Add leader election role binding to the helm chart.

Author: HoustonPutman

hack/release/artifacts/create_artifacts.sh

@@ -91,7 +91,7 @@ echo "Setting up Solr Operator ${VERSION} release artifacts at '${ARTIFACTS_DIR}
       for artifact in $(find * -type f -maxdepth 0 ! \( -name '*.asc' -o -name '*.sha512' -o -name '*.prov' \) ); do
         echo "Signing ${artifact_directory}/${artifact}"
         if [ ! -f "${artifact}.asc" ]; then
-          gpg "${GPG_USER[@]}" --pinentry-mode loopback -ab "${artifact}"
+          gpg "${GPG_USER[@]}" -ab "${artifact}"
         fi
         if [ ! -f "${artifact}.sha512" ]; then
           sha512sum -b "${artifact}" > "${artifact}.sha512"
@@ -103,7 +103,7 @@ echo "Setting up Solr Operator ${VERSION} release artifacts at '${ARTIFACTS_DIR}
   for artifact in $(find * -type f -maxdepth 0 ! \( -name '*.asc' -o -name '*.sha512' -o -name '*.prov' \) ); do
     echo "Signing ${artifact}"
     if [ ! -f "${artifact}.asc" ]; then
-      gpg "${GPG_USER[@]}" --pinentry-mode loopback -ab "${artifact}"
+      gpg "${GPG_USER[@]}" -ab "${artifact}"
     fi
     if [ ! -f "${artifact}.sha512" ]; then
       sha512sum -b "${artifact}" > "${artifact}.sha512"

helm/solr-operator/templates/deployment.yaml

@@ -71,7 +71,9 @@ spec:
         {{- if .Values.metrics.enable }}
         - "--metrics-bind-address=:8080"
         {{- end }}
-        {{- if not .Values.leaderElection.enable }}
+        {{- if .Values.leaderElection.enable }}
+        - "--leader-elect=true"
+        {{- else }}
         - "--leader-elect=false"
         {{- end }}
 

helm/solr-operator/templates/leader_election_role.yaml

@@ -0,0 +1,59 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+{{- if .Values.leaderElection.enable }}
+{{- range $namespace := (split "," (include "solr-operator.watchNamespaces" $)) }}
+---
+# permissions to do leader election.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ include "solr-operator.fullname" $ }}-leader-election-role
+  namespace: {{ $namespace }}
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+
+{{- end }}
+{{- end }}

helm/solr-operator/templates/leader_election_role_binding.yaml

@@ -0,0 +1,33 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+{{- if .Values.leaderElection.enable }}
+{{- range $namespace := (split "," (include "solr-operator.watchNamespaces" $)) }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ include "solr-operator.fullname" $ }}-leader-election-rolebinding
+  namespace: {{ $namespace }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ include "solr-operator.fullname" $ }}-leader-election-role
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "solr-operator.serviceAccountName" $ }}
+    namespace: {{ $.Release.Namespace }}
+
+{{- end }}
+{{- end }}