constellation/bootstrapper/internal/kubernetes/k8sapi/resources/node_operator.go

package resources

import (
	_ "embed"
	"time"

	"github.com/edgelesssys/constellation/internal/secrets"
	"github.com/edgelesssys/constellation/internal/versions"
	operatorsv1 "github.com/operator-framework/api/pkg/operators/v1"
	operatorsv1alpha1 "github.com/operator-framework/api/pkg/operators/v1alpha1"
	corev1 "k8s.io/api/core/v1"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
)

const (
	nodeOperatorNamespace        = "kube-system"
	nodeOperatorCatalogNamespace = "olm"
)

// NodeOperatorCRDNames are the names of the custom resource definitions that are used by the node operator.
var NodeOperatorCRDNames = []string{
	"autoscalingstrategies.update.edgeless.systems",
	"nodeimages.update.edgeless.systems",
	"pendingnodes.update.edgeless.systems",
	"scalinggroups.update.edgeless.systems",
}

type nodeOperatorDeployment struct {
	CatalogSource     operatorsv1alpha1.CatalogSource
	OperatorGroup     operatorsv1.OperatorGroup
	Subscription      operatorsv1alpha1.Subscription
	CatalogPullSecret corev1.Secret
	ImagePullSecret   corev1.Secret
}

// NewNodeOperatorDeployment creates a new constellation node operator deployment.
// See /operators/constellation-node-operator for more information.
func NewNodeOperatorDeployment(cloudProvider string, uid string) *nodeOperatorDeployment {
	return &nodeOperatorDeployment{
		CatalogSource: operatorsv1alpha1.CatalogSource{
			TypeMeta: metav1.TypeMeta{APIVersion: "operators.coreos.com/v1alpha1", Kind: "CatalogSource"},
			ObjectMeta: metav1.ObjectMeta{
				Name:      "constellation-node-operator-catalog",
				Namespace: nodeOperatorCatalogNamespace,
			},
			Spec: operatorsv1alpha1.CatalogSourceSpec{
				SourceType:  "grpc",
				Secrets:     []string{secrets.PullSecretName},
				Image:       versions.NodeOperatorCatalogImage + ":" + versions.NodeOperatorVersion,
				DisplayName: "Constellation Node Operator",
				Publisher:   "Edgeless Systems",
				UpdateStrategy: &operatorsv1alpha1.UpdateStrategy{
					RegistryPoll: &operatorsv1alpha1.RegistryPoll{
						RawInterval: "1m0s",
						Interval:    &metav1.Duration{Duration: 1 * time.Minute},
					},
				},
			},
		},
		OperatorGroup: operatorsv1.OperatorGroup{
			TypeMeta: metav1.TypeMeta{APIVersion: "operators.coreos.com/v1", Kind: "OperatorGroup"},
			ObjectMeta: metav1.ObjectMeta{
				Name:      "constellation-og",
				Namespace: nodeOperatorNamespace,
			},
			Spec: operatorsv1.OperatorGroupSpec{
				UpgradeStrategy: operatorsv1.UpgradeStrategyDefault,
			},
		},
		Subscription: operatorsv1alpha1.Subscription{
			TypeMeta: metav1.TypeMeta{APIVersion: "operators.coreos.com/v1alpha1", Kind: "Subscription"},
			ObjectMeta: metav1.ObjectMeta{
				Name:      "constellation-node-operator-sub",
				Namespace: nodeOperatorNamespace,
			},
			Spec: &operatorsv1alpha1.SubscriptionSpec{
				Channel:                "alpha",
				Package:                "node-operator",
				CatalogSource:          "constellation-node-operator-catalog",
				CatalogSourceNamespace: "olm",
				InstallPlanApproval:    operatorsv1alpha1.ApprovalAutomatic,
				StartingCSV:            "node-operator." + versions.NodeOperatorVersion,
				Config: &operatorsv1alpha1.SubscriptionConfig{
					Env: []corev1.EnvVar{
						{Name: "CONSTEL_CSP", Value: cloudProvider},
						{Name: "constellation-uid", Value: uid},
					},
				},
			},
		},
		CatalogPullSecret: NewImagePullSecret(nodeOperatorCatalogNamespace),
		ImagePullSecret:   NewImagePullSecret(nodeOperatorNamespace),
	}
}

func (c *nodeOperatorDeployment) Marshal() ([]byte, error) {
	return MarshalK8SResources(c)
}