- Prerequisites
- Clone repository
- Building APIcast operator image
- Run APIcast Operator
- Run tests
- Bundle management
- Licenses management
- Adding new watched secrets
- operator-sdk version v1.2.0
- docker version 17.03+
- git
- go version 1.20
- kubernetes version v1.22.1+
- kubectl version v1.22.0+
- Access to a Kubernetes v1.21.0+ cluster.
- A user with administrative privileges in the Kubernetes cluster.
- Make sure that the
DOCKER_ORG
andDOCKER_REGISTRY
environment variables are set to the same value as your username on the container registry, and the container registry you are using.
export DOCKER_ORG=docker_hub_username
export DOCKER_REGISTRY=quay.io
git clone https://github.com/3scale/apicast-operator
cd apicast-operator
Build operator image
make docker-build-only IMG=$DOCKER_REGISTRY/$DOCKER_ORG/apicast-operator:myversiontag
Run the operator locally with the default Kubernetes config file present at $HOME/.kube/config
Run operator from command line, it will not be deployed as pod.
- Register the APIcast operator CRD in the Kubernetes API Server
// As a cluster admin
make install
- Create a new Kubernetes namespace (optional)
export NAMESPACE=operator-test
kubectl create namespace ${NAMESPACE}
Do not forget to change the current Kubernetes context to the newly
created namespace or create a new context for it and set the new one as the
active context
- Install the dependencies
make download
- Run operator
make run
- Build and upload custom operator image
make docker-build-only IMG=$DOCKER_REGISTRY/$DOCKER_ORG/apicast-operator:myversiontag
make operator-image-push IMG=$DOCKER_REGISTRY/$DOCKER_ORG/apicast-operator:myversiontag
- Build and upload custom operator bundle image. Changes to avoid conflicts will be made by the makefile.
make bundle-custom-build IMG=$DOCKER_REGISTRY/$DOCKER_ORG/apicast-operator:myversiontag BUNDLE_IMG=$DOCKER_REGISTRY/$DOCKER_ORG/apicast-operator-bundles:myversiontag
make bundle-image-push BUNDLE_IMG=$DOCKER_REGISTRY/$DOCKER_ORG/apicast-operator-bundles:myversiontag
- Deploy the operator in your currently configured and active cluster in $HOME/.kube/config:
make bundle-run BUNDLE_IMG=$DOCKER_REGISTRY/$DOCKER_ORG/apicast-operator-bundles:myversiontag
Note: The catalogsource will be installed in the openshift-marketplace
namespace
issue. By default, cluster scoped
subscription will be created in the namespace openshift-marketplace
.
Feel free to delete the operator (from the UI OperatorHub -> Installed Operators)
and install it namespace or cluster scoped.
It will take a few minutes for the operator to become visible under the OperatorHub section of the OpenShift console Catalog. It can be easily found by filtering the provider type to Custom.
make test
make test-unit
make kind-create-cluster
make test-integration
make bundle-build BUNDLE_IMG=$DOCKER_REGISTRY/$DOCKER_ORG/myrepo:myversiontag
make bundle-image-push BUNDLE_IMG=$DOCKER_REGISTRY/$DOCKER_ORG/myrepo:myversiontag
NOTE: if validating an image, the image must exist in a remote registry, not just locally.
make bundle-validate-image BUNDLE_IMG=$DOCKER_REGISTRY/$DOCKER_ORG/myrepo:myversiontag
It is a requirement that a file describing all the licenses used in the product is included, so that users can examine it.
- Check licenses when dependencies change.
make licenses-check
- Update
licenses.xml
file.
make licenses.xml
When licenses check does not parse correctly licensing information, it will complain. In that case, you need to add manually license information.
There are two options: a)specify dependency license (recommended) or b)add exception for that dependency.
- Specify dependency license:
license_finder dependencies add YOURLIBRARY --decisions-file=doc/dependency_decisions.yml LICENSE --project-path "PROJECT URL"
For instance
license_finder dependencies add k8s.io/klog --decisions-file=doc/dependency_decisions.yml "Apache 2.0" --project-path "https://github.com/kubernetes/klog"
- Adding exception for a dependency:
license_finder approval add YOURLIBRARY --decisions-file=doc/dependency_decisions.yml --why "LICENSE_TYPE LINK_TO_LICENSE"
For instance
license_finder approval add github.com/golang/glog --decisions-file=doc/dependency_decisions.yml --why "Apache 2.0 License https://github.com/golang/glog/blob/master/LICENSE"
After adding a new secret to the APIcast CRD make sure to also update the following files if you want the apicast-operator to watch the new secret:
- apis/apps/v1alpha1/apicast_types.go
- Add a new
GetXYZSecretRef()
function that returns the secret ref
- Add a new
- apis/apps/v1alpha1/apicast_types.go
- Update the
GetApicastSecretRefs()
to call the newGetXYZSecretRef()
function from step 1
- Update the
- controllers/apps/apicast_logic_reconciler.go
- Add the new secret to the
getSecretUIDs()
function
- Add the new secret to the
- pkg/apicast/apicast.go
- Add the new secret to the
getWatchedSecretAnnotations()
function
- Add the new secret to the
- pkg/apicast/apicast.go
- Add the new secret to the switch in the
hasSecretHashChanged()
function
- Add the new secret to the switch in the
- pkg/apicast/apicast_option_provider.go
- Add a new const called
XYZSecretResverAnnotation
that can be referenced throughout the code
- Add a new const called