feat/dev/openshift

[roivaz]

Several features that improve the local-setup to make it usable also in a publicly accessible Openshift cluster:

• Adds an option to retrieve secret values from a known seed secret. This finally breaks the dependence of saas-operator from Vault. The override option was only usable in a local environment because secrets shouldn't be hard coded in a setup where the endpoints are published to the internet. Example usage:

saas-operator/config/local-setup/workloads/backend.yaml

Lines 2 to 20 in 3c91c7e

	apiVersion: saas.3scale.net/v1alpha1
	kind: Backend
	metadata:
	name: backend
	spec:
	image:
	name: REPLACE
	tag: REPLACE
	pullSecretName: pull-secrets
	pullPolicy: Always
	config:
	masterServiceID: 1
	internalAPIPassword: {fromSeed: {}}
	internalAPIUser: {fromSeed: {}}
	rackEnv: preview
	redisQueuesDSN: "redis://backend-redis:6379/1"
	redisStorageDSN: "redis://backend-redis:6379/0"
	systemEventsHookPassword: {}
	systemEventsHookURL: {override: https://REPLACE/master/events/import }

• Reworks the local-setup to use a tekton pipeline for database setup. See:

saas-operator/config/local-setup/workloads/system.yaml

Lines 115 to 164 in 3c91c7e

	tasks:
	- name: system-db-setup
	description: |-
	Creates the database, loads the schema, and initializes with the
	seed data (use system-db-drop to drop the database first). It drops
	the current database if one exists.
	config:
	command: ["container-entrypoint"]
	args: ["bundle", "exec", "rake", "db:drop", "db:setup"]
	extraEnv:
	- name: MASTER_DOMAIN
	value: multitenant-admin
	- name: MASTER_ACCESS_TOKEN
	valueFrom:
	secretKeyRef:
	name: saas-seed
	key: system-master-access-token
	- name: MASTER_PASSWORD
	valueFrom:
	secretKeyRef:
	name: saas-seed
	key: system-master-password
	- name: MASTER_USER
	valueFrom:
	secretKeyRef:
	name: saas-seed
	key: system-master-user
	- name: TENANT_NAME
	value: provider
	- name: PROVIDER_NAME
	value: "3scale SaaS Dev Provider"
	- name: USER_LOGIN
	valueFrom:
	secretKeyRef:
	name: saas-seed
	key: system-tenant-user
	- name: USER_PASSWORD
	valueFrom:
	secretKeyRef:
	name: saas-seed
	key: system-tenant-password
	- name: ADMIN_ACCESS_TOKEN
	valueFrom:
	secretKeyRef:
	name: saas-seed
	key: system-tenant-token
	- name: USER_EMAIL
	value: "admin@cluster.local"
	- name: DISABLE_DATABASE_ENVIRONMENT_CHECK
	value: "1"

• local-setup kustomize config hard coded secrets have been removed. The user of the config is now expected to provide a file with the secret values. Check https://github.com/3scale-ops/saas-operator/blob/feat/dev/openshift/config/local-setup/README.md for more instructions.

• github actions have been upgraded

• Several options have been added to the System CR so domains can be properly configured via the CR.

/kind feature
/priority important-soon
/assign

[roivaz]

/retitle feat/dev/openshift

[3scale-robot]

LGTM label has been added.

Git tree hash: 74267bbaf444e57b9b820dcbfa97ed087dc1d896

[roivaz]

/approve

[3scale-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: roivaz

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [roivaz]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment