Initialize sriovnetworkpoolconfig API

PROJECT

@@ -1,53 +1,44 @@
 domain: openshift.io
 layout: go.kubebuilder.io/v2
+plugins:
+  go.sdk.operatorframework.io/v2-alpha: {}
 projectName: sriov-network-operator
 repo: github.com/k8snetworkplumbingwg/sriov-network-operator
 resources:
--
-  # TODO(user): Uncomment the below line if this resource implements a controller, else delete it.
-  controller: true
+- controller: true
   domain: openshift.io
   group: sriovnetwork
   kind: SriovNetwork
-  # TODO(user): Update the package path for your API if the below value is incorrect.
   path: github.com/k8snetworkplumbingwg/sriov-network-operator/api/v1
   version: v1
--
-  # TODO(user): Uncomment the below line if this resource implements a controller, else delete it.
-  controller: true
+- controller: true
   domain: openshift.io
   group: sriovnetwork
   kind: SriovIBNetwork
-  # TODO(user): Update the package path for your API if the below value is incorrect.
   path: github.com/k8snetworkplumbingwg/sriov-network-operator/api/v1
   version: v1
--
-  # TODO(user): Uncomment the below line if this resource implements a controller, else delete it.
-  controller: true
+- controller: true
   domain: openshift.io
   group: sriovnetwork
   kind: SriovNetworkNodePolicy
-  # TODO(user): Update the package path for your API if the below value is incorrect.
   path: github.com/k8snetworkplumbingwg/sriov-network-operator/api/v1
   version: v1
--
-  # TODO(user): Uncomment the below line if this resource implements a controller, else delete it.
-  controller: true
+- controller: true
   domain: openshift.io
   group: sriovnetwork
   kind: SriovNetworkNodeState
-  # TODO(user): Update the package path for your API if the below value is incorrect.
   path: github.com/k8snetworkplumbingwg/sriov-network-operator/api/v1
   version: v1
--
-  # TODO(user): Uncomment the below line if this resource implements a controller, else delete it.
-  controller: true
+- controller: true
   domain: openshift.io
   group: sriovnetwork
   kind: SriovOperatorConfig
-  # TODO(user): Update the package path for your API if the below value is incorrect.
+  path: github.com/k8snetworkplumbingwg/sriov-network-operator/api/v1
+  version: v1
+- controller: true
+  domain: openshift.io
+  group: sriovnetwork
+  kind: SriovNetworkPoolConfig
   path: github.com/k8snetworkplumbingwg/sriov-network-operator/api/v1
   version: v1
 version: "3"
-plugins:
-  go.sdk.operatorframework.io/v2-alpha: {}

api/v1/sriovnetworkpoolconfig_types.go

@@ -0,0 +1,49 @@
+package v1
+
+import (
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+)
+
+// SriovNetworkPoolConfigSpec defines the desired state of SriovNetworkPoolConfig
+type SriovNetworkPoolConfigSpec struct {
+	// OvsHardwareOffloadConfig describes the OVS HWOL configuration for selected Nodes
+	OvsHardwareOffloadConfig OvsHardwareOffloadConfig `json:"ovsHardwareOffloadConfig,omitempty"`
+}
+
+type OvsHardwareOffloadConfig struct {
+	// Name is mandatory and must be unique.
+	// On Kubernetes:
+	// Name is the name of OvsHardwareOffloadConfig
+	// On OpenShift:
+	// Name is the name of MachineConfigPool to be enabled with OVS hardware offload
+	Name string `json:"name,omitempty"`
+}
+
+// SriovNetworkPoolConfigStatus defines the observed state of SriovNetworkPoolConfig
+type SriovNetworkPoolConfigStatus struct {
+}
+
+//+kubebuilder:object:root=true
+//+kubebuilder:subresource:status
+
+// SriovNetworkPoolConfig is the Schema for the sriovnetworkpoolconfigs API
+type SriovNetworkPoolConfig struct {
+	metav1.TypeMeta   `json:",inline"`
+	metav1.ObjectMeta `json:"metadata,omitempty"`
+
+	Spec   SriovNetworkPoolConfigSpec   `json:"spec,omitempty"`
+	Status SriovNetworkPoolConfigStatus `json:"status,omitempty"`
+}
+
+//+kubebuilder:object:root=true
+
+// SriovNetworkPoolConfigList contains a list of SriovNetworkPoolConfig
+type SriovNetworkPoolConfigList struct {
+	metav1.TypeMeta `json:",inline"`
+	metav1.ListMeta `json:"metadata,omitempty"`
+	Items           []SriovNetworkPoolConfig `json:"items"`
+}
+
+func init() {
+	SchemeBuilder.Register(&SriovNetworkPoolConfig{}, &SriovNetworkPoolConfigList{})
+}

config/crd/bases/sriovnetwork.openshift.io_sriovnetworkpoolconfigs.yaml

@@ -0,0 +1,66 @@
+
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.3.0
+  creationTimestamp: null
+  name: sriovnetworkpoolconfigs.sriovnetwork.openshift.io
+spec:
+  group: sriovnetwork.openshift.io
+  names:
+    kind: SriovNetworkPoolConfig
+    listKind: SriovNetworkPoolConfigList
+    plural: sriovnetworkpoolconfigs
+    singular: sriovnetworkpoolconfig
+  scope: Namespaced
+  versions:
+  - name: v1
+    schema:
+      openAPIV3Schema:
+        description: SriovNetworkPoolConfig is the Schema for the sriovnetworkpoolconfigs
+          API
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: SriovNetworkPoolConfigSpec defines the desired state of SriovNetworkPoolConfig
+            properties:
+              ovsHardwareOffloadConfig:
+                description: OvsHardwareOffloadConfig describes the OVS HWOL configuration
+                  for selected Nodes
+                properties:
+                  name:
+                    description: 'Name is mandatory and must be unique. On Kubernetes:
+                      Name is the name of OvsHardwareOffloadConfig On OpenShift: Name
+                      is the name of MachineConfigPool to be enabled with OVS hardware
+                      offload'
+                    type: string
+                type: object
+            type: object
+          status:
+            description: SriovNetworkPoolConfigStatus defines the observed state of
+              SriovNetworkPoolConfig
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []

config/crd/kustomization.yaml

@@ -7,6 +7,7 @@ resources:
 - bases/sriovnetwork.openshift.io_sriovnetworknodepolicies.yaml
 - bases/sriovnetwork.openshift.io_sriovnetworknodestates.yaml
 - bases/sriovnetwork.openshift.io_sriovoperatorconfigs.yaml
+- bases/sriovnetwork.openshift.io_sriovnetworkpoolconfigs.yaml
 # +kubebuilder:scaffold:crdkustomizeresource
 
 patchesStrategicMerge:
@@ -17,6 +18,7 @@ patchesStrategicMerge:
 #- patches/webhook_in_sriovnetworknodepolicies.yaml
 #- patches/webhook_in_sriovnetworknodestates.yaml
 #- patches/webhook_in_sriovoperatorconfigs.yaml
+#- patches/webhook_in_sriovnetworkpoolconfigs.yaml
 # +kubebuilder:scaffold:crdkustomizewebhookpatch
 
 # [CERTMANAGER] To enable webhook, uncomment all the sections with [CERTMANAGER] prefix.
@@ -26,6 +28,7 @@ patchesStrategicMerge:
 #- patches/cainjection_in_sriovnetworknodepolicies.yaml
 #- patches/cainjection_in_sriovnetworknodestates.yaml
 #- patches/cainjection_in_sriovoperatorconfigs.yaml
+#- patches/cainjection_in_sriovnetworkpoolconfigs.yaml
 # +kubebuilder:scaffold:crdkustomizecainjectionpatch
 
 # the following config is for teaching kustomize how to do kustomization for CRDs.

config/crd/patches/cainjection_in_sriovnetworkpoolconfigs.yaml

@@ -0,0 +1,8 @@
+# The following patch adds a directive for certmanager to inject CA into the CRD
+# CRD conversion requires k8s 1.13 or later.
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
+  name: sriovnetworkpoolconfigs.sriovnetwork.openshift.io

config/crd/patches/webhook_in_sriovnetworkpoolconfigs.yaml

@@ -0,0 +1,17 @@
+# The following patch enables conversion webhook for CRD
+# CRD conversion requires k8s 1.13 or later.
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  name: sriovnetworkpoolconfigs.sriovnetwork.openshift.io
+spec:
+  conversion:
+    strategy: Webhook
+    webhookClientConfig:
+      # this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
+      # but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
+      caBundle: Cg==
+      service:
+        namespace: system
+        name: webhook-service
+        path: /convert

config/rbac/sriovnetworkpoolconfig_editor_role.yaml

@@ -0,0 +1,24 @@
+# permissions for end users to edit sriovnetworkpoolconfigs.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: sriovnetworkpoolconfig-editor-role
+rules:
+- apiGroups:
+  - sriovnetwork.openshift.io
+  resources:
+  - sriovnetworkpoolconfigs
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - sriovnetwork.openshift.io
+  resources:
+  - sriovnetworkpoolconfigs/status
+  verbs:
+  - get

config/rbac/sriovnetworkpoolconfig_viewer_role.yaml

@@ -0,0 +1,20 @@
+# permissions for end users to view sriovnetworkpoolconfigs.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: sriovnetworkpoolconfig-viewer-role
+rules:
+- apiGroups:
+  - sriovnetwork.openshift.io
+  resources:
+  - sriovnetworkpoolconfigs
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - sriovnetwork.openshift.io
+  resources:
+  - sriovnetworkpoolconfigs/status
+  verbs:
+  - get