Merge commit 'fe564d72279f4ab061b961dd528623f0ed272667' as 'cluster-config'

cluster-config/components/dev-tools/overlays/default/configure-sonarqube-job.yaml

@@ -0,0 +1,33 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: configure-sonarqube
+spec:
+  template:
+    spec:
+      containers:
+        - image: registry.access.redhat.com/ubi8/ubi:8.3
+          command:
+            - /bin/bash
+            - -c
+            - |
+              curl -H 'Cache-Control: no-cache' -o /tmp/sonarqube-plugins -s ${SCRIPT_URL};
+              chmod +x /tmp/sonarqube-plugins;
+              /tmp/sonarqube-plugins
+          imagePullPolicy: Always
+          name: configure-sonarqube
+          env:
+            - name: SONARQUBE_PLUGINS
+              value: "java,javascript,dependencycheck,jacoco,pmd,scmgit"
+            - name: SONARQUBE_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: sonarqube-admin
+                  key: password
+            - name: SCRIPT_URL
+              value: "https://raw.githubusercontent.com/gnunn-gitops/cluster-config/main/components/dev-tools/scripts/sonarqube-config"
+      dnsPolicy: ClusterFirst
+      restartPolicy: OnFailure
+      serviceAccount: default
+      serviceAccountName: default
+      terminationGracePeriodSeconds: 30

cluster-config/components/dev-tools/overlays/default/kustomization.yaml

@@ -0,0 +1,48 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: dev-tools
+
+bases:
+# Nexus
+- https://github.com/redhat-cop/gitops-catalog/nexus2/base
+# Sonarqube
+- sonarqube-admin-secret.yaml
+- https://github.com/redhat-cop/gitops-catalog/sonarqube8/base
+- configure-sonarqube-job.yaml
+
+resources:
+- namespace.yaml
+
+patches:
+- patch: |-
+    - op: replace
+      path: /spec/template/spec/containers/0/image
+      value: sonarqube:lts-community
+  target:
+    kind: Deployment
+    name: sonarqube
+- patch: |-
+    - op: add
+      path: /spec/template/spec/containers/0/env
+      value:
+        - name: SONAR_JDBC_PASSWORD
+          value: kHPdpIYtdtGXeStv
+        - name: SONAR_JDBC_URL
+          value: 'jdbc:postgresql://postgresql-sonarqube/sonar'
+        - name: SONAR_JDBC_USERNAME
+          value: sonar
+        - name: SONAR_TELEMETRY_ENABLE
+          value: 'false'
+        - name: SONAR_PLUGINS_RISK_CONSENT
+          value: ACCEPTED
+  target:
+    kind: Deployment
+    name: sonarqube
+- patch: |-
+    - op: add
+      path: /spec/tls
+      value:
+        termination: edge
+  target:
+    kind: Route

cluster-config/components/dev-tools/overlays/default/namespace.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  annotations:
+    openshift.io/description: Project for development tools like nexus and sonarqube
+    openshift.io/display-name: Development Tools
+  name: dev-tools

cluster-config/components/dev-tools/overlays/default/sonarqube-admin-secret.yaml

@@ -0,0 +1,15 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: sonarqube-admin
+  namespace: dev-tools
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: doppler-cluster
+  target:
+    name: sonarqube-admin
+  data:
+    - secretKey: password
+      remoteRef:
+        key: SONARQUBE_ADMIN_PASSWORD