Remove route creation from the watcher-operator

This is part of the integration in the OpenStack Operator.

Once integrated on it, the route will be managed by it so we need to get
rid of all the logic existing in the operator for it and the apiOverride
parameter which was intended to pass all the parameters required for the
Watcher controller to manage it.

This patch is also adjusting functional and kuttl tests and ci
deployment files for it.

Jira: OSPRH-16238

Author: amoralej

api/bases/watcher.openstack.org_watchers.yaml

@@ -35,7 +35,6 @@ require (
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
-	github.com/openshift/api v3.9.0+incompatible // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/client_golang v1.19.0 // indirect

api/go.mod

@@ -73,8 +73,6 @@ github.com/onsi/ginkgo/v2 v2.20.1 h1:YlVIbqct+ZmnEph770q9Q7NVAz4wwIiVNahee6JyUzo
 github.com/onsi/ginkgo/v2 v2.20.1/go.mod h1:lG9ey2Z29hR41WMVthyJBGUBcBhGOtoPF2VFMvBXFCI=
 github.com/onsi/gomega v1.34.1 h1:EUMJIKUjM8sKjYbtxQI9A4z2o+rruxnzNvpknOXie6k=
 github.com/onsi/gomega v1.34.1/go.mod h1:kU1QgUvBDLXBJq618Xvm2LUX6rSAfRaFRTcdOeDLwwY=
-github.com/openshift/api v3.9.0+incompatible h1:fJ/KsefYuZAjmrr3+5U9yZIZbTOpVkDDLDLFresAeYs=
-github.com/openshift/api v3.9.0+incompatible/go.mod h1:dh9o4Fs58gpFXGSYfnVxGR9PnV53I8TW84pQaJDdGiY=
 github.com/openstack-k8s-operators/infra-operator/apis v0.6.1-0.20250630125044-4cb24968c1a6 h1:L5xl8ocn3DqAuRF26dbh+FWKAjWC+Oc1MqmERTFseLM=
 github.com/openstack-k8s-operators/infra-operator/apis v0.6.1-0.20250630125044-4cb24968c1a6/go.mod h1:HMeEFVPJOatbQQc4XcpVrF6BpCEOEq9EPG9jSxcyQXw=
 github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20250605082218-a58074898dd7 h1:bx5LfMQHLnYE3QvY8aRXHVfgTwDROnTqH96UL84a9Mw=

api/go.sum

@@ -17,7 +17,6 @@ limitations under the License.
 package v1beta1
 
 import (
-	"github.com/openstack-k8s-operators/lib-common/modules/common/route"
 	"github.com/openstack-k8s-operators/lib-common/modules/common/util"
 
 	topologyv1 "github.com/openstack-k8s-operators/infra-operator/apis/topology/v1beta1"
@@ -119,37 +118,11 @@ type WatcherSpecCore struct {
 	// DecisionEngineServiceTemplate - define the watcher-decision-engine service
 	DecisionEngineServiceTemplate WatcherDecisionEngineTemplate `json:"decisionengineServiceTemplate"`
 
-	// +kubebuilder:validation:Optional
-	// +operator-sdk:csv:customresourcedefinitions:type=spec
-	// APIOverride, provides the ability to override the generated
-	// manifest of several child resources.
-	APIOverride Override `json:"apiOverride,omitempty"`
-
 	// +kubebuilder:validation:Optional
 	// DBPurge defines the parameters for the Watcher DB purging cron job
 	DBPurge WatcherDBPurge `json:"dbPurge"`
 }
 
-type Override struct {
-	// +kubebuilder:validation:Optional
-	// Route overrides to use when creating the public service endpoint
-	Route *route.OverrideSpec `json:"route,omitempty"`
-
-	// +kubebuilder:validation:Optional
-	// +operator-sdk:csv:customresourcedefinitions:type=spec
-	// TLS - overrides tls parameters for public endpoint
-	TLS *TLSServiceOverride `json:"tls,omitempty"`
-}
-
-// TLSServiceOverride overrides tls parameters for public endpoint
-type TLSServiceOverride struct {
-	// +kubebuilder:validation:Optional
-	// Name of a Secret in the same Namespace as the service, containing the server's private key, public certificate
-	// and CA certificate for TLS.
-	// The Secret must store these as tls.key, tls.crt and ca.crt respectively.
-	SecretName string `json:"secretName,omitempty"`
-}
-
 // PasswordSelector to identify the DB and AdminUser password from the Secret
 type PasswordSelector struct {
 	// +kubebuilder:validation:Optional

api/v1beta1/common_types.go

@@ -20,23 +20,6 @@ spec:
 ---
 apiVersion: cert-manager.io/v1
 kind: Certificate
-metadata:
-  name: watcher-public-route
-spec:
-  dnsNames:
-  - watcher-public-openstack.apps-crc.testing
-  issuerRef:
-    group: cert-manager.io
-    kind: Issuer
-    name: rootca-public
-  secretName: cert-watcher-public-route
-  usages:
-  - key encipherment
-  - digital signature
-  - server auth
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
 metadata:
   name: watcher-public-svc
 spec:
@@ -60,14 +43,7 @@ metadata:
   name: watcher
 spec:
   databaseInstance: "openstack"
-  apiOverride:
-    tls:
-      secretName: cert-watcher-public-route
   apiServiceTemplate:
-    override:
-      service:
-        public:
-          endpointURL: https://watcher-public-openstack.apps-crc.testing
     tls:
       caBundleSecretName: "combined-ca-bundle"
       api: