99e93bc: update public repo contents

Author: Rodrigo Valin

README.md

@@ -26,7 +26,7 @@ You can discuss this integration in our new [Community Forum](https://community.
 
 [Troubleshooting Kubernetes Operator](https://docs.opsmanager.mongodb.com/current/reference/troubleshooting/k8s/)
 
-[Known Issues for Kubernetes Operator](https://docs.opsmanager.mongodb.com/current/reference/known-issues-k8s-beta)
+[Known Issues for Kubernetes Operator](https://docs.mongodb.com/kubernetes-operator/stable/reference/known-issues/)
 
 ## Requirements ##
 

crds.yaml

@@ -1,7 +1,5 @@
 ---
 # Source: mongodb-enterprise-operator/templates/crds.yaml
-
----
 apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
@@ -412,9 +410,8 @@ spec:
             shardCount:
               minimum: 1
               type: integer
-
-
 ---
+# Source: mongodb-enterprise-operator/templates/crds.yaml
 apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
@@ -495,6 +492,7 @@ spec:
               - username
               - db
 ---
+# Source: mongodb-enterprise-operator/templates/crds.yaml
 apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
@@ -830,10 +828,12 @@ spec:
             - version
             - applicationDatabase
 
+
 # This ClusterRole is necessary in order to use validating webhooks—these will
 # prevent you from applying a variety of invalid resource definitions. The
 # validating webhooks are optional so this can be removed if necessary.
 ---
+# Source: mongodb-enterprise-operator/templates/crds.yaml
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -848,5 +848,3 @@ rules:
   - create
   - update
   - delete
-
-

helm_chart/Chart.yaml

@@ -1,6 +1,6 @@
 name: mongodb-enterprise-operator
 description: MongoDB Kubernetes Enterprise Operator
-version: 1.5.1
+version: 1.5.2
 kubeVersion: '>=1.13'
 keywords:
 - mongodb

helm_chart/templates/crds.yaml

@@ -1,4 +1,5 @@
-{{ if eq .Values.createCrds true }}
+{{- if .Values.createCrds }}
+{{- if has "mongodb" (.Values.operator.watchedResources | default (tuple "mongodb")) }}
 ---
 apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
@@ -31,8 +32,10 @@ spec:
       type: date
       description: The time since the MongoDB resource was created.
       JSONPath: .metadata.creationTimestamp
+{{- if .Values.subresourceEnabled }}
   subresources:
     status: {}
+{{- end }}
   validation:
     openAPIV3Schema:
       type: object
@@ -410,7 +413,8 @@ spec:
             shardCount:
               minimum: 1
               type: integer
-
+{{- end }}
+{{- if has "mongodbusers" (.Values.operator.watchedResources | default (tuple "mongodbusers")) }}
 
 ---
 apiVersion: apiextensions.k8s.io/v1beta1
@@ -436,8 +440,10 @@ spec:
       type: date
       description: The time since the MongoDB User resource was created
       JSONPath: .metadata.creationTimestamp
+{{- if .Values.subresourceEnabled }}
   subresources:
     status: {}
+{{- end }}
   validation:
       openAPIV3Schema:
         type: object
@@ -492,6 +498,9 @@ spec:
             required:
               - username
               - db
+{{- end }}
+{{- if has "opsmanagers" (.Values.operator.watchedResources | default (tuple "opsmanagers")) }}
+
 ---
 apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
@@ -536,8 +545,10 @@ spec:
       type: string
       description: Warnings
       JSONPath: .status.warnings
+{{- if .Values.subresourceEnabled }}
   subresources:
     status: {}
+{{- end }}
   validation:
     openAPIV3Schema:
       type: object
@@ -827,6 +838,9 @@ spec:
           required:
             - version
             - applicationDatabase
+{{- end }}
+{{- end }}
+
 
 # This ClusterRole is necessary in order to use validating webhooks—these will
 # prevent you from applying a variety of invalid resource definitions. The
@@ -846,5 +860,3 @@ rules:
   - create
   - update
   - delete
-
-{{ end }}

helm_chart/templates/database-roles.yaml

@@ -20,6 +20,17 @@ metadata:
   namespace: {{ .Values.namespace }}
   {{- end }}
 
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: mongodb-enterprise-ops-manager
+  {{- if not (eq (.Values.operator.watchNamespace | default "*") "*") }}
+  namespace: {{ .Values.operator.watchNamespace }}
+  {{- else }}
+  namespace: {{ .Values.namespace }}
+  {{- end }}
+
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1

helm_chart/templates/operator-roles.yaml

@@ -47,16 +47,17 @@ rules:
   - mongodb.com
   resources:
   - mongodb
-  - mongodb/status
   - mongodb/finalizers
   - mongodbusers
-  - mongodbusers/status
   - opsmanagers
   - opsmanagers/finalizers
+{{- if .Values.subresourceEnabled }}
+  - mongodb/status
+  - mongodbusers/status
   - opsmanagers/status
+{{- end }}
   verbs:
   - "*"
-
 # This ClusterRoleBinding is necessary in order to use validating
 # webhooks—these will prevent you from applying a variety of invalid resource
 # definitions. The validating webhooks are optional so this can be removed if

helm_chart/templates/operator.yaml

@@ -26,17 +26,18 @@ spec:
       imagePullSecrets:
       - name: {{ .Values.registry.imagePullSecrets }}
 {{- end }}
-
       containers:
       - name: {{ .Values.operator.name }}
         image: {{ .Values.registry.operator }}/{{ .Values.operator.name }}:{{ .Values.operator.version }}
         imagePullPolicy: {{ .Values.registry.pullPolicy }}
+        {{- if .Values.operator.watchedResources }}
         args:
-          - "-watch-resource=mongodb"
-          - "-watch-resource=opsmanagers"
-          - "-watch-resource=mongodbusers"
+          {{- range .Values.operator.watchedResources }}
+          - "-watch-resource={{ . }}"
+          {{- end }}
         command:
           - "/usr/local/bin/mongodb-enterprise-operator"
+        {{- end }}
         env:
         - name: OPERATOR_ENV
           value: {{ .Values.operator.env }}
@@ -74,7 +75,6 @@ spec:
           value: {{ .Values.registry.pullPolicy }}
         - name: APPDB_IMAGE_REPOSITORY
           value: {{ .Values.registry.appDb }}/{{ .Values.appDb.name }}
-
 {{- if .Values.registry.imagePullSecrets }}
         - name: IMAGE_PULL_SECRETS
           value: {{ .Values.registry.imagePullSecrets }}

helm_chart/values-openshift.yaml

@@ -15,7 +15,13 @@ operator:
   name: enterprise-operator
 
   # Version of mongodb-enterprise-operator and mongodb-enterprise-database images
-  version: 1.5.1
+  version: 1.5.2
+
+  # The Custom Resources that will be watched by the Operator. Needs to be changed if only some of the CRDs are installed
+  watchedResources:
+  - mongodb
+  - opsmanagers
+  - mongodbusers
 
 database:
   name: enterprise-database
@@ -47,3 +53,7 @@ registry:
 # Set this to true if the operator will require Kubernetes CA
 # infrastructure to generate TLS certificates.
 needsCAInfrastructure: true
+
+# Set this to false to disable subresource utilization
+# It might be required on some versions of Openshift
+subresourceEnabled: true

helm_chart/values.yaml

@@ -16,7 +16,13 @@ operator:
   name: mongodb-enterprise-operator
 
   # Version of mongodb-enterprise-operator and mongodb-enterprise-database images
-  version: 1.5.1
+  version: 1.5.2
+
+  # The Custom Resources that will be watched by the Operator. Needs to be changed if only some of the CRDs are installed
+  watchedResources:
+  - mongodb
+  - opsmanagers
+  - mongodbusers
 
 database:
   name: mongodb-enterprise-database
@@ -46,7 +52,10 @@ registry:
   initAppDb: quay.io/mongodb
   appDb: quay.io/mongodb
 
-
 # Set this to true if the operator will require Kubernetes CA
 # infrastructure to generate TLS certificates.
 needsCAInfrastructure: true
+
+# Set this to false to disable subresource utilization
+# It might be required on some versions of Openshift
+subresourceEnabled: true