MAJOR: kubernetes-ingress: Add CRD job w/ RBAC

Signed-off-by: Dinko Korunic <[email protected]>

Author: dkorunic

kubernetes-ingress/templates/_helpers.tpl

@@ -152,4 +152,11 @@ Create a FQDN for the Service metrics.
 {{- printf "%s-%s" (include "kubernetes-ingress.fullname" . | trunc 56 | trimSuffix "-") "metrics" }}
 {{- end -}}
 
+{{/*
+Create a default fully qualified default CRD job name.
+*/}}
+{{- define "kubernetes-ingress.crdjob.fullname" -}}
+{{- printf "%s-%s" (include "kubernetes-ingress.fullname" .) "crdjob" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
 {{/* vim: set filetype=mustache: */}}

kubernetes-ingress/templates/clusterrole.yaml

@@ -95,7 +95,10 @@ rules:
   - get
   - list
   - watch
+  - create
   - update
+  - patch
+  - delete
 {{- if .Values.controller.kubernetesGateway.enabled }}
 - apiGroups:
   - "gateway.networking.k8s.io"

kubernetes-ingress/templates/controller-crdjob.yaml

@@ -0,0 +1,51 @@
+{{/*
+Copyright 2023 HAProxy Technologies LLC
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/}}
+
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ include "kubernetes-ingress.crdjob.fullname" . }}
+  namespace: {{ include "kubernetes-ingress.namespace" . }}
+  labels:
+    app.kubernetes.io/name: {{ include "kubernetes-ingress.name" . }}
+    helm.sh/chart: {{ include "kubernetes-ingress.chart" . }}
+    app.kubernetes.io/managed-by: {{ .Release.Service }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+spec:
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: {{ include "kubernetes-ingress.name" . }}
+        app.kubernetes.io/instance: {{ .Release.Name }}
+        {{- if .Values.controller.podLabels }}
+{{ toYaml .Values.controller.podLabels | indent 8 }}
+        {{- end }}
+      {{- if .Values.controller.podAnnotations }}
+      annotations:
+{{ toYaml .Values.controller.podAnnotations | indent 8 }}
+      {{- end }}
+    spec:
+      serviceAccountName: {{ include "kubernetes-ingress.serviceAccountName" . }}
+      containers:
+        - name: {{ include "kubernetes-ingress.name" . }}-{{ .Values.controller.name }}
+          image: "{{ .Values.controller.image.repository }}:{{ tpl .Values.controller.image.tag . }}"
+          imagePullPolicy: {{ .Values.controller.image.pullPolicy }}
+          command:
+            - /haproxy-ingress-controller
+            - --job-check-crd
+          restartPolicy: Never
+  backoffLimit: 0