feat(charts): initial Helm chart (strimzi#45)

Signed-off-by: Sebastian Gaiser <[email protected]>

packaging/helm-charts/helm3/kafka-access-operator/.helmignore

@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj

packaging/helm-charts/helm3/kafka-access-operator/Chart.yaml

@@ -0,0 +1,18 @@
+apiVersion: v2
+# TODO
+appVersion: "0.1.0"
+description: "Strimzi Kafka Access Operator"
+name: strimzi-access-operator
+version: 0.1.0
+icon: https://raw.githubusercontent.com/strimzi/strimzi-kafka-operator/main/documentation/logo/strimzi_logo.png
+keywords:
+  - kafka
+  - queue
+  - stream
+  - event
+  - messaging
+  - datastore
+  - topic
+home: https://strimzi.io/
+sources:
+  - https://github.com/strimzi/kafka-access-operator

packaging/helm-charts/helm3/kafka-access-operator/crds/040-Crd-kafkaaccess.yaml

@@ -0,0 +1,86 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: kafkaaccesses.access.strimzi.io
+  labels:
+    servicebinding.io/provisioned-service: "true"
+spec:
+  group: access.strimzi.io
+  names:
+    kind: KafkaAccess
+    plural: kafkaaccesses
+    shortNames:
+      - ka
+    singular: kafkaaccess
+  scope: Namespaced
+  versions:
+    - name: v1alpha1
+      schema:
+        openAPIV3Schema:
+          properties:
+            spec:
+              properties:
+                kafka:
+                  properties:
+                    name:
+                      type: string
+                    namespace:
+                      type: string
+                    listener:
+                      type: string
+                  required:
+                    - name
+                  type: object
+                user:
+                  properties:
+                    kind:
+                      type: string
+                    apiGroup:
+                      type: string
+                    name:
+                      type: string
+                    namespace:
+                      type: string
+                  required:
+                    - kind
+                    - apiGroup
+                    - name
+                  type: object
+              required:
+                - kafka
+              type: object
+            status:
+              properties:
+                binding:
+                  properties:
+                    name:
+                      type: string
+                  type: object
+                conditions:
+                  items:
+                    properties:
+                      status:
+                        type: string
+                      reason:
+                        type: string
+                      message:
+                        type: string
+                      type:
+                        type: string
+                      lastTransitionTime:
+                        type: string
+                      additionalProperties:
+                        additionalProperties:
+                          type: object
+                        type: object
+                    type: object
+                  type: array
+                observedGeneration:
+                  type: integer
+              type: object
+          type: object
+      served: true
+      storage: true
+      subresources:
+        status: {}

packaging/helm-charts/helm3/kafka-access-operator/templates/010-ServiceAccount.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: strimzi-access-operator
+  labels:
+    app: strimzi-access-operator

packaging/helm-charts/helm3/kafka-access-operator/templates/020-ClusterRole.yaml

@@ -0,0 +1,42 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: strimzi-access-operator
+  labels:
+    app: strimzi-access-operator
+rules:
+  - apiGroups:
+      - "access.strimzi.io"
+    resources:
+      - kafkaaccesses
+      - kafkaaccesses/status
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - delete
+      - patch
+      - update
+  - apiGroups:
+      - "kafka.strimzi.io"
+    resources:
+      - kafkas
+      - kafkausers
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - delete
+      - patch
+      - update

packaging/helm-charts/helm3/kafka-access-operator/templates/030-ClusterRoleBinding.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: strimzi-access-operator
+  labels:
+    app: strimzi-access-operator
+subjects:
+  - kind: ServiceAccount
+    name: strimzi-access-operator
+    namespace: strimzi-access-operator
+roleRef:
+  kind: ClusterRole
+  name: strimzi-access-operator
+  apiGroup: rbac.authorization.k8s.io

packaging/helm-charts/helm3/kafka-access-operator/templates/050-Deployment.yaml

@@ -0,0 +1,55 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: strimzi-access-operator
+  labels:
+    app: strimzi-access-operator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: strimzi-access-operator
+      strimzi.io/kind: access-operator
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: strimzi-access-operator
+        strimzi.io/kind: access-operator
+    spec:
+      serviceAccountName: strimzi-access-operator
+      volumes:
+        - name: strimzi-tmp
+          emptyDir:
+            medium: Memory
+            sizeLimit: 1Mi
+      containers:
+        - name: access-operator
+          image: quay.io/strimzi/access-operator:{{ .Values.image.tag }}
+          {{- if .Values.image.pullPolicy }}
+          imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
+          {{- end }}
+          ports:
+            - containerPort: 8080
+              name: http
+          args:
+            - /opt/strimzi/bin/access_operator_run.sh
+          volumeMounts:
+            - name: strimzi-tmp
+              mountPath: /tmp
+          resources:
+{{ toYaml .Values.resources | indent 12 }}
+          livenessProbe:
+            httpGet:
+              path: /healthy
+              port: http
+            initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
+            periodSeconds: {{ .Values.livenessProbe.periodSeconds }}
+          readinessProbe:
+            httpGet:
+              path: /ready
+              port: http
+            initialDelaySeconds: {{ .Values.readinessProbe.initialDelaySeconds }}
+            periodSeconds: {{ .Values.readinessProbe.periodSeconds }}

packaging/helm-charts/helm3/kafka-access-operator/values.yaml

@@ -0,0 +1,18 @@
+image:
+  # TODO until first release is there
+  tag: latest
+  pullPolicy: Always
+
+resources:
+  limits:
+    memory: 256Mi
+    cpu: 500m
+  requests:
+    memory: 256Mi
+    cpu: 100m
+livenessProbe:
+  initialDelaySeconds: 10
+  periodSeconds: 30
+readinessProbe:
+  initialDelaySeconds: 10
+  periodSeconds: 30