Add olly application

Add an observability application for local testing. The initial implementation
uses the Red Hat Observability Operator APIs and configuration that is
deployed in the redhat-appstudio repository. Additional RBAC is needed as the
deployment for appstudio assumes ArgoCD effectively has cluster-admin rights,
whereas Pipeline Service takes a more restrictive approach.

Author: adambkaplan

developer/openshift/dev_setup.sh

@@ -241,7 +241,7 @@ install_pipeline_service() {
 
   # Patch the url/branch to target the expected repository/branch
   manifest_dir="$(find "$WORK_DIR/environment/compute" -mindepth 1 -maxdepth 1 -type d)"
-  for app in "pipeline-service" "pipeline-service-storage"; do
+  for app in "pipeline-service" "pipeline-service-storage" "pipeline-service-o11y"; do
     cat << EOF >"$manifest_dir/patch-$app.yaml"
 ---
 apiVersion: argoproj.io/v1alpha1

developer/openshift/gitops/argocd/kustomization.yaml

@@ -5,3 +5,4 @@ kind: Kustomization
 resources:
   - pipeline-service.yaml
   - pipeline-service-storage.yaml
+  - pipeline-service-o11y.yaml

developer/openshift/gitops/argocd/pipeline-service-o11y.yaml

@@ -0,0 +1,30 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: pipeline-service-o11y
+  namespace: openshift-gitops
+spec:
+  destination:
+    namespace: openshift-gitops
+    server: https://kubernetes.default.svc
+  source:
+    path: developer/openshift/gitops/argocd/pipeline-service-o11y
+    repoURL: https://github.com/openshift-pipelines/pipeline-service.git
+    targetRevision: main
+  project: default
+  syncPolicy:
+    # Comment this out if you want to manually trigger deployments (using the
+    # Argo CD Web UI or Argo CD CLI), rather than automatically deploying on
+    # every new Git commit to your directory.
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+    retry:
+      limit: -1 # number of failed sync attempt retries; unlimited number of attempts if less than 0
+      backoff:
+        duration: 10s # the amount to back off. Default unit is seconds, but could also be a duration (e.g. "2m", "1h")
+        factor: 2 # a factor to multiply the base duration after each failed retry
+        maxDuration: 3m # the maximum amount of time allowed for the backoff strategy

developer/openshift/gitops/argocd/pipeline-service-o11y/README.md

@@ -0,0 +1,5 @@
+# Pipeline Service Observability
+
+This deploys observability (o11y) components used to configure Prometheus.
+It utilizes the o11y stack from redhat-appstudio, with modifications to only deploy
+what is needed by the Pipeline Service for inner-loop development.

developer/openshift/gitops/argocd/pipeline-service-o11y/appstudio-prometheus/allow-argocd-to-manage.yaml

@@ -0,0 +1,74 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: openshift-gitops-apply-prometheus
+rules:
+  - apiGroups:
+      - monitoring.rhobs
+    resources:
+      - monitoringstacks
+      - servicemonitors
+    verbs:
+      - get
+      - list
+      - patch
+      - create
+      - update
+      - delete
+  - apiGroups:
+      - monitoring.coreos.com
+    resources:
+      - prometheusrules
+    verbs:
+      - get
+      - list
+      - patch
+      - create
+      - update
+      - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: openshift-gitops-apply-prometheus
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: openshift-gitops-apply-prometheus
+subjects:
+  - kind: ServiceAccount
+    name: openshift-gitops-argocd-application-controller
+    namespace: openshift-gitops
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: openshift-gitops-manage-secrets
+  namespace: o11y
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+    verbs:
+      - get
+      - list
+      - create
+      - update
+      - patch
+      - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: openshift-gitops-manage-secrets
+  namespace: o11y
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: openshift-gitops-manage-secrets
+subjects:
+  - kind: ServiceAccount
+    name: openshift-gitops-argocd-application-controller
+    namespace: openshift-gitops

developer/openshift/gitops/argocd/pipeline-service-o11y/appstudio-prometheus/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - allow-argocd-to-manage.yaml
+  - https://github.com/redhat-appstudio/infra-deployments/components/o11y/development?ref=main
+  - https://github.com/redhat-appstudio/infra-deployments/components/monitoring/prometheus/development?ref=main

developer/openshift/gitops/argocd/pipeline-service-o11y/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - appstudio-prometheus