Skip to content

Commit 610af23

Browse files
kabicinkabicin
committed
Add bundle manifests
1 parent 9f34f6a commit 610af23

14 files changed

Lines changed: 334 additions & 24 deletions

‎api/v1/zz_generated.deepcopy.go‎

Lines changed: 48 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎bundle/manifests/ibm-websphere-liberty.clusterserviceversion.yaml‎

Lines changed: 55 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -552,31 +552,68 @@ spec:
552552
path: semeruCloudCompiler.enable
553553
x-descriptors:
554554
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
555-
- description: Specify the labels of namespaces that incoming traffic is allowed
556-
from.
557-
displayName: Namespace Labels
558-
path: networkPolicy.namespaceLabels
555+
- description: Disable the creation of the network policy ingress. Defaults
556+
to false.
557+
displayName: Disable Ingress
558+
path: networkPolicy.disableIngress
559559
x-descriptors:
560-
- urn:alm:descriptor:com.tectonic.ui:text
560+
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
561561
- description: Number of desired pods for the Semeru Cloud Compiler. Defaults
562562
to 1.
563563
displayName: Replicas
564564
path: semeruCloudCompiler.replicas
565565
x-descriptors:
566566
- urn:alm:descriptor:com.tectonic.ui:podCount
567-
- description: Specify the labels of pod(s) that incoming traffic is allowed
568-
from.
569-
displayName: From Labels
570-
path: networkPolicy.fromLabels
567+
- description: Disable the creation of the network policy egress. Defaults to
568+
false.
569+
displayName: Disable Egress
570+
path: networkPolicy.disableEgress
571571
x-descriptors:
572-
- urn:alm:descriptor:com.tectonic.ui:text
572+
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
573573
- description: Resource requests and limits for the Semeru Cloud Compiler. The
574574
CPU defaults to 100m with a limit of 2000m. The memory defaults to 800Mi,
575575
with a limit of 1200Mi.
576576
displayName: Resource Requirements
577577
path: semeruCloudCompiler.resources
578578
x-descriptors:
579579
- urn:alm:descriptor:com.tectonic.ui:resourceRequirements
580+
- description: Bypasses deny all egress rules to allow API server and DNS access.
581+
Defaults to false.
582+
displayName: Bypass Deny All Egress
583+
path: networkPolicy.bypassDenyAllEgress
584+
x-descriptors:
585+
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
586+
- description: Deprecated. .spec.networkPolicy.fromNamespaceLabels should be
587+
used instead. If both are specified, .spec.networkPolicy.fromNamespaceLabels
588+
will override this.
589+
displayName: Namespace Labels
590+
path: networkPolicy.namespaceLabels
591+
x-descriptors:
592+
- urn:alm:descriptor:com.tectonic.ui:text
593+
- description: Specify the labels of namespaces that incoming traffic is allowed
594+
from.
595+
displayName: From Namespace Labels
596+
path: networkPolicy.fromNamespaceLabels
597+
x-descriptors:
598+
- urn:alm:descriptor:com.tectonic.ui:text
599+
- description: Specify the labels of pod(s) that incoming traffic is allowed
600+
from.
601+
displayName: From Labels
602+
path: networkPolicy.fromLabels
603+
x-descriptors:
604+
- urn:alm:descriptor:com.tectonic.ui:text
605+
- description: Specify the labels of namespaces that outgoing traffic is allowed
606+
to.
607+
displayName: To Namespace Labels
608+
path: networkPolicy.toNamespaceLabels
609+
x-descriptors:
610+
- urn:alm:descriptor:com.tectonic.ui:text
611+
- description: Specify the labels of pod(s) that outgoing traffic is allowed
612+
to.
613+
displayName: To Labels
614+
path: networkPolicy.toLabels
615+
x-descriptors:
616+
- urn:alm:descriptor:com.tectonic.ui:text
580617
- description: 'Product edition. Defaults to IBM WebSphere Application Server.
581618
Other options: IBM WebSphere Application Server Liberty Core, IBM WebSphere
582619
Application Server Network Deployment'
@@ -1073,6 +1110,14 @@ spec:
10731110
- list
10741111
- update
10751112
- watch
1113+
- apiGroups:
1114+
- ""
1115+
resources:
1116+
- endpoints
1117+
verbs:
1118+
- get
1119+
- list
1120+
- watch
10761121
- apiGroups:
10771122
- ""
10781123
resources:

‎bundle/manifests/liberty.websphere.ibm.com_webspherelibertyapplications.yaml‎

Lines changed: 32 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3901,22 +3901,53 @@ spec:
39013901
networkPolicy:
39023902
description: Defines the network policy
39033903
properties:
3904+
bypassDenyAllEgress:
3905+
description: Bypasses deny all egress rules to allow API server
3906+
and DNS access. Defaults to false.
3907+
type: boolean
39043908
disable:
39053909
description: Disable the creation of the network policy. Defaults
39063910
to false.
39073911
type: boolean
3912+
disableEgress:
3913+
description: Disable the creation of the network policy egress.
3914+
Defaults to false.
3915+
type: boolean
3916+
disableIngress:
3917+
description: Disable the creation of the network policy ingress.
3918+
Defaults to false.
3919+
type: boolean
39083920
fromLabels:
39093921
additionalProperties:
39103922
type: string
39113923
description: Specify the labels of pod(s) that incoming traffic
39123924
is allowed from.
39133925
type: object
3914-
namespaceLabels:
3926+
fromNamespaceLabels:
39153927
additionalProperties:
39163928
type: string
39173929
description: Specify the labels of namespaces that incoming traffic
39183930
is allowed from.
39193931
type: object
3932+
namespaceLabels:
3933+
additionalProperties:
3934+
type: string
3935+
description: Deprecated. .spec.networkPolicy.fromNamespaceLabels
3936+
should be used instead. If both are specified, .spec.networkPolicy.fromNamespaceLabels
3937+
will override this.
3938+
type: object
3939+
toLabels:
3940+
additionalProperties:
3941+
type: string
3942+
description: Specify the labels of pod(s) that outgoing traffic
3943+
is allowed to.
3944+
type: object
3945+
toNamespaceLabels:
3946+
additionalProperties:
3947+
type: string
3948+
description: Specify the labels of namespaces that outgoing traffic
3949+
is allowed to.
3950+
type: object
39203951
type: object
39213952
probes:
39223953
description: Define health checks on application container to determine

‎config/crd/bases/liberty.websphere.ibm.com_webspherelibertyapplications.yaml‎

Lines changed: 32 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3897,22 +3897,53 @@ spec:
38973897
networkPolicy:
38983898
description: Defines the network policy
38993899
properties:
3900+
bypassDenyAllEgress:
3901+
description: Bypasses deny all egress rules to allow API server
3902+
and DNS access. Defaults to false.
3903+
type: boolean
39003904
disable:
39013905
description: Disable the creation of the network policy. Defaults
39023906
to false.
39033907
type: boolean
3908+
disableEgress:
3909+
description: Disable the creation of the network policy egress.
3910+
Defaults to false.
3911+
type: boolean
3912+
disableIngress:
3913+
description: Disable the creation of the network policy ingress.
3914+
Defaults to false.
3915+
type: boolean
39043916
fromLabels:
39053917
additionalProperties:
39063918
type: string
39073919
description: Specify the labels of pod(s) that incoming traffic
39083920
is allowed from.
39093921
type: object
3910-
namespaceLabels:
3922+
fromNamespaceLabels:
39113923
additionalProperties:
39123924
type: string
39133925
description: Specify the labels of namespaces that incoming traffic
39143926
is allowed from.
39153927
type: object
3928+
namespaceLabels:
3929+
additionalProperties:
3930+
type: string
3931+
description: Deprecated. .spec.networkPolicy.fromNamespaceLabels
3932+
should be used instead. If both are specified, .spec.networkPolicy.fromNamespaceLabels
3933+
will override this.
3934+
type: object
3935+
toLabels:
3936+
additionalProperties:
3937+
type: string
3938+
description: Specify the labels of pod(s) that outgoing traffic
3939+
is allowed to.
3940+
type: object
3941+
toNamespaceLabels:
3942+
additionalProperties:
3943+
type: string
3944+
description: Specify the labels of namespaces that outgoing traffic
3945+
is allowed to.
3946+
type: object
39163947
type: object
39173948
probes:
39183949
description: Define health checks on application container to determine

‎config/manifests/bases/ibm-websphere-liberty.clusterserviceversion.yaml‎

Lines changed: 47 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -494,31 +494,68 @@ spec:
494494
path: semeruCloudCompiler.enable
495495
x-descriptors:
496496
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
497-
- description: Specify the labels of namespaces that incoming traffic is allowed
498-
from.
499-
displayName: Namespace Labels
500-
path: networkPolicy.namespaceLabels
497+
- description: Disable the creation of the network policy ingress. Defaults
498+
to false.
499+
displayName: Disable Ingress
500+
path: networkPolicy.disableIngress
501501
x-descriptors:
502-
- urn:alm:descriptor:com.tectonic.ui:text
502+
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
503503
- description: Number of desired pods for the Semeru Cloud Compiler. Defaults
504504
to 1.
505505
displayName: Replicas
506506
path: semeruCloudCompiler.replicas
507507
x-descriptors:
508508
- urn:alm:descriptor:com.tectonic.ui:podCount
509-
- description: Specify the labels of pod(s) that incoming traffic is allowed
510-
from.
511-
displayName: From Labels
512-
path: networkPolicy.fromLabels
509+
- description: Disable the creation of the network policy egress. Defaults to
510+
false.
511+
displayName: Disable Egress
512+
path: networkPolicy.disableEgress
513513
x-descriptors:
514-
- urn:alm:descriptor:com.tectonic.ui:text
514+
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
515515
- description: Resource requests and limits for the Semeru Cloud Compiler. The
516516
CPU defaults to 100m with a limit of 2000m. The memory defaults to 800Mi,
517517
with a limit of 1200Mi.
518518
displayName: Resource Requirements
519519
path: semeruCloudCompiler.resources
520520
x-descriptors:
521521
- urn:alm:descriptor:com.tectonic.ui:resourceRequirements
522+
- description: Bypasses deny all egress rules to allow API server and DNS access.
523+
Defaults to false.
524+
displayName: Bypass Deny All Egress
525+
path: networkPolicy.bypassDenyAllEgress
526+
x-descriptors:
527+
- urn:alm:descriptor:com.tectonic.ui:booleanSwitch
528+
- description: Deprecated. .spec.networkPolicy.fromNamespaceLabels should be
529+
used instead. If both are specified, .spec.networkPolicy.fromNamespaceLabels
530+
will override this.
531+
displayName: Namespace Labels
532+
path: networkPolicy.namespaceLabels
533+
x-descriptors:
534+
- urn:alm:descriptor:com.tectonic.ui:text
535+
- description: Specify the labels of namespaces that incoming traffic is allowed
536+
from.
537+
displayName: From Namespace Labels
538+
path: networkPolicy.fromNamespaceLabels
539+
x-descriptors:
540+
- urn:alm:descriptor:com.tectonic.ui:text
541+
- description: Specify the labels of pod(s) that incoming traffic is allowed
542+
from.
543+
displayName: From Labels
544+
path: networkPolicy.fromLabels
545+
x-descriptors:
546+
- urn:alm:descriptor:com.tectonic.ui:text
547+
- description: Specify the labels of namespaces that outgoing traffic is allowed
548+
to.
549+
displayName: To Namespace Labels
550+
path: networkPolicy.toNamespaceLabels
551+
x-descriptors:
552+
- urn:alm:descriptor:com.tectonic.ui:text
553+
- description: Specify the labels of pod(s) that outgoing traffic is allowed
554+
to.
555+
displayName: To Labels
556+
path: networkPolicy.toLabels
557+
x-descriptors:
558+
- urn:alm:descriptor:com.tectonic.ui:text
522559
- description: 'Product edition. Defaults to IBM WebSphere Application Server.
523560
Other options: IBM WebSphere Application Server Liberty Core, IBM WebSphere
524561
Application Server Network Deployment'

‎config/rbac/role.yaml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,14 @@ rules:
7373
- list
7474
- update
7575
- watch
76+
- apiGroups:
77+
- ""
78+
resources:
79+
- endpoints
80+
verbs:
81+
- get
82+
- list
83+
- watch
7684
- apiGroups:
7785
- ""
7886
resources:

0 commit comments

Comments
 (0)