operator-framework-operator-controller/hack/test/pre-upgrade-setup.sh at 5b07a04c348b53272f30e54461d58c60085b1e47 · openshift/operator-framework-operator-controller · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
#!/bin/bash

set -euo pipefail

help="pre-upgrade-setup.sh is used to create some basic resources
which will later be used in upgrade testing.

Usage:
  pre-upgrade-setup.sh [TEST_CATALOG_IMG] [TEST_CLUSTER_CATALOG_NAME] [TEST_CLUSTER_EXTENSION_NAME]
"

if [[ "$#" -ne 3 ]]; then
  echo "Illegal number of arguments passed"
  echo "${help}"
  exit 1
fi

TEST_CATALOG_IMG=$1
TEST_CLUSTER_CATALOG_NAME=$2
TEST_CLUSTER_EXTENSION_NAME=$3

kubectl apply -f - << EOF
apiVersion: olm.operatorframework.io/v1
kind: ClusterCatalog
metadata:
  name: ${TEST_CLUSTER_CATALOG_NAME}
spec:
  source:
    type: Image
    image:
      ref: ${TEST_CATALOG_IMG}
      pollIntervalMinutes: 1440
EOF

kubectl apply -f - <<EOF
apiVersion: v1
kind: ServiceAccount
metadata:
  name: upgrade-e2e
  namespace: default
EOF

kubectl apply -f - <<EOF
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: upgrade-e2e
rules:
  - apiGroups:
    - ""
    resources:
    - "configmaps"
    - "secrets"
    - "services"
    - "serviceaccounts"
    verbs:
    - "create"
    - "update"
    - "patch"
    - "delete"
    - "get"
    - "list"
    - "watch"
  - apiGroups:
    - "apps"
    resources:
    - "deployments"
    verbs:
    - "create"
    - "update"
    - "patch"
    - "delete"
    - "get"
    - "list"
    - "watch"
  - apiGroups:
    - "apiextensions.k8s.io"
    resources:
    - "customresourcedefinitions"
    verbs:
    - "create"
    - "update"
    - "patch"
    - "delete"
    - "get"
    - "list"
    - "watch"
  - apiGroups:
    - "rbac.authorization.k8s.io"
    resources:
    - "clusterroles"
    - "clusterrolebindings"
    - "roles"
    - "rolebindings"
    verbs:
    - "create"
    - "update"
    - "patch"
    - "delete"
    - "get"
    - "list"
    - "watch"
    - "bind"
    - "escalate"
  - apiGroups:
    - networking.k8s.io
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch
    - create
    - update
    - patch
    - delete
  - apiGroups:
    - "olm.operatorframework.io"
    resources:
    - "clusterextensions/finalizers"
    verbs:
    - "update"
    resourceNames:
    - "${TEST_CLUSTER_EXTENSION_NAME}"
EOF

kubectl apply -f - <<EOF
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: upgrade-e2e
subjects:
  - kind: ServiceAccount
    name: upgrade-e2e
    namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: upgrade-e2e
EOF

kubectl apply -f - << EOF
apiVersion: olm.operatorframework.io/v1
kind: ClusterExtension
metadata:
  name: ${TEST_CLUSTER_EXTENSION_NAME}
spec:
  namespace: default
  serviceAccount:
    name: upgrade-e2e
  source:
    sourceType: Catalog
    catalog:
      packageName: test
      version: 1.0.0
EOF

kubectl wait --for=condition=Serving --timeout=5m clustercatalog/${TEST_CLUSTER_CATALOG_NAME}
kubectl wait --for=condition=Installed --timeout=5m clusterextension/${TEST_CLUSTER_EXTENSION_NAME}