1414 lines
57 KiB
YAML
1414 lines
57 KiB
YAML
#
|
|
# Copyright (c) 2019-2021 Red Hat, Inc.
|
|
# This program and the accompanying materials are made
|
|
# available under the terms of the Eclipse Public License 2.0
|
|
# which is available at https://www.eclipse.org/legal/epl-2.0/
|
|
#
|
|
# SPDX-License-Identifier: EPL-2.0
|
|
#
|
|
# Contributors:
|
|
# Red Hat, Inc. - initial API and implementation
|
|
#
|
|
|
|
apiVersion: operators.coreos.com/v1alpha1
|
|
kind: ClusterServiceVersion
|
|
metadata:
|
|
annotations:
|
|
alm-examples: |-
|
|
[
|
|
{
|
|
"apiVersion": "org.eclipse.che/v1",
|
|
"kind": "CheBackupServerConfiguration",
|
|
"metadata": {
|
|
"name": "eclipse-che-backup-server-configuration"
|
|
},
|
|
"spec": {
|
|
"awss3": {
|
|
"awsAccessKeySecretRef": "minio-credentials-secret",
|
|
"hostname": "minio.mydomain.net",
|
|
"port": 9000,
|
|
"protocol": "http",
|
|
"repositoryPasswordSecretRef": "secret-name",
|
|
"repositoryPath": "che-backups-bucket"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"apiVersion": "org.eclipse.che/v1",
|
|
"kind": "CheCluster",
|
|
"metadata": {
|
|
"name": "eclipse-che"
|
|
},
|
|
"spec": {
|
|
"auth": {
|
|
"externalIdentityProvider": false,
|
|
"identityProviderAdminUserName": "",
|
|
"identityProviderClientId": "",
|
|
"identityProviderPassword": "",
|
|
"identityProviderRealm": "",
|
|
"identityProviderURL": "",
|
|
"initialOpenShiftOAuthUser": true,
|
|
"oAuthClientName": "",
|
|
"oAuthSecret": ""
|
|
},
|
|
"database": {
|
|
"chePostgresDb": "",
|
|
"chePostgresHostName": "",
|
|
"chePostgresPassword": "",
|
|
"chePostgresPort": "",
|
|
"chePostgresUser": "",
|
|
"externalDb": false
|
|
},
|
|
"devWorkspace": {
|
|
"enable": false
|
|
},
|
|
"k8s": {
|
|
"ingressClass": "",
|
|
"ingressDomain": "",
|
|
"ingressStrategy": "",
|
|
"securityContextFsGroup": "",
|
|
"securityContextRunAsUser": "",
|
|
"singleHostExposureType": "",
|
|
"tlsSecretName": "che-tls"
|
|
},
|
|
"metrics": {
|
|
"enable": true
|
|
},
|
|
"server": {
|
|
"allowUserDefinedWorkspaceNamespaces": false,
|
|
"cheClusterRoles": "",
|
|
"cheFlavor": "",
|
|
"cheWorkspaceClusterRole": "",
|
|
"gitSelfSignedCert": false,
|
|
"nonProxyHosts": "",
|
|
"proxyPassword": "",
|
|
"proxyPort": "",
|
|
"proxyURL": "",
|
|
"proxyUser": "",
|
|
"serverExposureStrategy": "",
|
|
"serverTrustStoreConfigMapName": "",
|
|
"tlsSupport": true,
|
|
"workspaceNamespaceDefault": "<username>-che"
|
|
},
|
|
"storage": {
|
|
"postgresPVCStorageClassName": "",
|
|
"preCreateSubPaths": true,
|
|
"pvcClaimSize": "10Gi",
|
|
"pvcStrategy": "common",
|
|
"workspacePVCStorageClassName": ""
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"apiVersion": "org.eclipse.che/v1",
|
|
"kind": "CheClusterBackup",
|
|
"metadata": {
|
|
"name": "eclipse-che-backup"
|
|
},
|
|
"spec": {
|
|
"backupServerConfigRef": "eclipse-che-backup-server-configuration",
|
|
"useInternalBackupServer": false
|
|
}
|
|
},
|
|
{
|
|
"apiVersion": "org.eclipse.che/v1",
|
|
"kind": "CheClusterRestore",
|
|
"metadata": {
|
|
"name": "eclipse-che-restore"
|
|
},
|
|
"spec": {
|
|
"backupServerConfigRef": "eclipse-che-backup-server-configuration"
|
|
}
|
|
}
|
|
]
|
|
capabilities: Seamless Upgrades
|
|
categories: Developer Tools
|
|
certified: "false"
|
|
containerImage: quay.io/eclipse/che-operator:next
|
|
createdAt: "2021-05-11T18:38:31Z"
|
|
description: A Kube-native development solution that delivers portable and collaborative
|
|
developer workspaces.
|
|
operatorframework.io/suggested-namespace: eclipse-che
|
|
operators.operatorframework.io/builder: operator-sdk-v1.6.1+git
|
|
operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
|
|
repository: https://github.com/eclipse-che/che-operator
|
|
support: Eclipse Foundation
|
|
name: eclipse-che-preview-kubernetes.v7.40.0-381.next
|
|
namespace: placeholder
|
|
spec:
|
|
apiservicedefinitions: {}
|
|
customresourcedefinitions:
|
|
owned:
|
|
- description: The `CheCluster` custom resource allows defining and managing
|
|
a Che server installation
|
|
displayName: Eclipse Che instance Specification
|
|
kind: CheCluster
|
|
name: checlusters.org.eclipse.che
|
|
resources:
|
|
- kind: ClusterRole
|
|
name: ''
|
|
version: v1
|
|
- kind: ClusterRoleBinding
|
|
name: ''
|
|
version: v1
|
|
- kind: ConfigMap
|
|
name: ''
|
|
version: v1
|
|
- kind: Deployment
|
|
name: ''
|
|
version: apps/v1
|
|
- kind: Ingress
|
|
name: ''
|
|
version: v1
|
|
- kind: Role
|
|
name: ''
|
|
version: v1
|
|
- kind: RoleBinding
|
|
name: ''
|
|
version: v1
|
|
- kind: Route
|
|
name: ''
|
|
version: v1
|
|
- kind: Secret
|
|
name: ''
|
|
version: v1
|
|
- kind: Service
|
|
name: ''
|
|
version: v1
|
|
specDescriptors:
|
|
- description: Configuration settings related to the Authentication used
|
|
by the Che installation.
|
|
displayName: Authentication
|
|
path: auth
|
|
- description: Deprecated. The value of this flag is ignored. Sidecar functionality
|
|
is now implemented in Traefik plugin.
|
|
displayName: Gateway Header Rewrite Sidecar Image
|
|
path: auth.gatewayHeaderRewriteSidecarImage
|
|
x-descriptors:
|
|
- urn:alm:descriptor:com.tectonic.ui:hidden
|
|
- description: Configuration settings related to the database used by the
|
|
Che installation.
|
|
displayName: Database
|
|
path: database
|
|
- description: DevWorkspace operator configuration
|
|
displayName: Dev Workspace operator
|
|
path: devWorkspace
|
|
- description: Deploys the DevWorkspace Operator in the cluster. Does nothing
|
|
when a matching version of the Operator is already installed. Fails
|
|
when a non-matching version of the Operator is already installed.
|
|
displayName: Enable DevWorkspace operator (Technology Preview)
|
|
path: devWorkspace.enable
|
|
x-descriptors:
|
|
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
|
|
- description: Kubernetes Image Puller configuration
|
|
displayName: Kubernetes Image Puller
|
|
path: imagePuller
|
|
- description: Configuration settings specific to Che installations made
|
|
on upstream Kubernetes.
|
|
displayName: Kubernetes
|
|
path: k8s
|
|
- description: Configuration settings related to the metrics collection
|
|
used by the Che installation.
|
|
displayName: Metrics
|
|
path: metrics
|
|
- description: General configuration settings related to the Che server,
|
|
the plugin and devfile registries
|
|
displayName: Che server
|
|
path: server
|
|
- description: Deprecated. The value of this flag is ignored. Defines that
|
|
a user is allowed to specify a Kubernetes namespace, or an OpenShift
|
|
project, which differs from the default. It's NOT RECOMMENDED to set
|
|
to `true` without OpenShift OAuth configured. The OpenShift infrastructure
|
|
also uses this property.
|
|
displayName: Allow User Defined Workspace Namespaces
|
|
path: server.allowUserDefinedWorkspaceNamespaces
|
|
x-descriptors:
|
|
- urn:alm:descriptor:com.tectonic.ui:hidden
|
|
- description: Deprecated in favor of `externalDevfileRegistries` fields.
|
|
displayName: Devfile Registry Url
|
|
path: server.devfileRegistryUrl
|
|
x-descriptors:
|
|
- urn:alm:descriptor:com.tectonic.ui:hidden
|
|
- description: Deprecated. The value of this flag is ignored. The Che Operator
|
|
will automatically detect whether the router certificate is self-signed
|
|
and propagate it to other components, such as the Che server.
|
|
displayName: Self Signed Cert
|
|
path: server.selfSignedCert
|
|
x-descriptors:
|
|
- urn:alm:descriptor:com.tectonic.ui:hidden
|
|
- description: Deprecated. Instructs the Operator to deploy Che in TLS mode.
|
|
This is enabled by default. Disabling TLS sometimes cause malfunction
|
|
of some Che components.
|
|
displayName: Tls Support
|
|
path: server.tlsSupport
|
|
x-descriptors:
|
|
- urn:alm:descriptor:com.tectonic.ui:hidden
|
|
- description: Deprecated in favor of `disableInternalClusterSVCNames`.
|
|
displayName: Use Internal Cluster SVCNames
|
|
path: server.useInternalClusterSVCNames
|
|
x-descriptors:
|
|
- urn:alm:descriptor:com.tectonic.ui:hidden
|
|
- description: Configuration settings related to the persistent storage
|
|
used by the Che installation.
|
|
displayName: Persistent storage
|
|
path: storage
|
|
statusDescriptors:
|
|
- description: Status of a Che installation. Can be `Available`, `Unavailable`,
|
|
or `Available, Rolling Update in Progress`.
|
|
displayName: Status
|
|
path: cheClusterRunning
|
|
x-descriptors:
|
|
- urn:alm:descriptor:io.kubernetes.phase
|
|
- description: Public URL to the Che server.
|
|
displayName: Eclipse Che URL
|
|
path: cheURL
|
|
x-descriptors:
|
|
- urn:alm:descriptor:org.w3:link
|
|
- description: Current installed Che version.
|
|
displayName: 'displayName: Eclipse Che version'
|
|
path: cheVersion
|
|
x-descriptors:
|
|
- urn:alm:descriptor:org.w3:link
|
|
- description: Public URL to the devfile registry.
|
|
displayName: Devfile registry URL
|
|
path: devfileRegistryURL
|
|
x-descriptors:
|
|
- urn:alm:descriptor:org.w3:link
|
|
- description: A URL that points to some URL where to find help related
|
|
to the current Operator status.
|
|
displayName: Help link
|
|
path: helpLink
|
|
x-descriptors:
|
|
- urn:alm:descriptor:org.w3:link
|
|
- description: Public URL to the Identity Provider server, Keycloak or RH-SSO,.
|
|
displayName: Keycloak Admin Console URL
|
|
path: keycloakURL
|
|
x-descriptors:
|
|
- urn:alm:descriptor:org.w3:link
|
|
- description: A human readable message indicating details about why the
|
|
Pod is in this condition.
|
|
displayName: Message
|
|
path: message
|
|
x-descriptors:
|
|
- urn:alm:descriptor:text
|
|
- description: OpenShift OAuth secret in `openshift-config` namespace that
|
|
contains user credentials for HTPasswd identity provider.
|
|
displayName: OpenShift OAuth secret in `openshift-config` namespace that
|
|
contains user credentials for HTPasswd identity provider.
|
|
path: openShiftOAuthUserCredentialsSecret
|
|
x-descriptors:
|
|
- urn:alm:descriptor:text
|
|
- description: Public URL to the plugin registry.
|
|
displayName: Plugin registry URL
|
|
path: pluginRegistryURL
|
|
x-descriptors:
|
|
- urn:alm:descriptor:org.w3:link
|
|
- description: A brief CamelCase message indicating details about why the
|
|
Pod is in this state.
|
|
displayName: Reason
|
|
path: reason
|
|
x-descriptors:
|
|
- urn:alm:descriptor:text
|
|
version: v1
|
|
- description: The `CheBackupServerConfiguration` custom resource allows defining
|
|
and managing Eclipse Che Backup Server Configurations
|
|
displayName: Eclipse Che Backup Server
|
|
kind: CheBackupServerConfiguration
|
|
name: chebackupserverconfigurations.org.eclipse.che
|
|
specDescriptors:
|
|
- description: Amazon S3 or compatible alternatives.
|
|
displayName: AwsS3 server
|
|
path: awss3
|
|
- description: Rest backup server configuration.
|
|
displayName: Rest server
|
|
path: rest
|
|
- description: Sftp backup server configuration.
|
|
displayName: Sftp server
|
|
path: sftp
|
|
version: v1
|
|
- description: The `CheClusterBackup` custom resource allows defining and managing
|
|
Eclipse Che backup
|
|
displayName: Eclipse Che instance Backup Specification
|
|
kind: CheClusterBackup
|
|
name: checlusterbackups.org.eclipse.che
|
|
resources:
|
|
- kind: Deployment
|
|
name: backup-rest-server-deployment
|
|
version: apps/v1
|
|
- kind: Service
|
|
name: backup-rest-server-service
|
|
version: v1
|
|
specDescriptors:
|
|
- description: Name of custom resource with a backup server configuration
|
|
to use for this backup. Note, UseInternalBackupServer field can configure
|
|
internal backup server automatically.
|
|
displayName: Backup server configuration
|
|
path: backupServerConfigRef
|
|
x-descriptors:
|
|
- urn:alm:descriptor:com.tectonic.ui:text
|
|
- description: Automatically setup pod with REST backup server and use the
|
|
server in this configuration. Note, this flag takes precedence and will
|
|
overwrite existing backup server configuration.
|
|
displayName: Use internal backup server
|
|
path: useInternalBackupServer
|
|
x-descriptors:
|
|
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
|
|
statusDescriptors:
|
|
- description: Message explaining the state of the backup or an error message
|
|
displayName: Message
|
|
path: message
|
|
- description: Last backup snapshot ID
|
|
displayName: Snapshot Id
|
|
path: snapshotId
|
|
- description: Describes backup progress
|
|
displayName: Phase
|
|
path: stage
|
|
- description: 'Backup progress state: InProgress, Failed, Succeeded'
|
|
displayName: State
|
|
path: state
|
|
version: v1
|
|
- description: The `CheClusterRestore` custom resource allows defining and managing
|
|
Eclipse Che restore
|
|
displayName: Eclipse Che instance Restore Specification
|
|
kind: CheClusterRestore
|
|
name: checlusterrestores.org.eclipse.che
|
|
specDescriptors:
|
|
- description: Name of custom resource with a backup server configuration
|
|
to use for this restore. Can be omitted if only one server configuration
|
|
object exists within the namespace.
|
|
displayName: Backup Server Config Ref
|
|
path: backupServerConfigRef
|
|
- description: If omitted, latest snapshot will be used.
|
|
displayName: Snapshot Id
|
|
path: snapshotId
|
|
statusDescriptors:
|
|
- description: Restore result or error message
|
|
displayName: Message
|
|
path: message
|
|
- description: Describes phase of restore progress
|
|
displayName: Phase
|
|
path: stage
|
|
- description: 'Restore progress state: InProgress, Failed, Succeeded'
|
|
displayName: State
|
|
path: state
|
|
version: v1
|
|
description: |
|
|
A collaborative Kubernetes-native development solution that delivers Kubernetes workspaces and in-browser IDE for rapid cloud application development.
|
|
This operator installs PostgreSQL, Keycloak, Plugin registry, Devfile registry and the Eclipse Che server, as well as configures all these services.
|
|
|
|
## Prerequisites
|
|
- Operator Lifecycle Manager (OLM) greater than or equal to v0.17.0 needs to be installed.
|
|
|
|
## How to Install
|
|
Install `Eclipse Che Operator` by following instructions in top right button `Install`.
|
|
|
|
A new pod che-operator is created in `my-eclipse-che` namespace
|
|
|
|
```
|
|
$ kubectl get pods --all-namespaces | grep my-eclipse-che
|
|
my-eclipse-che che-operator-554c564476-fl98z 1/1 Running 0 13s
|
|
```
|
|
|
|
The operator is now providing new Custom Resources Definitions: `checluster.org.eclipse.che`
|
|
|
|
Create a new Eclipse Che instance by creating a new CheCluster resource:
|
|
|
|
On the bottom of this page, there is a section `Custom Resource Definitions` with `Eclipse Che Cluster` name.
|
|
|
|
Click on `View YAML Example` *Link* and copy the content to a new file named `my-eclipse-che.yaml`
|
|
**Important!** Make sure you provide **K8s.ingressDomain** which is a global ingress domain of your k8s cluster, for example, `gcp.my-ide.cloud`
|
|
Create the new CheCluster by creating the resource in the `my-eclipse-che` namespace :
|
|
```
|
|
$ kubectl create -f my-eclipse-che.yaml -n my-eclipse-che
|
|
```
|
|
***important:*** The operator is only tracking resources in its own namespace. If CheCluster is not created in this namespace it's ignored.
|
|
The operator will now create pods for Eclipse Che. The deployment status can be tracked by looking at the Operator logs by using the command:
|
|
```
|
|
$ kubectl logs -n my-eclipse-che che-operator-554c564476-fl98z
|
|
```
|
|
***important:*** pod name is different on each installation
|
|
|
|
When all Eclipse Che containers are running, the Eclipse Che URL is printed in the logs.
|
|
|
|
Eclipse Che URL can be tracked by searching for available trace:
|
|
```
|
|
$ kubectl logs -f -n my-eclipse-che che-operator-7b6b4bcb9c-m4m2m | grep "Eclipse Che is now available"
|
|
time="2019-08-01T13:31:05Z" level=info msg="Eclipse Che is now available at: http://che-my-eclipse-che.gcp.my-ide.cloud"
|
|
```
|
|
When Eclipse Che is ready, the Eclipse Che URL is displayed in CheCluster resource in `status` section
|
|
```
|
|
$ kubectl describe checluster/eclipse-che -n my-eclipse-che
|
|
```
|
|
|
|
```
|
|
Status:
|
|
Che Cluster Running: Available
|
|
Che URL: http://che-my-eclipse-che.gcp.my-ide.cloud
|
|
Che Version: 7.26.0
|
|
...
|
|
```
|
|
|
|
By opening this URL in a web browser, Eclipse Che is ready to use.
|
|
|
|
## Defaults
|
|
By default, the operator deploys Eclipse Che with:
|
|
* Bundled PostgreSQL and Keycloak
|
|
* Common PVC strategy
|
|
* Auto-generated passwords
|
|
* TLS mode (secure ingresses)
|
|
* Communicate between components using internal cluster SVC names
|
|
|
|
## Installation Options
|
|
Eclipse Che operator installation options include:
|
|
* Connection to external database and Keycloak
|
|
* Configuration of default passwords and object names
|
|
* PVC strategy (once shared PVC for all workspaces, PVC per workspace, or PVC per volume)
|
|
* Authentication options
|
|
|
|
Use `kubectl edit checluster/eclipse-che -n my-eclipse-che` to update Eclipse Che configuration.
|
|
See more configuration options in the [Installation guide](https://www.eclipse.org/che/docs/che-7/installation-guide/configuring-the-che-installation/).
|
|
|
|
### External Database and Keycloak
|
|
Follow the guides to configure external [Keycloak](https://www.eclipse.org/che/docs/che-7/administration-guide/configuring-authorization/#configuring-che-to-use-external-keycloak_che)
|
|
and [Database](https://www.eclipse.org/che/docs/che-7/administration-guide/external-database-setup/) setup.
|
|
|
|
### Certificates and TLS Secrets
|
|
Eclipse Che uses auto-generated self-signed certificates by default and TLS mode is on.
|
|
To use a default certificate of a Kubernetes cluster set empty value in `spec.k8s.tlsSecretName` field:
|
|
```
|
|
kubectl patch checluster/eclipse-che --type=json -p '[{"op": "replace", "path": "/spec/k8s/tlsSecretName", "value": ""}]' -n my-eclipse-che
|
|
```
|
|
displayName: Eclipse Che
|
|
icon:
|
|
- base64data: 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
|
|
mediatype: image/png
|
|
install:
|
|
spec:
|
|
clusterPermissions:
|
|
- rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- nodes
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- oauth.openshift.io
|
|
resources:
|
|
- oauthclients
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- deletecollection
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- rbac.authorization.k8s.io
|
|
resources:
|
|
- clusterrolebindings
|
|
- clusterroles
|
|
verbs:
|
|
- list
|
|
- create
|
|
- watch
|
|
- update
|
|
- get
|
|
- delete
|
|
- apiGroups:
|
|
- rbac.authorization.k8s.io
|
|
resources:
|
|
- roles
|
|
- rolebindings
|
|
verbs:
|
|
- get
|
|
- create
|
|
- update
|
|
- delete
|
|
- apiGroups:
|
|
- org.eclipse.che
|
|
resources:
|
|
- checlusters
|
|
- checlusters/status
|
|
- checlusters/finalizers
|
|
- checlusters/status
|
|
- checlusterbackups
|
|
- checlusterbackups/status
|
|
- checlusterbackups/finalizers
|
|
- checlusterrestores
|
|
- checlusterrestores/status
|
|
- backupserverconfigurations
|
|
- backupserverconfigurations/status
|
|
- chebackupserverconfigurations
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- namespaces
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods/exec
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- list
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- list
|
|
- get
|
|
- create
|
|
- update
|
|
- patch
|
|
- delete
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- persistentvolumeclaims
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- watch
|
|
- delete
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- watch
|
|
- delete
|
|
- apiGroups:
|
|
- apps
|
|
- extensions
|
|
resources:
|
|
- deployments
|
|
- replicasets
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- route.openshift.io
|
|
resources:
|
|
- routes
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- route.openshift.io
|
|
resources:
|
|
- routes/custom-host
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- replicasets
|
|
verbs:
|
|
- list
|
|
- get
|
|
- patch
|
|
- delete
|
|
- apiGroups:
|
|
- extensions
|
|
resources:
|
|
- ingresses
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- networking.k8s.io
|
|
resources:
|
|
- ingresses
|
|
verbs:
|
|
- list
|
|
- create
|
|
- watch
|
|
- get
|
|
- delete
|
|
- apiGroups:
|
|
- apiextensions.k8s.io
|
|
resources:
|
|
- customresourcedefinitions
|
|
verbs:
|
|
- get
|
|
- create
|
|
- update
|
|
- apiGroups:
|
|
- operators.coreos.com
|
|
resources:
|
|
- subscriptions
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- operators.coreos.com
|
|
resources:
|
|
- clusterserviceversions
|
|
verbs:
|
|
- list
|
|
- get
|
|
- watch
|
|
- apiGroups:
|
|
- metrics.k8s.io
|
|
resources:
|
|
- pods
|
|
- nodes
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- cert-manager.io
|
|
resources:
|
|
- issuers
|
|
- certificates
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
- persistentvolumeclaims
|
|
- pods
|
|
- secrets
|
|
- serviceaccounts
|
|
- services
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- apps
|
|
resourceNames:
|
|
- che-operator
|
|
resources:
|
|
- deployments/finalizers
|
|
verbs:
|
|
- update
|
|
- apiGroups:
|
|
- batch
|
|
resources:
|
|
- jobs
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings/finalizers
|
|
verbs:
|
|
- update
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- monitoring.coreos.com
|
|
resources:
|
|
- servicemonitors
|
|
verbs:
|
|
- create
|
|
- get
|
|
- nonResourceURLs:
|
|
- /metrics
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- che.eclipse.org
|
|
resources:
|
|
- kubernetesimagepullers
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- workspace.devfile.io
|
|
resources:
|
|
- devworkspaces
|
|
- devworkspacetemplates
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings
|
|
- components
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- workspace.devfile.io
|
|
resources:
|
|
- devworkspaces
|
|
- devworkspacetemplates
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- deletecollection
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings
|
|
- components
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- deletecollection
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- create
|
|
- update
|
|
- patch
|
|
- delete
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps/status
|
|
verbs:
|
|
- get
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- create
|
|
- patch
|
|
- apiGroups:
|
|
- authentication.k8s.io
|
|
resources:
|
|
- tokenreviews
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- authorization.k8s.io
|
|
resources:
|
|
- subjectaccessreviews
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- workspace-preferences-configmap
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- patch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
- persistentvolumeclaims
|
|
- pods
|
|
- secrets
|
|
- serviceaccounts
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
- namespaces
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods/exec
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- workspace-credentials-secret
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- patch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- services
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- admissionregistration.k8s.io
|
|
resources:
|
|
- mutatingwebhookconfigurations
|
|
- validatingwebhookconfigurations
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
resourceNames:
|
|
- devworkspace-controller
|
|
resources:
|
|
- deployments/finalizers
|
|
verbs:
|
|
- update
|
|
- apiGroups:
|
|
- apps
|
|
- extensions
|
|
resources:
|
|
- deployments
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- apps
|
|
- extensions
|
|
resources:
|
|
- deployments
|
|
- replicasets
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- apps
|
|
- extensions
|
|
resources:
|
|
- replicasets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- batch
|
|
resources:
|
|
- jobs
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- '*'
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
verbs:
|
|
- create
|
|
- get
|
|
- update
|
|
- apiGroups:
|
|
- monitoring.coreos.com
|
|
resources:
|
|
- servicemonitors
|
|
verbs:
|
|
- create
|
|
- get
|
|
- apiGroups:
|
|
- networking.k8s.io
|
|
resources:
|
|
- ingresses
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- oauth.openshift.io
|
|
resources:
|
|
- oauthclients
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- deletecollection
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- rbac.authorization.k8s.io
|
|
resources:
|
|
- clusterrolebindings
|
|
- clusterroles
|
|
- rolebindings
|
|
- roles
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- route.openshift.io
|
|
resources:
|
|
- routes
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- route.openshift.io
|
|
resources:
|
|
- routes/custom-host
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- workspace.devfile.io
|
|
resources:
|
|
- '*'
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- workspace.devfile.io
|
|
resources:
|
|
- devworkspaces
|
|
- devworkspacetemplates
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings
|
|
- components
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
serviceAccountName: che-operator
|
|
deployments:
|
|
- name: che-operator
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: che-operator
|
|
strategy:
|
|
type: RollingUpdate
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: che-operator
|
|
app.kubernetes.io/component: che-operator
|
|
app.kubernetes.io/instance: che
|
|
app.kubernetes.io/managed-by: olm
|
|
app.kubernetes.io/name: che
|
|
app.kubernetes.io/part-of: che.eclipse.org
|
|
spec:
|
|
containers:
|
|
- args:
|
|
- --leader-elect
|
|
command:
|
|
- /manager
|
|
env:
|
|
- name: WATCH_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.annotations['olm.targetNamespaces']
|
|
- name: POD_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.name
|
|
- name: OPERATOR_NAME
|
|
value: che-operator
|
|
- name: CHE_VERSION
|
|
value: next
|
|
- name: RELATED_IMAGE_che_server
|
|
value: quay.io/eclipse/che-server:next
|
|
- name: RELATED_IMAGE_dashboard
|
|
value: quay.io/eclipse/che-dashboard:next
|
|
- name: RELATED_IMAGE_plugin_registry
|
|
value: quay.io/eclipse/che-plugin-registry:next
|
|
- name: RELATED_IMAGE_devfile_registry
|
|
value: quay.io/eclipse/che-devfile-registry:next
|
|
- name: RELATED_IMAGE_che_tls_secrets_creation_job
|
|
value: quay.io/eclipse/che-tls-secret-creator:alpine-01a4c34
|
|
- name: RELATED_IMAGE_pvc_jobs
|
|
value: registry.access.redhat.com/ubi8-minimal:8.5-204
|
|
- name: RELATED_IMAGE_postgres
|
|
value: quay.io/eclipse/che--centos--postgresql-96-centos7:9.6-b681d78125361519180a6ac05242c296f8906c11eab7e207b5ca9a89b6344392
|
|
- name: RELATED_IMAGE_postgres_13_3
|
|
value: quay.io/eclipse/che--centos--postgresql-13-centos7:1-71b24684d64da46f960682cc4216222a7e4ed8b1a31dd5a865b3e71afdea20d2
|
|
- name: RELATED_IMAGE_keycloak
|
|
value: quay.io/eclipse/che-keycloak:next
|
|
- name: RELATED_IMAGE_che_workspace_plugin_broker_metadata
|
|
value: quay.io/eclipse/che-plugin-metadata-broker:v3.4.0
|
|
- name: RELATED_IMAGE_che_workspace_plugin_broker_artifacts
|
|
value: quay.io/eclipse/che-plugin-artifacts-broker:v3.4.0
|
|
- name: RELATED_IMAGE_che_server_secure_exposer_jwt_proxy_image
|
|
value: quay.io/eclipse/che-jwtproxy:0.10.0
|
|
- name: RELATED_IMAGE_single_host_gateway
|
|
value: quay.io/eclipse/che--traefik:v2.5.0-eb30f9f09a65cee1fab5ef9c64cb4ec91b800dc3fdd738d62a9d4334f0114683
|
|
- name: RELATED_IMAGE_single_host_gateway_config_sidecar
|
|
value: quay.io/che-incubator/configbump:0.1.4
|
|
- name: RELATED_IMAGE_devworkspace_controller
|
|
value: quay.io/devfile/devworkspace-controller:v0.9.0
|
|
- name: RELATED_IMAGE_internal_rest_backup_server
|
|
value: quay.io/eclipse/che-backup-server-rest:b6cc165
|
|
- name: RELATED_IMAGE_gateway_authentication_sidecar
|
|
value: quay.io/openshift/origin-oauth-proxy:4.7
|
|
- name: RELATED_IMAGE_gateway_authorization_sidecar
|
|
value: quay.io/openshift/origin-kube-rbac-proxy:4.7
|
|
- name: RELATED_IMAGE_gateway_authentication_sidecar_k8s
|
|
value: quay.io/oauth2-proxy/oauth2-proxy:v7.2.0
|
|
- name: RELATED_IMAGE_gateway_authorization_sidecar_k8s
|
|
value: quay.io/brancz/kube-rbac-proxy:v0.11.0
|
|
- name: RELATED_IMAGE_gateway_header_sidecar
|
|
value: quay.io/che-incubator/header-rewrite-proxy:latest
|
|
- name: CHE_FLAVOR
|
|
value: che
|
|
- name: CONSOLE_LINK_NAME
|
|
value: che
|
|
- name: CONSOLE_LINK_DISPLAY_NAME
|
|
value: Eclipse Che
|
|
- name: CONSOLE_LINK_SECTION
|
|
value: Red Hat Applications
|
|
- name: CONSOLE_LINK_IMAGE
|
|
value: /dashboard/assets/branding/loader.svg
|
|
- name: CHE_IDENTITY_SECRET
|
|
value: che-identity-secret
|
|
- name: CHE_IDENTITY_POSTGRES_SECRET
|
|
value: che-identity-postgres-secret
|
|
- name: CHE_POSTGRES_SECRET
|
|
value: che-postgres-secret
|
|
- name: CHE_SERVER_TRUST_STORE_CONFIGMAP_NAME
|
|
value: ca-certs
|
|
- name: MAX_CONCURRENT_RECONCILES
|
|
value: "1"
|
|
- name: ALLOW_DEVWORKSPACE_ENGINE
|
|
value: "true"
|
|
- name: ADD_COMPONENT_READINESS_INIT_CONTAINERS
|
|
value: "false"
|
|
image: quay.io/eclipse/che-operator:next
|
|
imagePullPolicy: Always
|
|
livenessProbe:
|
|
failureThreshold: 10
|
|
httpGet:
|
|
path: /healthz
|
|
port: 6789
|
|
initialDelaySeconds: 15
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 5
|
|
name: che-operator
|
|
ports:
|
|
- containerPort: 60000
|
|
name: metrics
|
|
readinessProbe:
|
|
failureThreshold: 10
|
|
httpGet:
|
|
path: /readyz
|
|
port: 6789
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 5
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 5Gi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 64Mi
|
|
securityContext:
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
privileged: false
|
|
readOnlyRootFilesystem: false
|
|
hostIPC: false
|
|
hostNetwork: false
|
|
hostPID: false
|
|
restartPolicy: Always
|
|
serviceAccountName: che-operator
|
|
terminationGracePeriodSeconds: 20
|
|
permissions:
|
|
- rules:
|
|
- apiGroups:
|
|
- extensions
|
|
resources:
|
|
- ingresses
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- networking.k8s.io
|
|
resources:
|
|
- ingresses
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- batch
|
|
resources:
|
|
- jobs
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- rbac.authorization.k8s.io
|
|
resources:
|
|
- roles
|
|
- rolebindings
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- rbac.authorization.k8s.io
|
|
resources:
|
|
- clusterroles
|
|
- clusterrolebindings
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
- services
|
|
- serviceaccounts
|
|
- endpoints
|
|
- persistentvolumeclaims
|
|
- events
|
|
- configmaps
|
|
- secrets
|
|
- pods/exec
|
|
- pods/log
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- namespaces
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- apps
|
|
- extensions
|
|
resources:
|
|
- deployments
|
|
- replicasets
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- monitoring.coreos.com
|
|
resources:
|
|
- servicemonitors
|
|
verbs:
|
|
- get
|
|
- create
|
|
- apiGroups:
|
|
- org.eclipse.che
|
|
resources:
|
|
- checlusters
|
|
- checlusters/status
|
|
- checlusters/finalizers
|
|
- checlusterbackups
|
|
- checlusterbackups/status
|
|
- checlusterbackups/finalizers
|
|
- checlusterrestores
|
|
- checlusterrestores/status
|
|
- backupserverconfigurations
|
|
- backupserverconfigurations/status
|
|
- chebackupserverconfigurations
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- metrics.k8s.io
|
|
resources:
|
|
- pods
|
|
- nodes
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- operators.coreos.com
|
|
resources:
|
|
- subscriptions
|
|
- clusterserviceversions
|
|
- operatorgroups
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- packages.operators.coreos.com
|
|
resources:
|
|
- packagemanifests
|
|
verbs:
|
|
- get
|
|
- list
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps/status
|
|
verbs:
|
|
- get
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- create
|
|
- apiGroups:
|
|
- apps
|
|
resourceNames:
|
|
- che-operator
|
|
resources:
|
|
- deployments/finalizers
|
|
verbs:
|
|
- update
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings/finalizers
|
|
verbs:
|
|
- update
|
|
- apiGroups:
|
|
- controller.devfile.io
|
|
resources:
|
|
- devworkspaceroutings/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- create
|
|
- update
|
|
- patch
|
|
- delete
|
|
- apiGroups:
|
|
- coordination.k8s.io
|
|
resources:
|
|
- leases
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- create
|
|
- update
|
|
- patch
|
|
- delete
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- events
|
|
verbs:
|
|
- create
|
|
- patch
|
|
serviceAccountName: che-operator
|
|
strategy: deployment
|
|
installModes:
|
|
- supported: true
|
|
type: OwnNamespace
|
|
- supported: true
|
|
type: SingleNamespace
|
|
- supported: true
|
|
type: MultiNamespace
|
|
- supported: false
|
|
type: AllNamespaces
|
|
keywords:
|
|
- eclipse che
|
|
- workspaces
|
|
- devtools
|
|
- developer
|
|
- ide
|
|
- java
|
|
links:
|
|
- name: Product Page
|
|
url: http://www.eclipse.org/che
|
|
- name: Documentation
|
|
url: https://www.eclipse.org/che/docs
|
|
- name: Operator GitHub Repo
|
|
url: https://github.com/eclipse-che/che-operator
|
|
maintainers:
|
|
- email: dfestal@redhat.com
|
|
name: David Festal
|
|
maturity: stable
|
|
provider:
|
|
name: Eclipse Foundation
|
|
version: 7.40.0-381.next
|