K8SPS-241: Set OPERATOR_NS in default Jenkins pipeline (#680)

* Set OPERATOR_NS in defaul Jenkins pipeline.

* Create ps-operator namespace.

* Properly check for CW mode operator deployment.

* Cluster wide orchestrator role.

* Create secrets in right namespace for backup tests.

* Regenerate cw files.

* Regenerate files.

* Revert cw generation.

* Add destroy cluster gracefully step.

* Create orc rbac objects.

* Minor refactor.

* Remove orchestrator RBAC from deploy files.

* Remove copy.

* Rbac to namespace.

* Regenerate default role.

* Regenarete deploy files.

* Add rbac perms.

* Correct kind for rbac.

* Get pods for password leaks.

* Fix tls tests.

* Add namespace to minio endpoint in tests.

* Fix script.

* Update tests.

* Update smart-update and version-service tests.

* Remove rbac/namespace folder and regenerate yaml files.

* Refactor.

* Cleanup.

* Fix version-service test.

Author: inelpandzic

Jenkinsfile

@@ -280,6 +280,7 @@ pipeline {
     environment {
         CLOUDSDK_CORE_DISABLE_PROMPTS = 1
         CLEAN_NAMESPACE = 1
+        OPERATOR_NS = 'ps-operator'
         GIT_SHORT_COMMIT = sh(script: 'git rev-parse --short HEAD', , returnStdout: true).trim()
         VERSION = "${env.GIT_BRANCH}-${env.GIT_SHORT_COMMIT}"
         CLUSTER_NAME = sh(script: "echo jen-ps-${env.CHANGE_ID}-${GIT_SHORT_COMMIT}-${env.BUILD_NUMBER} | tr '[:upper:]' '[:lower:]'", , returnStdout: true).trim()

Makefile

@@ -101,6 +101,7 @@ e2e-test: kuttl-shfmt
 manifests: kustomize generate
 	$(KUSTOMIZE) build config/crd/ > $(DEPLOYDIR)/crd.yaml
 	echo "---" >> $(DEPLOYDIR)/crd.yaml
+
 	$(KUSTOMIZE) build config/rbac/ | sed 's/ClusterRole/Role/g' > $(DEPLOYDIR)/rbac.yaml
 	echo "---" >> $(DEPLOYDIR)/rbac.yaml
 	cd config/manager && $(KUSTOMIZE) edit set image perconalab/percona-server-mysql-operator=$(IMAGE)

config/rbac/cluster/kustomization copy.yaml

@@ -9,6 +9,3 @@ resources:
 - role_binding.yaml
 - leader_election_role.yaml
 - leader_election_role_binding.yaml
-- orchestrator_service_account.yaml
-- orchestrator_role.yaml
-- orchestrator_role_binding.yaml

config/rbac/cluster/kustomization.yaml

@@ -4,6 +4,16 @@ kind: ClusterRole
 metadata:
   name: percona-server-mysql-operator
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - serviceaccounts
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - watch
 - apiGroups:
   - ""
   resources:
@@ -133,3 +143,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - rolebindings
+  - roles
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - watch

config/rbac/cluster/orchestrator_role.yaml

@@ -9,6 +9,3 @@ resources:
 - role_binding.yaml
 - leader_election_role.yaml
 - leader_election_role_binding.yaml
-- orchestrator_service_account.yaml
-- orchestrator_role.yaml
-- orchestrator_role_binding.yaml