├── .chainsaw.yaml ├── .github └── workflows │ ├── chainsaw-tests.yaml │ ├── kube-linter.yaml │ └── kyverno-policies-tests.yaml ├── .gitignore ├── .kube-linter.yaml ├── .tekton ├── build-service-prod-overlay-update.yaml ├── image-controller-prod-overlay-update.yaml ├── mintmaker-prod-overlay-update.yaml └── tasks │ └── promote-component.yaml ├── LICENSE ├── OWNERS ├── README.md ├── _config.yml ├── argo-cd-apps ├── app-of-app-sets │ ├── README.md │ ├── base │ │ ├── all-application-sets.yaml │ │ └── kustomization.yaml │ ├── development │ │ ├── change-source-path.yaml │ │ ├── change-target-namespace.yaml │ │ └── kustomization.yaml │ ├── konflux-public-production │ │ ├── change-source-path.yaml │ │ ├── change-target-namespace.yaml │ │ └── kustomization.yaml │ ├── konflux-public-staging │ │ └── kustomization.yaml │ ├── production-downstream │ │ ├── change-source-path.yaml │ │ ├── change-target-namespace.yaml │ │ └── kustomization.yaml │ ├── production │ │ ├── change-source-path.yaml │ │ ├── change-target-namespace.yaml │ │ └── kustomization.yaml │ ├── staging-downstream │ │ ├── change-source-path.yaml │ │ ├── change-target-namespace.yaml │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml ├── base │ ├── README.md │ ├── all-clusters │ │ ├── infra-deployments │ │ │ ├── authentication │ │ │ │ ├── authentication.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── cluster-secret-store │ │ │ │ ├── cluster-secret-store.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── cost-management │ │ │ │ ├── costmanagement-metrics-operator.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── disable-csvcopy-for-all-cluster │ │ │ │ ├── disable-csvcopy.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── dora-metrics │ │ │ │ ├── dora-metrics.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── enable-dvo-for-all-cluster │ │ │ │ ├── enable-dvo.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── external-secrets-operator │ │ │ │ ├── external-secrets-operator.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── kubesaw-common │ │ │ │ ├── kubesaw-common.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── monitoring-workload-grafana │ │ │ │ ├── kustomization.yaml │ │ │ │ └── monitoring-workload-grafana.yaml │ │ │ ├── monitoring-workload-logging │ │ │ │ ├── kustomization.yaml │ │ │ │ └── monitoring-workload-logging.yaml │ │ │ └── monitoring-workload-prometheus │ │ │ │ ├── kustomization.yaml │ │ │ │ └── monitoring-workload-prometheus.yaml │ │ └── kustomization.yaml │ ├── backup │ │ ├── backup.yaml │ │ └── kustomization.yaml │ ├── ca-bundle │ │ ├── ca-bundle.yaml │ │ └── kustomization.yaml │ ├── ci-helper-app │ │ ├── ci-helper-app.yaml │ │ └── kustomization.yaml │ ├── cluster-secret-store-rh │ │ ├── cluster-secret-store-rh.yaml │ │ └── kustomization.yaml │ ├── eaas │ │ ├── cluster-as-a-service │ │ │ ├── cluster-as-a-service.yaml │ │ │ └── kustomization.yaml │ │ ├── crossplane-config │ │ │ ├── crossplane-config.yaml │ │ │ └── kustomization.yaml │ │ └── kustomization.yaml │ ├── host │ │ ├── ingresscontroller │ │ │ ├── ingresscontroller.yaml │ │ │ └── kustomization.yaml │ │ ├── kustomization.yaml │ │ ├── optional │ │ │ └── infra-deployments │ │ │ │ └── dev-sso │ │ │ │ ├── dev-sso.yaml │ │ │ │ └── kustomization.yaml │ │ ├── smee │ │ │ ├── kustomization.yaml │ │ │ └── smee.yaml │ │ ├── sprayproxy │ │ │ ├── kustomization.yaml │ │ │ └── sprayproxy.yaml │ │ └── toolchain-host-operator │ │ │ ├── kustomization.yaml │ │ │ └── toolchain-host-operator.yaml │ ├── keycloak │ │ ├── keycloak.yaml │ │ └── kustomization.yaml │ ├── konflux-ci │ │ ├── konflux-ci.yaml │ │ └── kustomization.yaml │ ├── local-cluster-secret │ │ ├── all-in-one │ │ │ └── kustomization.yaml │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ └── local-cluster-secret.yaml │ │ └── host-on-local-cluster │ │ │ └── kustomization.yaml │ ├── member │ │ ├── infra-deployments │ │ │ ├── application-api │ │ │ │ ├── application-api.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── build-service │ │ │ │ ├── build-service.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── build-templates │ │ │ │ ├── build-templates.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── crossplane-control-plane │ │ │ │ ├── crossplane-control-plane.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── enterprise-contract │ │ │ │ ├── enterprise-contract.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── etcd-defrag │ │ │ │ ├── etcd-defrag.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── etcd-shield │ │ │ │ ├── etcd-shield.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── has │ │ │ │ ├── has.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── image-controller │ │ │ │ ├── image-controller.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── integration │ │ │ │ ├── integration.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── internal-services │ │ │ │ ├── internal-services.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── knative-eventing │ │ │ │ ├── knative-eventing.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── konflux-info │ │ │ │ ├── konflux-info.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── konflux-rbac │ │ │ │ ├── konflux-rbac.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── konflux-ui │ │ │ │ ├── README │ │ │ │ ├── konflux-ui.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── kubearchive │ │ │ │ ├── kubearchive.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── kyverno │ │ │ │ ├── kustomization.yaml │ │ │ │ └── kyverno.yaml │ │ │ ├── mintmaker │ │ │ │ ├── kustomization.yaml │ │ │ │ └── mintmaker.yaml │ │ │ ├── multi-platform-controller │ │ │ │ ├── kustomization.yaml │ │ │ │ └── multi-platform-controller.yaml │ │ │ ├── namespace-lister │ │ │ │ ├── kustomization.yaml │ │ │ │ └── namespace-lister.yaml │ │ │ ├── notification-controller │ │ │ │ ├── kustomization.yaml │ │ │ │ └── notification-controller.yaml │ │ │ ├── nvme-storage-configurator │ │ │ │ ├── kustomization.yaml │ │ │ │ └── nvme-storage-configurator.yaml │ │ │ ├── perf-team-prometheus-reader │ │ │ │ ├── kustomization.yaml │ │ │ │ └── perf-team-prometheus-reader.yaml │ │ │ ├── pipeline-service │ │ │ │ ├── kustomization.yaml │ │ │ │ └── pipeline-service.yaml │ │ │ ├── proactive-scaler │ │ │ │ ├── kustomization.yaml │ │ │ │ └── proactive-scaler.yaml │ │ │ ├── project-controller │ │ │ │ ├── kustomization.yaml │ │ │ │ └── project-controller.yaml │ │ │ ├── pulp-access-controller │ │ │ │ ├── kustomization.yaml │ │ │ │ └── pulp-access-controller.yaml │ │ │ ├── release │ │ │ │ ├── kustomization.yaml │ │ │ │ └── release.yaml │ │ │ ├── spacerequest-cleaner │ │ │ │ ├── kustomization.yaml │ │ │ │ └── spacerequest-cleaner.yaml │ │ │ ├── tempo │ │ │ │ ├── kustomization.yaml │ │ │ │ └── tempo.yaml │ │ │ ├── tracing-workload-otel-collector │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── tracing-workload-otel-collector.yaml │ │ │ │ └── tracing-workload-tracing.yaml │ │ │ ├── vector-tekton-logs-collector │ │ │ │ ├── kustomization.yaml │ │ │ │ └── vector-tekton-logs-collector.yaml │ │ │ └── workspaces │ │ │ │ ├── kustomization.yaml │ │ │ │ └── workspaces.yaml │ │ ├── kustomization.yaml │ │ └── optional │ │ │ └── helm │ │ │ ├── kustomization.yaml │ │ │ └── rekor │ │ │ ├── kustomization.yaml │ │ │ └── rekor.yaml │ ├── quality-dashboard │ │ ├── kustomization.yaml │ │ └── quality-dashboard.yaml │ ├── repository-validator │ │ ├── kustomization.yaml │ │ └── repository-validator.yaml │ ├── smee-client │ │ ├── kustomization.yaml │ │ └── smee-client.yaml │ ├── tekton-ci │ │ ├── kustomization.yaml │ │ └── tekton-ci.yaml │ ├── toolchain-member │ │ ├── kustomization.yaml │ │ └── toolchain-member-operator.yaml │ └── ui │ │ ├── kustomization.yaml │ │ └── ui.yaml ├── k-components │ ├── assign-eaas-role-to-local-cluster │ │ └── kustomization.yaml │ ├── assign-host-role-to-local-cluster │ │ └── kustomization.yaml │ ├── assign-internal-cluster-role-to-local-cluster │ │ └── kustomization.yaml │ ├── assign-member-role-to-local-cluster │ │ └── kustomization.yaml │ ├── assign-toolchain-member-role-to-local-cluster │ │ └── kustomization.yaml │ ├── deploy-to-all-clusters │ │ ├── all-clusters-label-selector.yaml │ │ └── kustomization.yaml │ ├── deploy-to-eaas-cluster-merge-generator │ │ ├── eaas-cluster-label-selector.yaml │ │ └── kustomization.yaml │ ├── deploy-to-host-cluster-merge-generator │ │ ├── host-cluster-label-selector.yaml │ │ └── kustomization.yaml │ ├── deploy-to-host-cluster │ │ ├── host-cluster-label-selector.yaml │ │ └── kustomization.yaml │ ├── deploy-to-member-cluster-merge-generator │ │ ├── kustomization.yaml │ │ └── member-cluster-label-selector.yaml │ ├── deploy-to-member-cluster │ │ ├── kustomization.yaml │ │ └── member-cluster-label-selector.yaml │ ├── disable-auto-sync │ │ ├── disable-auto-sync.yaml │ │ └── kustomization.yaml │ ├── inject-argocd-namespace │ │ └── kustomization.yaml │ └── inject-infra-deployments-repo-details │ │ ├── application-patch.yaml │ │ ├── application-set-multisrc-src-1-patch.yaml │ │ ├── application-set-patch.yaml │ │ └── kustomization.yaml └── overlays │ ├── development │ ├── delete-applications.yaml │ ├── development-overlay-patch.yaml │ ├── kustomization.yaml │ └── set-local-cluster-label.yaml │ ├── konflux-public-production │ ├── delete-applications.yaml │ ├── kustomization.yaml │ └── production-overlay-patch.yaml │ ├── konflux-public-staging │ ├── delete-applications.yaml │ └── kustomization.yaml │ ├── production-downstream │ ├── delete-applications.yaml │ ├── kustomization.yaml │ ├── production-downstream-overlay-patch.yaml │ └── production-overlay-patch.yaml │ └── staging-downstream │ ├── delete-applications.yaml │ ├── kustomization.yaml │ └── staging-downstream-overlay-patch.yaml ├── components ├── application-api │ ├── OWNERS │ ├── allow-argocd-to-manage.yaml │ ├── argocd-permissions.yaml │ └── kustomization.yaml ├── authentication │ ├── base │ │ ├── admin-checker │ │ │ ├── admin-checker-sa.yaml │ │ │ ├── cronjob.yaml │ │ │ ├── external-secrets │ │ │ │ ├── kustomization.yaml │ │ │ │ └── rhtap-infra-secrets.yaml │ │ │ ├── kustomization.yaml │ │ │ └── namespace.yaml │ │ ├── component-maintainer.yaml │ │ ├── everyone-can-view-patch.yaml │ │ ├── everyone-can-view.yaml │ │ ├── grafana-view-only.yaml │ │ ├── group-sync │ │ │ ├── external-secrets │ │ │ │ ├── konflux-ldap-sa.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ └── mtls-ca-validators.yaml │ │ │ ├── group-sync.yaml │ │ │ ├── konflux-rover-groups.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── namespaces.yaml │ │ │ └── subscription.yaml │ │ ├── konflux-admins.yaml │ │ └── kustomization.yaml │ ├── k-components │ │ └── ldap-url-patch │ │ │ ├── kustomization.yaml │ │ │ └── ldap-url-patch.yaml │ ├── production │ │ ├── base │ │ │ ├── konflux-ldap-sa-patch.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── mtls-ca-validators-patch.yaml │ │ │ └── rhtap-infra-secrets-patch.yaml │ │ ├── kflux-ocp-p01 │ │ │ └── kustomization.yaml │ │ ├── stone-prod-p01 │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ └── kustomization.yaml │ └── staging │ │ ├── base │ │ └── kustomization.yaml │ │ └── stone-stage-p01 │ │ └── kustomization.yaml ├── backup │ ├── base │ │ ├── all-clusters │ │ │ ├── external-secret.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── namespace.yaml │ │ │ ├── oadp │ │ │ │ ├── dpa.yaml │ │ │ │ ├── install-oadp.yaml │ │ │ │ └── kustomization.yaml │ │ │ └── servicemonitor.yaml │ │ ├── host │ │ │ ├── kustomization.yaml │ │ │ └── schedules │ │ │ │ ├── backup-toolchain-host-schedule.yaml │ │ │ │ └── kustomization.yaml │ │ └── member │ │ │ ├── kustomization.yaml │ │ │ └── schedules │ │ │ ├── backup-tenants-schedule.yaml │ │ │ ├── backup-toolchain-member-schedule.yaml │ │ │ └── kustomization.yaml │ ├── production │ │ ├── kflux-ocp-p01 │ │ │ ├── backup-s3-credentials-patch.yaml │ │ │ ├── dpa-bucket-patch.yaml │ │ │ ├── dpa-kmskeyid-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh02 │ │ │ ├── backup-s3-credentials-patch.yaml │ │ │ ├── backup-tenants-schedule.yaml │ │ │ ├── dpa-bucket-patch.yaml │ │ │ ├── dpa-kmskeyid-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── backup-s3-credentials-patch.yaml │ │ │ ├── backup-tenants-schedule.yaml │ │ │ ├── dpa-bucket-patch.yaml │ │ │ ├── dpa-kmskeyid-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prd-host1 │ │ │ ├── backup-s3-credentials-patch.yaml │ │ │ ├── dpa-bucket-patch.yaml │ │ │ ├── dpa-kmskeyid-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prd-m01 │ │ │ ├── backup-s3-credentials-patch.yaml │ │ │ ├── dpa-bucket-patch.yaml │ │ │ ├── dpa-kmskeyid-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prd-rh01 │ │ │ ├── backup-s3-credentials-patch.yaml │ │ │ ├── dpa-bucket-patch.yaml │ │ │ ├── dpa-kmskeyid-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prod-p01 │ │ │ ├── backup-s3-credentials-patch.yaml │ │ │ ├── dpa-bucket-patch.yaml │ │ │ ├── dpa-kmskeyid-patch.yaml │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ ├── backup-s3-credentials-patch.yaml │ │ │ ├── dpa-bucket-patch.yaml │ │ │ ├── dpa-kmskeyid-patch.yaml │ │ │ └── kustomization.yaml │ └── staging │ │ ├── stone-stage-p01 │ │ ├── backup-s3-credentials-patch.yaml │ │ ├── dpa-bucket-patch.yaml │ │ ├── dpa-kmskeyid-patch.yaml │ │ └── kustomization.yaml │ │ ├── stone-stg-host │ │ ├── backup-s3-credentials-patch.yaml │ │ ├── dpa-bucket-patch.yaml │ │ ├── dpa-kmskeyid-patch.yaml │ │ └── kustomization.yaml │ │ └── stone-stg-rh01 │ │ ├── backup-s3-credentials-patch.yaml │ │ ├── dpa-bucket-patch.yaml │ │ ├── dpa-kmskeyid-patch.yaml │ │ └── kustomization.yaml ├── build-service │ ├── OWNERS │ ├── README.md │ ├── base │ │ ├── allow-argocd-to-manage.yaml │ │ ├── build-pipeline-config │ │ │ └── build-pipeline-config.yaml │ │ ├── build-pipeline-runner-rolebinding.yaml │ │ ├── external-secrets │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret.yaml │ │ ├── kustomization.yaml │ │ ├── monitoring.yaml │ │ └── rbac │ │ │ ├── build-admin.yaml │ │ │ ├── build-config.yaml │ │ │ ├── build-maintainer.yaml │ │ │ └── kustomization.yaml │ ├── components │ │ ├── rh-certs │ │ │ ├── add-rh-certs-patch.yaml │ │ │ └── kustomization.yaml │ │ └── webhook-config │ │ │ ├── kustomization.yaml │ │ │ └── webhook-config-patch.yaml │ ├── development │ │ ├── image-expiration-patch.yaml │ │ ├── kustomization.yaml │ │ ├── logs-in-console-format-cmd-arg-patch.yaml │ │ ├── pac-webhook-insecure-ssl-patch.yaml │ │ └── sealights-token-patch.yaml │ ├── production │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── manager_resources_patch.yaml │ │ │ └── pipelines-as-code-secret-patch.yaml │ │ ├── kflux-ocp-p01 │ │ │ ├── kustomization.yaml │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ └── webhook-config.json │ │ ├── kflux-prd-rh02 │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── stone-prod-p01 │ │ │ ├── kustomization.yaml │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ └── webhook-config.json │ │ └── stone-prod-p02 │ │ │ ├── kustomization.yaml │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ └── webhook-config.json │ └── staging │ │ ├── base │ │ ├── kustomization.yaml │ │ └── manager_resources_patch.yaml │ │ └── stone-stage-p01 │ │ ├── kustomization.yaml │ │ ├── pipelines-as-code-secret-path.yaml │ │ └── webhook-config.json ├── build-templates │ ├── base │ │ ├── 0-namespace.yaml │ │ ├── e2e │ │ │ ├── kustomization.yaml │ │ │ ├── namespace.yaml │ │ │ ├── role.yaml │ │ │ └── rolebinding.yaml │ │ └── kustomization.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ ├── e2e-quay-push-secret.yaml │ │ ├── e2e-registry-redhat-io-pull-secret.yaml │ │ ├── e2e-serviceaccount.yaml │ │ └── kustomization.yaml │ └── staging │ │ ├── e2e-quay-push-secret.yaml │ │ ├── e2e-serviceaccount.yaml │ │ └── kustomization.yaml ├── ci-helper-app │ ├── OWNERS │ ├── base │ │ ├── kustomization.yaml │ │ └── rbac │ │ │ ├── ci-helper-app.yaml │ │ │ └── kustomization.yaml │ ├── development │ │ └── kustomization.yaml │ └── staging │ │ ├── external-secrets │ │ ├── ci-helper-app-secrets.yaml │ │ └── kustomization.yaml │ │ └── kustomization.yaml ├── cluster-as-a-service │ ├── OWNERS │ ├── base │ │ ├── argocd.yaml │ │ ├── cluster-aas-operator.yaml │ │ ├── clustertemplatequotas.yaml │ │ ├── clustertemplates.yaml │ │ ├── kustomization.yaml │ │ ├── multicluster-engine.yaml │ │ ├── namespaces.yaml │ │ └── rbac.yaml │ ├── development │ │ ├── add-hypershift-params.yaml │ │ ├── argocd-rbac.yaml │ │ ├── klusterlet-config.yaml │ │ └── kustomization.yaml │ ├── production │ │ ├── add-hypershift-params.yaml │ │ ├── external-secrets.yaml │ │ └── kustomization.yaml │ └── staging │ │ ├── add-hypershift-params.yaml │ │ ├── external-secrets.yaml │ │ └── kustomization.yaml ├── cluster-secret-store-rh │ ├── base │ │ ├── appsre-stonesoup-vault-rh-secret-store.yaml │ │ ├── insights-secret-store.yaml │ │ ├── kustomization.yaml │ │ └── rh-artifacts-bucket-writer-secret-store.yml │ └── production │ │ ├── approle-id-patch.yaml │ │ ├── insights-approle-id-patch.yaml │ │ └── kustomization.yaml ├── cluster-secret-store │ ├── base │ │ ├── appsre-stonesoup-vault-secret-store.yaml │ │ ├── appsre-vault-secret-store.yml │ │ └── kustomization.yaml │ ├── production │ │ ├── approle-id-patch.yaml │ │ └── kustomization.yaml │ └── staging │ │ ├── insights-approle-id-patch.yaml │ │ ├── kustomization.yaml │ │ └── rhtap-promotion-staging-patch.yaml ├── cost-management │ ├── base │ │ ├── costmanagement-metrics-config.yaml │ │ ├── costmanagement-metrics-operator.yaml │ │ ├── external-service-account-secret.yaml │ │ ├── kustomization.yaml │ │ └── rbac │ │ │ ├── cost-management-admin.yaml │ │ │ └── kustomization.yaml │ ├── policies │ │ ├── .chainsaw-test │ │ │ ├── chainsaw-assert-clusterpolicy.yaml │ │ │ ├── chainsaw-test.yaml │ │ │ └── resources │ │ │ │ ├── expected-pod-matching.yaml │ │ │ │ ├── namespace-cost-center.yaml │ │ │ │ ├── namespace-empty-cost-center.yaml │ │ │ │ ├── namespace-no-cost-center.yaml │ │ │ │ ├── namespace-nonmatching.yaml │ │ │ │ └── pod.yaml │ │ ├── kustomization.yaml │ │ ├── kyverno_rbac.yaml │ │ └── update_namespace_labels.yaml │ ├── production │ │ ├── base │ │ │ ├── cost-mangement-external-secret-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── kflux-ocp-p01 │ │ │ ├── cost-management-config-source-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-es01 │ │ │ ├── cost-management-config-source-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prd-host1 │ │ │ ├── cost-management-config-source-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prd-rh01 │ │ │ ├── cost-management-config-source-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prd-rh02 │ │ │ ├── cost-management-config-source-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prod-p01 │ │ │ ├── cost-management-config-source-patch.yaml │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ ├── cost-management-config-source-patch.yaml │ │ │ └── kustomization.yaml │ └── staging │ │ ├── base │ │ ├── cost-mangement-external-secret-patch.yaml │ │ └── kustomization.yaml │ │ ├── kflux-stg-es01 │ │ ├── cost-management-config-source-patch.yaml │ │ └── kustomization.yaml │ │ ├── stone-stage-p01 │ │ ├── cost-management-config-source-patch.yaml │ │ └── kustomization.yaml │ │ ├── stone-stg-host │ │ ├── cost-management-config-source-patch.yaml │ │ └── kustomization.yaml │ │ └── stone-stg-rh01 │ │ ├── cost-management-config-source-patch.yaml │ │ └── kustomization.yaml ├── crossplane-config │ ├── OWNERS │ ├── base │ │ ├── kustomization.yaml │ │ └── rbac.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ └── kustomization.yml │ └── staging │ │ └── kustomization.yaml ├── crossplane-control-plane │ ├── OWNERS │ ├── base │ │ ├── configmap.yaml │ │ ├── cronjob.yaml │ │ ├── kustomization.yaml │ │ └── rbac.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ ├── kustomization.yaml │ │ └── provider-config.yaml │ └── staging │ │ ├── kustomization.yaml │ │ ├── provider-config.yaml │ │ └── testplatform-provider-config.yaml ├── dev-sso │ ├── keycloak-realm.yaml │ ├── keycloak.yaml │ ├── kustomization.yaml │ ├── operatorgroup.yaml │ └── subscription.yaml ├── dora-metrics │ ├── base │ │ ├── external-secrets │ │ │ ├── exporters-secrets.yaml │ │ │ └── kustomization.yaml │ │ ├── kustomization.yaml │ │ └── rbac │ │ │ ├── dora-metrics.yaml │ │ │ └── kustomization.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ ├── exporters-secrets-patch.yaml │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml ├── enterprise-contract │ ├── OWNERS │ ├── README.md │ ├── ecp.yaml │ ├── kustomization.yaml │ ├── role.yaml │ └── rolebinding.yaml ├── etcd-shield │ ├── OWNERS │ ├── base │ │ ├── config.yaml │ │ ├── deployment.yaml │ │ ├── etcd_shield_alerts.yaml │ │ ├── kustomization.yaml │ │ ├── ns.yaml │ │ ├── rbac.yaml │ │ ├── service.yaml │ │ └── webhook.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ ├── base │ │ │ ├── config.yaml │ │ │ ├── deployment.yaml │ │ │ ├── etcd_shield_alerts.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── ns.yaml │ │ │ ├── rbac.yaml │ │ │ ├── service.yaml │ │ │ └── webhook.yaml │ │ ├── kflux-ocp-p01 │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh02 │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh03 │ │ │ └── kustomization.yaml │ │ ├── stone-prd-rh01 │ │ │ └── kustomization.yaml │ │ ├── stone-prod-p01 │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ └── kustomization.yaml │ └── staging │ │ ├── stone-stage-p01 │ │ └── kustomization.yaml │ │ └── stone-stg-rh01 │ │ └── kustomization.yaml ├── external-secrets-operator │ ├── base │ │ ├── kustomization.yaml │ │ ├── operator-config.yaml │ │ └── subscription.yaml │ ├── production │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml ├── has │ ├── OWNERS │ ├── base │ │ ├── argocd-roles │ │ │ ├── allow-argocd-to-manage.yaml │ │ │ ├── argocd-permissions.yaml │ │ │ └── kustomization.yaml │ │ ├── external-secrets │ │ │ ├── has-github-token.yaml │ │ │ └── kustomization.yaml │ │ ├── kustomization.yaml │ │ └── rbac │ │ │ ├── has-admin.yaml │ │ │ ├── has.yaml │ │ │ └── kustomization.yaml │ ├── development │ │ └── kustomization.yaml │ ├── k-components │ │ ├── enable-profiling │ │ │ ├── kustomization.yaml │ │ │ └── pprof_patch.yaml │ │ └── manager-resources │ │ │ ├── kustomization.yaml │ │ │ └── manager_resources_patch.yaml │ ├── production │ │ ├── has-github-token-patch.yaml │ │ └── kustomization.yaml │ └── staging │ │ ├── kustomization.yaml │ │ └── rbac │ │ ├── has-exec.yaml │ │ └── kustomization.yaml ├── image-controller │ ├── OWNERS │ ├── README.md │ ├── base │ │ ├── allow-argocd-to-manage.yaml │ │ ├── external-secrets │ │ │ ├── kustomization.yaml │ │ │ └── quaytoken.yaml │ │ ├── kustomization.yaml │ │ ├── monitoring.yaml │ │ └── rbac │ │ │ ├── image-controller-admin.yaml │ │ │ ├── image-controller-maintainer.yaml │ │ │ └── kustomization.yaml │ ├── development │ │ ├── kustomization.yaml │ │ ├── logs-in-console-format-cmd-arg-patch.yaml │ │ ├── manager_resources_patch.yaml │ │ └── sealights-token-patch.yaml │ ├── production │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── manager_resources_patch.yaml │ │ │ ├── pruner_cronjob_resources_patch.yaml │ │ │ └── quaytoken.yaml │ │ └── stone-prd-rh01 │ │ │ ├── kustomization.yaml │ │ │ └── resources │ │ │ ├── image_pruner │ │ │ └── prune_images.py │ │ │ ├── konflux-ci-pull-request-builds-pruner-cronjob.yaml │ │ │ ├── konflux-ci-pull-request-builds-pruner-token.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── redhat-appstudio-pr-cronjob.yaml │ │ │ └── redhat-appstudio-pr-token.yaml │ └── staging │ │ └── base │ │ ├── kustomization.yaml │ │ ├── manager_resources_patch.yaml │ │ └── pruner_cronjob_resources_patch.yaml ├── integration │ ├── OWNERS │ ├── README.md │ ├── base │ │ ├── allow-argocd-to-manage.yaml │ │ ├── argocd-permissions.yaml │ │ ├── delete-snapshots.yaml │ │ ├── external-secrets │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret.yaml │ │ ├── integration.yaml │ │ ├── kustomization.yaml │ │ ├── manage-integrationtestscenarios.yaml │ │ └── modify-pipelineruns-taskruns.yaml │ ├── development │ │ ├── kustomization.yaml │ │ ├── manager_resources_patch.yaml │ │ ├── sealights-token-patch.yaml │ │ └── snapshotgc_inputs_patch.yaml │ ├── production │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── manager_resources_patch.yaml │ │ │ └── pipelines-as-code-secret.yaml │ │ ├── kflux-ocp-p01 │ │ │ ├── console-url-config-patch.json │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── kflux-prd-rh02 │ │ │ ├── console-url-config-patch.json │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── console-url-config-patch.json │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── stone-prod-p01 │ │ │ ├── console-url-config-patch.json │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ └── stone-prod-p02 │ │ │ ├── console-url-config-patch.json │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ ├── rh-certs │ │ ├── add-rh-certs-patch.yaml │ │ └── kustomization.yaml │ └── staging │ │ ├── base │ │ ├── kustomization.yaml │ │ └── manager_resources_patch.yaml │ │ └── stone-stage-p01 │ │ ├── console-url-config-patch.json │ │ ├── kustomization.yaml │ │ └── pipelines-as-code-secret-path.yaml ├── internal-services │ ├── OWNERS │ ├── README.md │ ├── internal-services.yaml │ ├── internal_service_request_role.yaml │ ├── internal_service_request_role_binding.yaml │ ├── internal_service_request_service_account.yaml │ ├── internal_service_service_account_token.yaml │ └── kustomization.yaml ├── keycloak │ ├── README.md │ ├── base │ │ ├── configure-keycloak.yaml │ │ ├── konflux-workspace-admins │ │ │ ├── kustomization.yaml │ │ │ └── rbac.yaml │ │ ├── kustomization.yaml │ │ ├── namespace.yaml │ │ └── rhsso-operator.yaml │ ├── development │ │ ├── kustomization.yaml │ │ ├── reduce-replicas.yaml │ │ ├── set-ocp-idp.yaml │ │ └── set-redirect-uri.yaml │ ├── production │ │ ├── kflux-ocp-p01 │ │ │ ├── kustomization.yaml │ │ │ ├── set-ocp-idp.yaml │ │ │ └── set-redirect-uri.yaml │ │ ├── stone-prod-p01 │ │ │ ├── kustomization.yaml │ │ │ ├── set-ocp-idp.yaml │ │ │ └── set-redirect-uri.yaml │ │ └── stone-prod-p02 │ │ │ ├── kustomization.yaml │ │ │ ├── set-ocp-idp.yaml │ │ │ └── set-redirect-uri.yaml │ └── staging │ │ └── stone-stage-p01 │ │ ├── kustomization.yaml │ │ ├── set-ocp-idp.yaml │ │ └── set-redirect-uri.yaml ├── knative-eventing │ ├── OWNERS │ ├── base │ │ └── kustomization.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ ├── base │ │ │ └── kustomization.yaml │ │ ├── kflux-ocp-p01 │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh02 │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh03 │ │ │ └── kustomization.yaml │ │ ├── stone-prd-m01 │ │ │ └── kustomization.yaml │ │ ├── stone-prd-rh01 │ │ │ └── kustomization.yaml │ │ ├── stone-prod-p01 │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ └── kustomization.yaml │ └── staging │ │ ├── stone-stage-p01 │ │ └── kustomization.yaml │ │ └── stone-stg-rh01 │ │ └── kustomization.yaml ├── konflux-ci │ ├── base │ │ ├── appstudio-pipelines-runner-rolebinding.yaml │ │ ├── external-secrets │ │ │ ├── clair-in-ci-db-github-token.yaml │ │ │ ├── dockerhub-pull-secret.yaml │ │ │ ├── github-secret.yaml │ │ │ ├── infra-deployments-pr-creator.yaml │ │ │ ├── konflux-ci-repo-creator.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── quay-push-secret-konflux-ci.yaml │ │ │ ├── registry-redhat-io-pull-secret.yaml │ │ │ ├── slack-webhook-notification-secret.yaml │ │ │ ├── snyk-shared-token.yaml │ │ │ └── test-artifacts-push-secret.yaml │ │ ├── konflux-ci-maintainers-rb.yaml │ │ ├── kustomization.yaml │ │ ├── namespace.yaml │ │ ├── pod-logs-reader-role.yaml │ │ ├── pod-logs-reader-rolebinding.yaml │ │ ├── repository.yaml │ │ └── serviceaccount.yaml │ ├── production │ │ ├── infra-deployments-pr-creator.yaml │ │ ├── kustomization.yaml │ │ ├── plnsvc-ci-secret.yaml │ │ ├── plnsvc-codecov-secret.yaml │ │ ├── quay-push-secret-konflux-ci.yaml │ │ ├── redhat-appstudio-tekton-catalog-build-definitions-pull-secret.yaml │ │ └── snyk-shared-token.yaml │ └── staging │ │ └── kustomization.yaml ├── konflux-info │ ├── base │ │ ├── kustomization.yaml │ │ └── rbac.yaml │ ├── production │ │ ├── kflux-ocp-p01 │ │ │ ├── info.json │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh02 │ │ │ ├── info.json │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── info.json │ │ │ └── kustomization.yaml │ │ ├── stone-prd-rh01 │ │ │ ├── info.json │ │ │ └── kustomization.yaml │ │ ├── stone-prod-p01 │ │ │ ├── info.json │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ ├── info.json │ │ │ └── kustomization.yaml │ └── staging │ │ ├── stone-stage-p01 │ │ ├── info.json │ │ └── kustomization.yaml │ │ └── stone-stg-rh01 │ │ ├── info.json │ │ └── kustomization.yaml ├── konflux-rbac │ ├── OWNERS │ ├── policies │ │ ├── bootstrap-tenant-namespace │ │ │ ├── .chainsaw-test │ │ │ │ ├── chainsaw-assert-clusterpolicy.yaml │ │ │ │ ├── chainsaw-test.yaml │ │ │ │ └── resources │ │ │ │ │ ├── actual-appstudio-pipeline-clusterrole.yaml │ │ │ │ │ ├── actual-existing-resources.yaml │ │ │ │ │ ├── actual-existing-rolebinding.yaml │ │ │ │ │ ├── actual-namespace-konfluxcidev.yaml │ │ │ │ │ ├── actual-namespace-unlabeled.yaml │ │ │ │ │ ├── expected-resources.yaml │ │ │ │ │ └── expected-rolebinding.yaml │ │ │ ├── .kyverno-test │ │ │ │ ├── kyverno-test.yaml │ │ │ │ └── resources │ │ │ │ │ ├── expected-configmap_trusted-ca.yml │ │ │ │ │ ├── expected-networkpolicy_allow-from-console-namespaces.yml │ │ │ │ │ ├── expected-networkpolicy_allow-from-olm-namespaces.yml │ │ │ │ │ ├── expected-networkpolicy_allow-from-openshift-ingress.yml │ │ │ │ │ ├── expected-networkpolicy_allow-from-openshift-monitoring.yml │ │ │ │ │ ├── expected-networkpolicy_allow-same-namespace.yml │ │ │ │ │ ├── expected-rolebinding-appstudio-runner.yaml │ │ │ │ │ └── labeled-namespace-konflux.yaml │ │ │ ├── bootstrap-tenant-namespace-clusterpolicy.yaml │ │ │ ├── kustomization.yaml │ │ │ └── kyverno_rbac.yaml │ │ ├── restrict-binding-system-authenticated │ │ │ ├── .chainsaw-test │ │ │ │ ├── chainsaw-assert-clusterpolicy.yaml │ │ │ │ ├── chainsaw-test.yaml │ │ │ │ └── resources │ │ │ │ │ ├── invalid-systemauthenticated-rolebinding.yaml │ │ │ │ │ ├── tenant-namespace.yaml │ │ │ │ │ └── valid-systemauthenticated-rolebinding.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── kyverno_rbac.yaml │ │ │ └── validate-restrict-binding-system-authenticated-clusterpolicy.yaml │ │ └── validate-rolebindings │ │ │ ├── .chainsaw-test │ │ │ ├── chainsaw-assert-clusterpolicy.yaml │ │ │ ├── chainsaw-test.yaml │ │ │ └── resources │ │ │ │ ├── rolebinding.yaml │ │ │ │ └── tenant-namespace.yaml │ │ │ ├── invalid-subjects.yaml │ │ │ ├── kustomization.yaml │ │ │ └── kyverno_rbac.yaml │ ├── production │ │ ├── base │ │ │ ├── konflux-admin-user-actions.yaml │ │ │ ├── konflux-builder-bot-actions.yaml │ │ │ ├── konflux-contributor-user-actions.yaml │ │ │ ├── konflux-maintainer-user-actions.yaml │ │ │ ├── konflux-releaser-bot-actions.yaml │ │ │ ├── konflux-viewer-user-actions.yaml │ │ │ └── kustomization.yaml │ │ ├── empty-base │ │ │ └── kustomization.yaml │ │ ├── kflux-ocp-p01 │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh02 │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh03 │ │ │ └── kustomization.yaml │ │ ├── policies │ │ │ ├── bootstrap-tenant-namespace │ │ │ │ ├── .chainsaw-test │ │ │ │ │ ├── chainsaw-assert-clusterpolicy.yaml │ │ │ │ │ ├── chainsaw-test.yaml │ │ │ │ │ └── resources │ │ │ │ │ │ ├── actual-appstudio-pipeline-clusterrole.yaml │ │ │ │ │ │ ├── actual-existing-resources.yaml │ │ │ │ │ │ ├── actual-existing-rolebinding.yaml │ │ │ │ │ │ ├── actual-namespace-konfluxcidev.yaml │ │ │ │ │ │ ├── actual-namespace-unlabeled.yaml │ │ │ │ │ │ ├── expected-resources.yaml │ │ │ │ │ │ └── expected-rolebinding.yaml │ │ │ │ ├── .kyverno-test │ │ │ │ │ ├── kyverno-test.yaml │ │ │ │ │ └── resources │ │ │ │ │ │ ├── expected-configmap_trusted-ca.yml │ │ │ │ │ │ ├── expected-networkpolicy_allow-from-console-namespaces.yml │ │ │ │ │ │ ├── expected-networkpolicy_allow-from-olm-namespaces.yml │ │ │ │ │ │ ├── expected-networkpolicy_allow-from-openshift-ingress.yml │ │ │ │ │ │ ├── expected-networkpolicy_allow-from-openshift-monitoring.yml │ │ │ │ │ │ ├── expected-networkpolicy_allow-same-namespace.yml │ │ │ │ │ │ ├── expected-rolebinding-appstudio-runner.yaml │ │ │ │ │ │ └── labeled-namespace-konflux.yaml │ │ │ │ ├── bootstrap-tenant-namespace-clusterpolicy.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ └── kyverno_rbac.yaml │ │ │ ├── restrict-binding-system-authenticated │ │ │ │ ├── .chainsaw-test │ │ │ │ │ ├── chainsaw-assert-clusterpolicy.yaml │ │ │ │ │ ├── chainsaw-test.yaml │ │ │ │ │ └── resources │ │ │ │ │ │ ├── invalid-systemauthenticated-rolebinding.yaml │ │ │ │ │ │ ├── tenant-namespace.yaml │ │ │ │ │ │ └── valid-systemauthenticated-rolebinding.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── kyverno_rbac.yaml │ │ │ │ └── validate-restrict-binding-system-authenticated-clusterpolicy.yaml │ │ │ └── validate-rolebindings │ │ │ │ ├── .chainsaw-test │ │ │ │ ├── chainsaw-assert-clusterpolicy.yaml │ │ │ │ ├── chainsaw-test.yaml │ │ │ │ └── resources │ │ │ │ │ ├── rolebinding.yaml │ │ │ │ │ └── tenant-namespace.yaml │ │ │ │ ├── invalid-subjects.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ └── kyverno_rbac.yaml │ │ ├── stone-prd-rh01 │ │ │ └── kustomization.yaml │ │ ├── stone-prod-p01 │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ ├── kustomization.yaml │ │ │ └── rhel │ │ │ ├── konflux-rhel-read-events-role.yaml │ │ │ └── kustomization.yaml │ └── staging │ │ ├── base │ │ ├── konflux-admin-user-actions.yaml │ │ ├── konflux-builder-bot-actions.yaml │ │ ├── konflux-contributor-user-actions.yaml │ │ ├── konflux-maintainer-user-actions.yaml │ │ ├── konflux-releaser-bot-actions.yaml │ │ ├── konflux-viewer-user-actions.yaml │ │ └── kustomization.yaml │ │ ├── empty-base │ │ └── kustomization.yaml │ │ ├── stone-stage-p01 │ │ └── kustomization.yaml │ │ └── stone-stg-rh01 │ │ └── kustomization.yaml ├── konflux-ui │ ├── OWNERS │ ├── base │ │ ├── kustomization.yaml │ │ └── ns.yaml │ ├── production │ │ ├── base │ │ │ ├── dex │ │ │ │ ├── dex.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── proxy │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── nginx.conf │ │ │ │ └── proxy.yaml │ │ │ └── route-and-oauth.yaml │ │ ├── empty-base │ │ │ └── kustomization.yaml │ │ ├── kflux-ocp-p01 │ │ │ ├── add-service-certs-patch.yaml │ │ │ ├── configure-oauth-proxy-secret.yaml │ │ │ ├── dex-config.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── oauth2-proxy-args-patch.yaml │ │ │ ├── remove-run-as-user-proxy-patch.yaml │ │ │ ├── set-hostname.yaml │ │ │ ├── set-redirect-uri.yaml │ │ │ └── set-replicas-patch.yaml │ │ ├── kflux-prd-rh02 │ │ │ ├── add-service-certs-patch.yaml │ │ │ ├── configure-oauth-proxy-secret.yaml │ │ │ ├── dex-config.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── oauth2-proxy-args-patch.yaml │ │ │ ├── remove-run-as-user-proxy-patch.yaml │ │ │ ├── set-hostname.yaml │ │ │ ├── set-redirect-uri.yaml │ │ │ └── set-replicas-patch.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── add-service-certs-patch.yaml │ │ │ ├── configure-oauth-proxy-secret.yaml │ │ │ ├── dex-config.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── oauth2-proxy-args-patch.yaml │ │ │ ├── remove-run-as-user-proxy-patch.yaml │ │ │ ├── set-hostname.yaml │ │ │ ├── set-redirect-uri.yaml │ │ │ └── set-replicas-patch.yaml │ │ ├── stone-prd-rh01 │ │ │ ├── add-service-certs-patch.yaml │ │ │ ├── configure-oauth-proxy-secret.yaml │ │ │ ├── dex-config.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── oauth2-proxy-args-patch.yaml │ │ │ ├── remove-run-as-user-proxy-patch.yaml │ │ │ ├── set-hostname.yaml │ │ │ ├── set-redirect-uri.yaml │ │ │ └── set-replicas-patch.yaml │ │ ├── stone-prod-p01 │ │ │ ├── add-service-certs-patch.yaml │ │ │ ├── configure-oauth-proxy-secret.yaml │ │ │ ├── dex-config.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── oauth2-proxy-args-patch.yaml │ │ │ ├── remove-run-as-user-proxy-patch.yaml │ │ │ ├── set-hostname.yaml │ │ │ ├── set-redirect-uri.yaml │ │ │ └── set-replicas-patch.yaml │ │ └── stone-prod-p02 │ │ │ ├── add-service-certs-patch.yaml │ │ │ ├── configure-oauth-proxy-secret.yaml │ │ │ ├── dex-config.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── oauth2-proxy-args-patch.yaml │ │ │ ├── remove-run-as-user-proxy-patch.yaml │ │ │ ├── set-hostname.yaml │ │ │ ├── set-redirect-uri.yaml │ │ │ └── set-replicas-patch.yaml │ └── staging │ │ ├── base │ │ ├── dex │ │ │ ├── dex.yaml │ │ │ └── kustomization.yaml │ │ ├── kustomization.yaml │ │ ├── proxy │ │ │ ├── kustomization.yaml │ │ │ ├── nginx.conf │ │ │ └── proxy.yaml │ │ └── route-and-oauth.yaml │ │ ├── stone-stage-p01 │ │ ├── add-service-certs-patch.yaml │ │ ├── configure-oauth-proxy-secret.yaml │ │ ├── dex-config.yaml │ │ ├── kustomization.yaml │ │ ├── oauth2-proxy-args-patch.yaml │ │ ├── remove-run-as-user-proxy-patch.yaml │ │ ├── set-hostname.yaml │ │ ├── set-redirect-uri.yaml │ │ └── set-replicas-patch.yaml │ │ └── stone-stg-rh01 │ │ ├── add-service-certs-patch.yaml │ │ ├── configure-oauth-proxy-secret.yaml │ │ ├── dex-config.yaml │ │ ├── kustomization.yaml │ │ ├── oauth2-proxy-args-patch.yaml │ │ ├── remove-run-as-user-proxy-patch.yaml │ │ ├── set-hostname.yaml │ │ ├── set-redirect-uri.yaml │ │ └── set-replicas-patch.yaml ├── kubearchive │ ├── OWNERS │ ├── base │ │ ├── kubearchive-config.yaml │ │ ├── kubearchive-maintainer.yaml │ │ ├── kubearchive-routes.yaml │ │ ├── kustomization.yaml │ │ ├── monitoring-otel-collector.yaml │ │ ├── monitoring-servicemonitor.yaml │ │ ├── otel-collector-config.yaml │ │ └── rbac.yaml │ ├── development │ │ ├── kustomization.yaml │ │ └── postgresql.yaml │ ├── policies │ │ ├── .chainsaw-test │ │ │ ├── chainsaw-assert-clusterpolicy.yaml │ │ │ ├── chainsaw-test.yaml │ │ │ └── resources │ │ │ │ ├── actual-kubeconfig-archive.yaml │ │ │ │ ├── actual-namespace-konfluxcidev.yaml │ │ │ │ ├── actual-namespace-unlabeled.yaml │ │ │ │ ├── expected-kubearchiveconfig.yaml │ │ │ │ └── kubearchive-crd.yaml │ │ ├── .kyverno-test │ │ │ └── kyverno-test.yaml │ │ ├── bootstrap-namespace.yaml │ │ ├── kustomization.yaml │ │ ├── kyverno_rbac.yaml │ │ └── resources │ │ │ ├── expected-kubearchiveconfig-konflux.yaml │ │ │ └── labeled-namespace-konflux.yaml │ └── staging │ │ ├── database-secret.yaml │ │ └── kustomization.yaml ├── kyverno │ ├── .gitignore │ ├── OWNERS │ ├── chainsaw │ │ ├── job_resources.yaml │ │ ├── kustomization.yaml │ │ ├── kyverno-helm-generator.yaml │ │ ├── kyverno-helm-values.yaml │ │ └── namespace.yaml │ ├── development │ │ ├── job_resources.yaml │ │ ├── kustomization.yaml │ │ ├── kyverno-helm-generator.yaml │ │ └── kyverno-helm-values.yaml │ ├── production │ │ ├── empty-base │ │ │ ├── kustomization.yaml │ │ │ └── namespace.yaml │ │ ├── kflux-ocp-p01 │ │ │ ├── job_resources.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── kyverno-helm-generator.yaml │ │ │ └── kyverno-helm-values.yaml │ │ ├── kflux-prd-rh02 │ │ │ ├── job_resources.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── kyverno-helm-generator.yaml │ │ │ └── kyverno-helm-values.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── job_resources.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── kyverno-helm-generator.yaml │ │ │ └── kyverno-helm-values.yaml │ │ ├── stone-prd-rh01 │ │ │ ├── job_resources.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── kyverno-helm-generator.yaml │ │ │ └── kyverno-helm-values.yaml │ │ ├── stone-prod-p01 │ │ │ ├── job_resources.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── kyverno-helm-generator.yaml │ │ │ └── kyverno-helm-values.yaml │ │ └── stone-prod-p02 │ │ │ ├── job_resources.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── kyverno-helm-generator.yaml │ │ │ └── kyverno-helm-values.yaml │ └── staging │ │ ├── empty-base │ │ ├── kustomization.yaml │ │ └── namespace.yaml │ │ ├── stone-stage-p01 │ │ ├── job_resources.yaml │ │ ├── kustomization.yaml │ │ ├── kyverno-helm-generator.yaml │ │ └── kyverno-helm-values.yaml │ │ └── stone-stg-rh01 │ │ ├── job_resources.yaml │ │ ├── kustomization.yaml │ │ ├── kyverno-helm-generator.yaml │ │ └── kyverno-helm-values.yaml ├── mintmaker │ ├── OWNERS │ ├── base │ │ ├── cronjobs │ │ │ ├── create-dependency-update-check.yaml │ │ │ ├── delete-dependency-update-checks.yaml │ │ │ └── kustomization.yaml │ │ ├── external-secrets │ │ │ ├── kustomization.yaml │ │ │ ├── pipelines-as-code-secret.yaml │ │ │ ├── registry-redhat-io-pull-secret.yaml │ │ │ └── registry-stage-redhat-io-pull-secret.yaml │ │ ├── kustomization.yaml │ │ ├── rbac │ │ │ ├── kustomization.yaml │ │ │ └── mintmaker-team.yaml │ │ └── redis-cache │ │ │ ├── kustomization.yaml │ │ │ ├── redis-configmap.yaml │ │ │ ├── redis-deployment.yaml │ │ │ ├── redis-networkpolicy.yaml │ │ │ ├── redis-pvc.yaml │ │ │ └── redis-service.yaml │ ├── components │ │ └── rh-certs │ │ │ ├── add-rh-certs-patch.yaml │ │ │ └── kustomization.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── kustomizeconfig.yaml │ │ │ ├── manager_patch.yaml │ │ │ └── pipelines-as-code-secret-patch.yaml │ │ ├── kflux-ocp-p01 │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── kflux-prd-rh02 │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── stone-prod-p01 │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ │ └── stone-prod-p02 │ │ │ ├── kustomization.yaml │ │ │ └── pipelines-as-code-secret-path.yaml │ └── staging │ │ ├── base │ │ ├── kustomization.yaml │ │ ├── kustomizeconfig.yaml │ │ └── manager_patch.yaml │ │ └── stone-stage-p01 │ │ ├── kustomization.yaml │ │ └── pipelines-as-code-secret-path.yaml ├── monitoring │ ├── OWNERS │ ├── README.md │ ├── grafana │ │ ├── README.md │ │ ├── base │ │ │ ├── dashboards │ │ │ │ ├── build-service │ │ │ │ │ ├── OWNERS │ │ │ │ │ ├── dashboard.yaml │ │ │ │ │ └── kustomization.yaml │ │ │ │ ├── cm-dashboard.yaml │ │ │ │ ├── dora-metrics │ │ │ │ │ └── kustomization.yaml │ │ │ │ ├── generic-dashboards │ │ │ │ │ ├── controller-runtime-controllers-detail_rev1.json │ │ │ │ │ ├── dashboard.yaml │ │ │ │ │ ├── example.json │ │ │ │ │ ├── go-processes_rev1.json │ │ │ │ │ └── kustomization.yaml │ │ │ │ ├── has │ │ │ │ │ ├── OWNERS │ │ │ │ │ ├── dashboard.yaml │ │ │ │ │ └── kustomization.yaml │ │ │ │ ├── image-controller │ │ │ │ │ ├── OWNERS │ │ │ │ │ ├── dashboard.yaml │ │ │ │ │ └── kustomization.yaml │ │ │ │ ├── integration │ │ │ │ │ └── kustomization.yaml │ │ │ │ ├── kubesaw │ │ │ │ │ ├── dashboard.yaml │ │ │ │ │ ├── kubesaw-proxy-metrics.json │ │ │ │ │ └── kustomization.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── migration │ │ │ │ │ ├── OWNERS │ │ │ │ │ ├── dashboard.yaml │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ └── migration-team-dashboard.json │ │ │ │ ├── namespace-lister │ │ │ │ │ ├── dashboard.yaml │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ └── namespace-lister-metrics.json │ │ │ │ ├── performance │ │ │ │ │ └── kustomization.yaml │ │ │ │ ├── pipeline-service │ │ │ │ │ ├── grafana-config.yaml │ │ │ │ │ └── kustomization.yaml │ │ │ │ ├── power-monitoring │ │ │ │ │ ├── dashboard.yaml │ │ │ │ │ ├── kepler.json │ │ │ │ │ └── kustomization.yaml │ │ │ │ └── release │ │ │ │ │ ├── OWNERS │ │ │ │ │ └── kustomization.yaml │ │ │ ├── grafana-app.yaml │ │ │ ├── grafana-operator.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rbac │ │ │ │ ├── grafana-maintainers.yaml │ │ │ │ └── kustomization.yaml │ │ ├── development │ │ │ ├── auto-assign-role-patch.yaml │ │ │ └── kustomization.yaml │ │ ├── production │ │ │ └── kustomization.yaml │ │ └── staging │ │ │ └── kustomization.yaml │ ├── logging │ │ ├── base │ │ │ ├── configure-logging │ │ │ │ ├── configure-logforwarder.yaml │ │ │ │ ├── configure-service-account.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── external-secrets │ │ │ │ ├── kustomization.yaml │ │ │ │ └── splunk-log-forwarder-external-secrets.yaml │ │ │ ├── install-logging-operator.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── logging-operator-prerequisite │ │ │ │ ├── kustomization.yaml │ │ │ │ └── operatorgroup.yaml │ │ │ └── rbac │ │ │ │ ├── kustomization.yaml │ │ │ │ └── logging-admin.yaml │ │ ├── development │ │ │ └── kustomization.yaml │ │ ├── production │ │ │ ├── base │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── patches │ │ │ │ │ └── configure-logforwarder-compression-patch.yaml │ │ │ │ └── rbac │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ └── logging-admin.yaml │ │ │ ├── kflux-ocp-p01 │ │ │ │ └── kustomization.yaml │ │ │ ├── kflux-prd-es01 │ │ │ │ └── kustomization.yaml │ │ │ ├── kflux-prd-rh02 │ │ │ │ └── kustomization.yaml │ │ │ ├── kflux-prd-rh03 │ │ │ │ └── kustomization.yaml │ │ │ ├── stone-prod-p01 │ │ │ │ └── kustomization.yaml │ │ │ └── stone-prod-p02 │ │ │ │ └── kustomization.yaml │ │ └── staging │ │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ └── patches │ │ │ │ └── configure-logforwarder-compression-patch.yaml │ │ │ ├── kflux-stg-es01 │ │ │ └── kustomization.yaml │ │ │ └── stone-stage-p01 │ │ │ └── kustomization.yaml │ └── prometheus │ │ ├── README.md │ │ ├── base │ │ ├── external-secrets │ │ │ ├── kustomization.yaml │ │ │ └── rhobs.yaml │ │ ├── monitoringstack │ │ │ ├── kustomization.yaml │ │ │ └── monitoringstack.yaml │ │ ├── observability-operator │ │ │ ├── kustomization.yaml │ │ │ └── observability-operator.yaml │ │ ├── rbac │ │ │ ├── kustomization.yaml │ │ │ └── monitoring-admin.yaml │ │ ├── servicemonitors │ │ │ ├── dora-service.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── pipeline-service.yaml │ │ │ ├── release-service.yaml │ │ │ ├── sandbox-host-operator.yaml │ │ │ └── sandbox-member-operator.yaml │ │ └── uwm-config │ │ │ ├── kustomization.yaml │ │ │ └── uwm-config.yaml │ │ ├── development │ │ ├── cluster-monitoring-config.yaml │ │ ├── dummy-service-namespace.yaml │ │ ├── dummy-service-service-monitor.yaml │ │ ├── dummy-service.yaml │ │ ├── kustomization.yaml │ │ └── monitoringstack │ │ │ ├── cluster-type-patch.yaml │ │ │ ├── kustomization.yaml │ │ │ └── remote-write-env-details.yaml │ │ ├── production │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── monitoringstack │ │ │ │ ├── cluster-type-patch.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ └── remote-write-env-details.yaml │ │ │ └── rhobs-secret-path.yaml │ │ ├── kflux-ocp-p01 │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-es01 │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh02 │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prd-host1 │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prd-m01 │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prd-rh01 │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ ├── stone-prod-p01 │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ └── staging │ │ ├── base │ │ ├── kustomization.yaml │ │ ├── monitoringstack │ │ │ ├── cluster-type-patch.yaml │ │ │ ├── kustomization.yaml │ │ │ └── remote-write-env-details.yaml │ │ └── rhobs-secret-path.yaml │ │ ├── kflux-stg-es01 │ │ ├── cluster-id-label.yaml │ │ └── kustomization.yaml │ │ ├── stone-stage-p01 │ │ ├── cluster-id-label.yaml │ │ └── kustomization.yaml │ │ ├── stone-stg-host │ │ ├── cluster-id-label.yaml │ │ └── kustomization.yaml │ │ └── stone-stg-rh01 │ │ ├── cluster-id-label.yaml │ │ └── kustomization.yaml ├── multi-platform-controller │ ├── OWNERS │ ├── base │ │ ├── common │ │ │ ├── allow-argocd-to-manage.yaml │ │ │ ├── kustomization.yaml │ │ │ └── monitoring.yaml │ │ └── kustomization.yaml │ ├── development │ │ ├── host-config.yaml │ │ ├── kustomization.yaml │ │ └── logs-in-console-format-cmd-arg-patch.yaml │ ├── k-components │ │ └── manager-resources │ │ │ ├── kustomization.yaml │ │ │ └── manager_resources_patch.yaml │ ├── production-downstream │ │ ├── base │ │ │ ├── external-secrets.yaml │ │ │ └── kustomization.yaml │ │ ├── kflux-ocp-p01 │ │ │ ├── aws-account.patch.yaml │ │ │ ├── aws-ssh-key.patch.yaml │ │ │ ├── host-config.yaml │ │ │ ├── ibm-account.patch.yaml │ │ │ ├── ibm-ssh-key.patch.yaml │ │ │ ├── kustomization.yaml │ │ │ └── manager_resources_patch.yaml │ │ ├── stone-prod-p01 │ │ │ ├── host-config.yaml │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ ├── external-secrets.yaml │ │ │ ├── host-config.yaml │ │ │ └── kustomization.yaml │ ├── production │ │ ├── kflux-prd-rh02 │ │ │ ├── external-secrets.yaml │ │ │ ├── host-config.yaml │ │ │ ├── kustomization.yaml │ │ │ └── manager_resources_patch.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── external-secrets.yaml │ │ │ ├── host-config.yaml │ │ │ ├── kustomization.yaml │ │ │ └── manager_resources_patch.yaml │ │ └── stone-prd-rh01 │ │ │ ├── external-secrets.yaml │ │ │ ├── host-config.yaml │ │ │ ├── kustomization.yaml │ │ │ └── manager_resources_patch.yaml │ ├── staging-downstream │ │ ├── external-secrets.yaml │ │ ├── host-config.yaml │ │ └── kustomization.yaml │ └── staging │ │ ├── external-secrets.yaml │ │ ├── host-config.yaml │ │ └── kustomization.yaml ├── namespace-lister │ ├── OWNERS │ ├── base │ │ ├── deployment.yaml │ │ ├── kustomization.yaml │ │ ├── metrics │ │ │ ├── kustomization.yaml │ │ │ ├── monitor.yaml │ │ │ ├── network_policy.yaml │ │ │ ├── rbac.yaml │ │ │ └── service-account.yaml │ │ ├── namespace.yaml │ │ ├── network_policy_allow_from_konfluxui.yaml │ │ ├── network_policy_allow_to_apiserver.yaml │ │ ├── patches │ │ │ ├── with_cachenamespacelabelselector.yaml │ │ │ ├── with_header_auth_groups.yaml │ │ │ └── with_header_auth_user.yaml │ │ ├── rbac.yaml │ │ └── service.yaml │ ├── empty-base │ │ └── kustomization.yaml │ ├── policies │ │ └── ns-label │ │ │ ├── .chainsaw-test │ │ │ ├── chainsaw-assert-clusterpolicy.yaml │ │ │ ├── chainsaw-test.yaml │ │ │ └── resources │ │ │ │ ├── actual-namespace-konflux-toolchain.yaml │ │ │ │ ├── actual-namespace-konflux.yaml │ │ │ │ ├── actual-namespace-toolchain.yaml │ │ │ │ ├── actual-namespace-unlabeled.yaml │ │ │ │ ├── expected-namespace-konflux-toolchain.yaml │ │ │ │ ├── expected-namespace-konflux.yaml │ │ │ │ ├── expected-namespace-toolchain.yaml │ │ │ │ └── expected-namespace-unlabeled.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── kyverno-background-konflux-ns-label-clusterrole.yaml │ │ │ └── namespace-enforce-label-clusterpolicy.yaml │ ├── production │ │ ├── base │ │ │ ├── deployment.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── metrics │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── monitor.yaml │ │ │ │ ├── network_policy.yaml │ │ │ │ ├── rbac.yaml │ │ │ │ └── service-account.yaml │ │ │ ├── namespace.yaml │ │ │ ├── network_policy_allow_from_konfluxui.yaml │ │ │ ├── network_policy_allow_to_apiserver.yaml │ │ │ ├── patches │ │ │ │ ├── with_cachenamespacelabelselector.yaml │ │ │ │ ├── with_header_auth_groups.yaml │ │ │ │ └── with_header_auth_user.yaml │ │ │ ├── rbac.yaml │ │ │ └── service.yaml │ │ ├── kflux-ocp-p01 │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh02 │ │ │ └── kustomization.yaml │ │ ├── kflux-prd-rh03 │ │ │ └── kustomization.yaml │ │ ├── stone-prd-rh01 │ │ │ └── kustomization.yaml │ │ ├── stone-prod-p01 │ │ │ └── kustomization.yaml │ │ └── stone-prod-p02 │ │ │ └── kustomization.yaml │ └── staging │ │ ├── stone-stage-p01 │ │ └── kustomization.yaml │ │ └── stone-stg-rh01 │ │ └── kustomization.yaml ├── notification-controller │ ├── OWNERS │ ├── README.md │ ├── base │ │ └── external-secrets │ │ │ ├── aws-sns-secret.yaml │ │ │ └── kustomization.yaml │ ├── development │ │ ├── kustomization.yaml │ │ └── topic_region_add.yaml │ ├── production │ │ ├── external-secret-path.yaml │ │ ├── kustomization.yaml │ │ └── topic_region_add.yaml │ └── staging │ │ ├── external-secret-path.yaml │ │ ├── kustomization.yaml │ │ └── topic_region_add.yaml ├── openshift-gitops │ ├── cluster-rbac │ │ ├── argocd-application-controller-clusterrole.yaml │ │ ├── argocd-application-controller-clusterrolebinding.yaml │ │ ├── argocd-server-clusterrole.yaml │ │ ├── argocd-server-clusterrolebinding.yaml │ │ └── kustomization.yaml │ ├── kustomization.yaml │ └── subscription.yaml ├── perf-team-prometheus-reader │ ├── OWNERS │ ├── README.md │ ├── base │ │ ├── kustomization.yaml │ │ ├── perf-team.yaml │ │ └── serviceaccount.yaml │ ├── development │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml ├── pipeline-service │ ├── OWNERS │ ├── README.md │ ├── base │ │ ├── certificates │ │ │ ├── kustomization.yaml │ │ │ └── tekton-results │ │ │ │ ├── kustomization.yaml │ │ │ │ └── tekton-results-db-ssl.yaml │ │ ├── external-secrets │ │ │ ├── kustomization.yaml │ │ │ ├── openshift-pipelines │ │ │ │ ├── chains-public-key.yaml │ │ │ │ ├── chains-signing-secrets.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── tekton-logging │ │ │ │ ├── kustomization.yaml │ │ │ │ └── tekton-results-s3.yaml │ │ │ └── tekton-results │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── tekton-results-database.yaml │ │ │ │ └── tekton-results-s3.yaml │ │ ├── rbac │ │ │ ├── cluster-role │ │ │ │ ├── kustomization.yaml │ │ │ │ └── pipeline-service-sre.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── openshift-pipelines │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── pipeline-service-sre.yaml │ │ │ │ └── resolution-req-perms-exporter.yaml │ │ │ ├── tekton-logging │ │ │ │ ├── kustomization.yaml │ │ │ │ └── pipeline-service-sre.yaml │ │ │ └── tekton-results │ │ │ │ ├── kustomization.yaml │ │ │ │ └── pipeline-service-sre.yaml │ │ └── testing │ │ │ ├── kustomization.yaml │ │ │ ├── ns.yaml │ │ │ └── rbac.yaml │ ├── development │ │ ├── dev-only-pipeline-service-storage-configuration.yaml │ │ ├── kustomization.yaml │ │ └── main-pipeline-service-configuration.yaml │ ├── production │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── main-pipeline-service-configuration.yaml │ │ │ ├── pipelines-as-code-secret.yaml │ │ │ └── update-tekton-config-pac.yaml │ │ ├── kflux-ocp-p01 │ │ │ ├── deploy.yaml │ │ │ ├── kustomization.yaml │ │ │ └── resources │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ │ ├── tekton-chains-public-key-path.yaml │ │ │ │ ├── tekton-chains-signing-secret-path.yaml │ │ │ │ ├── tekton-results-database-secret-path.yaml │ │ │ │ ├── tekton-results-s3-secret-path.yaml │ │ │ │ └── update-tekton-config-pac.yaml │ │ ├── kflux-prd-rh02 │ │ │ ├── deploy.yaml │ │ │ ├── kustomization.yaml │ │ │ └── resources │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ │ ├── scc-rbac.yaml │ │ │ │ ├── tekton-chains-public-key-path.yaml │ │ │ │ ├── tekton-chains-signing-secret-path.yaml │ │ │ │ ├── tekton-results-database-secret-path.yaml │ │ │ │ ├── tekton-results-s3-secret-path.yaml │ │ │ │ └── update-tekton-config-pac.yaml │ │ ├── kflux-prd-rh03 │ │ │ ├── deploy.yaml │ │ │ ├── kustomization.yaml │ │ │ └── resources │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ │ ├── scc-rbac.yaml │ │ │ │ ├── tekton-chains-public-key-path.yaml │ │ │ │ ├── tekton-chains-signing-secret-path.yaml │ │ │ │ ├── tekton-results-database-secret-path.yaml │ │ │ │ ├── tekton-results-s3-secret-path.yaml │ │ │ │ └── update-tekton-config-pac.yaml │ │ ├── stone-prd-m01 │ │ │ ├── deploy.yaml │ │ │ ├── kustomization.yaml │ │ │ └── resources │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── tekton-chains-public-key-path.yaml │ │ │ │ ├── tekton-chains-signing-secret-path.yaml │ │ │ │ ├── tekton-results-database-secret-path.yaml │ │ │ │ └── tekton-results-s3-secret-path.yaml │ │ ├── stone-prd-rh01 │ │ │ ├── deploy.yaml │ │ │ ├── kustomization.yaml │ │ │ └── resources │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── tekton-chains-public-key-path.yaml │ │ │ │ ├── tekton-chains-signing-secret-path.yaml │ │ │ │ ├── tekton-results-database-secret-path.yaml │ │ │ │ └── tekton-results-s3-secret-path.yaml │ │ ├── stone-prod-p01 │ │ │ ├── deploy.yaml │ │ │ ├── kustomization.yaml │ │ │ └── resources │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ │ ├── tekton-chains-public-key-path.yaml │ │ │ │ ├── tekton-chains-signing-secret-path.yaml │ │ │ │ ├── tekton-results-database-secret-path.yaml │ │ │ │ ├── tekton-results-s3-secret-path.yaml │ │ │ │ └── update-tekton-config-pac.yaml │ │ └── stone-prod-p02 │ │ │ ├── deploy.yaml │ │ │ ├── kustomization.yaml │ │ │ └── resources │ │ │ ├── kustomization.yaml │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ ├── tekton-chains-public-key-path.yaml │ │ │ ├── tekton-chains-signing-secret-path.yaml │ │ │ ├── tekton-results-database-secret-path.yaml │ │ │ ├── tekton-results-s3-secret-path.yaml │ │ │ └── update-tekton-config-pac.yaml │ └── staging │ │ ├── base │ │ ├── kustomization.yaml │ │ ├── main-pipeline-service-configuration.yaml │ │ └── pipelines-as-code-secret.yaml │ │ ├── stone-stage-p01 │ │ ├── deploy.yaml │ │ ├── kustomization.yaml │ │ └── resources │ │ │ ├── kustomization.yaml │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ ├── tekton-chains-public-key-path.yaml │ │ │ ├── tekton-chains-signing-secret-path.yaml │ │ │ ├── tekton-results-database-secret-path.yaml │ │ │ ├── tekton-results-s3-secret-path.yaml │ │ │ └── update-tekton-config-pac.yaml │ │ └── stone-stg-rh01 │ │ ├── deploy.yaml │ │ ├── kustomization.yaml │ │ └── resources │ │ ├── kustomization.yaml │ │ ├── tekton-chains-public-key-path.yaml │ │ ├── tekton-chains-signing-secret-path.yaml │ │ ├── tekton-results-database-secret-path.yaml │ │ ├── tekton-results-s3-secret-path.yaml │ │ └── update-tekton-controller-resources.yaml ├── power-monitoring │ ├── OWNERS │ ├── kepler.yaml │ ├── kustomization.yaml │ └── power-monitoring-operator.yaml ├── project-controller │ ├── OWNERS │ ├── README.md │ ├── base │ │ ├── allow-argocd-to-manage.yaml │ │ ├── argocd-permissions.yaml │ │ ├── kustomization.yaml │ │ └── project-controller.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml ├── pulp-access-controller │ ├── OWNERS │ ├── README.md │ ├── base │ │ └── kustomization.yaml │ ├── development │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml ├── quality-dashboard │ ├── OWNERS │ ├── base │ │ ├── backend │ │ │ └── kustomization.yaml │ │ ├── dex │ │ │ └── kustomization.yaml │ │ ├── frontend │ │ │ └── kustomization.yaml │ │ ├── kustomization.yaml │ │ └── rbac │ │ │ ├── kustomization.yaml │ │ │ └── quality-dashboard.yaml │ ├── development │ │ └── kustomization.yaml │ └── staging │ │ ├── external-secrets │ │ ├── kustomization.yaml │ │ └── quality-dashboard-secrets.yaml │ │ └── kustomization.yaml ├── release │ ├── OWNERS │ ├── base │ │ ├── allow-argocd-to-manage.yaml │ │ ├── argocd-permissions.yaml │ │ ├── cronjobs │ │ │ ├── kustomization.yaml │ │ │ ├── remove-expired-releases.yaml │ │ │ └── remove-internal-requests.yaml │ │ ├── kustomization.yaml │ │ ├── monitor-pipeline-role.yaml │ │ ├── monitor │ │ │ ├── development │ │ │ │ ├── configmap.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── production │ │ │ │ ├── configmap.yaml │ │ │ │ └── kustomization.yaml │ │ │ └── staging │ │ │ │ ├── configmap.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ └── patches │ │ │ │ └── env-secrets-patch.yaml │ │ ├── release-pipeline-resources-clusterrole.yaml │ │ ├── release-service-config-rbac.yaml │ │ ├── release-service-configurator-role.yaml │ │ └── release-team.yaml │ ├── development │ │ ├── kustomization.yaml │ │ ├── release_service_config.yaml │ │ └── sealights-token-patch.yaml │ ├── k-components │ │ └── manager-resources-patch │ │ │ ├── kustomization.yaml │ │ │ └── manager_resources_patch.yaml │ ├── production │ │ ├── kustomization.yaml │ │ └── release_service_config.yaml │ └── staging │ │ ├── external-secrets │ │ └── release-monitor-secret.yaml │ │ ├── kubearchive-config-patch.yaml │ │ ├── kustomization.yaml │ │ └── release_service_config.yaml ├── repository-validator │ ├── development │ │ ├── config.json │ │ └── kustomization.yaml │ ├── production │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml ├── sandbox │ ├── OWNERS │ ├── common │ │ ├── kustomization.yaml │ │ ├── olm-restart │ │ │ ├── cronjob.yaml │ │ │ ├── kustomization.yaml │ │ │ └── sandbox-sre-olm-restart.yaml │ │ └── rbac │ │ │ ├── kustomization.yaml │ │ │ └── sandbox-sre-admins.yaml │ ├── tiers │ │ ├── README.adoc │ │ ├── production │ │ │ ├── appstudio-env │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── nstemplatetier-appstudio-env.yaml │ │ │ │ ├── tiertemplate-appstudio-env-admin-37575401-37575401.yaml │ │ │ │ ├── tiertemplate-appstudio-env-clusterresources-1854252301-1854252301.yaml │ │ │ │ ├── tiertemplate-appstudio-env-clusterresources-266544570-266544570.yaml │ │ │ │ ├── tiertemplate-appstudio-env-contributor-37575401-37575401.yaml │ │ │ │ ├── tiertemplate-appstudio-env-env-1082365650-1082365650.yaml │ │ │ │ ├── tiertemplate-appstudio-env-maintainer-37575401-37575401.yaml │ │ │ │ └── tiertemplate-appstudio-env-viewer-37575401-37575401.yaml │ │ │ ├── appstudio │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── nstemplatetier-appstudio.yaml │ │ │ │ ├── tiertemplate-appstudio-admin-1611646139-1611646139.yaml │ │ │ │ ├── tiertemplate-appstudio-admin-1621311634-1621311634.yaml │ │ │ │ ├── tiertemplate-appstudio-admin-1876853981-1876853981.yaml │ │ │ │ ├── tiertemplate-appstudio-admin-2267910203-2267910203.yaml │ │ │ │ ├── tiertemplate-appstudio-admin-2415879015-2415879015.yaml │ │ │ │ ├── tiertemplate-appstudio-admin-849337768-849337768.yaml │ │ │ │ ├── tiertemplate-appstudio-clusterresources-2781377949-2781377949.yaml │ │ │ │ ├── tiertemplate-appstudio-clusterresources-3180033938-3180033938.yaml │ │ │ │ ├── tiertemplate-appstudio-clusterresources-593233715-593233715.yaml │ │ │ │ ├── tiertemplate-appstudio-clusterresources-809836689-809836689.yaml │ │ │ │ ├── tiertemplate-appstudio-contributor-1817914940-1817914940.yaml │ │ │ │ ├── tiertemplate-appstudio-contributor-2153673317-2153673317.yaml │ │ │ │ ├── tiertemplate-appstudio-contributor-3265408548-3265408548.yaml │ │ │ │ ├── tiertemplate-appstudio-contributor-829105171-829105171.yaml │ │ │ │ ├── tiertemplate-appstudio-contributor-923669109-923669109.yaml │ │ │ │ ├── tiertemplate-appstudio-maintainer-1446367252-1446367252.yaml │ │ │ │ ├── tiertemplate-appstudio-maintainer-1881194462-1881194462.yaml │ │ │ │ ├── tiertemplate-appstudio-maintainer-1904354742-1904354742.yaml │ │ │ │ ├── tiertemplate-appstudio-maintainer-293087644-293087644.yaml │ │ │ │ ├── tiertemplate-appstudio-maintainer-341231795-341231795.yaml │ │ │ │ ├── tiertemplate-appstudio-maintainer-474752551-474752551.yaml │ │ │ │ ├── tiertemplate-appstudio-maintainer-664949573-664949573.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-1361763024-1361763024.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-199961605-199961605.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-2246724155-2246724155.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-2313893948-2313893948.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-234313038-234313038.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-2654763221-2654763221.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-3035149355-3035149355.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-3054647054-3054647054.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-3815075241-3815075241.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-4121561789-4121561789.yaml │ │ │ │ ├── tiertemplate-appstudio-tenant-649666048-649666048.yaml │ │ │ │ ├── tiertemplate-appstudio-viewer-3768244154-3768244154.yaml │ │ │ │ ├── tiertemplate-appstudio-viewer-4059797645-4059797645.yaml │ │ │ │ └── tiertemplate-appstudio-viewer-4256863455-4256863455.yaml │ │ │ ├── appstudiolarge │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── nstemplatetier-appstudiolarge.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-130270397-849337768.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-1884308846-1876853981.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-1884308846-2415879015.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-1893065526-849337768.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-1929014883-1876853981.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-1929014883-849337768.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-2084392855-1611646139.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-2084392855-849337768.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-2128555184-1611646139.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-2128555184-2267910203.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-336420259-1621311634.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-3738936794-849337768.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-3971529334-849337768.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-3994678728-849337768.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-admin-607699003-1621311634.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-130270397-593233715.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-1884308846-809836689.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-1893065526-593233715.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-1929014883-3180033938.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-2084392855-593233715.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-2128555184-593233715.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-336420259-2781377949.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-3738936794-593233715.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-3971529334-593233715.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-3994678728-3180033938.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-607699003-2781377949.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-130270397-829105171.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-1884308846-1817914940.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-1893065526-829105171.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-1929014883-1817914940.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-1929014883-829105171.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-2084392855-3265408548.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-2084392855-829105171.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-2128555184-2153673317.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-2128555184-3265408548.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-336420259-923669109.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-3738936794-829105171.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-3971529334-829105171.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-3994678728-829105171.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-contributor-607699003-923669109.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-130270397-474752551.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1884308846-293087644.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1893065526-341231795.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1893065526-474752551.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1929014883-1904354742.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1929014883-293087644.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-2084392855-1881194462.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-2084392855-341231795.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-2128555184-1446367252.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-2128555184-1881194462.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-336420259-664949573.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-3738936794-341231795.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-3971529334-474752551.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-3994678728-1904354742.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-3994678728-474752551.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-maintainer-607699003-664949573.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-130270397-2246724155.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-1884308846-199961605.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-1884308846-2313893948.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-1893065526-1361763024.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-1929014883-3815075241.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-1929014883-649666048.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-2084392855-3054647054.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-2128555184-3035149355.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-336420259-3035149355.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-3738936794-234313038.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-3971529334-4121561789.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-3994678728-4121561789.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-3994678728-649666048.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-tenant-607699003-2654763221.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-130270397-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-1884308846-4059797645.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-1893065526-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-1929014883-4059797645.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-1929014883-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-2084392855-3768244154.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-2084392855-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-2128555184-3768244154.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-336420259-3768244154.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-3738936794-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-3971529334-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudiolarge-viewer-3994678728-4256863455.yaml │ │ │ │ └── tiertemplate-appstudiolarge-viewer-607699003-3768244154.yaml │ │ │ ├── appstudioxlarge │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── nstemplatetier-appstudioxlarge.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-1081386182-1621311634.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-1579464439-849337768.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-1655178728-849337768.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-2011494876-849337768.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-2094191734-1611646139.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-2094191734-2267910203.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-3195294905-1611646139.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-3195294905-849337768.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-380792096-849337768.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-409719430-849337768.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-451426537-1621311634.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-884010306-849337768.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-admin-97963453-849337768.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-1081386182-2781377949.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-1579464439-593233715.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-1655178728-593233715.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-2011494876-593233715.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-2094191734-593233715.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-3195294905-593233715.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-380792096-593233715.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-409719430-593233715.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-451426537-2781377949.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-884010306-3180033938.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-97963453-593233715.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-1081386182-923669109.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-1579464439-829105171.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-1655178728-829105171.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-2011494876-829105171.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-2094191734-2153673317.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-2094191734-3265408548.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-3195294905-3265408548.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-3195294905-829105171.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-380792096-829105171.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-409719430-829105171.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-451426537-923669109.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-884010306-829105171.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-contributor-97963453-829105171.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-1081386182-664949573.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-1579464439-474752551.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-1655178728-474752551.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-2011494876-341231795.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-2011494876-474752551.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-2094191734-1446367252.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-2094191734-1881194462.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-3195294905-1881194462.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-3195294905-341231795.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-380792096-341231795.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-409719430-474752551.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-451426537-664949573.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-884010306-1904354742.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-884010306-474752551.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-97963453-341231795.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-1081386182-2654763221.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-1579464439-2246724155.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-1655178728-4121561789.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-2011494876-1361763024.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-2094191734-3035149355.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-3195294905-3054647054.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-380792096-234313038.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-409719430-4121561789.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-451426537-3035149355.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-884010306-4121561789.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-884010306-649666048.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-tenant-97963453-234313038.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-1081386182-3768244154.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-1579464439-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-1655178728-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-2011494876-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-2094191734-3768244154.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-3195294905-3768244154.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-3195294905-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-380792096-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-409719430-4256863455.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-451426537-3768244154.yaml │ │ │ │ ├── tiertemplate-appstudioxlarge-viewer-884010306-4256863455.yaml │ │ │ │ └── tiertemplate-appstudioxlarge-viewer-97963453-4256863455.yaml │ │ │ ├── konflux-eaas │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── nstemplatetier-konflux-eaas.yaml │ │ │ │ ├── tiertemplate-konflux-eaas-admin-37575401-37575401.yaml │ │ │ │ ├── tiertemplate-konflux-eaas-clusterresources-885501723-885501723.yaml │ │ │ │ ├── tiertemplate-konflux-eaas-contributor-37575401-37575401.yaml │ │ │ │ ├── tiertemplate-konflux-eaas-eaas-3975606140-3975606140.yaml │ │ │ │ ├── tiertemplate-konflux-eaas-maintainer-37575401-37575401.yaml │ │ │ │ └── tiertemplate-konflux-eaas-viewer-37575401-37575401.yaml │ │ │ └── kustomization.yaml │ │ ├── src │ │ │ ├── appstudio-env │ │ │ │ ├── cluster.yaml │ │ │ │ ├── ns_env.yaml │ │ │ │ ├── spacerole_admin.yaml │ │ │ │ ├── spacerole_contributor.yaml │ │ │ │ ├── spacerole_maintainer.yaml │ │ │ │ ├── spacerole_viewer.yaml │ │ │ │ └── tier.yaml │ │ │ ├── appstudio │ │ │ │ ├── cluster.yaml │ │ │ │ ├── ns_tenant.yaml │ │ │ │ ├── spacerole_admin.yaml │ │ │ │ ├── spacerole_contributor.yaml │ │ │ │ ├── spacerole_maintainer.yaml │ │ │ │ ├── spacerole_viewer.yaml │ │ │ │ └── tier.yaml │ │ │ ├── appstudiolarge │ │ │ │ └── based_on_tier.yaml │ │ │ ├── appstudioxlarge │ │ │ │ └── based_on_tier.yaml │ │ │ └── konflux-eaas │ │ │ │ ├── cluster.yaml │ │ │ │ ├── ns_eaas.yaml │ │ │ │ ├── spacerole_admin.yaml │ │ │ │ ├── spacerole_contributor.yaml │ │ │ │ ├── spacerole_maintainer.yaml │ │ │ │ ├── spacerole_viewer.yaml │ │ │ │ └── tier.yaml │ │ └── staging │ │ │ ├── appstudio-env │ │ │ ├── kustomization.yaml │ │ │ ├── nstemplatetier-appstudio-env.yaml │ │ │ ├── tiertemplate-appstudio-env-admin-37575401-37575401.yaml │ │ │ ├── tiertemplate-appstudio-env-clusterresources-1854252301-1854252301.yaml │ │ │ ├── tiertemplate-appstudio-env-clusterresources-266544570-266544570.yaml │ │ │ ├── tiertemplate-appstudio-env-contributor-37575401-37575401.yaml │ │ │ ├── tiertemplate-appstudio-env-env-1082365650-1082365650.yaml │ │ │ ├── tiertemplate-appstudio-env-maintainer-37575401-37575401.yaml │ │ │ └── tiertemplate-appstudio-env-viewer-37575401-37575401.yaml │ │ │ ├── appstudio │ │ │ ├── kustomization.yaml │ │ │ ├── nstemplatetier-appstudio.yaml │ │ │ ├── tiertemplate-appstudio-admin-1611646139-1611646139.yaml │ │ │ ├── tiertemplate-appstudio-admin-1621311634-1621311634.yaml │ │ │ ├── tiertemplate-appstudio-admin-1876853981-1876853981.yaml │ │ │ ├── tiertemplate-appstudio-admin-2267910203-2267910203.yaml │ │ │ ├── tiertemplate-appstudio-admin-2415879015-2415879015.yaml │ │ │ ├── tiertemplate-appstudio-admin-849337768-849337768.yaml │ │ │ ├── tiertemplate-appstudio-clusterresources-2781377949-2781377949.yaml │ │ │ ├── tiertemplate-appstudio-clusterresources-3180033938-3180033938.yaml │ │ │ ├── tiertemplate-appstudio-clusterresources-593233715-593233715.yaml │ │ │ ├── tiertemplate-appstudio-clusterresources-809836689-809836689.yaml │ │ │ ├── tiertemplate-appstudio-contributor-1817914940-1817914940.yaml │ │ │ ├── tiertemplate-appstudio-contributor-2153673317-2153673317.yaml │ │ │ ├── tiertemplate-appstudio-contributor-3265408548-3265408548.yaml │ │ │ ├── tiertemplate-appstudio-contributor-829105171-829105171.yaml │ │ │ ├── tiertemplate-appstudio-contributor-923669109-923669109.yaml │ │ │ ├── tiertemplate-appstudio-maintainer-1446367252-1446367252.yaml │ │ │ ├── tiertemplate-appstudio-maintainer-1881194462-1881194462.yaml │ │ │ ├── tiertemplate-appstudio-maintainer-1904354742-1904354742.yaml │ │ │ ├── tiertemplate-appstudio-maintainer-293087644-293087644.yaml │ │ │ ├── tiertemplate-appstudio-maintainer-341231795-341231795.yaml │ │ │ ├── tiertemplate-appstudio-maintainer-474752551-474752551.yaml │ │ │ ├── tiertemplate-appstudio-maintainer-664949573-664949573.yaml │ │ │ ├── tiertemplate-appstudio-tenant-1361763024-1361763024.yaml │ │ │ ├── tiertemplate-appstudio-tenant-199961605-199961605.yaml │ │ │ ├── tiertemplate-appstudio-tenant-2246724155-2246724155.yaml │ │ │ ├── tiertemplate-appstudio-tenant-2313893948-2313893948.yaml │ │ │ ├── tiertemplate-appstudio-tenant-234313038-234313038.yaml │ │ │ ├── tiertemplate-appstudio-tenant-2654763221-2654763221.yaml │ │ │ ├── tiertemplate-appstudio-tenant-3035149355-3035149355.yaml │ │ │ ├── tiertemplate-appstudio-tenant-3054647054-3054647054.yaml │ │ │ ├── tiertemplate-appstudio-tenant-3815075241-3815075241.yaml │ │ │ ├── tiertemplate-appstudio-tenant-4121561789-4121561789.yaml │ │ │ ├── tiertemplate-appstudio-tenant-649666048-649666048.yaml │ │ │ ├── tiertemplate-appstudio-viewer-3768244154-3768244154.yaml │ │ │ ├── tiertemplate-appstudio-viewer-4059797645-4059797645.yaml │ │ │ └── tiertemplate-appstudio-viewer-4256863455-4256863455.yaml │ │ │ ├── appstudiolarge │ │ │ ├── kustomization.yaml │ │ │ ├── nstemplatetier-appstudiolarge.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-130270397-849337768.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-1884308846-1876853981.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-1884308846-2415879015.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-1893065526-849337768.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-1929014883-1876853981.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-1929014883-849337768.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-2084392855-1611646139.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-2084392855-849337768.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-2128555184-1611646139.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-2128555184-2267910203.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-336420259-1621311634.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-3738936794-849337768.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-3971529334-849337768.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-3994678728-849337768.yaml │ │ │ ├── tiertemplate-appstudiolarge-admin-607699003-1621311634.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-130270397-593233715.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-1884308846-809836689.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-1893065526-593233715.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-1929014883-3180033938.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-2084392855-593233715.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-2128555184-593233715.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-336420259-2781377949.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-3738936794-593233715.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-3971529334-593233715.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-3994678728-3180033938.yaml │ │ │ ├── tiertemplate-appstudiolarge-clusterresources-607699003-2781377949.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-130270397-829105171.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-1884308846-1817914940.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-1893065526-829105171.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-1929014883-1817914940.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-1929014883-829105171.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-2084392855-3265408548.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-2084392855-829105171.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-2128555184-2153673317.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-2128555184-3265408548.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-336420259-923669109.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-3738936794-829105171.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-3971529334-829105171.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-3994678728-829105171.yaml │ │ │ ├── tiertemplate-appstudiolarge-contributor-607699003-923669109.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-130270397-474752551.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1884308846-293087644.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1893065526-341231795.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1893065526-474752551.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1929014883-1904354742.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-1929014883-293087644.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-2084392855-1881194462.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-2084392855-341231795.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-2128555184-1446367252.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-2128555184-1881194462.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-336420259-664949573.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-3738936794-341231795.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-3971529334-474752551.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-3994678728-1904354742.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-3994678728-474752551.yaml │ │ │ ├── tiertemplate-appstudiolarge-maintainer-607699003-664949573.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-130270397-2246724155.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-1884308846-199961605.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-1884308846-2313893948.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-1893065526-1361763024.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-1929014883-2313893948.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-1929014883-3815075241.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-1929014883-649666048.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-2084392855-3054647054.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-2128555184-3035149355.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-336420259-3035149355.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-3738936794-234313038.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-3971529334-4121561789.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-3994678728-4121561789.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-3994678728-649666048.yaml │ │ │ ├── tiertemplate-appstudiolarge-tenant-607699003-2654763221.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-130270397-4256863455.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-1884308846-4059797645.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-1893065526-4256863455.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-1929014883-4059797645.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-1929014883-4256863455.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-2084392855-3768244154.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-2084392855-4256863455.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-2128555184-3768244154.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-336420259-3768244154.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-3738936794-4256863455.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-3971529334-4256863455.yaml │ │ │ ├── tiertemplate-appstudiolarge-viewer-3994678728-4256863455.yaml │ │ │ └── tiertemplate-appstudiolarge-viewer-607699003-3768244154.yaml │ │ │ ├── appstudioxlarge │ │ │ ├── kustomization.yaml │ │ │ ├── nstemplatetier-appstudioxlarge.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-1081386182-1621311634.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-1579464439-849337768.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-1655178728-849337768.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-2011494876-849337768.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-2094191734-1611646139.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-2094191734-2267910203.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-3195294905-1611646139.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-3195294905-849337768.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-380792096-849337768.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-409719430-849337768.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-451426537-1621311634.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-884010306-849337768.yaml │ │ │ ├── tiertemplate-appstudioxlarge-admin-97963453-849337768.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-1081386182-2781377949.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-1579464439-593233715.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-1655178728-593233715.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-2011494876-593233715.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-2094191734-593233715.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-3195294905-593233715.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-380792096-593233715.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-409719430-593233715.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-451426537-2781377949.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-884010306-3180033938.yaml │ │ │ ├── tiertemplate-appstudioxlarge-clusterresources-97963453-593233715.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-1081386182-923669109.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-1579464439-829105171.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-1655178728-829105171.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-2011494876-829105171.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-2094191734-2153673317.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-2094191734-3265408548.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-3195294905-3265408548.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-3195294905-829105171.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-380792096-829105171.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-409719430-829105171.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-451426537-923669109.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-884010306-829105171.yaml │ │ │ ├── tiertemplate-appstudioxlarge-contributor-97963453-829105171.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-1081386182-664949573.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-1579464439-474752551.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-1655178728-474752551.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-2011494876-341231795.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-2011494876-474752551.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-2094191734-1446367252.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-2094191734-1881194462.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-3195294905-1881194462.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-3195294905-341231795.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-380792096-341231795.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-409719430-474752551.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-451426537-664949573.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-884010306-1904354742.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-884010306-474752551.yaml │ │ │ ├── tiertemplate-appstudioxlarge-maintainer-97963453-341231795.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-1081386182-2654763221.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-1579464439-2246724155.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-1655178728-4121561789.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-2011494876-1361763024.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-2094191734-3035149355.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-3195294905-3054647054.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-380792096-234313038.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-409719430-4121561789.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-451426537-3035149355.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-884010306-4121561789.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-884010306-649666048.yaml │ │ │ ├── tiertemplate-appstudioxlarge-tenant-97963453-234313038.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-1081386182-3768244154.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-1579464439-4256863455.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-1655178728-4256863455.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-2011494876-4256863455.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-2094191734-3768244154.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-3195294905-3768244154.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-3195294905-4256863455.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-380792096-4256863455.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-409719430-4256863455.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-451426537-3768244154.yaml │ │ │ ├── tiertemplate-appstudioxlarge-viewer-884010306-4256863455.yaml │ │ │ └── tiertemplate-appstudioxlarge-viewer-97963453-4256863455.yaml │ │ │ ├── konflux-eaas │ │ │ ├── kustomization.yaml │ │ │ ├── nstemplatetier-konflux-eaas.yaml │ │ │ ├── tiertemplate-konflux-eaas-admin-37575401-37575401.yaml │ │ │ ├── tiertemplate-konflux-eaas-clusterresources-885501723-885501723.yaml │ │ │ ├── tiertemplate-konflux-eaas-contributor-37575401-37575401.yaml │ │ │ ├── tiertemplate-konflux-eaas-eaas-3975606140-3975606140.yaml │ │ │ ├── tiertemplate-konflux-eaas-maintainer-37575401-37575401.yaml │ │ │ └── tiertemplate-konflux-eaas-viewer-37575401-37575401.yaml │ │ │ └── kustomization.yaml │ ├── toolchain-host-operator │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── monitoring │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── monitor.yaml │ │ │ │ ├── prometheus-network-policy.yaml │ │ │ │ ├── rbac.yaml │ │ │ │ ├── sandbox-registration-service-proxy.yaml │ │ │ │ └── serviceaccount.yaml │ │ │ ├── ns.yaml │ │ │ ├── olm │ │ │ │ ├── kustomization.yaml │ │ │ │ └── toolchain-host-operator.yaml │ │ │ ├── proxy │ │ │ │ ├── kustomization.yaml │ │ │ │ └── proxyplugin.yaml │ │ │ └── rbac │ │ │ │ ├── kustomization.yaml │ │ │ │ └── sandbox-sre-admins.yaml │ │ ├── production │ │ │ ├── kflux-ocp-p01 │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── network-policy.yaml │ │ │ │ ├── patch_resources.yaml │ │ │ │ ├── space-provisioner-configs.yaml │ │ │ │ └── toolchainconfig.yaml │ │ │ ├── stone-prd-host1 │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── patch_resources.yaml │ │ │ │ ├── sandbox-sre-host.yaml │ │ │ │ ├── space-provisioner-configs.yaml │ │ │ │ └── toolchainconfig.yaml │ │ │ ├── stone-prod-p01 │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── patch_resources.yaml │ │ │ │ ├── space-provisioner-configs.yaml │ │ │ │ └── toolchainconfig.yaml │ │ │ └── stone-prod-p02 │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── network-policy.yaml │ │ │ │ ├── patch_resources.yaml │ │ │ │ ├── space-provisioner-configs.yaml │ │ │ │ └── toolchainconfig.yaml │ │ └── staging │ │ │ ├── stone-stage-p01 │ │ │ ├── kustomization.yaml │ │ │ ├── network-policy.yaml │ │ │ ├── patch_resources.yaml │ │ │ ├── space-provisioner-configs.yaml │ │ │ └── toolchainconfig.yaml │ │ │ └── stone-stg-host │ │ │ ├── kustomization.yaml │ │ │ ├── patch_resources.yaml │ │ │ ├── sandbox-sre-host.yaml │ │ │ ├── space-provisioner-configs.yaml │ │ │ └── toolchainconfig.yaml │ ├── toolchain-member-operator │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── monitoring │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── monitor.yaml │ │ │ │ ├── rbac.yaml │ │ │ │ └── serviceaccount.yaml │ │ │ ├── ns.yaml │ │ │ ├── olm │ │ │ │ ├── kustomization.yaml │ │ │ │ └── toolchain-member-operator.yaml │ │ │ └── rbac │ │ │ │ ├── appstudio-pipelines-runner.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── register-cluster-extra-member-permissions.yaml │ │ │ │ └── sandbox-sre-admins.yaml │ │ ├── production │ │ │ ├── kustomization.yaml │ │ │ ├── patch_resources.yaml │ │ │ └── sandbox-sre-member.yaml │ │ └── staging │ │ │ ├── kustomization.yaml │ │ │ ├── patch-appstudio-pipelines-runner.yaml │ │ │ ├── patch_resources.yaml │ │ │ └── sandbox-sre-member.yaml │ └── user-management │ │ ├── production │ │ ├── README.adoc │ │ ├── generated-manifests │ │ │ ├── host │ │ │ │ ├── kustomization.yaml │ │ │ │ └── namespace-scoped │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── sandbox-sre-host │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ └── serviceaccounts │ │ │ │ │ │ ├── alkazako.yaml │ │ │ │ │ │ ├── bcook.yaml │ │ │ │ │ │ ├── bkundu.yaml │ │ │ │ │ │ ├── bsutter.yaml │ │ │ │ │ │ ├── dfodor.yaml │ │ │ │ │ │ ├── dperaza4dustbit.yaml │ │ │ │ │ │ ├── eedri.yaml │ │ │ │ │ │ ├── ergonzal.yaml │ │ │ │ │ │ ├── filariow.yaml │ │ │ │ │ │ ├── fmuntean.yaml │ │ │ │ │ │ ├── gbenhaim.yaml │ │ │ │ │ │ ├── hugares.yaml │ │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ │ ├── mjobanek.yaml │ │ │ │ │ │ ├── pdave.yaml │ │ │ │ │ │ ├── ralphbean.yaml │ │ │ │ │ │ ├── rorai.yaml │ │ │ │ │ │ ├── sadlerap.yaml │ │ │ │ │ │ └── saviv.yaml │ │ │ │ │ └── toolchain-host-operator │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rolebindings │ │ │ │ │ ├── approve-user-alkazako-host.yaml │ │ │ │ │ ├── approve-user-bcook-host.yaml │ │ │ │ │ ├── approve-user-bkundu-host.yaml │ │ │ │ │ ├── approve-user-bsutter-host.yaml │ │ │ │ │ ├── approve-user-dfodor-host.yaml │ │ │ │ │ ├── approve-user-dperaza4dustbit-host.yaml │ │ │ │ │ ├── approve-user-eedri-host.yaml │ │ │ │ │ ├── approve-user-ergonzal-host.yaml │ │ │ │ │ ├── approve-user-filariow-host.yaml │ │ │ │ │ ├── approve-user-fmuntean-host.yaml │ │ │ │ │ ├── approve-user-gbenhaim-host.yaml │ │ │ │ │ ├── approve-user-hugares-host.yaml │ │ │ │ │ ├── approve-user-mjobanek-host.yaml │ │ │ │ │ ├── approve-user-pdave-host.yaml │ │ │ │ │ ├── approve-user-ralphbean-host.yaml │ │ │ │ │ ├── approve-user-rorai-host.yaml │ │ │ │ │ ├── approve-user-sadlerap-host.yaml │ │ │ │ │ ├── approve-user-saviv-host.yaml │ │ │ │ │ ├── ban-user-alkazako-host.yaml │ │ │ │ │ ├── ban-user-dperaza4dustbit-host.yaml │ │ │ │ │ ├── ban-user-filariow-host.yaml │ │ │ │ │ ├── ban-user-fmuntean-host.yaml │ │ │ │ │ ├── ban-user-mjobanek-host.yaml │ │ │ │ │ ├── ban-user-sadlerap-host.yaml │ │ │ │ │ ├── clusterrole-view-alkazako-host.yaml │ │ │ │ │ ├── clusterrole-view-bcook-host.yaml │ │ │ │ │ ├── clusterrole-view-bkundu-host.yaml │ │ │ │ │ ├── clusterrole-view-bsutter-host.yaml │ │ │ │ │ ├── clusterrole-view-dfodor-host.yaml │ │ │ │ │ ├── clusterrole-view-dperaza4dustbit-host.yaml │ │ │ │ │ ├── clusterrole-view-eedri-host.yaml │ │ │ │ │ ├── clusterrole-view-ergonzal-host.yaml │ │ │ │ │ ├── clusterrole-view-filariow-host.yaml │ │ │ │ │ ├── clusterrole-view-fmuntean-host.yaml │ │ │ │ │ ├── clusterrole-view-gbenhaim-host.yaml │ │ │ │ │ ├── clusterrole-view-hugares-host.yaml │ │ │ │ │ ├── clusterrole-view-mjobanek-host.yaml │ │ │ │ │ ├── clusterrole-view-pdave-host.yaml │ │ │ │ │ ├── clusterrole-view-ralphbean-host.yaml │ │ │ │ │ ├── clusterrole-view-rorai-host.yaml │ │ │ │ │ ├── clusterrole-view-sadlerap-host.yaml │ │ │ │ │ ├── clusterrole-view-saviv-host.yaml │ │ │ │ │ ├── deactivate-user-alkazako-host.yaml │ │ │ │ │ ├── deactivate-user-bcook-host.yaml │ │ │ │ │ ├── deactivate-user-bsutter-host.yaml │ │ │ │ │ ├── deactivate-user-dperaza4dustbit-host.yaml │ │ │ │ │ ├── deactivate-user-filariow-host.yaml │ │ │ │ │ ├── deactivate-user-fmuntean-host.yaml │ │ │ │ │ ├── deactivate-user-hugares-host.yaml │ │ │ │ │ ├── deactivate-user-mjobanek-host.yaml │ │ │ │ │ ├── deactivate-user-sadlerap-host.yaml │ │ │ │ │ ├── gdpr-delete-alkazako-host.yaml │ │ │ │ │ ├── gdpr-delete-bcook-host.yaml │ │ │ │ │ ├── gdpr-delete-bsutter-host.yaml │ │ │ │ │ ├── gdpr-delete-dperaza4dustbit-host.yaml │ │ │ │ │ ├── gdpr-delete-filariow-host.yaml │ │ │ │ │ ├── gdpr-delete-fmuntean-host.yaml │ │ │ │ │ ├── gdpr-delete-hugares-host.yaml │ │ │ │ │ ├── gdpr-delete-mjobanek-host.yaml │ │ │ │ │ ├── gdpr-delete-sadlerap-host.yaml │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── promote-user-alkazako-host.yaml │ │ │ │ │ ├── promote-user-bcook-host.yaml │ │ │ │ │ ├── promote-user-bsutter-host.yaml │ │ │ │ │ ├── promote-user-dperaza4dustbit-host.yaml │ │ │ │ │ ├── promote-user-filariow-host.yaml │ │ │ │ │ ├── promote-user-fmuntean-host.yaml │ │ │ │ │ ├── promote-user-hugares-host.yaml │ │ │ │ │ ├── promote-user-mjobanek-host.yaml │ │ │ │ │ ├── promote-user-sadlerap-host.yaml │ │ │ │ │ ├── restart-deployment-alkazako-host.yaml │ │ │ │ │ ├── restart-deployment-dperaza4dustbit-host.yaml │ │ │ │ │ ├── restart-deployment-filariow-host.yaml │ │ │ │ │ ├── restart-deployment-fmuntean-host.yaml │ │ │ │ │ ├── restart-deployment-mjobanek-host.yaml │ │ │ │ │ ├── restart-deployment-sadlerap-host.yaml │ │ │ │ │ ├── retarget-user-alkazako-host.yaml │ │ │ │ │ ├── retarget-user-bcook-host.yaml │ │ │ │ │ ├── retarget-user-bsutter-host.yaml │ │ │ │ │ ├── retarget-user-dfodor-host.yaml │ │ │ │ │ ├── retarget-user-dperaza4dustbit-host.yaml │ │ │ │ │ ├── retarget-user-eedri-host.yaml │ │ │ │ │ ├── retarget-user-ergonzal-host.yaml │ │ │ │ │ ├── retarget-user-filariow-host.yaml │ │ │ │ │ ├── retarget-user-fmuntean-host.yaml │ │ │ │ │ ├── retarget-user-gbenhaim-host.yaml │ │ │ │ │ ├── retarget-user-hugares-host.yaml │ │ │ │ │ ├── retarget-user-mjobanek-host.yaml │ │ │ │ │ ├── retarget-user-ralphbean-host.yaml │ │ │ │ │ ├── retarget-user-sadlerap-host.yaml │ │ │ │ │ └── retarget-user-saviv-host.yaml │ │ │ │ │ └── roles │ │ │ │ │ ├── approve-user-host.yaml │ │ │ │ │ ├── ban-user-host.yaml │ │ │ │ │ ├── deactivate-user-host.yaml │ │ │ │ │ ├── gdpr-delete-host.yaml │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── promote-user-host.yaml │ │ │ │ │ ├── restart-deployment-host.yaml │ │ │ │ │ └── retarget-user-host.yaml │ │ │ └── member │ │ │ │ ├── kustomization.yaml │ │ │ │ └── namespace-scoped │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── sandbox-sre-member │ │ │ │ ├── kustomization.yaml │ │ │ │ └── serviceaccounts │ │ │ │ │ ├── alkazako.yaml │ │ │ │ │ ├── bcook.yaml │ │ │ │ │ ├── bkundu.yaml │ │ │ │ │ ├── bsutter.yaml │ │ │ │ │ ├── dfodor.yaml │ │ │ │ │ ├── dperaza4dustbit.yaml │ │ │ │ │ ├── eedri.yaml │ │ │ │ │ ├── ergonzal.yaml │ │ │ │ │ ├── filariow.yaml │ │ │ │ │ ├── fmuntean.yaml │ │ │ │ │ ├── gbenhaim.yaml │ │ │ │ │ ├── hugares.yaml │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── mjobanek.yaml │ │ │ │ │ ├── pdave.yaml │ │ │ │ │ ├── ralphbean.yaml │ │ │ │ │ ├── rorai.yaml │ │ │ │ │ ├── sadlerap.yaml │ │ │ │ │ └── saviv.yaml │ │ │ │ └── toolchain-member-operator │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rolebindings │ │ │ │ ├── clusterrole-view-alkazako-member.yaml │ │ │ │ ├── clusterrole-view-bcook-member.yaml │ │ │ │ ├── clusterrole-view-bkundu-member.yaml │ │ │ │ ├── clusterrole-view-bsutter-member.yaml │ │ │ │ ├── clusterrole-view-dfodor-member.yaml │ │ │ │ ├── clusterrole-view-dperaza4dustbit-member.yaml │ │ │ │ ├── clusterrole-view-eedri-member.yaml │ │ │ │ ├── clusterrole-view-ergonzal-member.yaml │ │ │ │ ├── clusterrole-view-filariow-member.yaml │ │ │ │ ├── clusterrole-view-fmuntean-member.yaml │ │ │ │ ├── clusterrole-view-gbenhaim-member.yaml │ │ │ │ ├── clusterrole-view-hugares-member.yaml │ │ │ │ ├── clusterrole-view-mjobanek-member.yaml │ │ │ │ ├── clusterrole-view-pdave-member.yaml │ │ │ │ ├── clusterrole-view-ralphbean-member.yaml │ │ │ │ ├── clusterrole-view-rorai-member.yaml │ │ │ │ ├── clusterrole-view-sadlerap-member.yaml │ │ │ │ ├── clusterrole-view-saviv-member.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── restart-deployment-alkazako-member.yaml │ │ │ │ ├── restart-deployment-bkundu-member.yaml │ │ │ │ ├── restart-deployment-dperaza4dustbit-member.yaml │ │ │ │ ├── restart-deployment-filariow-member.yaml │ │ │ │ ├── restart-deployment-fmuntean-member.yaml │ │ │ │ ├── restart-deployment-mjobanek-member.yaml │ │ │ │ └── restart-deployment-sadlerap-member.yaml │ │ │ │ └── roles │ │ │ │ ├── kustomization.yaml │ │ │ │ └── restart-deployment-member.yaml │ │ └── kubesaw-admins.yaml │ │ └── staging │ │ ├── README.adoc │ │ ├── generated-manifests │ │ ├── host │ │ │ ├── kustomization.yaml │ │ │ └── namespace-scoped │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── sandbox-sre-host │ │ │ │ ├── kustomization.yaml │ │ │ │ └── serviceaccounts │ │ │ │ │ ├── alkazako.yaml │ │ │ │ │ ├── bcook.yaml │ │ │ │ │ ├── bkundu.yaml │ │ │ │ │ ├── bsutter.yaml │ │ │ │ │ ├── dfodor.yaml │ │ │ │ │ ├── dperaza4dustbit.yaml │ │ │ │ │ ├── ergonzal.yaml │ │ │ │ │ ├── filariow.yaml │ │ │ │ │ ├── fmuntean.yaml │ │ │ │ │ ├── gbenhaim.yaml │ │ │ │ │ ├── jhutar.yaml │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── mjobanek.yaml │ │ │ │ │ ├── pdave.yaml │ │ │ │ │ ├── ralphbean.yaml │ │ │ │ │ ├── rorai.yaml │ │ │ │ │ ├── sadlerap.yaml │ │ │ │ │ └── saviv.yaml │ │ │ │ └── toolchain-host-operator │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rolebindings │ │ │ │ ├── approve-user-alkazako-host.yaml │ │ │ │ ├── approve-user-bcook-host.yaml │ │ │ │ ├── approve-user-bkundu-host.yaml │ │ │ │ ├── approve-user-bsutter-host.yaml │ │ │ │ ├── approve-user-dfodor-host.yaml │ │ │ │ ├── approve-user-dperaza4dustbit-host.yaml │ │ │ │ ├── approve-user-ergonzal-host.yaml │ │ │ │ ├── approve-user-filariow-host.yaml │ │ │ │ ├── approve-user-fmuntean-host.yaml │ │ │ │ ├── approve-user-gbenhaim-host.yaml │ │ │ │ ├── approve-user-jhutar-host.yaml │ │ │ │ ├── approve-user-mjobanek-host.yaml │ │ │ │ ├── approve-user-pdave-host.yaml │ │ │ │ ├── approve-user-ralphbean-host.yaml │ │ │ │ ├── approve-user-rorai-host.yaml │ │ │ │ ├── approve-user-sadlerap-host.yaml │ │ │ │ ├── approve-user-saviv-host.yaml │ │ │ │ ├── ban-user-alkazako-host.yaml │ │ │ │ ├── ban-user-dperaza4dustbit-host.yaml │ │ │ │ ├── ban-user-filariow-host.yaml │ │ │ │ ├── ban-user-fmuntean-host.yaml │ │ │ │ ├── ban-user-mjobanek-host.yaml │ │ │ │ ├── ban-user-sadlerap-host.yaml │ │ │ │ ├── clusterrole-view-alkazako-host.yaml │ │ │ │ ├── clusterrole-view-bcook-host.yaml │ │ │ │ ├── clusterrole-view-bkundu-host.yaml │ │ │ │ ├── clusterrole-view-bsutter-host.yaml │ │ │ │ ├── clusterrole-view-dfodor-host.yaml │ │ │ │ ├── clusterrole-view-dperaza4dustbit-host.yaml │ │ │ │ ├── clusterrole-view-ergonzal-host.yaml │ │ │ │ ├── clusterrole-view-filariow-host.yaml │ │ │ │ ├── clusterrole-view-fmuntean-host.yaml │ │ │ │ ├── clusterrole-view-gbenhaim-host.yaml │ │ │ │ ├── clusterrole-view-jhutar-host.yaml │ │ │ │ ├── clusterrole-view-mjobanek-host.yaml │ │ │ │ ├── clusterrole-view-pdave-host.yaml │ │ │ │ ├── clusterrole-view-ralphbean-host.yaml │ │ │ │ ├── clusterrole-view-rorai-host.yaml │ │ │ │ ├── clusterrole-view-sadlerap-host.yaml │ │ │ │ ├── clusterrole-view-saviv-host.yaml │ │ │ │ ├── deactivate-user-alkazako-host.yaml │ │ │ │ ├── deactivate-user-bcook-host.yaml │ │ │ │ ├── deactivate-user-bkundu-host.yaml │ │ │ │ ├── deactivate-user-bsutter-host.yaml │ │ │ │ ├── deactivate-user-dperaza4dustbit-host.yaml │ │ │ │ ├── deactivate-user-filariow-host.yaml │ │ │ │ ├── deactivate-user-fmuntean-host.yaml │ │ │ │ ├── deactivate-user-mjobanek-host.yaml │ │ │ │ ├── deactivate-user-pdave-host.yaml │ │ │ │ ├── deactivate-user-rorai-host.yaml │ │ │ │ ├── deactivate-user-sadlerap-host.yaml │ │ │ │ ├── gdpr-delete-alkazako-host.yaml │ │ │ │ ├── gdpr-delete-bcook-host.yaml │ │ │ │ ├── gdpr-delete-bkundu-host.yaml │ │ │ │ ├── gdpr-delete-bsutter-host.yaml │ │ │ │ ├── gdpr-delete-dperaza4dustbit-host.yaml │ │ │ │ ├── gdpr-delete-filariow-host.yaml │ │ │ │ ├── gdpr-delete-fmuntean-host.yaml │ │ │ │ ├── gdpr-delete-jhutar-host.yaml │ │ │ │ ├── gdpr-delete-mjobanek-host.yaml │ │ │ │ ├── gdpr-delete-pdave-host.yaml │ │ │ │ ├── gdpr-delete-rorai-host.yaml │ │ │ │ ├── gdpr-delete-sadlerap-host.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── promote-user-alkazako-host.yaml │ │ │ │ ├── promote-user-bcook-host.yaml │ │ │ │ ├── promote-user-bkundu-host.yaml │ │ │ │ ├── promote-user-bsutter-host.yaml │ │ │ │ ├── promote-user-dperaza4dustbit-host.yaml │ │ │ │ ├── promote-user-filariow-host.yaml │ │ │ │ ├── promote-user-fmuntean-host.yaml │ │ │ │ ├── promote-user-mjobanek-host.yaml │ │ │ │ ├── promote-user-pdave-host.yaml │ │ │ │ ├── promote-user-sadlerap-host.yaml │ │ │ │ ├── restart-deployment-alkazako-host.yaml │ │ │ │ ├── restart-deployment-dperaza4dustbit-host.yaml │ │ │ │ ├── restart-deployment-filariow-host.yaml │ │ │ │ ├── restart-deployment-fmuntean-host.yaml │ │ │ │ ├── restart-deployment-mjobanek-host.yaml │ │ │ │ ├── restart-deployment-sadlerap-host.yaml │ │ │ │ ├── retarget-user-alkazako-host.yaml │ │ │ │ ├── retarget-user-bcook-host.yaml │ │ │ │ ├── retarget-user-bkundu-host.yaml │ │ │ │ ├── retarget-user-bsutter-host.yaml │ │ │ │ ├── retarget-user-dfodor-host.yaml │ │ │ │ ├── retarget-user-dperaza4dustbit-host.yaml │ │ │ │ ├── retarget-user-ergonzal-host.yaml │ │ │ │ ├── retarget-user-filariow-host.yaml │ │ │ │ ├── retarget-user-fmuntean-host.yaml │ │ │ │ ├── retarget-user-gbenhaim-host.yaml │ │ │ │ ├── retarget-user-mjobanek-host.yaml │ │ │ │ ├── retarget-user-pdave-host.yaml │ │ │ │ ├── retarget-user-ralphbean-host.yaml │ │ │ │ ├── retarget-user-rorai-host.yaml │ │ │ │ ├── retarget-user-sadlerap-host.yaml │ │ │ │ └── retarget-user-saviv-host.yaml │ │ │ │ └── roles │ │ │ │ ├── approve-user-host.yaml │ │ │ │ ├── ban-user-host.yaml │ │ │ │ ├── deactivate-user-host.yaml │ │ │ │ ├── gdpr-delete-host.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── promote-user-host.yaml │ │ │ │ ├── restart-deployment-host.yaml │ │ │ │ └── retarget-user-host.yaml │ │ └── member │ │ │ ├── kustomization.yaml │ │ │ └── namespace-scoped │ │ │ ├── kustomization.yaml │ │ │ ├── sandbox-sre-member │ │ │ ├── kustomization.yaml │ │ │ └── serviceaccounts │ │ │ │ ├── alkazako.yaml │ │ │ │ ├── bcook.yaml │ │ │ │ ├── bkundu.yaml │ │ │ │ ├── bsutter.yaml │ │ │ │ ├── dfodor.yaml │ │ │ │ ├── dperaza4dustbit.yaml │ │ │ │ ├── ergonzal.yaml │ │ │ │ ├── filariow.yaml │ │ │ │ ├── fmuntean.yaml │ │ │ │ ├── gbenhaim.yaml │ │ │ │ ├── jhutar.yaml │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── mjobanek.yaml │ │ │ │ ├── pdave.yaml │ │ │ │ ├── ralphbean.yaml │ │ │ │ ├── rorai.yaml │ │ │ │ ├── sadlerap.yaml │ │ │ │ └── saviv.yaml │ │ │ └── toolchain-member-operator │ │ │ ├── kustomization.yaml │ │ │ ├── rolebindings │ │ │ ├── clusterrole-view-alkazako-member.yaml │ │ │ ├── clusterrole-view-bcook-member.yaml │ │ │ ├── clusterrole-view-bkundu-member.yaml │ │ │ ├── clusterrole-view-bsutter-member.yaml │ │ │ ├── clusterrole-view-dfodor-member.yaml │ │ │ ├── clusterrole-view-dperaza4dustbit-member.yaml │ │ │ ├── clusterrole-view-ergonzal-member.yaml │ │ │ ├── clusterrole-view-filariow-member.yaml │ │ │ ├── clusterrole-view-fmuntean-member.yaml │ │ │ ├── clusterrole-view-gbenhaim-member.yaml │ │ │ ├── clusterrole-view-jhutar-member.yaml │ │ │ ├── clusterrole-view-mjobanek-member.yaml │ │ │ ├── clusterrole-view-pdave-member.yaml │ │ │ ├── clusterrole-view-ralphbean-member.yaml │ │ │ ├── clusterrole-view-rorai-member.yaml │ │ │ ├── clusterrole-view-sadlerap-member.yaml │ │ │ ├── clusterrole-view-saviv-member.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── restart-deployment-alkazako-member.yaml │ │ │ ├── restart-deployment-bkundu-member.yaml │ │ │ ├── restart-deployment-dperaza4dustbit-member.yaml │ │ │ ├── restart-deployment-filariow-member.yaml │ │ │ ├── restart-deployment-fmuntean-member.yaml │ │ │ ├── restart-deployment-mjobanek-member.yaml │ │ │ └── restart-deployment-sadlerap-member.yaml │ │ │ └── roles │ │ │ ├── kustomization.yaml │ │ │ └── restart-deployment-member.yaml │ │ └── kubesaw-admins.yaml ├── smee-client │ ├── OWNERS │ ├── README.md │ ├── base │ │ ├── deployment.yaml │ │ └── kustomization.yaml │ ├── production │ │ ├── kflux-ocp-p01 │ │ │ ├── kustomization.yaml │ │ │ └── sever-url-patch.yaml │ │ ├── stone-prod-p01 │ │ │ ├── kustomization.yaml │ │ │ └── sever-url-patch.yaml │ │ └── stone-prod-p02 │ │ │ ├── kustomization.yaml │ │ │ └── sever-url-patch.yaml │ └── staging │ │ ├── kustomization.yaml │ │ └── sever-url-patch.yaml ├── smee │ ├── OWNERS │ ├── README.md │ ├── base │ │ ├── deployment.yaml │ │ ├── kustomization.yaml │ │ ├── route.yaml │ │ └── service.yaml │ ├── production │ │ ├── ip-allow-list.yaml │ │ └── kustomization.yaml │ └── staging │ │ ├── ip-allow-list.yaml │ │ └── kustomization.yaml ├── spacerequest-cleaner │ ├── OWNERS │ ├── base │ │ ├── cronjob.yaml │ │ ├── kustomization.yaml │ │ ├── namespace.yaml │ │ └── rbac.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml ├── sprayproxy │ ├── OWNERS │ ├── base │ │ ├── kustomization.yaml │ │ ├── rbac │ │ │ ├── kustomization.yaml │ │ │ └── pipeline-service-sre.yaml │ │ └── servicemonitor-rbacproxy │ │ │ ├── auth-proxy-clusterrolebinding.yaml │ │ │ ├── kustomization.yaml │ │ │ └── servicemonitor.yaml │ ├── production │ │ ├── bump-replicas.yaml │ │ ├── change-backends.yaml │ │ ├── change-webhook-secret.yaml │ │ ├── kustomization.yaml │ │ └── pipelines-as-code-secret.yaml │ └── staging │ │ ├── bump-replicas.yaml │ │ ├── change-backends.yaml │ │ ├── change-webhook-secret.yaml │ │ ├── kustomization.yaml │ │ └── pipelines-as-code-secret.yaml ├── tekton-ci │ ├── base │ │ ├── appstudio-pipelines-runner-rolebinding.yaml │ │ ├── external-secrets │ │ │ ├── clair-in-ci-db-github-token.yaml │ │ │ ├── github-secret.yaml │ │ │ ├── infra-deployments-pr-creator.yaml │ │ │ ├── kustomization.yaml │ │ │ ├── quay-push-secret.yaml │ │ │ ├── registry-redhat-io-pull-secret.yaml │ │ │ ├── slack-webhook-notification-secret.yaml │ │ │ └── snyk-shared-token.yaml │ │ ├── kustomization.yaml │ │ ├── namespace.yaml │ │ ├── repository.yaml │ │ ├── serviceaccount.yaml │ │ └── tekton-ci-maintainers-rb.yaml │ ├── production │ │ ├── cleanup-cronjob.yaml │ │ ├── infra-deployments-pr-creator.yaml │ │ ├── kustomization.yaml │ │ ├── plnsvc-ci-secret.yaml │ │ ├── plnsvc-codecov-secret.yaml │ │ ├── quay-push-secret.yaml │ │ └── snyk-shared-token.yaml │ └── staging │ │ └── kustomization.yaml ├── tracing │ ├── OWNERS │ ├── otel-collector │ │ ├── base │ │ │ ├── enable-tekton-tracing │ │ │ │ ├── enable-tekton-tracing.yaml │ │ │ │ └── kustomization.yaml │ │ │ ├── external-secrets │ │ │ │ ├── kustomization.yaml │ │ │ │ └── signalfx-api-key.yaml │ │ │ └── kustomization.yaml │ │ ├── development │ │ │ ├── kustomization.yaml │ │ │ ├── otel-collector-helm-values.yaml │ │ │ └── patch-delete-external-secrets.yaml │ │ ├── production │ │ │ ├── kustomization.yaml │ │ │ ├── otel-collector-helm-values.yaml │ │ │ └── signalfx-api-key-secret-path.yaml │ │ └── staging │ │ │ ├── kustomization.yaml │ │ │ ├── otel-collector-helm-values.yaml │ │ │ └── signalfx-api-key-secret-path.yaml │ └── tempo │ │ └── development │ │ ├── kustomization.yaml │ │ ├── tempo-operator.yaml │ │ └── tempo.yaml ├── ui │ ├── OWNERS │ ├── README.md │ ├── base │ │ ├── chrome │ │ │ ├── chrome-frontend.yaml │ │ │ └── kustomization.yaml │ │ ├── hac │ │ │ ├── hac-core-frontend.yaml │ │ │ ├── hac-dev.yaml │ │ │ └── kustomization.yaml │ │ ├── kustomization.yaml │ │ ├── ns.yaml │ │ └── proxy │ │ │ ├── kustomization.yaml │ │ │ ├── nginx.conf │ │ │ └── proxy.yaml │ ├── development │ │ ├── fed-modules.json │ │ ├── kustomization.yaml │ │ ├── reduce-replicas.yaml │ │ └── set-hostname.yaml │ ├── production │ │ ├── kflux-ocp-p01 │ │ │ ├── fed-modules.json │ │ │ ├── kustomization.yaml │ │ │ └── set-hostname.yaml │ │ ├── stone-prod-p01 │ │ │ ├── fed-modules.json │ │ │ ├── kustomization.yaml │ │ │ └── set-hostname.yaml │ │ └── stone-prod-p02 │ │ │ ├── fed-modules.json │ │ │ ├── kustomization.yaml │ │ │ └── set-hostname.yaml │ └── staging │ │ ├── fed-modules.json │ │ ├── kustomization.yaml │ │ └── set-hostname.yaml ├── vector-tekton-logs-collector │ ├── development │ │ ├── kustomization.yaml │ │ ├── vector-helm-generator.yaml │ │ ├── vector-helm-values.yaml │ │ └── vector-pre.yaml │ ├── production │ │ ├── kustomization.yaml │ │ ├── vector-helm-generator.yaml │ │ ├── vector-helm-values.yaml │ │ └── vector-pre.yaml │ └── staging │ │ ├── kustomization.yaml │ │ ├── vector-helm-generator.yaml │ │ ├── vector-helm-values.yaml │ │ └── vector-pre.yaml └── workspaces │ ├── OWNERS │ ├── production │ ├── kflux-ocp-p01 │ │ └── kustomization.yaml │ ├── stone-prd-rh01 │ │ └── kustomization.yaml │ ├── stone-prod-p01 │ │ └── kustomization.yaml │ └── stone-prod-p02 │ │ └── kustomization.yaml │ ├── staging │ ├── stone-stage-p01 │ │ └── kustomization.yaml │ └── stone-stg-rh01 │ │ └── kustomization.yaml │ └── team │ ├── kyverno │ ├── konflux-core-kyverno-clusterrolebindings.yaml │ └── kustomization.yaml │ └── migration │ ├── kustomization.yaml │ └── temp-workspace-team-rbac.yaml ├── configs ├── disable-csvcopy-for-all-cluster │ ├── cluster.yaml │ └── kustomization.yaml ├── enable-dvo-for-all-cluster │ ├── configure-dvo.yaml │ ├── install-dvo.yaml │ └── kustomization.yaml ├── enable-tekton-tracing │ └── enable-tekton-tracing.yaml ├── etcd-defrag │ ├── base │ │ ├── cluster-role.yaml │ │ ├── cronjob.yaml │ │ ├── kustomization.yaml │ │ ├── namespace.yaml │ │ ├── role-binding.yaml │ │ └── serviceaccount.yaml │ ├── production │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml ├── ingresscontroller │ ├── base │ │ ├── kustomization.yaml │ │ └── timeout-patch.yaml │ ├── development │ │ └── kustomization.yaml │ ├── production │ │ └── stone-prd-host1 │ │ │ └── kustomization.yaml │ └── staging │ │ └── stone-stg-host │ │ └── kustomization.yaml ├── nvme-storage-configurator │ ├── base │ │ ├── clusterrolebinding.yaml │ │ ├── daemonset.yaml │ │ ├── install.sh │ │ ├── kustomization.yaml │ │ ├── mount.sh │ │ ├── namespace.yaml │ │ ├── nvme-storage.service │ │ └── serviceaccount.yaml │ ├── production │ │ └── kustomization.yaml │ └── staging │ │ └── kustomization.yaml └── proactive-scaler │ ├── base │ ├── deployments.yaml │ ├── kustomization.yaml │ ├── namespace.yaml │ └── priority-class.yaml │ ├── production │ └── kustomization.yaml │ └── staging │ └── kustomization.yaml ├── docs ├── _data │ ├── navigation.yml │ └── variables.yml ├── deployment │ ├── extending-the-service.md │ ├── multi-cluster.md │ ├── observability.md │ └── stage.md ├── development │ ├── argo-cd-login.png │ ├── deployment.md │ ├── pre.md │ └── sandbox.md ├── introduction │ └── about.md ├── misc │ ├── ci-helper-app.md │ ├── faq.md │ └── quality-dashboard.md └── testing │ └── e2e-tests.md ├── hack ├── bootstrap-cluster-common.sh ├── bootstrap-cluster.sh ├── bootstrap-eaas-cluster.sh ├── bootstrap-host-cluster.sh ├── bootstrap-member-cluster.sh ├── build │ ├── build-via-appstudio.sh │ ├── setup-namespace.sh │ ├── setup-pac-integration.sh │ └── templates │ │ ├── application.yaml │ │ ├── component.yaml │ │ └── secret.yaml ├── chainsaw │ └── chainsaw-prepare.sh ├── deploy-argocd.sh ├── destroy-cluster.sh ├── generate-deploy-config.sh ├── hac │ └── installHac.sh ├── new-cluster │ ├── README.md │ ├── playbook.yaml │ ├── tasks │ │ ├── applicationsets.yaml │ │ ├── components.yaml │ │ ├── github │ │ │ ├── app.yaml │ │ │ ├── find-latest-commits.yaml │ │ │ └── github-app-flow.py │ │ ├── quay │ │ │ └── find-digest.yaml │ │ ├── variables.yaml │ │ └── vault │ │ │ ├── chains.yaml │ │ │ ├── login.yaml │ │ │ └── verify.yaml │ └── templates │ │ ├── backup │ │ ├── backup-s3-credentials-patch.yaml │ │ ├── backup-tenants-schedule.yaml │ │ ├── dpa-bucket-patch.yaml │ │ ├── dpa-kmskeyid-patch.yaml │ │ └── kustomization.yaml │ │ ├── build-service │ │ ├── kustomization.yaml │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── cost-management │ │ ├── cost-management-config-source-patch.yaml │ │ └── kustomization.yaml │ │ ├── etcd-shield │ │ └── kustomization.yaml │ │ ├── integration │ │ ├── console-url-config-patch.json │ │ ├── kustomization.yaml │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── knative-eventing │ │ └── kustomization.yaml │ │ ├── konflux-info │ │ ├── info.json │ │ └── kustomization.yaml │ │ ├── konflux-rbac │ │ └── kustomization.yaml │ │ ├── konflux-ui │ │ ├── add-service-certs-patch.yaml │ │ ├── configure-oauth-proxy-secret.yaml │ │ ├── dex-config.yaml │ │ ├── kustomization.yaml │ │ ├── oauth2-proxy-args-patch.yaml │ │ ├── remove-run-as-user-proxy-patch.yaml │ │ ├── set-hostname.yaml │ │ ├── set-redirect-uri.yaml │ │ └── set-replicas-patch.yaml │ │ ├── kyverno │ │ ├── job_resources.yaml │ │ ├── kustomization.yaml │ │ ├── kyverno-helm-generator.yaml │ │ └── kyverno-helm-values.yaml │ │ ├── mintmaker │ │ ├── kustomization.yaml │ │ └── pipelines-as-code-secret-path.yaml │ │ ├── monitoring │ │ ├── logging │ │ │ └── kustomization.yaml │ │ └── prometheus │ │ │ ├── cluster-id-label.yaml │ │ │ └── kustomization.yaml │ │ ├── multi-platform-controller │ │ ├── external-secrets.yaml │ │ ├── host-config.yaml │ │ ├── kustomization.yaml │ │ └── manager_resources_patch.yaml │ │ ├── namespace-lister │ │ └── kustomization.yaml │ │ ├── pipeline-service │ │ ├── deploy.yaml │ │ ├── kustomization.yaml │ │ └── resources │ │ │ ├── kustomization.yaml │ │ │ ├── pipelines-as-code-secret-path.yaml │ │ │ ├── scc-rbac.yaml │ │ │ ├── tekton-chains-public-key-path.yaml │ │ │ ├── tekton-chains-signing-secret-path.yaml │ │ │ ├── tekton-results-database-secret-path.yaml │ │ │ ├── tekton-results-s3-secret-path.yaml │ │ │ └── update-tekton-config-pac.yaml │ │ └── private │ │ ├── authentication │ │ └── kustomization.yaml │ │ ├── build-service │ │ └── webhook-config.json │ │ └── smee-client │ │ ├── kustomization.yaml │ │ └── sever-url-patch.yaml ├── preview-template.env ├── preview.sh ├── quickcluster │ ├── README.md │ ├── setup-nfs-quickcluster.sh │ └── templates │ │ ├── deployment.yaml │ │ ├── rbac.yaml │ │ ├── storageClass.yaml │ │ └── test-pvc.yaml ├── reduce-gitops-cpu-requests.sh ├── sandbox-development-mode.sh ├── sandbox-e2e-mode.sh ├── secret-creator │ ├── create-ci-helper-app-secret.sh │ ├── create-dora-metrics-exporter-secrets.sh │ ├── create-eaas-secrets.sh │ ├── create-github-secret.sh │ ├── create-image-controller-secret.sh │ ├── create-plnsvc-secrets.sh │ ├── create-sealights-secrets.sh │ ├── quality-dashboard │ │ ├── .gitignore │ │ ├── create-quality-dashboard-secrets.sh │ │ └── dex-config-template.yaml │ └── set-docker-hub-pull-secret.sh ├── setup-monitoring.sh ├── setup │ ├── debian-based.sh │ ├── install-pre-req.sh │ ├── macos-based.sh │ ├── prepare-crc.sh │ └── redhat-based.sh └── util-set-github-org ├── index.html └── staging-app.yaml /.gitignore: -------------------------------------------------------------------------------- 1 | hack/preview.env 2 | hack/monitoring.env 3 | cosign.pub 4 | .tmp/ 5 | tmp 6 | .idea/* 7 | components/pipeline-service/base/log-collector/charts/* 8 | -------------------------------------------------------------------------------- /.kube-linter.yaml: -------------------------------------------------------------------------------- 1 | checks: 2 | exclude: 3 | - liveness-port 4 | - readiness-port 5 | - startup-port 6 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/README.md: -------------------------------------------------------------------------------- 1 | The main entrypoints for deploying the service. It will create a single 2 | `ArgoCD` `Application` that will deploy all the required `Application` and `ApplicationSet`. 3 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/development/change-source-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/source/path 4 | value: argo-cd-apps/overlays/development 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/development/change-target-namespace.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/destination/namespace 4 | value: openshift-gitops 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/konflux-public-production/change-source-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/source/path 4 | value: argo-cd-apps/overlays/konflux-public-production 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/konflux-public-production/change-target-namespace.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/destination/namespace 4 | value: konflux-public-production 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/production-downstream/change-source-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/source/path 4 | value: argo-cd-apps/overlays/production-downstream 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/production-downstream/change-target-namespace.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/destination/namespace 4 | value: argocd 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/production/change-source-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/source/path 4 | value: argo-cd-apps/overlays/production 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/production/change-target-namespace.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/destination/namespace 4 | value: argocd 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/staging-downstream/change-source-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/source/path 4 | value: argo-cd-apps/overlays/staging-downstream 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/staging-downstream/change-target-namespace.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/destination/namespace 4 | value: argocd-staging 5 | -------------------------------------------------------------------------------- /argo-cd-apps/app-of-app-sets/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/README.md: -------------------------------------------------------------------------------- 1 | ArgoCD `ApplicationSet` resources. They can be grouped into directories for easier 2 | consumption by components and overlays. -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/authentication/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - authentication.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/cluster-secret-store/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - cluster-secret-store.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/cost-management/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - costmanagement-metrics-operator.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/disable-csvcopy-for-all-cluster/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - disable-csvcopy.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/dora-metrics/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - dora-metrics.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/enable-dvo-for-all-cluster/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - enable-dvo.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/external-secrets-operator/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - external-secrets-operator.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/kubesaw-common/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - kubesaw-common.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/monitoring-workload-grafana/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - monitoring-workload-grafana.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/monitoring-workload-logging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - monitoring-workload-logging.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/infra-deployments/monitoring-workload-prometheus/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - monitoring-workload-prometheus.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/all-clusters/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - infra-deployments 5 | components: 6 | - ../../k-components/inject-argocd-namespace 7 | - ../../k-components/deploy-to-all-clusters 8 | -------------------------------------------------------------------------------- /argo-cd-apps/base/backup/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - backup.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/ca-bundle/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ca-bundle.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/ci-helper-app/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ci-helper-app.yaml 5 | components: 6 | - ../../k-components/inject-infra-deployments-repo-details -------------------------------------------------------------------------------- /argo-cd-apps/base/cluster-secret-store-rh/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - cluster-secret-store-rh.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/eaas/cluster-as-a-service/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - cluster-as-a-service.yaml 5 | components: 6 | - ../../../k-components/inject-infra-deployments-repo-details 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/eaas/crossplane-config/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - crossplane-config.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/host/ingresscontroller/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ingresscontroller.yaml 5 | components: 6 | - ../../../k-components/inject-infra-deployments-repo-details -------------------------------------------------------------------------------- /argo-cd-apps/base/host/smee/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - smee.yaml 5 | components: 6 | - ../../../k-components/inject-infra-deployments-repo-details 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/host/sprayproxy/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - sprayproxy.yaml 5 | components: 6 | - ../../../k-components/inject-infra-deployments-repo-details 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/host/toolchain-host-operator/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - toolchain-host-operator.yaml 5 | components: 6 | - ../../../k-components/inject-infra-deployments-repo-details 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/keycloak/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - keycloak.yaml 5 | components: 6 | - ../../k-components/inject-infra-deployments-repo-details 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/konflux-ci/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - konflux-ci.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/local-cluster-secret/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - local-cluster-secret.yaml 6 | components: 7 | - ../../../k-components/inject-argocd-namespace 8 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/application-api/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - application-api.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/build-service/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - build-service.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/build-templates/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - build-templates.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/enterprise-contract/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - enterprise-contract.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/etcd-defrag/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - etcd-defrag.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/has/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - has.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/image-controller/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - image-controller.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/integration/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - integration.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/internal-services/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - internal-services.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/knative-eventing/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - knative-eventing.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/konflux-info/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - konflux-info.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/konflux-rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - konflux-rbac.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/konflux-ui/README: -------------------------------------------------------------------------------- 1 | The new UI for Konflux. It will replace the ui ArgoCD app in the future. 2 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/konflux-ui/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - konflux-ui.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/kubearchive/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - kubearchive.yaml 6 | components: 7 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 8 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/kyverno/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - kyverno.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/mintmaker/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - mintmaker.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/pipeline-service/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - pipeline-service.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/proactive-scaler/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - proactive-scaler.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/project-controller/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - project-controller.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/release/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - release.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/infra-deployments/tempo/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - tempo.yaml 5 | components: 6 | - ../../../../k-components/deploy-to-member-cluster-merge-generator 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - infra-deployments 5 | components: 6 | - ../../k-components/inject-argocd-namespace 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/member/optional/helm/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - rekor 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/quality-dashboard/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - quality-dashboard.yaml 5 | components: 6 | - ../../k-components/inject-infra-deployments-repo-details -------------------------------------------------------------------------------- /argo-cd-apps/base/repository-validator/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - repository-validator.yaml 5 | components: 6 | - ../../k-components/inject-infra-deployments-repo-details 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/smee-client/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - smee-client.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/tekton-ci/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - tekton-ci.yaml 5 | -------------------------------------------------------------------------------- /argo-cd-apps/base/toolchain-member/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - toolchain-member-operator.yaml 5 | components: 6 | - ../../k-components/inject-infra-deployments-repo-details 7 | -------------------------------------------------------------------------------- /argo-cd-apps/base/ui/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ui.yaml 5 | components: 6 | - ../../k-components/inject-infra-deployments-repo-details 7 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/assign-eaas-role-to-local-cluster/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1alpha1 3 | kind: Component 4 | commonLabels: 5 | appstudio.redhat.com/eaas-cluster: "true" 6 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/assign-host-role-to-local-cluster/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1alpha1 3 | kind: Component 4 | commonLabels: 5 | appstudio.redhat.com/host-cluster: "true" 6 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/assign-internal-cluster-role-to-local-cluster/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1alpha1 3 | kind: Component 4 | commonLabels: 5 | appstudio.redhat.com/internal-member-cluster: "true" 6 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/assign-member-role-to-local-cluster/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1alpha1 3 | kind: Component 4 | commonLabels: 5 | appstudio.redhat.com/member-cluster: "true" 6 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/assign-toolchain-member-role-to-local-cluster/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1alpha1 3 | kind: Component 4 | commonLabels: 5 | appstudio.redhat.com/toolchain-member: "true" 6 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/deploy-to-eaas-cluster-merge-generator/eaas-cluster-label-selector.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/generators/0/merge/generators/0/clusters/selector 4 | value: 5 | matchLabels: 6 | appstudio.redhat.com/eaas-cluster: "true" 7 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/deploy-to-host-cluster-merge-generator/host-cluster-label-selector.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/generators/0/merge/generators/0/clusters/selector 4 | value: 5 | matchLabels: 6 | appstudio.redhat.com/host-cluster: "true" 7 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/deploy-to-host-cluster/host-cluster-label-selector.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/generators/0/clusters 4 | value: 5 | selector: 6 | matchLabels: 7 | appstudio.redhat.com/host-cluster: "true" 8 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/deploy-to-member-cluster-merge-generator/member-cluster-label-selector.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/generators/0/merge/generators/0/clusters/selector 4 | value: 5 | matchLabels: 6 | appstudio.redhat.com/member-cluster: "true" 7 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/deploy-to-member-cluster/member-cluster-label-selector.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/generators/0/clusters 4 | value: 5 | selector: 6 | matchLabels: 7 | appstudio.redhat.com/member-cluster: "true" 8 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/disable-auto-sync/disable-auto-sync.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: remove 3 | path: /spec/template/spec/syncPolicy/automated 4 | -------------------------------------------------------------------------------- /argo-cd-apps/k-components/inject-argocd-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1alpha1 3 | kind: Component 4 | namespace: argocd-staging 5 | -------------------------------------------------------------------------------- /argo-cd-apps/overlays/development/set-local-cluster-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/generators/0/merge/generators/0/clusters/selector/matchLabels 4 | value: 5 | argocd.argoproj.io/secret-type: cluster 6 | -------------------------------------------------------------------------------- /argo-cd-apps/overlays/konflux-public-production/production-overlay-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/generators/0/merge/generators/0/clusters/values/environment 4 | value: production 5 | -------------------------------------------------------------------------------- /argo-cd-apps/overlays/konflux-public-staging/delete-applications.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | # Tempo is excluded from the staging 3 | apiVersion: argoproj.io/v1alpha1 4 | kind: ApplicationSet 5 | metadata: 6 | name: tempo 7 | $patch: delete 8 | -------------------------------------------------------------------------------- /argo-cd-apps/overlays/production-downstream/production-downstream-overlay-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/generators/0/merge/generators/0/clusters/values/environment 4 | value: production-downstream 5 | -------------------------------------------------------------------------------- /argo-cd-apps/overlays/production-downstream/production-overlay-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/generators/0/merge/generators/0/clusters/values/environment 4 | value: production 5 | -------------------------------------------------------------------------------- /argo-cd-apps/overlays/staging-downstream/staging-downstream-overlay-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/generators/0/merge/generators/0/clusters/values/environment 4 | value: staging-downstream 5 | -------------------------------------------------------------------------------- /components/authentication/base/admin-checker/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - rhtap-infra-secrets.yaml 5 | -------------------------------------------------------------------------------- /components/authentication/base/admin-checker/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: admin-checker 4 | resources: 5 | - admin-checker-sa.yaml 6 | - cronjob.yaml 7 | - namespace.yaml 8 | - external-secrets 9 | -------------------------------------------------------------------------------- /components/authentication/base/admin-checker/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: admin-checker 5 | -------------------------------------------------------------------------------- /components/authentication/base/group-sync/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - konflux-ldap-sa.yaml 5 | - mtls-ca-validators.yaml 6 | -------------------------------------------------------------------------------- /components/authentication/base/group-sync/namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: group-sync-operator 5 | -------------------------------------------------------------------------------- /components/authentication/k-components/ldap-url-patch/ldap-url-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/providers/0/ldap/url 4 | value: ldaps://ldap.corp.redhat.com 5 | -------------------------------------------------------------------------------- /components/authentication/production/base/konflux-ldap-sa-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/group-sync/konflux-ldap-sa 5 | -------------------------------------------------------------------------------- /components/authentication/production/base/mtls-ca-validators-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/group-sync/mtls-ca-validators 5 | -------------------------------------------------------------------------------- /components/authentication/production/base/rhtap-infra-secrets-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/platform/rhtap-infra-secrets 5 | -------------------------------------------------------------------------------- /components/authentication/production/kflux-ocp-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | components: 6 | - ../../k-components/ldap-url-patch 7 | -------------------------------------------------------------------------------- /components/authentication/production/stone-prod-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | components: 6 | - ../../k-components/ldap-url-patch 7 | -------------------------------------------------------------------------------- /components/authentication/production/stone-prod-p02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | components: 6 | - ../../k-components/ldap-url-patch 7 | -------------------------------------------------------------------------------- /components/authentication/staging/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../base 5 | -------------------------------------------------------------------------------- /components/authentication/staging/stone-stage-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | components: 6 | - ../../k-components/ldap-url-patch 7 | -------------------------------------------------------------------------------- /components/backup/base/all-clusters/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: openshift-adp 4 | resources: 5 | - external-secret.yaml 6 | - namespace.yaml 7 | - servicemonitor.yaml 8 | - oadp 9 | -------------------------------------------------------------------------------- /components/backup/base/all-clusters/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: openshift-adp 5 | -------------------------------------------------------------------------------- /components/backup/base/all-clusters/oadp/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - dpa.yaml 5 | - install-oadp.yaml 6 | -------------------------------------------------------------------------------- /components/backup/base/host/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: openshift-adp 4 | resources: 5 | - ../all-clusters 6 | - schedules 7 | -------------------------------------------------------------------------------- /components/backup/base/host/schedules/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: openshift-adp 4 | resources: 5 | - backup-toolchain-host-schedule.yaml 6 | -------------------------------------------------------------------------------- /components/backup/base/member/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: openshift-adp 4 | resources: 5 | - ../all-clusters 6 | - schedules 7 | -------------------------------------------------------------------------------- /components/backup/base/member/schedules/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: openshift-adp 4 | resources: 5 | - backup-tenants-schedule.yaml 6 | - backup-toolchain-member-schedule.yaml 7 | -------------------------------------------------------------------------------- /components/backup/production/kflux-ocp-p01/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsrep09ue1/stonesoup-infra-prod-backup/backup-kflux-ocp-p01 4 | -------------------------------------------------------------------------------- /components/backup/production/kflux-ocp-p01/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-kflux-ocp-p01 4 | -------------------------------------------------------------------------------- /components/backup/production/kflux-ocp-p01/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: 5709bb39-3726-4a6c-aa1b-e5155cf981c1 4 | -------------------------------------------------------------------------------- /components/backup/production/kflux-prd-rh02/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsrep09ue1/stonesoup-infra-prod-backup/backup-kflux-prd-rh02 4 | -------------------------------------------------------------------------------- /components/backup/production/kflux-prd-rh02/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-kflux-prd-rh02 4 | -------------------------------------------------------------------------------- /components/backup/production/kflux-prd-rh02/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: 4d05fc08-4fc7-452b-80e7-75cc1caef564 4 | -------------------------------------------------------------------------------- /components/backup/production/kflux-prd-rh03/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-kflux-prd-rh03 4 | -------------------------------------------------------------------------------- /components/backup/production/kflux-prd-rh03/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: remove 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | -------------------------------------------------------------------------------- /components/backup/production/stone-prd-host1/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsrep09ue1/stonesoup-infra-prod-backup/backup-stone-prd-host1 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prd-host1/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-stone-prd-host1 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prd-host1/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: 823529d3-e891-45a6-8f87-e63ca75630cf 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prd-m01/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsrep09ue1/stonesoup-infra-prod-backup/backup-stone-prd-m01 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prd-m01/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-stone-prd-m01 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prd-m01/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: 42cb559c-b70f-49fa-ab41-c4bc5d3049be 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prd-rh01/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsrep09ue1/stonesoup-infra-prod-backup/backup-stone-prd-rh01 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prd-rh01/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-stone-prd-rh01 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prd-rh01/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: 673832a6-9a4e-41dd-a2d6-2f2ea64614f1 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prod-p01/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsrep09ue1/stonesoup-infra-prod-backup/backup-stone-prod-p01 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prod-p01/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-stone-prod-p01 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prod-p01/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: acab68d3-4bbd-453b-a31e-0ce354f0db4b 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prod-p02/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsrep09ue1/stonesoup-infra-prod-backup/backup-stone-prod-p02 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prod-p02/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-stone-prod-p02 4 | -------------------------------------------------------------------------------- /components/backup/production/stone-prod-p02/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: 8361cc78-2507-4c79-a23b-346aa80bbcaf 4 | -------------------------------------------------------------------------------- /components/backup/staging/stone-stage-p01/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsres09ue1/stonesoup-infra-stage-backup/backup-stone-stage-p01 4 | -------------------------------------------------------------------------------- /components/backup/staging/stone-stage-p01/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-stone-stage-p01 4 | -------------------------------------------------------------------------------- /components/backup/staging/stone-stage-p01/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: 71be430c-e08f-4604-a3d6-f660d7b61072 4 | -------------------------------------------------------------------------------- /components/backup/staging/stone-stg-host/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsres09ue1/stonesoup-infra-stage-backup/backup-stone-stg-host 4 | -------------------------------------------------------------------------------- /components/backup/staging/stone-stg-host/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-stone-stg-host 4 | -------------------------------------------------------------------------------- /components/backup/staging/stone-stg-host/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: 580d7f30-a37b-4708-a6e0-80f41ff8f190 4 | -------------------------------------------------------------------------------- /components/backup/staging/stone-stg-rh01/backup-s3-credentials-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/dataFrom/0/extract/key 3 | value: integrations-output/terraform-resources/appsres09ue1/stonesoup-infra-stage-backup/backup-stone-stg-rh01 4 | -------------------------------------------------------------------------------- /components/backup/staging/stone-stg-rh01/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-stone-stg-rh01 4 | -------------------------------------------------------------------------------- /components/backup/staging/stone-stg-rh01/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | value: f1db03bc-ea5b-48f8-a40b-1afbbe666178 4 | -------------------------------------------------------------------------------- /components/build-service/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - pipelines-as-code-secret.yaml 5 | namespace: build-service 6 | -------------------------------------------------------------------------------- /components/build-service/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - build-maintainer.yaml 3 | - build-admin.yaml 4 | - build-config.yaml 5 | 6 | apiVersion: kustomize.config.k8s.io/v1beta1 7 | kind: Kustomization 8 | -------------------------------------------------------------------------------- /components/build-service/development/logs-in-console-format-cmd-arg-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/args/- 4 | value: '--zap-encoder=console' 5 | -------------------------------------------------------------------------------- /components/build-service/production/base/pipelines-as-code-secret-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/github-app 5 | -------------------------------------------------------------------------------- /components/build-service/production/kflux-ocp-p01/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-ocp-p01/github-app 5 | -------------------------------------------------------------------------------- /components/build-service/production/kflux-prd-rh02/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh02/github-app 5 | -------------------------------------------------------------------------------- /components/build-service/production/kflux-prd-rh03/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh03/github-app 5 | -------------------------------------------------------------------------------- /components/build-service/production/stone-prod-p01/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/stone-prod-p01/github-app 5 | -------------------------------------------------------------------------------- /components/build-service/production/stone-prod-p02/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/stone-prod-p02/github-app 5 | -------------------------------------------------------------------------------- /components/build-service/staging/stone-stage-p01/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/build/stone-stage-p01/github-app 5 | -------------------------------------------------------------------------------- /components/build-templates/base/0-namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: build-templates 5 | labels: 6 | argocd.argoproj.io/managed-by: openshift-gitops 7 | spec: 8 | finalizers: 9 | - kubernetes -------------------------------------------------------------------------------- /components/build-templates/base/e2e/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - namespace.yaml 3 | - rolebinding.yaml 4 | - role.yaml 5 | 6 | namespace: build-templates-e2e 7 | 8 | apiVersion: kustomize.config.k8s.io/v1beta1 9 | kind: Kustomization 10 | -------------------------------------------------------------------------------- /components/build-templates/base/e2e/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: build-templates-e2e 5 | -------------------------------------------------------------------------------- /components/build-templates/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - 0-namespace.yaml 3 | - e2e/ 4 | 5 | generatorOptions: 6 | disableNameSuffixHash: true 7 | 8 | apiVersion: kustomize.config.k8s.io/v1beta1 9 | kind: Kustomization 10 | -------------------------------------------------------------------------------- /components/build-templates/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/build-templates/production/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - e2e-quay-push-secret.yaml 6 | - e2e-registry-redhat-io-pull-secret.yaml 7 | - e2e-serviceaccount.yaml 8 | -------------------------------------------------------------------------------- /components/build-templates/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - e2e-quay-push-secret.yaml 6 | - e2e-serviceaccount.yaml 7 | -------------------------------------------------------------------------------- /components/ci-helper-app/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - dheerajodha 5 | - psturc -------------------------------------------------------------------------------- /components/ci-helper-app/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ci-helper-app.yaml -------------------------------------------------------------------------------- /components/ci-helper-app/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base -------------------------------------------------------------------------------- /components/ci-helper-app/staging/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ci-helper-app-secrets.yaml 5 | namespace: ci-helper-app -------------------------------------------------------------------------------- /components/ci-helper-app/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - external-secrets -------------------------------------------------------------------------------- /components/cluster-as-a-service/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - amisstea 5 | - ifireball 6 | - avi-biton 7 | - yftacherzog 8 | - hmariset 9 | -------------------------------------------------------------------------------- /components/cluster-as-a-service/base/namespaces.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Namespace 4 | metadata: 5 | name: clusters 6 | labels: 7 | argocd.argoproj.io/managed-by: openshift-gitops 8 | -------------------------------------------------------------------------------- /components/cluster-as-a-service/development/argocd-rbac.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/rbac/policy 4 | value: g, system:authenticated, role:admin 5 | -------------------------------------------------------------------------------- /components/cluster-secret-store-rh/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - appsre-stonesoup-vault-rh-secret-store.yaml 5 | - insights-secret-store.yaml 6 | - rh-artifacts-bucket-writer-secret-store.yml 7 | -------------------------------------------------------------------------------- /components/cluster-secret-store-rh/production/approle-id-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/provider/vault/auth/appRole/roleId 4 | value: d95dc71a-c0e7-158d-f4e5-75dd5c5c5557 5 | -------------------------------------------------------------------------------- /components/cluster-secret-store-rh/production/insights-approle-id-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/provider/vault/auth/appRole/roleId 4 | value: dbbc1114-ba0e-38c4-fbf7-ce0cad753509 5 | -------------------------------------------------------------------------------- /components/cluster-secret-store/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - appsre-stonesoup-vault-secret-store.yaml 5 | - appsre-vault-secret-store.yml 6 | -------------------------------------------------------------------------------- /components/cluster-secret-store/production/approle-id-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/provider/vault/auth/appRole/roleId 4 | value: 8ef732dc-177a-a940-ebd4-f25bd2607bd2 5 | -------------------------------------------------------------------------------- /components/cluster-secret-store/staging/insights-approle-id-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/provider/vault/auth/appRole/roleId 4 | value: dbbc1114-ba0e-38c4-fbf7-ce0cad753509 5 | -------------------------------------------------------------------------------- /components/cluster-secret-store/staging/rhtap-promotion-staging-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/conditions/0/namespaces/- 4 | value: rhtap-promotion-staging 5 | -------------------------------------------------------------------------------- /components/cost-management/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - cost-management-admin.yaml 5 | -------------------------------------------------------------------------------- /components/cost-management/policies/.chainsaw-test/resources/namespace-no-cost-center.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: tenant-no-cost-center 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/cost-management/policies/.chainsaw-test/resources/namespace-nonmatching.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: random-ns 5 | -------------------------------------------------------------------------------- /components/cost-management/policies/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - update_namespace_labels.yaml 5 | - kyverno_rbac.yaml 6 | -------------------------------------------------------------------------------- /components/cost-management/production/base/cost-mangement-external-secret-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/cost-management/konflux-service-account 5 | -------------------------------------------------------------------------------- /components/cost-management/staging/base/cost-mangement-external-secret-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/cost-management/konflux-service-account 5 | -------------------------------------------------------------------------------- /components/crossplane-config/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - amisstea 5 | - ifireball 6 | - avi-biton 7 | - yftacherzog 8 | - hmariset 9 | -------------------------------------------------------------------------------- /components/crossplane-config/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - rbac.yaml 6 | -------------------------------------------------------------------------------- /components/crossplane-config/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/crossplane-config/production/kustomization.yml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/crossplane-config/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/crossplane-control-plane/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - gbenhaim 5 | - avi-biton 6 | - amisstea 7 | - yftacherzog 8 | - ifireball 9 | - hmariset 10 | -------------------------------------------------------------------------------- /components/dev-sso/keycloak.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: keycloak.org/v1alpha1 2 | kind: Keycloak 3 | metadata: 4 | name: dev-sso 5 | labels: 6 | appstudio.redhat.com/keycloak: dev 7 | spec: 8 | externalAccess: 9 | enabled: true 10 | instances: 1 11 | -------------------------------------------------------------------------------- /components/dev-sso/operatorgroup.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: operators.coreos.com/v1 2 | kind: OperatorGroup 3 | metadata: 4 | name: keycloak-operatorgroup 5 | spec: 6 | targetNamespaces: 7 | - dev-sso 8 | -------------------------------------------------------------------------------- /components/dora-metrics/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - exporters-secrets.yaml 5 | namespace: dora-metrics 6 | -------------------------------------------------------------------------------- /components/dora-metrics/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - ./rbac 6 | -------------------------------------------------------------------------------- /components/dora-metrics/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - dora-metrics.yaml 3 | 4 | apiVersion: kustomize.config.k8s.io/v1beta1 5 | kind: Kustomization 6 | -------------------------------------------------------------------------------- /components/dora-metrics/production/exporters-secrets-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/qe/exporters-secret 5 | -------------------------------------------------------------------------------- /components/enterprise-contract/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - simonbaird 5 | - lcarva 6 | - ec-automation[bot] 7 | 8 | 9 | reviewers: 10 | - simonbaird 11 | - lcarva 12 | -------------------------------------------------------------------------------- /components/etcd-shield/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - hugares 5 | - filariow 6 | - gbenhaim 7 | - sadlerap 8 | 9 | reviewers: 10 | - hugares 11 | - filariow 12 | - gbenhaim 13 | - sadlerap 14 | -------------------------------------------------------------------------------- /components/etcd-shield/base/ns.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: etcd-shield 5 | labels: 6 | openshift.io/cluster-monitoring: "true" 7 | -------------------------------------------------------------------------------- /components/etcd-shield/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/etcd-shield/production/base/ns.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: etcd-shield 5 | labels: 6 | openshift.io/cluster-monitoring: "true" 7 | -------------------------------------------------------------------------------- /components/etcd-shield/production/kflux-ocp-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/etcd-shield/production/kflux-prd-rh02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/etcd-shield/production/kflux-prd-rh03/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/etcd-shield/production/stone-prd-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/etcd-shield/production/stone-prod-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/etcd-shield/production/stone-prod-p02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/etcd-shield/staging/stone-stage-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../base 5 | -------------------------------------------------------------------------------- /components/etcd-shield/staging/stone-stg-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../base 5 | -------------------------------------------------------------------------------- /components/external-secrets-operator/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - subscription.yaml 5 | - operator-config.yaml 6 | namespace: external-secrets-operator 7 | -------------------------------------------------------------------------------- /components/external-secrets-operator/production/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/external-secrets-operator/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/has/base/argocd-roles/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - allow-argocd-to-manage.yaml 6 | - argocd-permissions.yaml -------------------------------------------------------------------------------- /components/has/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - has-github-token.yaml 5 | namespace: application-service 6 | -------------------------------------------------------------------------------- /components/has/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - has-admin.yaml 6 | - has.yaml -------------------------------------------------------------------------------- /components/has/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | 6 | namespace: application-service -------------------------------------------------------------------------------- /components/has/k-components/enable-profiling/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1alpha1 2 | kind: Component 3 | 4 | patches: 5 | - path: ./pprof_patch.yaml -------------------------------------------------------------------------------- /components/has/k-components/manager-resources/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1alpha1 2 | kind: Component 3 | 4 | patches: 5 | - path: ./manager_resources_patch.yaml -------------------------------------------------------------------------------- /components/has/production/has-github-token-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/has/github-token 5 | -------------------------------------------------------------------------------- /components/has/staging/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - has-exec.yaml 5 | -------------------------------------------------------------------------------- /components/image-controller/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - quaytoken.yaml 5 | namespace: image-controller 6 | -------------------------------------------------------------------------------- /components/image-controller/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - allow-argocd-to-manage.yaml 3 | - monitoring.yaml 4 | - rbac 5 | 6 | namespace: image-controller 7 | 8 | apiVersion: kustomize.config.k8s.io/v1beta1 9 | kind: Kustomization 10 | 11 | -------------------------------------------------------------------------------- /components/image-controller/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - image-controller-maintainer.yaml 3 | - image-controller-admin.yaml 4 | 5 | apiVersion: kustomize.config.k8s.io/v1beta1 6 | kind: Kustomization 7 | -------------------------------------------------------------------------------- /components/image-controller/development/logs-in-console-format-cmd-arg-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/args/- 4 | value: '--zap-encoder=console' 5 | -------------------------------------------------------------------------------- /components/image-controller/production/base/quaytoken.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/image-controller 5 | -------------------------------------------------------------------------------- /components/image-controller/production/stone-prd-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ./resources 6 | -------------------------------------------------------------------------------- /components/integration/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - pipelines-as-code-secret.yaml 5 | namespace: integration-service 6 | -------------------------------------------------------------------------------- /components/integration/development/snapshotgc_inputs_patch.yaml: -------------------------------------------------------------------------------- 1 | - op: add 2 | path: /spec/jobTemplate/spec/template/spec/containers/0/env 3 | value: 4 | - name: PR_SNAPSHOTS_TO_KEEP 5 | value: "10" 6 | -------------------------------------------------------------------------------- /components/integration/production/base/pipelines-as-code-secret.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/github-app 5 | -------------------------------------------------------------------------------- /components/integration/production/kflux-ocp-p01/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-ocp-p01/github-app -------------------------------------------------------------------------------- /components/integration/production/kflux-prd-rh02/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh02/github-app 5 | -------------------------------------------------------------------------------- /components/integration/production/kflux-prd-rh03/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh03/github-app 5 | -------------------------------------------------------------------------------- /components/integration/production/stone-prod-p01/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/stone-prod-p01/github-app -------------------------------------------------------------------------------- /components/integration/production/stone-prod-p02/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/stone-prod-p02/github-app -------------------------------------------------------------------------------- /components/integration/staging/stone-stage-p01/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/pipeline-service/stone-stage-p01/github-app -------------------------------------------------------------------------------- /components/internal-services/internal_service_request_service_account.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: internal-service-request-service-account 5 | namespace: internal-services 6 | 7 | -------------------------------------------------------------------------------- /components/keycloak/base/konflux-workspace-admins/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - rbac.yaml 5 | namespace: rhtap-auth 6 | -------------------------------------------------------------------------------- /components/keycloak/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - namespace.yaml 5 | - rhsso-operator.yaml 6 | - configure-keycloak.yaml 7 | namespace: rhtap-auth 8 | -------------------------------------------------------------------------------- /components/keycloak/base/namespace.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Namespace 4 | metadata: 5 | name: rhtap-auth 6 | annotations: 7 | argocd.argoproj.io/sync-wave: "-3" 8 | -------------------------------------------------------------------------------- /components/keycloak/development/reduce-replicas.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/instances 4 | value: 1 5 | -------------------------------------------------------------------------------- /components/keycloak/development/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.rhtap 4 | value: https://@TBA@/auth/realms/redhat-external/broker/openshift-v4/endpoint 5 | -------------------------------------------------------------------------------- /components/knative-eventing/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/knative-eventing/production/kflux-ocp-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/knative-eventing/production/kflux-prd-rh02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/knative-eventing/production/kflux-prd-rh03/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/knative-eventing/production/stone-prd-m01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/knative-eventing/production/stone-prd-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/knative-eventing/production/stone-prod-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/knative-eventing/production/stone-prod-p02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /components/knative-eventing/staging/stone-stage-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../../base 6 | -------------------------------------------------------------------------------- /components/knative-eventing/staging/stone-stg-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../../base 6 | -------------------------------------------------------------------------------- /components/konflux-ci/base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: konflux-ci 5 | annotations: 6 | # Keeps PipelineRuns for 24h. 7 | operator.tekton.dev/prune.keep-since: 1440 8 | -------------------------------------------------------------------------------- /components/konflux-ci/production/infra-deployments-pr-creator.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/tekton-ci/infra-deployments-pr-creator 5 | -------------------------------------------------------------------------------- /components/konflux-ci/production/quay-push-secret-konflux-ci.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/tekton-ci/quay-push-secret-konflux-ci 5 | -------------------------------------------------------------------------------- /components/konflux-ci/production/snyk-shared-token.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/tekton-ci/snyk-shared-secret 5 | -------------------------------------------------------------------------------- /components/konflux-ci/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../base/external-secrets 6 | -------------------------------------------------------------------------------- /components/konflux-info/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - rbac.yaml 5 | 6 | namespace: konflux-info 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - gbenhaim 5 | - filariow 6 | - sadlerap 7 | 8 | reviewers: 9 | - gbenhaim 10 | - filariow 11 | - sadlerap 12 | -------------------------------------------------------------------------------- /components/konflux-rbac/policies/bootstrap-tenant-namespace/.chainsaw-test/resources/actual-appstudio-pipeline-clusterrole.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRole 3 | metadata: 4 | name: appstudio-pipelines-runner 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/policies/bootstrap-tenant-namespace/.chainsaw-test/resources/actual-namespace-konfluxcidev.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, $suffix])) 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/policies/bootstrap-tenant-namespace/.chainsaw-test/resources/actual-namespace-unlabeled.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, $suffix])) 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/policies/bootstrap-tenant-namespace/.kyverno-test/resources/labeled-namespace-konflux.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: labeled-namespace-konflux 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/policies/bootstrap-tenant-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namePrefix: konflux-rbac- 4 | resources: 5 | - bootstrap-tenant-namespace-clusterpolicy.yaml 6 | - kyverno_rbac.yaml 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/policies/restrict-binding-system-authenticated/.chainsaw-test/resources/tenant-namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: ($namespace) 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/policies/validate-rolebindings/.chainsaw-test/resources/tenant-namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: ($namespace) 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/policies/validate-rolebindings/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - invalid-subjects.yaml 5 | - kyverno_rbac.yaml 6 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/empty-base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: [] 4 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/kflux-ocp-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/kflux-prd-rh02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/kflux-prd-rh03/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/policies/bootstrap-tenant-namespace/.chainsaw-test/resources/actual-appstudio-pipeline-clusterrole.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRole 3 | metadata: 4 | name: appstudio-pipelines-runner 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/policies/bootstrap-tenant-namespace/.chainsaw-test/resources/actual-namespace-konfluxcidev.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, $suffix])) 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/policies/bootstrap-tenant-namespace/.chainsaw-test/resources/actual-namespace-unlabeled.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, $suffix])) 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/policies/bootstrap-tenant-namespace/.kyverno-test/resources/labeled-namespace-konflux.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: labeled-namespace-konflux 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/policies/bootstrap-tenant-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namePrefix: konflux-rbac- 4 | resources: 5 | - bootstrap-tenant-namespace-clusterpolicy.yaml 6 | - kyverno_rbac.yaml 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/policies/restrict-binding-system-authenticated/.chainsaw-test/resources/tenant-namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: ($namespace) 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/policies/validate-rolebindings/.chainsaw-test/resources/tenant-namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: ($namespace) 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/policies/validate-rolebindings/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - invalid-subjects.yaml 5 | - kyverno_rbac.yaml 6 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/stone-prd-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/stone-prod-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/stone-prod-p02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - ../base 5 | - ./rhel 6 | -------------------------------------------------------------------------------- /components/konflux-rbac/production/stone-prod-p02/rhel/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - konflux-rhel-read-events-role.yaml 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/staging/empty-base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: [] 4 | -------------------------------------------------------------------------------- /components/konflux-rbac/staging/stone-stage-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/konflux-rbac/staging/stone-stg-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/konflux-ui/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ns.yaml 5 | -------------------------------------------------------------------------------- /components/konflux-ui/base/ns.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: konflux-ui 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/base/dex/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - dex.yaml 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/base/proxy/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - proxy.yaml 5 | 6 | configMapGenerator: 7 | - name: proxy 8 | files: 9 | - nginx.conf 10 | -------------------------------------------------------------------------------- /components/konflux-ui/production/empty-base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../base 5 | 6 | namespace: konflux-ui 7 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-ocp-p01/add-service-certs-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/service.beta.openshift.io~1serving-cert-secret-name 4 | value: serving-cert 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-ocp-p01/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux-ui.apps.kflux-ocp-p01.7ayg.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-ocp-p01/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.konflux 4 | value: https://konflux-ui.apps.kflux-ocp-p01.7ayg.p1.openshiftapps.com/idp/callback 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-ocp-p01/set-replicas-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 3 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-prd-rh02/add-service-certs-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/service.beta.openshift.io~1serving-cert-secret-name 4 | value: serving-cert 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-prd-rh02/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux-ui.apps.kflux-prd-rh02.0fk9.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-prd-rh02/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.konflux 4 | value: https://konflux-ui.apps.kflux-prd-rh02.0fk9.p1.openshiftapps.com/idp/callback 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-prd-rh02/set-replicas-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 3 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-prd-rh03/add-service-certs-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/service.beta.openshift.io~1serving-cert-secret-name 4 | value: serving-cert 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-prd-rh03/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux-ui.apps.kflux-prd-rh03.nnv1.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-prd-rh03/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.konflux 4 | value: https://konflux-ui.apps.kflux-prd-rh03.nnv1.p1.openshiftapps.com/idp/callback 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/kflux-prd-rh03/set-replicas-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 3 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prd-rh01/add-service-certs-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/service.beta.openshift.io~1serving-cert-secret-name 4 | value: serving-cert 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prd-rh01/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux-ui.apps.stone-prd-rh01.pg1f.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prd-rh01/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.konflux 4 | value: https://konflux-ui.apps.stone-prd-rh01.pg1f.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prd-rh01/set-replicas-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 3 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prod-p01/add-service-certs-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/service.beta.openshift.io~1serving-cert-secret-name 4 | value: serving-cert 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prod-p01/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux-ui.apps.stone-prod-p01.wcfb.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prod-p01/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.konflux 4 | value: https://konflux-ui.apps.stone-prod-p01.wcfb.p1.openshiftapps.com/idp/callback 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prod-p01/set-replicas-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 3 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prod-p02/add-service-certs-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/service.beta.openshift.io~1serving-cert-secret-name 4 | value: serving-cert 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prod-p02/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux-ui.apps.stone-prod-p02.hjvn.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prod-p02/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.konflux 4 | value: https://konflux-ui.apps.stone-prod-p02.hjvn.p1.openshiftapps.com/idp/callback 5 | -------------------------------------------------------------------------------- /components/konflux-ui/production/stone-prod-p02/set-replicas-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 3 5 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/base/dex/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - dex.yaml 5 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/base/proxy/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - proxy.yaml 5 | 6 | configMapGenerator: 7 | - name: proxy 8 | files: 9 | - nginx.conf 10 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/stone-stage-p01/add-service-certs-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/service.beta.openshift.io~1serving-cert-secret-name 4 | value: serving-cert 5 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/stone-stage-p01/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux-ui.apps.stone-stage-p01.hpmt.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/stone-stage-p01/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.konflux 4 | value: https://konflux-ui.apps.stone-stage-p01.hpmt.p1.openshiftapps.com/idp/callback 5 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/stone-stage-p01/set-replicas-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 3 5 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/stone-stg-rh01/add-service-certs-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/service.beta.openshift.io~1serving-cert-secret-name 4 | value: serving-cert 5 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/stone-stg-rh01/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux-ui.apps.stone-stg-rh01.l2vh.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/stone-stg-rh01/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.konflux 4 | value: https://konflux-ui.apps.stone-stg-rh01.l2vh.p1.openshiftapps.com/idp/callback 5 | -------------------------------------------------------------------------------- /components/konflux-ui/staging/stone-stg-rh01/set-replicas-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 3 5 | -------------------------------------------------------------------------------- /components/kubearchive/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - rh-hemartin 5 | - skoved 6 | - ggallen 7 | - maruiz93 8 | - mafh314 9 | 10 | reviewers: 11 | - rh-hemartin 12 | - skoved 13 | - ggallen 14 | - maruiz93 15 | - mafh314 16 | -------------------------------------------------------------------------------- /components/kubearchive/policies/.chainsaw-test/resources/actual-namespace-konfluxcidev.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, $suffix])) 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/kubearchive/policies/.chainsaw-test/resources/actual-namespace-unlabeled.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, $suffix])) 5 | -------------------------------------------------------------------------------- /components/kubearchive/policies/.chainsaw-test/resources/expected-kubearchiveconfig.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kubearchive.org/v1 2 | kind: KubeArchiveConfig 3 | metadata: 4 | name: kubearchive 5 | namespace: (join('-', [$namespace, $suffix])) 6 | spec: 7 | resources: [] 8 | -------------------------------------------------------------------------------- /components/kubearchive/policies/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - bootstrap-namespace.yaml 5 | - kyverno_rbac.yaml 6 | -------------------------------------------------------------------------------- /components/kubearchive/policies/resources/expected-kubearchiveconfig-konflux.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kubearchive.org/v1 2 | kind: KubeArchiveConfig 3 | metadata: 4 | name: kubearchive 5 | namespace: labeled-namespace-konflux 6 | spec: 7 | resources: [] 8 | -------------------------------------------------------------------------------- /components/kubearchive/policies/resources/labeled-namespace-konflux.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: labeled-namespace-konflux 5 | labels: 6 | konflux-ci.dev/type: tenant 7 | -------------------------------------------------------------------------------- /components/kyverno/.gitignore: -------------------------------------------------------------------------------- 1 | charts/ 2 | -------------------------------------------------------------------------------- /components/kyverno/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - dperaza4dustbit 5 | - filariow 6 | - sadlerap 7 | 8 | reviewers: 9 | - dperaza4dustbit 10 | - filariow 11 | - sadlerap 12 | -------------------------------------------------------------------------------- /components/kyverno/chainsaw/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 64M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/kyverno/chainsaw/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: konflux-kyverno 5 | -------------------------------------------------------------------------------- /components/kyverno/development/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 64M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/kyverno/production/empty-base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: konflux-kyverno 4 | resources: 5 | - namespace.yaml 6 | -------------------------------------------------------------------------------- /components/kyverno/production/empty-base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: konflux-kyverno 5 | -------------------------------------------------------------------------------- /components/kyverno/production/kflux-ocp-p01/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 256M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/kyverno/production/kflux-prd-rh02/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 256M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/kyverno/production/kflux-prd-rh03/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 256M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/kyverno/production/stone-prd-rh01/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 256M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/kyverno/production/stone-prod-p01/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 256M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/kyverno/production/stone-prod-p02/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 256M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/kyverno/staging/empty-base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: konflux-kyverno 4 | resources: 5 | - namespace.yaml 6 | -------------------------------------------------------------------------------- /components/kyverno/staging/empty-base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: konflux-kyverno 5 | -------------------------------------------------------------------------------- /components/kyverno/staging/stone-stage-p01/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 256M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/kyverno/staging/stone-stg-rh01/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 256M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /components/mintmaker/base/cronjobs/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - create-dependency-update-check.yaml 5 | - delete-dependency-update-checks.yaml 6 | namespace: mintmaker 7 | -------------------------------------------------------------------------------- /components/mintmaker/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - cronjobs/ 3 | - rbac/ 4 | - redis-cache/ 5 | 6 | apiVersion: kustomize.config.k8s.io/v1beta1 7 | kind: Kustomization 8 | 9 | namespace: mintmaker 10 | -------------------------------------------------------------------------------- /components/mintmaker/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - mintmaker-team.yaml 5 | -------------------------------------------------------------------------------- /components/mintmaker/production/base/kustomizeconfig.yaml: -------------------------------------------------------------------------------- 1 | images: 2 | - path: spec/template/metadata/annotations/mintmaker.appstudio.redhat.com\/renovate-image 3 | kind: Deployment 4 | -------------------------------------------------------------------------------- /components/mintmaker/production/base/pipelines-as-code-secret-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/github-app 5 | -------------------------------------------------------------------------------- /components/mintmaker/production/kflux-ocp-p01/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-ocp-p01/github-app 5 | -------------------------------------------------------------------------------- /components/mintmaker/production/kflux-prd-rh02/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh02/github-app 5 | -------------------------------------------------------------------------------- /components/mintmaker/production/kflux-prd-rh03/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh03/github-app 5 | -------------------------------------------------------------------------------- /components/mintmaker/production/stone-prod-p01/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/stone-prod-p01/github-app 5 | -------------------------------------------------------------------------------- /components/mintmaker/production/stone-prod-p02/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/stone-prod-p02/github-app 5 | -------------------------------------------------------------------------------- /components/mintmaker/staging/base/kustomizeconfig.yaml: -------------------------------------------------------------------------------- 1 | images: 2 | - path: spec/template/metadata/annotations/mintmaker.appstudio.redhat.com\/renovate-image 3 | kind: Deployment 4 | -------------------------------------------------------------------------------- /components/mintmaker/staging/stone-stage-p01/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/build/stone-stage-p01/github-app 5 | -------------------------------------------------------------------------------- /components/monitoring/grafana/base/dashboards/cm-dashboard.yaml: -------------------------------------------------------------------------------- 1 | nameReference: 2 | - kind: ConfigMap 3 | fieldSpecs: 4 | - kind: GrafanaDashboard 5 | path: spec/configMapRef/name 6 | -------------------------------------------------------------------------------- /components/monitoring/grafana/base/dashboards/dora-metrics/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - https://github.com/redhat-appstudio/dora-metrics/deploy/grafana/?ref=eee598d77638d9110fe5a00260ec2b2f3a4e2643 5 | -------------------------------------------------------------------------------- /components/monitoring/grafana/base/dashboards/integration/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - https://github.com/konflux-ci/integration-service/config/grafana/?ref=74306597b3335d6f57c3375a35315ae0b5c0b7e8 5 | -------------------------------------------------------------------------------- /components/monitoring/grafana/base/dashboards/migration/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - gbenhaim 5 | - ernesgonzalez33 6 | - dfodorRH -------------------------------------------------------------------------------- /components/monitoring/grafana/base/dashboards/performance/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - https://github.com/redhat-appstudio/perfscale/grafana/?ref=66a1c0209636bf815b0945cf45215c5d03ae4413 6 | -------------------------------------------------------------------------------- /components/monitoring/grafana/base/dashboards/pipeline-service/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - grafana-config.yaml 6 | -------------------------------------------------------------------------------- /components/monitoring/grafana/base/dashboards/release/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - https://github.com/konflux-ci/release-service/config/grafana/?ref=bd7503fb78c2156770dc8be5c015c25294158458 5 | -------------------------------------------------------------------------------- /components/monitoring/grafana/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - grafana-maintainers.yaml 6 | -------------------------------------------------------------------------------- /components/monitoring/grafana/development/auto-assign-role-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/config/users/auto_assign_org_role 4 | value: Editor 5 | -------------------------------------------------------------------------------- /components/monitoring/logging/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - splunk-log-forwarder-external-secrets.yaml 5 | namespace: openshift-logging 6 | -------------------------------------------------------------------------------- /components/monitoring/logging/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - install-logging-operator.yaml 5 | - ./configure-logging/ 6 | - ./rbac/ 7 | 8 | generatorOptions: 9 | disableNameSuffixHash: true 10 | -------------------------------------------------------------------------------- /components/monitoring/logging/base/logging-operator-prerequisite/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - operatorgroup.yaml 5 | -------------------------------------------------------------------------------- /components/monitoring/logging/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - logging-admin.yaml 5 | -------------------------------------------------------------------------------- /components/monitoring/logging/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: [] 5 | -------------------------------------------------------------------------------- /components/monitoring/logging/production/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - logging-admin.yaml 5 | -------------------------------------------------------------------------------- /components/monitoring/logging/production/kflux-ocp-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../../base/logging-operator-prerequisite 6 | -------------------------------------------------------------------------------- /components/monitoring/logging/production/kflux-prd-es01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../../base/logging-operator-prerequisite 6 | -------------------------------------------------------------------------------- /components/monitoring/logging/production/kflux-prd-rh02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../../base/logging-operator-prerequisite 6 | -------------------------------------------------------------------------------- /components/monitoring/logging/production/kflux-prd-rh03/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../../base/logging-operator-prerequisite 6 | -------------------------------------------------------------------------------- /components/monitoring/logging/production/stone-prod-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../../base/logging-operator-prerequisite 6 | -------------------------------------------------------------------------------- /components/monitoring/logging/production/stone-prod-p02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../../base/logging-operator-prerequisite 6 | -------------------------------------------------------------------------------- /components/monitoring/logging/staging/kflux-stg-es01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../../base/logging-operator-prerequisite 6 | -------------------------------------------------------------------------------- /components/monitoring/logging/staging/stone-stage-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../../base/logging-operator-prerequisite 6 | 7 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - rhobs.yaml 5 | namespace: appstudio-monitoring 6 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - monitoring-admin.yaml 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/base/uwm-config/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - uwm-config.yaml 6 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/development/dummy-service-namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: dummy-service 5 | spec: {} 6 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/development/monitoringstack/cluster-type-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/endpoints/0/relabelings/0 4 | value: 5 | targetLabel: source_environment 6 | replacement: development-cluster 7 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/development/monitoringstack/remote-write-env-details.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: remove 3 | path: /spec/prometheusConfig/remoteWrite 4 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/base/monitoringstack/cluster-type-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/endpoints/0/relabelings/0 4 | value: 5 | targetLabel: source_environment 6 | replacement: production-cluster 7 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/base/rhobs-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/monitoring/rhobs 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/kflux-ocp-p01/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: kflux-ocp-p01 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/kflux-prd-es01/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: kflux-prd-es01 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/kflux-prd-rh02/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: kflux-prd-rh02 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/kflux-prd-rh03/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: kflux-prd-rh03 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/stone-prd-host1/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: 5 | stone-prd-host1 6 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/stone-prd-m01/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: 5 | stone-prd-m01 6 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/stone-prd-rh01/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: 5 | stone-prd-rh01 6 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/stone-prod-p01/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: stone-prod-p01 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/production/stone-prod-p02/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: stone-prod-p02 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/staging/base/monitoringstack/cluster-type-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/endpoints/0/relabelings/0 4 | value: 5 | targetLabel: source_environment 6 | replacement: staging-cluster 7 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/staging/base/rhobs-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/monitoring/rhobs 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/staging/kflux-stg-es01/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: kflux-stg-es01 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/staging/stone-stage-p01/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: stone-stage-p01 5 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/staging/stone-stg-host/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: 5 | stone-stg-host 6 | -------------------------------------------------------------------------------- /components/monitoring/prometheus/staging/stone-stg-rh01/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: 5 | stone-stg-rh01 6 | -------------------------------------------------------------------------------- /components/multi-platform-controller/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - ifireball 5 | - arewm 6 | - hugares 7 | - mshaposhnik 8 | 9 | reviewers: 10 | - ifireball 11 | - arewm 12 | - hugares 13 | - mshaposhnik 14 | -------------------------------------------------------------------------------- /components/multi-platform-controller/base/common/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - monitoring.yaml 5 | - allow-argocd-to-manage.yaml 6 | -------------------------------------------------------------------------------- /components/multi-platform-controller/development/logs-in-console-format-cmd-arg-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/args/- 4 | value: '--zap-encoder=console' 5 | -------------------------------------------------------------------------------- /components/multi-platform-controller/k-components/manager-resources/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1alpha1 2 | kind: Component 3 | 4 | patches: 5 | - path: ./manager_resources_patch.yaml -------------------------------------------------------------------------------- /components/multi-platform-controller/production-downstream/kflux-ocp-p01/aws-account.patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/multi-platform-controller/kflux-ocp-p01-aws-account 5 | -------------------------------------------------------------------------------- /components/multi-platform-controller/production-downstream/kflux-ocp-p01/aws-ssh-key.patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/multi-platform-controller/kflux-ocp-p01-ssh-key 5 | -------------------------------------------------------------------------------- /components/multi-platform-controller/production-downstream/kflux-ocp-p01/ibm-account.patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/multi-platform-controller/kflux-ocp-p01-ibm-api-key 5 | -------------------------------------------------------------------------------- /components/multi-platform-controller/production-downstream/kflux-ocp-p01/ibm-ssh-key.patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/multi-platform-controller/kflux-ocp-p01-ibm-ssh-key 5 | -------------------------------------------------------------------------------- /components/multi-platform-controller/production-downstream/stone-prod-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: multi-platform-controller 5 | 6 | resources: 7 | - ../base 8 | - host-config.yaml -------------------------------------------------------------------------------- /components/namespace-lister/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - dperaza4dustbit 5 | - filariow 6 | - sadlerap 7 | 8 | reviewers: 9 | - dperaza4dustbit 10 | - filariow 11 | - sadlerap 12 | -------------------------------------------------------------------------------- /components/namespace-lister/base/metrics/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - monitor.yaml 5 | - service-account.yaml 6 | - rbac.yaml 7 | - network_policy.yaml 8 | -------------------------------------------------------------------------------- /components/namespace-lister/base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: namespace-lister 5 | -------------------------------------------------------------------------------- /components/namespace-lister/base/patches/with_cachenamespacelabelselector.yaml: -------------------------------------------------------------------------------- 1 | - op: add 2 | path: /spec/template/spec/containers/0/env/- 3 | value: 4 | name: CACHE_NAMESPACE_LABELSELECTOR 5 | value: 'konflux-ci.dev/type=tenant' 6 | -------------------------------------------------------------------------------- /components/namespace-lister/base/patches/with_header_auth_groups.yaml: -------------------------------------------------------------------------------- 1 | - op: add 2 | path: /spec/template/spec/containers/0/env/- 3 | value: 4 | name: AUTH_GROUPS_HEADER 5 | value: Impersonate-Group 6 | -------------------------------------------------------------------------------- /components/namespace-lister/base/patches/with_header_auth_user.yaml: -------------------------------------------------------------------------------- 1 | - op: add 2 | path: /spec/template/spec/containers/0/env/- 3 | value: 4 | name: AUTH_USERNAME_HEADER 5 | value: X-User 6 | -------------------------------------------------------------------------------- /components/namespace-lister/empty-base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: namespace-lister 4 | -------------------------------------------------------------------------------- /components/namespace-lister/policies/ns-label/.chainsaw-test/resources/actual-namespace-konflux.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, 'konflux'])) 5 | labels: 6 | konflux.ci/type: user 7 | -------------------------------------------------------------------------------- /components/namespace-lister/policies/ns-label/.chainsaw-test/resources/actual-namespace-toolchain.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, 'toolchain'])) 5 | labels: 6 | toolchain.dev.openshift.com/type: tenant 7 | -------------------------------------------------------------------------------- /components/namespace-lister/policies/ns-label/.chainsaw-test/resources/actual-namespace-unlabeled.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, 'konflux'])) 5 | -------------------------------------------------------------------------------- /components/namespace-lister/policies/ns-label/.chainsaw-test/resources/expected-namespace-konflux.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, 'konflux'])) 5 | labels: 6 | konflux.ci/type: user 7 | konflux-ci.dev/type: tenant 8 | -------------------------------------------------------------------------------- /components/namespace-lister/policies/ns-label/.chainsaw-test/resources/expected-namespace-unlabeled.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: (join('-', [$namespace, 'konflux'])) 5 | -------------------------------------------------------------------------------- /components/namespace-lister/policies/ns-label/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - namespace-enforce-label-clusterpolicy.yaml 5 | - kyverno-background-konflux-ns-label-clusterrole.yaml 6 | -------------------------------------------------------------------------------- /components/namespace-lister/production/base/metrics/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - monitor.yaml 5 | - service-account.yaml 6 | - rbac.yaml 7 | - network_policy.yaml 8 | -------------------------------------------------------------------------------- /components/namespace-lister/production/base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: namespace-lister 5 | -------------------------------------------------------------------------------- /components/namespace-lister/production/base/patches/with_cachenamespacelabelselector.yaml: -------------------------------------------------------------------------------- 1 | - op: add 2 | path: /spec/template/spec/containers/0/env/- 3 | value: 4 | name: CACHE_NAMESPACE_LABELSELECTOR 5 | value: 'konflux-ci.dev/type=tenant' 6 | -------------------------------------------------------------------------------- /components/namespace-lister/production/base/patches/with_header_auth_groups.yaml: -------------------------------------------------------------------------------- 1 | - op: add 2 | path: /spec/template/spec/containers/0/env/- 3 | value: 4 | name: AUTH_GROUPS_HEADER 5 | value: X-Group 6 | -------------------------------------------------------------------------------- /components/namespace-lister/production/base/patches/with_header_auth_user.yaml: -------------------------------------------------------------------------------- 1 | - op: add 2 | path: /spec/template/spec/containers/0/env/- 3 | value: 4 | name: AUTH_USERNAME_HEADER 5 | value: X-User 6 | -------------------------------------------------------------------------------- /components/namespace-lister/production/kflux-ocp-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base/ 5 | -------------------------------------------------------------------------------- /components/namespace-lister/production/kflux-prd-rh02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base/ 5 | -------------------------------------------------------------------------------- /components/namespace-lister/production/kflux-prd-rh03/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base/ 5 | -------------------------------------------------------------------------------- /components/namespace-lister/production/stone-prd-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base/ 5 | -------------------------------------------------------------------------------- /components/namespace-lister/production/stone-prod-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base/ 5 | -------------------------------------------------------------------------------- /components/namespace-lister/production/stone-prod-p02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base/ 5 | -------------------------------------------------------------------------------- /components/namespace-lister/staging/stone-stage-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../base/ 5 | -------------------------------------------------------------------------------- /components/namespace-lister/staging/stone-stg-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../base/ 5 | -------------------------------------------------------------------------------- /components/notification-controller/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - gbenhaim 5 | - avi-biton 6 | - amisstea 7 | - yftacherzog 8 | - ifireball 9 | -------------------------------------------------------------------------------- /components/notification-controller/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - aws-sns-secret.yaml 5 | namespace: notification-controller 6 | -------------------------------------------------------------------------------- /components/notification-controller/development/topic_region_add.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/env 4 | value: 5 | - name: NOTIFICATION_TOPIC_ARN 6 | value: 7 | - name: NOTIFICATION_REGION 8 | value: 9 | -------------------------------------------------------------------------------- /components/notification-controller/production/external-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipelinerun-results-notifier/sns_secret 5 | -------------------------------------------------------------------------------- /components/notification-controller/staging/external-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/pipelinerun-results-notifier/sns_secret 5 | -------------------------------------------------------------------------------- /components/openshift-gitops/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - subscription.yaml 6 | - cluster-rbac/ 7 | -------------------------------------------------------------------------------- /components/perf-team-prometheus-reader/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - jhutar 5 | - pmacik 6 | -------------------------------------------------------------------------------- /components/perf-team-prometheus-reader/README.md: -------------------------------------------------------------------------------- 1 | # perf-team-prometheus-reader 2 | 3 | Component used by RHTAP Perf&Scale team to read monitoring data from 4 | Stage multi-tenant member cluster Prometheus. 5 | -------------------------------------------------------------------------------- /components/perf-team-prometheus-reader/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: perf-team-prometheus-reader 4 | resources: 5 | - serviceaccount.yaml 6 | - perf-team.yaml 7 | -------------------------------------------------------------------------------- /components/perf-team-prometheus-reader/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/perf-team-prometheus-reader/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /components/pipeline-service/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - Roming22 5 | - adambkaplan 6 | 7 | reviewers: 8 | - Roming22 9 | - adambkaplan 10 | - ramessesii2 11 | - xinredhat 12 | - enarha 13 | - aThorp96 14 | -------------------------------------------------------------------------------- /components/pipeline-service/base/certificates/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - tekton-results 5 | -------------------------------------------------------------------------------- /components/pipeline-service/base/certificates/tekton-results/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - tekton-results-db-ssl.yaml 5 | namespace: tekton-results 6 | -------------------------------------------------------------------------------- /components/pipeline-service/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - openshift-pipelines 5 | - tekton-results 6 | - tekton-logging 7 | -------------------------------------------------------------------------------- /components/pipeline-service/base/external-secrets/openshift-pipelines/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - chains-signing-secrets.yaml 5 | - chains-public-key.yaml 6 | -------------------------------------------------------------------------------- /components/pipeline-service/base/external-secrets/tekton-logging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - tekton-results-s3.yaml 5 | namespace: tekton-logging 6 | -------------------------------------------------------------------------------- /components/pipeline-service/base/external-secrets/tekton-results/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - tekton-results-database.yaml 5 | - tekton-results-s3.yaml 6 | namespace: tekton-results 7 | -------------------------------------------------------------------------------- /components/pipeline-service/base/rbac/cluster-role/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - pipeline-service-sre.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - cluster-role 5 | - openshift-pipelines 6 | - tekton-results 7 | - tekton-logging 8 | -------------------------------------------------------------------------------- /components/pipeline-service/base/rbac/openshift-pipelines/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: openshift-pipelines 4 | resources: 5 | - pipeline-service-sre.yaml 6 | - resolution-req-perms-exporter.yaml 7 | -------------------------------------------------------------------------------- /components/pipeline-service/base/rbac/tekton-logging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: tekton-logging 4 | resources: 5 | - pipeline-service-sre.yaml 6 | -------------------------------------------------------------------------------- /components/pipeline-service/base/rbac/tekton-results/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: tekton-results 4 | resources: 5 | - pipeline-service-sre.yaml 6 | -------------------------------------------------------------------------------- /components/pipeline-service/base/testing/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ns.yaml 5 | - rbac.yaml 6 | -------------------------------------------------------------------------------- /components/pipeline-service/base/testing/ns.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: Namespace 4 | metadata: 5 | name: plnsvc-tests 6 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-ocp-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-ocp-p01/resources/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-ocp-p01/github-app 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-ocp-p01/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: production/pipeline-service/kflux-ocp-p01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-ocp-p01/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-ocp-p01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-ocp-p01/resources/tekton-results-database-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/external-resources/appsrep09ue1/kflux-ocp-p01/kflux-ocp-p01-plnsvc-rds 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-ocp-p01/resources/tekton-results-s3-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/terraform-resources/appsrep09ue1/kflux-ocp-p01/kflux-ocp-p01-plnsvc-s3 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh02/resources/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh02/github-app 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh02/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: production/pipeline-service/kflux-prd-rh02/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh02/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh02/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh02/resources/tekton-results-database-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/external-resources/appsrep09ue1/kflux-prd-rh02/kflux-prd-rh02-plnsvc-rds 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh02/resources/tekton-results-s3-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/terraform-resources/appsrep09ue1/kflux-prd-rh02/kflux-prd-rh02-plnsvc-s3 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh03/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh03/resources/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh03/github-app 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh03/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: production/pipeline-service/kflux-prd-rh03/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/kflux-prd-rh03/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/kflux-prd-rh03/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-m01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-m01/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: production/pipeline-service/stone-prod-m01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-m01/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/stone-prod-m01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-m01/resources/tekton-results-database-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/external-resources/appsrep11ue1/stonesoup-infra-production/multi-tenant-prod-plnsvc-rds 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-m01/resources/tekton-results-s3-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/terraform-resources/appsrep11ue1/stonesoup-infra-production/multi-tenant-prod-plnsvc-s3 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-rh01/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: production/pipeline-service/stone-prod-rh01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-rh01/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/stone-prod-rh01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-rh01/resources/tekton-results-database-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/external-resources/appsrep11ue1/stonesoup-infra-production/redhat-prod-plnsvc-rds 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prd-rh01/resources/tekton-results-s3-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/terraform-resources/appsrep11ue1/stonesoup-infra-production/redhat-prod-plnsvc-s3 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p01/resources/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/stone-prod-p01/github-app 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p01/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: production/pipeline-service/stone-prod-p01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p01/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/stone-prod-p01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p01/resources/tekton-results-database-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/external-resources/appsrep09ue1/stone-prod-p01/stone-prod-p01-plnsvc-rds 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p01/resources/tekton-results-s3-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/terraform-resources/appsrep09ue1/stone-prod-p01/stone-prod-p01-plnsvc-s3 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p02/resources/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/stone-prod-p02/github-app 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p02/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: production/pipeline-service/stone-prod-p02/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p02/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/pipeline-service/stone-prod-p02/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p02/resources/tekton-results-database-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/external-resources/appsrep09ue1/konflux-internal-prod/stone-prod-p02-plnsvc-rds 5 | -------------------------------------------------------------------------------- /components/pipeline-service/production/stone-prod-p02/resources/tekton-results-s3-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/terraform-resources/appsrep09ue1/konflux-internal-prod/stone-prod-p02-plnsvc-s3 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stage-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stage-p01/resources/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/pipeline-service/stone-stage-p01/github-app 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stage-p01/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: staging/pipeline-service/stone-stage-p01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stage-p01/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/pipeline-service/stone-stage-p01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stage-p01/resources/tekton-results-database-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/external-resources/appsres09ue1/stone-stage-p01/stone-stage-p01-plnsvc-rds 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stage-p01/resources/tekton-results-s3-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/terraform-resources/appsres09ue1/stone-stage-p01/stone-stage-p01-plnsvc-s3 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stg-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stg-rh01/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: staging/pipeline-service/stone-stage-rh01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stg-rh01/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/pipeline-service/stone-stage-rh01/chains-signing-secret 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stg-rh01/resources/tekton-results-database-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/external-resources/appsres11ue1/stonesoup-infra-stage/redhat-staging-plnsvc-rds 5 | -------------------------------------------------------------------------------- /components/pipeline-service/staging/stone-stg-rh01/resources/tekton-results-s3-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: integrations-output/terraform-resources/appsres11ue1/stonesoup-infra-stage/redhat-stg-plnsvc-s3 5 | -------------------------------------------------------------------------------- /components/power-monitoring/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - raks-tt 5 | - mikebonnet 6 | - mftb 7 | -------------------------------------------------------------------------------- /components/project-controller/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - ifireball 5 | - gbenhaim 6 | - avi-biton 7 | - amisstea 8 | - yftacherzog 9 | - hmariset 10 | -------------------------------------------------------------------------------- /components/project-controller/README.md: -------------------------------------------------------------------------------- 1 | # PROJECT-CONTROLLER 2 | 3 | Allow users to manage projects and development streams in Konflux. Related information can be found at the [project-controller repository](https://github.com/konflux-ci/project-controller) 4 | -------------------------------------------------------------------------------- /components/project-controller/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - project-controller.yaml 6 | - allow-argocd-to-manage.yaml 7 | - argocd-permissions.yaml 8 | 9 | namespace: project-controller 10 | -------------------------------------------------------------------------------- /components/pulp-access-controller/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - YasenT 5 | 6 | reviewers: 7 | - YasenT -------------------------------------------------------------------------------- /components/pulp-access-controller/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base -------------------------------------------------------------------------------- /components/pulp-access-controller/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base -------------------------------------------------------------------------------- /components/quality-dashboard/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - sawood14012 5 | - rhopp 6 | - jkopriva 7 | - flacatus 8 | - psturc -------------------------------------------------------------------------------- /components/quality-dashboard/base/dex/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - https://github.com/konflux-ci/quality-dashboard/dex/deploy/base?ref=6c8151c70ca56edbd9e547a8baa1b0494d629c60 3 | 4 | apiVersion: kustomize.config.k8s.io/v1beta1 5 | kind: Kustomization -------------------------------------------------------------------------------- /components/quality-dashboard/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - backend/ 3 | - dex/ 4 | - frontend/ 5 | 6 | apiVersion: kustomize.config.k8s.io/v1beta1 7 | kind: Kustomization -------------------------------------------------------------------------------- /components/quality-dashboard/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - quality-dashboard.yaml -------------------------------------------------------------------------------- /components/quality-dashboard/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base -------------------------------------------------------------------------------- /components/quality-dashboard/staging/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - quality-dashboard-secrets.yaml 5 | namespace: quality-dashboard -------------------------------------------------------------------------------- /components/quality-dashboard/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - external-secrets 6 | - ../base/rbac -------------------------------------------------------------------------------- /components/release/k-components/manager-resources-patch/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1alpha1 2 | kind: Component 3 | 4 | patches: 5 | - path: manager_resources_patch.yaml 6 | -------------------------------------------------------------------------------- /components/release/staging/kubearchive-config-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/resources 4 | value: 5 | - selector: 6 | apiVersion: appstudio.redhat.com/v1alpha1 7 | kind: Release 8 | archiveWhen: has(status.completionTime) 9 | -------------------------------------------------------------------------------- /components/repository-validator/development/config.json: -------------------------------------------------------------------------------- 1 | [""] 2 | -------------------------------------------------------------------------------- /components/sandbox/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - mfrancisc 5 | - MatousJobanek 6 | - xcoulon 7 | - alexeykazakov 8 | - rajivnathan 9 | - filariow 10 | - sadlerap 11 | - dperaza4dustbit 12 | -------------------------------------------------------------------------------- /components/sandbox/common/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ./rbac 5 | - ./olm-restart 6 | -------------------------------------------------------------------------------- /components/sandbox/common/olm-restart/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: ksaw-common 4 | resources: 5 | - cronjob.yaml 6 | - sandbox-sre-olm-restart.yaml 7 | -------------------------------------------------------------------------------- /components/sandbox/common/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - sandbox-sre-admins.yaml 5 | -------------------------------------------------------------------------------- /components/sandbox/tiers/src/appstudio-env/spacerole_admin.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: template.openshift.io/v1 2 | kind: Template 3 | metadata: {} 4 | objects: [] 5 | # The user doesn't have any permissions in the namespace 6 | -------------------------------------------------------------------------------- /components/sandbox/tiers/src/appstudio-env/spacerole_contributor.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: template.openshift.io/v1 2 | kind: Template 3 | metadata: {} 4 | objects: [] 5 | # The user doesn't have any permissions in the namespace 6 | -------------------------------------------------------------------------------- /components/sandbox/tiers/src/appstudio-env/spacerole_maintainer.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: template.openshift.io/v1 2 | kind: Template 3 | metadata: {} 4 | objects: [] 5 | # The user doesn't have any permissions in the namespace 6 | -------------------------------------------------------------------------------- /components/sandbox/tiers/src/appstudio-env/spacerole_viewer.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: template.openshift.io/v1 2 | kind: Template 3 | metadata: {} 4 | objects: [] 5 | # The user doesn't have any permissions in the namespace 6 | -------------------------------------------------------------------------------- /components/sandbox/tiers/src/konflux-eaas/spacerole_admin.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: template.openshift.io/v1 2 | kind: Template 3 | metadata: {} 4 | objects: [] 5 | # The user doesn't have any permissions in the namespace 6 | -------------------------------------------------------------------------------- /components/sandbox/tiers/src/konflux-eaas/spacerole_contributor.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: template.openshift.io/v1 2 | kind: Template 3 | metadata: {} 4 | objects: [] 5 | # The user doesn't have any permissions in the namespace 6 | -------------------------------------------------------------------------------- /components/sandbox/tiers/src/konflux-eaas/spacerole_maintainer.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: template.openshift.io/v1 2 | kind: Template 3 | metadata: {} 4 | objects: [] 5 | # The user doesn't have any permissions in the namespace 6 | -------------------------------------------------------------------------------- /components/sandbox/tiers/src/konflux-eaas/spacerole_viewer.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: template.openshift.io/v1 2 | kind: Template 3 | metadata: {} 4 | objects: [] 5 | # The user doesn't have any permissions in the namespace 6 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-host-operator/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: toolchain-host-operator 4 | resources: 5 | - ./rbac 6 | - ./monitoring 7 | - ./proxy 8 | - ./olm 9 | - ns.yaml 10 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-host-operator/base/ns.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | annotations: 5 | argocd.argoproj.io/sync-wave: "-5" 6 | name: to-be-added-by-kustomize 7 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-host-operator/base/olm/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: toolchain-host-operator 4 | resources: 5 | - toolchain-host-operator.yaml 6 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-host-operator/base/proxy/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: toolchain-host-operator 4 | resources: 5 | - proxyplugin.yaml 6 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-host-operator/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: toolchain-host-operator 4 | resources: 5 | - sandbox-sre-admins.yaml 6 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-host-operator/production/stone-prd-host1/sandbox-sre-host.yaml: -------------------------------------------------------------------------------- 1 | kind: Namespace 2 | apiVersion: v1 3 | metadata: 4 | name: sandbox-sre-host 5 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-host-operator/staging/stone-stg-host/sandbox-sre-host.yaml: -------------------------------------------------------------------------------- 1 | kind: Namespace 2 | apiVersion: v1 3 | metadata: 4 | name: sandbox-sre-host 5 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-member-operator/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: toolchain-member-operator 4 | resources: 5 | - ./rbac 6 | - ./olm 7 | - ./monitoring 8 | - ns.yaml 9 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-member-operator/base/monitoring/kustomization.yaml: -------------------------------------------------------------------------------- 1 | 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - monitor.yaml 6 | - rbac.yaml 7 | - serviceaccount.yaml 8 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-member-operator/base/ns.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | annotations: 5 | argocd.argoproj.io/sync-wave: "-5" 6 | name: to-be-added-by-kustomize 7 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-member-operator/base/olm/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - toolchain-member-operator.yaml 5 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-member-operator/production/sandbox-sre-member.yaml: -------------------------------------------------------------------------------- 1 | kind: Namespace 2 | apiVersion: v1 3 | metadata: 4 | name: sandbox-sre-member 5 | -------------------------------------------------------------------------------- /components/sandbox/toolchain-member-operator/staging/sandbox-sre-member.yaml: -------------------------------------------------------------------------------- 1 | kind: Namespace 2 | apiVersion: v1 3 | metadata: 4 | name: sandbox-sre-member 5 | -------------------------------------------------------------------------------- /components/smee-client/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - ifireball 5 | - gbenhaim 6 | - amisstea 7 | -------------------------------------------------------------------------------- /components/smee-client/README.md: -------------------------------------------------------------------------------- 1 | # Smee-client component 2 | 3 | The `smee-client` component deploys [gosmee][gs] in client mode. 4 | 5 | This allows a cluster to consume webhooks forwarded via our Smee service. 6 | 7 | [gs]: https://github.com/chmouel/gosmee 8 | -------------------------------------------------------------------------------- /components/smee-client/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deployment.yaml 5 | -------------------------------------------------------------------------------- /components/smee-client/production/kflux-ocp-p01/sever-url-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/template/spec/containers/0/args/1 4 | value: https://smee-smee.apps.stone-prd-host1.wdlc.p1.openshiftapps.com/redhathook14 5 | -------------------------------------------------------------------------------- /components/smee-client/production/stone-prod-p01/sever-url-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/template/spec/containers/0/args/1 4 | value: https://smee-smee.apps.stone-prd-host1.wdlc.p1.openshiftapps.com/redhathook12 5 | -------------------------------------------------------------------------------- /components/smee-client/production/stone-prod-p02/sever-url-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/template/spec/containers/0/args/1 4 | value: https://smee-smee.apps.stone-prd-host1.wdlc.p1.openshiftapps.com/redhathook13 5 | -------------------------------------------------------------------------------- /components/smee-client/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | patches: 6 | - path: sever-url-patch.yaml 7 | target: 8 | name: gosmee-client 9 | kind: Deployment 10 | -------------------------------------------------------------------------------- /components/smee-client/staging/sever-url-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/template/spec/containers/0/args/1 4 | value: https://smee-smee.apps.stone-stg-host.qc0p.p1.openshiftapps.com/redhathook12 5 | -------------------------------------------------------------------------------- /components/smee/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - ifireball 5 | - gbenhaim 6 | - amisstea 7 | -------------------------------------------------------------------------------- /components/smee/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - deployment.yaml 6 | - route.yaml 7 | - service.yaml 8 | -------------------------------------------------------------------------------- /components/smee/production/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | patches: 7 | - path: ip-allow-list.yaml 8 | target: 9 | name: smee 10 | kind: Route 11 | -------------------------------------------------------------------------------- /components/smee/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | patches: 7 | - path: ip-allow-list.yaml 8 | target: 9 | name: smee 10 | kind: Route 11 | -------------------------------------------------------------------------------- /components/spacerequest-cleaner/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - yftacherzog 5 | - gbenhaim 6 | - Omeramsc 7 | 8 | reviewers: 9 | - yftacherzog 10 | - gbenhaim 11 | - Omeramsc 12 | -------------------------------------------------------------------------------- /components/spacerequest-cleaner/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - namespace.yaml 6 | - rbac.yaml 7 | - cronjob.yaml 8 | -------------------------------------------------------------------------------- /components/spacerequest-cleaner/base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: spacerequest-cleaner 5 | -------------------------------------------------------------------------------- /components/spacerequest-cleaner/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - ../base 6 | 7 | namespace: spacerequest-cleaner 8 | -------------------------------------------------------------------------------- /components/spacerequest-cleaner/production/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - ../base 6 | 7 | namespace: spacerequest-cleaner 8 | -------------------------------------------------------------------------------- /components/spacerequest-cleaner/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - ../base 6 | 7 | namespace: spacerequest-cleaner 8 | -------------------------------------------------------------------------------- /components/sprayproxy/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - rbac 6 | -------------------------------------------------------------------------------- /components/sprayproxy/base/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - pipeline-service-sre.yaml 5 | -------------------------------------------------------------------------------- /components/sprayproxy/base/servicemonitor-rbacproxy/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - servicemonitor.yaml 3 | - auth-proxy-clusterrolebinding.yaml -------------------------------------------------------------------------------- /components/tekton-ci/base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: tekton-ci 5 | annotations: 6 | # Keeps PipelineRuns for 24h. 7 | operator.tekton.dev/prune.keep-since: 1440 8 | -------------------------------------------------------------------------------- /components/tekton-ci/production/infra-deployments-pr-creator.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/tekton-ci/infra-deployments-pr-creator 5 | -------------------------------------------------------------------------------- /components/tekton-ci/production/quay-push-secret.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/tekton-ci/quay-push-secret 5 | -------------------------------------------------------------------------------- /components/tekton-ci/production/snyk-shared-token.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/build/tekton-ci/snyk-shared-secret 5 | -------------------------------------------------------------------------------- /components/tekton-ci/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../base/external-secrets 6 | -------------------------------------------------------------------------------- /components/tracing/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - mike-kingsbury 5 | - mftb 6 | - pacho-rh 7 | - raks-tt 8 | - martysp21 9 | - TominoFTW 10 | - FaisalAl-Rayes 11 | - mike-kingsbury 12 | - kubasikus 13 | -------------------------------------------------------------------------------- /components/tracing/otel-collector/base/enable-tekton-tracing/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - enable-tekton-tracing.yaml 5 | -------------------------------------------------------------------------------- /components/tracing/otel-collector/base/external-secrets/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - signalfx-api-key.yaml 5 | namespace: konflux-otel 6 | -------------------------------------------------------------------------------- /components/tracing/otel-collector/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - external-secrets 5 | - enable-tekton-tracing 6 | -------------------------------------------------------------------------------- /components/tracing/otel-collector/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | patchesStrategicMerge: 6 | - patch-delete-external-secrets.yaml 7 | -------------------------------------------------------------------------------- /components/tracing/otel-collector/development/patch-delete-external-secrets.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: external-secrets.io/v1beta1 3 | kind: ExternalSecret 4 | metadata: 5 | name: signalfx-api-key 6 | $patch: delete 7 | --- 8 | -------------------------------------------------------------------------------- /components/tracing/otel-collector/production/signalfx-api-key-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: production/tracing/signalfx 5 | 6 | -------------------------------------------------------------------------------- /components/tracing/otel-collector/staging/signalfx-api-key-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: staging/tracing/signalfx 5 | 6 | -------------------------------------------------------------------------------- /components/ui/base/chrome/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - chrome-frontend.yaml 5 | -------------------------------------------------------------------------------- /components/ui/base/hac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - hac-core-frontend.yaml 5 | - hac-dev.yaml 6 | -------------------------------------------------------------------------------- /components/ui/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - chrome 5 | - hac 6 | - ns.yaml 7 | - proxy 8 | namespace: rhtap-ui 9 | -------------------------------------------------------------------------------- /components/ui/base/ns.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: rhtap-ui 5 | -------------------------------------------------------------------------------- /components/ui/base/proxy/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - proxy.yaml 5 | configMapGenerator: 6 | - name: proxy 7 | files: 8 | - nginx.conf 9 | 10 | -------------------------------------------------------------------------------- /components/ui/development/reduce-replicas.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 1 5 | -------------------------------------------------------------------------------- /components/ui/development/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: "@TBA" 5 | -------------------------------------------------------------------------------- /components/ui/production/kflux-ocp-p01/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux.apps.kflux-ocp-p01.7ayg.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/ui/production/stone-prod-p01/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux.apps.stone-prod-p01.wcfb.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/ui/production/stone-prod-p02/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux.apps.stone-prod-p02.hjvn.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/ui/staging/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux.apps.stone-stage-p01.hpmt.p1.openshiftapps.com 5 | -------------------------------------------------------------------------------- /components/workspaces/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://go.k8s.io/owners 2 | 3 | approvers: 4 | - dperaza4dustbit 5 | - filariow 6 | - sadlerap 7 | 8 | reviewers: 9 | - dperaza4dustbit 10 | - filariow 11 | - sadlerap 12 | -------------------------------------------------------------------------------- /components/workspaces/production/kflux-ocp-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../team/migration 5 | -------------------------------------------------------------------------------- /components/workspaces/production/stone-prd-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../team/migration 5 | -------------------------------------------------------------------------------- /components/workspaces/production/stone-prod-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../team/migration 5 | -------------------------------------------------------------------------------- /components/workspaces/production/stone-prod-p02/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../team/migration 5 | -------------------------------------------------------------------------------- /components/workspaces/staging/stone-stage-p01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../team/migration 5 | -------------------------------------------------------------------------------- /components/workspaces/staging/stone-stg-rh01/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../team/kyverno 5 | - ../../team/migration 6 | -------------------------------------------------------------------------------- /components/workspaces/team/kyverno/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - konflux-core-kyverno-clusterrolebindings.yaml 5 | -------------------------------------------------------------------------------- /components/workspaces/team/migration/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - temp-workspace-team-rbac.yaml 5 | -------------------------------------------------------------------------------- /configs/disable-csvcopy-for-all-cluster/cluster.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: operators.coreos.com/v1 2 | kind: OLMConfig 3 | metadata: 4 | name: cluster 5 | spec: 6 | features: 7 | disableCopiedCSVs: true 8 | -------------------------------------------------------------------------------- /configs/disable-csvcopy-for-all-cluster/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - cluster.yaml 5 | -------------------------------------------------------------------------------- /configs/enable-dvo-for-all-cluster/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: deployment-validation-operator 4 | resources: 5 | - install-dvo.yaml 6 | - configure-dvo.yaml 7 | -------------------------------------------------------------------------------- /configs/etcd-defrag/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - namespace.yaml 5 | - cluster-role.yaml 6 | - role-binding.yaml 7 | - serviceaccount.yaml 8 | - cronjob.yaml 9 | -------------------------------------------------------------------------------- /configs/etcd-defrag/base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: etcd-maintenance 5 | -------------------------------------------------------------------------------- /configs/etcd-defrag/base/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: etcd-maintenance 6 | namespace: etcd-maintenance 7 | -------------------------------------------------------------------------------- /configs/etcd-defrag/production/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /configs/etcd-defrag/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /configs/ingresscontroller/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - timeout-patch.yaml -------------------------------------------------------------------------------- /configs/ingresscontroller/development/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /configs/ingresscontroller/production/stone-prd-host1/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - ../../base 6 | -------------------------------------------------------------------------------- /configs/ingresscontroller/staging/stone-stg-host/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - ../../base 6 | -------------------------------------------------------------------------------- /configs/nvme-storage-configurator/base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: nvme-storage-config 5 | -------------------------------------------------------------------------------- /configs/nvme-storage-configurator/base/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: nvme-storage-configurator 5 | -------------------------------------------------------------------------------- /configs/nvme-storage-configurator/production/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: nvme-storage-config 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /configs/nvme-storage-configurator/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: nvme-storage-config 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /configs/proactive-scaler/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: proactive-scaler 4 | resources: 5 | - namespace.yaml 6 | - priority-class.yaml 7 | - deployments.yaml 8 | -------------------------------------------------------------------------------- /configs/proactive-scaler/base/namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: proactive-scaler 5 | -------------------------------------------------------------------------------- /configs/proactive-scaler/production/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /configs/proactive-scaler/staging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /docs/development/argo-cd-login.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/redhat-appstudio/infra-deployments/9bb9f0f2c938d081abb56fa2ae5a4ff5f7dab5f3/docs/development/argo-cd-login.png -------------------------------------------------------------------------------- /docs/introduction/about.md: -------------------------------------------------------------------------------- 1 | --- 2 | title: StoneSoup Infrastructure Deployments 3 | --- 4 | 5 | Welcome to **StoneSoup Infrastructure Deployments** documentation! 6 | 7 | In the next pages you'll learn how to deploy, test and develop StoneSoup! -------------------------------------------------------------------------------- /docs/testing/e2e-tests.md: -------------------------------------------------------------------------------- 1 | --- 2 | title: End-to-End Tests 3 | --- 4 | 5 | The E2E test suite can be run against a properly bootstrapped cluster. Please refer to [this repo](https://github.com/konflux-ci/e2e-tests) for details on how to build and run the tests. 6 | -------------------------------------------------------------------------------- /hack/build/templates/application.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: appstudio.redhat.com/v1alpha1 2 | kind: Application 3 | metadata: 4 | name: test-application 5 | spec: 6 | description: Test application 7 | displayName: Test application 8 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/backup/dpa-bucket-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: replace 2 | path: /spec/backupLocations/0/velero/objectStorage/bucket 3 | value: backup-{{ shortname }} 4 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/backup/dpa-kmskeyid-patch.yaml: -------------------------------------------------------------------------------- 1 | - op: remove 2 | path: /spec/backupLocations/0/velero/config/kmsKeyId 3 | #- op: replace 4 | # path: /spec/backupLocations/0/velero/config/kmsKeyId 5 | # value: TODO - variable needs to be populated 6 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/build-service/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: {{ env }}/platform/ansible/generated/{{ shortname }}/github-app 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/etcd-shield/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/integration/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: {{ env }}/platform/ansible/generated/{{ shortname }}/github-app 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/knative-eventing/kustomization.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | kind: Kustomization 4 | resources: 5 | - ../base 6 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/konflux-rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | kind: Kustomization 2 | apiVersion: kustomize.config.k8s.io/v1beta1 3 | resources: 4 | - ../base 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/konflux-ui/add-service-certs-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/service.beta.openshift.io~1serving-cert-secret-name 4 | value: serving-cert 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/konflux-ui/set-hostname.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/host 4 | value: konflux-ui.apps.{{ longname }}.openshiftapps.com 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/konflux-ui/set-redirect-uri.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /metadata/annotations/serviceaccounts.openshift.io~1oauth-redirecturi.konflux 4 | value: https://konflux-ui.apps.{{ longname }}.openshiftapps.com/idp/callback 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/konflux-ui/set-replicas-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/replicas 4 | value: 3 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/kyverno/job_resources.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/template/spec/containers/0/resources 4 | value: 5 | requests: 6 | cpu: 100m 7 | memory: 256M 8 | limits: 9 | cpu: 400m 10 | memory: 256M 11 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/mintmaker/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: {{ env }}/platform/ansible/generated/{{ shortname }}/github-app 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/monitoring/logging/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | - ../../base/logging-operator-prerequisite 6 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/monitoring/prometheus/cluster-id-label.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/prometheusConfig/externalLabels/source_cluster 4 | value: {{ shortname }} 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/namespace-lister/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base/ 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/pipeline-service/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - deploy.yaml 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/pipeline-service/resources/pipelines-as-code-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: {{ env }}/platform/ansible/generated/{{ shortname }}/github-app 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/pipeline-service/resources/tekton-chains-public-key-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/data/0/remoteRef/key 4 | value: {{ env }}/pipeline-service/{{ shortname }}/chains-signing-secret 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/pipeline-service/resources/tekton-chains-signing-secret-path.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: add 3 | path: /spec/dataFrom/0/extract/key 4 | value: {{ env }}/pipeline-service/{{ shortname }}/chains-signing-secret 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/private/authentication/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../base 5 | components: 6 | - ../../k-components/ldap-url-patch 7 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/private/build-service/webhook-config.json: -------------------------------------------------------------------------------- 1 | { 2 | "https://github.com": "{{ smee_webhook_url }}", 3 | "https://gitlab.com": "{{ smee_webhook_url }}" 4 | } 5 | -------------------------------------------------------------------------------- /hack/new-cluster/templates/private/smee-client/sever-url-patch.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | - op: replace 3 | path: /spec/template/spec/containers/0/args/1 4 | value: "{{ smee_webhook_url }}" 5 | -------------------------------------------------------------------------------- /hack/secret-creator/quality-dashboard/.gitignore: -------------------------------------------------------------------------------- 1 | dex-config.yaml -------------------------------------------------------------------------------- /index.html: -------------------------------------------------------------------------------- 1 | --- 2 | layout: home 3 | author_profile: false 4 | --- 5 |

StoneSoup Infrastructure Deployments

6 | --------------------------------------------------------------------------------