resources:
@ -446,227 +392,3 @@ rules:
- subjectaccessreviews
verbs:
- create
- apiGroups:
- ""
resourceNames:
- workspace-preferences-configmap
resources:
- configmaps
verbs:
- create
- delete
- get
- patch
- apiGroups:
- ""
resources:
- configmaps
- persistentvolumeclaims
- pods
- secrets
- serviceaccounts
verbs:
- '*'
- apiGroups:
- ""
resources:
- events
- namespaces
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods/exec
verbs:
- create
- apiGroups:
- ""
resourceNames:
- workspace-credentials-secret
resources:
- secrets
verbs:
- create
- delete
- get
- patch
- apiGroups:
- ""
resources:
- services
verbs:
- '*'
- apiGroups:
- admissionregistration.k8s.io
resources:
- mutatingwebhookconfigurations
- validatingwebhookconfigurations
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resourceNames:
- devworkspace-controller
resources:
- deployments/finalizers
verbs:
- update
- apiGroups:
- apps
- extensions
resources:
- deployments
verbs:
- get
- list
- watch
- apiGroups:
- apps
- extensions
resources:
- deployments
- replicasets
verbs:
- '*'
- apiGroups:
- apps
- extensions
resources:
- replicasets
verbs:
- get
- list
- watch
- apiGroups:
- authorization.k8s.io
resources:
- localsubjectaccessreviews
- subjectaccessreviews
verbs:
- create
- apiGroups:
- batch
resources:
- jobs
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- config.openshift.io
resourceNames:
- cluster
resources:
- proxies
verbs:
- get
- apiGroups:
- controller.devfile.io
resources:
- '*'
verbs:
- '*'
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings
verbs:
- '*'
- apiGroups:
- controller.devfile.io
resources:
- devworkspaceroutings/status
verbs:
- get
- patch
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- get
- update
- apiGroups:
- metrics.k8s.io
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- monitoring.coreos.com
resources:
- servicemonitors
verbs:
- create
- get
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- '*'
- apiGroups:
- oauth.openshift.io
resources:
- oauthclients
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterrolebindings
- clusterroles
- rolebindings
- roles
verbs:
- create
- get
- list
- update
- watch
- apiGroups:
- route.openshift.io
resources:
- routes
verbs:
- '*'
- apiGroups:
- route.openshift.io
resources:
- routes/custom-host
verbs:
- create
- apiGroups:
- workspace.devfile.io
resources:
- '*'
verbs:
- '*'
- nonResourceURLs:
- /metrics
verbs:
- get

View File

@ -54,15 +54,15 @@ spec:
- name: OPERATOR_NAME
value: che-operator
- name: CHE_VERSION
value: 7.53.0
value: 7.54.0
- name: RELATED_IMAGE_che_server
value: quay.io/eclipse/che-server:7.53.0
value: quay.io/eclipse/che-server:7.54.0
- name: RELATED_IMAGE_dashboard
value: quay.io/eclipse/che-dashboard:7.53.0
value: quay.io/eclipse/che-dashboard:7.54.0
- name: RELATED_IMAGE_plugin_registry
value: quay.io/eclipse/che-plugin-registry:7.53.0
value: quay.io/eclipse/che-plugin-registry:7.54.0
- name: RELATED_IMAGE_devfile_registry
value: quay.io/eclipse/che-devfile-registry:7.53.0
value: quay.io/eclipse/che-devfile-registry:7.54.0
- name: RELATED_IMAGE_che_tls_secrets_creation_job
value: quay.io/eclipse/che-tls-secret-creator:alpine-01a4c34
- name: RELATED_IMAGE_postgres
@ -73,8 +73,6 @@ spec:
value: quay.io/eclipse/che--traefik:v2.8.1-4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3
- name: RELATED_IMAGE_single_host_gateway_config_sidecar
value: quay.io/che-incubator/configbump:0.1.4
- name: RELATED_IMAGE_devworkspace_controller
value: quay.io/devfile/devworkspace-controller:v0.15.2
- name: RELATED_IMAGE_gateway_authentication_sidecar
value: quay.io/openshift/origin-oauth-proxy:4.9
- name: RELATED_IMAGE_gateway_authorization_sidecar
@ -151,12 +149,12 @@ spec:
value: quay.io/eclipse/che-plugin-sidecar@sha256:2ba8fffe6f2d64f82896367a34fdb657672984548c7904f906178e8e08294277
- name: RELATED_IMAGE_che_plugin_sidecar_plugin_registry_image_IBZWQYJSGU3DUYTCGQYDIZTGMFQTCMRVGY2WEZLCGEZGENDDMQ4DCNRQMNTGCM3GMYZWKZRTMJSTIMRQGQZTAYJWGU3DEZRRMZSTIOBWGM4WGYTGGFTA____
value: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f
- name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUNJQGI3DMMDFME2DMNLGGI4TQMLCGUZGGZJYMNTGENJTGFQWKMRTHAYDGN3GME2GCY3BMJRWINBVMMZTKOJWGM2TAOLCGA4DKODGMI3Q____
value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7
- name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUYRWGRQTIMBRHA3WMN3BMJSTKNTGHFTDIZDFMRSTIYZRGE4TSZBYG5SWIYLEHAYDMZJSMVRTIOBQGJTGCZLCGJRGINJQMQYWGZDGHFQQ____
value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a
- name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNRRGA4WENJVHAYTGY3EHE4DOOJUMMZWCZRVMJSDAN3EGBSDGMDBMRSWGNTEGUYDINJWGRSDQNBSMQ3TSZBZGVTDANZTMIZTIZLGMMYQ____
value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1
- name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUOBVGNRTMN3DGA3TMNZTME4DONZYGI3WKMDCGU4GEZBXHE2GIYTCGQ3WKOJSG42DONJVME3DSYRWGUZWEYJRMRQTMNLFHEYTKNBSGA4A____
value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208
- name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUZRXMI2DSZBUG43WEZBTGIYTAZRSHEYDQMBXMUZWKMLCGBQTIYZWMQYDENDDGQ4DENBRMI3GKZRUGBTDANLEMI4TONDCHFSDEMJWGIYQ____
value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621
- name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNDCMQYDMMBYHEZTINTFMQ4DGMZRMQ4GCYTCMZSTAZBZMYYWMYTFHFTDEODEG4ZGCZBRG42TENJYGE3TGMDEMRSTQM3GGRSWGOJQMQ3A____
value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6
- name: RELATED_IMAGE_che_editor_jupyter_plugin_registry_image_IBZWQYJSGU3DUOBTGQZTSYLFHFSWIY3BMEZWCOJXGUZTMNZUGIZTCNLBG44TCMTGHEZWKNBZHFTDIOJYGQ3WIYJQHE2GGNBYGAYDGMLFMFSTIYTBGQ3Q____
value: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47
- name: RELATED_IMAGE_dirigible_openshift_plugin_registry_image_IBZWQYJSGU3DUMZTGY2TMMZVMQYWKMBUGAZTMOJXMRSWCMBWG42GEYTCMRRTONBZMM2GEZJSMRRDEOJYGE4GCOJTMI4GKMLFGUZWGM3DGUYTINBRGEZQ____
@ -168,15 +166,17 @@ spec:
- name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNJTMNSWGNJYMRSDCOJQMRSDCZJQGYYTAMBUG44GCZJYG44WIN3DGI4GCYTEHBTGGOBYGNSDKZTEMY2WEZJTMVRDMZJZGQZWMZJVMU3Q____
value: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7
- name: RELATED_IMAGE_che_code_plugin_registry_image_NFXHG2LEMVZHG___
value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44
value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966
- name: RELATED_IMAGE_che_code_plugin_registry_image_IBZWQYJSGU3DUNTBHFRTCZJXMIZTMYTBMJSTINLDGRSTONRRMM2WKNLFGAZWGMBQGU2DQNZZGMZWGMZRMI2WMMRXMM3DONTGMI4DGZRSMEZDEN3GGZTA____
value: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f
- name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNBZHE4DMZTFMQ3WMNDFGI2TKNLBGE2TIYZYGU3DOOJVMM3DQOLCHAZTMNZSGA3GENRTMVRTGNZUGI3GMZJSMM4GKNBTMY2TMMZQMU2A____
value: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4
- name: RELATED_IMAGE_che_idea_plugin_registry_image_NZSXQ5A_
value: quay.io/che-incubator/che-idea@sha256:2a88672127b5cb4a583402250b15078a8bb8f2f7d400e3f6af2aae795f46018a
value: quay.io/che-incubator/che-idea@sha256:f6a10da8889b342945ff3a18a561b2c276518ddf5a6a90abd8589d251d38125f
- name: RELATED_IMAGE_che_idea_plugin_registry_image_IBZWQYJSGU3DUYRWMM4TGZJYGNRWMMRRGU3TAZLCGYYDIOJQGBSWCOBRG5TDIOBTGZTDIMBVGQZDENZUMJRDMY3BMZRGMNLEMI3GENLBG5TDAYRWHFRA____
value: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b
- name: RELATED_IMAGE_che_pycharm_plugin_registry_image_NZSXQ5A_
value: quay.io/che-incubator/che-pycharm@sha256:8d403ceaaa3e38a813fbc8398e48a3dd410499907daf1e544fd2532ccee9289a
value: quay.io/che-incubator/che-pycharm@sha256:35c286bf0d98f5cf66f15b73379741f770f7d840229e78a3a8a61fa49af38a83
- name: RELATED_IMAGE_che_pycharm_plugin_registry_image_IBZWQYJSGU3DUYZQMU3GMMLCGAZTAZDDGAYWKZBTMJQWCNJUHAYTIOBSMM3GCYRWGI2DKNTFHE2DGNDDGBTDQYRVGRSWEOLDMQZGEOBYGU2GGNJZG5RA____
value: quay.io/che-incubator/che-pycharm@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b
- name: RELATED_IMAGE_che_buildah_base_plugin_registry_image_IBZWQYJSGU3DUNBRG4ZDAM3EHA3DEOLFMRSDSMTGGE4DOYLGMQZWKYTCGNSDQZDDGI4DGMZYMQZTIOBQHFSWENZVMZTGGMTFGA4GCNBQGBTDQZBVGZRA____
@ -186,7 +186,7 @@ spec:
- name: RELATED_IMAGE_che_buildkit_base_plugin_registry_image_IBZWQYJSGU3DUZLGMZQTSODEMQZGGZLEGMYGENJSGBRDENLBMZTGMMLBHA4DAZBRGIYWGZRWMIZWMODBMI2DEYJVGE2DSZLBMRQTINTCME3TSM3DMU4Q____
value: quay.io/eclipse/che-buildkit-base@sha256:effa98dd2ced30b520b25afff1a880d121cf6b3f8ab42a5149eada46ba793ce9
- name: RELATED_IMAGE_che_code_devfile_registry_image_NFXHG2LEMVZHG___
value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44
value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966
- name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGBSTCOBZMQ4Q____
value: quay.io/devfile/universal-developer-image@sha256:66369ff476b6bd035f5a992d505b0e2a624f46a7d180acb61c41086a37739eea
- name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGMYDKNLFGZSA____
@ -201,15 +201,15 @@ spec:
value: quay.io/eclipse/che--centos--mysql-57-centos7@sha256:e08ee4d43b7356607685b69bde6335e27cf20c020f345b6c6c59400183882764
- name: RELATED_IMAGE_che__mariadb_devfile_registry_image_GEYC4NZOGEWTKYJYGAYDSMZWHFSWKNJXMM4DKYRWMY2GCMBYGQYDMMJUG5RGIOLDGUYDKY3EMU3GEOBSGUYGIMJWMEZDOZBSME2WMZLCMZSGKYLEG4______
value: quay.io/eclipse/che--mariadb@sha256:5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7
- name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKMZOGA______
value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a
- name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKMZOGA______
value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1
- name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKMZOGA______
value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7
- name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKNBOGA______
value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621
- name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKNBOGA______
value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6
- name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKNBOGA______
value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208
- name: RELATED_IMAGE_ubi_minimal_devfile_registry_image_
value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7
image: quay.io/eclipse/che-operator:7.53.0
value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:e58664de16551db29fb0eaaeb3c4a44eaf95ad89a5b2399a1107041c4f2d6d34
image: quay.io/eclipse/che-operator:7.54.0
imagePullPolicy: Always
livenessProbe:
failureThreshold: 10

View File

@ -19,6 +19,7 @@ metadata:
app.kubernetes.io/name: che
app.kubernetes.io/part-of: che.eclipse.org
name: che-operator
namespace: eclipse-che
rules:
- apiGroups:
- extensions
@ -37,7 +38,12 @@ rules:
resources:
- jobs
verbs:
- '*'
- create
- delete
- get
- update
- watch
- list
- apiGroups:
- route.openshift.io
resources:
@ -50,15 +56,15 @@ rules:
resources:
- roles
- rolebindings
verbs:
- '*'
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterroles
- clusterrolebindings
verbs:
- '*'
- list
- create
- watch
- update
- get
- delete
- apiGroups:
- ""
resources:

View File

@ -19,6 +19,7 @@ metadata:
app.kubernetes.io/name: che
app.kubernetes.io/part-of: che.eclipse.org
name: che-operator
namespace: eclipse-che
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
@ -26,3 +27,4 @@ roleRef:
subjects:
- kind: ServiceAccount
name: che-operator
namespace: eclipse-che

View File

@ -0,0 +1,45 @@
#
# Copyright (c) 2019-2021 Red Hat, Inc.
# This program and the accompanying materials are made
# available under the terms of the Eclipse Public License 2.0
# which is available at https://www.eclipse.org/legal/epl-2.0/
#
# SPDX-License-Identifier: EPL-2.0
#
# Contributors:
# Red Hat, Inc. - initial API and implementation
#
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
annotations:
cert-manager.io/inject-ca-from: eclipse-che/che-operator-serving-cert
labels:
app.kubernetes.io/component: che-operator
app.kubernetes.io/instance: che
app.kubernetes.io/name: che
app.kubernetes.io/part-of: che.eclipse.org
name: org.eclipse.che
webhooks:
- admissionReviewVersions:
- v1
- v1beta1
clientConfig:
service:
name: che-operator-service
namespace: eclipse-che
path: /validate-org-eclipse-che-v2-checluster
failurePolicy: Fail
name: vchecluster.kb.io
rules:
- apiGroups:
- org.eclipse.che
apiVersions:
- v2
operations:
- CREATE
- UPDATE
resources:
- checlusters
sideEffects: None

View File

@ -13,5 +13,5 @@
package version
var (
Version = "7.53.0"
Version = "7.54.0"
)