not pretty

Author: erwangranger

bootstrap/user-projects/kustomization.yaml

@@ -9,6 +9,7 @@ commonLabels:
   component: projects
 
 resources:
+  - rbac-presync-monitoring.yaml
   # presync
   - presync-rhoai-ready.yaml
   - presync-minio.yaml

bootstrap/user-projects/rbac-presync-monitoring.yaml

@@ -0,0 +1,80 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: presync-monitoring-sa
+  namespace: redhat-ods-operator
+  annotations:
+    # argocd.argoproj.io/sync-wave: "0"
+    argocd.argoproj.io/hook: PreSync
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: presync-monitoring-cluster-role
+  annotations:
+    # argocd.argoproj.io/sync-wave: "0"
+    argocd.argoproj.io/hook: PreSync
+rules:
+- apiGroups: [""]
+  resources: ["pods"]
+  verbs: ["get", "list", "watch"]
+- apiGroups: [""]
+  resources: ["configmaps"]
+  verbs: ["get", "list", "watch"]
+- apiGroups: ["dscinitialization.opendatahub.io"]
+  resources: ["dscinitializations"]
+  verbs: ["get", "list", "watch"]
+- apiGroups: ["datasciencecluster.opendatahub.io"]
+  resources: ["datascienceclusters"]
+  verbs: ["get", "list", "watch"]
+- apiGroups: ["storage.k8s.io"]
+  resources: ["storageclasses"]
+  verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: presync-monitoring-cluster-role-binding
+  annotations:
+    argocd.argoproj.io/hook: PreSync
+    # argocd.argoproj.io/sync-wave: "0"
+subjects:
+- kind: ServiceAccount
+  name: presync-monitoring-sa
+  namespace: redhat-ods-operator
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: presync-monitoring-cluster-role
+---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: image-puller-tools
+  namespace: rhods-notebooks
+  labels:
+    k8s-app: image-puller
+  annotations:
+    # argocd.argoproj.io/sync-wave: "2"
+    argocd.argoproj.io/hook: PreSync
+spec:
+  selector:
+    matchLabels:
+      name: image-puller
+  template:
+    metadata:
+      labels:
+        name: image-puller
+    spec:
+      containers:
+      - name: tools
+        image: image-registry.openshift-image-registry.svc:5000/openshift/tools:latest
+        command: ["tail"]
+        args: ["-f", "/dev/null"]
+        resources:
+          limits:
+            memory: 20Mi
+          requests:
+            cpu: 10m
+            memory: 10Mi