Add cert annotations. Route cert tests updates. Network policy type update (#441)

Author: arturdzm

api/v1/webspherelibertyapplication_types.go

@@ -306,15 +306,26 @@ type WebSphereLibertyApplicationService struct {
 	// +operator-sdk:csv:customresourcedefinitions:order=15,type=spec,displayName="Certificate Secret Reference",xDescriptors="urn:alm:descriptor:com.tectonic.ui:text"
 	CertificateSecretRef *string `json:"certificateSecretRef,omitempty"`
 
+	// Configure service certificate.
+	// +operator-sdk:csv:customresourcedefinitions:order=16,type=spec,displayName="Service Certificate"
+	Certificate *WebSphereLibertyApplicationCertificate `json:"certificate,omitempty"`
+
 	// An array consisting of service ports.
-	// +operator-sdk:csv:customresourcedefinitions:order=16,type=spec
+	// +operator-sdk:csv:customresourcedefinitions:order=17,type=spec
 	Ports []corev1.ServicePort `json:"ports,omitempty"`
 
 	// Expose the application as a bindable service. Defaults to false.
-	// +operator-sdk:csv:customresourcedefinitions:order=17,type=spec,displayName="Bindable",xDescriptors="urn:alm:descriptor:com.tectonic.ui:booleanSwitch"
+	// +operator-sdk:csv:customresourcedefinitions:order=18,type=spec,displayName="Bindable",xDescriptors="urn:alm:descriptor:com.tectonic.ui:booleanSwitch"
 	Bindable *bool `json:"bindable,omitempty"`
 }
 
+// Configure service certificate.
+type WebSphereLibertyApplicationCertificate struct {
+	// Annotations to be added to the service certificate.
+	// +operator-sdk:csv:customresourcedefinitions:order=13,type=spec,displayName="Annotations",xDescriptors="urn:alm:descriptor:com.tectonic.ui:text"
+	Annotations map[string]string `json:"annotations,omitempty"`
+}
+
 // Defines the network policy
 type WebSphereLibertyApplicationNetworkPolicy struct {
 	// Disable the creation of the network policy. Defaults to false.
@@ -802,6 +813,9 @@ func (cr *WebSphereLibertyApplication) GetService() common.BaseComponentService
 
 // GetNetworkPolicy returns network policy settings
 func (cr *WebSphereLibertyApplication) GetNetworkPolicy() common.BaseComponentNetworkPolicy {
+	if cr.Spec.NetworkPolicy == nil {
+		return nil
+	}
 	return cr.Spec.NetworkPolicy
 }
 
@@ -1029,30 +1043,43 @@ func (s *WebSphereLibertyApplicationService) GetCertificateSecretRef() *string {
 	return s.CertificateSecretRef
 }
 
+// GetCertificate returns a service certificate configuration
+func (s *WebSphereLibertyApplicationService) GetCertificate() common.BaseComponentCertificate {
+	if s.Certificate == nil {
+		return nil
+	}
+	return s.Certificate
+}
+
+// GetAnnotations returns annotations to be added to certificate request
+func (c *WebSphereLibertyApplicationCertificate) GetAnnotations() map[string]string {
+	return c.Annotations
+}
+
 // GetBindable returns whether the application should be exposable as a service
 func (s *WebSphereLibertyApplicationService) GetBindable() *bool {
 	return s.Bindable
 }
 
 // GetNamespaceLabels returns the namespace selector labels that should be used for the ingress rule
 func (np *WebSphereLibertyApplicationNetworkPolicy) GetNamespaceLabels() map[string]string {
-	if np == nil || np.NamespaceLabels == nil {
-		return nil
+	if np.NamespaceLabels != nil {
+		return *np.NamespaceLabels
 	}
-	return *np.NamespaceLabels
+	return nil
 }
 
 // GetFromLabels returns the pod selector labels that should be used for the ingress rule
 func (np *WebSphereLibertyApplicationNetworkPolicy) GetFromLabels() map[string]string {
-	if np == nil || np.FromLabels == nil {
-		return nil
+	if np.FromLabels != nil {
+		return *np.FromLabels
 	}
-	return *np.FromLabels
+	return nil
 }
 
 // IsDisabled returns whether the network policy should be created or not
 func (np *WebSphereLibertyApplicationNetworkPolicy) IsDisabled() bool {
-	return np != nil && np.Disable != nil && *np.Disable
+	return np.Disable != nil && *np.Disable
 }
 
 // GetLabels returns labels to be added on ServiceMonitor

api/v1/zz_generated.deepcopy.go

@@ -57,7 +57,7 @@ metadata:
     capabilities: Auto Pilot
     categories: Application Runtime
     containerImage: icr.io/cpopen/websphere-liberty-operator:daily
-    createdAt: "2023-04-05T00:18:05Z"
+    createdAt: "2023-04-13T10:08:23Z"
     description: Deploy and manage containerized Liberty applications
     olm.skipRange: '>=1.0.0 <1.2.0'
     operators.openshift.io/infrastructure-features: '["disconnected"]'
@@ -275,6 +275,11 @@ spec:
         path: service.annotations
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:text
+      - description: Annotations to be added to the service certificate.
+        displayName: Annotations
+        path: service.certificate.annotations
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
       - description: The port that the operator assigns to containers inside pods.
           Defaults to the value of .spec.service.port.
         displayName: Target Port
@@ -294,20 +299,23 @@ spec:
         - urn:alm:descriptor:com.tectonic.ui:text
       - displayName: Route
         path: route
-      - description: An array consisting of service ports.
-        displayName: Ports
-        path: service.ports
+      - description: Configure service certificate.
+        displayName: Service Certificate
+        path: service.certificate
       - description: Configures the Semeru Cloud Compiler to handle Just-In-Time (JIT)
           compilation requests from the application.
         displayName: Semeru Cloud Compiler
         path: semeruCloudCompiler
+      - description: An array consisting of service ports.
+        displayName: Ports
+        path: service.ports
+      - displayName: Network Policy
+        path: networkPolicy
       - description: Expose the application as a bindable service. Defaults to false.
         displayName: Bindable
         path: service.bindable
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:booleanSwitch
-      - displayName: Network Policy
-        path: networkPolicy
       - displayName: Serviceability
         path: serviceability
       - displayName: Single Sign-On

bundle/manifests/ibm-websphere-liberty.clusterserviceversion.yaml

@@ -3749,6 +3749,15 @@ spec:
                     description: Expose the application as a bindable service. Defaults
                       to false.
                     type: boolean
+                  certificate:
+                    description: Configure service certificate.
+                    properties:
+                      annotations:
+                        additionalProperties:
+                          type: string
+                        description: Annotations to be added to the service certificate.
+                        type: object
+                    type: object
                   certificateSecretRef:
                     description: 'A name of a secret that already contains TLS key,
                       certificate and CA to be mounted in the pod. The following keys

bundle/manifests/liberty.websphere.ibm.com_webspherelibertyapplications.yaml

@@ -4,7 +4,8 @@ type: kubernetes.io/tls
 metadata:
   name: route-tls-secret
 data:
-  ca.crt: Y2FjcnQK
+  ca.crt: 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
   destCA.crt: ZGVzdENBY3J0Cg==
-  tls.crt: dGxzY3J0Cg==
+  tls.crt: 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
   tls.key: dGxza2V5Cg==
+

bundle/tests/scorecard/kuttl/route-certificate/00-assert.yaml

@@ -4,11 +4,9 @@ metadata:
   name: route-tls-secret
 type: kubernetes.io/tls
 data:
-  # 'tlscrt'
-  tls.crt: dGxzY3J0Cg==
+  tls.crt: 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
   # 'tlskey'
   tls.key: dGxza2V5Cg==
-  # 'cacrt'
-  ca.crt: Y2FjcnQK
+  ca.crt: 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
   # 'destCAcrt'
   destCA.crt: ZGVzdENBY3J0Cg==