Add ClusterRole having AggregatedRule to integration tests

Signed-off-by: Maciej Zimnoch <[email protected]>

Author: zimnx

hack/generate/samples/internal/go/memcached-with-customization/manifests/aggregation-subrole.clusterole.yaml

@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: aggregation-memcached-subrole
+  labels:
+    rbac.example.memcached.com/aggregate-to-aggregation-memcached: "true"
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+    verbs:
+      - update

hack/generate/samples/internal/go/memcached-with-customization/manifests/aggregation.clusterolebinding.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: aggregation-memcached
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: aggregation-memcached
+subjects:
+  - kind: ServiceAccount
+    name: controller-manager
+    namespace: system

hack/generate/samples/internal/go/memcached-with-customization/manifests/aggregation.clusterrole.yaml

@@ -0,0 +1,8 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: aggregation-memcached
+aggregationRule:
+  clusterRoleSelectors:
+    - matchLabels:
+        rbac.example.memcached.com/aggregate-to-aggregation-memcached: "true"

hack/generate/samples/internal/go/memcached-with-customization/manifests/aggregation.kustomization.patch.yaml

@@ -0,0 +1,4 @@
+
+- aggregation.clusterrolebinding.yaml
+- aggregation-subrole.clusterrole.yaml
+- aggregation.clusterrole.yaml

hack/generate/samples/internal/go/memcached-with-customization/manifests/registry.go

@@ -0,0 +1,19 @@
+package manifests
+
+import (
+	_ "embed"
+)
+
+var (
+	//go:embed "aggregation.clusterrole.yaml"
+	AggregationClusterRoleString string
+
+	//go:embed "aggregation-subrole.clusterole.yaml"
+	AggregationSubroleClusterRoleString string
+
+	//go:embed "aggregation.clusterolebinding.yaml"
+	AggregationClusterRoleBindingString string
+
+	//go:embed "aggregation.kustomization.patch.yaml"
+	AggregationKustomizationPatchString string
+)

hack/generate/samples/internal/go/memcached-with-customization/memcached_with_customization.go

@@ -21,6 +21,7 @@ import (
 	"path/filepath"
 	"strings"
 
+	"github.com/operator-framework/operator-sdk/hack/generate/samples/internal/go/memcached-with-customization/manifests"
 	log "github.com/sirupsen/logrus"
 	kbutil "sigs.k8s.io/kubebuilder/v4/pkg/plugin/util"
 
@@ -139,6 +140,9 @@ func (mh *Memcached) Run() {
 
 	mh.implementingWebhooks()
 
+	log.Infof("implementing the aggregated cluster rule")
+	mh.implementingAggregatedClusterRules()
+
 	mh.uncommentDefaultKustomizationV4()
 	mh.uncommentManifestsKustomizationv4()
 
@@ -780,6 +784,40 @@ func (mh *Memcached) customizingMakefile() {
 	pkg.CheckError("adding metrics documentation", err)
 }
 
+func (mh *Memcached) implementingAggregatedClusterRules() {
+	rbacDirPath := filepath.Join(mh.ctx.Dir, "config", "rbac")
+
+	var filePerm os.FileMode = 0600
+
+	err := os.WriteFile(
+		filepath.Join(rbacDirPath, "aggregation.clusterrole.yaml"),
+		[]byte(manifests.AggregationClusterRoleString),
+		filePerm,
+	)
+	pkg.CheckError("creating aggregation clusterrole", err)
+
+	err = os.WriteFile(
+		filepath.Join(rbacDirPath, "aggregation-subrole.clusterrole.yaml"),
+		[]byte(manifests.AggregationSubroleClusterRoleString),
+		filePerm,
+	)
+	pkg.CheckError("creating aggregation clusterrole subrole", err)
+
+	err = os.WriteFile(
+		filepath.Join(rbacDirPath, "aggregation.clusterrolebinding.yaml"),
+		[]byte(manifests.AggregationClusterRoleBindingString),
+		filePerm,
+	)
+	pkg.CheckError("creating aggregation clusterrolebinding", err)
+
+	kustomizationPath := filepath.Join(rbacDirPath, "kustomization.yaml")
+	err = kbutil.InsertCode(kustomizationPath,
+		`- memcached_viewer_role.yaml`,
+		manifests.AggregationKustomizationPatchString,
+	)
+	pkg.CheckError("adding metrics documentation", err)
+}
+
 const metricsFragment = `
 
 package monitoring