# # Copyright (c) 2019-2021 Red Hat, Inc. # This program and the accompanying materials are made # available under the terms of the Eclipse Public License 2.0 # which is available at https://www.eclipse.org/legal/epl-2.0/ # # SPDX-License-Identifier: EPL-2.0 # # Contributors: # Red Hat, Inc. - initial API and implementation # apiVersion: operators.coreos.com/v1alpha1 kind: ClusterServiceVersion metadata: annotations: alm-examples: |- [ { "apiVersion": "org.eclipse.che/v1", "kind": "CheCluster", "metadata": { "name": "eclipse-che", "namespace": "eclipse-che" }, "spec": { "auth": { "identityProviderURL": "", "oAuthClientName": "", "oAuthSecret": "" }, "database": { "externalDb": false }, "k8s": { "ingressDomain": null, "tlsSecretName": null }, "metrics": { "enable": true }, "server": { "workspaceNamespaceDefault": "-che" }, "storage": { "pvcStrategy": "common" } } }, { "apiVersion": "org.eclipse.che/v2", "kind": "CheCluster", "metadata": { "name": "eclipse-che", "namespace": "eclipse-che" }, "spec": { "components": {}, "containerRegistry": {}, "devEnvironments": {}, "networking": {} } } ] capabilities: Seamless Upgrades categories: Developer Tools certified: "false" containerImage: quay.io/eclipse/che-operator:next createdAt: "2021-05-11T18:38:31Z" description: A Kube-native development solution that delivers portable and collaborative developer workspaces. operatorframework.io/suggested-namespace: openshift-operators operators.openshift.io/infrastructure-features: '["disconnected", "proxy-aware", "fips"]' operators.operatorframework.io/builder: operator-sdk-v1.9.0+git operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/eclipse-che/che-operator support: Eclipse Foundation name: eclipse-che-preview-openshift.v7.50.0-620.next namespace: placeholder spec: apiservicedefinitions: {} customresourcedefinitions: owned: - description: 'The `CheCluster` custom resource allows defining and managing Eclipse Che server installation. Based on these settings, the Operator automatically creates and maintains several ConfigMaps: `che`, `plugin-registry`, `devfile-registry` that will contain the appropriate environment variables of the various components of the installation. These generated ConfigMaps must NOT be updated manually.' displayName: Eclipse Che instance Specification kind: CheCluster name: checlusters.org.eclipse.che resources: - kind: ClusterRole name: '' version: v1 - kind: ClusterRoleBinding name: '' version: v1 - kind: ConfigMap name: '' version: v1 - kind: Deployment name: '' version: apps/v1 - kind: Ingress name: '' version: v1 - kind: Role name: '' version: v1 - kind: RoleBinding name: '' version: v1 - kind: Route name: '' version: v1 - kind: Secret name: '' version: v1 - kind: Service name: '' version: v1 specDescriptors: - description: Development environment default configuration options. displayName: Development environments path: devEnvironments - description: Che components configuration. displayName: Components path: components - description: Networking, Che authentication, and TLS configuration. displayName: Networking path: networking - description: Configuration of an alternative registry that stores Che images. displayName: Container registry path: containerRegistry statusDescriptors: - description: Specifies the current phase of the Che deployment. displayName: ChePhase path: chePhase x-descriptors: - urn:alm:descriptor:text - description: Public URL of the Che server. displayName: Eclipse Che URL path: cheURL x-descriptors: - urn:alm:descriptor:org.w3:link - description: Currently installed Che version. displayName: 'displayName: Eclipse Che version' path: cheVersion x-descriptors: - urn:alm:descriptor:text - description: The public URL of the internal devfile registry. displayName: Devfile registry URL path: devfileRegistryURL x-descriptors: - urn:alm:descriptor:org.w3:link - description: Specifies the current phase of the gateway deployment. displayName: Gateway phase path: gatewayPhase x-descriptors: - urn:alm:descriptor:text - description: A human readable message indicating details about why the Che deployment is in the current phase. displayName: Message path: message x-descriptors: - urn:alm:descriptor:text - description: The public URL of the internal plug-in registry. displayName: Plugin registry URL path: pluginRegistryURL x-descriptors: - urn:alm:descriptor:org.w3:link - description: The PostgreSQL version of the image in use. displayName: PostgreSQL version path: postgresVersion x-descriptors: - urn:alm:descriptor:text - description: A brief CamelCase message indicating details about why the Che deployment is in the current phase. displayName: Reason path: reason x-descriptors: - urn:alm:descriptor:text - description: The resolved workspace base domain. This is either the copy of the explicitly defined property of the same name in the spec or, if it is undefined in the spec and we're running on OpenShift, the automatically resolved basedomain for routes. displayName: Workspace base domain path: workspaceBaseDomain x-descriptors: - urn:alm:descriptor:text version: v2 - description: The `CheCluster` custom resource allows defining and managing a Che server installation displayName: Eclipse Che instance Specification kind: CheCluster name: checlusters.org.eclipse.che resources: - kind: ClusterRole name: '' version: v1 - kind: ClusterRoleBinding name: '' version: v1 - kind: ConfigMap name: '' version: v1 - kind: Deployment name: '' version: apps/v1 - kind: Ingress name: '' version: v1 - kind: Role name: '' version: v1 - kind: RoleBinding name: '' version: v1 - kind: Route name: '' version: v1 - kind: Secret name: '' version: v1 - kind: Service name: '' version: v1 specDescriptors: - description: Configuration settings related to the Authentication used by the Che installation. displayName: Authentication path: auth - description: Deprecated. The value of this flag is ignored. Sidecar functionality is now implemented in Traefik plugin. displayName: Gateway Header Rewrite Sidecar Image path: auth.gatewayHeaderRewriteSidecarImage x-descriptors: - urn:alm:descriptor:com.tectonic.ui:hidden - description: Configuration settings related to the User Dashboard used by the Che installation. displayName: User Dashboard path: dashboard - description: Configuration settings related to the database used by the Che installation. displayName: Database path: database - description: DevWorkspace operator configuration displayName: Dev Workspace operator path: devWorkspace - description: Deploys the DevWorkspace Operator in the cluster. Does nothing when a matching version of the Operator is already installed. Fails when a non-matching version of the Operator is already installed. displayName: Enable DevWorkspace operator path: devWorkspace.enable x-descriptors: - urn:alm:descriptor:com.tectonic.ui:booleanSwitch - description: Kubernetes Image Puller configuration displayName: Kubernetes Image Puller path: imagePuller - description: Configuration settings specific to Che installations made on upstream Kubernetes. displayName: Kubernetes path: k8s - description: Configuration settings related to the metrics collection used by the Che installation. displayName: Metrics path: metrics - description: General configuration settings related to the Che server, the plugin and devfile registries displayName: Che server path: server - description: Deprecated. The value of this flag is ignored. Defines that a user is allowed to specify a Kubernetes namespace, or an OpenShift project, which differs from the default. It's NOT RECOMMENDED to set to `true` without OpenShift OAuth configured. The OpenShift infrastructure also uses this property. displayName: Allow User Defined Workspace Namespaces path: server.allowUserDefinedWorkspaceNamespaces x-descriptors: - urn:alm:descriptor:com.tectonic.ui:hidden - description: Deprecated in favor of `externalDevfileRegistries` fields. displayName: Devfile Registry Url path: server.devfileRegistryUrl x-descriptors: - urn:alm:descriptor:com.tectonic.ui:hidden - description: Deprecated. The value of this flag is ignored. The Che Operator will automatically detect whether the router certificate is self-signed and propagate it to other components, such as the Che server. displayName: Self Signed Cert path: server.selfSignedCert x-descriptors: - urn:alm:descriptor:com.tectonic.ui:hidden - description: Deprecated. Instructs the Operator to deploy Che in TLS mode. This is enabled by default. Disabling TLS sometimes cause malfunction of some Che components. displayName: Tls Support path: server.tlsSupport x-descriptors: - urn:alm:descriptor:com.tectonic.ui:hidden - description: Deprecated in favor of `disableInternalClusterSVCNames`. displayName: Use Internal Cluster SVCNames path: server.useInternalClusterSVCNames x-descriptors: - urn:alm:descriptor:com.tectonic.ui:hidden - description: Configuration settings related to the persistent storage used by the Che installation. displayName: Persistent storage path: storage statusDescriptors: - description: Status of a Che installation. Can be `Available`, `Unavailable`, or `Available, Rolling Update in Progress`. displayName: Status path: cheClusterRunning x-descriptors: - urn:alm:descriptor:io.kubernetes.phase - description: Public URL to the Che server. displayName: Eclipse Che URL path: cheURL x-descriptors: - urn:alm:descriptor:org.w3:link - description: Current installed Che version. displayName: 'displayName: Eclipse Che version' path: cheVersion x-descriptors: - urn:alm:descriptor:org.w3:link - description: Public URL to the devfile registry. displayName: Devfile registry URL path: devfileRegistryURL x-descriptors: - urn:alm:descriptor:org.w3:link - description: The ConfigMap containing certificates to propagate to the Che components and to provide particular configuration for Git. displayName: Git certificates path: gitServerTLSCertificateConfigMapName x-descriptors: - urn:alm:descriptor:text - description: A URL that points to some URL where to find help related to the current Operator status. displayName: Help link path: helpLink x-descriptors: - urn:alm:descriptor:org.w3:link - description: Public URL to the Identity Provider server, Keycloak or RH-SSO,. displayName: Keycloak Admin Console URL path: keycloakURL x-descriptors: - urn:alm:descriptor:org.w3:link - description: A human readable message indicating details about why the Pod is in this condition. displayName: Message path: message x-descriptors: - urn:alm:descriptor:text - description: OpenShift OAuth secret in `openshift-config` namespace that contains user credentials for HTPasswd identity provider. displayName: OpenShift OAuth secret in `openshift-config` namespace that contains user credentials for HTPasswd identity provider. path: openShiftOAuthUserCredentialsSecret x-descriptors: - urn:alm:descriptor:text - description: Public URL to the plugin registry. displayName: Plugin registry URL path: pluginRegistryURL x-descriptors: - urn:alm:descriptor:org.w3:link - description: A brief CamelCase message indicating details about why the Pod is in this state. displayName: Reason path: reason x-descriptors: - urn:alm:descriptor:text version: v1 description: | A collaborative Kubernetes-native development solution that delivers OpenShift workspaces and in-browser IDE for rapid cloud application development. This operator installs PostgreSQL, Plugin and Devfile registries, Dashboard, Gateway and the Eclipse Che server, as well as configures all these services. OpenShift OAuth is used directly for authentication. TLS mode is on. ## How to Install Press the **Install** button, choose the channel and the upgrade strategy, and wait for the **Installed** Operator status. When the operator is installed, create a new Custom Resource (CR) of Kind CheCluster (click the **Create New** button). The CR spec contains all defaults. You can start using Eclipse Che when the CR status is set to **Available**, and you see a URL to Eclipse Che. ## Defaults By default, the operator deploys Eclipse Che with: * 10Gi storage * Auto-generated passwords * Bundled PostgreSQL * Bundled Plugin and Devfile registries Use `oc edit checluster/eclipse-che -n eclipse-che` to update Eclipse Che default installation options. See more in the [Installation guide](https://www.eclipse.org/che/docs/che-7/installation-guide/configuring-the-che-installation/). ### Certificates Operator uses a default router certificate to secure Eclipse Che routes. Follow the [guide](https://www.eclipse.org/che/docs/che-7/installation-guide/importing-untrusted-tls-certificates/) to import certificates into Eclipse Che. displayName: Eclipse Che icon: - base64data: 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 mediatype: image/png install: spec: clusterPermissions: - rules: - apiGroups: - "" resources: - nodes verbs: - get - apiGroups: - oauth.openshift.io resources: - oauthclients verbs: - create - delete - deletecollection - get - list - patch - update - watch - apiGroups: - config.openshift.io resources: - oauths verbs: - get - list - watch - patch - apiGroups: - config.openshift.io resources: - infrastructures - proxies verbs: - get - list - watch - apiGroups: - user.openshift.io resources: - users verbs: - list - delete - apiGroups: - user.openshift.io resources: - identities verbs: - delete - apiGroups: - console.openshift.io resources: - consolelinks verbs: - get - list - create - update - patch - delete - apiGroups: - rbac.authorization.k8s.io resources: - clusterrolebindings - clusterroles verbs: - list - create - watch - update - get - delete - apiGroups: - rbac.authorization.k8s.io resources: - roles - rolebindings verbs: - get - create - update - delete - apiGroups: - authorization.openshift.io resources: - roles - rolebindings verbs: - get - create - update - delete - apiGroups: - org.eclipse.che resources: - checlusters - checlusters/status - checlusters/finalizers - checlusters/status verbs: - '*' - apiGroups: - project.openshift.io resources: - projectrequests verbs: - create - update - apiGroups: - project.openshift.io resources: - projects verbs: - get - list - watch - apiGroups: - "" resources: - namespaces verbs: - get - list - create - update - watch - apiGroups: - "" resources: - pods/exec verbs: - create - apiGroups: - apps resources: - secrets verbs: - list - apiGroups: - "" resources: - secrets verbs: - list - get - create - update - patch - delete - apiGroups: - "" resources: - persistentvolumeclaims verbs: - create - get - list - watch - delete - apiGroups: - "" resources: - pods verbs: - get - list - create - watch - delete - apiGroups: - apps - extensions resources: - deployments - replicasets verbs: - '*' - apiGroups: - route.openshift.io resources: - routes verbs: - '*' - apiGroups: - route.openshift.io resources: - routes/custom-host verbs: - create - apiGroups: - "" resources: - events verbs: - watch - apiGroups: - apps resources: - replicasets verbs: - list - get - patch - delete - apiGroups: - extensions resources: - ingresses verbs: - '*' - apiGroups: - networking.k8s.io resources: - ingresses verbs: - list - create - watch - get - delete - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - get - create - update - apiGroups: - operators.coreos.com resources: - subscriptions verbs: - get - apiGroups: - operators.coreos.com resources: - clusterserviceversions verbs: - list - get - watch - apiGroups: - metrics.k8s.io resources: - pods - nodes verbs: - get - list - watch - apiGroups: - cert-manager.io resources: - issuers - certificates verbs: - create - get - list - update - apiGroups: - "" resources: - configmaps - persistentvolumeclaims - pods - secrets - serviceaccounts - services verbs: - '*' - apiGroups: - apps resourceNames: - che-operator resources: - deployments/finalizers verbs: - update - apiGroups: - batch resources: - jobs verbs: - create - delete - get - update - watch - apiGroups: - controller.devfile.io resources: - devworkspaceroutings verbs: - '*' - apiGroups: - controller.devfile.io resources: - devworkspaceroutings/finalizers verbs: - update - apiGroups: - controller.devfile.io resources: - devworkspaceroutings/status verbs: - get - patch - update - apiGroups: - monitoring.coreos.com resources: - servicemonitors verbs: - create - get - nonResourceURLs: - /metrics verbs: - get - apiGroups: - che.eclipse.org resources: - kubernetesimagepullers verbs: - '*' - apiGroups: - config.openshift.io resourceNames: - cluster resources: - consoles verbs: - get - apiGroups: - "" resources: - pods/log verbs: - get - list - watch - apiGroups: - workspace.devfile.io resources: - devworkspaces - devworkspacetemplates verbs: - get - list - watch - apiGroups: - controller.devfile.io resources: - devworkspaceroutings - components verbs: - get - list - watch - apiGroups: - workspace.devfile.io resources: - devworkspaces - devworkspacetemplates verbs: - create - delete - deletecollection - patch - update - apiGroups: - controller.devfile.io resources: - devworkspaceroutings - components verbs: - create - delete - deletecollection - patch - update - apiGroups: - "" resources: - configmaps verbs: - get - list - watch - create - update - patch - delete - apiGroups: - "" resources: - configmaps/status verbs: - get - update - patch - apiGroups: - "" resources: - events verbs: - create - patch - apiGroups: - authentication.k8s.io resources: - tokenreviews verbs: - create - apiGroups: - authorization.k8s.io resources: - subjectaccessreviews verbs: - create - apiGroups: - "" resourceNames: - workspace-preferences-configmap resources: - configmaps verbs: - create - delete - get - patch - apiGroups: - "" resources: - configmaps - persistentvolumeclaims - pods - secrets - serviceaccounts verbs: - '*' - apiGroups: - "" resources: - events - namespaces verbs: - get - list - watch - apiGroups: - "" resources: - pods/exec verbs: - create - apiGroups: - "" resourceNames: - workspace-credentials-secret resources: - secrets verbs: - create - delete - get - patch - apiGroups: - "" resources: - services verbs: - '*' - apiGroups: - admissionregistration.k8s.io resources: - mutatingwebhookconfigurations - validatingwebhookconfigurations verbs: - create - delete - get - list - patch - update - watch - apiGroups: - apps resourceNames: - devworkspace-controller resources: - deployments/finalizers verbs: - update - apiGroups: - apps - extensions resources: - deployments verbs: - get - list - watch - apiGroups: - apps - extensions resources: - deployments - replicasets verbs: - '*' - apiGroups: - apps - extensions resources: - replicasets verbs: - get - list - watch - apiGroups: - authorization.k8s.io resources: - localsubjectaccessreviews - subjectaccessreviews verbs: - create - apiGroups: - batch resources: - jobs verbs: - create - delete - get - list - patch - update - watch - apiGroups: - config.openshift.io resourceNames: - cluster resources: - proxies verbs: - get - apiGroups: - controller.devfile.io resources: - '*' verbs: - '*' - apiGroups: - controller.devfile.io resources: - devworkspaceroutings verbs: - '*' - apiGroups: - controller.devfile.io resources: - devworkspaceroutings/status verbs: - get - patch - update - apiGroups: - coordination.k8s.io resources: - leases verbs: - create - get - update - apiGroups: - metrics.k8s.io resources: - pods verbs: - get - list - watch - apiGroups: - monitoring.coreos.com resources: - servicemonitors verbs: - create - get - apiGroups: - networking.k8s.io resources: - ingresses verbs: - '*' - apiGroups: - oauth.openshift.io resources: - oauthclients verbs: - create - delete - deletecollection - get - list - patch - update - watch - apiGroups: - rbac.authorization.k8s.io resources: - clusterrolebindings - clusterroles - rolebindings - roles verbs: - create - get - list - update - watch - apiGroups: - route.openshift.io resources: - routes verbs: - '*' - apiGroups: - route.openshift.io resources: - routes/custom-host verbs: - create - apiGroups: - workspace.devfile.io resources: - '*' verbs: - '*' - nonResourceURLs: - /metrics verbs: - get serviceAccountName: che-operator deployments: - name: che-operator spec: replicas: 1 selector: matchLabels: app: che-operator strategy: type: RollingUpdate template: metadata: labels: app: che-operator app.kubernetes.io/component: che-operator app.kubernetes.io/instance: che app.kubernetes.io/managed-by: olm app.kubernetes.io/name: che app.kubernetes.io/part-of: che.eclipse.org spec: containers: - args: - --leader-elect command: - /manager env: - name: WATCH_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.annotations['olm.targetNamespaces'] - name: POD_NAME valueFrom: fieldRef: fieldPath: metadata.name - name: OPERATOR_NAME value: che-operator - name: CHE_VERSION value: next - name: RELATED_IMAGE_che_server value: quay.io/eclipse/che-server:next - name: RELATED_IMAGE_dashboard value: quay.io/eclipse/che-dashboard:next - name: RELATED_IMAGE_plugin_registry value: quay.io/eclipse/che-plugin-registry:next - name: RELATED_IMAGE_devfile_registry value: quay.io/eclipse/che-devfile-registry:next - name: RELATED_IMAGE_che_tls_secrets_creation_job value: quay.io/eclipse/che-tls-secret-creator:alpine-01a4c34 - name: RELATED_IMAGE_postgres value: quay.io/eclipse/che--centos--postgresql-96-centos7:9.6-b681d78125361519180a6ac05242c296f8906c11eab7e207b5ca9a89b6344392 - name: RELATED_IMAGE_postgres_13_3 value: quay.io/eclipse/che--centos--postgresql-13-centos7:1-71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2 - name: RELATED_IMAGE_single_host_gateway value: quay.io/eclipse/che--traefik:v2.5.0-eb30f9f09a65cee1fab5ef9c64cb4ec91b800dc3fdd738d62a9d4334f0114683 - name: RELATED_IMAGE_single_host_gateway_config_sidecar value: quay.io/che-incubator/configbump:0.1.4 - name: RELATED_IMAGE_devworkspace_controller value: quay.io/devfile/devworkspace-controller:v0.14.1 - name: RELATED_IMAGE_gateway_authentication_sidecar value: quay.io/openshift/origin-oauth-proxy:4.7 - name: RELATED_IMAGE_gateway_authorization_sidecar value: quay.io/openshift/origin-kube-rbac-proxy:4.7 - name: RELATED_IMAGE_gateway_authentication_sidecar_k8s value: quay.io/oauth2-proxy/oauth2-proxy:v7.2.0 - name: RELATED_IMAGE_gateway_authorization_sidecar_k8s value: quay.io/brancz/kube-rbac-proxy:v0.11.0 - name: RELATED_IMAGE_gateway_header_sidecar value: quay.io/che-incubator/header-rewrite-proxy:latest - name: CHE_FLAVOR value: che - name: CONSOLE_LINK_NAME value: che - name: CONSOLE_LINK_DISPLAY_NAME value: Eclipse Che - name: CONSOLE_LINK_SECTION value: Red Hat Applications - name: CONSOLE_LINK_IMAGE value: /dashboard/assets/branding/loader.svg - name: MAX_CONCURRENT_RECONCILES value: "1" - name: ADD_COMPONENT_READINESS_INIT_CONTAINERS value: "false" image: quay.io/eclipse/che-operator:next imagePullPolicy: Always livenessProbe: failureThreshold: 10 httpGet: path: /healthz port: 6789 initialDelaySeconds: 15 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 name: che-operator ports: - containerPort: 9443 name: webhook-server protocol: TCP - containerPort: 60000 name: metrics readinessProbe: failureThreshold: 10 httpGet: path: /readyz port: 6789 initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: limits: cpu: 500m memory: 256Mi requests: cpu: 100m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: false runAsNonRoot: true volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs name: webhook-tls-certs readOnly: true hostIPC: false hostNetwork: false hostPID: false restartPolicy: Always serviceAccountName: che-operator terminationGracePeriodSeconds: 20 volumes: - name: webhook-tls-certs secret: defaultMode: 420 secretName: che-operator-webhook-server-cert permissions: - rules: - apiGroups: - extensions resources: - ingresses verbs: - '*' - apiGroups: - networking.k8s.io resources: - ingresses verbs: - '*' - apiGroups: - batch resources: - jobs verbs: - '*' - apiGroups: - route.openshift.io resources: - routes - routes/custom-host verbs: - '*' - apiGroups: - rbac.authorization.k8s.io resources: - roles - rolebindings verbs: - '*' - apiGroups: - rbac.authorization.k8s.io resources: - clusterroles - clusterrolebindings verbs: - '*' - apiGroups: - "" resources: - pods - services - serviceaccounts - endpoints - persistentvolumeclaims - events - configmaps - secrets - pods/exec - pods/log verbs: - '*' - apiGroups: - "" resources: - namespaces verbs: - get - apiGroups: - apps - extensions resources: - deployments - replicasets verbs: - '*' - apiGroups: - monitoring.coreos.com resources: - servicemonitors verbs: - get - create - apiGroups: - org.eclipse.che resources: - checlusters - checlusters/status - checlusters/finalizers verbs: - '*' - apiGroups: - metrics.k8s.io resources: - pods - nodes verbs: - get - list - watch - apiGroups: - operators.coreos.com resources: - subscriptions - clusterserviceversions - operatorgroups verbs: - '*' - apiGroups: - packages.operators.coreos.com resources: - packagemanifests verbs: - get - list - apiGroups: - "" resources: - configmaps/status verbs: - get - update - patch - apiGroups: - "" resources: - events verbs: - create - apiGroups: - apps resourceNames: - che-operator resources: - deployments/finalizers verbs: - update - apiGroups: - controller.devfile.io resources: - devworkspaceroutings verbs: - '*' - apiGroups: - controller.devfile.io resources: - devworkspaceroutings/finalizers verbs: - update - apiGroups: - controller.devfile.io resources: - devworkspaceroutings/status verbs: - get - patch - update - apiGroups: - oauth.openshift.io resources: - oauthclients verbs: - create - delete - deletecollection - get - list - patch - update - watch serviceAccountName: che-operator strategy: deployment installModes: - supported: false type: OwnNamespace - supported: false type: SingleNamespace - supported: false type: MultiNamespace - supported: true type: AllNamespaces keywords: - eclipse che - workspaces - devtools - developer - ide - java links: - name: Product Page url: http://www.eclipse.org/che - name: Documentation url: https://www.eclipse.org/che/docs - name: Operator GitHub Repo url: https://github.com/eclipse-che/che-operator maintainers: - email: abazko@redhat.com name: Anatolii Bazko maturity: stable provider: name: Eclipse Foundation version: 7.50.0-620.next webhookdefinitions: - admissionReviewVersions: - v1 - v2 containerPort: 443 conversionCRDs: - checlusters.org.eclipse.che deploymentName: che-operator generateName: ccheclusters.kb.io sideEffects: None targetPort: 9443 type: ConversionWebhook webhookPath: /convert