bundle.yaml

apiVersion: v1
kind: Namespace
metadata:
  labels:
    control-plane: sumologic-kubernetes-collection-helm-operator
  name: sumologic-system
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: sumologiccollections.helm-operator.sumologic.com
spec:
  group: helm-operator.sumologic.com
  names:
    kind: SumologicCollection
    listKind: SumologicCollectionList
    plural: sumologiccollections
    singular: sumologiccollection
  scope: Namespaced
  versions:
  - name: v1alpha1
    schema:
      openAPIV3Schema:
        description: SumologicCollection is the Schema for the sumologiccollections
          API
        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          kind:
            description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
            type: string
          metadata:
            type: object
          spec:
            description: Spec defines the desired state of SumologicCollection
            type: object
            x-kubernetes-preserve-unknown-fields: true
          status:
            description: Status defines the observed state of SumologicCollection
            type: object
            x-kubernetes-preserve-unknown-fields: true
        type: object
    served: true
    storage: true
    subresources:
      status: {}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: sumologic-helm-operator
  namespace: sumologic-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: sumologic-leader-election-role
  namespace: sumologic-system
rules:
- apiGroups:
  - ""
  - coordination.k8s.io
  resources:
  - configmaps
  - leases
  verbs:
  - get
  - list
  - watch
  - create
  - update
  - patch
  - delete
- apiGroups:
  - ""
  resources:
  - events
  verbs:
  - create
  - patch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: sumologic-metrics-reader
rules:
- nonResourceURLs:
  - /metrics
  verbs:
  - get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: sumologic-operator-role
rules:
- apiGroups:
  - apps
  resources:
  - configmaps
  - deployments
  - daemonsets
  - endpoints
  - events
  - namespaces
  - nodes
  - pods
  - replicasets
  - services
  - statefulsets
  verbs:
  - '*'
- apiGroups:
  - events.k8s.io
  resources:
  - configmaps
  - daemonsets
  - deployments
  - endpoints
  - events
  - namespaces
  - nodes
  - pods
  - replicasets
  - services
  - statefulsets
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - batch
  resources:
  - jobs
  - cronjobs
  verbs:
  - '*'
- apiGroups:
  - helm-operator.sumologic.com
  resources:
  - sumologiccollections
  - sumologiccollections/status
  - sumologiccollections/finalizers
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- apiGroups:
  - route.openshift.io
  resources:
  - routes
  verbs:
  - '*'
- apiGroups:
  - ""
  resources:
  - configmaps
  - deployments
  - daemonsets
  - endpoints
  - events
  - limitranges
  - lists
  - namespaces
  - nodes
  - nodes/metrics
  - nodes/stats
  - persistentvolumeclaims
  - persistentvolumes
  - persistentvolumeclaims/finalizers
  - persistentvolumes/finalizers
  - pods
  - pods/finalizers
  - pods/exec
  - pods/log
  - resourcequotas
  - replicasets
  - replicationcontrollers
  - serviceaccounts
  - secrets
  - secrets/finalizers
  - services
  - secrets/finalizers
  - statefulsets
  verbs:
  - '*'
- apiGroups:
  - networking.k8s.io
  resources:
  - ingresses
  verbs:
  - '*'
- apiGroups:
  - networking.k8s.io
  resources:
  - networkpolicies
  verbs:
  - '*'
- apiGroups:
  - networkpolicies.networking.k8s.io
  resources:
  - networkpolicies
  verbs:
  - '*'
- apiGroups:
  - security.openshift.io
  resources:
  - securitycontextconstraints
  verbs:
  - '*'
- apiGroups:
  - apiextensions.k8s.io
  resources:
  - customresourcedefinitions
  verbs:
  - '*'
- apiGroups:
  - policy
  resources:
  - poddisruptionbudgets
  - podsecuritypolicies
  verbs:
  - '*'
- apiGroups:
  - rbac.authorization.k8s.io
  resources:
  - clusterrolebindings
  - clusterroles
  - roles
  - rolebindings
  verbs:
  - '*'
- apiGroups:
  - extensions
  resources:
  - configmaps
  - daemonsets
  - deployments
  - endpoints
  - events
  - ingresses
  - namespaces
  - nodes
  - pods
  - replicasets
  - replicationcontrollers
  - services
  - statefulsets
  verbs:
  - get
  - list
  - watch
- apiGroups:
  - extensions
  resources:
  - podsecuritypolicies
  verbs:
  - use
- apiGroups:
  - monitoring.coreos.com
  resources:
  - alertmanagerconfigs
  - alertmanagers
  - alertmanagers/finalizers
  - podmonitors
  - probes
  - prometheuses
  - prometheuses/finalizers
  - prometheusrules
  - servicemonitors
  - thanosrulers
  - thanosrulers/finalizers
  verbs:
  - '*'
- apiGroups:
  - admissionregistration.k8s.io
  resources:
  - mutatingwebhookconfigurations
  - validatingwebhookconfigurations
  verbs:
  - '*'
- apiGroups:
  - autoscaling
  resources:
  - horizontalpodautoscalers
  verbs:
  - '*'
- apiGroups:
  - certificates.k8s.io
  resources:
  - certificatesigningrequests
  verbs:
  - '*'
- apiGroups:
  - storage.k8s.io
  resources:
  - storageclasses
  - volumeattachments
  verbs:
  - list
  - watch
- nonResourceURLs:
  - /metrics/cadvisor
  - /metrics
  verbs:
  - get
- nonResourceURLs:
  - /healthz/*
  verbs:
  - get
- apiGroups:
  - apiregistration.k8s.io
  resources:
  - apiservices
  verbs:
  - get
- apiGroups:
  - machineconfiguration.openshift.io
  resources:
  - machineconfigs
  verbs:
  - '*'
- apiGroups:
  - tailing-sidecar.sumologic.com
  resources:
  - tailingsidecars
  - tailingsidecars/status
  verbs:
  - '*'
- apiGroups:
  - scheduling.k8s.io
  resources:
  - priorityclasses
  verbs:
  - '*'
- apiGroups:
  - opentelemetry.io
  resources:
  - instrumentations
  verbs:
  - '*'
- apiGroups:
  - opentelemetry.io
  resources:
  - opentelemetrycollectors
  verbs:
  - '*'
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: sumologic-proxy-role
rules:
- apiGroups:
  - authentication.k8s.io
  resources:
  - tokenreviews
  verbs:
  - create
- apiGroups:
  - authorization.k8s.io
  resources:
  - subjectaccessreviews
  verbs:
  - create
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: sumologic-leader-election-rolebinding
  namespace: sumologic-system
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: sumologic-leader-election-role
subjects:
- kind: ServiceAccount
  name: sumologic-helm-operator
  namespace: sumologic-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: sumologic-operator-rolebinding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: sumologic-operator-role
subjects:
- kind: ServiceAccount
  name: sumologic-helm-operator
  namespace: sumologic-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: sumologic-proxy-rolebinding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: sumologic-proxy-role
subjects:
- kind: ServiceAccount
  name: sumologic-helm-operator
  namespace: sumologic-system
---
apiVersion: v1
data:
  controller_manager_config.yaml: |
    apiVersion: controller-runtime.sigs.k8s.io/v1alpha1
    kind: ControllerManagerConfig
    health:
      healthProbeBindAddress: :8081
    metrics:
      bindAddress: 127.0.0.1:8080
    leaderElection:
      leaderElect: true
      resourceName: 811c9dc5.sumologic.com
kind: ConfigMap
metadata:
  name: sumologic-operator-config
  namespace: sumologic-system
---
apiVersion: v1
kind: Service
metadata:
  labels:
    control-plane: sumologic-kubernetes-collection-helm-operator
  name: sumologic-helm-operator-metrics-service
  namespace: sumologic-system
spec:
  ports:
  - name: https
    port: 8443
    targetPort: https
  selector:
    control-plane: sumologic-kubernetes-collection-helm-operator
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    control-plane: sumologic-kubernetes-collection-helm-operator
  name: sumologic-helm-operator
  namespace: sumologic-system
spec:
  replicas: 1
  selector:
    matchLabels:
      control-plane: sumologic-kubernetes-collection-helm-operator
  template:
    metadata:
      labels:
        control-plane: sumologic-kubernetes-collection-helm-operator
    spec:
      containers:
      - args:
        - --secure-listen-address=0.0.0.0:8443
        - --upstream=http://127.0.0.1:8080/
        - --logtostderr=true
        - --v=10
        image: registry.connect.redhat.com/sumologic/kube-rbac-proxy:v0.18.0-ubi
        name: kube-rbac-proxy
        ports:
        - containerPort: 8443
          name: https
      - args:
        - --health-probe-bind-address=:8081
        - --metrics-bind-address=127.0.0.1:8080
        - --leader-elect
        - --leader-election-id=sumologic-kubernetes-collection-helm-operator
        env:
        - name: WATCH_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: OPERATOR_NAME
          value: sumologic-kubernetes-collection-helm-operator
        - name: RELATED_IMAGE_AUTOINSTRUMENTATION_DOTNET
          value: registry.connect.redhat.com/sumologic/autoinstrumentation-dotnet@sha256:e99182dd7c0c8611cdc852bcc2e0866e635077b50b7e739022269cc8721f4109
        - name: RELATED_IMAGE_AUTOINSTRUMENTATION_JAVA
          value: registry.connect.redhat.com/sumologic/autoinstrumentation-java@sha256:7fdb03d08173964f234f8262e872f67a42527173195b2e39cf56581c6a784f92
        - name: RELATED_IMAGE_AUTOINSTRUMENTATION_NODEJS
          value: registry.connect.redhat.com/sumologic/autoinstrumentation-nodejs@sha256:f6d2109be49cbfc725ca7f0ebbc06b74c699e55a7f18690e9959de8bcf294028
        - name: RELATED_IMAGE_AUTOINSTRUMENTATION_PYTHON
          value: registry.connect.redhat.com/sumologic/autoinstrumentation-python@sha256:2cf6a7fb9680539a1c352c24827cd01e152e27d865916e6112a07c8c94f32973
        - name: RELATED_IMAGE_BUSYBOX
          value: registry.connect.redhat.com/sumologic/busybox@sha256:960945a7d586d7d2799311af97f4d17affb9f7c39c818d7912f138ae164664fa
        - name: RELATED_IMAGE_KUBE_RBAC_PROXY
          value: registry.connect.redhat.com/sumologic/kube-rbac-proxy@sha256:6081af347a86a9cd51232f60e9f5567bdaddf0377927a462ced91524ce80bf95
        - name: RELATED_IMAGE_KUBE_STATE_METRICS
          value: registry.connect.redhat.com/sumologic/kube-state-metrics@sha256:473614d1c0de0f9f0b5314eab40d3172f5180332a2009be590ce474b85cb898e
        - name: RELATED_IMAGE_KUBERNETES_SETUP
          value: registry.connect.redhat.com/sumologic/kubernetes-setup@sha256:157290d458724d63dde2d8b2b81b8184618ae07de6776f56ab33f3e3cb0566b5
        - name: RELATED_IMAGE_KUBERNETES_TOOLS_KUBECTL
          value: registry.connect.redhat.com/sumologic/kubernetes-tools-kubectl@sha256:d3155b864cc74f327adedf7d013a8f0fcb11c2e73a5655b7cafa848824e80172
        - name: RELATED_IMAGE_METRICS_SERVER
          value: registry.connect.redhat.com/sumologic/metrics-server@sha256:d57ba890f7ea80a3afef709f6aa60b2ee989bc575e81565bfa664cd2fcfd2980
        - name: RELATED_IMAGE_NGINX_UNPRIVILEGED
          value: registry.connect.redhat.com/sumologic/nginx-unprivileged@sha256:9aef85eed423d0bf6bce16eb0dce3d56d18c0aa7929627ed4fe7aef7aa749c1f
        - name: RELATED_IMAGE_NODE_EXPORTER
          value: registry.connect.redhat.com/sumologic/node-exporter@sha256:7acec4473ddf508514dca1d08335cfd071e345d7eca660793d59e09ef9f0491f
        - name: RELATED_IMAGE_OPENTELEMETRY_OPERATOR
          value: registry.connect.redhat.com/sumologic/opentelemetry-operator@sha256:a714dd6995f5c3f479488c8ca281fe1a5dd92b1103c4b00b9c68f47826172267
        - name: RELATED_IMAGE_PROMETHEUS_CONFIG_RELOADER
          value: registry.connect.redhat.com/sumologic/prometheus-config-reloader@sha256:03d3ca5b7c96c88ff8de363371d89ead3be6ac0b74653da1ac2231bd1b0e386d
        - name: RELATED_IMAGE_PROMETHEUS_OPERATOR
          value: registry.connect.redhat.com/sumologic/prometheus-operator@sha256:f98f265fd0609da354ca6cbb6ea3b56a88ebccfb2daff14896f7004aa4ffa174
        - name: RELATED_IMAGE_PROMETHEUS
          value: registry.connect.redhat.com/sumologic/prometheus@sha256:92c173c757018178920385bbb93d826ae5b5cab4706ac6b239e919ae6b3520b4
        - name: RELATED_IMAGE_SUMOLOGIC_OTEL_COLLECTOR
          value: registry.connect.redhat.com/sumologic/sumologic-otel-collector@sha256:986d8432eb84cad7c2ac69bdf5a48831a76d23d9d9cb08595e091b4f1f802533
        - name: RELATED_IMAGE_TAILING_SIDECAR_OPERATOR
          value: registry.connect.redhat.com/sumologic/tailing-sidecar-operator@sha256:faf736cd82ceee3e97990da0346487e51ddc9fbc9a0647042f640d2012ef9f35
        - name: RELATED_IMAGE_TAILING_SIDECAR
          value: registry.connect.redhat.com/sumologic/tailing-sidecar@sha256:48203fa961951147802711ed4769ab2d42e4adb4593a6e50c639d9cc4fb75242
        - name: RELATED_IMAGE_TELEGRAF_OPERATOR
          value: registry.connect.redhat.com/sumologic/telegraf-operator@sha256:88c3b5d9f8e9a419131c39e6e22c5aa7cfaab5157fe4c5cc928574f5a3cfda2c
        - name: RELATED_IMAGE_TELEGRAF
          value: registry.connect.redhat.com/sumologic/telegraf@sha256:ca396dad12a289aea9136da713020d31b179e9f49aae61c48332d61086d1d059
        - name: RELATED_IMAGE_THANOS
          value: registry.connect.redhat.com/sumologic/thanos@sha256:323ff1e3500fdbf594acfca19639911b5ed8d0a527b9742c264d5f5b1ce5d4cc
        image: registry.connect.redhat.com/sumologic/sumologic-kubernetes-collection-helm-operator:4.9.0-2
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8081
          initialDelaySeconds: 15
          periodSeconds: 20
        name: operator
        readinessProbe:
          httpGet:
            path: /readyz
            port: 8081
          initialDelaySeconds: 5
          periodSeconds: 10
        resources:
          limits:
            cpu: 2000m
            memory: 2Gi
          requests:
            cpu: 500m
            memory: 100Mi
        securityContext:
          allowPrivilegeEscalation: false
      securityContext:
        runAsNonRoot: true
      serviceAccountName: sumologic-helm-operator
      terminationGracePeriodSeconds: 10