diff --git a/deploy/olm-catalog/eclipse-che-preview-openshift/build-roles.sh b/deploy/olm-catalog/eclipse-che-preview-openshift/build-roles.sh deleted file mode 100755 index 20a96dc0c7..0000000000 --- a/deploy/olm-catalog/eclipse-che-preview-openshift/build-roles.sh +++ /dev/null @@ -1,18 +0,0 @@ -#!/bin/bash -# -# Copyright (c) 2012-2020 Red Hat, Inc. -# This program and the accompanying materials are made -# available under the terms of the Eclipse Public License 2.0 -# which is available at https://www.eclipse.org/legal/epl-2.0/ -# -# SPDX-License-Identifier: EPL-2.0 -# -# Contributors: -# Red Hat, Inc. - initial API and implementation - -BASE_DIR=$(cd "$(dirname "$0")" && pwd) -rm -Rf "${BASE_DIR}/generated/roles" -mkdir -p "${BASE_DIR}/generated/roles" -cp "${BASE_DIR}/../../role.yaml" "${BASE_DIR}/generated/roles/role.yaml" -cp "${BASE_DIR}/../../cluster_role.yaml" "${BASE_DIR}/generated/roles/cluster_role.yaml" -cp "${BASE_DIR}/../../namespaces_cluster_role.yaml" "${BASE_DIR}/generated/roles/namespaces_cluster_role.yaml" diff --git a/deploy/olm-catalog/eclipse-che-preview-openshift/bundle.Dockerfile b/deploy/olm-catalog/eclipse-che-preview-openshift/bundle.Dockerfile deleted file mode 100644 index 9279765f45..0000000000 --- a/deploy/olm-catalog/eclipse-che-preview-openshift/bundle.Dockerfile +++ /dev/null @@ -1,11 +0,0 @@ -FROM scratch - -LABEL operators.operatorframework.io.bundle.mediatype.v1=registry+v1 -LABEL operators.operatorframework.io.bundle.manifests.v1=manifests/ -LABEL operators.operatorframework.io.bundle.metadata.v1=metadata/ -LABEL operators.operatorframework.io.bundle.package.v1=eclipse-che-preview-openshift -LABEL operators.operatorframework.io.bundle.channels.v1=nightly -LABEL operators.operatorframework.io.bundle.channel.default.v1=nightly - -COPY manifests /manifests/ -COPY metadata /metadata/ diff --git a/deploy/olm-catalog/eclipse-che-preview-openshift/csv-config.yaml b/deploy/olm-catalog/eclipse-che-preview-openshift/csv-config.yaml deleted file mode 100644 index 3a36385b33..0000000000 --- a/deploy/olm-catalog/eclipse-che-preview-openshift/csv-config.yaml +++ /dev/null @@ -1,3 +0,0 @@ -operator-path: deploy/operator.yaml -role-paths: [ "deploy/olm-catalog/eclipse-che-preview-openshift/generated/roles/role.yaml", "deploy/olm-catalog/eclipse-che-preview-openshift/generated/roles/cluster_role.yaml", "deploy/olm-catalog/eclipse-che-preview-openshift/generated/roles/namespaces_cluster_role.yaml"] -crd-cr-paths: ["deploy/crds/org_v1_che_crd.yaml"] diff --git a/deploy/olm-catalog/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml b/deploy/olm-catalog/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml deleted file mode 100644 index cf7a7bf1e8..0000000000 --- a/deploy/olm-catalog/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml +++ /dev/null @@ -1,799 +0,0 @@ -apiVersion: operators.coreos.com/v1alpha1 -kind: ClusterServiceVersion -metadata: - annotations: - alm-examples: |- - [ - { - "apiVersion": "org.eclipse.che/v1", - "kind": "CheCluster", - "metadata": { - "name": "eclipse-che" - }, - "spec": { - "auth": { - "externalIdentityProvider": false, - "identityProviderAdminUserName": "", - "identityProviderClientId": "", - "identityProviderPassword": "", - "identityProviderRealm": "", - "identityProviderURL": "", - "initialOpenShiftOAuthUser": true, - "oAuthClientName": "", - "oAuthSecret": "" - }, - "database": { - "chePostgresDb": "", - "chePostgresHostName": "", - "chePostgresPassword": "", - "chePostgresPort": "", - "chePostgresUser": "", - "externalDb": false - }, - "devWorkspace": { - "enable": false - }, - "metrics": { - "enable": true - }, - "server": { - "allowUserDefinedWorkspaceNamespaces": false, - "cheClusterRoles": "", - "cheFlavor": "", - "cheWorkspaceClusterRole": "", - "gitSelfSignedCert": false, - "nonProxyHosts": "", - "proxyPassword": "", - "proxyPort": "", - "proxyURL": "", - "proxyUser": "", - "serverExposureStrategy": "", - "serverTrustStoreConfigMapName": "", - "tlsSupport": true, - "useInternalClusterSVCNames": true, - "workspaceNamespaceDefault": "-che" - }, - "storage": { - "postgresPVCStorageClassName": "", - "preCreateSubPaths": true, - "pvcClaimSize": "1Gi", - "pvcStrategy": "common", - "workspacePVCStorageClassName": "" - } - } - } - ] - capabilities: Seamless Upgrades - categories: Developer Tools, OpenShift Optional - certified: "false" - containerImage: quay.io/eclipse/che-operator:nightly - createdAt: "2021-03-04T16:28:11Z" - description: A Kube-native development solution that delivers portable and collaborative - developer workspaces in OpenShift. - operatorframework.io/suggested-namespace: eclipse-che - repository: https://github.com/eclipse/che-operator - support: Eclipse Foundation - name: eclipse-che-preview-openshift.v7.28.0-120.nightly - namespace: placeholder -spec: - apiservicedefinitions: {} - customresourcedefinitions: - owned: - - description: The `CheCluster` custom resource allows defining and managing - a Che server installation - displayName: Eclipse Che Cluster - kind: CheCluster - name: checlusters.org.eclipse.che - statusDescriptors: - - description: Status of a Che installation. Can be `Available`, `Unavailable`, - or `Available, Rolling Update in Progress`. - displayName: Status - path: cheClusterRunning - x-descriptors: - - urn:alm:descriptor:io.kubernetes.phase - - description: Public URL to the Che server. - displayName: Eclipse Che URL - path: cheURL - x-descriptors: - - urn:alm:descriptor:org.w3:link - - description: Current installed Che version. - displayName: 'displayName: Eclipse Che version' - path: cheVersion - x-descriptors: - - urn:alm:descriptor:org.w3:link - - description: Public URL to the devfile registry. - displayName: Devfile registry URL - path: devfileRegistryURL - x-descriptors: - - urn:alm:descriptor:org.w3:link - - description: A URL that points to some URL where to find help related - to the current Operator status. - displayName: Help link - path: helpLink - x-descriptors: - - urn:alm:descriptor:org.w3:link - - description: Public URL to the Identity Provider server, Keycloak or RH-SSO,. - displayName: Keycloak Admin Console URL - path: keycloakURL - x-descriptors: - - urn:alm:descriptor:org.w3:link - - description: A human readable message indicating details about why the - Pod is in this condition. - displayName: Message - path: message - x-descriptors: - - urn:alm:descriptor:text - - description: OpenShift OAuth secret that contains user credentials for - HTPasswd identity provider. - displayName: OpenShift OAuth secret that contains user credentials for - HTPasswd identity provider. - path: openShiftOAuthUserCredentialsSecret - x-descriptors: - - urn:alm:descriptor:text - - description: Public URL to the plugin registry. - displayName: Plugin registry URL - path: pluginRegistryURL - x-descriptors: - - urn:alm:descriptor:org.w3:link - - description: A brief CamelCase message indicating details about why the - Pod is in this state. - displayName: Reason - path: reason - x-descriptors: - - urn:alm:descriptor:io.kubernetes.phase:reason - - urn:alm:descriptor:text - version: v1 - description: | - A collaborative Kubernetes-native development solution that delivers OpenShift workspaces and in-browser IDE for rapid cloud application development. - This operator installs PostgreSQL, Keycloak, and the Eclipse Che server, as well as configures all three services. - - ## How to Install - - Press the **Install** button, choose the upgrade strategy, and wait for the **Installed** Operator status. - - When the operator is installed, create a new CR of Kind CheCluster (click the **Create New** or **Create Instance** button). - The CR spec contains all defaults (see below). - - You can start using Eclipse Che when the CR status is set to **Available**, and you see a URL to Eclipse Che. - - ## Defaults - - By default, the operator deploys Eclipse Che with: - - * Bundled PostgreSQL and Keycloak - - * Common PVC strategy - - * Auto-generated passwords - - * TLS mode (secure routes) - - * Regular login extended with OpenShift OAuth authentication - - ## Installation Options - - Eclipse Che operator installation options include: - - * Connection to external database and Keycloak - - * Configuration of default passwords and object names - - * PVC strategy (once shared PVC for all workspaces, PVC per workspace, or PVC per volume) - - * Authentication options - - ### External Database and Keycloak - - To instruct the operator to skip deploying PostgreSQL and Keycloak and connect to an existing DB and Keycloak instead: - - * set respective fields to `true` in a custom resource spec - - * provide the operator with connection and authentication details: - - - - `externalDb: true` - - - `chePostgresHostname: 'yourPostgresHost'` - - - `chePostgresPort: '5432'` - - - `chePostgresUser: 'myuser'` - - - `chePostgresPassword: 'mypass'` - - - `chePostgresDb: 'mydb'` - - - `externalIdentityProvider: true` - - - `identityProviderURL: 'https://my-keycloak.com'` - - - `identityProviderRealm: 'myrealm'` - - - `identityProviderClientId: 'myClient'` - - - #### Self-signed Certificates - - Eclipse Che uses self-signed certificates by default. - - You can also manually create a secret: - - - - ``` - oc create secret generic self-signed-certificate --from-file=/path/to/certificate/ca.crt -n=$codeReadyNamespace - ``` - displayName: Eclipse Che - icon: - - base64data: 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 - mediatype: image/png - install: - spec: - clusterPermissions: - - rules: - - apiGroups: - - oauth.openshift.io - resources: - - oauthclients - verbs: - - create - - get - - delete - - deletecollection - - list - - patch - - update - - watch - - apiGroups: - - config.openshift.io - resources: - - oauths - verbs: - - get - - list - - watch - - patch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - proxies - verbs: - - get - - list - - watch - - apiGroups: - - user.openshift.io - resources: - - users - verbs: - - list - - delete - - apiGroups: - - user.openshift.io - resources: - - identities - verbs: - - delete - - apiGroups: - - console.openshift.io - resources: - - consolelinks - verbs: - - get - - list - - create - - update - - patch - - delete - - apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterrolebindings - verbs: - - list - - create - - watch - - update - - get - - delete - - apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - verbs: - - list - - create - - watch - - update - - get - - delete - - apiGroups: - - authorization.openshift.io - resources: - - roles - verbs: - - get - - create - - delete - - apiGroups: - - authorization.openshift.io - resources: - - rolebindings - verbs: - - get - - create - - update - - delete - - apiGroups: - - rbac.authorization.k8s.io - resources: - - roles - verbs: - - get - - create - - delete - - list - - update - - watch - - apiGroups: - - rbac.authorization.k8s.io - resources: - - rolebindings - verbs: - - get - - create - - update - - delete - - list - - watch - - apiGroups: - - org.eclipse.che - resources: - - checlusters - - checlusters/finalizers - verbs: - - '*' - - apiGroups: - - project.openshift.io - resources: - - projectrequests - verbs: - - create - - update - - apiGroups: - - "" - resources: - - namespaces - verbs: - - get - - create - - update - - apiGroups: - - project.openshift.io - resources: - - projects - verbs: - - get - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - pods - - secrets - - serviceaccounts - - services - verbs: - - '*' - - apiGroups: - - "" - resources: - - configmaps/status - verbs: - - get - - update - - patch - - apiGroups: - - "" - resources: - - pods/exec - verbs: - - create - - apiGroups: - - apps - resources: - - secrets - verbs: - - list - - apiGroups: - - apps - - extensions - resources: - - deployments - - replicasets - verbs: - - '*' - - apiGroups: - - route.openshift.io - resources: - - routes - verbs: - - '*' - - apiGroups: - - route.openshift.io - resources: - - routes/custom-host - verbs: - - create - - apiGroups: - - "" - resources: - - events - verbs: - - watch - - create - - patch - - apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - create - - get - - apiGroups: - - batch - resources: - - jobs - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resourceNames: - - devworkspace-controller - resources: - - deployments/finalizers - verbs: - - update - - apiGroups: - - extensions - resources: - - ingresses - verbs: - - '*' - - apiGroups: - - workspace.devfile.io - resources: - - '*' - verbs: - - '*' - - apiGroups: - - controller.devfile.io - resources: - - '*' - verbs: - - '*' - - apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - validatingwebhookconfigurations - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - operators.coreos.com - resources: - - subscriptions - verbs: - - get - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create - - apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - verbs: - - get - - create - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - serviceAccountName: che-operator - - rules: - - apiGroups: - - "" - resources: - - namespaces - verbs: - - update - - list - - create - - get - serviceAccountName: che-namespace-editor - deployments: - - name: che-operator - spec: - replicas: 1 - selector: - matchLabels: - app: che-operator - strategy: - type: RollingUpdate - template: - metadata: - labels: - app: che-operator - app.kubernetes.io/component: che-operator - app.kubernetes.io/instance: che - app.kubernetes.io/managed-by: olm - app.kubernetes.io/name: che - spec: - containers: - - command: - - /usr/local/bin/che-operator - env: - - name: WATCH_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.annotations['olm.targetNamespaces'] - - name: POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: OPERATOR_NAME - value: che-operator - - name: CHE_VERSION - value: nightly - - name: RELATED_IMAGE_che_server - value: quay.io/eclipse/che-server:nightly - - name: RELATED_IMAGE_plugin_registry - value: quay.io/eclipse/che-plugin-registry:nightly - - name: RELATED_IMAGE_devfile_registry - value: quay.io/eclipse/che-devfile-registry:nightly - - name: RELATED_IMAGE_pvc_jobs - value: registry.access.redhat.com/ubi8-minimal:8.3-291 - - name: RELATED_IMAGE_postgres - value: quay.io/eclipse/che--centos--postgresql-96-centos7:9.6-b681d78125361519180a6ac05242c296f8906c11eab7e207b5ca9a89b6344392 - - name: RELATED_IMAGE_keycloak - value: quay.io/eclipse/che-keycloak:nightly - - name: RELATED_IMAGE_che_workspace_plugin_broker_metadata - value: quay.io/eclipse/che-plugin-metadata-broker:v3.4.0 - - name: RELATED_IMAGE_che_workspace_plugin_broker_artifacts - value: quay.io/eclipse/che-plugin-artifacts-broker:v3.4.0 - - name: RELATED_IMAGE_che_server_secure_exposer_jwt_proxy_image - value: quay.io/eclipse/che-jwtproxy:0.10.0 - - name: RELATED_IMAGE_single_host_gateway - value: docker.io/traefik:v2.2.8 - - name: RELATED_IMAGE_single_host_gateway_config_sidecar - value: quay.io/che-incubator/configbump:0.1.4 - - name: CHE_FLAVOR - value: che - - name: CONSOLE_LINK_NAME - value: che - - name: CONSOLE_LINK_DISPLAY_NAME - value: Eclipse Che - - name: CONSOLE_LINK_SECTION - value: Red Hat Applications - - name: CONSOLE_LINK_IMAGE - value: /dashboard/assets/branding/loader.svg - - name: CHE_IDENTITY_SECRET - value: che-identity-secret - - name: CHE_IDENTITY_POSTGRES_SECRET - value: che-identity-postgres-secret - - name: CHE_POSTGRES_SECRET - value: che-postgres-secret - - name: CHE_SERVER_TRUST_STORE_CONFIGMAP_NAME - value: ca-certs - image: quay.io/eclipse/che-operator:nightly - imagePullPolicy: Always - livenessProbe: - failureThreshold: 10 - httpGet: - path: /healthz - port: 6789 - initialDelaySeconds: 15 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 5 - name: che-operator - ports: - - containerPort: 60000 - name: metrics - readinessProbe: - exec: - command: - - stat - - /tmp/operator-sdk-ready - failureThreshold: 10 - initialDelaySeconds: 5 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 5 - resources: - limits: - cpu: 500m - memory: 256Mi - requests: - cpu: 100m - memory: 64Mi - securityContext: - capabilities: - drop: - - ALL - restartPolicy: Always - serviceAccountName: che-operator - terminationGracePeriodSeconds: 20 - permissions: - - rules: - - apiGroups: - - extensions - resources: - - ingresses - verbs: - - '*' - - apiGroups: - - batch - resources: - - jobs - verbs: - - '*' - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - '*' - - apiGroups: - - rbac.authorization.k8s.io - resources: - - roles - - rolebindings - verbs: - - '*' - - apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterrolebindings - verbs: - - '*' - - apiGroups: - - "" - resources: - - pods - - services - - serviceaccounts - - endpoints - - persistentvolumeclaims - - events - - configmaps - - secrets - - pods/exec - - pods/log - verbs: - - '*' - - apiGroups: - - "" - resources: - - namespaces - verbs: - - get - - apiGroups: - - apps - resources: - - deployments - verbs: - - '*' - - apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - get - - create - - apiGroups: - - org.eclipse.che - resources: - - checlusters - - checlusters/status - - checlusters/finalizers - verbs: - - '*' - - apiGroups: - - metrics.k8s.io - resources: - - pods - - nodes - verbs: - - get - - list - - watch - - apiGroups: - - che.eclipse.org - resources: - - kubernetesimagepullers - verbs: - - '*' - - apiGroups: - - operators.coreos.com - resources: - - subscriptions - - clusterserviceversions - - operatorgroups - verbs: - - '*' - - apiGroups: - - packages.operators.coreos.com - resources: - - packagemanifests - verbs: - - get - - list - serviceAccountName: che-operator - strategy: deployment - installModes: - - supported: true - type: OwnNamespace - - supported: true - type: SingleNamespace - - supported: true - type: MultiNamespace - - supported: false - type: AllNamespaces - keywords: - - workspaces - - devtools - - developer - - ide - - java - links: - - name: Product Page - url: http://www.eclipse.org/che - - name: Documentation - url: https://www.eclipse.org/che/docs - - name: Operator GitHub Repo - url: https://github.com/eclipse/che-operator - maintainers: - - email: dfestal@redhat.com - name: David Festal - maturity: stable - provider: - name: Eclipse Foundation - version: 7.28.0-120.nightly diff --git a/deploy/olm-catalog/eclipse-che-preview-openshift/manifests/org_v1_che_crd.yaml b/deploy/olm-catalog/eclipse-che-preview-openshift/manifests/org_v1_che_crd.yaml deleted file mode 100644 index 305e50547e..0000000000 --- a/deploy/olm-catalog/eclipse-che-preview-openshift/manifests/org_v1_che_crd.yaml +++ /dev/null @@ -1,867 +0,0 @@ -# -# Copyright (c) 2012-2020 Red Hat, Inc. -# This program and the accompanying materials are made -# available under the terms of the Eclipse Public License 2.0 -# which is available at https://www.eclipse.org/legal/epl-2.0/ -# -# SPDX-License-Identifier: EPL-2.0 -# -# Contributors: -# Red Hat, Inc. - initial API and implementation -apiVersion: apiextensions.k8s.io/v1beta1 -kind: CustomResourceDefinition -metadata: - name: checlusters.org.eclipse.che -spec: - group: org.eclipse.che - names: - kind: CheCluster - listKind: CheClusterList - plural: checlusters - singular: checluster - preserveUnknownFields: false - scope: Namespaced - subresources: - status: {} - validation: - openAPIV3Schema: - description: The `CheCluster` custom resource allows defining and managing a - Che server installation - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: Desired configuration of the Che installation. Based on these - settings, the Operator automatically creates and maintains several ConfigMaps - that will contain the appropriate environment variables the various components - of the Che installation. These generated ConfigMaps must NOT be updated - manually. - properties: - auth: - description: Configuration settings related to the Authentication used - by the Che installation. - properties: - externalIdentityProvider: - description: 'Instructs the Operator on whether or not to deploy - a dedicated Identity Provider (Keycloak or RH SSO instance). Instructs - the Operator on whether to deploy a dedicated Identity Provider - (Keycloak or RH-SSO instance). By default, a dedicated Identity - Provider server is deployed as part of the Che installation. When - `externalIdentityProvider` is `true`, no dedicated identity provider - will be deployed by the Operator and you will need to provide - details about the external identity provider you are about to - use. See also all the other fields starting with: `identityProvider`.' - type: boolean - identityProviderAdminUserName: - description: Overrides the name of the Identity Provider administrator - user. Defaults to `admin`. - type: string - identityProviderClientId: - description: Name of a Identity provider, Keycloak or RH-SSO, `client-id` - that is used for Che. Override this when an external Identity - Provider is in use. See the `externalIdentityProvider` field. - When omitted or left blank, it is set to the value of the `flavour` - field suffixed with `-public`. - type: string - identityProviderContainerResources: - description: Identity provider container custom settings. - properties: - limits: - description: Limits describes the maximum amount of compute - resources allowed. - properties: - cpu: - description: CPU, in cores. (500m = .5 cores) - type: string - memory: - description: Memory, in bytes. (500Gi = 500GiB = 500 * 1024 - * 1024 * 1024) - type: string - type: object - request: - description: Requests describes the minimum amount of compute - resources required. - properties: - cpu: - description: CPU, in cores. (500m = .5 cores) - type: string - memory: - description: Memory, in bytes. (500Gi = 500GiB = 500 * 1024 - * 1024 * 1024) - type: string - type: object - type: object - identityProviderImage: - description: Overrides the container image used in the Identity - Provider, Keycloak or RH-SSO, deployment. This includes the image - tag. Omit it or leave it empty to use the default container image - provided by the Operator. - type: string - identityProviderImagePullPolicy: - description: Overrides the image pull policy used in the Identity - Provider, Keycloak or RH-SSO, deployment. Default value is `Always` - for `nightly` or `latest` images, and `IfNotPresent` in other - cases. - type: string - identityProviderIngress: - description: Ingress custom settings. - properties: - labels: - description: Comma separated list of labels that can be used - to organize and categorize objects by scoping and selecting. - type: string - type: object - identityProviderPassword: - description: Overrides the password of Keycloak administrator user. - Override this when an external Identity Provider is in use. See - the `externalIdentityProvider` field. When omitted or left blank, - it is set to an auto-generated password. - type: string - identityProviderPostgresPassword: - description: Password for a Identity Provider, Keycloak or RH-SSO, - to connect to the database. Override this when an external Identity - Provider is in use. See the `externalIdentityProvider` field. - When omitted or left blank, it is set to an auto-generated password. - type: string - identityProviderPostgresSecret: - description: 'The secret that contains `password` for the Identity - Provider, Keycloak or RH-SSO, to connect to the database. When - the secret is defined, the `identityProviderPostgresPassword` - is ignored. When the value is omitted or left blank, the one of - following scenarios applies: 1. `identityProviderPostgresPassword` - is defined, then it will be used to connect to the database. 2. - `identityProviderPostgresPassword` is not defined, then a new - secret with the name `che-identity-postgres-secret` will be created - with an auto-generated value for `password`.' - type: string - identityProviderRealm: - description: Name of a Identity provider, Keycloak or RH-SSO, realm - that is used for Che. Override this when an external Identity - Provider is in use. See the `externalIdentityProvider` field. - When omitted or left blank, it is set to the value of the `flavour` - field. - type: string - identityProviderRoute: - description: Route custom settings. - properties: - domain: - description: 'Operator uses the domain to generate a hostname - for a route. In a conjunction with labels it creates a route, - which is served by a non-default Ingress controller. The generated - host name will follow this pattern: `-.`.' - type: string - labels: - description: Comma separated list of labels that can be used - to organize and categorize objects by scoping and selecting. - type: string - type: object - identityProviderSecret: - description: 'The secret that contains `user` and `password` for - Identity Provider. When the secret is defined, the `identityProviderAdminUserName` - and `identityProviderPassword` are ignored. When the value is - omitted or left blank, the one of following scenarios applies: - 1. `identityProviderAdminUserName` and `identityProviderPassword` - are defined, then they will be used. 2. `identityProviderAdminUserName` - or `identityProviderPassword` are not defined, then a new secret - with the name `che-identity-secret` will be created with default - value `admin` for `user` and with an auto-generated value for - `password`.' - type: string - identityProviderURL: - description: Public URL of the Identity Provider server (Keycloak - / RH-SSO server). Set this ONLY when a use of an external Identity - Provider is needed. See the `externalIdentityProvider` field. - By default, this will be automatically calculated and set by the - Operator. - type: string - initialOpenShiftOAuthUser: - description: For operating with the OpenShift OAuth authentication, - create a new user account since the kubeadmin can not be used. - If the value is true, then a new OpenShift OAuth user will be - created for the HTPasswd identity provider. If the value is false - and the user has already been created, then it will be removed. - If value is an empty, then do nothing. The user's credentials - are stored in the `openshift-oauth-user-credentials` secret by - Operator. Note that this solution is Openshift 4 platform-specific. - type: boolean - oAuthClientName: - description: Name of the OpenShift `OAuthClient` resource used to - setup identity federation on the OpenShift side. Auto-generated - when left blank. See also the `OpenShiftoAuth` field. - type: string - oAuthSecret: - description: Name of the secret set in the OpenShift `OAuthClient` - resource used to setup identity federation on the OpenShift side. - Auto-generated when left blank. See also the `OAuthClientName` - field. - type: string - openShiftoAuth: - description: 'Enables the integration of the identity provider (Keycloak - / RHSSO) with OpenShift OAuth. Empty value on OpenShift by default. - This will allow users to directly login with their OpenShift user - through the OpenShift login, and have their workspaces created - under personal OpenShift namespaces. WARNING: the `kubeadmin` - user is NOT supported, and logging through it will NOT allow accessing - the Che Dashboard.' - type: boolean - updateAdminPassword: - description: Forces the default `admin` Che user to update password - on first login. Defaults to `false`. - type: boolean - type: object - database: - description: Configuration settings related to the database used by - the Che installation. - properties: - chePostgresContainerResources: - description: PostgreSQL container custom settings - properties: - limits: - description: Limits describes the maximum amount of compute - resources allowed. - properties: - cpu: - description: CPU, in cores. (500m = .5 cores) - type: string - memory: - description: Memory, in bytes. (500Gi = 500GiB = 500 * 1024 - * 1024 * 1024) - type: string - type: object - request: - description: Requests describes the minimum amount of compute - resources required. - properties: - cpu: - description: CPU, in cores. (500m = .5 cores) - type: string - memory: - description: Memory, in bytes. (500Gi = 500GiB = 500 * 1024 - * 1024 * 1024) - type: string - type: object - type: object - chePostgresDb: - description: PostgreSQL database name that the Che server uses to - connect to the DB. Defaults to `dbche`. - type: string - chePostgresHostName: - description: PostgreSQL Database host name that the Che server uses - to connect to. Defaults is `postgres`. Override this value ONLY - when using an external database. See field `externalDb`. In the - default case it will be automatically set by the Operator. - type: string - chePostgresPassword: - description: PostgreSQL password that the Che server uses to connect - to the DB. When omitted or left blank, it will be set to an automatically - generated value. - type: string - chePostgresPort: - description: PostgreSQL Database port that the Che server uses to - connect to. Defaults to 5432. Override this value ONLY when using - an external database. See field `externalDb`. In the default case - it will be automatically set by the Operator. - type: string - chePostgresSecret: - description: 'The secret that contains PostgreSQL`user` and `password` - that the Che server uses to connect to the DB. When the secret - is defined, the `chePostgresUser` and `chePostgresPassword` are - ignored. When the value is omitted or left blank, the one of following - scenarios applies: 1. `chePostgresUser` and `chePostgresPassword` - are defined, then they will be used to connect to the DB. 2. `chePostgresUser` - or `chePostgresPassword` are not defined, then a new secret with - the name `che-postgres-secret` will be created with default value - of `pgche` for `user` and with an auto-generated value for `password`.' - type: string - chePostgresUser: - description: PostgreSQL user that the Che server uses to connect - to the DB. Defaults to `pgche`. - type: string - externalDb: - description: 'Instructs the Operator on whether to deploy a dedicated - database. By default, a dedicated PostgreSQL database is deployed - as part of the Che installation. When `externalDb` is `true`, - no dedicated database will be deployed by the Operator and you - will need to provide connection details to the external DB you - are about to use. See also all the fields starting with: `chePostgres`.' - type: boolean - postgresImage: - description: Overrides the container image used in the PostgreSQL - database deployment. This includes the image tag. Omit it or leave - it empty to use the default container image provided by the Operator. - type: string - postgresImagePullPolicy: - description: Overrides the image pull policy used in the PostgreSQL - database deployment. Default value is `Always` for `nightly` or - `latest` images, and `IfNotPresent` in other cases. - type: string - type: object - devWorkspace: - description: Dev Workspace operator configuration - properties: - enable: - description: Deploys the DevWorkspace Operator in the cluster. Does - nothing when a matching version of the Operator is already installed. - Fails when a non-matching version of the Operator is already installed. - type: boolean - type: object - imagePuller: - description: Kubernetes Image Puller configuration - properties: - enable: - description: "Install and configure the Community Supported Kubernetes\ - \ Image Puller Operator. When set to `true` and no spec is provided,\ - \ it will create a default KubernetesImagePuller object to be\ - \ managed by the Operator. When set to `false`, the KubernetesImagePuller\ - \ object will be deleted, and the Operator will be uninstalled,\ - \ regardless of whether a spec is provided. \n Note that while\ - \ this the Operator and its behavior is community-supported, its\ - \ payload may be commercially-supported for pulling commercially-supported\ - \ images." - type: boolean - spec: - description: A KubernetesImagePullerSpec to configure the image - puller in the CheCluster - properties: - cachingCPULimit: - type: string - cachingCPURequest: - type: string - cachingIntervalHours: - type: string - cachingMemoryLimit: - type: string - cachingMemoryRequest: - type: string - configMapName: - type: string - daemonsetName: - type: string - deploymentName: - type: string - images: - type: string - nodeSelector: - type: string - type: object - type: object - k8s: - description: Configuration settings specific to Che installations made - on upstream Kubernetes. - properties: - ingressClass: - description: 'Ingress class that will define the which controller - will manage ingresses. Defaults to `nginx`. NB: This drives the - `kubernetes.io/ingress.class` annotation on Che-related ingresses.' - type: string - ingressDomain: - description: 'Global ingress domain for a Kubernetes cluster. This - MUST be explicitly specified: there are no defaults.' - type: string - ingressStrategy: - description: 'Strategy for ingress creation. Options are: `multi-host` - (host is explicitly provided in ingress), `single-host` (host - is provided, path-based rules) and `default-host` (no host is - provided, path-based rules). Defaults to `multi-host` Deprecated - in favor of `serverExposureStrategy` in the `server` section, - which defines this regardless of the cluster type. When both are - defined, the `serverExposureStrategy` option takes precedence.' - type: string - securityContextFsGroup: - description: The FSGroup in which the Che Pod and workspace Pods - containers runs in. Default value is `1724`. - type: string - securityContextRunAsUser: - description: ID of the user the Che Pod and workspace Pods containers - run as. Default value is `1724`. - type: string - singleHostExposureType: - description: When the serverExposureStrategy is set to `single-host`, - the way the server, registries and workspaces are exposed is further - configured by this property. The possible values are `native`, - which means that the server and workspaces are exposed using ingresses - on K8s or `gateway` where the server and workspaces are exposed - using a custom gateway based on link:https://doc.traefik.io/traefik/[Traefik]. - All the endpoints whether backed by the ingress or gateway `route` - always point to the subpaths on the same domain. Defaults to `native`. - type: string - tlsSecretName: - description: Name of a secret that will be used to setup ingress - TLS termination when TLS is enabled. When the field is empty string, - the default cluster certificate will be used. See also the `tlsSupport` - field. - type: string - type: object - metrics: - description: Configuration settings related to the metrics collection - used by the Che installation. - properties: - enable: - description: Enables `metrics` the Che server endpoint. Default - to `true`. - type: boolean - type: object - server: - description: General configuration settings related to the Che server - and the plugin and devfile registries - properties: - airGapContainerRegistryHostname: - description: Optional host name, or URL, to an alternate container - registry to pull images from. This value overrides the container - registry host name defined in all the default container images - involved in a Che deployment. This is particularly useful to install - Che in a restricted environment. - type: string - airGapContainerRegistryOrganization: - description: Optional repository name of an alternate container - registry to pull images from. This value overrides the container - registry organization defined in all the default container images - involved in a Che deployment. This is particularly useful to install - Eclipse Che in a restricted environment. - type: string - allowUserDefinedWorkspaceNamespaces: - description: Defines that a user is allowed to specify a Kubernetes - namespace, or an OpenShift project, which differs from the default. - It's NOT RECOMMENDED to set to `true` without OpenShift OAuth - configured. The OpenShift infrastructure also uses this property. - type: boolean - cheClusterRoles: - description: A comma-separated list of ClusterRoles that will be - assigned to Che ServiceAccount. Be aware that the Che Operator - has to already have all permissions in these ClusterRoles to grant - them. - type: string - cheDebug: - description: Enables the debug mode for Che server. Defaults to - `false`. - type: string - cheFlavor: - description: Specifies a variation of the installation. The options - are `che` for upstream Che installations, or `codeready` for link:https://developers.redhat.com/products/codeready-workspaces/overview[CodeReady - Workspaces] installation. Override the default value only on necessary - occasions. - type: string - cheHost: - description: Public host name of the installed Che server. When - value is omitted, the value it will be automatically set by the - Operator. See the `cheHostTLSSecret` field. - type: string - cheHostTLSSecret: - description: Name of a secret containing certificates to secure - ingress or route for the custom host name of the installed Che - server. See the `cheHost` field. - type: string - cheImage: - description: Overrides the container image used in Che deployment. - This does NOT include the container image tag. Omit it or leave - it empty to use the default container image provided by the Operator. - type: string - cheImagePullPolicy: - description: Overrides the image pull policy used in Che deployment. - Default value is `Always` for `nightly` or `latest` images, and - `IfNotPresent` in other cases. - type: string - cheImageTag: - description: Overrides the tag of the container image used in Che - deployment. Omit it or leave it empty to use the default image - tag provided by the Operator. - type: string - cheLogLevel: - description: 'Log level for the Che server: `INFO` or `DEBUG`. Defaults - to `INFO`.' - type: string - cheServerIngress: - description: The Che server ingress custom settings. - properties: - labels: - description: Comma separated list of labels that can be used - to organize and categorize objects by scoping and selecting. - type: string - type: object - cheServerRoute: - description: The Che server route custom settings. - properties: - domain: - description: 'Operator uses the domain to generate a hostname - for a route. In a conjunction with labels it creates a route, - which is served by a non-default Ingress controller. The generated - host name will follow this pattern: `-.`.' - type: string - labels: - description: Comma separated list of labels that can be used - to organize and categorize objects by scoping and selecting. - type: string - type: object - cheWorkspaceClusterRole: - description: Custom cluster role bound to the user for the Che workspaces. - The default roles are used when omitted or left blank. - type: string - customCheProperties: - additionalProperties: - type: string - description: Map of additional environment variables that will be - applied in the generated `che` ConfigMap to be used by the Che - server, in addition to the values already generated from other - fields of the `CheCluster` custom resource (CR). When `customCheProperties` - contains a property that would be normally generated in `che` - ConfigMap from other CR fields, the value defined in the `customCheProperties` - is used instead. - type: object - devfileRegistryCpuLimit: - description: Overrides the CPU limit used in the devfile registry - deployment. In cores. (500m = .5 cores). Default to 500m. - type: string - devfileRegistryCpuRequest: - description: Overrides the CPU request used in the devfile registry - deployment. In cores. (500m = .5 cores). Default to 100m. - type: string - devfileRegistryImage: - description: Overrides the container image used in the devfile registry - deployment. This includes the image tag. Omit it or leave it empty - to use the default container image provided by the Operator. - type: string - devfileRegistryIngress: - description: The devfile registry ingress custom settings. - properties: - labels: - description: Comma separated list of labels that can be used - to organize and categorize objects by scoping and selecting. - type: string - type: object - devfileRegistryMemoryLimit: - description: Overrides the memory limit used in the devfile registry - deployment. Defaults to 256Mi. - type: string - devfileRegistryMemoryRequest: - description: Overrides the memory request used in the devfile registry - deployment. Defaults to 16Mi. - type: string - devfileRegistryPullPolicy: - description: Overrides the image pull policy used in the devfile - registry deployment. Default value is `Always` for `nightly` or - `latest` images, and `IfNotPresent` in other cases. - type: string - devfileRegistryRoute: - description: The devfile registry route custom settings. - properties: - domain: - description: 'Operator uses the domain to generate a hostname - for a route. In a conjunction with labels it creates a route, - which is served by a non-default Ingress controller. The generated - host name will follow this pattern: `-.`.' - type: string - labels: - description: Comma separated list of labels that can be used - to organize and categorize objects by scoping and selecting. - type: string - type: object - devfileRegistryUrl: - description: Public URL of the devfile registry, that serves sample, - ready-to-use devfiles. Set this ONLY when a use of an external - devfile registry is needed. See the `externalDevfileRegistry` - field. By default, this will be automatically calculated by the - Operator. - type: string - externalDevfileRegistry: - description: Instructs the Operator on whether to deploy a dedicated - devfile registry server. By default, a dedicated devfile registry - server is started. When `externalDevfileRegistry` is `true`, no - such dedicated server will be started by the Operator and you - will have to manually set the `devfileRegistryUrl` field - type: boolean - externalPluginRegistry: - description: Instructs the Operator on whether to deploy a dedicated - plugin registry server. By default, a dedicated plugin registry - server is started. When `externalPluginRegistry` is `true`, no - such dedicated server will be started by the Operator and you - will have to manually set the `pluginRegistryUrl` field. - type: boolean - gitSelfSignedCert: - description: When enabled, the certificate from `che-git-self-signed-cert` - ConfigMap will be propagated to the Che components and provide - particular configuration for Git. - type: boolean - nonProxyHosts: - description: 'List of hosts that will be reached directly, bypassing - the proxy. Specify wild card domain use the following form `.` - and `|` as delimiter, for example: `localhost|.my.host.com|123.42.12.32` - Only use when configuring a proxy is required. Operator respects - OpenShift cluster wide proxy configuration and no additional configuration - is required, but defining `nonProxyHosts` in a custom resource - leads to merging non proxy hosts lists from the cluster proxy - configuration and ones defined in the custom resources. See the - doc https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. - See also the `proxyURL` fields.' - type: string - pluginRegistryCpuLimit: - description: Overrides the CPU limit used in the plugin registry - deployment. In cores. (500m = .5 cores). Default to 500m. - type: string - pluginRegistryCpuRequest: - description: Overrides the CPU request used in the plugin registry - deployment. In cores. (500m = .5 cores). Default to 100m. - type: string - pluginRegistryImage: - description: Overrides the container image used in the plugin registry - deployment. This includes the image tag. Omit it or leave it empty - to use the default container image provided by the Operator. - type: string - pluginRegistryIngress: - description: Plugin registry ingress custom settings. - properties: - labels: - description: Comma separated list of labels that can be used - to organize and categorize objects by scoping and selecting. - type: string - type: object - pluginRegistryMemoryLimit: - description: Overrides the memory limit used in the plugin registry - deployment. Defaults to 256Mi. - type: string - pluginRegistryMemoryRequest: - description: Overrides the memory request used in the plugin registry - deployment. Defaults to 16Mi. - type: string - pluginRegistryPullPolicy: - description: Overrides the image pull policy used in the plugin - registry deployment. Default value is `Always` for `nightly` or - `latest` images, and `IfNotPresent` in other cases. - type: string - pluginRegistryRoute: - description: Plugin registry route custom settings. - properties: - domain: - description: 'Operator uses the domain to generate a hostname - for a route. In a conjunction with labels it creates a route, - which is served by a non-default Ingress controller. The generated - host name will follow this pattern: `-.`.' - type: string - labels: - description: Comma separated list of labels that can be used - to organize and categorize objects by scoping and selecting. - type: string - type: object - pluginRegistryUrl: - description: Public URL of the plugin registry that serves sample - ready-to-use devfiles. Set this ONLY when a use of an external - devfile registry is needed. See the `externalPluginRegistry` field. - By default, this will be automatically calculated by the Operator. - type: string - proxyPassword: - description: Password of the proxy server. Only use when proxy configuration - is required. See the `proxyURL`, `proxyUser` and `proxySecret` - fields. - type: string - proxyPort: - description: Port of the proxy server. Only use when configuring - a proxy is required. See also the `proxyURL` and `nonProxyHosts` - fields. - type: string - proxySecret: - description: The secret that contains `user` and `password` for - a proxy server. When the secret is defined, the `proxyUser` and - `proxyPassword` are ignored. - type: string - proxyURL: - description: URL (protocol+host name) of the proxy server. This - drives the appropriate changes in the `JAVA_OPTS` and `https(s)_proxy` - variables in the Che server and workspaces containers. Only use - when configuring a proxy is required. Operator respects OpenShift - cluster wide proxy configuration and no additional configuration - is required, but defining `proxyUrl` in a custom resource leads - to overrides the cluster proxy configuration with fields `proxyUrl`, - `proxyPort`, `proxyUser` and `proxyPassword` from the custom resource. - See the doc https://docs.openshift.com/container-platform/4.4/networking/enable-cluster-wide-proxy.html. - See also the `proxyPort` and `nonProxyHosts` fields. - type: string - proxyUser: - description: User name of the proxy server. Only use when configuring - a proxy is required. See also the `proxyURL`, `proxyPassword` - and `proxySecret` fields. - type: string - selfSignedCert: - description: Deprecated. The value of this flag is ignored. The - Che Operator will automatically detect whether the router certificate - is self-signed and propagate it to other components, such as the - Che server. - type: boolean - serverCpuLimit: - description: Overrides the CPU limit used in the Che server deployment - In cores. (500m = .5 cores). Default to 1. - type: string - serverCpuRequest: - description: Overrides the CPU request used in the Che server deployment - In cores. (500m = .5 cores). Default to 100m. - type: string - serverExposureStrategy: - description: Sets the server and workspaces exposure type. Possible - values are `multi-host`, `single-host`, `default-host`. Defaults - to `multi-host`, which creates a separate ingress, or OpenShift - routes, for every required endpoint. `single-host` makes Che exposed - on a single host name with workspaces exposed on subpaths. Read - the docs to learn about the limitations of this approach. Also - consult the `singleHostExposureType` property to further configure - how the Operator and the Che server make that happen on Kubernetes. - `default-host` exposes the Che server on the host of the cluster. - Read the docs to learn about the limitations of this approach. - type: string - serverMemoryLimit: - description: Overrides the memory limit used in the Che server deployment. - Defaults to 1Gi. - type: string - serverMemoryRequest: - description: Overrides the memory request used in the Che server - deployment. Defaults to 512Mi. - type: string - serverTrustStoreConfigMapName: - description: Name of the ConfigMap with public certificates to add - to Java trust store of the Che server. This is often required - when adding the OpenShift OAuth provider, which has HTTPS endpoint - signed with self-signed cert. The Che server must be aware of - its CA cert to be able to request it. This is disabled by default. - type: string - singleHostGatewayConfigMapLabels: - additionalProperties: - type: string - description: The labels that need to be present in the ConfigMaps - representing the gateway configuration. - type: object - singleHostGatewayConfigSidecarImage: - description: The image used for the gateway sidecar that provides - configuration to the gateway. Omit it or leave it empty to use - the default container image provided by the Operator. - type: string - singleHostGatewayImage: - description: The image used for the gateway in the single host mode. - Omit it or leave it empty to use the default container image provided - by the Operator. - type: string - tlsSupport: - description: Deprecated. Instructs the Operator to deploy Che in - TLS mode. This is enabled by default. Disabling TLS sometimes - cause malfunction of some Che components. - type: boolean - useInternalClusterSVCNames: - description: Use internal cluster SVC names to communicate between - components to speed up the traffic and avoid proxy issues. The - default value is `true`. - type: boolean - workspaceNamespaceDefault: - description: Defines Kubernetes default namespace in which user's - workspaces are created for a case when a user does not override - it. It's possible to use ``, `` and `` - placeholders, such as che-workspace-. In that case, - a new namespace will be created for each user or workspace. - type: string - type: object - storage: - description: Configuration settings related to the persistent storage - used by the Che installation. - properties: - postgresPVCStorageClassName: - description: Storage class for the Persistent Volume Claim dedicated - to the PostgreSQL database. When omitted or left blank, a default - storage class is used. - type: string - preCreateSubPaths: - description: Instructs the Che server to start a special Pod to - pre-create a sub-path in the Persistent Volumes. Defaults to `false`, - however it will need to enable it according to the configuration - of your Kubernetes cluster. - type: boolean - pvcClaimSize: - description: Size of the persistent volume claim for workspaces. - Defaults to `1Gi`. - type: string - pvcJobsImage: - description: Overrides the container image used to create sub-paths - in the Persistent Volumes. This includes the image tag. Omit it - or leave it empty to use the default container image provided - by the Operator. See also the `preCreateSubPaths` field. - type: string - pvcStrategy: - description: Persistent volume claim strategy for the Che server. - This Can be:`common` (all workspaces PVCs in one volume), `per-workspace` - (one PVC per workspace for all declared volumes) and `unique` - (one PVC per declared volume). Defaults to `common`. - type: string - workspacePVCStorageClassName: - description: Storage class for the Persistent Volume Claims dedicated - to the Che workspaces. When omitted or left blank, a default storage - class is used. - type: string - type: object - type: object - status: - description: CheClusterStatus defines the observed state of Che installation - properties: - cheClusterRunning: - description: Status of a Che installation. Can be `Available`, `Unavailable`, - or `Available, Rolling Update in Progress`. - type: string - cheURL: - description: Public URL to the Che server. - type: string - cheVersion: - description: Current installed Che version. - type: string - dbProvisioned: - description: Indicates that a PostgreSQL instance has been correctly - provisioned or not. Indicates that a PostgreSQL instance has been - correctly provisioned or not. - type: boolean - devfileRegistryURL: - description: Public URL to the devfile registry. - type: string - gitHubOAuthProvisioned: - description: Indicates whether an Identity Provider instance, Keycloak - or RH-SSO, has been configured to integrate with the GitHub OAuth. - type: boolean - helpLink: - description: A URL that points to some URL where to find help related - to the current Operator status. - type: string - keycloakProvisioned: - description: Indicates whether an Identity Provider instance, Keycloak - or RH-SSO, has been provisioned with realm, client and user. - type: boolean - keycloakURL: - description: Public URL to the Identity Provider server, Keycloak or - RH-SSO,. - type: string - message: - description: A human readable message indicating details about why the - Pod is in this condition. - type: string - openShiftOAuthUserCredentialsSecret: - description: OpenShift OAuth secret that contains user credentials for - HTPasswd identity provider. - type: string - openShiftoAuthProvisioned: - description: Indicates whether an Identity Provider instance, Keycloak - or RH-SSO, has been configured to integrate with the OpenShift OAuth. - type: boolean - pluginRegistryURL: - description: Public URL to the plugin registry. - type: string - reason: - description: A brief CamelCase message indicating details about why - the Pod is in this state. - type: string - type: object - type: object - version: v1 - versions: - - name: v1 - served: true - storage: true diff --git a/deploy/olm-catalog/eclipse-che-preview-openshift/metadata/annotations.yaml b/deploy/olm-catalog/eclipse-che-preview-openshift/metadata/annotations.yaml deleted file mode 100644 index 07835550b7..0000000000 --- a/deploy/olm-catalog/eclipse-che-preview-openshift/metadata/annotations.yaml +++ /dev/null @@ -1,9 +0,0 @@ -annotations: - operators.operatorframework.io.bundle.channel.default.v1: nightly - operators.operatorframework.io.bundle.channels.v1: nightly - operators.operatorframework.io.bundle.manifests.v1: manifests/ - operators.operatorframework.io.bundle.mediatype.v1: registry+v1 - operators.operatorframework.io.bundle.metadata.v1: metadata/ - operators.operatorframework.io.bundle.package.v1: eclipse-che-preview-openshift - operators.operatorframework.io.metrics.mediatype.v1: metrics+v1 - operators.operatorframework.io.metrics.project_layout: go