CLOUDP-84606: helm support (#182)

Author: Anton

config/manager/manager.yaml

@@ -25,6 +25,7 @@ spec:
       securityContext:
         runAsNonRoot: true
         runAsUser: 2000
+      serviceAccountName: operator
       containers:
       - command:
         - /manager
@@ -49,11 +50,11 @@ spec:
         imagePullPolicy: Always
         resources:
           limits:
-            cpu: 100m
-            memory: 100Mi
+            cpu: 500m
+            memory: 256Mi
           requests:
             cpu: 100m
-            memory: 20Mi
+            memory: 50Mi
         env:
           - name: OPERATOR_POD_NAME
             valueFrom:

config/managerwithproxy/manager_auth_proxy_patch.yaml

@@ -10,7 +10,7 @@ spec:
     spec:
       containers:
       - name: kube-rbac-proxy
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
+        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"

config/rbac/clusterwide/auth_proxy_role_binding.yaml

@@ -8,5 +8,4 @@ roleRef:
   name: proxy-role
 subjects:
 - kind: ServiceAccount
-  name: default
-  namespace: system
+  name: operator

config/rbac/clusterwide/kustomization.yaml

@@ -1,12 +1,13 @@
 resources:
 - role.yaml
 - role_binding.yaml
+- ../service_account.yaml
 - ../leader_election_role.yaml
 - ../leader_election_role_binding.yaml
 # Comment the following 4 lines if you want to disable
 # the auth proxy (https://github.com/brancz/kube-rbac-proxy)
 # which protects your /metrics endpoint.
 - auth_proxy_role.yaml
 - auth_proxy_role_binding.yaml
-- ../auth_proxy_client_clusterrole.yaml
+#- ../auth_proxy_client_clusterrole.yaml
 - ../auth_proxy_service.yaml

config/rbac/clusterwide/role_binding.yaml

@@ -8,5 +8,4 @@ roleRef:
   name: manager-role
 subjects:
   - kind: ServiceAccount
-    name: default
-    namespace: system
+    name: operator

config/rbac/leader_election_role_binding.yaml

@@ -8,5 +8,4 @@ roleRef:
   name: leader-election-role
 subjects:
 - kind: ServiceAccount
-  name: default
-  namespace: system
+  name: operator

config/rbac/namespaced/auth_proxy_role_binding.yaml

@@ -8,5 +8,4 @@ roleRef:
   name: proxy-role
 subjects:
 - kind: ServiceAccount
-  name: default
-  namespace: system
+  name: operator

config/rbac/namespaced/kustomization.yaml

@@ -1,12 +1,13 @@
 resources:
 - role.yaml
 - role_binding.yaml
+- ../service_account.yaml
 - ../leader_election_role.yaml
 - ../leader_election_role_binding.yaml
 # Comment the following 4 lines if you want to disable
 # the auth proxy (https://github.com/brancz/kube-rbac-proxy)
 # which protects your /metrics endpoint.
 - auth_proxy_role.yaml
 - auth_proxy_role_binding.yaml
-- ../auth_proxy_client_clusterrole.yaml
+#- ../auth_proxy_client_clusterrole.yaml
 - ../auth_proxy_service.yaml

config/rbac/namespaced/role_binding.yaml

@@ -8,5 +8,4 @@ roleRef:
   name: manager-role
 subjects:
 - kind: ServiceAccount
-  name: default
-  namespace: system
+  name: operator

config/rbac/service_account.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: operator