UPSTREAM: <drop>: make manifests

Signed-off-by: Todd Short <[email protected]>

Author: tmshort

openshift/catalogd/manifests-experimental.yaml

@@ -1,16 +1,20 @@
+---
+# Source: olmv1/templates/namespace.yml
 apiVersion: v1
 kind: Namespace
 metadata:
   annotations:
+    olm.operatorframework.io/feature-set: experimental
     openshift.io/node-selector: ""
     workload.openshift.io/allowed: management
   labels:
-    app.kubernetes.io/part-of: olm
-    openshift.io/cluster-monitoring: "true"
+    app.kubernetes.io/name: catalogd
     pod-security.kubernetes.io/audit: privileged
     pod-security.kubernetes.io/audit-version: latest
     pod-security.kubernetes.io/enforce: privileged
     pod-security.kubernetes.io/enforce-version: latest
     pod-security.kubernetes.io/warn: privileged
     pod-security.kubernetes.io/warn-version: latest
+    app.kubernetes.io/part-of: olm
+    openshift.io/cluster-monitoring: "true"
   name: openshift-catalogd

openshift/catalogd/manifests-experimental/00-namespace-openshift-catalogd.yml

@@ -1,7 +1,13 @@
 ---
+# Source: olmv1/templates/networkpolicy/networkpolicy-olmv1-system-catalogd-controller-manager.yml
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
+  annotations:
+    olm.operatorframework.io/feature-set: experimental
+  labels:
+    app.kubernetes.io/name: catalogd
+    app.kubernetes.io/part-of: olm
   name: catalogd-controller-manager
   namespace: openshift-catalogd
 spec:

openshift/catalogd/manifests/20-networkpolicy-openshift-catalogd-catalogd-controller-manager.yml renamed to openshift/catalogd/manifests-experimental/01-networkpolicy-openshift-catalogd-catalogd-controller-manager.yml

@@ -0,0 +1,17 @@
+---
+# Source: olmv1/templates/networkpolicy/networkpolicy-olmv1-system-default-deny-all-traffic.yml
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  annotations:
+    olm.operatorframework.io/feature-set: experimental
+  labels:
+    app.kubernetes.io/name: catalogd
+    app.kubernetes.io/part-of: olm
+  name: catalogd-default-deny-all-traffic
+  namespace: openshift-catalogd
+spec:
+  podSelector: {}
+  policyTypes:
+    - Ingress
+    - Egress

openshift/catalogd/manifests-experimental/02-networkpolicy-openshift-catalogd-catalogd-default-deny-all-traffic.yml

@@ -1,7 +1,10 @@
 ---
+# Source: olmv1/templates/serviceaccount-olmv1-system-common-controller-manager.yml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
+  annotations:
+    olm.operatorframework.io/feature-set: experimental
   labels:
     app.kubernetes.io/name: catalogd
     app.kubernetes.io/part-of: olm

openshift/catalogd/manifests/02-serviceaccount-openshift-catalogd-catalogd-controller-manager.yml renamed to openshift/catalogd/manifests-experimental/03-serviceaccount-openshift-catalogd-catalogd-controller-manager.yml

@@ -0,0 +1,13 @@
+---
+# Source: olmv1/templates/openshift/configmap-trusted-ca.yml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  annotations:
+    olm.operatorframework.io/feature-set: experimental
+  labels:
+    config.openshift.io/inject-trusted-cabundle: "true"
+    app.kubernetes.io/name: catalogd
+    app.kubernetes.io/part-of: olm
+  name: catalogd-trusted-ca-bundle
+  namespace: openshift-catalogd

openshift/catalogd/manifests-experimental/04-configmap-openshift-catalogd-catalogd-trusted-ca-bundle.yml

@@ -1,4 +1,5 @@
 ---
+# Source: olmv1/templates/crds/customresourcedefinition-clustercatalogs.olm.operatorframework.io.yml
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:

openshift/catalogd/manifests-experimental/04-role-openshift-catalogd-catalogd-manager-role.yml

@@ -1,8 +1,14 @@
 ---
+# Source: olmv1/templates/rbac/clusterrole-catalogd-manager-role.yml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: catalogd-manager-role
+  labels:
+    app.kubernetes.io/name: catalogd
+    app.kubernetes.io/part-of: olm
+  annotations:
+    olm.operatorframework.io/feature-set: experimental
 rules:
   - apiGroups:
       - olm.operatorframework.io
@@ -32,9 +38,9 @@ rules:
       - update
   - apiGroups:
       - security.openshift.io
-    resourceNames:
-      - privileged
     resources:
       - securitycontextconstraints
+    resourceNames:
+      - privileged
     verbs:
       - use

openshift/catalogd/manifests-experimental/01-customresourcedefinition-clustercatalogs.olm.operatorframework.io.yml renamed to openshift/catalogd/manifests-experimental/05-customresourcedefinition-clustercatalogs.olm.operatorframework.io.yml

@@ -1,7 +1,10 @@
 ---
+# Source: olmv1/templates/rbac/clusterrole-common-metrics-reader.yml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
+  annotations:
+    olm.operatorframework.io/feature-set: experimental
   labels:
     app.kubernetes.io/name: catalogd
     app.kubernetes.io/part-of: olm