Remove tech-preview policy compliance-history API

Signed-off-by: Dale Haiducek <[email protected]>

Author: dhaiducek

pkg/cmd/install/hubaddon/scenario/addon/policy/addon-controller_clusterrole.yaml

@@ -7,16 +7,38 @@ metadata:
   name: policy-addon-ctrl-manager-role
 rules:
   - apiGroups:
-      - addon.open-cluster-management.io
+      - ""
     resources:
-      - addondeploymentconfigs
+      - events
+    verbs:
+      - create
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resourceNames:
+      - policy-encryption-key
+    resources:
+      - secrets
     verbs:
       - get
       - list
       - watch
   - apiGroups:
       - addon.open-cluster-management.io
     resources:
+      - addondeploymentconfigs
       - clustermanagementaddons
     verbs:
       - get
@@ -27,17 +49,21 @@ rules:
     resourceNames:
       - config-policy-controller
       - governance-policy-framework
+      - governance-standalone-hub-templating
     resources:
       - clustermanagementaddons/finalizers
+      - managedclusteraddons/finalizers
     verbs:
       - update
   - apiGroups:
       - addon.open-cluster-management.io
     resourceNames:
       - config-policy-controller
       - governance-policy-framework
+      - governance-standalone-hub-templating
     resources:
       - clustermanagementaddons/status
+      - managedclusteraddons/status
     verbs:
       - patch
       - update
@@ -56,29 +82,11 @@ rules:
     resourceNames:
       - config-policy-controller
       - governance-policy-framework
+      - governance-standalone-hub-templating
     resources:
       - managedclusteraddons
     verbs:
       - delete
-  - apiGroups:
-      - addon.open-cluster-management.io
-    resourceNames:
-      - config-policy-controller
-      - governance-policy-framework
-    resources:
-      - managedclusteraddons/finalizers
-    verbs:
-      - update
-  - apiGroups:
-      - addon.open-cluster-management.io
-    resourceNames:
-      - config-policy-controller
-      - governance-policy-framework
-    resources:
-      - managedclusteraddons/status
-    verbs:
-      - patch
-      - update
   - apiGroups:
       - authorization.k8s.io
     resources:
@@ -138,6 +146,7 @@ rules:
     resourceNames:
       - config-policy-controller
       - governance-policy-framework
+      - governance-standalone-hub-templating
     resources:
       - leases
     verbs:
@@ -146,72 +155,6 @@ rules:
       - patch
       - update
       - watch
-  - apiGroups:
-      - ""
-    resources:
-      - events
-    verbs:
-      - create
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - ""
-    resources:
-      - pods
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - ""
-    resources:
-      - secrets
-    verbs:
-      - create
-  - apiGroups:
-      - ""
-    resourceNames:
-      - governance-policy-database
-      - policy-encryption-key
-    resources:
-      - secrets
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - ""
-    resourceNames:
-      - open-cluster-management-compliance-history-api-recorder
-    resources:
-      - secrets
-    verbs:
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - ""
-    resources:
-      - serviceaccounts
-    verbs:
-      - create
-  - apiGroups:
-      - ""
-    resourceNames:
-      - open-cluster-management-compliance-history-api-recorder
-    resources:
-      - serviceaccounts
-    verbs:
-      - delete
-      - get
-      - patch
-      - update
   - apiGroups:
       - policy.open-cluster-management.io
     resources:
@@ -238,20 +181,12 @@ rules:
       - get
       - patch
       - update
-  - apiGroups:
-      - rbac.authorization.k8s.io
-    resources:
-      - clusterroles
-    verbs:
-      - create
   - apiGroups:
       - rbac.authorization.k8s.io
     resourceNames:
-      - open-cluster-management:compliance-history-api-recorder
-      - open-cluster-management:config-policy-controller-hub
-      - open-cluster-management:policy-framework-hub
+      - open-cluster-management:governance-standalone-hub-templating
     resources:
-      - clusterroles
+      - clusterrolebindings
     verbs:
       - delete
       - get
@@ -260,40 +195,25 @@ rules:
   - apiGroups:
       - rbac.authorization.k8s.io
     resources:
+      - clusterrolebindings
+      - clusterroles
       - rolebindings
     verbs:
       - create
   - apiGroups:
       - rbac.authorization.k8s.io
     resourceNames:
-      - open-cluster-management:compliance-history-api-recorder
       - open-cluster-management:config-policy-controller-hub
+      - open-cluster-management:governance-standalone-hub-templating
       - open-cluster-management:policy-framework-hub
     resources:
+      - clusterroles
       - rolebindings
     verbs:
       - delete
       - get
       - patch
       - update
-  - apiGroups:
-      - route.openshift.io
-    resources:
-      - routes
-    verbs:
-      - create
-  - apiGroups:
-      - route.openshift.io
-    resourceNames:
-      - governance-history-api
-    resources:
-      - routes
-    verbs:
-      - delete
-      - get
-      - list
-      - update
-      - watch
   - apiGroups:
       - work.open-cluster-management.io
     resources:

pkg/cmd/install/hubaddon/scenario/addon/policy/propagator_clusterrole.yaml

@@ -16,16 +16,6 @@ rules:
       - patch
       - update
       - watch
-  - apiGroups:
-      - ""
-    resourceNames:
-      - governance-policy-database
-    resources:
-      - secrets
-    verbs:
-      - get
-      - list
-      - watch
   - apiGroups:
       - ""
     resourceNames:
@@ -63,7 +53,6 @@ rules:
   - apiGroups:
       - authorization.k8s.io
     resources:
-      - subjectaccessreviews
       - tokenreviews
     verbs:
       - create

pkg/cmd/install/hubaddon/scenario/addon/policy/propagator_deployment.yaml

@@ -27,14 +27,10 @@ spec:
             - --metrics-bind-address=:8383
             - --leader-elect
             - --enable-webhooks=false
-            - --compliance-history-api-host=0.0.0.0
           ports:
             - containerPort: 8383
               protocol: TCP
               name: http
-            - containerPort: 8384
-              protocol: TCP
-              name: compliance-api
           imagePullPolicy: Always
           env:
             - name: WATCH_NAMESPACE
@@ -45,7 +41,3 @@ spec:
                   fieldPath: metadata.name
             - name: OPERATOR_NAME
               value: governance-policy-propagator
-            - name: WATCH_NAMESPACE_COMPLIANCE_EVENTS_STORE
-              valueFrom:
-                fieldRef:
-                  fieldPath: metadata.namespace