chore: keep globale resources

deploy/helm/templates/_helpers.tpl

@@ -333,3 +333,10 @@ Define default storage class name, if cloud provider is known, specify a default
 {{- .Values.image.registry }}
 {{- end}}
 {{- end}}
+
+
+{{- define "kubeblocks.keepResource" }}
+{{- if .Values.keepGlobalResources }}
+helm.sh/resource-policy: keep
+{{- end}}
+{{- end}}

deploy/helm/templates/backuprepo.yaml

@@ -17,8 +17,9 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-backuprepo
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
-  {{- if .Values.backupRepo.default }}
   annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
+  {{- if .Values.backupRepo.default }}
     dataprotection.kubeblocks.io/is-default-repo: "true"
   {{- end }}
 spec:

deploy/helm/templates/rbac/apps_backuppolicytemplate_editor_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-backuppolicytemplate-editor-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - apps.kubeblocks.io

deploy/helm/templates/rbac/apps_cluster_editor_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-cluster-editor-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - apps.kubeblocks.io

deploy/helm/templates/rbac/apps_clusterdefinition_editor_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-clusterdefinition-editor-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - apps.kubeblocks.io

deploy/helm/templates/rbac/apps_configconstraint_editor_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-configconstraint-editor-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - apps.kubeblocks.io

deploy/helm/templates/rbac/auth_proxy_client_clusterrole.yaml

@@ -4,6 +4,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-metrics-reader
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - nonResourceURLs:
   - "/metrics"

deploy/helm/templates/rbac/auth_proxy_role.yaml

@@ -4,6 +4,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-proxy-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - authentication.k8s.io

deploy/helm/templates/rbac/cluster_pod_required_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: kubeblocks-cluster-pod-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 aggregationRule:
   clusterRoleSelectors:
   - matchLabels:
@@ -71,6 +73,8 @@ metadata:
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
     app.kubernetes.io/required-by: pod
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - ""

deploy/helm/templates/rbac/clusterrole.yaml

@@ -4,6 +4,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 aggregationRule:
   clusterRoleSelectors:
   - matchLabels:
@@ -15,6 +17,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-manager-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 {{- $doInclude := false }}
 {{- range $i, $line := .Files.Lines "config/rbac/role.yaml" }}
@@ -31,6 +35,8 @@ metadata:
   name: {{ include "dataprotection.workerClusterRoleName" . }}
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 # need to run "kubectl patch backup" inside a worker pod to update the status
 - apiGroups:
@@ -60,6 +66,7 @@ metadata:
     {{- include "kubeblocks.labels" . | nindent 4 }}
   annotations:
     "helm.sh/hook": pre-upgrade
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
   - apiGroups:
       - apiextensions.k8s.io

deploy/helm/templates/rbac/dataprotection_backup_editor_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-backup-editor-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - dataprotection.kubeblocks.io

deploy/helm/templates/rbac/dataprotection_backuppolicy_editor_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-backuppolicy-editor-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - dataprotection.kubeblocks.io

deploy/helm/templates/rbac/dataprotection_exec_worker_clusterrole.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "dataprotection.execWorkerRoleName" . }}
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - ""

deploy/helm/templates/rbac/dataprotection_restore_editor_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-restore-editor-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - dataprotection.kubeblocks.io

deploy/helm/templates/rbac/experimental_nodecountscaler_editor_role.yaml

@@ -4,6 +4,8 @@ kind: ClusterRole
 metadata:
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
   name: {{ include "kubeblocks.fullname" . }}-nodecountscaler-editor-role
 rules:
 - apiGroups:

deploy/helm/templates/rbac/extensions_addon_editor_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-editor-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - extensions.kubeblocks.io

deploy/helm/templates/rbac/leader_election_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-leader-election-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - ""

deploy/helm/templates/rbac/rbac_manager_role.yaml

@@ -5,6 +5,8 @@ metadata:
   name: {{ include "kubeblocks.fullname" . }}-rbac-manager-role
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 rules:
 - apiGroups:
   - ""

deploy/helm/templates/rbac/workloads_instanceset_editor_role.yaml

@@ -4,6 +4,8 @@ kind: ClusterRole
 metadata:
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
   name: {{ include "kubeblocks.fullname" . }}-instanceset-editor-role
 rules:
 - apiGroups:

deploy/helm/templates/storageprovider/cos.yaml

@@ -5,6 +5,8 @@ metadata:
   name: cos
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 spec:
   csiDriverName: ru.yandex.s3.csi
   csiDriverSecretTemplate: |

deploy/helm/templates/storageprovider/ftp.yaml

@@ -4,6 +4,8 @@ metadata:
   name: ftp
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 spec:
   datasafedConfigTemplate: |
     [storage]

deploy/helm/templates/storageprovider/gcs-s3comp.yaml

@@ -5,6 +5,8 @@ metadata:
   name: gcs-s3comp
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 spec:
   csiDriverName: ru.yandex.s3.csi
   csiDriverSecretTemplate: |

deploy/helm/templates/storageprovider/minio.yaml

@@ -4,6 +4,8 @@ metadata:
   name: minio
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 spec:
   csiDriverName: ru.yandex.s3.csi
   csiDriverSecretTemplate: |

deploy/helm/templates/storageprovider/nfs.yaml

@@ -4,6 +4,8 @@ metadata:
   name: nfs
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 spec:
   csiDriverName: nfs.csi.k8s.io
 

deploy/helm/templates/storageprovider/obs.yaml

@@ -5,6 +5,8 @@ metadata:
   name: obs
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 spec:
   csiDriverName: ru.yandex.s3.csi
   csiDriverSecretTemplate: |

deploy/helm/templates/storageprovider/oss.yaml

@@ -4,6 +4,8 @@ metadata:
   name: oss
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 spec:
   csiDriverName: ru.yandex.s3.csi
   csiDriverSecretTemplate: |

deploy/helm/templates/storageprovider/pvc.yaml

@@ -4,6 +4,8 @@ metadata:
   name: pvc
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 spec:
   persistentVolumeClaimTemplate: |
     spec:

deploy/helm/templates/storageprovider/s3.yaml

@@ -4,6 +4,8 @@ metadata:
   name: s3
   labels:
     {{- include "kubeblocks.labels" . | nindent 4 }}
+  annotations:
+    {{- include "kubeblocks.keepResource" . | nindent 4 }}
 spec:
   csiDriverName: ru.yandex.s3.csi
   csiDriverSecretTemplate: |

deploy/helm/values.yaml

@@ -428,6 +428,8 @@ addonController:
 ## @param keepAddons - keep Addon CR objects when delete this chart.
 keepAddons: true
 
+keepGlobalResources: false
+
 ## @param addonChartLocationBase - KubeBlocks official addon's chart location base, to be released in an air-gapped environment.
 ## if url has prefix "file://", KubeBlocks will use the helm charts copied from the addonChartsImage.
 ##