[OSD-28074] Change Deployment SSS

The goal is to remove Subscription, CatalogSource and OperatorGroup from all clusters but MCs, SCs and RHOAM. Signed-off-by: Amador Pahim <[email protected]>
rhobs · Jan 30, 2025 · 88905cf · 88905cf
1 parent b26814d
commit 88905cf
Showing 1 changed file with 121 additions and 3 deletions.
diff --git a/deploy/olm/syncselector-template.yaml b/deploy/olm/syncselector-template.yaml
@@ -43,6 +43,124 @@ objects:
             annotations:
               openshift.io/node-selector: ''
             name: openshift-observability-operator
+  - apiVersion: hive.openshift.io/v1
+    kind: SelectorSyncSet
+    metadata:
+      name: observability-operator-hypershift
+    spec:
+      clusterDeploymentSelector:
+        matchLabels:
+          api.openshift.com/managed: 'true'
+        matchExpressions:
+          - key: ext-hypershift.openshift.io/cluster-type
+            operator: In
+            values:
+              - management-cluster
+              - service-cluster
+      resourceApplyMode: Sync
+      resources:
+        - apiVersion: operators.coreos.com/v1alpha1
+          kind: CatalogSource
+          metadata:
+            name: observability-operator-catalog
+            namespace: openshift-observability-operator
+          spec:
+            displayName: Red Hat Observability Operator
+            image: ${REGISTRY_IMG}@${IMAGE_DIGEST}
+            publisher: OSD Red Hat Addons
+            sourceType: grpc
+            grpcPodConfig:
+              securityContextConfig: restricted
+              nodeSelector:
+                node-role.kubernetes.io: infra
+              tolerations:
+                - effect: NoSchedule
+                  key: node-role.kubernetes.io/infra
+                  operator: Exists
+        - apiVersion: operators.coreos.com/v1alpha2
+          kind: OperatorGroup
+          metadata:
+            name: observability-operator-og
+            namespace: openshift-observability-operator
+        - apiVersion: operators.coreos.com/v1alpha1
+          kind: Subscription
+          metadata:
+            name: observability-operator
+            namespace: openshift-observability-operator
+          spec:
+            channel: ${CHANNEL}
+            name: observability-operator
+            source: observability-operator-catalog
+            sourceNamespace: openshift-observability-operator
+            config:
+              resources:
+                limits:
+                  cpu: ${RESOURCE_LIMIT_CPU}
+                  memory: ${RESOURCE_LIMIT_MEMORY}
+                requests:
+                  cpu: ${RESOURCE_REQUEST_CPU}
+                  memory: ${RESOURCE_REQUEST_MEMORY}
+  - apiVersion: hive.openshift.io/v1
+    kind: SelectorSyncSet
+    metadata:
+      name: observability-operator-rhoam
+    spec:
+      clusterDeploymentSelector:
+        matchLabels:
+          api.openshift.com/addon-managed-api-service: 'true'
+      resourceApplyMode: Sync
+      resources:
+        - apiVersion: operators.coreos.com/v1alpha1
+          kind: CatalogSource
+          metadata:
+            name: observability-operator-catalog
+            namespace: openshift-observability-operator
+          spec:
+            displayName: Red Hat Observability Operator
+            image: ${REGISTRY_IMG}@${IMAGE_DIGEST}
+            publisher: OSD Red Hat Addons
+            sourceType: grpc
+            grpcPodConfig:
+              securityContextConfig: restricted
+              nodeSelector:
+                node-role.kubernetes.io: infra
+              tolerations:
+                - effect: NoSchedule
+                  key: node-role.kubernetes.io/infra
+                  operator: Exists
+        - apiVersion: operators.coreos.com/v1alpha2
+          kind: OperatorGroup
+          metadata:
+            name: observability-operator-og
+            namespace: openshift-observability-operator
+        - apiVersion: operators.coreos.com/v1alpha1
+          kind: Subscription
+          metadata:
+            name: observability-operator
+            namespace: openshift-observability-operator
+          spec:
+            channel: ${CHANNEL}
+            name: observability-operator
+            source: observability-operator-catalog
+            sourceNamespace: openshift-observability-operator
+            config:
+              resources:
+                limits:
+                  cpu: ${RESOURCE_LIMIT_CPU}
+                  memory: ${RESOURCE_LIMIT_MEMORY}
+                requests:
+                  cpu: ${RESOURCE_REQUEST_CPU}
+                  memory: ${RESOURCE_REQUEST_MEMORY}
+  - apiVersion: hive.openshift.io/v1
+    kind: SelectorSyncSet
+    metadata:
+      name: observability-operator-rhoam-int
+    spec:
+      clusterDeploymentSelector:
+        matchLabels:
+          api.openshift.com/addon-managed-api-service-internal: 'true'
+      resourceApplyMode: Sync
+      resources:
         - apiVersion: operators.coreos.com/v1alpha1
           kind: CatalogSource
           metadata:
@@ -58,9 +176,9 @@ objects:
               nodeSelector:
                 node-role.kubernetes.io: infra
               tolerations:
-              - effect: NoSchedule
-                key: node-role.kubernetes.io/infra
-                operator: Exists
+                - effect: NoSchedule
+                  key: node-role.kubernetes.io/infra
+                  operator: Exists
         - apiVersion: operators.coreos.com/v1alpha2
           kind: OperatorGroup
           metadata: