operator: obtain default image tag from label (#976)

- obtain default image tag from label
- skip all previous versions for snapshot and CI builds
- add host name to info log message
- add namespace variable to generate K8s resources
- attach generate K8s resource to builds and releases

---------

Signed-off-by: Michael Edgar <[email protected]>

.github/workflows/integration.yml

@@ -59,12 +59,14 @@ jobs:
           export QUARKUS_CONTAINER_IMAGE_REGISTRY="localhost:5000"
           export QUARKUS_CONTAINER_IMAGE_PUSH=true
           export QUARKUS_CONTAINER_IMAGE_TAG="${{ env.PROJECT_VERSION }}"
+          export QUARKUS_KUBERNETES_VERSION="${{ env.PROJECT_VERSION }}"
           mvn verify -P container-image -B --no-transfer-progress \
+            -Dquarkus.kubernetes.namespace='$${NAMESPACE}' \
             -Dquarkus.package.write-transformed-bytecode-to-build-output=true \
             -Dquarkus.docker.buildx.platform=linux/amd64,linux/arm64
 
       - name: Modify CSV Annotation
-        run: ./operator/bin/modify-bundle-metadata.sh
+        run: ./operator/bin/modify-bundle-metadata.sh "SKIP_RANGE=>=0.0.1 <${{ env.PROJECT_VERSION }}"
 
       - name: Build Operator Bundle Image
         uses: docker/build-push-action@v6
@@ -96,6 +98,15 @@ jobs:
           tags: |
             streamshub/console-operator-catalog:${{ env.PROJECT_VERSION }}
 
+      - name: Attach Kubernetes Resources
+        uses: actions/upload-artifact@v4
+        with:
+          name: k8s-resources
+          path: |
+            operator/target/bundle/
+            operator/target/catalog/
+            operator/target/kubernetes/*.yml
+
       - name: Archive Results
         uses: actions/upload-artifact@v4
         if: failure()

.github/workflows/release.yml

@@ -55,7 +55,9 @@ jobs:
           export QUARKUS_CONTAINER_IMAGE_ADDITIONAL_TAGS=latest
           export GIT_REVISION=$(git rev-parse --short release)
           # Build and push the release images using the commit tagged in `release:prepare`
-          mvn -B -P container-image release:perform --no-transfer-progress '-Drelease.arguments=-Dquarkus.docker.buildx.platform=linux/amd64,linux/arm64'
+          mvn -B -P container-image release:perform --no-transfer-progress \
+            -Dquarkus.kubernetes.namespace='$${NAMESPACE}' \
+            '-Drelease.arguments=-Dquarkus.docker.buildx.platform=linux/amd64,linux/arm64'
 
       - name: Login to Quay
         uses: docker/login-action@v3
@@ -135,8 +137,17 @@ jobs:
           milestone-title: ${{steps.metadata.outputs.current-version}}
           milestone-next: ${{steps.metadata.outputs.next-version}}
 
-      - name: Image Update
-        uses: renovatebot/[email protected]
+      - name: Prepare Operator Resources
+        run: |
+          cat operator/target/kubernetes/consoles.console.streamshub.github.com-v1.yml \
+          operator/target/kubernetes/kubernetes.yml \
+          > operator/target/console-operator-${{ steps.metadata.outputs.current-version }}.yaml
+
+      - uses: meeDamian/[email protected]
+        name: Attach Operator Resources to Release
         with:
-          configurationFile: .github/gitops-config.json
-          token: ${{ secrets.RELEASE_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+          tag: ${{ steps.metadata.outputs.current-version }}
+          allow_override: true
+          gzip: false
+          files: operator/target/console-operator-${{ steps.metadata.outputs.current-version }}.yaml

.github/workflows/snapshot.yml

@@ -55,9 +55,12 @@ jobs:
           export QUARKUS_CONTAINER_IMAGE_PUSH="true"
           export QUARKUS_CONTAINER_IMAGE_TAG="${{ env.NEXT_VERSION }}"
           export QUARKUS_CONTAINER_IMAGE_ADDITIONAL_TAGS=snapshot-${{github.ref_name}}
+          export QUARKUS_KUBERNETES_VERSION="${{ env.NEXT_VERSION }}"
           export GIT_REVISION=$(git rev-parse --short HEAD)
           # Build and push the snapshot images
-          mvn -B -P container-image verify --no-transfer-progress -DskipTests -Dquarkus.docker.buildx.platform=linux/amd64,linux/arm64
+          mvn -B -P container-image verify --no-transfer-progress -DskipTests \
+            -Dquarkus.kubernetes.namespace='$${NAMESPACE}' \
+            -Dquarkus.docker.buildx.platform=linux/amd64,linux/arm64
 
       - name: Login to Quay
         uses: docker/login-action@v3
@@ -67,7 +70,7 @@ jobs:
           password: "${{ secrets.IMAGE_REPO_PASSWORD }}"
 
       - name: Modify CSV Annotation
-        run: ./operator/bin/modify-bundle-metadata.sh
+        run: ./operator/bin/modify-bundle-metadata.sh "SKIP_RANGE=>=0.0.1 <${{ env.NEXT_VERSION }}"
 
       - name: Build and Push Operator Bundle Image
         uses: docker/build-push-action@v6
@@ -101,6 +104,15 @@ jobs:
             ${{ secrets.IMAGE_REPO_HOSTNAME }}/${{ secrets.IMAGE_REPO_NAMESPACE }}/console-operator-catalog:${{ env.NEXT_VERSION }}
             ${{ secrets.IMAGE_REPO_HOSTNAME }}/${{ secrets.IMAGE_REPO_NAMESPACE }}/console-operator-catalog:snapshot-${{github.ref_name}}
 
+      - name: Attach Kubernetes Resources
+        uses: actions/upload-artifact@v4
+        with:
+          name: k8s-resources
+          path: |
+            operator/target/bundle/
+            operator/target/catalog/
+            operator/target/kubernetes/*.yml
+
       - name: Build UI
         working-directory: ui
         run: |

api/src/main/java/com/github/streamshub/console/api/support/TrustAllCertificateManager.java

@@ -68,7 +68,7 @@ private String loadCertificates(String bootstrap) {
             certificates = new String(certificateOut.toByteArray(), StandardCharsets.UTF_8).trim();
             log.warnf("Certificate hosted at %s:%s is automatically trusted", hostport[0], hostport[1]);
         } catch (Exception e) {
-            log.infof("Exception setting up trusted certificate: %s", e.getMessage());
+            log.infof("Exception setting up trusted certificate for host %s: %s", bootstrap, e.getMessage());
         }
 
         return certificates;

operator/bin/modify-bundle-metadata.sh

@@ -20,6 +20,9 @@ done
 
 echo "[INFO] Modify values and replace placeholders in ${CSV_FILE_PATH}"
 
+# Delete any namespaces set on the CSV deployment(s), possibly added by `quarkus.kubernetes.namespace`
+${YQ} eval -o yaml -i 'del(.spec.install.spec.deployments[0].spec.template.metadata.namespace)' "${CSV_FILE_PATH}"
+
 yq_image_expression=".spec.install.spec.deployments[0] | (select (.name ==\"${OPERATOR_NAME}\")).spec.template.spec.containers[].image"
 
 full_image=$(${YQ} eval "${yq_image_expression}" "${CSV_FILE_PATH}")

operator/src/main/resources/application.properties

@@ -11,6 +11,8 @@ quarkus.container-image.name=console-operator
 quarkus.operator-sdk.activate-leader-election-for-profiles=prod
 quarkus.operator-sdk.controllers."consolereconciler".selector=${console.selector}
 
+quarkus.kubernetes.env.fields."CONSOLE_DEPLOYMENT_DEFAULT_IMAGE_TAG"=metadata.labels['app.kubernetes.io/version']
+
 %build.quarkus.container-image.labels."org.opencontainers.image.version"=${quarkus.application.version}
 %build.quarkus.container-image.labels."org.opencontainers.image.revision"=${git.revision}