diff --git a/cluster-scope/overlays/prod/common/kustomization.yaml b/cluster-scope/overlays/prod/common/kustomization.yaml index 065687e4c..81063a40c 100644 --- a/cluster-scope/overlays/prod/common/kustomization.yaml +++ b/cluster-scope/overlays/prod/common/kustomization.yaml @@ -1,75 +1,75 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization +apiVersion: kustomize.config.k8s.io/v1beta1 resources: -- ../../../base/config.openshift.io/projects/cluster -- ../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-admins-rb -- ../../../base/rbac.authorization.k8s.io/clusterrolebindings/self-provisioners -- ../../../base/rbac.authorization.k8s.io/clusterrolebindings/sre -- ../../../base/rbac.authorization.k8s.io/clusterroles/events-aggregate-to-edit -- ../../../base/user.openshift.io/groups/adoptium -- ../../../base/user.openshift.io/groups/ai-services -- ../../../base/user.openshift.io/groups/apicurio -- ../../../base/user.openshift.io/groups/argocd-admins -- ../../../base/user.openshift.io/groups/argocd-readonly -- ../../../base/user.openshift.io/groups/b4mad -- ../../../base/user.openshift.io/groups/boatroackers -- ../../../base/user.openshift.io/groups/boston-university-redhat -- ../../../base/user.openshift.io/groups/ccx -- ../../../base/user.openshift.io/groups/chi-rhug -- ../../../base/user.openshift.io/groups/cnv-testing -- ../../../base/user.openshift.io/groups/codait-advo -- ../../../base/user.openshift.io/groups/curator -- ../../../base/user.openshift.io/groups/data-science -- ../../../base/user.openshift.io/groups/debezium -- ../../../base/user.openshift.io/groups/emea-sa -- ../../../base/user.openshift.io/groups/enterprise-neurosystem -- ../../../base/user.openshift.io/groups/esi-project -- ../../../base/user.openshift.io/groups/fde -- ../../../base/user.openshift.io/groups/fedora -- ../../../base/user.openshift.io/groups/fybrik -- ../../../base/user.openshift.io/groups/grafana-viewer -- ../../../base/user.openshift.io/groups/lab-cicd -- ../../../base/user.openshift.io/groups/logs-insights -- ../../../base/user.openshift.io/groups/manageiq -- ../../../base/user.openshift.io/groups/multinode-demo -- ../../../base/user.openshift.io/groups/mwperf -- ../../../base/user.openshift.io/groups/neu-students -- ../../../base/user.openshift.io/groups/ocp-pipelines-sre -- ../../../base/user.openshift.io/groups/octo-otel-dev -- ../../../base/user.openshift.io/groups/octo-training-model -- ../../../base/user.openshift.io/groups/octo-ushift-dev -- ../../../base/user.openshift.io/groups/odh-admin -- ../../../base/user.openshift.io/groups/open-aiops -- ../../../base/user.openshift.io/groups/operate-first -- ../../../base/user.openshift.io/groups/opf-alerting -- ../../../base/user.openshift.io/groups/osc -- ../../../base/user.openshift.io/groups/osc-admins -- ../../../base/user.openshift.io/groups/peribolos-as-a-service -- ../../../base/user.openshift.io/groups/prometheus-ai -- ../../../base/user.openshift.io/groups/prometheus-anomaly-detector -- ../../../base/user.openshift.io/groups/psse-research -- ../../../base/user.openshift.io/groups/pulp -- ../../../base/user.openshift.io/groups/quarkus -- ../../../base/user.openshift.io/groups/ray -- ../../../base/user.openshift.io/groups/redhat-cto-team -- ../../../base/user.openshift.io/groups/redhat-impact -- ../../../base/user.openshift.io/groups/rekor -- ../../../base/user.openshift.io/groups/rh-curator-eval -- ../../../base/user.openshift.io/groups/rh-dus -- ../../../base/user.openshift.io/groups/sa-dach -- ../../../base/user.openshift.io/groups/scsaol -- ../../../base/user.openshift.io/groups/sdap-mslsp -- ../../../base/user.openshift.io/groups/seraph -- ../../../base/user.openshift.io/groups/sigstore -- ../../../base/user.openshift.io/groups/sostrades -- ../../../base/user.openshift.io/groups/sre -- ../../../base/user.openshift.io/groups/superset-user -- ../../../base/user.openshift.io/groups/team-pixel -- ../../../base/user.openshift.io/groups/thoth -- ../../../base/user.openshift.io/groups/thoth-devops -- ../../../base/user.openshift.io/groups/tremor-demo -- ../../../base/user.openshift.io/groups/uky-redhat -- ../../../base/user.openshift.io/groups/varangian -- ../../../base/user.openshift.io/groups/workshops -- ../../../bundles/opf-monitoring -- alertmanager-main-secret.yaml + - ../../../base/config.openshift.io/projects/cluster + - ../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-admins-rb + - ../../../base/rbac.authorization.k8s.io/clusterrolebindings/self-provisioners + - ../../../base/rbac.authorization.k8s.io/clusterrolebindings/sre + - ../../../base/rbac.authorization.k8s.io/clusterroles/events-aggregate-to-edit + - ../../../base/user.openshift.io/groups/adoptium + - ../../../base/user.openshift.io/groups/ai-services + - ../../../base/user.openshift.io/groups/apicurio + - ../../../base/user.openshift.io/groups/argocd-admins + - ../../../base/user.openshift.io/groups/argocd-readonly + - ../../../base/user.openshift.io/groups/b4mad + - ../../../base/user.openshift.io/groups/boatroackers + - ../../../base/user.openshift.io/groups/boston-university-redhat + - ../../../base/user.openshift.io/groups/ccx + - ../../../base/user.openshift.io/groups/chi-rhug + - ../../../base/user.openshift.io/groups/cnv-testing + - ../../../base/user.openshift.io/groups/codait-advo + - ../../../base/user.openshift.io/groups/curator + - ../../../base/user.openshift.io/groups/data-science + - ../../../base/user.openshift.io/groups/debezium + - ../../../base/user.openshift.io/groups/emea-sa + - ../../../base/user.openshift.io/groups/enterprise-neurosystem + - ../../../base/user.openshift.io/groups/esi-project + - ../../../base/user.openshift.io/groups/fde + - ../../../base/user.openshift.io/groups/fedora + - ../../../base/user.openshift.io/groups/fybrik + - ../../../base/user.openshift.io/groups/grafana-viewer + - ../../../base/user.openshift.io/groups/lab-cicd + - ../../../base/user.openshift.io/groups/logs-insights + - ../../../base/user.openshift.io/groups/manageiq + - ../../../base/user.openshift.io/groups/multinode-demo + - ../../../base/user.openshift.io/groups/mwperf + - ../../../base/user.openshift.io/groups/neu-students + - ../../../base/user.openshift.io/groups/ocp-pipelines-sre + - ../../../base/user.openshift.io/groups/octo-otel-dev + - ../../../base/user.openshift.io/groups/octo-training-model + - ../../../base/user.openshift.io/groups/octo-ushift-dev + - ../../../base/user.openshift.io/groups/odh-admin + - ../../../base/user.openshift.io/groups/open-aiops + - ../../../base/user.openshift.io/groups/operate-first + - ../../../base/user.openshift.io/groups/opf-alerting + - ../../../base/user.openshift.io/groups/osc + - ../../../base/user.openshift.io/groups/osc-admins + - ../../../base/user.openshift.io/groups/peribolos-as-a-service + - ../../../base/user.openshift.io/groups/prometheus-ai + - ../../../base/user.openshift.io/groups/prometheus-anomaly-detector + - ../../../base/user.openshift.io/groups/psse-research + - ../../../base/user.openshift.io/groups/pulp + - ../../../base/user.openshift.io/groups/quarkus + - ../../../base/user.openshift.io/groups/ray + - ../../../base/user.openshift.io/groups/redhat-cto-team + - ../../../base/user.openshift.io/groups/redhat-impact + - ../../../base/user.openshift.io/groups/rekor + - ../../../base/user.openshift.io/groups/rh-curator-eval + - ../../../base/user.openshift.io/groups/rh-dus + - ../../../base/user.openshift.io/groups/sa-dach + - ../../../base/user.openshift.io/groups/scsaol + - ../../../base/user.openshift.io/groups/sdap-mslsp + - ../../../base/user.openshift.io/groups/seraph + - ../../../base/user.openshift.io/groups/sigstore + - ../../../base/user.openshift.io/groups/sostrades + - ../../../base/user.openshift.io/groups/sre + - ../../../base/user.openshift.io/groups/superset-user + - ../../../base/user.openshift.io/groups/team-pixel + - ../../../base/user.openshift.io/groups/thoth + - ../../../base/user.openshift.io/groups/thoth-devops + - ../../../base/user.openshift.io/groups/tremor-demo + - ../../../base/user.openshift.io/groups/uky-redhat + - ../../../base/user.openshift.io/groups/varangian + - ../../../base/user.openshift.io/groups/workshops + - ../../../bundles/opf-monitoring + - alertmanager-main-secret.yaml diff --git a/cluster-scope/overlays/prod/emea/balrog/kustomization.yaml b/cluster-scope/overlays/prod/emea/balrog/kustomization.yaml index 3ec8eca10..16cef2066 100644 --- a/cluster-scope/overlays/prod/emea/balrog/kustomization.yaml +++ b/cluster-scope/overlays/prod/emea/balrog/kustomization.yaml @@ -1,7 +1,25 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization +apiVersion: kustomize.config.k8s.io/v1beta1 +patchesStrategicMerge: + - oauths/cluster_patch.yaml + - groups/cluster-admins.yaml + - subscriptions/cluster-logging-operator_patch.yaml + - clusterautoscaler.yaml +patches: + - patch: |- + - op: replace + path: /spec/hard + value: + limits.cpu: '16' + limits.memory: 32Gi + requests.cpu: '8' + requests.memory: 16Gi + requests.storage: 60Gi + target: + version: v1 + kind: ResourceQuota + name: opf-kafka-custom resources: - - ../common - ../../../../base/apiextensions.k8s.io/customresourcedefinitions/workflow.argoproj.io - ../../../../base/apiextensions.k8s.io/customresourcedefinitions/workflowtemplate.argoproj.io - ../../../../base/autoscaling.openshift.io/clusterautoscalers/default @@ -25,27 +43,7 @@ resources: - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter - ../../../../base/user.openshift.io/groups/cluster-admins - ../../../../bundles/acme-operator + - ../common - machineautoscalers.yaml generators: - secret-generator.yaml - -patchesStrategicMerge: - - oauths/cluster_patch.yaml - - groups/cluster-admins.yaml - - subscriptions/cluster-logging-operator_patch.yaml - - clusterautoscaler.yaml -patches: - - patch: |- - - op: replace - path: /spec/hard - value: - limits.cpu: '16' - limits.memory: 32Gi - requests.cpu: '8' - requests.memory: 16Gi - requests.storage: 60Gi - target: - group: "" - version: v1 - kind: ResourceQuota - name: opf-kafka-custom diff --git a/cluster-scope/overlays/prod/emea/demo/kustomization.yaml b/cluster-scope/overlays/prod/emea/demo/kustomization.yaml index 2179066a5..de28c0826 100644 --- a/cluster-scope/overlays/prod/emea/demo/kustomization.yaml +++ b/cluster-scope/overlays/prod/emea/demo/kustomization.yaml @@ -1,18 +1,15 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization - -resources: -- ../common -- ../../../../base/config.openshift.io/oauths/cluster -- ../../../../base/user.openshift.io/groups/cluster-admins -- ../../../../base/core/configmaps/cluster-monitoring-config -- ../../../../base/core/namespaces/opf-alertreceiver -- ../../../../base/operators.coreos.com/subscriptions/opendatahub-operator -- ../../../../base/core/namespaces/demo-jupyterhub - +apiVersion: kustomize.config.k8s.io/v1beta1 patchesStrategicMerge: -- groups/cluster-admins.yaml -- oauths/cluster_patch.yaml - + - groups/cluster-admins.yaml + - oauths/cluster_patch.yaml +resources: + - ../../../../base/config.openshift.io/oauths/cluster + - ../../../../base/core/configmaps/cluster-monitoring-config + - ../../../../base/core/namespaces/demo-jupyterhub + - ../../../../base/core/namespaces/opf-alertreceiver + - ../../../../base/operators.coreos.com/subscriptions/opendatahub-operator + - ../../../../base/user.openshift.io/groups/cluster-admins + - ../common generators: -- secret-generator.yaml + - secret-generator.yaml diff --git a/cluster-scope/overlays/prod/emea/morty/kustomization.yaml b/cluster-scope/overlays/prod/emea/morty/kustomization.yaml index 5a243e0e1..3b06f0fb5 100644 --- a/cluster-scope/overlays/prod/emea/morty/kustomization.yaml +++ b/cluster-scope/overlays/prod/emea/morty/kustomization.yaml @@ -1,54 +1,63 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization -patchesJson6902: -- patch: "- op: replace\n path: /spec/startingCSV\n value: cert-manager.v1.6.1\n" - target: - group: operators.coreos.com - kind: Subscription - name: cert-manager - version: v1alpha1 -- patch: "- op: add\n path: /spec/storageClassName\n value: ocs-storagecluster-cephfs\n" - target: - kind: PersistentVolumeClaim - name: image-registry-storage - version: v1 +apiVersion: kustomize.config.k8s.io/v1beta1 patchesStrategicMerge: -- groups/cluster-admins.yaml -- groups/sudoers.yaml -- subscriptions/local-storage-operator_patch.yaml -- subscriptions/odf-operator_patch.yaml -- subscriptions/kubevirt-hyperconverged_patch.yaml -- subscriptions/nfd_patch.yaml -- subscriptions/openshift-pipelines-operator-rh_patch.yaml + - groups/cluster-admins.yaml + - groups/sudoers.yaml + - oauths/cluster_patch.yaml + - subscriptions/local-storage-operator_patch.yaml + - subscriptions/odf-operator_patch.yaml + - subscriptions/kubevirt-hyperconverged_patch.yaml + - subscriptions/nfd_patch.yaml + - subscriptions/openshift-pipelines-operator-rh_patch.yaml +patchesJson6902: + - patch: | + - op: replace + path: /spec/startingCSV + value: cert-manager.v1.6.1 + target: + group: operators.coreos.com + version: v1alpha1 + kind: Subscription + name: cert-manager + - patch: | + - op: add + path: /spec/storageClassName + value: ocs-storagecluster-cephfs + target: + version: v1 + kind: PersistentVolumeClaim + name: image-registry-storage resources: -- ../../../../base/core/configmaps/cluster-monitoring-config -- ../../../../base/core/namespaces/examples-openshift-pub -- ../../../../base/core/namespaces/keylime -- ../../../../base/core/namespaces/openshift-cnv -- ../../../../base/core/namespaces/openshift-local-storage -- ../../../../base/core/namespaces/openshift-storage -- ../../../../base/core/namespaces/opf-alertreceiver -- ../../../../base/core/namespaces/pixel-demo -- ../../../../base/core/namespaces/pixel-secrets -- ../../../../base/core/namespaces/rbo-builder -- ../../../../base/core/namespaces/smartoffice -- ../../../../base/core/namespaces/summit-2022-octo-keynote -- ../../../../base/core/namespaces/thoth-test-core -- ../../../../base/core/persistentvolumeclaims/image-registry-storage -- ../../../../base/imageregistry.operator.openshift.io/configs/cluster -- ../../../../base/operators.coreos.com/operatorgroups/openshift-cnv-rn5jf -- ../../../../base/operators.coreos.com/operatorgroups/openshift-local-storage -- ../../../../base/operators.coreos.com/operatorgroups/openshift-storage -- ../../../../base/operators.coreos.com/subscriptions/cert-manager -- ../../../../base/operators.coreos.com/subscriptions/kubevirt-hyperconverged -- ../../../../base/operators.coreos.com/subscriptions/odf-operator -- ../../../../base/operators.coreos.com/subscriptions/openshift-local-storage-operator -- ../../../../base/operators.coreos.com/subscriptions/openshift-pipelines-operator-rh -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/sudoers -- ../../../../base/user.openshift.io/groups/cluster-admins -- ../../../../base/user.openshift.io/groups/sudoers -- ../../../../bundles/nfd -- ../common -- apiserver/api_server_cert.yaml -- ingresscontrollers/default.yaml + - ../../../../base/config.openshift.io/oauths/cluster + - ../../../../base/core/configmaps/cluster-monitoring-config + - ../../../../base/core/namespaces/examples-openshift-pub + - ../../../../base/core/namespaces/openshift-cnv + - ../../../../base/core/namespaces/openshift-local-storage + - ../../../../base/core/namespaces/openshift-storage + - ../../../../base/core/namespaces/opf-alertreceiver + - ../../../../base/core/namespaces/opf-monitoring + - ../../../../base/core/namespaces/pixel-demo + - ../../../../base/core/namespaces/pixel-secrets + - ../../../../base/core/namespaces/rbo-builder + - ../../../../base/core/namespaces/smartoffice + - ../../../../base/core/namespaces/thoth-test-core + - ../../../../base/core/persistentvolumeclaims/image-registry-storage + - ../../../../base/imageregistry.operator.openshift.io/configs/cluster + - ../../../../base/operators.coreos.com/operatorgroups/openshift-cnv-rn5jf + - ../../../../base/operators.coreos.com/operatorgroups/openshift-local-storage + - ../../../../base/operators.coreos.com/operatorgroups/openshift-storage + - ../../../../base/operators.coreos.com/subscriptions/cert-manager + - ../../../../base/operators.coreos.com/subscriptions/kubevirt-hyperconverged + - ../../../../base/operators.coreos.com/subscriptions/odf-operator + - ../../../../base/operators.coreos.com/subscriptions/openshift-local-storage-operator + - ../../../../base/operators.coreos.com/subscriptions/openshift-pipelines-operator-rh + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/sudoers + - ../../../../base/user.openshift.io/groups/cluster-admins + - ../../../../base/user.openshift.io/groups/sudoers + - ../../../../bundles/nfd + - ../common + - apiserver/api_server_cert.yaml + - ingresscontrollers/default.yaml +generators: + - secret-generator.yaml diff --git a/cluster-scope/overlays/prod/emea/rick/kustomization.yaml b/cluster-scope/overlays/prod/emea/rick/kustomization.yaml index 086fc42b1..825fa109f 100644 --- a/cluster-scope/overlays/prod/emea/rick/kustomization.yaml +++ b/cluster-scope/overlays/prod/emea/rick/kustomization.yaml @@ -1,7 +1,17 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization +apiVersion: kustomize.config.k8s.io/v1beta1 +patchesStrategicMerge: + - oauths/cluster_patch.yaml + - groups/cluster-admins.yaml + - storageclasses/ocs-storagecluster-cephfs_patch.yaml + - subscriptions/cluster-logging-operator_patch.yaml + - subscriptions/local-storage-operator_patch.yaml + - subscriptions/nfd_patch.yaml + - subscriptions/ocs-operator_patch.yaml + - subscriptions/openshift-pipelines-operator-rh_patch.yaml + - subscriptions/prometheus-operator_patch.yaml + - subscriptions/kubevirt-hyperconverged_patch.yaml resources: - - ../common - ../../../../base/apiextensions.k8s.io/customresourcedefinitions/workflow.argoproj.io - ../../../../base/apiextensions.k8s.io/customresourcedefinitions/workflowtemplate.argoproj.io - ../../../../base/config.openshift.io/oauths/cluster @@ -15,43 +25,33 @@ resources: - ../../../../base/core/namespaces/openshift-storage - ../../../../base/core/namespaces/opf-alertreceiver - ../../../../base/core/namespaces/opf-kafka - - ../../../../base/core/namespaces/thoth-website-prod + - ../../../../base/core/namespaces/opf-monitoring + - ../../../../base/core/namespaces/testproject - ../../../../base/core/namespaces/thoth-test-core + - ../../../../base/core/namespaces/thoth-website-prod - ../../../../base/core/namespaces/ushift-dev - ../../../../base/core/persistentvolumeclaims/image-registry-storage - ../../../../base/imageregistry.operator.openshift.io/configs/cluster - ../../../../base/operators.coreos.com/operatorgroups/openshift-cnv-rn5jf - ../../../../base/operators.coreos.com/operatorgroups/openshift-local-storage-zj22x - ../../../../base/operators.coreos.com/operatorgroups/openshift-storage-24n7x - - ../../../../base/operators.coreos.com/operatorgroups/opf-monitoring - ../../../../base/operators.coreos.com/operatorgroups/opf-kafka + - ../../../../base/operators.coreos.com/operatorgroups/opf-monitoring - ../../../../base/operators.coreos.com/subscriptions/cluster-logging - ../../../../base/operators.coreos.com/subscriptions/kubevirt-hyperconverged - - ../../../../base/operators.coreos.com/subscriptions/openshift-local-storage-operator - ../../../../base/operators.coreos.com/subscriptions/ocs-operator + - ../../../../base/operators.coreos.com/subscriptions/openshift-local-storage-operator - ../../../../base/operators.coreos.com/subscriptions/openshift-pipelines-operator-rh - ../../../../base/operators.coreos.com/subscriptions/prometheus-operator - ../../../../base/operators.coreos.com/subscriptions/strimzi - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/opf-cluster-metrics-federation - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/oauth-token-access-review-opf-monitoring + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/opf-cluster-metrics-federation - ../../../../base/rbac.authorization.k8s.io/clusterroles/oauth-token-access-review - - ../../../../base/user.openshift.io/groups/cluster-admins - ../../../../base/storage.k8s.io/storageclasses/ocs-storagecluster-cephfs + - ../../../../base/user.openshift.io/groups/cluster-admins - ../../../../bundles/acme-operator - ../../../../bundles/nfd + - ../common - clusterversion.yaml - generators: - secret-generator.yaml - -patchesStrategicMerge: - - oauths/cluster_patch.yaml - - groups/cluster-admins.yaml - - storageclasses/ocs-storagecluster-cephfs_patch.yaml - - subscriptions/cluster-logging-operator_patch.yaml - - subscriptions/local-storage-operator_patch.yaml - - subscriptions/nfd_patch.yaml - - subscriptions/ocs-operator_patch.yaml - - subscriptions/openshift-pipelines-operator-rh_patch.yaml - - subscriptions/prometheus-operator_patch.yaml - - subscriptions/kubevirt-hyperconverged_patch.yaml diff --git a/cluster-scope/overlays/prod/moc/curator/kustomization.yaml b/cluster-scope/overlays/prod/moc/curator/kustomization.yaml index 6a2c7333f..cce529e41 100644 --- a/cluster-scope/overlays/prod/moc/curator/kustomization.yaml +++ b/cluster-scope/overlays/prod/moc/curator/kustomization.yaml @@ -1,31 +1,26 @@ ---- -apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization - +apiVersion: kustomize.config.k8s.io/v1beta1 +patchesStrategicMerge: + - oauths/cluster_patch.yaml + - subscriptions/kubevirt-hyperconverged_patch.yaml + - subscriptions/ocs-operator_patch.yaml + - storageclasses/hostpath-provisioner_patch.yaml + - groups/cluster-admins.yaml resources: - - ../../../../base/config.openshift.io/oauths/cluster - - ../../../../base/core/namespaces/hostpath-provisioner - - ../../../../base/core/namespaces/openshift-cnv - - ../../../../base/core/namespaces/openshift-storage - - ../../../../base/hostpathprovisioner.kubevirt.io/hostpathprovisioners/hostpath-provisioner - - ../../../../base/machineconfiguration.openshift.io/machineconfigs/50-set-selinux-for-hostpath-provisioner-controller - - ../../../../base/operator.openshift.io/ingresscontrollers/default - - ../../../../base/operators.coreos.com/operatorgroups/openshift-storage - - ../../../../base/operators.coreos.com/subscriptions/kubevirt-hyperconverged - - ../../../../base/operators.coreos.com/subscriptions/ocs-operator - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-admins-rb - - ../../../../base/storage.k8s.io/storageclasses/hostpath-provisioner - - ../../../../base/user.openshift.io/groups/cluster-admins - - - machineconfigs/50-ipmi-route.yaml - - configmaps/admin-acks.yaml - + - ../../../../base/config.openshift.io/oauths/cluster + - ../../../../base/core/namespaces/hostpath-provisioner + - ../../../../base/core/namespaces/openshift-cnv + - ../../../../base/core/namespaces/openshift-storage + - ../../../../base/hostpathprovisioner.kubevirt.io/hostpathprovisioners/hostpath-provisioner + - ../../../../base/machineconfiguration.openshift.io/machineconfigs/50-set-selinux-for-hostpath-provisioner-controller + - ../../../../base/operator.openshift.io/ingresscontrollers/default + - ../../../../base/operators.coreos.com/operatorgroups/openshift-storage + - ../../../../base/operators.coreos.com/subscriptions/kubevirt-hyperconverged + - ../../../../base/operators.coreos.com/subscriptions/ocs-operator + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-admins-rb + - ../../../../base/storage.k8s.io/storageclasses/hostpath-provisioner + - ../../../../base/user.openshift.io/groups/cluster-admins + - configmaps/admin-acks.yaml + - machineconfigs/50-ipmi-route.yaml generators: - - secret-generator.yaml - -patchesStrategicMerge: - - oauths/cluster_patch.yaml - - subscriptions/kubevirt-hyperconverged_patch.yaml - - subscriptions/ocs-operator_patch.yaml - - storageclasses/hostpath-provisioner_patch.yaml - - groups/cluster-admins.yaml + - secret-generator.yaml diff --git a/cluster-scope/overlays/prod/moc/infra/kustomization.yaml b/cluster-scope/overlays/prod/moc/infra/kustomization.yaml index a9ab2f302..e7a374269 100644 --- a/cluster-scope/overlays/prod/moc/infra/kustomization.yaml +++ b/cluster-scope/overlays/prod/moc/infra/kustomization.yaml @@ -1,63 +1,59 @@ ---- -apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization - +apiVersion: kustomize.config.k8s.io/v1beta1 +patchesStrategicMerge: + - oauths/cluster_patch.yaml + - storageclasses/moc-nfs-csi_patch.yaml + - subscriptions/cluster-logging-operator_patch.yaml + - subscriptions/kubernetes-nmstate-operator_patch.yaml + - groups/cluster-admins.yaml + - clusterrolebindings/self-provisioners_patch.yaml resources: - - ../common - - ../../../../bundles/klusterletaddonconfig-editor/ - - ../../../../base/config.openshift.io/oauths/cluster - - ../../../../base/core/configmaps/cluster-monitoring-config - - ../../../../base/core/configmaps/user-workload-monitoring-config - - ../../../../base/core/namespaces/acm - - ../../../../base/core/namespaces/democratic-csi - - ../../../../base/core/namespaces/keycloak - - ../../../../base/core/namespaces/openshift-cnv - - ../../../../base/core/namespaces/openshift-logging - - ../../../../base/core/namespaces/openshift-nmstate - - ../../../../base/core/namespaces/opf-alertreceiver - - ../../../../base/core/namespaces/vault - - ../../../../base/nmstate.io/nmstates/nmstate - - ../../../../base/operator.openshift.io/ingresscontrollers/default - - ../../../../base/operators.coreos.com/operatorgroups/keycloak - - ../../../../base/operators.coreos.com/operatorgroups/openshift-nmstate - - ../../../../base/operators.coreos.com/operatorgroups/operator-acm-group - - ../../../../base/operators.coreos.com/subscriptions/acm-operator-subscription - - ../../../../base/operators.coreos.com/subscriptions/cert-manager - - ../../../../base/operators.coreos.com/subscriptions/cluster-logging - - ../../../../base/operators.coreos.com/subscriptions/kubernetes-nmstate-operator - - ../../../../base/operators.coreos.com/subscriptions/rhsso-operator - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/moc-nfs-democratic-csi-controller-rb - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/moc-nfs-democratic-csi-node-rb - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/open-cluster-management:admin:osc-cl1 - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/open-cluster-management:managedclusterset:admin:octo-ushift-dev - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/open-cluster-management:managedclusterset:admin:osc - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/apirequest-count-reader - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/vault - - ../../../../base/rbac.authorization.k8s.io/clusterroles/moc-nfs-democratic-csi-controller-cr - - ../../../../base/rbac.authorization.k8s.io/clusterroles/moc-nfs-democratic-csi-node-cr - - ../../../../base/rbac.authorization.k8s.io/clusterroles/apirequest-count-read-cr - - ../../../../base/storage.k8s.io/csidrivers/org.democratic-csi.nfs - - ../../../../base/storage.k8s.io/storageclasses/moc-nfs-csi - - ../../../../base/user.openshift.io/groups/cluster-admins - - ../../../../bundles/acme-operator - - ../../../../bundles/idp-mgmt-operator - - apiserver/api_server_cert.yaml - - clusterversion.yaml - - nodenetworkconfigurationpolicies/crc-provisioning-vlan.yaml - - kubeletconfigs/increase-worker-system-reserved-memory.yaml - - metal3.io/provisionings/provisioning-configuration.yaml - - nodenetworkconfigurationpolicies/moc-nfs-network.yaml - - nodenetworkconfigurationpolicies/ocp-prod-provisioning-vlan.yaml - - nodenetworkconfigurationpolicies/zero-provisioning-vlan.yaml - + - ../common + - ../../../../bundles/klusterletaddonconfig-editor/ + - ../../../../base/config.openshift.io/oauths/cluster + - ../../../../base/core/configmaps/cluster-monitoring-config + - ../../../../base/core/configmaps/user-workload-monitoring-config + - ../../../../base/core/namespaces/acm + - ../../../../base/core/namespaces/democratic-csi + - ../../../../base/core/namespaces/keycloak + - ../../../../base/core/namespaces/openshift-cnv + - ../../../../base/core/namespaces/openshift-logging + - ../../../../base/core/namespaces/openshift-nmstate + - ../../../../base/core/namespaces/opf-alertreceiver + - ../../../../base/core/namespaces/vault + - ../../../../base/nmstate.io/nmstates/nmstate + - ../../../../base/operator.openshift.io/ingresscontrollers/default + - ../../../../base/operators.coreos.com/operatorgroups/keycloak + - ../../../../base/operators.coreos.com/operatorgroups/openshift-nmstate + - ../../../../base/operators.coreos.com/operatorgroups/operator-acm-group + - ../../../../base/operators.coreos.com/subscriptions/acm-operator-subscription + - ../../../../base/operators.coreos.com/subscriptions/cert-manager + - ../../../../base/operators.coreos.com/subscriptions/cluster-logging + - ../../../../base/operators.coreos.com/subscriptions/kubernetes-nmstate-operator + - ../../../../base/operators.coreos.com/subscriptions/rhsso-operator + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/moc-nfs-democratic-csi-controller-rb + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/moc-nfs-democratic-csi-node-rb + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/open-cluster-management:admin:osc-cl1 + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/open-cluster-management:managedclusterset:admin:octo-ushift-dev + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/open-cluster-management:managedclusterset:admin:osc + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/apirequest-count-reader + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/vault + - ../../../../base/rbac.authorization.k8s.io/clusterroles/moc-nfs-democratic-csi-controller-cr + - ../../../../base/rbac.authorization.k8s.io/clusterroles/moc-nfs-democratic-csi-node-cr + - ../../../../base/rbac.authorization.k8s.io/clusterroles/apirequest-count-read-cr + - ../../../../base/storage.k8s.io/csidrivers/org.democratic-csi.nfs + - ../../../../base/storage.k8s.io/storageclasses/moc-nfs-csi + - ../../../../base/user.openshift.io/groups/cluster-admins + - ../../../../bundles/acme-operator + - ../../../../bundles/idp-mgmt-operator + - apiserver/api_server_cert.yaml + - clusterversion.yaml + - nodenetworkconfigurationpolicies/crc-provisioning-vlan.yaml + - kubeletconfigs/increase-worker-system-reserved-memory.yaml + - metal3.io/provisionings/provisioning-configuration.yaml + - nodenetworkconfigurationpolicies/moc-nfs-network.yaml + - nodenetworkconfigurationpolicies/ocp-prod-provisioning-vlan.yaml + - nodenetworkconfigurationpolicies/zero-provisioning-vlan.yaml generators: - - secret-generator.yaml - -patchesStrategicMerge: - - oauths/cluster_patch.yaml - - storageclasses/moc-nfs-csi_patch.yaml - - subscriptions/cluster-logging-operator_patch.yaml - - subscriptions/kubernetes-nmstate-operator_patch.yaml - - groups/cluster-admins.yaml - - clusterrolebindings/self-provisioners_patch.yaml + - secret-generator.yaml diff --git a/cluster-scope/overlays/prod/moc/smaug/kustomization.yaml b/cluster-scope/overlays/prod/moc/smaug/kustomization.yaml index d82fe36f6..2f8ce30a5 100644 --- a/cluster-scope/overlays/prod/moc/smaug/kustomization.yaml +++ b/cluster-scope/overlays/prod/moc/smaug/kustomization.yaml @@ -1,144 +1,144 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -generators: -- secret-generator.yaml kind: Kustomization +apiVersion: kustomize.config.k8s.io/v1beta1 patchesStrategicMerge: -- backingstores/noobaa-default-backing-store_patch.yaml -- groups/cluster-admins.yaml -- oauths/cluster_patch.yaml -- storageclasses/ocs-external-storagecluster-ceph-rbd.yaml -- subscriptions/cluster-logging-operator_patch.yaml -- subscriptions/nfd_patch.yaml -- subscriptions/vpa_patch.yaml -- subscriptions/kubevirt-hyperconverged_patch.yaml + - backingstores/noobaa-default-backing-store_patch.yaml + - groups/cluster-admins.yaml + - oauths/cluster_patch.yaml + - storageclasses/ocs-external-storagecluster-ceph-rbd.yaml + - subscriptions/cluster-logging-operator_patch.yaml + - subscriptions/nfd_patch.yaml + - subscriptions/vpa_patch.yaml + - subscriptions/kubevirt-hyperconverged_patch.yaml resources: -- ../../../../base/apiextensions.k8s.io/customresourcedefinitions/extensions.dashboard.tekton.dev -- ../../../../base/apiextensions.k8s.io/customresourcedefinitions/prowjobs.prow.k8s.io -- ../../../../base/apiextensions.k8s.io/customresourcedefinitions/reports.batch.curator.openshift.io -- ../../../../base/config.openshift.io/oauths/cluster -- ../../../../base/core/configmaps/cluster-monitoring-config -- ../../../../base/core/configmaps/user-workload-monitoring-config -- ../../../../base/core/namespaces/ai-services-thanos-grpc -- ../../../../base/core/namespaces/aicoe-meteor -- ../../../../base/core/namespaces/apicurio-apicurio-registry -- ../../../../base/core/namespaces/boatrockers -- ../../../../base/core/namespaces/bu-scsaol -- ../../../../base/core/namespaces/chrisproject -- ../../../../base/core/namespaces/debezium-ui -- ../../../../base/core/namespaces/democratic-csi -- ../../../../base/core/namespaces/dex -- ../../../../base/core/namespaces/ds-github-labeler -- ../../../../base/core/namespaces/ds-ml-workflows-ws -- ../../../../base/core/namespaces/fedora -- ../../../../base/core/namespaces/koku-metrics-operator -- ../../../../base/core/namespaces/kubeflow -- ../../../../base/core/namespaces/manageiq -- ../../../../base/core/namespaces/neu-cs6620 -- ../../../../base/core/namespaces/od-demo -- ../../../../base/core/namespaces/openshift-cnv -- ../../../../base/core/namespaces/openshift-logging -- ../../../../base/core/namespaces/openshift-operators -- ../../../../base/core/namespaces/openshift-vertical-pod-autoscaler -- ../../../../base/core/namespaces/opf-alertreceiver -- ../../../../base/core/namespaces/opf-argo -- ../../../../base/core/namespaces/opf-ci-pipelines -- ../../../../base/core/namespaces/opf-ci-prow -- ../../../../base/core/namespaces/opf-ci-test-pods -- ../../../../base/core/namespaces/opf-dashboard -- ../../../../base/core/namespaces/opf-google-spark-operator -- ../../../../base/core/namespaces/opf-jupyterhub -- ../../../../base/core/namespaces/opf-jupyterhub-stage -- ../../../../base/core/namespaces/opf-kafka -- ../../../../base/core/namespaces/opf-observatorium -- ../../../../base/core/namespaces/opf-pulp -- ../../../../base/core/namespaces/opf-seldon -- ../../../../base/core/namespaces/opf-slack-first -- ../../../../base/core/namespaces/opf-superset -- ../../../../base/core/namespaces/opf-triage-party -- ../../../../base/core/namespaces/opf-trino -- ../../../../base/core/namespaces/opf-trino-stage -- ../../../../base/core/namespaces/otel-dev -- ../../../../base/core/namespaces/peribolos-as-a-service -- ../../../../base/core/namespaces/prometheus-ai-project -- ../../../../base/core/namespaces/prometheus-anomaly-detector -- ../../../../base/core/namespaces/rapidast -- ../../../../base/core/namespaces/report-system -- ../../../../base/core/namespaces/rh-curator-eval -- ../../../../base/core/namespaces/smart-village-view -- ../../../../base/core/namespaces/tekton-pipelines -- ../../../../base/core/namespaces/thoth-amun-api-prod -- ../../../../base/core/namespaces/thoth-amun-inspection-prod -- ../../../../base/core/namespaces/thoth-backend-prod -- ../../../../base/core/namespaces/thoth-bots-prod -- ../../../../base/core/namespaces/thoth-deployment-examples -- ../../../../base/core/namespaces/thoth-frontend-prod -- ../../../../base/core/namespaces/thoth-graph-prod -- ../../../../base/core/namespaces/thoth-infra-prod -- ../../../../base/core/namespaces/thoth-middletier-prod -- ../../../../base/core/namespaces/training-model -- ../../../../base/core/namespaces/tremor-demo -- ../../../../base/core/namespaces/ushift-dev -- ../../../../base/core/namespaces/varangian-test -- ../../../../base/core/persistentvolumeclaims/image-registry-storage -- ../../../../base/imageregistry.operator.openshift.io/configs/cluster -- ../../../../base/noobaa.io/backingstores -- ../../../../base/operators.coreos.com/catalogsources/operatorhubio-catalog/ -- ../../../../base/operators.coreos.com/operatorgroups/cluster-logging -- ../../../../base/operators.coreos.com/operatorgroups/koku-metrics-operator -- ../../../../base/operators.coreos.com/operatorgroups/openshift-cnv-rn5jf -- ../../../../base/operators.coreos.com/operatorgroups/openshift-vertical-pod-autoscaler -- ../../../../base/operators.coreos.com/operatorgroups/opf-monitoring -- ../../../../base/operators.coreos.com/operatorgroups/opf-pulp -- ../../../../base/operators.coreos.com/subscriptions/camel-k -- ../../../../base/operators.coreos.com/subscriptions/cert-manager -- ../../../../base/operators.coreos.com/subscriptions/cluster-logging -- ../../../../base/operators.coreos.com/subscriptions/grafana-operator -- ../../../../base/operators.coreos.com/subscriptions/koku-metrics-operator -- ../../../../base/operators.coreos.com/subscriptions/kubevirt-hyperconverged -- ../../../../base/operators.coreos.com/subscriptions/ovms-operator -- ../../../../base/operators.coreos.com/subscriptions/pulp-operator -- ../../../../base/operators.coreos.com/subscriptions/snapscheduler -- ../../../../base/operators.coreos.com/subscriptions/strimzi -- ../../../../base/operators.coreos.com/subscriptions/vertical-pod-autoscaler -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/apirequest-count-reader -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-interceptor-opf-ci-pipelines -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-monitoring-view -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/jupyterhub-cluster -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/moc-nfs-democratic-csi-controller-rb -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/moc-nfs-democratic-csi-node-rb -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/node-labeler -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/oauth-token-access-review-opf-observatorium -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/scc-privileged-opf-ci-pipelines-aicoe-ci -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/tekton-dashboard -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/vault-server-binding -- ../../../../base/rbac.authorization.k8s.io/clusterroles/apirequest-count-read-cr -- ../../../../base/rbac.authorization.k8s.io/clusterroles/moc-nfs-democratic-csi-controller-cr -- ../../../../base/rbac.authorization.k8s.io/clusterroles/moc-nfs-democratic-csi-node-cr -- ../../../../base/rbac.authorization.k8s.io/clusterroles/node-labeler -- ../../../../base/rbac.authorization.k8s.io/clusterroles/oauth-token-access-review -- ../../../../base/rbac.authorization.k8s.io/clusterroles/tekton-dashboard -- ../../../../base/storage.k8s.io/csidrivers/org.democratic-csi.nfs -- ../../../../base/storage.k8s.io/storageclasses/moc-nfs-csi -- ../../../../base/storage.k8s.io/storageclasses/ocs-external-storagecluster-ceph-rbd -- ../../../../base/user.openshift.io/groups/cluster-admins -- ../../../../bundles/acme-operator -- ../../../../bundles/b4mad-racing -- ../../../../bundles/curator -- ../../../../bundles/fybrik -- ../../../../bundles/kfp-tekton -- ../../../../bundles/meteor-operator -- ../../../../bundles/nfd -- ../../../../bundles/openshift-pipelines -- ../../../../bundles/opf-grafana-public -- ../../../../bundles/reloader -- ../../../../bundles/seraph -- ../../../../bundles/tekton-chains -- ../../../../bundles/volsync -- ../common -- apiserver/api_server_cert.yaml -- clusterversion.yaml -- ingresscontrollers/default.yaml -- nodenetworkconfigurationpolicies/vlan-210-nfs.yaml -- nodenetworkconfigurationpolicies/vlan-211-nese.yaml -- snapshotschedules/schedule.yaml + - ../../../../base/apiextensions.k8s.io/customresourcedefinitions/extensions.dashboard.tekton.dev + - ../../../../base/apiextensions.k8s.io/customresourcedefinitions/prowjobs.prow.k8s.io + - ../../../../base/apiextensions.k8s.io/customresourcedefinitions/reports.batch.curator.openshift.io + - ../../../../base/config.openshift.io/oauths/cluster + - ../../../../base/core/configmaps/cluster-monitoring-config + - ../../../../base/core/configmaps/user-workload-monitoring-config + - ../../../../base/core/namespaces/ai-services-thanos-grpc + - ../../../../base/core/namespaces/aicoe-meteor + - ../../../../base/core/namespaces/apicurio-apicurio-registry + - ../../../../base/core/namespaces/boatrockers + - ../../../../base/core/namespaces/bu-scsaol + - ../../../../base/core/namespaces/chrisproject + - ../../../../base/core/namespaces/debezium-ui + - ../../../../base/core/namespaces/democratic-csi + - ../../../../base/core/namespaces/dex + - ../../../../base/core/namespaces/ds-github-labeler + - ../../../../base/core/namespaces/ds-ml-workflows-ws + - ../../../../base/core/namespaces/fedora + - ../../../../base/core/namespaces/koku-metrics-operator + - ../../../../base/core/namespaces/kubeflow + - ../../../../base/core/namespaces/manageiq + - ../../../../base/core/namespaces/neu-cs6620 + - ../../../../base/core/namespaces/od-demo + - ../../../../base/core/namespaces/openshift-cnv + - ../../../../base/core/namespaces/openshift-logging + - ../../../../base/core/namespaces/openshift-operators + - ../../../../base/core/namespaces/openshift-vertical-pod-autoscaler + - ../../../../base/core/namespaces/opf-alertreceiver + - ../../../../base/core/namespaces/opf-argo + - ../../../../base/core/namespaces/opf-ci-pipelines + - ../../../../base/core/namespaces/opf-ci-prow + - ../../../../base/core/namespaces/opf-ci-test-pods + - ../../../../base/core/namespaces/opf-dashboard + - ../../../../base/core/namespaces/opf-google-spark-operator + - ../../../../base/core/namespaces/opf-jupyterhub + - ../../../../base/core/namespaces/opf-jupyterhub-stage + - ../../../../base/core/namespaces/opf-kafka + - ../../../../base/core/namespaces/opf-observatorium + - ../../../../base/core/namespaces/opf-pulp + - ../../../../base/core/namespaces/opf-seldon + - ../../../../base/core/namespaces/opf-slack-first + - ../../../../base/core/namespaces/opf-superset + - ../../../../base/core/namespaces/opf-triage-party + - ../../../../base/core/namespaces/opf-trino + - ../../../../base/core/namespaces/opf-trino-stage + - ../../../../base/core/namespaces/otel-dev + - ../../../../base/core/namespaces/peribolos-as-a-service + - ../../../../base/core/namespaces/prometheus-ai-project + - ../../../../base/core/namespaces/prometheus-anomaly-detector + - ../../../../base/core/namespaces/rapidast + - ../../../../base/core/namespaces/report-system + - ../../../../base/core/namespaces/rh-curator-eval + - ../../../../base/core/namespaces/smart-village-view + - ../../../../base/core/namespaces/tekton-pipelines + - ../../../../base/core/namespaces/thoth-amun-api-prod + - ../../../../base/core/namespaces/thoth-amun-inspection-prod + - ../../../../base/core/namespaces/thoth-backend-prod + - ../../../../base/core/namespaces/thoth-bots-prod + - ../../../../base/core/namespaces/thoth-deployment-examples + - ../../../../base/core/namespaces/thoth-frontend-prod + - ../../../../base/core/namespaces/thoth-graph-prod + - ../../../../base/core/namespaces/thoth-infra-prod + - ../../../../base/core/namespaces/thoth-middletier-prod + - ../../../../base/core/namespaces/training-model + - ../../../../base/core/namespaces/tremor-demo + - ../../../../base/core/namespaces/ushift-dev + - ../../../../base/core/namespaces/varangian-test + - ../../../../base/core/persistentvolumeclaims/image-registry-storage + - ../../../../base/imageregistry.operator.openshift.io/configs/cluster + - ../../../../base/noobaa.io/backingstores + - ../../../../base/operators.coreos.com/catalogsources/operatorhubio-catalog/ + - ../../../../base/operators.coreos.com/operatorgroups/cluster-logging + - ../../../../base/operators.coreos.com/operatorgroups/koku-metrics-operator + - ../../../../base/operators.coreos.com/operatorgroups/openshift-cnv-rn5jf + - ../../../../base/operators.coreos.com/operatorgroups/openshift-vertical-pod-autoscaler + - ../../../../base/operators.coreos.com/operatorgroups/opf-monitoring + - ../../../../base/operators.coreos.com/operatorgroups/opf-pulp + - ../../../../base/operators.coreos.com/subscriptions/camel-k + - ../../../../base/operators.coreos.com/subscriptions/cert-manager + - ../../../../base/operators.coreos.com/subscriptions/cluster-logging + - ../../../../base/operators.coreos.com/subscriptions/grafana-operator + - ../../../../base/operators.coreos.com/subscriptions/koku-metrics-operator + - ../../../../base/operators.coreos.com/subscriptions/kubevirt-hyperconverged + - ../../../../base/operators.coreos.com/subscriptions/ovms-operator + - ../../../../base/operators.coreos.com/subscriptions/pulp-operator + - ../../../../base/operators.coreos.com/subscriptions/snapscheduler + - ../../../../base/operators.coreos.com/subscriptions/strimzi + - ../../../../base/operators.coreos.com/subscriptions/vertical-pod-autoscaler + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/apirequest-count-reader + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-interceptor-opf-ci-pipelines + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-monitoring-view + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/jupyterhub-cluster + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/moc-nfs-democratic-csi-controller-rb + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/moc-nfs-democratic-csi-node-rb + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/node-labeler + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/oauth-token-access-review-opf-observatorium + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/scc-privileged-opf-ci-pipelines-aicoe-ci + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/tekton-dashboard + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/vault-server-binding + - ../../../../base/rbac.authorization.k8s.io/clusterroles/apirequest-count-read-cr + - ../../../../base/rbac.authorization.k8s.io/clusterroles/moc-nfs-democratic-csi-controller-cr + - ../../../../base/rbac.authorization.k8s.io/clusterroles/moc-nfs-democratic-csi-node-cr + - ../../../../base/rbac.authorization.k8s.io/clusterroles/node-labeler + - ../../../../base/rbac.authorization.k8s.io/clusterroles/oauth-token-access-review + - ../../../../base/rbac.authorization.k8s.io/clusterroles/tekton-dashboard + - ../../../../base/storage.k8s.io/csidrivers/org.democratic-csi.nfs + - ../../../../base/storage.k8s.io/storageclasses/moc-nfs-csi + - ../../../../base/storage.k8s.io/storageclasses/ocs-external-storagecluster-ceph-rbd + - ../../../../base/user.openshift.io/groups/cluster-admins + - ../../../../bundles/acme-operator + - ../../../../bundles/b4mad-racing + - ../../../../bundles/curator + - ../../../../bundles/fybrik + - ../../../../bundles/kfp-tekton + - ../../../../bundles/meteor-operator + - ../../../../bundles/nfd + - ../../../../bundles/openshift-pipelines + - ../../../../bundles/opf-grafana-public + - ../../../../bundles/reloader + - ../../../../bundles/seraph + - ../../../../bundles/tekton-chains + - ../../../../bundles/volsync + - ../common + - apiserver/api_server_cert.yaml + - clusterversion.yaml + - ingresscontrollers/default.yaml + - nodenetworkconfigurationpolicies/vlan-210-nfs.yaml + - nodenetworkconfigurationpolicies/vlan-211-nese.yaml + - snapshotschedules/schedule.yaml +generators: + - secret-generator.yaml diff --git a/cluster-scope/overlays/prod/osc/osc-cl1/kustomization.yaml b/cluster-scope/overlays/prod/osc/osc-cl1/kustomization.yaml index 4f266e493..5da625f07 100644 --- a/cluster-scope/overlays/prod/osc/osc-cl1/kustomization.yaml +++ b/cluster-scope/overlays/prod/osc/osc-cl1/kustomization.yaml @@ -1,48 +1,48 @@ kind: Kustomization apiVersion: kustomize.config.k8s.io/v1beta1 patchesStrategicMerge: -- configmaps/cluster-monitoring-config.yaml -- configmaps/user-workload-monitoring-config.yaml -- groups/cluster-admins.yaml -- groups/kubeflow-admin.yaml -- groups/odh-admin.yaml -- groups/odh-users.yaml -- groups/pachyderm-admins.yaml -- groups/seldon-admin.yaml + - configmaps/cluster-monitoring-config.yaml + - configmaps/user-workload-monitoring-config.yaml + - groups/cluster-admins.yaml + - groups/kubeflow-admin.yaml + - groups/odh-admin.yaml + - groups/odh-users.yaml + - groups/pachyderm-admins.yaml + - groups/seldon-admin.yaml resources: -- ../../../../base/core/configmaps/cluster-monitoring-config -- ../../../../base/core/configmaps/user-workload-monitoring-config -- ../../../../base/core/namespaces/acme-operator -- ../../../../base/core/namespaces/datahub-linkedin -- ../../../../base/core/namespaces/dex -- ../../../../base/core/namespaces/kubeflow -- ../../../../base/core/namespaces/multinode-demo -- ../../../../base/core/namespaces/odh-jupyterhub -- ../../../../base/core/namespaces/odh-seldon -- ../../../../base/core/namespaces/odh-superset -- ../../../../base/core/namespaces/odh-trino -- ../../../../base/core/namespaces/odh-trino-dev -- ../../../../base/core/namespaces/opf-dashboard -- ../../../../base/core/namespaces/opf-jupyterhub-stage -- ../../../../base/core/namespaces/opf-monitoring -- ../../../../base/core/namespaces/sandbox -- ../../../../base/core/namespaces/sostrades-namespace -- ../../../../base/operators.coreos.com/subscriptions/cert-manager -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/acme-operator -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-admins-rb -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter -- ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/self-provisioners -- ../../../../base/rbac.authorization.k8s.io/clusterroles/acme-operator -- ../../../../base/user.openshift.io/groups/cluster-admins -- ../../../../base/user.openshift.io/groups/kubeflow-admin -- ../../../../base/user.openshift.io/groups/multinode-demo -- ../../../../base/user.openshift.io/groups/odh-admin -- ../../../../base/user.openshift.io/groups/odh-users -- ../../../../base/user.openshift.io/groups/pachyderm-admins -- ../../../../base/user.openshift.io/groups/seldon-admin -- ../../../../base/user.openshift.io/groups/sostrades -- ../../../../bundles/opendatahub-operator-manual -- ../../../../bundles/training-operator -- ../../../../bundles/openshift-pipelines -- apiserver -- ingresscontroller + - ../../../../base/core/configmaps/cluster-monitoring-config + - ../../../../base/core/configmaps/user-workload-monitoring-config + - ../../../../base/core/namespaces/acme-operator + - ../../../../base/core/namespaces/datahub-linkedin + - ../../../../base/core/namespaces/dex + - ../../../../base/core/namespaces/kubeflow + - ../../../../base/core/namespaces/multinode-demo + - ../../../../base/core/namespaces/odh-jupyterhub + - ../../../../base/core/namespaces/odh-seldon + - ../../../../base/core/namespaces/odh-superset + - ../../../../base/core/namespaces/odh-trino + - ../../../../base/core/namespaces/odh-trino-dev + - ../../../../base/core/namespaces/opf-dashboard + - ../../../../base/core/namespaces/opf-jupyterhub-stage + - ../../../../base/core/namespaces/opf-monitoring + - ../../../../base/core/namespaces/sandbox + - ../../../../base/core/namespaces/sostrades-namespace + - ../../../../base/operators.coreos.com/subscriptions/cert-manager + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/acme-operator + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-admins-rb + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/self-provisioners + - ../../../../base/rbac.authorization.k8s.io/clusterroles/acme-operator + - ../../../../base/user.openshift.io/groups/cluster-admins + - ../../../../base/user.openshift.io/groups/kubeflow-admin + - ../../../../base/user.openshift.io/groups/multinode-demo + - ../../../../base/user.openshift.io/groups/odh-admin + - ../../../../base/user.openshift.io/groups/odh-users + - ../../../../base/user.openshift.io/groups/pachyderm-admins + - ../../../../base/user.openshift.io/groups/seldon-admin + - ../../../../base/user.openshift.io/groups/sostrades + - ../../../../bundles/opendatahub-operator-manual + - ../../../../bundles/training-operator + - ../../../../bundles/openshift-pipelines + - apiserver + - ingresscontroller diff --git a/cluster-scope/overlays/prod/osc/osc-cl2/kustomization.yaml b/cluster-scope/overlays/prod/osc/osc-cl2/kustomization.yaml index 7d450c79d..e80e918e4 100644 --- a/cluster-scope/overlays/prod/osc/osc-cl2/kustomization.yaml +++ b/cluster-scope/overlays/prod/osc/osc-cl2/kustomization.yaml @@ -1,55 +1,53 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization - -resources: - - ../../../../base/core/configmaps/cluster-monitoring-config - - ../../../../base/core/configmaps/user-workload-monitoring-config - - ../../../../base/core/namespaces/acme-operator - - ../../../../base/core/namespaces/dex - - ../../../../base/core/namespaces/kubeflow - - ../../../../base/core/namespaces/odh-jupyterhub - - ../../../../base/core/namespaces/odh-seldon - - ../../../../base/core/namespaces/odh-superset - - ../../../../base/core/namespaces/odh-trino - - ../../../../base/core/namespaces/openshift-nfd - - ../../../../base/core/namespaces/opf-monitoring - - ../../../../base/core/namespaces/nvidia-gpu-operator - - ../../../../base/operators.coreos.com/operatorgroups/openshift-nfd - - ../../../../base/operators.coreos.com/subscriptions/nfd - - ../../../../base/config.openshift.io/oauths/cluster - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/acme-operator - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-admins-rb - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter - - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/self-provisioners - - ../../../../base/rbac.authorization.k8s.io/clusterroles/acme-operator - - ../../../../base/rbac.authorization.k8s.io/clusterroles/pytorchjobs-create-aggregate-to-admin - - ../../../../base/user.openshift.io/groups/cluster-admins - - ../../../../base/user.openshift.io/groups/kubeflow-admin - - ../../../../base/user.openshift.io/groups/odh-admin - - ../../../../base/user.openshift.io/groups/odh-users - - ../../../../base/user.openshift.io/groups/pachyderm-admins - - ../../../../base/user.openshift.io/groups/seldon-admin - - ../../../../bundles/kfp-tekton - - ../../../../bundles/opendatahub-operator-manual - - ../../../../bundles/openshift-pipelines - - ../../../../bundles/pachyderm-operator - - ../../../../bundles/reloader - - apiserver - - ingresscontroller - - machinesets - - nodefeaturediscovery - - operators.coreos.com/operatorgroups/nvidia-gpu-operator - - operators.coreos.com/subscriptions/nvidia-gpu-operator - - nvidia-gpu - +apiVersion: kustomize.config.k8s.io/v1beta1 patchesStrategicMerge: - - oauths/cluster-patch.yaml - - configmaps/cluster-monitoring-config.yaml - - configmaps/user-workload-monitoring-config.yaml - - groups/cluster-admins.yaml - - groups/kubeflow-admin.yaml - - groups/odh-admin.yaml - - groups/odh-users.yaml - - groups/seldon-admin.yaml - - groups/pachyderm-admins.yaml - - operators.coreos.com/patches/nfd-sub-patch.yaml + - oauths/cluster-patch.yaml + - configmaps/cluster-monitoring-config.yaml + - configmaps/user-workload-monitoring-config.yaml + - groups/cluster-admins.yaml + - groups/kubeflow-admin.yaml + - groups/odh-admin.yaml + - groups/odh-users.yaml + - groups/seldon-admin.yaml + - groups/pachyderm-admins.yaml + - operators.coreos.com/patches/nfd-sub-patch.yaml +resources: + - ../../../../base/core/configmaps/cluster-monitoring-config + - ../../../../base/core/configmaps/user-workload-monitoring-config + - ../../../../base/core/namespaces/acme-operator + - ../../../../base/core/namespaces/dex + - ../../../../base/core/namespaces/kubeflow + - ../../../../base/core/namespaces/odh-jupyterhub + - ../../../../base/core/namespaces/odh-seldon + - ../../../../base/core/namespaces/odh-superset + - ../../../../base/core/namespaces/odh-trino + - ../../../../base/core/namespaces/openshift-nfd + - ../../../../base/core/namespaces/opf-monitoring + - ../../../../base/core/namespaces/nvidia-gpu-operator + - ../../../../base/operators.coreos.com/operatorgroups/openshift-nfd + - ../../../../base/operators.coreos.com/subscriptions/nfd + - ../../../../base/config.openshift.io/oauths/cluster + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/acme-operator + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-admins-rb + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/cluster-reader-k8s-annotations-exporter + - ../../../../base/rbac.authorization.k8s.io/clusterrolebindings/self-provisioners + - ../../../../base/rbac.authorization.k8s.io/clusterroles/acme-operator + - ../../../../base/rbac.authorization.k8s.io/clusterroles/pytorchjobs-create-aggregate-to-admin + - ../../../../base/user.openshift.io/groups/cluster-admins + - ../../../../base/user.openshift.io/groups/kubeflow-admin + - ../../../../base/user.openshift.io/groups/odh-admin + - ../../../../base/user.openshift.io/groups/odh-users + - ../../../../base/user.openshift.io/groups/pachyderm-admins + - ../../../../base/user.openshift.io/groups/seldon-admin + - ../../../../bundles/kfp-tekton + - ../../../../bundles/opendatahub-operator-manual + - ../../../../bundles/openshift-pipelines + - ../../../../bundles/pachyderm-operator + - ../../../../bundles/reloader + - apiserver + - ingresscontroller + - machinesets + - nodefeaturediscovery + - operators.coreos.com/operatorgroups/nvidia-gpu-operator + - operators.coreos.com/subscriptions/nvidia-gpu-operator + - nvidia-gpu \ No newline at end of file