feat(deployment): add ExtraVolumes and ExtraVolumeMounts to DeploymentSpec

api/provider/v1alpha1/deployment_types.go

@@ -17,6 +17,7 @@ limitations under the License.
 package v1alpha1
 
 import (
+	corev1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 )
 
@@ -45,6 +46,24 @@ type DeploymentSpec struct {
 	// +kubebuilder:validation:Enum=DEBUG;INFO;ERROR
 	// +kubebuilder:default=INFO
 	Verbosity string `json:"verbosity,omitempty"`
+
+	// List of additional volumes that are mounted in the main container.
+	// More info: https://kubernetes.io/docs/concepts/storage/volumes
+	// +optional
+	// +patchMergeKey=name
+	// +patchStrategy=merge,retainKeys
+	// +listType=map
+	// +listMapKey=name
+	ExtraVolumes []corev1.Volume `json:"extraVolumes,omitempty" patchStrategy:"merge,retainKeys" patchMergeKey:"name"`
+
+	// List of additional volume mounts that are mounted in the main container.
+	// Cannot be updated.
+	// +optional
+	// +patchMergeKey=mountPath
+	// +patchStrategy=merge
+	// +listType=map
+	// +listMapKey=mountPath
+	ExtraVolumeMounts []corev1.VolumeMount `json:"extraVolumeMounts,omitempty" patchStrategy:"merge" patchMergeKey:"mountPath"`
 }
 
 // DeploymentStatus defines the observed state of a provider.

internal/controllers/provider/install/deployment.go

@@ -75,11 +75,13 @@ func (m *deploymentMutator) Mutate(d *appsv1.Deployment) error {
 							"--verbosity=" + m.values.Verbosity(),
 							"--provider-name=" + m.values.provider.GetName(),
 						},
-						Env: env,
+						Env:          env,
+						VolumeMounts: m.values.deploymentSpec.ExtraVolumeMounts,
 					},
 				},
 				ImagePullSecrets:   m.values.ImagePullSecrets(),
 				ServiceAccountName: m.values.NamespacedDefaultResourceName(),
+				Volumes:            m.values.deploymentSpec.ExtraVolumes,
 			},
 		},
 	}

internal/controllers/provider/install/rbac_init.go

@@ -50,7 +50,7 @@ func newInitClusterRoleMutator(values *Values) resources.Mutator[*rbac.ClusterRo
 			},
 			{
 				APIGroups: []string{"clusters.openmcp.cloud"},
-				Resources: []string{"accessrequests", "clusterrequests"},
+				Resources: []string{"accessrequests", "clusterrequests", "clusterprofiles"},
 				Verbs:     []string{"get", "list", "watch", "create", "update", "patch", "delete"},
 			},
 		},