Squashed 'cluster-config/' content from commit 654f2390

git-subtree-dir: cluster-config
git-subtree-split: 654f23903bd1f9a27a4810bd289d165b6cfdbb0c

tenants/README.md

@@ -0,0 +1 @@
+WIP, changing to new system

tenants/product-catalog/base/github-pipeline-scc-rolebinding.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: github-pipeline-scc-rolebinding
+  namespace: product-catalog-cicd
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: pipelines-scc-clusterrole
+subjects:
+- kind: ServiceAccount
+  name: github-pipeline

tenants/product-catalog/base/kustomization.yaml

@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+helmCharts:
+- name: tenant
+  version: 0.3.4
+  repo: https://gnunn-gitops.github.io/helm-charts
+  valuesFile: values.yaml
+  namespace: gitops
+  releaseName: product-catalog
+
+resources:
+- ./monitor
+- github-pipeline-scc-rolebinding.yaml

tenants/product-catalog/base/monitor/kustomization.yaml

@@ -0,0 +1,38 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: product-catalog-monitor
+
+resources:
+- https://github.com/gnunn1/gitops-catalog/grafana-operator/overlays/user-app
+#- github.com/redhat-cop/gitops-catalog/grafana-operator/overlays/user-app
+
+# Patch in namespace for Argo CD that is managing this namespace
+patches:
+- patch: |-
+    - op: add
+      path: /spec/config/users
+      value:
+        default_theme: light
+  target:
+    kind: Grafana
+    name: grafana
+- patch: |-
+    - op: add
+      path: /subjects/0/namespace
+      value: product-catalog-monitor
+    - op: replace
+      path: /metadata/name
+      value: cluster-monitoring-view-product-catalog-monitor
+  target:
+    group: rbac.authorization.k8s.io
+    kind: ClusterRoleBinding
+    name: cluster-monitoring-view
+- patch: |-
+    - op: add
+      path: /subjects/0/namespace
+      value: product-catalog-monitor
+  target:
+    group: rbac.authorization.k8s.io
+    kind: RoleBinding
+    name: grafana-proxy

tenants/product-catalog/base/values.yaml

@@ -0,0 +1,71 @@
+tenant: product-catalog
+
+default:
+  argocd:
+    cluster:
+      name: in-cluster
+  annotations:
+    app.openshift.io/vcs-uri: https://github.com/gnunn-gitops/product-catalog
+    app.openshift.io/vcs-ref: main
+  labels:
+    argocd.argoproj.io/managed-by: gitops
+    tenant: product-catalog
+  networkPolicy: true
+  rbac:
+    adminGroups:
+      - product-catalog-admins
+    editGroups:
+      - product-catalog-users
+
+argocd:
+  namespace: gitops
+  sourceRepos:
+    - '*'
+  adminGroups:
+    - product-catalog-admins
+  userGroups:
+    - product-catalog-users
+  pipelineGroups:
+    - product-catalog-pipeline
+
+externalSecrets:
+  tenantClusterSecretStore: doppler-cluster
+  tenantSecretNamespace: tenant-secrets
+
+namespaces:
+
+  dev:
+    quota: medium
+    annotations:
+      openshift.io/description: Project for development environment of product catalog application
+      openshift.io/display-name: Product Catalog Development
+
+  test:
+    quota: medium
+    annotations:
+      openshift.io/description: Project for test environment of product catalog application
+      openshift.io/display-name: Product Catalog Test
+
+  prod:
+    quota: medium
+    annotations:
+      openshift.io/description: Project for production environment of product catalog application
+      openshift.io/display-name: Product Catalog Prod
+
+  cicd:
+    externalSecrets:
+      tenantTokenKey: TENANT_PRODUCT_CATALOG_DOPPLER_TOKEN
+    annotations:
+      openshift.io/description: Project for ci/cd tools for product catalog application
+      openshift.io/display-name: Product Catalog CI/CD
+
+  gitops:
+    annotations:
+      openshift.io/description: Project for gitops tool for product catalog team
+      openshift.io/display-name: Product Catalog GitOps
+
+  monitor:
+    annotations:
+      openshift.io/description: Project for monitoring tools of product catalog application
+      openshift.io/display-name: Product Catalog Monitor
+    operatorGroup: true

tenants/rollouts-demo/base/analysis-auth-monitoring.yaml

@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: analysis-monitoring-view
+  namespace: rollouts-demo-prod
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-monitoring-view
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: rollouts-demo-prod

tenants/rollouts-demo/base/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+helmCharts:
+- name: tenant
+  version: 0.3.4
+  repo: https://gnunn-gitops.github.io/helm-charts
+  valuesFile: values.yaml
+  namespace: gitops
+  releaseName: product-catalog
+
+resources:
+- analysis-auth-monitoring.yaml

tenants/rollouts-demo/base/values.yaml

@@ -0,0 +1,54 @@
+tenant: rollouts-demo
+
+default:
+  argocd:
+    cluster:
+      name: in-cluster
+  labels:
+    argocd.argoproj.io/managed-by: gitops
+    tenant: rollouts-demo
+  networkPolicy: true
+  rbac:
+    adminGroups:
+      - rollouts-demo-admins
+    editGroups:
+      - rollouts-demo-users
+
+argocd:
+  namespace: gitops
+  sourceRepos:
+    - '*'
+  adminGroups:
+    - rollouts-demo-admins
+  userGroups:
+    - rollouts-demo-users
+  pipelineGroups:
+    - rollouts-demo-pipeline
+
+externalSecrets:
+  tenantClusterSecretStore: doppler-cluster
+  tenantSecretNamespace: tenant-secrets
+
+namespaces:
+
+  dev:
+    annotations:
+      openshift.io/description: Project for dev environment of rollouts demo application
+      openshift.io/display-name: Rollouts Demo Development
+
+  prod:
+    annotations:
+      openshift.io/description: Project for prod environment of rollouts demo application
+      openshift.io/display-name: Rollouts Demo Production
+
+  cicd:
+    externalSecrets:
+      tenantTokenKey: TENANT_ROLLOUTS_DEMO_DOPPLER_TOKEN
+    annotations:
+      openshift.io/description: Project for ci/cd tools for rollouts demo application
+      openshift.io/display-name: Rollouts Demo CI/CD
+
+  gitops:
+    annotations:
+      openshift.io/description: Project for gitops tool for rollouts demo team
+      openshift.io/display-name: Rollouts Demo GitOps