feat: Add rook ceph config and exemptions

bundles/uds-core-swf/uds-bundle.yaml

@@ -15,6 +15,16 @@ packages:
     optionalComponents:
       - git-server
     ref: v0.32.4-0.2.3
+    overrides:
+      rook-ceph-cluster:
+        rook-ceph-cluster:
+          variables:
+            - path: cephClusterSpec.resources.osd.requests.memory
+              name: CEPH_OSD_MEM_REQUESTS
+            - path: cephClusterSpec.resources.osd.limits.memory
+              name: CEPH_OSD_MEM_LIMITS
+            - path: toolbox.enabled
+              name: ENABLE_CEPH_TOOLBOX
 
   # Namespace pre-reqs for swf capabilities
   - name: software-factory-namespaces
@@ -97,7 +107,7 @@ packages:
   # Additional manifests needed
   - name: additional-manifests
     path: ../../build
-    ref: 0.0.1
+    ref: 0.0.2
 
   # Gitlab
   - name: gitlab-redis

config/dev-cluster/uds-config.yaml

@@ -6,6 +6,9 @@ variables:
   init:
     # TODO - remove this if/when functionality is restored upstream
     REGISTRY_HPA_ENABLE: false
+    CEPH_OSD_MEM_REQUESTS: "4Gi"
+    CEPH_OSD_MEM_LIMITS: "4Gi"
+    ENABLE_CEPH_TOOLBOX: "true"
   metallb:
     # Replace with a valid IP address range
     IP_ADDRESS_POOL: "10.0.120.50-10.0.120.59"

config/test-cluster/uds-config.yaml

@@ -6,6 +6,9 @@ variables:
   init:
     # TODO - remove this if/when functionality is restored upstream
     REGISTRY_HPA_ENABLE: false
+    CEPH_OSD_MEM_REQUESTS: "4Gi"
+    CEPH_OSD_MEM_LIMITS: "4Gi"
+    ENABLE_CEPH_TOOLBOX: "true"
   metallb:
     # Replace with a valid IP address range
     IP_ADDRESS_POOL: "10.0.120.70-10.0.120.79"

packages/additional-manifests/pepr-policy-exemptions/rook-ceph-exemption.yaml

@@ -0,0 +1,19 @@
+apiVersion: uds.dev/v1alpha1
+kind: Exemption
+metadata:
+  name: rook-ceph
+  namespace: uds-policy-exemptions
+spec:
+  exemptions:
+    - policies:
+      - DisallowHostNamespaces
+      - DisallowPrivileged
+      - RequireNonRootUser
+      - DropAllCapabilities
+      - RestrictHostPathWrite
+      - RestrictVolumeTypes
+      matcher:
+        namespace: rook-ceph
+        name: "^rook-ceph-*"
+      title: "rook-ceph exemptions"
+      description: "Rook ceph needs exemptions"

packages/additional-manifests/zarf.yaml

@@ -4,26 +4,27 @@ metadata:
   name: additional-manifests
   description: "Installs additional needed manifests"
   architecture: "amd64"
-  version: "0.0.1"
+  version: "0.0.2"
 
 variables:
   - name: DOMAIN
     description: "Domain to be used in VS hosts and gateway config"
     default: "mtsi.bigbang.dev"
 
 components:
-  - name: gitlab-ssh
+  - name: gitlab-additional-manifests
     required: true
     manifests:
-      - name: gitlab-ssh-virtualservice
+      - name: gitlab-additional-manifests
         namespace: gitlab
         files:
-          - manifests/gitlab-ssh-virtualservice.yaml
-          - manifests/gitlab-ssh-networkpolicies.yaml
-          - manifests/gitlab-ssh-gateway.yaml
-  - name: envoy-filter-tenant-ingress
+          - gitlab/gitlab-ssh-virtualservice.yaml
+          - gitlab/gitlab-ssh-networkpolicies.yaml
+          - gitlab/gitlab-ssh-gateway.yaml
+          - gitlab/envoy-filter.yaml
+  - name: pepr-policy-exemptions
     required: true
     manifests:
-      - name: envoy-filter-tenant-ingress
+      - name: pepr-policy-exemptions
         files:
-          - manifests/envoy-filter.yaml
+          - pepr-policy-exemptions/rook-ceph-exemption.yaml