Add bundle manifests

Author: kabicin

api/v1/zz_generated.deepcopy.go

@@ -564,31 +564,68 @@ spec:
         path: semeruCloudCompiler.enable
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:booleanSwitch
-      - description: Specify the labels of namespaces that incoming traffic is allowed
-          from.
-        displayName: Namespace Labels
-        path: networkPolicy.namespaceLabels
+      - description: Disable the creation of the network policy ingress. Defaults
+          to false.
+        displayName: Disable Ingress
+        path: networkPolicy.disableIngress
         x-descriptors:
-        - urn:alm:descriptor:com.tectonic.ui:text
+        - urn:alm:descriptor:com.tectonic.ui:booleanSwitch
       - description: Number of desired pods for the Semeru Cloud Compiler. Defaults
           to 1.
         displayName: Replicas
         path: semeruCloudCompiler.replicas
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:podCount
-      - description: Specify the labels of pod(s) that incoming traffic is allowed
-          from.
-        displayName: From Labels
-        path: networkPolicy.fromLabels
+      - description: Disable the creation of the network policy egress. Defaults to
+          false.
+        displayName: Disable Egress
+        path: networkPolicy.disableEgress
         x-descriptors:
-        - urn:alm:descriptor:com.tectonic.ui:text
+        - urn:alm:descriptor:com.tectonic.ui:booleanSwitch
       - description: Resource requests and limits for the Semeru Cloud Compiler. The
           CPU defaults to 100m with a limit of 2000m. The memory defaults to 800Mi,
           with a limit of 1200Mi.
         displayName: Resource Requirements
         path: semeruCloudCompiler.resources
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:resourceRequirements
+      - description: Bypasses deny all egress rules to allow API server and DNS access.
+          Defaults to false.
+        displayName: Bypass Deny All Egress
+        path: networkPolicy.bypassDenyAllEgress
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:booleanSwitch
+      - description: Deprecated. .spec.networkPolicy.fromNamespaceLabels should be
+          used instead. If both are specified, .spec.networkPolicy.fromNamespaceLabels
+          will override this.
+        displayName: Namespace Labels
+        path: networkPolicy.namespaceLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
+      - description: Specify the labels of namespaces that incoming traffic is allowed
+          from.
+        displayName: From Namespace Labels
+        path: networkPolicy.fromNamespaceLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
+      - description: Specify the labels of pod(s) that incoming traffic is allowed
+          from.
+        displayName: From Labels
+        path: networkPolicy.fromLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
+      - description: Specify the labels of namespaces that outgoing traffic is allowed
+          to.
+        displayName: To Namespace Labels
+        path: networkPolicy.toNamespaceLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
+      - description: Specify the labels of pod(s) that outgoing traffic is allowed
+          to.
+        displayName: To Labels
+        path: networkPolicy.toLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
       - description: 'Product edition. Defaults to IBM WebSphere Application Server.
           Other options: IBM WebSphere Application Server Liberty Core, IBM WebSphere
           Application Server Network Deployment'
@@ -1085,6 +1122,14 @@ spec:
           - list
           - update
           - watch
+        - apiGroups:
+          - ""
+          resources:
+          - endpoints
+          verbs:
+          - get
+          - list
+          - watch
         - apiGroups:
           - ""
           resources:

bundle/manifests/ibm-websphere-liberty.clusterserviceversion.yaml

@@ -3901,22 +3901,53 @@ spec:
               networkPolicy:
                 description: Defines the network policy
                 properties:
+                  bypassDenyAllEgress:
+                    description: Bypasses deny all egress rules to allow API server
+                      and DNS access. Defaults to false.
+                    type: boolean
                   disable:
                     description: Disable the creation of the network policy. Defaults
                       to false.
                     type: boolean
+                  disableEgress:
+                    description: Disable the creation of the network policy egress.
+                      Defaults to false.
+                    type: boolean
+                  disableIngress:
+                    description: Disable the creation of the network policy ingress.
+                      Defaults to false.
+                    type: boolean
                   fromLabels:
                     additionalProperties:
                       type: string
                     description: Specify the labels of pod(s) that incoming traffic
                       is allowed from.
                     type: object
-                  namespaceLabels:
+                  fromNamespaceLabels:
                     additionalProperties:
                       type: string
                     description: Specify the labels of namespaces that incoming traffic
                       is allowed from.
                     type: object
+                  namespaceLabels:
+                    additionalProperties:
+                      type: string
+                    description: Deprecated. .spec.networkPolicy.fromNamespaceLabels
+                      should be used instead. If both are specified, .spec.networkPolicy.fromNamespaceLabels
+                      will override this.
+                    type: object
+                  toLabels:
+                    additionalProperties:
+                      type: string
+                    description: Specify the labels of pod(s) that outgoing traffic
+                      is allowed to.
+                    type: object
+                  toNamespaceLabels:
+                    additionalProperties:
+                      type: string
+                    description: Specify the labels of namespaces that outgoing traffic
+                      is allowed to.
+                    type: object
                 type: object
               probes:
                 description: Define health checks on application container to determine

bundle/manifests/liberty.websphere.ibm.com_webspherelibertyapplications.yaml

@@ -3897,22 +3897,53 @@ spec:
               networkPolicy:
                 description: Defines the network policy
                 properties:
+                  bypassDenyAllEgress:
+                    description: Bypasses deny all egress rules to allow API server
+                      and DNS access. Defaults to false.
+                    type: boolean
                   disable:
                     description: Disable the creation of the network policy. Defaults
                       to false.
                     type: boolean
+                  disableEgress:
+                    description: Disable the creation of the network policy egress.
+                      Defaults to false.
+                    type: boolean
+                  disableIngress:
+                    description: Disable the creation of the network policy ingress.
+                      Defaults to false.
+                    type: boolean
                   fromLabels:
                     additionalProperties:
                       type: string
                     description: Specify the labels of pod(s) that incoming traffic
                       is allowed from.
                     type: object
-                  namespaceLabels:
+                  fromNamespaceLabels:
                     additionalProperties:
                       type: string
                     description: Specify the labels of namespaces that incoming traffic
                       is allowed from.
                     type: object
+                  namespaceLabels:
+                    additionalProperties:
+                      type: string
+                    description: Deprecated. .spec.networkPolicy.fromNamespaceLabels
+                      should be used instead. If both are specified, .spec.networkPolicy.fromNamespaceLabels
+                      will override this.
+                    type: object
+                  toLabels:
+                    additionalProperties:
+                      type: string
+                    description: Specify the labels of pod(s) that outgoing traffic
+                      is allowed to.
+                    type: object
+                  toNamespaceLabels:
+                    additionalProperties:
+                      type: string
+                    description: Specify the labels of namespaces that outgoing traffic
+                      is allowed to.
+                    type: object
                 type: object
               probes:
                 description: Define health checks on application container to determine

config/crd/bases/liberty.websphere.ibm.com_webspherelibertyapplications.yaml

@@ -506,31 +506,68 @@ spec:
         path: semeruCloudCompiler.enable
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:booleanSwitch
-      - description: Specify the labels of namespaces that incoming traffic is allowed
-          from.
-        displayName: Namespace Labels
-        path: networkPolicy.namespaceLabels
+      - description: Disable the creation of the network policy ingress. Defaults
+          to false.
+        displayName: Disable Ingress
+        path: networkPolicy.disableIngress
         x-descriptors:
-        - urn:alm:descriptor:com.tectonic.ui:text
+        - urn:alm:descriptor:com.tectonic.ui:booleanSwitch
       - description: Number of desired pods for the Semeru Cloud Compiler. Defaults
           to 1.
         displayName: Replicas
         path: semeruCloudCompiler.replicas
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:podCount
-      - description: Specify the labels of pod(s) that incoming traffic is allowed
-          from.
-        displayName: From Labels
-        path: networkPolicy.fromLabels
+      - description: Disable the creation of the network policy egress. Defaults to
+          false.
+        displayName: Disable Egress
+        path: networkPolicy.disableEgress
         x-descriptors:
-        - urn:alm:descriptor:com.tectonic.ui:text
+        - urn:alm:descriptor:com.tectonic.ui:booleanSwitch
       - description: Resource requests and limits for the Semeru Cloud Compiler. The
           CPU defaults to 100m with a limit of 2000m. The memory defaults to 800Mi,
           with a limit of 1200Mi.
         displayName: Resource Requirements
         path: semeruCloudCompiler.resources
         x-descriptors:
         - urn:alm:descriptor:com.tectonic.ui:resourceRequirements
+      - description: Bypasses deny all egress rules to allow API server and DNS access.
+          Defaults to false.
+        displayName: Bypass Deny All Egress
+        path: networkPolicy.bypassDenyAllEgress
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:booleanSwitch
+      - description: Deprecated. .spec.networkPolicy.fromNamespaceLabels should be
+          used instead. If both are specified, .spec.networkPolicy.fromNamespaceLabels
+          will override this.
+        displayName: Namespace Labels
+        path: networkPolicy.namespaceLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
+      - description: Specify the labels of namespaces that incoming traffic is allowed
+          from.
+        displayName: From Namespace Labels
+        path: networkPolicy.fromNamespaceLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
+      - description: Specify the labels of pod(s) that incoming traffic is allowed
+          from.
+        displayName: From Labels
+        path: networkPolicy.fromLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
+      - description: Specify the labels of namespaces that outgoing traffic is allowed
+          to.
+        displayName: To Namespace Labels
+        path: networkPolicy.toNamespaceLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
+      - description: Specify the labels of pod(s) that outgoing traffic is allowed
+          to.
+        displayName: To Labels
+        path: networkPolicy.toLabels
+        x-descriptors:
+        - urn:alm:descriptor:com.tectonic.ui:text
       - description: 'Product edition. Defaults to IBM WebSphere Application Server.
           Other options: IBM WebSphere Application Server Liberty Core, IBM WebSphere
           Application Server Network Deployment'

config/manifests/bases/ibm-websphere-liberty.clusterserviceversion.yaml

@@ -73,6 +73,14 @@ rules:
   - list
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - endpoints
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - ""
   resources: