Merge pull request #730 from bertinatto/input-resources

API-1835: Add input-resources

Author: openshift-merge-bot[bot]

cmd/authentication-operator/main.go

@@ -32,6 +32,7 @@ func NewAuthenticationOperatorCommand() *cobra.Command {
 
 	cmd.AddCommand(operator.NewOperator())
 	cmd.AddCommand(mom.NewApplyConfigurationCommand(ioStreams))
+	cmd.AddCommand(mom.NewInputResourcesCommand(ioStreams))
 	cmd.AddCommand(mom.NewOutputResourcesCommand(ioStreams))
 
 	return cmd

go.mod

@@ -31,6 +31,8 @@ require (
 
 require (
 	github.com/NYTimes/gziphandler v1.1.1 // indirect
+	github.com/PaesslerAG/gval v1.2.3 // indirect
+	github.com/PaesslerAG/jsonpath v0.1.1 // indirect
 	github.com/RangelReale/osincli v0.0.0-20160924135400-fababb0555f2 // indirect
 	github.com/antlr4-go/antlr/v4 v4.13.0 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a // indirect
@@ -77,6 +79,7 @@ require (
 	github.com/prometheus/common v0.55.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/robfig/cron v1.2.0 // indirect
+	github.com/shopspring/decimal v1.3.1 // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/stoewer/go-strcase v1.2.0 // indirect

go.sum

@@ -1,5 +1,11 @@
 github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I=
 github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c=
+github.com/PaesslerAG/gval v1.0.0/go.mod h1:y/nm5yEyTeX6av0OfKJNp9rBNj2XrGhAf5+v24IBN1I=
+github.com/PaesslerAG/gval v1.2.3 h1:Z3B/zLyWvqxjUtkIOEkFauqLnQn8Q37F1Q+uAjLXgMw=
+github.com/PaesslerAG/gval v1.2.3/go.mod h1:XRFLwvmkTEdYziLdaCeCa5ImcGVrfQbeNUbVR+C6xac=
+github.com/PaesslerAG/jsonpath v0.1.0/go.mod h1:4BzmtoM/PI8fPO4aQGIusjGxGir2BzcV0grWtFzq1Y8=
+github.com/PaesslerAG/jsonpath v0.1.1 h1:c1/AToHQMVsduPAa4Vh6xp2U0evy4t8SWp8imEsylIk=
+github.com/PaesslerAG/jsonpath v0.1.1/go.mod h1:lVboNxFGal/VwW6d9JzIy56bUsYAP6tH/x80vjnCseY=
 github.com/RangelReale/osincli v0.0.0-20160924135400-fababb0555f2 h1:x8Brv0YNEe6jY3V/hQglIG2nd8g5E2Zj5ubGKkPQctQ=
 github.com/RangelReale/osincli v0.0.0-20160924135400-fababb0555f2/go.mod h1:XyjUkMA8GN+tOOPXvnbi3XuRxWFvTJntqvTFnjmhzbk=
 github.com/antlr4-go/antlr/v4 v4.13.0 h1:lxCg3LAv+EUK6t1i0y1V6/SLeUi0eKEKdhQAlS8TVTI=
@@ -175,6 +181,8 @@ github.com/robfig/cron v1.2.0/go.mod h1:JGuDeoQd7Z6yL4zQhZ3OPEVHB7fL6Ka6skscFHfm
 github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU5NdKM8=
 github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99yedzYV+kq4uf4=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/shopspring/decimal v1.3.1 h1:2Usl1nmF/WZucqkFZhnfFYxxxu8LG21F6nPQBE5gKV8=
+github.com/shopspring/decimal v1.3.1/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o=
 github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
 github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
 github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js=

pkg/cmd/mom/input_resources_command.go

@@ -0,0 +1,69 @@
+package mom
+
+import (
+	"context"
+
+	"github.com/openshift/multi-operator-manager/pkg/library/libraryinputresources"
+	"github.com/spf13/cobra"
+	"k8s.io/cli-runtime/pkg/genericiooptions"
+)
+
+func NewInputResourcesCommand(streams genericiooptions.IOStreams) *cobra.Command {
+	return libraryinputresources.NewInputResourcesCommand(runInputResources, streams)
+}
+
+func runInputResources(ctx context.Context) (*libraryinputresources.InputResources, error) {
+	return &libraryinputresources.InputResources{
+		ApplyConfigurationResources: libraryinputresources.ResourceList{
+			ExactResources: []libraryinputresources.ExactResourceID{
+				// Operator
+				libraryinputresources.ExactLowLevelOperator("authentications"),
+				libraryinputresources.ExactConfigMap("openshift-authentication-operator", "trusted-ca-bundle"),
+				// config.openshift.io
+				libraryinputresources.ExactConfigResource("apiservers"),
+				libraryinputresources.ExactConfigResource("infrastructures"),
+				libraryinputresources.ExactConfigResource("oauths"),
+				libraryinputresources.ExactConfigResource("ingresses"),
+				libraryinputresources.ExactConfigResource("consoles"),
+				libraryinputresources.ExactConfigResource("proxies"),
+				libraryinputresources.ExactResource("config.openshift.io", "v1", "clusterversions", "", "version"),
+				// Core
+				libraryinputresources.ExactResource("", "v1", "endpoints", "openshift-authentication", "oauth-openshift"),
+				libraryinputresources.ExactResource("", "v1", "endpoints", "default", "kubernetes"),
+				libraryinputresources.ExactResource("", "v1", "services", "default", "kubernetes"),
+				// Configuration
+				libraryinputresources.ExactConfigMap("openshift-config-managed", "oauth-openshift"),
+				libraryinputresources.ExactConfigMap("openshift-config-managed", "router-certs"),
+				libraryinputresources.ExactConfigMap("openshift-config-managed", "default-ingress-cert"),
+				// Operand
+				libraryinputresources.ExactConfigMap("openshift-authentication", "v4-0-config-system-metadata"),
+				libraryinputresources.ExactConfigMap("openshift-authentication", "v4-0-config-system-service-ca"),
+				libraryinputresources.ExactSecret("openshift-authentication", "v4-0-config-system-serving-cert"),
+				libraryinputresources.ExactSecret("openshift-authentication", "v4-0-config-system-session"),
+				libraryinputresources.ExactSecret("openshift-authentication", "v4-0-config-system-router-certs"),
+				libraryinputresources.ExactSecret("openshift-authentication", "v4-0-config-system-custom-router-certs"),
+				libraryinputresources.ExactSecret("openshift-authentication", "v4-0-config-system-ocp-branding-template"),
+				// oauth-apiserver
+				libraryinputresources.ExactClusterRole("system:openshift:useroauthaccesstoken-manager"),
+				libraryinputresources.ExactClusterRoleBinding("system:openshift:useroauthaccesstoken-manager"),
+				libraryinputresources.ExactClusterRoleBinding("system:openshift:oauth-apiserver"),
+				libraryinputresources.ExactDeployment("openshift-oauth-apiserver", "openshift-oauth-apiserver"),
+				libraryinputresources.ExactNamespace("openshift-oauth-apiserver"),
+				libraryinputresources.ExactResource("policy", "v1", "poddisruptionbudgets", "openshift-oauth-apiserver", "oauth-apiserver-pdb"),
+				libraryinputresources.ExactServiceAccount("openshift-oauth-apiserver", "oauth-apiserver-sa"),
+				libraryinputresources.ExactResource("", "v1", "services", "openshift-oauth-apiserver", "api"),
+				// oauth-openshift
+				libraryinputresources.ExactConfigMap("openshift-authentication", "audit"),
+				libraryinputresources.ExactClusterRoleBinding("system:openshift:openshift-authentication"),
+				libraryinputresources.ExactConfigMap("openshift-authentication", "v4-0-config-system-trusted-ca-bundle"),
+				libraryinputresources.ExactDeployment("openshift-authentication", "oauth-openshift"),
+				libraryinputresources.ExactNamespace("openshift-authentication"),
+				libraryinputresources.ExactResource("", "v1", "services", "openshift-authentication", "oauth-openshift"),
+				libraryinputresources.ExactResource("route.openshift.io", "v1", "routes", "openshift-authentication", "oauth-openshift"),
+				libraryinputresources.ExactServiceAccount("openshift-authentication", "oauth-openshift"),
+				libraryinputresources.ExactRoleBinding("openshift-config-managed", "system:openshift:oauth-servercert-trust"),
+				libraryinputresources.ExactRole("openshift-config-managed", "system:openshift:oauth-servercert-trust"),
+			},
+		},
+	}, nil
+}