From 67ef02b72d9de132e38f869c873f63cda2b3bfd3 Mon Sep 17 00:00:00 2001 From: che-bot <39771996+che-bot@users.noreply.github.com> Date: Fri, 23 Sep 2022 08:21:28 +0200 Subject: [PATCH] ci: Copy 7.54.0 csv to main (#1522) Signed-off-by: Mykhailo Kuznietsov Signed-off-by: Mykhailo Kuznietsov Co-authored-by: Mykhailo Kuznietsov --- .../che-operator.clusterserviceversion.yaml | 602 +++++------- ...e-operator.clusterserviceversion.yaml.diff | 924 ++++++++++++++---- .../org.eclipse.che_checlusters.yaml | 382 ++++---- .../org.eclipse.che_checlusters.yaml.diff | 546 ++++++++--- helmcharts/stable/Chart.yaml | 4 +- ....eclipse.che.CustomResourceDefinition.yaml | 277 +++--- .../che-operator-leader-election.Role.yaml | 54 + ...-operator-leader-election.RoleBinding.yaml | 30 + .../templates/che-operator.ClusterRole.yaml | 308 +----- .../templates/che-operator.Deployment.yaml | 50 +- .../stable/templates/che-operator.Role.yaml | 20 +- .../templates/che-operator.RoleBinding.yaml | 2 + ...se.che.ValidatingWebhookConfiguration.yaml | 45 + version/version.go | 2 +- 14 files changed, 1890 insertions(+), 1356 deletions(-) create mode 100644 helmcharts/stable/templates/che-operator-leader-election.Role.yaml create mode 100644 helmcharts/stable/templates/che-operator-leader-election.RoleBinding.yaml create mode 100644 helmcharts/stable/templates/org.eclipse.che.ValidatingWebhookConfiguration.yaml diff --git a/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml b/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml index 8320235c1..ff9b82adb 100644 --- a/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml +++ b/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml @@ -58,6 +58,7 @@ metadata: "components": {}, "containerRegistry": {}, "devEnvironments": {}, + "gitServices": {}, "networking": {} } } @@ -65,8 +66,8 @@ metadata: capabilities: Seamless Upgrades categories: Developer Tools certified: "false" - containerImage: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e - createdAt: "2022-09-02T08:44:51Z" + containerImage: quay.io/eclipse/che-operator@sha256:2c61b1a8dfe3010a2df42481b969a674d2ee0ca3097e0319d0be1199de945fd6 + createdAt: "2022-09-22T20:03:34Z" description: A Kube-native development solution that delivers portable and collaborative developer workspaces. operatorframework.io/suggested-namespace: openshift-operators @@ -76,7 +77,7 @@ metadata: operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/eclipse-che/che-operator support: Eclipse Foundation - name: eclipse-che-preview-openshift.v7.53.0 + name: eclipse-che-preview-openshift.v7.54.0 namespace: placeholder spec: apiservicedefinitions: {} @@ -129,6 +130,10 @@ spec: - description: Che components configuration. displayName: Components path: components + - description: A configuration that allows users to work with remote Git + repositories. + displayName: Git Services + path: gitServices - description: Networking, Che authentication, and TLS configuration. displayName: Networking path: networking @@ -136,6 +141,44 @@ spec: images. displayName: Container registry path: containerRegistry + - description: Enables users to work with repositories hosted on Bitbucket + (bitbucket.org or self-hosted). + displayName: Bitbucket + path: gitServices.bitbucket + - description: 'Kubernetes secret, that contains Base64-encoded Bitbucket + OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application + link consumer key and Bitbucket Application link shared secret must + be stored in `private.key`, `consumer.key` and `shared_secret` keys + respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. + For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer + secret must be stored in `id` and `secret` keys respectively. See the + following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' + displayName: Secret Name + path: gitServices.bitbucket[0].secretName + x-descriptors: + - urn:alm:descriptor:io.kubernetes:Secret + - description: Enables users to work with repositories hosted on GitHub + (github.com or GitHub Enterprise). + displayName: GitHub + path: gitServices.github + - description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth + Client id and GitHub OAuth Client secret, that stored in `id` and `secret` + keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' + displayName: Secret Name + path: gitServices.github[0].secretName + x-descriptors: + - urn:alm:descriptor:io.kubernetes:Secret + - description: Enables users to work with repositories hosted on GitLab + (gitlab.com or self-hosted). + displayName: GitLab + path: gitServices.gitlab + - description: 'Kubernetes secret, that contains Base64-encoded GitHub Application + id and GitLab Application Client secret, that stored in `id` and `secret` + keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' + displayName: Secret Name + path: gitServices.gitlab[0].secretName + x-descriptors: + - urn:alm:descriptor:io.kubernetes:Secret statusDescriptors: - description: Specifies the current phase of the Che deployment. displayName: ChePhase @@ -258,6 +301,48 @@ spec: path: devWorkspace.enable x-descriptors: - urn:alm:descriptor:com.tectonic.ui:booleanSwitch + - description: A configuration that allows users to work with remote Git + repositories. + displayName: Git Services + path: gitServices + - description: Enables users to work with repositories hosted on Bitbucket + (bitbucket.org or self-hosted). + displayName: Bitbucket + path: gitServices.bitbucket + - description: 'Kubernetes secret, that contains Base64-encoded Bitbucket + OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application + link consumer key and Bitbucket Application link shared secret must + be stored in `private.key`, `consumer.key` and `shared_secret` keys + respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. + For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer + secret must be stored in `id` and `secret` keys respectively. See the + following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' + displayName: Secret Name + path: gitServices.bitbucket[0].secretName + x-descriptors: + - urn:alm:descriptor:io.kubernetes:Secret + - description: Enables users to work with repositories hosted on GitHub + (github.com or GitHub Enterprise). + displayName: GitHub + path: gitServices.github + - description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth + Client id and GitHub OAuth Client secret, that stored in `id` and `secret` + keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' + displayName: Secret Name + path: gitServices.github[0].secretName + x-descriptors: + - urn:alm:descriptor:io.kubernetes:Secret + - description: Enables users to work with repositories hosted on GitLab + (gitlab.com or self-hosted). + displayName: GitLab + path: gitServices.gitlab + - description: 'Kubernetes secret, that contains Base64-encoded GitHub Application + id and GitLab Application Client secret, that stored in `id` and `secret` + keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' + displayName: Secret Name + path: gitServices.gitlab[0].secretName + x-descriptors: + - urn:alm:descriptor:io.kubernetes:Secret - description: Kubernetes Image Puller configuration displayName: Kubernetes Image Puller path: imagePuller @@ -472,6 +557,8 @@ spec: resources: - clusterrolebindings - clusterroles + - roles + - rolebindings verbs: - list - create @@ -479,16 +566,6 @@ spec: - update - get - delete - - apiGroups: - - rbac.authorization.k8s.io - resources: - - roles - - rolebindings - verbs: - - get - - create - - update - - delete - apiGroups: - authorization.openshift.io resources: @@ -700,26 +777,7 @@ spec: - get - update - watch - - apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings - verbs: - - '*' - - apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings/finalizers - verbs: - - update - - apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings/status - verbs: - - get - - patch - - update + - list - apiGroups: - monitoring.coreos.com resources: @@ -762,64 +820,37 @@ spec: - get - list - watch - - apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings - - components - verbs: - - get - - list - - watch - - apiGroups: - - workspace.devfile.io - resources: - - devworkspaces - - devworkspacetemplates - verbs: - create - delete - - deletecollection - patch - update - apiGroups: - controller.devfile.io resources: - devworkspaceroutings - - components - verbs: - - create - - delete - - deletecollection - - patch - - update - - apiGroups: - - "" - resources: - - configmaps + - devworkspaceoperatorconfigs verbs: - get - list - watch - create - - update - - patch - delete + - patch + - update - apiGroups: - - "" + - controller.devfile.io resources: - - configmaps/status + - devworkspaceroutings/finalizers + verbs: + - update + - apiGroups: + - controller.devfile.io + resources: + - devworkspaceroutings/status verbs: - get + - patch - update - - patch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - apiGroups: - authentication.k8s.io resources: @@ -832,230 +863,6 @@ spec: - subjectaccessreviews verbs: - create - - apiGroups: - - "" - resourceNames: - - workspace-preferences-configmap - resources: - - configmaps - verbs: - - create - - delete - - get - - patch - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - pods - - secrets - - serviceaccounts - verbs: - - '*' - - apiGroups: - - "" - resources: - - events - - namespaces - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/exec - verbs: - - create - - apiGroups: - - "" - resourceNames: - - workspace-credentials-secret - resources: - - secrets - verbs: - - create - - delete - - get - - patch - - apiGroups: - - "" - resources: - - services - verbs: - - '*' - - apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - validatingwebhookconfigurations - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resourceNames: - - devworkspace-controller - resources: - - deployments/finalizers - verbs: - - update - - apiGroups: - - apps - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - apps - - extensions - resources: - - deployments - - replicasets - verbs: - - '*' - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - authorization.k8s.io - resources: - - localsubjectaccessreviews - - subjectaccessreviews - verbs: - - create - - apiGroups: - - batch - resources: - - jobs - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - config.openshift.io - resourceNames: - - cluster - resources: - - proxies - verbs: - - get - - apiGroups: - - controller.devfile.io - resources: - - '*' - verbs: - - '*' - - apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings - verbs: - - '*' - - apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings/status - verbs: - - get - - patch - - update - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - update - - apiGroups: - - metrics.k8s.io - resources: - - pods - verbs: - - get - - list - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - create - - get - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - '*' - - apiGroups: - - oauth.openshift.io - resources: - - oauthclients - verbs: - - create - - delete - - deletecollection - - get - - list - - patch - - update - - watch - - apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterrolebindings - - clusterroles - - rolebindings - - roles - verbs: - - create - - get - - list - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - verbs: - - '*' - - apiGroups: - - route.openshift.io - resources: - - routes/custom-host - verbs: - - create - - apiGroups: - - workspace.devfile.io - resources: - - '*' - verbs: - - '*' - - nonResourceURLs: - - /metrics - verbs: - - get serviceAccountName: che-operator deployments: - name: che-operator @@ -1093,15 +900,15 @@ spec: - name: OPERATOR_NAME value: che-operator - name: CHE_VERSION - value: 7.53.0 + value: 7.54.0 - name: RELATED_IMAGE_che_server - value: quay.io/eclipse/che-server@sha256:3a6a25a28fb742acb4729113fed92c63bc56b2c4daf8d93c6576689d7dd6a669 + value: quay.io/eclipse/che-server@sha256:ed3b76026f9afc52b858190a10440ec121b0110c4c5fce6035d664cfa79e6b3c - name: RELATED_IMAGE_dashboard - value: quay.io/eclipse/che-dashboard@sha256:db5c199ebff922a5fa9acccedfccee5b94e6109c1b1200c676788533bcef8363 + value: quay.io/eclipse/che-dashboard@sha256:a77776fa65bea708fc1f7cd968e5d8fa53fab48b5065a0bedbbd162d5936a699 - name: RELATED_IMAGE_plugin_registry - value: quay.io/eclipse/che-plugin-registry@sha256:0b8df587b660df479e63510fedcd38b2d756d560dc0a5199588d37195f3386b2 + value: quay.io/eclipse/che-plugin-registry@sha256:7e96b6abead4f89d28a2628ccfc89f5ac113dab601eec8813f7f8f9979a04353 - name: RELATED_IMAGE_devfile_registry - value: quay.io/eclipse/che-devfile-registry@sha256:db013e7e7e1d53245cde3ca1961e21f51c022c6b4c809f258002248f2c2a694a + value: quay.io/eclipse/che-devfile-registry@sha256:5f6eaf3ebcff47799da62112112a0630c3bb55ed81067d53e80b439fd8a56314 - name: RELATED_IMAGE_che_tls_secrets_creation_job value: quay.io/eclipse/che-tls-secret-creator@sha256:54df0ccf598d230e278d512c3b44bdf24edb280f71da32643db46e0120bfaee0 - name: RELATED_IMAGE_postgres @@ -1112,8 +919,6 @@ spec: value: quay.io/eclipse/che--traefik@sha256:4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3 - name: RELATED_IMAGE_single_host_gateway_config_sidecar value: quay.io/che-incubator/configbump@sha256:175ff2ba1bd74429de192c0a9facf39da5699c6da9f151bd461b3dc8624dd532 - - name: RELATED_IMAGE_devworkspace_controller - value: quay.io/devfile/devworkspace-controller@sha256:b1903b796fc6bc91125b8a6cf58dfa2cc21706d16bdd5a25a25ff2da83f47705 - name: RELATED_IMAGE_gateway_authentication_sidecar value: quay.io/openshift/origin-oauth-proxy@sha256:0e72ed64cdf76828392ef8cfe4ee49d644a013ac00ff1590d6c53774d77615e3 - name: RELATED_IMAGE_gateway_authorization_sidecar @@ -1190,12 +995,12 @@ spec: value: quay.io/eclipse/che-plugin-sidecar@sha256:2ba8fffe6f2d64f82896367a34fdb657672984548c7904f906178e8e08294277 - name: RELATED_IMAGE_che_plugin_sidecar_plugin_registry_image_IBZWQYJSGU3DUYTCGQYDIZTGMFQTCMRVGY2WEZLCGEZGENDDMQ4DCNRQMNTGCM3GMYZWKZRTMJSTIMRQGQZTAYJWGU3DEZRRMZSTIOBWGM4WGYTGGFTA____ value: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f - - name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUNJQGI3DMMDFME2DMNLGGI4TQMLCGUZGGZJYMNTGENJTGFQWKMRTHAYDGN3GME2GCY3BMJRWINBVMMZTKOJWGM2TAOLCGA4DKODGMI3Q____ - value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 - - name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUYRWGRQTIMBRHA3WMN3BMJSTKNTGHFTDIZDFMRSTIYZRGE4TSZBYG5SWIYLEHAYDMZJSMVRTIOBQGJTGCZLCGJRGINJQMQYWGZDGHFQQ____ - value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a - - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNRRGA4WENJVHAYTGY3EHE4DOOJUMMZWCZRVMJSDAN3EGBSDGMDBMRSWGNTEGUYDINJWGRSDQNBSMQ3TSZBZGVTDANZTMIZTIZLGMMYQ____ - value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 + - name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUOBVGNRTMN3DGA3TMNZTME4DONZYGI3WKMDCGU4GEZBXHE2GIYTCGQ3WKOJSG42DONJVME3DSYRWGUZWEYJRMRQTMNLFHEYTKNBSGA4A____ + value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 + - name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUZRXMI2DSZBUG43WEZBTGIYTAZRSHEYDQMBXMUZWKMLCGBQTIYZWMQYDENDDGQ4DENBRMI3GKZRUGBTDANLEMI4TONDCHFSDEMJWGIYQ____ + value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 + - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNDCMQYDMMBYHEZTINTFMQ4DGMZRMQ4GCYTCMZSTAZBZMYYWMYTFHFTDEODEG4ZGCZBRG42TENJYGE3TGMDEMRSTQM3GGRSWGOJQMQ3A____ + value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 - name: RELATED_IMAGE_che_editor_jupyter_plugin_registry_image_IBZWQYJSGU3DUOBTGQZTSYLFHFSWIY3BMEZWCOJXGUZTMNZUGIZTCNLBG44TCMTGHEZWKNBZHFTDIOJYGQ3WIYJQHE2GGNBYGAYDGMLFMFSTIYTBGQ3Q____ value: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47 - name: RELATED_IMAGE_dirigible_openshift_plugin_registry_image_IBZWQYJSGU3DUMZTGY2TMMZVMQYWKMBUGAZTMOJXMRSWCMBWG42GEYTCMRRTONBZMM2GEZJSMRRDEOJYGE4GCOJTMI4GKMLFGUZWGM3DGUYTINBRGEZQ____ @@ -1207,15 +1012,17 @@ spec: - name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNJTMNSWGNJYMRSDCOJQMRSDCZJQGYYTAMBUG44GCZJYG44WIN3DGI4GCYTEHBTGGOBYGNSDKZTEMY2WEZJTMVRDMZJZGQZWMZJVMU3Q____ value: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7 - name: RELATED_IMAGE_che_code_plugin_registry_image_NFXHG2LEMVZHG___ - value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 + value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966 + - name: RELATED_IMAGE_che_code_plugin_registry_image_IBZWQYJSGU3DUNTBHFRTCZJXMIZTMYTBMJSTINLDGRSTONRRMM2WKNLFGAZWGMBQGU2DQNZZGMZWGMZRMI2WMMRXMM3DONTGMI4DGZRSMEZDEN3GGZTA____ + value: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f - name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNBZHE4DMZTFMQ3WMNDFGI2TKNLBGE2TIYZYGU3DOOJVMM3DQOLCHAZTMNZSGA3GENRTMVRTGNZUGI3GMZJSMM4GKNBTMY2TMMZQMU2A____ value: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4 - name: RELATED_IMAGE_che_idea_plugin_registry_image_NZSXQ5A_ - value: quay.io/che-incubator/che-idea@sha256:2a88672127b5cb4a583402250b15078a8bb8f2f7d400e3f6af2aae795f46018a + value: quay.io/che-incubator/che-idea@sha256:f6a10da8889b342945ff3a18a561b2c276518ddf5a6a90abd8589d251d38125f - name: RELATED_IMAGE_che_idea_plugin_registry_image_IBZWQYJSGU3DUYRWMM4TGZJYGNRWMMRRGU3TAZLCGYYDIOJQGBSWCOBRG5TDIOBTGZTDIMBVGQZDENZUMJRDMY3BMZRGMNLEMI3GENLBG5TDAYRWHFRA____ value: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b - name: RELATED_IMAGE_che_pycharm_plugin_registry_image_NZSXQ5A_ - value: quay.io/che-incubator/che-pycharm@sha256:8d403ceaaa3e38a813fbc8398e48a3dd410499907daf1e544fd2532ccee9289a + value: quay.io/che-incubator/che-pycharm@sha256:35c286bf0d98f5cf66f15b73379741f770f7d840229e78a3a8a61fa49af38a83 - name: RELATED_IMAGE_che_pycharm_plugin_registry_image_IBZWQYJSGU3DUYZQMU3GMMLCGAZTAZDDGAYWKZBTMJQWCNJUHAYTIOBSMM3GCYRWGI2DKNTFHE2DGNDDGBTDQYRVGRSWEOLDMQZGEOBYGU2GGNJZG5RA____ value: quay.io/che-incubator/che-pycharm@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b - name: RELATED_IMAGE_che_buildah_base_plugin_registry_image_IBZWQYJSGU3DUNBRG4ZDAM3EHA3DEOLFMRSDSMTGGE4DOYLGMQZWKYTCGNSDQZDDGI4DGMZYMQZTIOBQHFSWENZVMZTGGMTFGA4GCNBQGBTDQZBVGZRA____ @@ -1225,7 +1032,7 @@ spec: - name: RELATED_IMAGE_che_buildkit_base_plugin_registry_image_IBZWQYJSGU3DUZLGMZQTSODEMQZGGZLEGMYGENJSGBRDENLBMZTGMMLBHA4DAZBRGIYWGZRWMIZWMODBMI2DEYJVGE2DSZLBMRQTINTCME3TSM3DMU4Q____ value: quay.io/eclipse/che-buildkit-base@sha256:effa98dd2ced30b520b25afff1a880d121cf6b3f8ab42a5149eada46ba793ce9 - name: RELATED_IMAGE_che_code_devfile_registry_image_NFXHG2LEMVZHG___ - value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 + value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966 - name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGBSTCOBZMQ4Q____ value: quay.io/devfile/universal-developer-image@sha256:66369ff476b6bd035f5a992d505b0e2a624f46a7d180acb61c41086a37739eea - name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGMYDKNLFGZSA____ @@ -1240,15 +1047,15 @@ spec: value: quay.io/eclipse/che--centos--mysql-57-centos7@sha256:e08ee4d43b7356607685b69bde6335e27cf20c020f345b6c6c59400183882764 - name: RELATED_IMAGE_che__mariadb_devfile_registry_image_GEYC4NZOGEWTKYJYGAYDSMZWHFSWKNJXMM4DKYRWMY2GCMBYGQYDMMJUG5RGIOLDGUYDKY3EMU3GEOBSGUYGIMJWMEZDOZBSME2WMZLCMZSGKYLEG4______ value: quay.io/eclipse/che--mariadb@sha256:5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7 - - name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKMZOGA______ - value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a - - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKMZOGA______ - value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 - - name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKMZOGA______ - value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 + - name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKNBOGA______ + value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 + - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKNBOGA______ + value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 + - name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKNBOGA______ + value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 - name: RELATED_IMAGE_ubi_minimal_devfile_registry_image_ - value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7 - image: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e + value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:e58664de16551db29fb0eaaeb3c4a44eaf95ad89a5b2399a1107041c4f2d6d34 + image: quay.io/eclipse/che-operator@sha256:2c61b1a8dfe3010a2df42481b969a674d2ee0ca3097e0319d0be1199de945fd6 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 10 @@ -1323,7 +1130,12 @@ spec: resources: - jobs verbs: - - '*' + - create + - delete + - get + - update + - watch + - list - apiGroups: - route.openshift.io resources: @@ -1336,15 +1148,15 @@ spec: resources: - roles - rolebindings - verbs: - - '*' - - apiGroups: - - rbac.authorization.k8s.io - resources: - clusterroles - clusterrolebindings verbs: - - '*' + - list + - create + - watch + - update + - get + - delete - apiGroups: - "" resources: @@ -1468,6 +1280,37 @@ spec: - patch - update - watch + - apiGroups: + - "" + resources: + - configmaps + verbs: + - get + - list + - watch + - create + - update + - patch + - delete + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - get + - list + - watch + - create + - update + - patch + - delete + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch serviceAccountName: che-operator strategy: deployment installModes: @@ -1499,8 +1342,29 @@ spec: maturity: stable provider: name: Eclipse Foundation - version: 7.53.0 + version: 7.54.0 webhookdefinitions: + - admissionReviewVersions: + - v1 + - v1beta1 + containerPort: 443 + deploymentName: che-operator + failurePolicy: Fail + generateName: vchecluster.kb.io + rules: + - apiGroups: + - org.eclipse.che + apiVersions: + - v2 + operations: + - CREATE + - UPDATE + resources: + - checlusters + sideEffects: None + targetPort: 9443 + type: ValidatingAdmissionWebhook + webhookPath: /validate-org-eclipse-che-v2-checluster - admissionReviewVersions: - v1 - v2 @@ -1514,9 +1378,9 @@ spec: type: ConversionWebhook webhookPath: /convert relatedImages: - - name: che-operator-7.53.0 - image: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e - # tag: quay.io/eclipse/che-operator:7.53.0 + - name: che-operator-7.54.0 + image: quay.io/eclipse/che-operator@sha256:2c61b1a8dfe3010a2df42481b969a674d2ee0ca3097e0319d0be1199de945fd6 + # tag: quay.io/eclipse/che-operator:7.54.0 - name: kube-rbac-proxy-v0.11.0 image: quay.io/brancz/kube-rbac-proxy@sha256:b62289c3f3f883ee76dd4e8879042dd19abff743340e451cb59f9654fc472e4f # tag: quay.io/brancz/kube-rbac-proxy:v0.11.0 @@ -1526,9 +1390,6 @@ spec: - name: header-rewrite-proxy-latest image: quay.io/che-incubator/header-rewrite-proxy@sha256:bd7873b8feef35f218f54c6251ea224bea2c8bf202a328230019a0ba2941245d # tag: quay.io/che-incubator/header-rewrite-proxy:latest - - name: devworkspace-controller-v0.15.2 - image: quay.io/devfile/devworkspace-controller@sha256:b1903b796fc6bc91125b8a6cf58dfa2cc21706d16bdd5a25a25ff2da83f47705 - # tag: quay.io/devfile/devworkspace-controller:v0.15.2 - name: che--centos--postgresql-13-centos7-1-71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2 image: quay.io/eclipse/che--centos--postgresql-13-centos7@sha256:71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2 # tag: quay.io/eclipse/che--centos--postgresql-13-centos7:1-71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2 @@ -1538,18 +1399,18 @@ spec: - name: che--traefik-v2.8.1-4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3 image: quay.io/eclipse/che--traefik@sha256:4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3 # tag: quay.io/eclipse/che--traefik:v2.8.1-4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3 - - name: che-dashboard-7.53.0 - image: quay.io/eclipse/che-dashboard@sha256:db5c199ebff922a5fa9acccedfccee5b94e6109c1b1200c676788533bcef8363 - # tag: quay.io/eclipse/che-dashboard:7.53.0 - - name: che-devfile-registry-7.53.0 - image: quay.io/eclipse/che-devfile-registry@sha256:db013e7e7e1d53245cde3ca1961e21f51c022c6b4c809f258002248f2c2a694a - # tag: quay.io/eclipse/che-devfile-registry:7.53.0 - - name: che-plugin-registry-7.53.0 - image: quay.io/eclipse/che-plugin-registry@sha256:0b8df587b660df479e63510fedcd38b2d756d560dc0a5199588d37195f3386b2 - # tag: quay.io/eclipse/che-plugin-registry:7.53.0 - - name: che-server-7.53.0 - image: quay.io/eclipse/che-server@sha256:3a6a25a28fb742acb4729113fed92c63bc56b2c4daf8d93c6576689d7dd6a669 - # tag: quay.io/eclipse/che-server:7.53.0 + - name: che-dashboard-7.54.0 + image: quay.io/eclipse/che-dashboard@sha256:a77776fa65bea708fc1f7cd968e5d8fa53fab48b5065a0bedbbd162d5936a699 + # tag: quay.io/eclipse/che-dashboard:7.54.0 + - name: che-devfile-registry-7.54.0 + image: quay.io/eclipse/che-devfile-registry@sha256:5f6eaf3ebcff47799da62112112a0630c3bb55ed81067d53e80b439fd8a56314 + # tag: quay.io/eclipse/che-devfile-registry:7.54.0 + - name: che-plugin-registry-7.54.0 + image: quay.io/eclipse/che-plugin-registry@sha256:7e96b6abead4f89d28a2628ccfc89f5ac113dab601eec8813f7f8f9979a04353 + # tag: quay.io/eclipse/che-plugin-registry:7.54.0 + - name: che-server-7.54.0 + image: quay.io/eclipse/che-server@sha256:ed3b76026f9afc52b858190a10440ec121b0110c4c5fce6035d664cfa79e6b3c + # tag: quay.io/eclipse/che-server:7.54.0 - name: che-tls-secret-creator-alpine-01a4c34 image: quay.io/eclipse/che-tls-secret-creator@sha256:54df0ccf598d230e278d512c3b44bdf24edb280f71da32643db46e0120bfaee0 # tag: quay.io/eclipse/che-tls-secret-creator:alpine-01a4c34 @@ -1640,15 +1501,15 @@ spec: - name: che-plugin-sidecar-@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f image: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f # tag: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f - - name: che-theia-@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 - image: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 - # tag: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 - - name: che-machine-exec-@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a - image: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a - # tag: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a - - name: che-theia-endpoint-runtime-binary-@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 - image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 - # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 + - name: che-theia-@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 + image: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 + # tag: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 + - name: che-machine-exec-@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 + image: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 + # tag: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 + - name: che-theia-endpoint-runtime-binary-@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 + image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 + # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 - name: che-editor-jupyter-@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47 image: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47 # tag: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47 @@ -1665,19 +1526,22 @@ spec: image: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7 # tag: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7 - name: che-code-insiders - image: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 + image: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966 # tag: quay.io/che-incubator/che-code:insiders + - name: che-code-@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f + image: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f + # tag: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f - name: universal-developer-image-@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4 image: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4 # tag: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4 - name: che-idea-next - image: quay.io/che-incubator/che-idea@sha256:2a88672127b5cb4a583402250b15078a8bb8f2f7d400e3f6af2aae795f46018a + image: quay.io/che-incubator/che-idea@sha256:f6a10da8889b342945ff3a18a561b2c276518ddf5a6a90abd8589d251d38125f # tag: quay.io/che-incubator/che-idea:next - name: che-idea-@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b image: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b # tag: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b - name: che-pycharm-next - image: quay.io/che-incubator/che-pycharm@sha256:8d403ceaaa3e38a813fbc8398e48a3dd410499907daf1e544fd2532ccee9289a + image: quay.io/che-incubator/che-pycharm@sha256:35c286bf0d98f5cf66f15b73379741f770f7d840229e78a3a8a61fa49af38a83 # tag: quay.io/che-incubator/che-pycharm:next - name: che-pycharm-@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b image: quay.io/che-incubator/che-pycharm@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b @@ -1712,15 +1576,15 @@ spec: - name: che--mariadb-10.7.1-5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7 image: quay.io/eclipse/che--mariadb@sha256:5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7 # tag: quay.io/eclipse/che--mariadb:10.7.1-5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7 - - name: che-machine-exec-7.53.0 - image: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a - # tag: quay.io/eclipse/che-machine-exec:7.53.0 - - name: che-theia-endpoint-runtime-binary-7.53.0 - image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 - # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary:7.53.0 - - name: che-theia-7.53.0 - image: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 - # tag: quay.io/eclipse/che-theia:7.53.0 + - name: che-machine-exec-7.54.0 + image: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 + # tag: quay.io/eclipse/che-machine-exec:7.54.0 + - name: che-theia-endpoint-runtime-binary-7.54.0 + image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 + # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary:7.54.0 + - name: che-theia-7.54.0 + image: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 + # tag: quay.io/eclipse/che-theia:7.54.0 - name: ubi-minimal- - image: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7 + image: registry.access.redhat.com/ubi8/ubi-minimal@sha256:e58664de16551db29fb0eaaeb3c4a44eaf95ad89a5b2399a1107041c4f2d6d34 # tag: registry.access.redhat.com/ubi8/ubi-minimal diff --git a/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml.diff b/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml.diff index 09b8e888c..2e27aa0fb 100644 --- a/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml.diff +++ b/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml.diff @@ -1,256 +1,836 @@ ---- /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/generated/openshift/che-operator.clusterserviceversion.yaml 2022-09-02 08:44:51.785211848 +0000 -+++ /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml 2022-09-02 08:46:52.166821085 +0000 -@@ -65,8 +65,8 @@ +--- /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/generated/openshift/che-operator.clusterserviceversion.yaml 2022-09-22 20:03:34.560796009 +0000 ++++ /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml 2022-09-22 20:06:19.417863794 +0000 +@@ -58,6 +58,7 @@ + "components": {}, + "containerRegistry": {}, + "devEnvironments": {}, ++ "gitServices": {}, + "networking": {} + } + } +@@ -65,8 +66,8 @@ capabilities: Seamless Upgrades categories: Developer Tools certified: "false" -- containerImage: quay.io/eclipse/che-operator@sha256:31020d5abdf9ca901b5ec09176402b5fc0287f1b98681e12cf7c1b2fa39b47ac -- createdAt: "2022-08-10T18:54:07Z" -+ containerImage: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e -+ createdAt: "2022-09-02T08:44:51Z" +- containerImage: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e +- createdAt: "2022-09-02T08:44:51Z" ++ containerImage: quay.io/eclipse/che-operator@sha256:2c61b1a8dfe3010a2df42481b969a674d2ee0ca3097e0319d0be1199de945fd6 ++ createdAt: "2022-09-22T20:03:34Z" description: A Kube-native development solution that delivers portable and collaborative developer workspaces. operatorframework.io/suggested-namespace: openshift-operators -@@ -76,7 +76,7 @@ +@@ -76,7 +77,7 @@ operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/eclipse-che/che-operator support: Eclipse Foundation -- name: eclipse-che-preview-openshift.v7.52.0 -+ name: eclipse-che-preview-openshift.v7.53.0 +- name: eclipse-che-preview-openshift.v7.53.0 ++ name: eclipse-che-preview-openshift.v7.54.0 namespace: placeholder spec: apiservicedefinitions: {} -@@ -1093,15 +1093,15 @@ +@@ -129,6 +130,10 @@ + - description: Che components configuration. + displayName: Components + path: components ++ - description: A configuration that allows users to work with remote Git ++ repositories. ++ displayName: Git Services ++ path: gitServices + - description: Networking, Che authentication, and TLS configuration. + displayName: Networking + path: networking +@@ -136,6 +141,44 @@ + images. + displayName: Container registry + path: containerRegistry ++ - description: Enables users to work with repositories hosted on Bitbucket ++ (bitbucket.org or self-hosted). ++ displayName: Bitbucket ++ path: gitServices.bitbucket ++ - description: 'Kubernetes secret, that contains Base64-encoded Bitbucket ++ OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application ++ link consumer key and Bitbucket Application link shared secret must ++ be stored in `private.key`, `consumer.key` and `shared_secret` keys ++ respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. ++ For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer ++ secret must be stored in `id` and `secret` keys respectively. See the ++ following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' ++ displayName: Secret Name ++ path: gitServices.bitbucket[0].secretName ++ x-descriptors: ++ - urn:alm:descriptor:io.kubernetes:Secret ++ - description: Enables users to work with repositories hosted on GitHub ++ (github.com or GitHub Enterprise). ++ displayName: GitHub ++ path: gitServices.github ++ - description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth ++ Client id and GitHub OAuth Client secret, that stored in `id` and `secret` ++ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' ++ displayName: Secret Name ++ path: gitServices.github[0].secretName ++ x-descriptors: ++ - urn:alm:descriptor:io.kubernetes:Secret ++ - description: Enables users to work with repositories hosted on GitLab ++ (gitlab.com or self-hosted). ++ displayName: GitLab ++ path: gitServices.gitlab ++ - description: 'Kubernetes secret, that contains Base64-encoded GitHub Application ++ id and GitLab Application Client secret, that stored in `id` and `secret` ++ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' ++ displayName: Secret Name ++ path: gitServices.gitlab[0].secretName ++ x-descriptors: ++ - urn:alm:descriptor:io.kubernetes:Secret + statusDescriptors: + - description: Specifies the current phase of the Che deployment. + displayName: ChePhase +@@ -258,6 +301,48 @@ + path: devWorkspace.enable + x-descriptors: + - urn:alm:descriptor:com.tectonic.ui:booleanSwitch ++ - description: A configuration that allows users to work with remote Git ++ repositories. ++ displayName: Git Services ++ path: gitServices ++ - description: Enables users to work with repositories hosted on Bitbucket ++ (bitbucket.org or self-hosted). ++ displayName: Bitbucket ++ path: gitServices.bitbucket ++ - description: 'Kubernetes secret, that contains Base64-encoded Bitbucket ++ OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application ++ link consumer key and Bitbucket Application link shared secret must ++ be stored in `private.key`, `consumer.key` and `shared_secret` keys ++ respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. ++ For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer ++ secret must be stored in `id` and `secret` keys respectively. See the ++ following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' ++ displayName: Secret Name ++ path: gitServices.bitbucket[0].secretName ++ x-descriptors: ++ - urn:alm:descriptor:io.kubernetes:Secret ++ - description: Enables users to work with repositories hosted on GitHub ++ (github.com or GitHub Enterprise). ++ displayName: GitHub ++ path: gitServices.github ++ - description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth ++ Client id and GitHub OAuth Client secret, that stored in `id` and `secret` ++ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' ++ displayName: Secret Name ++ path: gitServices.github[0].secretName ++ x-descriptors: ++ - urn:alm:descriptor:io.kubernetes:Secret ++ - description: Enables users to work with repositories hosted on GitLab ++ (gitlab.com or self-hosted). ++ displayName: GitLab ++ path: gitServices.gitlab ++ - description: 'Kubernetes secret, that contains Base64-encoded GitHub Application ++ id and GitLab Application Client secret, that stored in `id` and `secret` ++ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' ++ displayName: Secret Name ++ path: gitServices.gitlab[0].secretName ++ x-descriptors: ++ - urn:alm:descriptor:io.kubernetes:Secret + - description: Kubernetes Image Puller configuration + displayName: Kubernetes Image Puller + path: imagePuller +@@ -472,6 +557,8 @@ + resources: + - clusterrolebindings + - clusterroles ++ - roles ++ - rolebindings + verbs: + - list + - create +@@ -480,16 +567,6 @@ + - get + - delete + - apiGroups: +- - rbac.authorization.k8s.io +- resources: +- - roles +- - rolebindings +- verbs: +- - get +- - create +- - update +- - delete +- - apiGroups: + - authorization.openshift.io + resources: + - roles +@@ -700,26 +777,7 @@ + - get + - update + - watch +- - apiGroups: +- - controller.devfile.io +- resources: +- - devworkspaceroutings +- verbs: +- - '*' +- - apiGroups: +- - controller.devfile.io +- resources: +- - devworkspaceroutings/finalizers +- verbs: +- - update +- - apiGroups: +- - controller.devfile.io +- resources: +- - devworkspaceroutings/status +- verbs: +- - get +- - patch +- - update ++ - list + - apiGroups: + - monitoring.coreos.com + resources: +@@ -762,215 +820,29 @@ + - get + - list + - watch +- - apiGroups: +- - controller.devfile.io +- resources: +- - devworkspaceroutings +- - components +- verbs: +- - get +- - list +- - watch +- - apiGroups: +- - workspace.devfile.io +- resources: +- - devworkspaces +- - devworkspacetemplates +- verbs: + - create + - delete +- - deletecollection + - patch + - update + - apiGroups: + - controller.devfile.io + resources: + - devworkspaceroutings +- - components +- verbs: +- - create +- - delete +- - deletecollection +- - patch +- - update +- - apiGroups: +- - "" +- resources: +- - configmaps +- verbs: +- - get +- - list +- - watch +- - create +- - update +- - patch +- - delete +- - apiGroups: +- - "" +- resources: +- - configmaps/status +- verbs: +- - get +- - update +- - patch +- - apiGroups: +- - "" +- resources: +- - events +- verbs: +- - create +- - patch +- - apiGroups: +- - authentication.k8s.io +- resources: +- - tokenreviews +- verbs: +- - create +- - apiGroups: +- - authorization.k8s.io +- resources: +- - subjectaccessreviews +- verbs: +- - create +- - apiGroups: +- - "" +- resourceNames: +- - workspace-preferences-configmap +- resources: +- - configmaps +- verbs: +- - create +- - delete +- - get +- - patch +- - apiGroups: +- - "" +- resources: +- - configmaps +- - persistentvolumeclaims +- - pods +- - secrets +- - serviceaccounts +- verbs: +- - '*' +- - apiGroups: +- - "" +- resources: +- - events +- - namespaces +- verbs: +- - get +- - list +- - watch +- - apiGroups: +- - "" +- resources: +- - pods/exec +- verbs: +- - create +- - apiGroups: +- - "" +- resourceNames: +- - workspace-credentials-secret +- resources: +- - secrets +- verbs: +- - create +- - delete +- - get +- - patch +- - apiGroups: +- - "" +- resources: +- - services +- verbs: +- - '*' +- - apiGroups: +- - admissionregistration.k8s.io +- resources: +- - mutatingwebhookconfigurations +- - validatingwebhookconfigurations +- verbs: +- - create +- - delete +- - get +- - list +- - patch +- - update +- - watch +- - apiGroups: +- - apps +- resourceNames: +- - devworkspace-controller +- resources: +- - deployments/finalizers +- verbs: +- - update +- - apiGroups: +- - apps +- - extensions +- resources: +- - deployments +- verbs: +- - get +- - list +- - watch +- - apiGroups: +- - apps +- - extensions +- resources: +- - deployments +- - replicasets +- verbs: +- - '*' +- - apiGroups: +- - apps +- - extensions +- resources: +- - replicasets ++ - devworkspaceoperatorconfigs + verbs: + - get + - list + - watch +- - apiGroups: +- - authorization.k8s.io +- resources: +- - localsubjectaccessreviews +- - subjectaccessreviews +- verbs: +- - create +- - apiGroups: +- - batch +- resources: +- - jobs +- verbs: + - create + - delete +- - get +- - list + - patch + - update +- - watch +- - apiGroups: +- - config.openshift.io +- resourceNames: +- - cluster +- resources: +- - proxies +- verbs: +- - get + - apiGroups: + - controller.devfile.io + resources: +- - '*' +- verbs: +- - '*' +- - apiGroups: +- - controller.devfile.io +- resources: +- - devworkspaceroutings ++ - devworkspaceroutings/finalizers + verbs: +- - '*' ++ - update + - apiGroups: + - controller.devfile.io + resources: +@@ -980,82 +852,17 @@ + - patch + - update + - apiGroups: +- - coordination.k8s.io +- resources: +- - leases +- verbs: +- - create +- - get +- - update +- - apiGroups: +- - metrics.k8s.io +- resources: +- - pods +- verbs: +- - get +- - list +- - watch +- - apiGroups: +- - monitoring.coreos.com +- resources: +- - servicemonitors +- verbs: +- - create +- - get +- - apiGroups: +- - networking.k8s.io +- resources: +- - ingresses +- verbs: +- - '*' +- - apiGroups: +- - oauth.openshift.io +- resources: +- - oauthclients +- verbs: +- - create +- - delete +- - deletecollection +- - get +- - list +- - patch +- - update +- - watch +- - apiGroups: +- - rbac.authorization.k8s.io ++ - authentication.k8s.io + resources: +- - clusterrolebindings +- - clusterroles +- - rolebindings +- - roles ++ - tokenreviews + verbs: + - create +- - get +- - list +- - update +- - watch +- - apiGroups: +- - route.openshift.io +- resources: +- - routes +- verbs: +- - '*' + - apiGroups: +- - route.openshift.io ++ - authorization.k8s.io + resources: +- - routes/custom-host ++ - subjectaccessreviews + verbs: + - create +- - apiGroups: +- - workspace.devfile.io +- resources: +- - '*' +- verbs: +- - '*' +- - nonResourceURLs: +- - /metrics +- verbs: +- - get + serviceAccountName: che-operator + deployments: + - name: che-operator +@@ -1093,15 +900,15 @@ - name: OPERATOR_NAME value: che-operator - name: CHE_VERSION -- value: 7.52.0 -+ value: 7.53.0 +- value: 7.53.0 ++ value: 7.54.0 - name: RELATED_IMAGE_che_server -- value: quay.io/eclipse/che-server@sha256:3b789336eab3389f5b153c4efb1371099da0b6779563d91b0bfb7b97ce9f0a70 -+ value: quay.io/eclipse/che-server@sha256:3a6a25a28fb742acb4729113fed92c63bc56b2c4daf8d93c6576689d7dd6a669 +- value: quay.io/eclipse/che-server@sha256:3a6a25a28fb742acb4729113fed92c63bc56b2c4daf8d93c6576689d7dd6a669 ++ value: quay.io/eclipse/che-server@sha256:ed3b76026f9afc52b858190a10440ec121b0110c4c5fce6035d664cfa79e6b3c - name: RELATED_IMAGE_dashboard -- value: quay.io/eclipse/che-dashboard@sha256:6739a36a98a6243392a12746163c3dfab8ff7ea8fdeb463295bfa55346ce52f0 -+ value: quay.io/eclipse/che-dashboard@sha256:db5c199ebff922a5fa9acccedfccee5b94e6109c1b1200c676788533bcef8363 +- value: quay.io/eclipse/che-dashboard@sha256:db5c199ebff922a5fa9acccedfccee5b94e6109c1b1200c676788533bcef8363 ++ value: quay.io/eclipse/che-dashboard@sha256:a77776fa65bea708fc1f7cd968e5d8fa53fab48b5065a0bedbbd162d5936a699 - name: RELATED_IMAGE_plugin_registry -- value: quay.io/eclipse/che-plugin-registry@sha256:38e8663638af790989d4d65e60f4ce4563a757f48295792f93909bc37e6927b8 -+ value: quay.io/eclipse/che-plugin-registry@sha256:0b8df587b660df479e63510fedcd38b2d756d560dc0a5199588d37195f3386b2 +- value: quay.io/eclipse/che-plugin-registry@sha256:0b8df587b660df479e63510fedcd38b2d756d560dc0a5199588d37195f3386b2 ++ value: quay.io/eclipse/che-plugin-registry@sha256:7e96b6abead4f89d28a2628ccfc89f5ac113dab601eec8813f7f8f9979a04353 - name: RELATED_IMAGE_devfile_registry -- value: quay.io/eclipse/che-devfile-registry@sha256:835f748422097416c6f3963ae2cb64ba254a24d3705f60cef5c49eb45f2c4a04 -+ value: quay.io/eclipse/che-devfile-registry@sha256:db013e7e7e1d53245cde3ca1961e21f51c022c6b4c809f258002248f2c2a694a +- value: quay.io/eclipse/che-devfile-registry@sha256:db013e7e7e1d53245cde3ca1961e21f51c022c6b4c809f258002248f2c2a694a ++ value: quay.io/eclipse/che-devfile-registry@sha256:5f6eaf3ebcff47799da62112112a0630c3bb55ed81067d53e80b439fd8a56314 - name: RELATED_IMAGE_che_tls_secrets_creation_job value: quay.io/eclipse/che-tls-secret-creator@sha256:54df0ccf598d230e278d512c3b44bdf24edb280f71da32643db46e0120bfaee0 - name: RELATED_IMAGE_postgres -@@ -1115,9 +1115,9 @@ - - name: RELATED_IMAGE_devworkspace_controller - value: quay.io/devfile/devworkspace-controller@sha256:b1903b796fc6bc91125b8a6cf58dfa2cc21706d16bdd5a25a25ff2da83f47705 +@@ -1112,8 +919,6 @@ + value: quay.io/eclipse/che--traefik@sha256:4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3 + - name: RELATED_IMAGE_single_host_gateway_config_sidecar + value: quay.io/che-incubator/configbump@sha256:175ff2ba1bd74429de192c0a9facf39da5699c6da9f151bd461b3dc8624dd532 +- - name: RELATED_IMAGE_devworkspace_controller +- value: quay.io/devfile/devworkspace-controller@sha256:b1903b796fc6bc91125b8a6cf58dfa2cc21706d16bdd5a25a25ff2da83f47705 - name: RELATED_IMAGE_gateway_authentication_sidecar -- value: quay.io/openshift/origin-oauth-proxy@sha256:4814e2dc961acf570a6318294ae0f253426a3d387c9b128a2522f416d0cf6e2f -+ value: quay.io/openshift/origin-oauth-proxy@sha256:0e72ed64cdf76828392ef8cfe4ee49d644a013ac00ff1590d6c53774d77615e3 + value: quay.io/openshift/origin-oauth-proxy@sha256:0e72ed64cdf76828392ef8cfe4ee49d644a013ac00ff1590d6c53774d77615e3 - name: RELATED_IMAGE_gateway_authorization_sidecar -- value: quay.io/openshift/origin-kube-rbac-proxy@sha256:fcce680899a37d6bdc621a58b6da0587d01cbb49a2d7b713e0d606dffc9f685a -+ value: quay.io/openshift/origin-kube-rbac-proxy@sha256:511e2288e987027a9e044f789ca117cd1d9a91744a8427e3dc841dd613554613 - - name: RELATED_IMAGE_gateway_authentication_sidecar_k8s - value: quay.io/oauth2-proxy/oauth2-proxy@sha256:21efe7d87bbfde86a2929bc26f5ea2929a3ad263276941bd867b6633c9ca427c - - name: RELATED_IMAGE_gateway_authorization_sidecar_k8s -@@ -1138,8 +1138,6 @@ - value: "1" - - name: ADD_COMPONENT_READINESS_INIT_CONTAINERS - value: "false" -- - name: NO_OPT_DWO -- value: 'true' - - name: RELATED_IMAGE_che_plugin_sidecar_plugin_registry_image_IBZWQYJSGU3DUNDCMNSTEZJTHFTGKZJWMI4WKNDBHBRDIZJYGY4DCMZYGBRWKMRUGYZDMNZUGU4TOYJUHBRDQMLDGEZTCY3CMJTDANJVMRSDKZBQMMZQ____ - value: quay.io/eclipse/che-plugin-sidecar@sha256:4bce2e39fee6b9e4a8b4e8681380ce2462674597a48b81c131cbbf055dd5d0c3 - - name: RELATED_IMAGE_che_plugin_sidecar_plugin_registry_image_IBZWQYJSGU3DUN3DMY3GMMBQMQZWMMTEMFTDANBWG42TMMJYMM2DAODFGA4GMMBRHFTDENLCHEYWKYZQHBSDENZZGA4TIZTEMRRDAMLGGU2TSNJQGJRA____ -@@ -1192,12 +1190,12 @@ +@@ -1190,12 +995,12 @@ value: quay.io/eclipse/che-plugin-sidecar@sha256:2ba8fffe6f2d64f82896367a34fdb657672984548c7904f906178e8e08294277 - name: RELATED_IMAGE_che_plugin_sidecar_plugin_registry_image_IBZWQYJSGU3DUYTCGQYDIZTGMFQTCMRVGY2WEZLCGEZGENDDMQ4DCNRQMNTGCM3GMYZWKZRTMJSTIMRQGQZTAYJWGU3DEZRRMZSTIOBWGM4WGYTGGFTA____ value: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f -- - name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUMJRGMYDMNRVGI3GCOJYGM2TAYLEHEYGMNJTMQZWENDGMY4TSMJRGRSDEN3EGRQWEMTEMI3DKOJQGRRGIYTEG5RTIZDEME2TSMRYMQ2Q____ -- value: quay.io/eclipse/che-theia@sha256:113066526a98350ad90f53d3b4ff99114d27d4ab2db65904bdbd7c4dda5928d5 -- - name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUMRYGAYGGYRYMFRTSNJWGQ3TQNTGGFSDAOBXG5QTENRSHA4DQNDGMM2DKZRQHBQWGZLFGQ2TOZBUHE3WEYRYGNQTGYTDGEYTOM3BMJRQ____ -- value: quay.io/eclipse/che-machine-exec@sha256:2800cb8ac9564786f1d0877a2628884fc45f08acee457d497bb83a3bc1173abc -- - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUZBZGBRDAYZQMVQTIMLCGY2TSMTCGMYDCODDGA4WEOLFGA2GCN3DMNTDQNLBGZTDIZJWMRTDCMBXMM2WINTFGZSDKMJUME2TEMRYMYZA____ -- value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:d90b0c0ea41b6592b3018c09b9e04a7ccf85a6f4e6df107c5d6e6d514a5228f2 -+ - name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUNJQGI3DMMDFME2DMNLGGI4TQMLCGUZGGZJYMNTGENJTGFQWKMRTHAYDGN3GME2GCY3BMJRWINBVMMZTKOJWGM2TAOLCGA4DKODGMI3Q____ -+ value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 -+ - name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUYRWGRQTIMBRHA3WMN3BMJSTKNTGHFTDIZDFMRSTIYZRGE4TSZBYG5SWIYLEHAYDMZJSMVRTIOBQGJTGCZLCGJRGINJQMQYWGZDGHFQQ____ -+ value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a -+ - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNRRGA4WENJVHAYTGY3EHE4DOOJUMMZWCZRVMJSDAN3EGBSDGMDBMRSWGNTEGUYDINJWGRSDQNBSMQ3TSZBZGVTDANZTMIZTIZLGMMYQ____ -+ value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 +- - name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUNJQGI3DMMDFME2DMNLGGI4TQMLCGUZGGZJYMNTGENJTGFQWKMRTHAYDGN3GME2GCY3BMJRWINBVMMZTKOJWGM2TAOLCGA4DKODGMI3Q____ +- value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 +- - name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUYRWGRQTIMBRHA3WMN3BMJSTKNTGHFTDIZDFMRSTIYZRGE4TSZBYG5SWIYLEHAYDMZJSMVRTIOBQGJTGCZLCGJRGINJQMQYWGZDGHFQQ____ +- value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a +- - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNRRGA4WENJVHAYTGY3EHE4DOOJUMMZWCZRVMJSDAN3EGBSDGMDBMRSWGNTEGUYDINJWGRSDQNBSMQ3TSZBZGVTDANZTMIZTIZLGMMYQ____ +- value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 ++ - name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUOBVGNRTMN3DGA3TMNZTME4DONZYGI3WKMDCGU4GEZBXHE2GIYTCGQ3WKOJSG42DONJVME3DSYRWGUZWEYJRMRQTMNLFHEYTKNBSGA4A____ ++ value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 ++ - name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUZRXMI2DSZBUG43WEZBTGIYTAZRSHEYDQMBXMUZWKMLCGBQTIYZWMQYDENDDGQ4DENBRMI3GKZRUGBTDANLEMI4TONDCHFSDEMJWGIYQ____ ++ value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 ++ - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNDCMQYDMMBYHEZTINTFMQ4DGMZRMQ4GCYTCMZSTAZBZMYYWMYTFHFTDEODEG4ZGCZBRG42TENJYGE3TGMDEMRSTQM3GGRSWGOJQMQ3A____ ++ value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 - name: RELATED_IMAGE_che_editor_jupyter_plugin_registry_image_IBZWQYJSGU3DUOBTGQZTSYLFHFSWIY3BMEZWCOJXGUZTMNZUGIZTCNLBG44TCMTGHEZWKNBZHFTDIOJYGQ3WIYJQHE2GGNBYGAYDGMLFMFSTIYTBGQ3Q____ value: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47 - name: RELATED_IMAGE_dirigible_openshift_plugin_registry_image_IBZWQYJSGU3DUMZTGY2TMMZVMQYWKMBUGAZTMOJXMRSWCMBWG42GEYTCMRRTONBZMM2GEZJSMRRDEOJYGE4GCOJTMI4GKMLFGUZWGM3DGUYTINBRGEZQ____ -@@ -1209,7 +1207,7 @@ +@@ -1207,15 +1012,17 @@ - name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNJTMNSWGNJYMRSDCOJQMRSDCZJQGYYTAMBUG44GCZJYG44WIN3DGI4GCYTEHBTGGOBYGNSDKZTEMY2WEZJTMVRDMZJZGQZWMZJVMU3Q____ value: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7 - name: RELATED_IMAGE_che_code_plugin_registry_image_NFXHG2LEMVZHG___ -- value: quay.io/che-incubator/che-code@sha256:a41699f3f2a7927c702ba7eee078ff9715f6e940cd88af386e0e9435174deb0f -+ value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 +- value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 ++ value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966 ++ - name: RELATED_IMAGE_che_code_plugin_registry_image_IBZWQYJSGU3DUNTBHFRTCZJXMIZTMYTBMJSTINLDGRSTONRRMM2WKNLFGAZWGMBQGU2DQNZZGMZWGMZRMI2WMMRXMM3DONTGMI4DGZRSMEZDEN3GGZTA____ ++ value: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f - name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNBZHE4DMZTFMQ3WMNDFGI2TKNLBGE2TIYZYGU3DOOJVMM3DQOLCHAZTMNZSGA3GENRTMVRTGNZUGI3GMZJSMM4GKNBTMY2TMMZQMU2A____ value: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4 - name: RELATED_IMAGE_che_idea_plugin_registry_image_NZSXQ5A_ -@@ -1227,7 +1225,7 @@ +- value: quay.io/che-incubator/che-idea@sha256:2a88672127b5cb4a583402250b15078a8bb8f2f7d400e3f6af2aae795f46018a ++ value: quay.io/che-incubator/che-idea@sha256:f6a10da8889b342945ff3a18a561b2c276518ddf5a6a90abd8589d251d38125f + - name: RELATED_IMAGE_che_idea_plugin_registry_image_IBZWQYJSGU3DUYRWMM4TGZJYGNRWMMRRGU3TAZLCGYYDIOJQGBSWCOBRG5TDIOBTGZTDIMBVGQZDENZUMJRDMY3BMZRGMNLEMI3GENLBG5TDAYRWHFRA____ + value: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b + - name: RELATED_IMAGE_che_pycharm_plugin_registry_image_NZSXQ5A_ +- value: quay.io/che-incubator/che-pycharm@sha256:8d403ceaaa3e38a813fbc8398e48a3dd410499907daf1e544fd2532ccee9289a ++ value: quay.io/che-incubator/che-pycharm@sha256:35c286bf0d98f5cf66f15b73379741f770f7d840229e78a3a8a61fa49af38a83 + - name: RELATED_IMAGE_che_pycharm_plugin_registry_image_IBZWQYJSGU3DUYZQMU3GMMLCGAZTAZDDGAYWKZBTMJQWCNJUHAYTIOBSMM3GCYRWGI2DKNTFHE2DGNDDGBTDQYRVGRSWEOLDMQZGEOBYGU2GGNJZG5RA____ + value: quay.io/che-incubator/che-pycharm@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b + - name: RELATED_IMAGE_che_buildah_base_plugin_registry_image_IBZWQYJSGU3DUNBRG4ZDAM3EHA3DEOLFMRSDSMTGGE4DOYLGMQZWKYTCGNSDQZDDGI4DGMZYMQZTIOBQHFSWENZVMZTGGMTFGA4GCNBQGBTDQZBVGZRA____ +@@ -1225,7 +1032,7 @@ - name: RELATED_IMAGE_che_buildkit_base_plugin_registry_image_IBZWQYJSGU3DUZLGMZQTSODEMQZGGZLEGMYGENJSGBRDENLBMZTGMMLBHA4DAZBRGIYWGZRWMIZWMODBMI2DEYJVGE2DSZLBMRQTINTCME3TSM3DMU4Q____ value: quay.io/eclipse/che-buildkit-base@sha256:effa98dd2ced30b520b25afff1a880d121cf6b3f8ab42a5149eada46ba793ce9 - name: RELATED_IMAGE_che_code_devfile_registry_image_NFXHG2LEMVZHG___ -- value: quay.io/che-incubator/che-code@sha256:a41699f3f2a7927c702ba7eee078ff9715f6e940cd88af386e0e9435174deb0f -+ value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 +- value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 ++ value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966 - name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGBSTCOBZMQ4Q____ value: quay.io/devfile/universal-developer-image@sha256:66369ff476b6bd035f5a992d505b0e2a624f46a7d180acb61c41086a37739eea - name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGMYDKNLFGZSA____ -@@ -1242,15 +1240,15 @@ +@@ -1240,15 +1047,15 @@ value: quay.io/eclipse/che--centos--mysql-57-centos7@sha256:e08ee4d43b7356607685b69bde6335e27cf20c020f345b6c6c59400183882764 - name: RELATED_IMAGE_che__mariadb_devfile_registry_image_GEYC4NZOGEWTKYJYGAYDSMZWHFSWKNJXMM4DKYRWMY2GCMBYGQYDMMJUG5RGIOLDGUYDKY3EMU3GEOBSGUYGIMJWMEZDOZBSME2WMZLCMZSGKYLEG4______ value: quay.io/eclipse/che--mariadb@sha256:5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7 -- - name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKMROGA______ -- value: quay.io/eclipse/che-machine-exec@sha256:2800cb8ac9564786f1d0877a2628884fc45f08acee457d497bb83a3bc1173abc -- - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKMROGA______ -- value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:d90b0c0ea41b6592b3018c09b9e04a7ccf85a6f4e6df107c5d6e6d514a5228f2 -- - name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKMROGA______ -- value: quay.io/eclipse/che-theia@sha256:113066526a98350ad90f53d3b4ff99114d27d4ab2db65904bdbd7c4dda5928d5 -+ - name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKMZOGA______ -+ value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a -+ - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKMZOGA______ -+ value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 -+ - name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKMZOGA______ -+ value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 +- - name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKMZOGA______ +- value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a +- - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKMZOGA______ +- value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 +- - name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKMZOGA______ +- value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 ++ - name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKNBOGA______ ++ value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 ++ - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKNBOGA______ ++ value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 ++ - name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKNBOGA______ ++ value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 - name: RELATED_IMAGE_ubi_minimal_devfile_registry_image_ -- value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:6e79406e33049907e875cb65a31ee2f0575f47afa0f06e3a2a9316b01ee379eb -- image: quay.io/eclipse/che-operator@sha256:31020d5abdf9ca901b5ec09176402b5fc0287f1b98681e12cf7c1b2fa39b47ac -+ value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7 -+ image: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e +- value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7 +- image: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e ++ value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:e58664de16551db29fb0eaaeb3c4a44eaf95ad89a5b2399a1107041c4f2d6d34 ++ image: quay.io/eclipse/che-operator@sha256:2c61b1a8dfe3010a2df42481b969a674d2ee0ca3097e0319d0be1199de945fd6 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 10 -@@ -1501,7 +1499,7 @@ +@@ -1323,7 +1130,12 @@ + resources: + - jobs + verbs: +- - '*' ++ - create ++ - delete ++ - get ++ - update ++ - watch ++ - list + - apiGroups: + - route.openshift.io + resources: +@@ -1336,15 +1148,15 @@ + resources: + - roles + - rolebindings +- verbs: +- - '*' +- - apiGroups: +- - rbac.authorization.k8s.io +- resources: + - clusterroles + - clusterrolebindings + verbs: +- - '*' ++ - list ++ - create ++ - watch ++ - update ++ - get ++ - delete + - apiGroups: + - "" + resources: +@@ -1468,6 +1280,37 @@ + - patch + - update + - watch ++ - apiGroups: ++ - "" ++ resources: ++ - configmaps ++ verbs: ++ - get ++ - list ++ - watch ++ - create ++ - update ++ - patch ++ - delete ++ - apiGroups: ++ - coordination.k8s.io ++ resources: ++ - leases ++ verbs: ++ - get ++ - list ++ - watch ++ - create ++ - update ++ - patch ++ - delete ++ - apiGroups: ++ - "" ++ resources: ++ - events ++ verbs: ++ - create ++ - patch + serviceAccountName: che-operator + strategy: deployment + installModes: +@@ -1499,10 +1342,31 @@ maturity: stable provider: name: Eclipse Foundation -- version: 7.52.0 -+ version: 7.53.0 +- version: 7.53.0 ++ version: 7.54.0 webhookdefinitions: - admissionReviewVersions: - v1 -@@ -1516,9 +1514,9 @@ ++ - v1beta1 ++ containerPort: 443 ++ deploymentName: che-operator ++ failurePolicy: Fail ++ generateName: vchecluster.kb.io ++ rules: ++ - apiGroups: ++ - org.eclipse.che ++ apiVersions: ++ - v2 ++ operations: ++ - CREATE ++ - UPDATE ++ resources: ++ - checlusters ++ sideEffects: None ++ targetPort: 9443 ++ type: ValidatingAdmissionWebhook ++ webhookPath: /validate-org-eclipse-che-v2-checluster ++ - admissionReviewVersions: ++ - v1 + - v2 + containerPort: 443 + conversionCRDs: +@@ -1514,9 +1378,9 @@ type: ConversionWebhook webhookPath: /convert relatedImages: -- - name: che-operator-7.52.0 -- image: quay.io/eclipse/che-operator@sha256:31020d5abdf9ca901b5ec09176402b5fc0287f1b98681e12cf7c1b2fa39b47ac -- # tag: quay.io/eclipse/che-operator:7.52.0 -+ - name: che-operator-7.53.0 -+ image: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e -+ # tag: quay.io/eclipse/che-operator:7.53.0 +- - name: che-operator-7.53.0 +- image: quay.io/eclipse/che-operator@sha256:0292ec4c027645bd0c1f85083899bd4d5d25fce587c59587c938c2bf9d93782e +- # tag: quay.io/eclipse/che-operator:7.53.0 ++ - name: che-operator-7.54.0 ++ image: quay.io/eclipse/che-operator@sha256:2c61b1a8dfe3010a2df42481b969a674d2ee0ca3097e0319d0be1199de945fd6 ++ # tag: quay.io/eclipse/che-operator:7.54.0 - name: kube-rbac-proxy-v0.11.0 image: quay.io/brancz/kube-rbac-proxy@sha256:b62289c3f3f883ee76dd4e8879042dd19abff743340e451cb59f9654fc472e4f # tag: quay.io/brancz/kube-rbac-proxy:v0.11.0 -@@ -1540,30 +1538,30 @@ +@@ -1526,9 +1390,6 @@ + - name: header-rewrite-proxy-latest + image: quay.io/che-incubator/header-rewrite-proxy@sha256:bd7873b8feef35f218f54c6251ea224bea2c8bf202a328230019a0ba2941245d + # tag: quay.io/che-incubator/header-rewrite-proxy:latest +- - name: devworkspace-controller-v0.15.2 +- image: quay.io/devfile/devworkspace-controller@sha256:b1903b796fc6bc91125b8a6cf58dfa2cc21706d16bdd5a25a25ff2da83f47705 +- # tag: quay.io/devfile/devworkspace-controller:v0.15.2 + - name: che--centos--postgresql-13-centos7-1-71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2 + image: quay.io/eclipse/che--centos--postgresql-13-centos7@sha256:71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2 + # tag: quay.io/eclipse/che--centos--postgresql-13-centos7:1-71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2 +@@ -1538,18 +1399,18 @@ - name: che--traefik-v2.8.1-4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3 image: quay.io/eclipse/che--traefik@sha256:4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3 # tag: quay.io/eclipse/che--traefik:v2.8.1-4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3 -- - name: che-dashboard-7.52.0 -- image: quay.io/eclipse/che-dashboard@sha256:6739a36a98a6243392a12746163c3dfab8ff7ea8fdeb463295bfa55346ce52f0 -- # tag: quay.io/eclipse/che-dashboard:7.52.0 -- - name: che-devfile-registry-7.52.0 -- image: quay.io/eclipse/che-devfile-registry@sha256:835f748422097416c6f3963ae2cb64ba254a24d3705f60cef5c49eb45f2c4a04 -- # tag: quay.io/eclipse/che-devfile-registry:7.52.0 -- - name: che-plugin-registry-7.52.0 -- image: quay.io/eclipse/che-plugin-registry@sha256:38e8663638af790989d4d65e60f4ce4563a757f48295792f93909bc37e6927b8 -- # tag: quay.io/eclipse/che-plugin-registry:7.52.0 -- - name: che-server-7.52.0 -- image: quay.io/eclipse/che-server@sha256:3b789336eab3389f5b153c4efb1371099da0b6779563d91b0bfb7b97ce9f0a70 -- # tag: quay.io/eclipse/che-server:7.52.0 -+ - name: che-dashboard-7.53.0 -+ image: quay.io/eclipse/che-dashboard@sha256:db5c199ebff922a5fa9acccedfccee5b94e6109c1b1200c676788533bcef8363 -+ # tag: quay.io/eclipse/che-dashboard:7.53.0 -+ - name: che-devfile-registry-7.53.0 -+ image: quay.io/eclipse/che-devfile-registry@sha256:db013e7e7e1d53245cde3ca1961e21f51c022c6b4c809f258002248f2c2a694a -+ # tag: quay.io/eclipse/che-devfile-registry:7.53.0 -+ - name: che-plugin-registry-7.53.0 -+ image: quay.io/eclipse/che-plugin-registry@sha256:0b8df587b660df479e63510fedcd38b2d756d560dc0a5199588d37195f3386b2 -+ # tag: quay.io/eclipse/che-plugin-registry:7.53.0 -+ - name: che-server-7.53.0 -+ image: quay.io/eclipse/che-server@sha256:3a6a25a28fb742acb4729113fed92c63bc56b2c4daf8d93c6576689d7dd6a669 -+ # tag: quay.io/eclipse/che-server:7.53.0 +- - name: che-dashboard-7.53.0 +- image: quay.io/eclipse/che-dashboard@sha256:db5c199ebff922a5fa9acccedfccee5b94e6109c1b1200c676788533bcef8363 +- # tag: quay.io/eclipse/che-dashboard:7.53.0 +- - name: che-devfile-registry-7.53.0 +- image: quay.io/eclipse/che-devfile-registry@sha256:db013e7e7e1d53245cde3ca1961e21f51c022c6b4c809f258002248f2c2a694a +- # tag: quay.io/eclipse/che-devfile-registry:7.53.0 +- - name: che-plugin-registry-7.53.0 +- image: quay.io/eclipse/che-plugin-registry@sha256:0b8df587b660df479e63510fedcd38b2d756d560dc0a5199588d37195f3386b2 +- # tag: quay.io/eclipse/che-plugin-registry:7.53.0 +- - name: che-server-7.53.0 +- image: quay.io/eclipse/che-server@sha256:3a6a25a28fb742acb4729113fed92c63bc56b2c4daf8d93c6576689d7dd6a669 +- # tag: quay.io/eclipse/che-server:7.53.0 ++ - name: che-dashboard-7.54.0 ++ image: quay.io/eclipse/che-dashboard@sha256:a77776fa65bea708fc1f7cd968e5d8fa53fab48b5065a0bedbbd162d5936a699 ++ # tag: quay.io/eclipse/che-dashboard:7.54.0 ++ - name: che-devfile-registry-7.54.0 ++ image: quay.io/eclipse/che-devfile-registry@sha256:5f6eaf3ebcff47799da62112112a0630c3bb55ed81067d53e80b439fd8a56314 ++ # tag: quay.io/eclipse/che-devfile-registry:7.54.0 ++ - name: che-plugin-registry-7.54.0 ++ image: quay.io/eclipse/che-plugin-registry@sha256:7e96b6abead4f89d28a2628ccfc89f5ac113dab601eec8813f7f8f9979a04353 ++ # tag: quay.io/eclipse/che-plugin-registry:7.54.0 ++ - name: che-server-7.54.0 ++ image: quay.io/eclipse/che-server@sha256:ed3b76026f9afc52b858190a10440ec121b0110c4c5fce6035d664cfa79e6b3c ++ # tag: quay.io/eclipse/che-server:7.54.0 - name: che-tls-secret-creator-alpine-01a4c34 image: quay.io/eclipse/che-tls-secret-creator@sha256:54df0ccf598d230e278d512c3b44bdf24edb280f71da32643db46e0120bfaee0 # tag: quay.io/eclipse/che-tls-secret-creator:alpine-01a4c34 - - name: oauth2-proxy-v7.2.0 - image: quay.io/oauth2-proxy/oauth2-proxy@sha256:21efe7d87bbfde86a2929bc26f5ea2929a3ad263276941bd867b6633c9ca427c - # tag: quay.io/oauth2-proxy/oauth2-proxy:v7.2.0 -- - name: origin-kube-rbac-proxy-4.7 -- image: quay.io/openshift/origin-kube-rbac-proxy@sha256:fcce680899a37d6bdc621a58b6da0587d01cbb49a2d7b713e0d606dffc9f685a -- # tag: quay.io/openshift/origin-kube-rbac-proxy:4.7 -- - name: origin-oauth-proxy-4.7 -- image: quay.io/openshift/origin-oauth-proxy@sha256:4814e2dc961acf570a6318294ae0f253426a3d387c9b128a2522f416d0cf6e2f -- # tag: quay.io/openshift/origin-oauth-proxy:4.7 -+ - name: origin-kube-rbac-proxy-4.9 -+ image: quay.io/openshift/origin-kube-rbac-proxy@sha256:511e2288e987027a9e044f789ca117cd1d9a91744a8427e3dc841dd613554613 -+ # tag: quay.io/openshift/origin-kube-rbac-proxy:4.9 -+ - name: origin-oauth-proxy-4.9 -+ image: quay.io/openshift/origin-oauth-proxy@sha256:0e72ed64cdf76828392ef8cfe4ee49d644a013ac00ff1590d6c53774d77615e3 -+ # tag: quay.io/openshift/origin-oauth-proxy:4.9 - - name: che-plugin-sidecar-@sha256:4bce2e39fee6b9e4a8b4e8681380ce2462674597a48b81c131cbbf055dd5d0c3 - image: quay.io/eclipse/che-plugin-sidecar@sha256:4bce2e39fee6b9e4a8b4e8681380ce2462674597a48b81c131cbbf055dd5d0c3 - # tag: quay.io/eclipse/che-plugin-sidecar@sha256:4bce2e39fee6b9e4a8b4e8681380ce2462674597a48b81c131cbbf055dd5d0c3 -@@ -1642,15 +1640,15 @@ +@@ -1640,15 +1501,15 @@ - name: che-plugin-sidecar-@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f image: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f # tag: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f -- - name: che-theia-@sha256:113066526a98350ad90f53d3b4ff99114d27d4ab2db65904bdbd7c4dda5928d5 -- image: quay.io/eclipse/che-theia@sha256:113066526a98350ad90f53d3b4ff99114d27d4ab2db65904bdbd7c4dda5928d5 -- # tag: quay.io/eclipse/che-theia@sha256:113066526a98350ad90f53d3b4ff99114d27d4ab2db65904bdbd7c4dda5928d5 -- - name: che-machine-exec-@sha256:2800cb8ac9564786f1d0877a2628884fc45f08acee457d497bb83a3bc1173abc -- image: quay.io/eclipse/che-machine-exec@sha256:2800cb8ac9564786f1d0877a2628884fc45f08acee457d497bb83a3bc1173abc -- # tag: quay.io/eclipse/che-machine-exec@sha256:2800cb8ac9564786f1d0877a2628884fc45f08acee457d497bb83a3bc1173abc -- - name: che-theia-endpoint-runtime-binary-@sha256:d90b0c0ea41b6592b3018c09b9e04a7ccf85a6f4e6df107c5d6e6d514a5228f2 -- image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:d90b0c0ea41b6592b3018c09b9e04a7ccf85a6f4e6df107c5d6e6d514a5228f2 -- # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:d90b0c0ea41b6592b3018c09b9e04a7ccf85a6f4e6df107c5d6e6d514a5228f2 -+ - name: che-theia-@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 -+ image: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 -+ # tag: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 -+ - name: che-machine-exec-@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a -+ image: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a -+ # tag: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a -+ - name: che-theia-endpoint-runtime-binary-@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 -+ image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 -+ # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 +- - name: che-theia-@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 +- image: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 +- # tag: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 +- - name: che-machine-exec-@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a +- image: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a +- # tag: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a +- - name: che-theia-endpoint-runtime-binary-@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 +- image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 +- # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 ++ - name: che-theia-@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 ++ image: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 ++ # tag: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 ++ - name: che-machine-exec-@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 ++ image: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 ++ # tag: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 ++ - name: che-theia-endpoint-runtime-binary-@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 ++ image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 ++ # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 - name: che-editor-jupyter-@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47 image: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47 # tag: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47 -@@ -1667,7 +1665,7 @@ +@@ -1665,19 +1526,22 @@ image: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7 # tag: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7 - name: che-code-insiders -- image: quay.io/che-incubator/che-code@sha256:a41699f3f2a7927c702ba7eee078ff9715f6e940cd88af386e0e9435174deb0f -+ image: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 +- image: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 ++ image: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966 # tag: quay.io/che-incubator/che-code:insiders ++ - name: che-code-@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f ++ image: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f ++ # tag: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f - name: universal-developer-image-@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4 image: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4 -@@ -1714,15 +1712,15 @@ + # tag: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4 + - name: che-idea-next +- image: quay.io/che-incubator/che-idea@sha256:2a88672127b5cb4a583402250b15078a8bb8f2f7d400e3f6af2aae795f46018a ++ image: quay.io/che-incubator/che-idea@sha256:f6a10da8889b342945ff3a18a561b2c276518ddf5a6a90abd8589d251d38125f + # tag: quay.io/che-incubator/che-idea:next + - name: che-idea-@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b + image: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b + # tag: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b + - name: che-pycharm-next +- image: quay.io/che-incubator/che-pycharm@sha256:8d403ceaaa3e38a813fbc8398e48a3dd410499907daf1e544fd2532ccee9289a ++ image: quay.io/che-incubator/che-pycharm@sha256:35c286bf0d98f5cf66f15b73379741f770f7d840229e78a3a8a61fa49af38a83 + # tag: quay.io/che-incubator/che-pycharm:next + - name: che-pycharm-@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b + image: quay.io/che-incubator/che-pycharm@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b +@@ -1712,15 +1576,15 @@ - name: che--mariadb-10.7.1-5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7 image: quay.io/eclipse/che--mariadb@sha256:5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7 # tag: quay.io/eclipse/che--mariadb:10.7.1-5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7 -- - name: che-machine-exec-7.52.0 -- image: quay.io/eclipse/che-machine-exec@sha256:2800cb8ac9564786f1d0877a2628884fc45f08acee457d497bb83a3bc1173abc -- # tag: quay.io/eclipse/che-machine-exec:7.52.0 -- - name: che-theia-endpoint-runtime-binary-7.52.0 -- image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:d90b0c0ea41b6592b3018c09b9e04a7ccf85a6f4e6df107c5d6e6d514a5228f2 -- # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary:7.52.0 -- - name: che-theia-7.52.0 -- image: quay.io/eclipse/che-theia@sha256:113066526a98350ad90f53d3b4ff99114d27d4ab2db65904bdbd7c4dda5928d5 -- # tag: quay.io/eclipse/che-theia:7.52.0 -+ - name: che-machine-exec-7.53.0 -+ image: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a -+ # tag: quay.io/eclipse/che-machine-exec:7.53.0 -+ - name: che-theia-endpoint-runtime-binary-7.53.0 -+ image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 -+ # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary:7.53.0 -+ - name: che-theia-7.53.0 -+ image: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 -+ # tag: quay.io/eclipse/che-theia:7.53.0 +- - name: che-machine-exec-7.53.0 +- image: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a +- # tag: quay.io/eclipse/che-machine-exec:7.53.0 +- - name: che-theia-endpoint-runtime-binary-7.53.0 +- image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 +- # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary:7.53.0 +- - name: che-theia-7.53.0 +- image: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 +- # tag: quay.io/eclipse/che-theia:7.53.0 ++ - name: che-machine-exec-7.54.0 ++ image: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 ++ # tag: quay.io/eclipse/che-machine-exec:7.54.0 ++ - name: che-theia-endpoint-runtime-binary-7.54.0 ++ image: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 ++ # tag: quay.io/eclipse/che-theia-endpoint-runtime-binary:7.54.0 ++ - name: che-theia-7.54.0 ++ image: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 ++ # tag: quay.io/eclipse/che-theia:7.54.0 - name: ubi-minimal- -- image: registry.access.redhat.com/ubi8/ubi-minimal@sha256:6e79406e33049907e875cb65a31ee2f0575f47afa0f06e3a2a9316b01ee379eb -+ image: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7 +- image: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7 ++ image: registry.access.redhat.com/ubi8/ubi-minimal@sha256:e58664de16551db29fb0eaaeb3c4a44eaf95ad89a5b2399a1107041c4f2d6d34 # tag: registry.access.redhat.com/ubi8/ubi-minimal diff --git a/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml b/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml index bc84bd683..68cd07b6e 100644 --- a/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml +++ b/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml @@ -1138,6 +1138,81 @@ spec: required: - enable type: object + gitServices: + description: A configuration that allows users to work with remote + Git repositories. + properties: + bitbucket: + description: Enables users to work with repositories hosted + on Bitbucket (bitbucket.org or self-hosted). + items: + description: BitBucketService enables users to work with repositories + hosted on Bitbucket (bitbucket.org or self-hosted). + properties: + endpoint: + default: https://bitbucket.org + description: Bitbucket server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded + Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: + private key, Bitbucket Application link consumer key + and Bitbucket Application link shared secret must be + stored in `private.key`, `consumer.key` and `shared_secret` + keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. + For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket + OAuth consumer secret must be stored in `id` and `secret` + keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' + type: string + required: + - secretName + type: object + type: array + github: + description: Enables users to work with repositories hosted + on GitHub (github.com or GitHub Enterprise). + items: + description: GitHubService enables users to work with repositories + hosted on GitHub (GitHub.com or GitHub Enterprise). + properties: + endpoint: + default: https://github.com + description: GitHub server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded + GitHub OAuth Client id and GitHub OAuth Client secret, + that stored in `id` and `secret` keys respectively. + See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' + type: string + required: + - endpoint + - secretName + type: object + type: array + gitlab: + description: Enables users to work with repositories hosted + on GitLab (gitlab.com or self-hosted). + items: + description: GitLabService enables users to work with repositories + hosted on GitLab (gitlab.com or self-hosted). + properties: + endpoint: + default: https://gitlab.com + description: GitLab server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded + GitHub Application id and GitLab Application Client + secret, that stored in `id` and `secret` keys respectively. + See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' + type: string + required: + - endpoint + - secretName + type: object + type: array + type: object imagePuller: description: Kubernetes Image Puller configuration properties: @@ -1266,6 +1341,11 @@ spec: images involved in a Che deployment. This is particularly useful to install Eclipse Che in a restricted environment. type: string + allowAutoProvisionUserNamespace: + description: Indicates if is allowed to automatically create + a user namespace. If it set to false, then user namespace + must be pre-created by a cluster administrator. + type: boolean allowUserDefinedWorkspaceNamespaces: description: Deprecated. The value of this flag is ignored. Defines that a user is allowed to specify a Kubernetes namespace, @@ -4242,8 +4322,7 @@ spec: defining `nonProxyHosts` in a custom resource leads to merging non-proxy hosts lists from the cluster proxy configuration, and the ones defined in the custom - resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. - See also the `proxyURL` fields.' + resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.' items: type: string type: array @@ -4256,8 +4335,7 @@ spec: Operator respects OpenShift cluster-wide proxy configuration, defining `url` in a custom resource leads to overriding the cluster proxy configuration. See the following - page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. - See also the `proxyPort` and `nonProxyHosts` fields.' + page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.' type: string type: object type: object @@ -4767,219 +4845,6 @@ spec: devWorkspace: description: DevWorkspace Operator configuration. properties: - deployment: - description: Deployment override options. - properties: - containers: - description: List of containers belonging to the pod. - items: - description: Container custom settings. - properties: - env: - description: List of environment variables to - set in the container. - items: - description: EnvVar represents an environment - variable present in a Container. - properties: - name: - description: Name of the environment variable. - Must be a C_IDENTIFIER. - type: string - value: - description: 'Variable references $(VAR_NAME) - are expanded using the previous defined - environment variables in the container - and any service environment variables. - If a variable cannot be resolved, the - reference in the input string will be - unchanged. The $(VAR_NAME) syntax can - be escaped with a double $$, ie: $$(VAR_NAME). - Escaped references will never be expanded, - regardless of whether the variable exists - or not. Defaults to "".' - type: string - valueFrom: - description: Source for the environment - variable's value. Cannot be used if value - is not empty. - properties: - configMapKeyRef: - description: Selects a key of a ConfigMap. - properties: - key: - description: The key to select. - type: string - name: - description: 'Name of the referent. - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - TODO: Add other useful fields. - apiVersion, kind, uid?' - type: string - optional: - description: Specify whether the - ConfigMap or its key must be defined - type: boolean - required: - - key - type: object - fieldRef: - description: 'Selects a field of the - pod: supports metadata.name, metadata.namespace, - `metadata.labels['''']`, `metadata.annotations['''']`, - spec.nodeName, spec.serviceAccountName, - status.hostIP, status.podIP, status.podIPs.' - properties: - apiVersion: - description: Version of the schema - the FieldPath is written in terms - of, defaults to "v1". - type: string - fieldPath: - description: Path of the field to - select in the specified API version. - type: string - required: - - fieldPath - type: object - resourceFieldRef: - description: 'Selects a resource of - the container: only resources limits - and requests (limits.cpu, limits.memory, - limits.ephemeral-storage, requests.cpu, - requests.memory and requests.ephemeral-storage) - are currently supported.' - properties: - containerName: - description: 'Container name: required - for volumes, optional for env - vars' - type: string - divisor: - anyOf: - - type: integer - - type: string - description: Specifies the output - format of the exposed resources, - defaults to "1" - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - resource: - description: 'Required: resource - to select' - type: string - required: - - resource - type: object - secretKeyRef: - description: Selects a key of a secret - in the pod's namespace - properties: - key: - description: The key of the secret - to select from. Must be a valid - secret key. - type: string - name: - description: 'Name of the referent. - More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names - TODO: Add other useful fields. - apiVersion, kind, uid?' - type: string - optional: - description: Specify whether the - Secret or its key must be defined - type: boolean - required: - - key - type: object - type: object - required: - - name - type: object - type: array - image: - description: Container image. Omit it or leave - it empty to use the default container image - provided by the Operator. - type: string - imagePullPolicy: - description: Image pull policy. Default value - is `Always` for `nightly`, `next` or `latest` - images, and `IfNotPresent` in other cases. - enum: - - Always - - IfNotPresent - - Never - type: string - name: - description: Container name. - type: string - resources: - description: Compute resources required by this - container. - properties: - limits: - description: Describes the maximum amount - of compute resources allowed. - properties: - cpu: - anyOf: - - type: integer - - type: string - description: CPU, in cores. (500m = .5 - cores) - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - memory: - anyOf: - - type: integer - - type: string - description: Memory, in bytes. (500Gi - = 500GiB = 500 * 1024 * 1024 * 1024) - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - type: object - request: - description: Describes the minimum amount - of compute resources required. - properties: - cpu: - anyOf: - - type: integer - - type: string - description: CPU, in cores. (500m = .5 - cores) - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - memory: - anyOf: - - type: integer - - type: string - description: Memory, in bytes. (500Gi - = 500GiB = 500 * 1024 * 1024 * 1024) - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - type: object - type: object - type: object - type: array - securityContext: - description: Security options the pod should run with. - properties: - fsGroup: - description: A special supplemental group that applies - to all containers in a pod. The default value - is `1724`. - format: int64 - type: integer - runAsUser: - description: The UID to run the entrypoint of the - container process. The default value is `1724`. - format: int64 - type: integer - type: object - type: object runningLimit: description: The maximum number of running workspaces per user. @@ -5540,6 +5405,7 @@ spec: name: universal-developer-image defaultEditor: eclipse/che-theia/latest defaultNamespace: + autoProvision: true template: -che secondsOfInactivityBeforeIdling: 1800 secondsOfRunBeforeIdling: -1 @@ -7060,9 +6926,16 @@ spec: type: string defaultNamespace: default: + autoProvision: true template: -che description: User's default namespace. properties: + autoProvision: + default: true + description: Indicates if is allowed to automatically create + a user namespace. If it set to false, then user namespace + must be pre-created by a cluster administrator. + type: boolean template: default: -che description: If you don't create the user namespaces in @@ -7211,6 +7084,81 @@ spec: type: string type: object type: object + gitServices: + description: A configuration that allows users to work with remote + Git repositories. + properties: + bitbucket: + description: Enables users to work with repositories hosted + on Bitbucket (bitbucket.org or self-hosted). + items: + description: BitBucketService enables users to work with repositories + hosted on Bitbucket (bitbucket.org or self-hosted). + properties: + endpoint: + default: https://bitbucket.org + description: Bitbucket server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded + Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: + private key, Bitbucket Application link consumer key + and Bitbucket Application link shared secret must be + stored in `private.key`, `consumer.key` and `shared_secret` + keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. + For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket + OAuth consumer secret must be stored in `id` and `secret` + keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' + type: string + required: + - secretName + type: object + type: array + github: + description: Enables users to work with repositories hosted + on GitHub (github.com or GitHub Enterprise). + items: + description: GitHubService enables users to work with repositories + hosted on GitHub (GitHub.com or GitHub Enterprise). + properties: + endpoint: + default: https://github.com + description: GitHub server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded + GitHub OAuth Client id and GitHub OAuth Client secret, + that stored in `id` and `secret` keys respectively. + See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' + type: string + required: + - endpoint + - secretName + type: object + type: array + gitlab: + description: Enables users to work with repositories hosted + on GitLab (gitlab.com or self-hosted). + items: + description: GitLabService enables users to work with repositories + hosted on GitLab (gitlab.com or self-hosted). + properties: + endpoint: + default: https://gitlab.com + description: GitLab server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded + GitHub Application id and GitLab Application Client + secret, that stored in `id` and `secret` keys respectively. + See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' + type: string + required: + - endpoint + - secretName + type: object + type: array + type: object networking: default: auth: diff --git a/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml.diff b/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml.diff index 679f523ef..e6466df39 100644 --- a/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml.diff +++ b/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml.diff @@ -1,121 +1,443 @@ ---- /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/generated/openshift/org.eclipse.che_checlusters.yaml 2022-09-02 08:44:51.945214027 +0000 -+++ /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml 2022-09-02 08:44:51.953214136 +0000 -@@ -2199,6 +2199,10 @@ - description: Deprecated in favor of `disableInternalClusterSVCNames`. - type: boolean - workspaceDefaultComponents: -+ default: -+ - container: -+ image: quay.io/devfile/universal-developer-image:ubi8-38da5c2 -+ name: universal-developer-image - description: Default components applied to DevWorkspaces. These - default components are meant to be used when a Devfile does - not contain any components. -@@ -3700,6 +3704,7 @@ - type: object - type: array - workspaceDefaultEditor: -+ default: eclipse/che-theia/latest - description: The default editor to workspace create with. It - could be a plugin ID or a URI. The plugin ID must have `publisher/plugin/version`. - The URI must start from `http`. -@@ -3780,6 +3785,14 @@ - description: Configuration settings related to the persistent storage - used by the Che installation. - properties: -+ perWorkspaceStrategyPVCStorageClassName: -+ description: Storage class for the Persistent Volume Claims -+ dedicated to the Che workspaces. When omitted or left blank, -+ a default storage class is used. -+ type: string -+ perWorkspaceStrategyPvcClaimSize: -+ description: Size of the persistent volume claim for workspaces. -+ type: string - postgresPVCStorageClassName: - description: Storage class for the Persistent Volume Claim dedicated - to the PostgreSQL database. When omitted or left blank, a -@@ -5521,15 +5534,24 @@ +--- /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/generated/openshift/org.eclipse.che_checlusters.yaml 2022-09-22 20:03:34.712796204 +0000 ++++ /home/runner/work/che-operator/che-operator/bundle/stable/eclipse-che-preview-openshift/manifests/org.eclipse.che_checlusters.yaml 2022-09-22 20:03:34.720796215 +0000 +@@ -1138,6 +1138,81 @@ + required: + - enable type: object - devEnvironments: - default: -+ defaultComponents: -+ - container: -+ image: quay.io/devfile/universal-developer-image:ubi8-38da5c2 -+ name: universal-developer-image -+ defaultEditor: eclipse/che-theia/latest ++ gitServices: ++ description: A configuration that allows users to work with remote ++ Git repositories. ++ properties: ++ bitbucket: ++ description: Enables users to work with repositories hosted ++ on Bitbucket (bitbucket.org or self-hosted). ++ items: ++ description: BitBucketService enables users to work with repositories ++ hosted on Bitbucket (bitbucket.org or self-hosted). ++ properties: ++ endpoint: ++ default: https://bitbucket.org ++ description: Bitbucket server endpoint URL. ++ type: string ++ secretName: ++ description: 'Kubernetes secret, that contains Base64-encoded ++ Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: ++ private key, Bitbucket Application link consumer key ++ and Bitbucket Application link shared secret must be ++ stored in `private.key`, `consumer.key` and `shared_secret` ++ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. ++ For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket ++ OAuth consumer secret must be stored in `id` and `secret` ++ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' ++ type: string ++ required: ++ - secretName ++ type: object ++ type: array ++ github: ++ description: Enables users to work with repositories hosted ++ on GitHub (github.com or GitHub Enterprise). ++ items: ++ description: GitHubService enables users to work with repositories ++ hosted on GitHub (GitHub.com or GitHub Enterprise). ++ properties: ++ endpoint: ++ default: https://github.com ++ description: GitHub server endpoint URL. ++ type: string ++ secretName: ++ description: 'Kubernetes secret, that contains Base64-encoded ++ GitHub OAuth Client id and GitHub OAuth Client secret, ++ that stored in `id` and `secret` keys respectively. ++ See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' ++ type: string ++ required: ++ - endpoint ++ - secretName ++ type: object ++ type: array ++ gitlab: ++ description: Enables users to work with repositories hosted ++ on GitLab (gitlab.com or self-hosted). ++ items: ++ description: GitLabService enables users to work with repositories ++ hosted on GitLab (gitlab.com or self-hosted). ++ properties: ++ endpoint: ++ default: https://gitlab.com ++ description: GitLab server endpoint URL. ++ type: string ++ secretName: ++ description: 'Kubernetes secret, that contains Base64-encoded ++ GitHub Application id and GitLab Application Client ++ secret, that stored in `id` and `secret` keys respectively. ++ See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' ++ type: string ++ required: ++ - endpoint ++ - secretName ++ type: object ++ type: array ++ type: object + imagePuller: + description: Kubernetes Image Puller configuration + properties: +@@ -1266,6 +1341,11 @@ + images involved in a Che deployment. This is particularly + useful to install Eclipse Che in a restricted environment. + type: string ++ allowAutoProvisionUserNamespace: ++ description: Indicates if is allowed to automatically create ++ a user namespace. If it set to false, then user namespace ++ must be pre-created by a cluster administrator. ++ type: boolean + allowUserDefinedWorkspaceNamespaces: + description: Deprecated. The value of this flag is ignored. + Defines that a user is allowed to specify a Kubernetes namespace, +@@ -4242,8 +4322,7 @@ + defining `nonProxyHosts` in a custom resource leads + to merging non-proxy hosts lists from the cluster + proxy configuration, and the ones defined in the custom +- resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. +- See also the `proxyURL` fields.' ++ resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.' + items: + type: string + type: array +@@ -4256,8 +4335,7 @@ + Operator respects OpenShift cluster-wide proxy configuration, + defining `url` in a custom resource leads to overriding + the cluster proxy configuration. See the following +- page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. +- See also the `proxyPort` and `nonProxyHosts` fields.' ++ page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.' + type: string + type: object + type: object +@@ -4767,219 +4845,6 @@ + devWorkspace: + description: DevWorkspace Operator configuration. + properties: +- deployment: +- description: Deployment override options. +- properties: +- containers: +- description: List of containers belonging to the pod. +- items: +- description: Container custom settings. +- properties: +- env: +- description: List of environment variables to +- set in the container. +- items: +- description: EnvVar represents an environment +- variable present in a Container. +- properties: +- name: +- description: Name of the environment variable. +- Must be a C_IDENTIFIER. +- type: string +- value: +- description: 'Variable references $(VAR_NAME) +- are expanded using the previous defined +- environment variables in the container +- and any service environment variables. +- If a variable cannot be resolved, the +- reference in the input string will be +- unchanged. The $(VAR_NAME) syntax can +- be escaped with a double $$, ie: $$(VAR_NAME). +- Escaped references will never be expanded, +- regardless of whether the variable exists +- or not. Defaults to "".' +- type: string +- valueFrom: +- description: Source for the environment +- variable's value. Cannot be used if value +- is not empty. +- properties: +- configMapKeyRef: +- description: Selects a key of a ConfigMap. +- properties: +- key: +- description: The key to select. +- type: string +- name: +- description: 'Name of the referent. +- More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names +- TODO: Add other useful fields. +- apiVersion, kind, uid?' +- type: string +- optional: +- description: Specify whether the +- ConfigMap or its key must be defined +- type: boolean +- required: +- - key +- type: object +- fieldRef: +- description: 'Selects a field of the +- pod: supports metadata.name, metadata.namespace, +- `metadata.labels['''']`, `metadata.annotations['''']`, +- spec.nodeName, spec.serviceAccountName, +- status.hostIP, status.podIP, status.podIPs.' +- properties: +- apiVersion: +- description: Version of the schema +- the FieldPath is written in terms +- of, defaults to "v1". +- type: string +- fieldPath: +- description: Path of the field to +- select in the specified API version. +- type: string +- required: +- - fieldPath +- type: object +- resourceFieldRef: +- description: 'Selects a resource of +- the container: only resources limits +- and requests (limits.cpu, limits.memory, +- limits.ephemeral-storage, requests.cpu, +- requests.memory and requests.ephemeral-storage) +- are currently supported.' +- properties: +- containerName: +- description: 'Container name: required +- for volumes, optional for env +- vars' +- type: string +- divisor: +- anyOf: +- - type: integer +- - type: string +- description: Specifies the output +- format of the exposed resources, +- defaults to "1" +- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ +- x-kubernetes-int-or-string: true +- resource: +- description: 'Required: resource +- to select' +- type: string +- required: +- - resource +- type: object +- secretKeyRef: +- description: Selects a key of a secret +- in the pod's namespace +- properties: +- key: +- description: The key of the secret +- to select from. Must be a valid +- secret key. +- type: string +- name: +- description: 'Name of the referent. +- More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names +- TODO: Add other useful fields. +- apiVersion, kind, uid?' +- type: string +- optional: +- description: Specify whether the +- Secret or its key must be defined +- type: boolean +- required: +- - key +- type: object +- type: object +- required: +- - name +- type: object +- type: array +- image: +- description: Container image. Omit it or leave +- it empty to use the default container image +- provided by the Operator. +- type: string +- imagePullPolicy: +- description: Image pull policy. Default value +- is `Always` for `nightly`, `next` or `latest` +- images, and `IfNotPresent` in other cases. +- enum: +- - Always +- - IfNotPresent +- - Never +- type: string +- name: +- description: Container name. +- type: string +- resources: +- description: Compute resources required by this +- container. +- properties: +- limits: +- description: Describes the maximum amount +- of compute resources allowed. +- properties: +- cpu: +- anyOf: +- - type: integer +- - type: string +- description: CPU, in cores. (500m = .5 +- cores) +- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ +- x-kubernetes-int-or-string: true +- memory: +- anyOf: +- - type: integer +- - type: string +- description: Memory, in bytes. (500Gi +- = 500GiB = 500 * 1024 * 1024 * 1024) +- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ +- x-kubernetes-int-or-string: true +- type: object +- request: +- description: Describes the minimum amount +- of compute resources required. +- properties: +- cpu: +- anyOf: +- - type: integer +- - type: string +- description: CPU, in cores. (500m = .5 +- cores) +- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ +- x-kubernetes-int-or-string: true +- memory: +- anyOf: +- - type: integer +- - type: string +- description: Memory, in bytes. (500Gi +- = 500GiB = 500 * 1024 * 1024 * 1024) +- pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ +- x-kubernetes-int-or-string: true +- type: object +- type: object +- type: object +- type: array +- securityContext: +- description: Security options the pod should run with. +- properties: +- fsGroup: +- description: A special supplemental group that applies +- to all containers in a pod. The default value +- is `1724`. +- format: int64 +- type: integer +- runAsUser: +- description: The UID to run the entrypoint of the +- container process. The default value is `1724`. +- format: int64 +- type: integer +- type: object +- type: object + runningLimit: + description: The maximum number of running workspaces per + user. +@@ -5540,6 +5405,7 @@ + name: universal-developer-image + defaultEditor: eclipse/che-theia/latest defaultNamespace: ++ autoProvision: true template: -che secondsOfInactivityBeforeIdling: 1800 secondsOfRunBeforeIdling: -1 - storage: -- pvcStrategy: common -+ pvcStrategy: per-user - description: Development environment default configuration options. - properties: - defaultComponents: -+ default: -+ - container: -+ image: quay.io/devfile/universal-developer-image:ubi8-38da5c2 -+ name: universal-developer-image - description: Default components applied to DevWorkspaces. These - default components are meant to be used when a Devfile, that - does not contain any components. -@@ -7031,6 +7053,7 @@ - type: object - type: array - defaultEditor: -+ default: eclipse/che-theia/latest - description: The default editor to workspace create with. It - could be a plugin ID or a URI. The plugin ID must have `publisher/plugin/version` - format. The URI must start from `http://` or `https://`. -@@ -7087,11 +7110,27 @@ - type: integer - storage: +@@ -7060,9 +6926,16 @@ + type: string + defaultNamespace: default: -- pvcStrategy: common -+ pvcStrategy: per-user - description: Workspaces persistent storage. ++ autoProvision: true + template: -che + description: User's default namespace. properties: -- pvc: -- description: PVC settings. -+ perUserStrategyPvcConfig: -+ description: PVC settings when using the `per-user` PVC -+ strategy. -+ properties: -+ claimSize: -+ description: Persistent Volume Claim size. To update -+ the claim size, the storage class that provisions -+ it must support resizing. -+ type: string -+ storageClass: -+ description: Storage class for the Persistent Volume -+ Claim. When omitted or left blank, a default storage -+ class is used. -+ type: string -+ type: object -+ perWorkspaceStrategyPvcConfig: -+ description: PVC settings when using the `per-workspace` -+ PVC strategy. - properties: - claimSize: - description: Persistent Volume Claim size. To update -@@ -7105,12 +7144,15 @@ - type: string - type: object - pvcStrategy: -- default: common -- description: Persistent volume claim strategy for the Che -- server. Only the `common` strategy (all workspaces PVCs -- in one volume) is supported . For details, see https://github.com/eclipse/che/issues/21185. -+ default: per-user -+ description: 'Persistent volume claim strategy for the Che -+ server. The supported strategies are: `per-user` (all -+ workspaces PVCs in one volume) and ''per-workspace'' (each -+ workspace is given its own individual PVC). For details, -+ see https://github.com/eclipse/che/issues/21185.' - enum: - - common -+ - per-user - - per-workspace ++ autoProvision: ++ default: true ++ description: Indicates if is allowed to automatically create ++ a user namespace. If it set to false, then user namespace ++ must be pre-created by a cluster administrator. ++ type: boolean + template: + default: -che + description: If you don't create the user namespaces in +@@ -7211,6 +7084,81 @@ type: string type: object + type: object ++ gitServices: ++ description: A configuration that allows users to work with remote ++ Git repositories. ++ properties: ++ bitbucket: ++ description: Enables users to work with repositories hosted ++ on Bitbucket (bitbucket.org or self-hosted). ++ items: ++ description: BitBucketService enables users to work with repositories ++ hosted on Bitbucket (bitbucket.org or self-hosted). ++ properties: ++ endpoint: ++ default: https://bitbucket.org ++ description: Bitbucket server endpoint URL. ++ type: string ++ secretName: ++ description: 'Kubernetes secret, that contains Base64-encoded ++ Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: ++ private key, Bitbucket Application link consumer key ++ and Bitbucket Application link shared secret must be ++ stored in `private.key`, `consumer.key` and `shared_secret` ++ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. ++ For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket ++ OAuth consumer secret must be stored in `id` and `secret` ++ keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' ++ type: string ++ required: ++ - secretName ++ type: object ++ type: array ++ github: ++ description: Enables users to work with repositories hosted ++ on GitHub (github.com or GitHub Enterprise). ++ items: ++ description: GitHubService enables users to work with repositories ++ hosted on GitHub (GitHub.com or GitHub Enterprise). ++ properties: ++ endpoint: ++ default: https://github.com ++ description: GitHub server endpoint URL. ++ type: string ++ secretName: ++ description: 'Kubernetes secret, that contains Base64-encoded ++ GitHub OAuth Client id and GitHub OAuth Client secret, ++ that stored in `id` and `secret` keys respectively. ++ See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' ++ type: string ++ required: ++ - endpoint ++ - secretName ++ type: object ++ type: array ++ gitlab: ++ description: Enables users to work with repositories hosted ++ on GitLab (gitlab.com or self-hosted). ++ items: ++ description: GitLabService enables users to work with repositories ++ hosted on GitLab (gitlab.com or self-hosted). ++ properties: ++ endpoint: ++ default: https://gitlab.com ++ description: GitLab server endpoint URL. ++ type: string ++ secretName: ++ description: 'Kubernetes secret, that contains Base64-encoded ++ GitHub Application id and GitLab Application Client ++ secret, that stored in `id` and `secret` keys respectively. ++ See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' ++ type: string ++ required: ++ - endpoint ++ - secretName ++ type: object ++ type: array ++ type: object + networking: + default: + auth: diff --git a/helmcharts/stable/Chart.yaml b/helmcharts/stable/Chart.yaml index 088cda545..4e8316bdd 100644 --- a/helmcharts/stable/Chart.yaml +++ b/helmcharts/stable/Chart.yaml @@ -13,7 +13,7 @@ apiVersion: v1 description: A Helm chart for deploying Eclipse Che on a Kubernetes name: eclipse-che -version: 7.53.0 +version: 7.54.0 annotations: artifacthub.io/license: EPL-2.0 artifacthub.io/links: | @@ -36,7 +36,7 @@ annotations: artifacthub.io/crdsExamples: "- apiVersion: org.eclipse.che/v2\n kind: CheCluster\n\ \ metadata:\n name: eclipse-che\n namespace: eclipse-che\n spec:\n \ \ components: {}\n devEnvironments: {}\n networking: {}\n containerRegistry:\ - \ {}\n" + \ {}\n gitServices: {}\n" artifacthub.io/crds: |- - kind: CheCluster version: v2 diff --git a/helmcharts/stable/crds/checlusters.org.eclipse.che.CustomResourceDefinition.yaml b/helmcharts/stable/crds/checlusters.org.eclipse.che.CustomResourceDefinition.yaml index 398fc123b..f91a58306 100644 --- a/helmcharts/stable/crds/checlusters.org.eclipse.che.CustomResourceDefinition.yaml +++ b/helmcharts/stable/crds/checlusters.org.eclipse.che.CustomResourceDefinition.yaml @@ -756,6 +756,60 @@ spec: required: - enable type: object + gitServices: + description: A configuration that allows users to work with remote Git repositories. + properties: + bitbucket: + description: Enables users to work with repositories hosted on Bitbucket (bitbucket.org or self-hosted). + items: + description: BitBucketService enables users to work with repositories hosted on Bitbucket (bitbucket.org or self-hosted). + properties: + endpoint: + default: https://bitbucket.org + description: Bitbucket server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application link consumer key and Bitbucket Application link shared secret must be stored in `private.key`, `consumer.key` and `shared_secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer secret must be stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' + type: string + required: + - secretName + type: object + type: array + github: + description: Enables users to work with repositories hosted on GitHub (github.com or GitHub Enterprise). + items: + description: GitHubService enables users to work with repositories hosted on GitHub (GitHub.com or GitHub Enterprise). + properties: + endpoint: + default: https://github.com + description: GitHub server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth Client id and GitHub OAuth Client secret, that stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' + type: string + required: + - endpoint + - secretName + type: object + type: array + gitlab: + description: Enables users to work with repositories hosted on GitLab (gitlab.com or self-hosted). + items: + description: GitLabService enables users to work with repositories hosted on GitLab (gitlab.com or self-hosted). + properties: + endpoint: + default: https://gitlab.com + description: GitLab server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded GitHub Application id and GitLab Application Client secret, that stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' + type: string + required: + - endpoint + - secretName + type: object + type: array + type: object imagePuller: description: Kubernetes Image Puller configuration properties: @@ -836,6 +890,9 @@ spec: airGapContainerRegistryOrganization: description: Optional repository name of an alternate container registry to pull images from. This value overrides the container registry organization defined in all the default container images involved in a Che deployment. This is particularly useful to install Eclipse Che in a restricted environment. type: string + allowAutoProvisionUserNamespace: + description: Indicates if is allowed to automatically create a user namespace. If it set to false, then user namespace must be pre-created by a cluster administrator. + type: boolean allowUserDefinedWorkspaceNamespaces: description: Deprecated. The value of this flag is ignored. Defines that a user is allowed to specify a Kubernetes namespace, or an OpenShift project, which differs from the default. It's NOT RECOMMENDED to set to `true` without OpenShift OAuth configured. The OpenShift infrastructure also uses this property. type: boolean @@ -2741,7 +2798,7 @@ spec: description: The secret name that contains `user` and `password` for a proxy server. The secret must have a `app.kubernetes.io/part-of=che.eclipse.org` label. type: string nonProxyHosts: - description: 'A list of hosts that can be reached directly, bypassing the proxy. Specify wild card domain use the following form `.`, for example: - localhost - my.host.com - 123.42.12.32 Use only when a proxy configuration is required. The Operator respects OpenShift cluster-wide proxy configuration, defining `nonProxyHosts` in a custom resource leads to merging non-proxy hosts lists from the cluster proxy configuration, and the ones defined in the custom resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. See also the `proxyURL` fields.' + description: 'A list of hosts that can be reached directly, bypassing the proxy. Specify wild card domain use the following form `.`, for example: - localhost - my.host.com - 123.42.12.32 Use only when a proxy configuration is required. The Operator respects OpenShift cluster-wide proxy configuration, defining `nonProxyHosts` in a custom resource leads to merging non-proxy hosts lists from the cluster proxy configuration, and the ones defined in the custom resources. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.' items: type: string type: array @@ -2749,7 +2806,7 @@ spec: description: Proxy server port. type: string url: - description: 'URL (protocol+hostname) of the proxy server. Use only when a proxy configuration is required. The Operator respects OpenShift cluster-wide proxy configuration, defining `url` in a custom resource leads to overriding the cluster proxy configuration. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. See also the `proxyPort` and `nonProxyHosts` fields.' + description: 'URL (protocol+hostname) of the proxy server. Use only when a proxy configuration is required. The Operator respects OpenShift cluster-wide proxy configuration, defining `url` in a custom resource leads to overriding the cluster proxy configuration. See the following page: https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html.' type: string type: object type: object @@ -3126,162 +3183,6 @@ spec: devWorkspace: description: DevWorkspace Operator configuration. properties: - deployment: - description: Deployment override options. - properties: - containers: - description: List of containers belonging to the pod. - items: - description: Container custom settings. - properties: - env: - description: List of environment variables to set in the container. - items: - description: EnvVar represents an environment variable present in a Container. - properties: - name: - description: Name of the environment variable. Must be a C_IDENTIFIER. - type: string - value: - description: 'Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "".' - type: string - valueFrom: - description: Source for the environment variable's value. Cannot be used if value is not empty. - properties: - configMapKeyRef: - description: Selects a key of a ConfigMap. - properties: - key: - description: The key to select. - type: string - name: - description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?' - type: string - optional: - description: Specify whether the ConfigMap or its key must be defined - type: boolean - required: - - key - type: object - fieldRef: - description: 'Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['''']`, `metadata.annotations['''']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.' - properties: - apiVersion: - description: Version of the schema the FieldPath is written in terms of, defaults to "v1". - type: string - fieldPath: - description: Path of the field to select in the specified API version. - type: string - required: - - fieldPath - type: object - resourceFieldRef: - description: 'Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported.' - properties: - containerName: - description: 'Container name: required for volumes, optional for env vars' - type: string - divisor: - anyOf: - - type: integer - - type: string - description: Specifies the output format of the exposed resources, defaults to "1" - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - resource: - description: 'Required: resource to select' - type: string - required: - - resource - type: object - secretKeyRef: - description: Selects a key of a secret in the pod's namespace - properties: - key: - description: The key of the secret to select from. Must be a valid secret key. - type: string - name: - description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names TODO: Add other useful fields. apiVersion, kind, uid?' - type: string - optional: - description: Specify whether the Secret or its key must be defined - type: boolean - required: - - key - type: object - type: object - required: - - name - type: object - type: array - image: - description: Container image. Omit it or leave it empty to use the default container image provided by the Operator. - type: string - imagePullPolicy: - description: Image pull policy. Default value is `Always` for `nightly`, `next` or `latest` images, and `IfNotPresent` in other cases. - enum: - - Always - - IfNotPresent - - Never - type: string - name: - description: Container name. - type: string - resources: - description: Compute resources required by this container. - properties: - limits: - description: Describes the maximum amount of compute resources allowed. - properties: - cpu: - anyOf: - - type: integer - - type: string - description: CPU, in cores. (500m = .5 cores) - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - memory: - anyOf: - - type: integer - - type: string - description: Memory, in bytes. (500Gi = 500GiB = 500 * 1024 * 1024 * 1024) - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - type: object - request: - description: Describes the minimum amount of compute resources required. - properties: - cpu: - anyOf: - - type: integer - - type: string - description: CPU, in cores. (500m = .5 cores) - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - memory: - anyOf: - - type: integer - - type: string - description: Memory, in bytes. (500Gi = 500GiB = 500 * 1024 * 1024 * 1024) - pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ - x-kubernetes-int-or-string: true - type: object - type: object - type: object - type: array - securityContext: - description: Security options the pod should run with. - properties: - fsGroup: - description: A special supplemental group that applies to all containers in a pod. The default value is `1724`. - format: int64 - type: integer - runAsUser: - description: The UID to run the entrypoint of the container process. The default value is `1724`. - format: int64 - type: integer - type: object - type: object runningLimit: description: The maximum number of running workspaces per user. type: string @@ -3701,6 +3602,7 @@ spec: name: universal-developer-image defaultEditor: eclipse/che-theia/latest defaultNamespace: + autoProvision: true template: -che secondsOfInactivityBeforeIdling: 1800 secondsOfRunBeforeIdling: -1 @@ -4637,9 +4539,14 @@ spec: type: string defaultNamespace: default: + autoProvision: true template: -che description: User's default namespace. properties: + autoProvision: + default: true + description: Indicates if is allowed to automatically create a user namespace. If it set to false, then user namespace must be pre-created by a cluster administrator. + type: boolean template: default: -che description: If you don't create the user namespaces in advance, this field defines the Kubernetes namespace created when you start your first workspace. You can use `` and `` placeholders, such as che-workspace-. @@ -4740,6 +4647,60 @@ spec: type: string type: object type: object + gitServices: + description: A configuration that allows users to work with remote Git repositories. + properties: + bitbucket: + description: Enables users to work with repositories hosted on Bitbucket (bitbucket.org or self-hosted). + items: + description: BitBucketService enables users to work with repositories hosted on Bitbucket (bitbucket.org or self-hosted). + properties: + endpoint: + default: https://bitbucket.org + description: Bitbucket server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded Bitbucket OAuth 1.0 or OAuth 2.0 data. For OAuth 1.0: private key, Bitbucket Application link consumer key and Bitbucket Application link shared secret must be stored in `private.key`, `consumer.key` and `shared_secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-1-for-a-bitbucket-server/. For OAuth 2.0: Bitbucket OAuth consumer key and Bitbucket OAuth consumer secret must be stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-the-bitbucket-cloud/.' + type: string + required: + - secretName + type: object + type: array + github: + description: Enables users to work with repositories hosted on GitHub (github.com or GitHub Enterprise). + items: + description: GitHubService enables users to work with repositories hosted on GitHub (GitHub.com or GitHub Enterprise). + properties: + endpoint: + default: https://github.com + description: GitHub server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded GitHub OAuth Client id and GitHub OAuth Client secret, that stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-github/.' + type: string + required: + - endpoint + - secretName + type: object + type: array + gitlab: + description: Enables users to work with repositories hosted on GitLab (gitlab.com or self-hosted). + items: + description: GitLabService enables users to work with repositories hosted on GitLab (gitlab.com or self-hosted). + properties: + endpoint: + default: https://gitlab.com + description: GitLab server endpoint URL. + type: string + secretName: + description: 'Kubernetes secret, that contains Base64-encoded GitHub Application id and GitLab Application Client secret, that stored in `id` and `secret` keys respectively. See the following page: https://www.eclipse.org/che/docs/stable/administration-guide/configuring-oauth-2-for-gitlab/.' + type: string + required: + - endpoint + - secretName + type: object + type: array + type: object networking: default: auth: diff --git a/helmcharts/stable/templates/che-operator-leader-election.Role.yaml b/helmcharts/stable/templates/che-operator-leader-election.Role.yaml new file mode 100644 index 000000000..8941c50df --- /dev/null +++ b/helmcharts/stable/templates/che-operator-leader-election.Role.yaml @@ -0,0 +1,54 @@ +# +# Copyright (c) 2019-2021 Red Hat, Inc. +# This program and the accompanying materials are made +# available under the terms of the Eclipse Public License 2.0 +# which is available at https://www.eclipse.org/legal/epl-2.0/ +# +# SPDX-License-Identifier: EPL-2.0 +# +# Contributors: +# Red Hat, Inc. - initial API and implementation +# + +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/component: che-operator + app.kubernetes.io/instance: che + app.kubernetes.io/name: che + app.kubernetes.io/part-of: che.eclipse.org + name: che-operator-leader-election + namespace: eclipse-che +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - get + - list + - watch + - create + - update + - patch + - delete +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - get + - list + - watch + - create + - update + - patch + - delete +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch diff --git a/helmcharts/stable/templates/che-operator-leader-election.RoleBinding.yaml b/helmcharts/stable/templates/che-operator-leader-election.RoleBinding.yaml new file mode 100644 index 000000000..4255a2751 --- /dev/null +++ b/helmcharts/stable/templates/che-operator-leader-election.RoleBinding.yaml @@ -0,0 +1,30 @@ +# +# Copyright (c) 2019-2021 Red Hat, Inc. +# This program and the accompanying materials are made +# available under the terms of the Eclipse Public License 2.0 +# which is available at https://www.eclipse.org/legal/epl-2.0/ +# +# SPDX-License-Identifier: EPL-2.0 +# +# Contributors: +# Red Hat, Inc. - initial API and implementation +# + +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/component: che-operator + app.kubernetes.io/instance: che + app.kubernetes.io/name: che + app.kubernetes.io/part-of: che.eclipse.org + name: che-operator-leader-election + namespace: eclipse-che +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: che-operator-leader-election +subjects: +- kind: ServiceAccount + name: che-operator + namespace: eclipse-che diff --git a/helmcharts/stable/templates/che-operator.ClusterRole.yaml b/helmcharts/stable/templates/che-operator.ClusterRole.yaml index cc394a6c0..90a1043ae 100644 --- a/helmcharts/stable/templates/che-operator.ClusterRole.yaml +++ b/helmcharts/stable/templates/che-operator.ClusterRole.yaml @@ -86,6 +86,8 @@ rules: resources: - clusterrolebindings - clusterroles + - roles + - rolebindings verbs: - list - create @@ -93,16 +95,6 @@ rules: - update - get - delete -- apiGroups: - - rbac.authorization.k8s.io - resources: - - roles - - rolebindings - verbs: - - get - - create - - update - - delete - apiGroups: - authorization.openshift.io resources: @@ -314,26 +306,7 @@ rules: - get - update - watch -- apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings - verbs: - - '*' -- apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings/finalizers - verbs: - - update -- apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings/status - verbs: - - get - - patch - - update + - list - apiGroups: - monitoring.coreos.com resources: @@ -376,64 +349,37 @@ rules: - get - list - watch -- apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings - - components - verbs: - - get - - list - - watch -- apiGroups: - - workspace.devfile.io - resources: - - devworkspaces - - devworkspacetemplates - verbs: - create - delete - - deletecollection - patch - update - apiGroups: - controller.devfile.io resources: - devworkspaceroutings - - components - verbs: - - create - - delete - - deletecollection - - patch - - update -- apiGroups: - - "" - resources: - - configmaps + - devworkspaceoperatorconfigs verbs: - get - list - watch - create - - update - - patch - delete + - patch + - update - apiGroups: - - "" + - controller.devfile.io resources: - - configmaps/status + - devworkspaceroutings/finalizers + verbs: + - update +- apiGroups: + - controller.devfile.io + resources: + - devworkspaceroutings/status verbs: - get + - patch - update - - patch -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - apiGroups: - authentication.k8s.io resources: @@ -446,227 +392,3 @@ rules: - subjectaccessreviews verbs: - create -- apiGroups: - - "" - resourceNames: - - workspace-preferences-configmap - resources: - - configmaps - verbs: - - create - - delete - - get - - patch -- apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - pods - - secrets - - serviceaccounts - verbs: - - '*' -- apiGroups: - - "" - resources: - - events - - namespaces - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - pods/exec - verbs: - - create -- apiGroups: - - "" - resourceNames: - - workspace-credentials-secret - resources: - - secrets - verbs: - - create - - delete - - get - - patch -- apiGroups: - - "" - resources: - - services - verbs: - - '*' -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - validatingwebhookconfigurations - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - apps - resourceNames: - - devworkspace-controller - resources: - - deployments/finalizers - verbs: - - update -- apiGroups: - - apps - - extensions - resources: - - deployments - verbs: - - get - - list - - watch -- apiGroups: - - apps - - extensions - resources: - - deployments - - replicasets - verbs: - - '*' -- apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch -- apiGroups: - - authorization.k8s.io - resources: - - localsubjectaccessreviews - - subjectaccessreviews - verbs: - - create -- apiGroups: - - batch - resources: - - jobs - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - config.openshift.io - resourceNames: - - cluster - resources: - - proxies - verbs: - - get -- apiGroups: - - controller.devfile.io - resources: - - '*' - verbs: - - '*' -- apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings - verbs: - - '*' -- apiGroups: - - controller.devfile.io - resources: - - devworkspaceroutings/status - verbs: - - get - - patch - - update -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - update -- apiGroups: - - metrics.k8s.io - resources: - - pods - verbs: - - get - - list - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - create - - get -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - '*' -- apiGroups: - - oauth.openshift.io - resources: - - oauthclients - verbs: - - create - - delete - - deletecollection - - get - - list - - patch - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterrolebindings - - clusterroles - - rolebindings - - roles - verbs: - - create - - get - - list - - update - - watch -- apiGroups: - - route.openshift.io - resources: - - routes - verbs: - - '*' -- apiGroups: - - route.openshift.io - resources: - - routes/custom-host - verbs: - - create -- apiGroups: - - workspace.devfile.io - resources: - - '*' - verbs: - - '*' -- nonResourceURLs: - - /metrics - verbs: - - get diff --git a/helmcharts/stable/templates/che-operator.Deployment.yaml b/helmcharts/stable/templates/che-operator.Deployment.yaml index cdf1deac7..8d629590f 100644 --- a/helmcharts/stable/templates/che-operator.Deployment.yaml +++ b/helmcharts/stable/templates/che-operator.Deployment.yaml @@ -54,15 +54,15 @@ spec: - name: OPERATOR_NAME value: che-operator - name: CHE_VERSION - value: 7.53.0 + value: 7.54.0 - name: RELATED_IMAGE_che_server - value: quay.io/eclipse/che-server:7.53.0 + value: quay.io/eclipse/che-server:7.54.0 - name: RELATED_IMAGE_dashboard - value: quay.io/eclipse/che-dashboard:7.53.0 + value: quay.io/eclipse/che-dashboard:7.54.0 - name: RELATED_IMAGE_plugin_registry - value: quay.io/eclipse/che-plugin-registry:7.53.0 + value: quay.io/eclipse/che-plugin-registry:7.54.0 - name: RELATED_IMAGE_devfile_registry - value: quay.io/eclipse/che-devfile-registry:7.53.0 + value: quay.io/eclipse/che-devfile-registry:7.54.0 - name: RELATED_IMAGE_che_tls_secrets_creation_job value: quay.io/eclipse/che-tls-secret-creator:alpine-01a4c34 - name: RELATED_IMAGE_postgres @@ -73,8 +73,6 @@ spec: value: quay.io/eclipse/che--traefik:v2.8.1-4e52a5e2495484f5e19a49edfd2f652b0bce7b3603fa0df545ed90168ffae1c3 - name: RELATED_IMAGE_single_host_gateway_config_sidecar value: quay.io/che-incubator/configbump:0.1.4 - - name: RELATED_IMAGE_devworkspace_controller - value: quay.io/devfile/devworkspace-controller:v0.15.2 - name: RELATED_IMAGE_gateway_authentication_sidecar value: quay.io/openshift/origin-oauth-proxy:4.9 - name: RELATED_IMAGE_gateway_authorization_sidecar @@ -151,12 +149,12 @@ spec: value: quay.io/eclipse/che-plugin-sidecar@sha256:2ba8fffe6f2d64f82896367a34fdb657672984548c7904f906178e8e08294277 - name: RELATED_IMAGE_che_plugin_sidecar_plugin_registry_image_IBZWQYJSGU3DUYTCGQYDIZTGMFQTCMRVGY2WEZLCGEZGENDDMQ4DCNRQMNTGCM3GMYZWKZRTMJSTIMRQGQZTAYJWGU3DEZRRMZSTIOBWGM4WGYTGGFTA____ value: quay.io/eclipse/che-plugin-sidecar@sha256:bb404ffaa12565beb12b4cd8160cfa3ff3ef3be420430a6562f1fe48639cbf1f - - name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUNJQGI3DMMDFME2DMNLGGI4TQMLCGUZGGZJYMNTGENJTGFQWKMRTHAYDGN3GME2GCY3BMJRWINBVMMZTKOJWGM2TAOLCGA4DKODGMI3Q____ - value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 - - name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUYRWGRQTIMBRHA3WMN3BMJSTKNTGHFTDIZDFMRSTIYZRGE4TSZBYG5SWIYLEHAYDMZJSMVRTIOBQGJTGCZLCGJRGINJQMQYWGZDGHFQQ____ - value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a - - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNRRGA4WENJVHAYTGY3EHE4DOOJUMMZWCZRVMJSDAN3EGBSDGMDBMRSWGNTEGUYDINJWGRSDQNBSMQ3TSZBZGVTDANZTMIZTIZLGMMYQ____ - value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 + - name: RELATED_IMAGE_che_theia_plugin_registry_image_IBZWQYJSGU3DUOBVGNRTMN3DGA3TMNZTME4DONZYGI3WKMDCGU4GEZBXHE2GIYTCGQ3WKOJSG42DONJVME3DSYRWGUZWEYJRMRQTMNLFHEYTKNBSGA4A____ + value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 + - name: RELATED_IMAGE_che_machine_exec_plugin_registry_image_IBZWQYJSGU3DUZRXMI2DSZBUG43WEZBTGIYTAZRSHEYDQMBXMUZWKMLCGBQTIYZWMQYDENDDGQ4DENBRMI3GKZRUGBTDANLEMI4TONDCHFSDEMJWGIYQ____ + value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 + - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_plugin_registry_image_IBZWQYJSGU3DUNDCMQYDMMBYHEZTINTFMQ4DGMZRMQ4GCYTCMZSTAZBZMYYWMYTFHFTDEODEG4ZGCZBRG42TENJYGE3TGMDEMRSTQM3GGRSWGOJQMQ3A____ + value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 - name: RELATED_IMAGE_che_editor_jupyter_plugin_registry_image_IBZWQYJSGU3DUOBTGQZTSYLFHFSWIY3BMEZWCOJXGUZTMNZUGIZTCNLBG44TCMTGHEZWKNBZHFTDIOJYGQ3WIYJQHE2GGNBYGAYDGMLFMFSTIYTBGQ3Q____ value: index.docker.io/ksmster/che-editor-jupyter@sha256:83439ae9edcaa3a97536742315a7912f93e499f49847da094c480031eae4ba47 - name: RELATED_IMAGE_dirigible_openshift_plugin_registry_image_IBZWQYJSGU3DUMZTGY2TMMZVMQYWKMBUGAZTMOJXMRSWCMBWG42GEYTCMRRTONBZMM2GEZJSMRRDEOJYGE4GCOJTMI4GKMLFGUZWGM3DGUYTINBRGEZQ____ @@ -168,15 +166,17 @@ spec: - name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNJTMNSWGNJYMRSDCOJQMRSDCZJQGYYTAMBUG44GCZJYG44WIN3DGI4GCYTEHBTGGOBYGNSDKZTEMY2WEZJTMVRDMZJZGQZWMZJVMU3Q____ value: quay.io/devfile/universal-developer-image@sha256:53cec58dd190dd1e06100478ae879d7c28abd8fc883d5fdf5be3eb6e943fe5e7 - name: RELATED_IMAGE_che_code_plugin_registry_image_NFXHG2LEMVZHG___ - value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 + value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966 + - name: RELATED_IMAGE_che_code_plugin_registry_image_IBZWQYJSGU3DUNTBHFRTCZJXMIZTMYTBMJSTINLDGRSTONRRMM2WKNLFGAZWGMBQGU2DQNZZGMZWGMZRMI2WMMRXMM3DONTGMI4DGZRSMEZDEN3GGZTA____ + value: quay.io/che-incubator/che-code@sha256:6a9c1e7b36babe45c4e761c5e5e03c005487933c31b5f27c676fb83f2a227f6f - name: RELATED_IMAGE_universal_developer_image_plugin_registry_image_IBZWQYJSGU3DUNBZHE4DMZTFMQ3WMNDFGI2TKNLBGE2TIYZYGU3DOOJVMM3DQOLCHAZTMNZSGA3GENRTMVRTGNZUGI3GMZJSMM4GKNBTMY2TMMZQMU2A____ value: quay.io/devfile/universal-developer-image@sha256:49986fed7f4e2555a154c856795c689b8367206b63ec37426fe2c8e43f5630e4 - name: RELATED_IMAGE_che_idea_plugin_registry_image_NZSXQ5A_ - value: quay.io/che-incubator/che-idea@sha256:2a88672127b5cb4a583402250b15078a8bb8f2f7d400e3f6af2aae795f46018a + value: quay.io/che-incubator/che-idea@sha256:f6a10da8889b342945ff3a18a561b2c276518ddf5a6a90abd8589d251d38125f - name: RELATED_IMAGE_che_idea_plugin_registry_image_IBZWQYJSGU3DUYRWMM4TGZJYGNRWMMRRGU3TAZLCGYYDIOJQGBSWCOBRG5TDIOBTGZTDIMBVGQZDENZUMJRDMY3BMZRGMNLEMI3GENLBG5TDAYRWHFRA____ value: quay.io/che-incubator/che-idea@sha256:b6c93e83cf21570eb604900ea817f4836f40542274bb6cafbf5db6b5a7f0b69b - name: RELATED_IMAGE_che_pycharm_plugin_registry_image_NZSXQ5A_ - value: quay.io/che-incubator/che-pycharm@sha256:8d403ceaaa3e38a813fbc8398e48a3dd410499907daf1e544fd2532ccee9289a + value: quay.io/che-incubator/che-pycharm@sha256:35c286bf0d98f5cf66f15b73379741f770f7d840229e78a3a8a61fa49af38a83 - name: RELATED_IMAGE_che_pycharm_plugin_registry_image_IBZWQYJSGU3DUYZQMU3GMMLCGAZTAZDDGAYWKZBTMJQWCNJUHAYTIOBSMM3GCYRWGI2DKNTFHE2DGNDDGBTDQYRVGRSWEOLDMQZGEOBYGU2GGNJZG5RA____ value: quay.io/che-incubator/che-pycharm@sha256:c0e6f1b030dc01ed3baa5481482c6ab62456e9434c0f8b54eb9cd2b8854c597b - name: RELATED_IMAGE_che_buildah_base_plugin_registry_image_IBZWQYJSGU3DUNBRG4ZDAM3EHA3DEOLFMRSDSMTGGE4DOYLGMQZWKYTCGNSDQZDDGI4DGMZYMQZTIOBQHFSWENZVMZTGGMTFGA4GCNBQGBTDQZBVGZRA____ @@ -186,7 +186,7 @@ spec: - name: RELATED_IMAGE_che_buildkit_base_plugin_registry_image_IBZWQYJSGU3DUZLGMZQTSODEMQZGGZLEGMYGENJSGBRDENLBMZTGMMLBHA4DAZBRGIYWGZRWMIZWMODBMI2DEYJVGE2DSZLBMRQTINTCME3TSM3DMU4Q____ value: quay.io/eclipse/che-buildkit-base@sha256:effa98dd2ced30b520b25afff1a880d121cf6b3f8ab42a5149eada46ba793ce9 - name: RELATED_IMAGE_che_code_devfile_registry_image_NFXHG2LEMVZHG___ - value: quay.io/che-incubator/che-code@sha256:24703e142b0305fb82ad4184683e4ad21757d6c04a433b8117622331c6dc4f44 + value: quay.io/che-incubator/che-code@sha256:46562e89c6652440239135b079ae394e416ef69c2c1bdb6ac2b27ab90b625966 - name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGBSTCOBZMQ4Q____ value: quay.io/devfile/universal-developer-image@sha256:66369ff476b6bd035f5a992d505b0e2a624f46a7d180acb61c41086a37739eea - name: RELATED_IMAGE_universal_developer_image_devfile_registry_image_OVRGSOBNGMYDKNLFGZSA____ @@ -201,15 +201,15 @@ spec: value: quay.io/eclipse/che--centos--mysql-57-centos7@sha256:e08ee4d43b7356607685b69bde6335e27cf20c020f345b6c6c59400183882764 - name: RELATED_IMAGE_che__mariadb_devfile_registry_image_GEYC4NZOGEWTKYJYGAYDSMZWHFSWKNJXMM4DKYRWMY2GCMBYGQYDMMJUG5RGIOLDGUYDKY3EMU3GEOBSGUYGIMJWMEZDOZBSME2WMZLCMZSGKYLEG4______ value: quay.io/eclipse/che--mariadb@sha256:5a8009369ee57c85b6f4a08406147bd9c505cde6b8250d16a27d2a5febfdead7 - - name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKMZOGA______ - value: quay.io/eclipse/che-machine-exec@sha256:b64a40187f7abe56f9f4dede4c1199d87edad806e2ec4802faeb2bd50d1cdf9a - - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKMZOGA______ - value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:6109b55813cd98794c3af5bd07d0d30adec6d504564d842d79d95f073b34efc1 - - name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKMZOGA______ - value: quay.io/eclipse/che-theia@sha256:502660ea465f2981b52ce8cfb531ae238037fa4acabcd45c35963509b0858fb7 + - name: RELATED_IMAGE_che_machine_exec_devfile_registry_image_G4XDKNBOGA______ + value: quay.io/eclipse/che-machine-exec@sha256:f7b49d477bd3210f290807e3e1b0a4c6d024c48241b6ef40f05db974b9d21621 + - name: RELATED_IMAGE_che_theia_endpoint_runtime_binary_devfile_registry_image_G4XDKNBOGA______ + value: quay.io/eclipse/che-theia-endpoint-runtime-binary@sha256:4bd06089346ed8331d8abbfe0d9f1fbe9f28d72ad1752581730dde83f4ec90d6 + - name: RELATED_IMAGE_che_theia_devfile_registry_image_G4XDKNBOGA______ + value: quay.io/eclipse/che-theia@sha256:853c67c07673a877827e0b58bd794dbb47e9274755a69b653ba1da65e9154208 - name: RELATED_IMAGE_ubi_minimal_devfile_registry_image_ - value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:9a9149dbba8dc5a961dfec460018c245b49da0f52e9934e1a70dd4d42f9fc5b7 - image: quay.io/eclipse/che-operator:7.53.0 + value: registry.access.redhat.com/ubi8/ubi-minimal@sha256:e58664de16551db29fb0eaaeb3c4a44eaf95ad89a5b2399a1107041c4f2d6d34 + image: quay.io/eclipse/che-operator:7.54.0 imagePullPolicy: Always livenessProbe: failureThreshold: 10 diff --git a/helmcharts/stable/templates/che-operator.Role.yaml b/helmcharts/stable/templates/che-operator.Role.yaml index 1c02ee053..b2d1d9fba 100644 --- a/helmcharts/stable/templates/che-operator.Role.yaml +++ b/helmcharts/stable/templates/che-operator.Role.yaml @@ -19,6 +19,7 @@ metadata: app.kubernetes.io/name: che app.kubernetes.io/part-of: che.eclipse.org name: che-operator + namespace: eclipse-che rules: - apiGroups: - extensions @@ -37,7 +38,12 @@ rules: resources: - jobs verbs: - - '*' + - create + - delete + - get + - update + - watch + - list - apiGroups: - route.openshift.io resources: @@ -50,15 +56,15 @@ rules: resources: - roles - rolebindings - verbs: - - '*' -- apiGroups: - - rbac.authorization.k8s.io - resources: - clusterroles - clusterrolebindings verbs: - - '*' + - list + - create + - watch + - update + - get + - delete - apiGroups: - "" resources: diff --git a/helmcharts/stable/templates/che-operator.RoleBinding.yaml b/helmcharts/stable/templates/che-operator.RoleBinding.yaml index f145c0454..07726b88d 100644 --- a/helmcharts/stable/templates/che-operator.RoleBinding.yaml +++ b/helmcharts/stable/templates/che-operator.RoleBinding.yaml @@ -19,6 +19,7 @@ metadata: app.kubernetes.io/name: che app.kubernetes.io/part-of: che.eclipse.org name: che-operator + namespace: eclipse-che roleRef: apiGroup: rbac.authorization.k8s.io kind: Role @@ -26,3 +27,4 @@ roleRef: subjects: - kind: ServiceAccount name: che-operator + namespace: eclipse-che diff --git a/helmcharts/stable/templates/org.eclipse.che.ValidatingWebhookConfiguration.yaml b/helmcharts/stable/templates/org.eclipse.che.ValidatingWebhookConfiguration.yaml new file mode 100644 index 000000000..4d566bd6e --- /dev/null +++ b/helmcharts/stable/templates/org.eclipse.che.ValidatingWebhookConfiguration.yaml @@ -0,0 +1,45 @@ +# +# Copyright (c) 2019-2021 Red Hat, Inc. +# This program and the accompanying materials are made +# available under the terms of the Eclipse Public License 2.0 +# which is available at https://www.eclipse.org/legal/epl-2.0/ +# +# SPDX-License-Identifier: EPL-2.0 +# +# Contributors: +# Red Hat, Inc. - initial API and implementation +# + +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: eclipse-che/che-operator-serving-cert + labels: + app.kubernetes.io/component: che-operator + app.kubernetes.io/instance: che + app.kubernetes.io/name: che + app.kubernetes.io/part-of: che.eclipse.org + name: org.eclipse.che +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: che-operator-service + namespace: eclipse-che + path: /validate-org-eclipse-che-v2-checluster + failurePolicy: Fail + name: vchecluster.kb.io + rules: + - apiGroups: + - org.eclipse.che + apiVersions: + - v2 + operations: + - CREATE + - UPDATE + resources: + - checlusters + sideEffects: None diff --git a/version/version.go b/version/version.go index c4f05cf33..3f367b6eb 100644 --- a/version/version.go +++ b/version/version.go @@ -13,5 +13,5 @@ package version var ( - Version = "7.53.0" + Version = "7.54.0" )