ROX-32763: Delete fleetshard-operator (#2549)

Author: kovayur

.github/dependabot.yaml

@@ -21,10 +21,6 @@ updates:
     directory: "/probe"
     schedule:
       interval: "weekly"
-  - package-ecosystem: "docker"
-    directory: "/fleetshard-operator"
-    schedule:
-      interval: "weekly"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

.gitignore

@@ -40,7 +40,6 @@ fm-dataplane-config.yaml
 cmd/fleet-manager/fleet-manager
 /fleetshard-sync
 /acsfleetctl
-/fleetshard-operator/bin/fleetshard-operator
 # Ignore generated templates
 /templates/*-template.json
 

.openshift-ci/tests/e2e.sh

@@ -60,7 +60,6 @@ log
 log "Cluster type: ${CLUSTER_TYPE}"
 log "Cluster name: ${CLUSTER_NAME}"
 log "Fleet Manager Image: ${FLEET_MANAGER_IMAGE}"
-log "Fleetshard Operator Image: ${FLEETSHARD_OPERATOR_IMAGE:-latest}"
 log "Log directory: ${LOG_DIR:-(none)}"
 log "Executing Auth E2E tests: ${RUN_AUTH_E2E}"
 

.secrets.baseline

@@ -296,63 +296,63 @@
         "filename": "templates/service-template.yml",
         "hashed_secret": "13032f402fed753c2248419ea4f69f99931f6dbc",
         "is_verified": false,
-        "line_number": 460
+        "line_number": 450
       },
       {
         "type": "Base64 High Entropy String",
         "filename": "templates/service-template.yml",
         "hashed_secret": "30025f80f6e22cdafb85db387d50f90ea884576a",
         "is_verified": false,
-        "line_number": 460
+        "line_number": 450
       },
       {
         "type": "Base64 High Entropy String",
         "filename": "templates/service-template.yml",
         "hashed_secret": "355f24fd038bcaf85617abdcaa64af51ed19bbcf",
         "is_verified": false,
-        "line_number": 460
+        "line_number": 450
       },
       {
         "type": "Base64 High Entropy String",
         "filename": "templates/service-template.yml",
         "hashed_secret": "3d8a1dcd2c3c765ce35c9a9552d23273cc4ddace",
         "is_verified": false,
-        "line_number": 460
+        "line_number": 450
       },
       {
         "type": "Base64 High Entropy String",
         "filename": "templates/service-template.yml",
         "hashed_secret": "4ac7b0522761eba972467942cd5cd7499dd2c361",
         "is_verified": false,
-        "line_number": 460
+        "line_number": 450
       },
       {
         "type": "Base64 High Entropy String",
         "filename": "templates/service-template.yml",
         "hashed_secret": "7639ab2a6bcf2ea30a055a99468c9cd844d4c22a",
         "is_verified": false,
-        "line_number": 460
+        "line_number": 450
       },
       {
         "type": "Base64 High Entropy String",
         "filename": "templates/service-template.yml",
         "hashed_secret": "b56360daf4793d2a74991a972b34d95bc00fb2da",
         "is_verified": false,
-        "line_number": 460
+        "line_number": 450
       },
       {
         "type": "Base64 High Entropy String",
         "filename": "templates/service-template.yml",
         "hashed_secret": "c9a73ef9ee8ce9f38437227801c70bcc6740d1a1",
         "is_verified": false,
-        "line_number": 460
+        "line_number": 450
       },
       {
         "type": "Secret Keyword",
         "filename": "templates/service-template.yml",
         "hashed_secret": "4e199b4a1c40b497a95fcd1cd896351733849949",
         "is_verified": false,
-        "line_number": 643,
+        "line_number": 633,
         "is_secret": false
       }
     ],
@@ -382,5 +382,5 @@
       }
     ]
   },
-  "generated_at": "2025-10-22T10:56:01Z"
+  "generated_at": "2026-01-23T11:01:34Z"
 }

.tekton/acs-fleetshard-operator-push.yaml

@@ -113,7 +113,6 @@ make image/build/emailsender
 2. **Fleetshard-sync** (`fleetshard/`) - Data plane synchronization service
 3. **Probe** (`probe/`) - Health check and monitoring service
 4. **Emailsender** (`emailsender/`) - Email notification service
-5. **Fleetshard Operator** (`fleetshard-operator/`) - Kubernetes operator for fleet management
 
 ### Key Directories
 

CLAUDE.md

@@ -95,10 +95,6 @@ CHAMBER_BIN := $(LOCAL_BIN_PATH)/chamber
 $(CHAMBER_BIN): $(TOOLS_DIR)/go.mod $(TOOLS_DIR)/go.sum
 	@cd $(TOOLS_DIR) && GOBIN=${LOCAL_BIN_PATH} $(GO) install github.com/segmentio/chamber/v2
 
-CONTROLLER_GEN_BIN := $(LOCAL_BIN_PATH)/controller-gen
-$(CONTROLLER_GEN_BIN): $(TOOLS_DIR)/go.mod $(TOOLS_DIR)/go.sum
-	@cd $(TOOLS_DIR) && GOBIN=${LOCAL_BIN_PATH} $(GO) install sigs.k8s.io/controller-tools/cmd/controller-gen
-
 GINKGO_BIN := $(LOCAL_BIN_PATH)/ginkgo
 $(GINKGO_BIN): go.mod go.sum
 	@GOBIN=${LOCAL_BIN_PATH} $(GO) install github.com/onsi/ginkgo/v2/ginkgo
@@ -256,8 +252,7 @@ verify: check-gopath openapi/validate
 		./fleetshard/... \
 		./probe/... \
 		./emailsender/... \
-		./deploy/test/... \
-		./fleetshard-operator/...
+		./deploy/test/...
 .PHONY: verify
 
 # Runs linter against go files and .y(a)ml files in the templates directory
@@ -283,10 +278,6 @@ fleetshard-sync:
 	GOOS="$(GOOS)" GOARCH="$(GOARCH)" CGO_ENABLED=0  $(GO) build $(GOARGS) -o fleetshard-sync ./fleetshard
 .PHONY: fleetshard-sync
 
-fleetshard-operator:
-	GOOS="$(GOOS)" GOARCH="$(GOARCH)" CGO_ENABLED=0  $(GO) build $(GOARGS) -o fleetshard-operator/bin/fleetshard-operator ./fleetshard-operator
-.PHONY: fleetshard-operator
-
 probe:
 	GOOS="$(GOOS)" GOARCH="$(GOARCH)" CGO_ENABLED=0 $(GO) build $(GOARGS) -o probe/bin/probe ./probe/cmd/probe
 .PHONY: probe
@@ -299,11 +290,11 @@ emailsender:
 	GOOS="$(GOOS)" GOARCH="$(GOARCH)" CGO_ENABLED=0  $(GO) build $(GOARGS) -o emailsender/bin/emailsender ./emailsender/cmd/app
 .PHONY: emailsender
 
-binary: fleet-manager fleetshard-sync probe acsfleetctl emailsender fleetshard-operator
+binary: fleet-manager fleetshard-sync probe acsfleetctl emailsender
 .PHONY: binary
 
 clean:
-	rm -f fleet-manager fleetshard-sync probe/bin/probe emailsender/bin/emailsender fleetshard-operator/bin/fleetshard-operator
+	rm -f fleet-manager fleetshard-sync probe/bin/probe emailsender/bin/emailsender
 .PHONY: clean
 
 # Runs the unit tests.
@@ -408,7 +399,7 @@ test/e2e/cleanup:
 .PHONY: test/e2e/cleanup
 
 # generate files
-generate: $(MOQ_BIN) openapi/generate controller-gen/generate
+generate: $(MOQ_BIN) openapi/generate
 	$(GO) generate ./...
 .PHONY: generate
 
@@ -459,10 +450,6 @@ openapi/generate/emailsender: openapi-generator
 	$(GOFMT) -w emailsender/pkg/client/openapi
 .PHONY: openapi/generate/emailsender
 
-.PHONY: controller-gen/generate
-controller-gen/generate: $(CONTROLLER_GEN_BIN)
-	@$(CONTROLLER_GEN_BIN) object crd paths="./fleetshard-operator/..." output:crd:artifacts:config=fleetshard-operator/config/crd
-
 # fail if formatting is required
 code/check:
 	@if ! [ -z "$$(find . -path './vendor' -prune -o -type f -name '*.go' -print0 | xargs -0 $(GOFMT) -l)" ]; then \
@@ -595,17 +582,6 @@ image/push/internal: docker/login/internal
 	$(DOCKER) buildx build -t "$(shell oc get route default-route -n openshift-image-registry -o jsonpath="{.spec.host}")/$(NAMESPACE)/$(IMAGE_NAME):$(IMAGE_TAG)" --platform linux/amd64 --push .
 .PHONY: image/push/internal
 
-image/build/fleetshard-operator: IMAGE_REF="$(external_image_registry)/fleetshard-operator:$(image_tag)"
-image/build/fleetshard-operator:
-	$(DOCKER) buildx build -t $(IMAGE_REF) --build-arg IMAGE_TAG=$(image_tag) --load -f fleetshard-operator/Dockerfile .
-.PHONY: image/build/fleetshard-operator
-
-# push the image to the OpenShift internal registry
-image/push/fleetshard-operator/internal: IMAGE_TAG ?= $(image_tag)
-image/push/fleetshard-operator/internal: docker/login/internal
-	$(DOCKER) buildx build -t "$(shell oc get route default-route -n openshift-image-registry -o jsonpath="{.spec.host}")/$(NAMESPACE)/fleetshard-operator:$(IMAGE_TAG)" --platform linux/amd64 --push -f fleetshard-operator/Dockerfile .
-.PHONY: image/push/fleetshard-operator/internal
-
 # Touch all necessary secret files for fleet manager to start up
 secrets/touch:
 	touch secrets/aws.accesskey \

Makefile

@@ -52,13 +52,3 @@ Below is the list of jwt claims used in the fleet-manager
 * **rh-user-id** - user id in service account.
 
 * **username** - username of the entity for which the token was issued. Obtained from the short living ocm token used in the http request. Central request owner value is assigned from the username value.
-
-### Token generated by fleetshard-operator service account (https://gitlab.cee.redhat.com/mk-ci-cd/sso-configuration-files/-/blob/master/docs/service-accounts/fleetshard-agent.md)
-
-claim:
-
-* **fleetshard-operator-cluster-id** - used by authenticated context to call dataplane endpoints
-
-Role:
-
-* **fleetshard_operator**

docs/auth/jwt-claims.md

@@ -28,9 +28,9 @@ api-routes -> http middleware -> handler -> business logic -> database / externa
 >NOTE: The inner layers shouldn't know any details about the outer layer. e.g the business logic layer should call methods in the http middleware layer.
 
 The Rest endpoints are of three categories.
-- [Public user facing API](../openapi/fleet-manager.yaml)
-- [The admin endpoints](../openapi/fleet-manager-private-admin.yaml) to perform some admin tasks like upgrades. The endpoint is not visible to the normal user and it requires special permissions to be accessed
-- [The fleetshard synchronisation endpoints](../openapi/fleet-manager-private.yaml) for communication between the fleetshard operator and the fleet manager. The endpoint is not visible to the user and it requires a special _service account_ in sso to be accessed.
+- [Public user facing API](../../openapi/fleet-manager.yaml)
+- [The admin endpoints](../../openapi/fleet-manager-private-admin.yaml) to perform some admin tasks like upgrades. The endpoint is not visible to the normal user and it requires special permissions to be accessed
+- [The fleetshard synchronisation endpoints](../../openapi/fleet-manager-private.yaml) for communication between the fleetshard sync and the fleet manager. The endpoint is not visible to the user and it requires a special _service account_ in sso to be accessed.
 
 They are all setup in the [route_loder.go](../internal/central/pkg/routes/route_loader.go) file.
 
@@ -66,7 +66,7 @@ There are currently 7 central workers, which are located in the [centrals_mgrs f
 - [`deleting_centrals_mgr.go`](../internal/central/pkg/workers/centrals_mgrs/deleting_centrals_mgr.go) responsible for handling the deletion of centrals e.g removing resources like AWS Route53 entry, IAM secrets client
 - [`accepted_centrals_mgr.go`](../internal/central/pkg/workers/centrals_mgrs/accepted_centrals_mgr.go) responsible for checking if user is within Quota before provisioning a central. Afterwards, it will periodically reconcile on all pending Central resources, attempt to find a valid OpenShift cluster to fit it's requirements (cloud provider, region, etc.) and provision a Central instance to the cluster. Once a suitable Dataplane cluster has been found, we'll update the status of the Central resource to reflect it's current progress.
 - [`preparing_centrals_mgr.go`](../internal/central/pkg/workers/centrals_mgrs/preparing_centrals_mgr.go) responsible for creating external resources e.g AWS Route53 DNS, IAM authentication secrets
-- [`provisioning_centrals_mgr.go`](../internal/central/pkg/workers/centrals_mgrs/provisioning_centrals_mgr.go) responsible for checking if a provisioned central is ready as reported by the fleetshard-operator
+- [`provisioning_centrals_mgr.go`](../internal/central/pkg/workers/centrals_mgrs/provisioning_centrals_mgr.go) responsible for checking if a provisioned central is ready as reported by the fleetshard-sync
 - [`ready_centrals_mgr.go`](../internal/central/pkg/workers/centrals_mgrs/ready_centrals_mgr.go) responsible for reconciling external resources of a ready centrals
 - [`centrals_routes_cname_mgr.go`](../internal/central/pkg/workers/centrals_mgrs/centrals_routes_cname_mgr.go) responsible for reconciliation of DNS records for each centrals' routes.
 

docs/development/implementation.md

@@ -1,6 +1,6 @@
 # Test Locally with the fleetshard Synchronizer
 
-The communication between the fleetshard operator and the fleet-manager will be handled by the synchronizer module. The communication is established by the synchronizer module, so for it to work it needs to know the url of the control plane. However, when you run the fleet-manager locally and the fleetshard operator on a remote public OSD cluster, this will not work as there is no public URL for the synchronizer to use.
+The communication between the fleetshard-sync and the fleet-manager will be handled by the synchronizer module. The communication is established by the synchronizer module, so for it to work it needs to know the url of the control plane. However, when you run the fleet-manager locally and the fleetshard-sync on a remote OpenShift cluster, this will not work as there is no public URL for the synchronizer to use.
 
 To solve this problem, it is recommended to use a service like [ngrok](https://ngrok.com/). Ngrok will be able to expose your local sever on the public internet.