Ensure "vendor" label is present on PGO objects

Though PGO leverages a lot of stable naming, this label is a
helpful identifier among the objects that PGO is managing. Some
derived objects (e.g. Secrets from SAs) do not get the label, but
they are tightly coulpled to the object that does get the label.

Most objects had the "vendor" label already, but this should bring
everything inline.

Issue: #2470

Author: jkatz

deploy/cluster-role-bindings.yaml

@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: pgo-cluster-role
+  labels:
+    vendor: crunchydata
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

deploy/cluster-roles-readonly.yaml

@@ -2,6 +2,8 @@ kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: pgo-cluster-role
+  labels:
+    vendor: crunchydata
 rules:
   - apiGroups:
       - ''

deploy/cluster-roles.yaml

@@ -3,6 +3,8 @@ kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: pgo-cluster-role
+  labels:
+    vendor: crunchydata
 rules:
   - apiGroups:
       - ''

deploy/deploy.sh

@@ -53,6 +53,8 @@ then
 		--from-literal=aws-s3-key="${pgbackrest_aws_s3_key}" \
 		--from-literal=aws-s3-key-secret="${pgbackrest_aws_s3_key_secret}" \
 		--from-literal=gcs-key="${pgbackrest_gcs_key}"
+  $PGO_CMD --namespace=$PGO_OPERATOR_NAMESPACE label secret pgo-backrest-repo-config \
+		vendor=crunchydata
 fi
 
 #
@@ -65,11 +67,12 @@ then
 fi
 
 $PGO_CMD --namespace=$PGO_OPERATOR_NAMESPACE create secret tls pgo.tls --key=${PGOROOT}/conf/postgres-operator/server.key --cert=${PGOROOT}/conf/postgres-operator/server.crt
+$PGO_CMD --namespace=$PGO_OPERATOR_NAMESPACE label secret pgo.tls vendor=crunchydata
 
 $PGO_CMD --namespace=$PGO_OPERATOR_NAMESPACE create configmap pgo-config \
 	--from-file=${PGOROOT}/conf/postgres-operator/pgo.yaml \
 	--from-file=${PGO_CONF_DIR}/pgo-configs
-
+$PGO_CMD --namespace=$PGO_OPERATOR_NAMESPACE label configmap pgo-config vendor=crunchydata
 
 #
 # check if custom port value is set, otherwise set default values

deploy/local-namespace-rbac.yaml

@@ -3,6 +3,8 @@ kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: pgo-local-ns
+  labels:
+    vendor: crunchydata
 rules:
   - apiGroups:
       - ''
@@ -28,6 +30,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: pgo-local-ns
+  labels:
+    vendor: crunchydata
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -41,6 +45,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: pgo-target-role-binding
+  labels:
+    vendor: crunchydata
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

deploy/role-bindings.yaml

@@ -4,6 +4,8 @@ kind: RoleBinding
 metadata:
   name: pgo-role
   namespace: "$PGO_OPERATOR_NAMESPACE"
+  labels:
+    vendor: crunchydata
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

deploy/roles.yaml

@@ -4,6 +4,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: pgo-role
   namespace: "$PGO_OPERATOR_NAMESPACE"
+  labels:
+    vendor: crunchydata
 rules:
   - apiGroups:
       - ''

deploy/service-accounts.yaml

@@ -4,3 +4,5 @@ kind: ServiceAccount
 metadata:
   name: postgres-operator
   namespace: $PGO_OPERATOR_NAMESPACE
+  labels:
+    vendor: crunchydata

deploy/service.json

@@ -4,7 +4,8 @@
     "metadata": {
 	"name": "postgres-operator",
         "labels": {
-            "name": "postgres-operator"
+            "name": "postgres-operator",
+            "vendor": "crunchydata"
         }
     },
     "spec": {

docs/content/installation/other/operator-hub.md

@@ -25,6 +25,8 @@ If you plan to use AWS S3 to store backups and would like to have the keys avail
 kubectl -n "$PGO_OPERATOR_NAMESPACE" create secret generic pgo-backrest-repo-config \
   --from-literal=aws-s3-key="<your-aws-s3-key>" \
   --from-literal=aws-s3-key-secret="<your-aws-s3-key-secret>"
+kubectl -n "$PGO_OPERATOR_NAMESPACE" label secret pgo-backrest-repo-config \
+  vendor=crunchydata
 ```
 
 ### Certificates (optional)