bootkube

var (
	// CVOOverrides is the constant to represent contents of cvo-override.yaml file
	// This is a gate to prevent CVO from installing these operators which is conflicting
	// with already owned resources by tectonic-operators.
	// This files can be dropped when the overrides list becomes empty.
	CVOOverrides = template.Must(template.New("cvo-override.yaml").Parse(`
apiVersion: clusterversion.openshift.io/v1
kind: CVOConfig
metadata:
  namespace: openshift-cluster-version
  name: cluster-version-operator
upstream: http://localhost:8080/graph
channel: fast
clusterID: {{.CVOClusterID}}
overrides:
- kind: Deployment                    # this conflicts with kube-core-operator
  namespace: openshift-core-operators
  name: openshift-cluster-kube-apiserver-operator
  unmanaged: true
- kind: Deployment                    # this conflicts with kube-core-operator
  namespace: openshift-core-operators
  name: openshift-cluster-kube-scheduler-operator
  unmanaged: true
- kind: Deployment                    # this conflicts with kube-core-operator
  namespace: openshift-core-operators
  name: openshift-cluster-kube-controller-manager-operator
  unmanaged: true
- kind: Deployment                    # this conflicts with kube-core-operator
  namespace: openshift-cluster-network-operator
  name: cluster-network-operator
  unmanaged: true
- kind: Deployment                    # this conflicts with tectonic-ingress-controller-operator
  namespace: openshift-cluster-ingress-operator
  name: cluster-ingress-operator
  unmanaged: true
- kind: ServiceAccount                # missing run level 0 on the namespace and has 0000_08
  namespace: openshift-cluster-dns-operator
  name: cluster-dns-operator
  unmanaged: true
- kind: Deployment                    # this conflicts with kube-core-operator
  namespace: openshift-cluster-dns-operator
  name: cluster-dns-operator
  unmanaged: true
- kind: APIService                    # packages.apps.redhat.com fails to start properly
  name: v1alpha1.packages.apps.redhat.com
  unmanaged: true
`))
)

var (
	// ClusterApiserverCerts is the constant to represent contents of cluster_apiservercerts.yaml file
	ClusterApiserverCerts = template.Must(template.New("cluster-apiserver-certs.yaml").Parse(`
apiVersion: v1
kind: Secret
type: kubernetes.io/tls
metadata:
  name: cluster-apiserver-certs
  namespace: openshift-cluster-api
  labels:
    api: clusterapi
    apiserver: "true"
data:
  tls.crt: {{.ClusterapiCaCert}}
  tls.key: {{.ClusterapiCaKey}}
`))
)

var (
	// EtcdServiceEndpointsKubeSystem is the constant to represent contents of etcd-service-endpoints.yaml file.
	EtcdServiceEndpointsKubeSystem = template.Must(template.New("etcd-service-endpoints.yaml").Funcs(customTmplFuncs).Parse(`
apiVersion: v1
kind: Endpoints
metadata:
  name: etcd
  namespace: kube-system
  annotations:
    alpha.installer.openshift.io/dns-suffix: {{.EtcdEndpointDNSSuffix}}
subsets:
- addresses:
{{- range $idx, $member := .EtcdEndpointHostnames }}
  - ip: 192.0.2.{{ add $idx 1 }}
    hostname: {{ $member }}
{{- end }}
  ports:
  - name: etcd
    port: 2379
    protocol: TCP
`))
)

var (
	// IgnConfig is the constant to represent contents of ign_config.yaml file
	IgnConfig = template.Must(template.New("ign-config.yaml").Parse(`
apiVersion: v1
kind: Secret
metadata:
  name: ignition-worker
  namespace: openshift-cluster-api
type: Opaque
data:
  userData: {{.WorkerIgnConfig}}
`))
)

var (
	// KubeApiserverSecret is the constant to represent contents of kube_apiserversecret.yaml file
	KubeApiserverSecret = template.Must(template.New("kube-apiserver-secret.yaml").Parse(`
apiVersion: v1
kind: Secret
metadata:
  name: kube-apiserver
  namespace: kube-system
type: Opaque
data:
  aggregator-ca.crt: {{.AggregatorCaCert}}
  aggregator-ca.key: {{.AggregatorCaKey}}
  apiserver.key: {{.ApiserverKey}}
  apiserver.crt: {{.ApiserverCert}}
  apiserver-proxy.key: {{.ApiserverProxyKey}}
  apiserver-proxy.crt: {{.ApiserverProxyCert}}
  service-account.pub: {{.ServiceaccountPub}}
  service-account.key: {{.ServiceaccountKey}}
  root-ca.crt: {{.RootCaCert}}
  kube-ca.crt: {{.KubeCaCert}}
  etcd-client-ca.crt: {{.EtcdCaCert}}
  etcd-client.crt: {{.EtcdClientCert}}
  etcd-client.key: {{.EtcdClientKey}}
  oidc-ca.crt: {{.OidcCaCert}}
  service-serving-ca.crt: {{.ServiceServingCaCert}}
  service-serving-ca.key: {{.ServiceServingCaKey}}
  kubeconfig: {{.OpenshiftLoopbackKubeconfig}}
`))
)

var (
	// KubeCloudConfig is the constant to represent contents of kube_cloudconfig.yaml file
	KubeCloudConfig = template.Must(template.New("kube-cloud-config.yaml").Parse(`
apiVersion: v1
kind: Secret
metadata:
  name: kube-cloud-cfg
  namespace: kube-system
type: Opaque
data:
  config: ""
`))
)

var (
	// KubeControllerManagerSecret is the constant to represent contents of kube_controllermanagersecret.yaml file
	KubeControllerManagerSecret = template.Must(template.New("kube-controller-manager-secret.yaml").Parse(`
apiVersion: v1
kind: Secret
metadata:
  name: kube-controller-manager
  namespace: kube-system
type: Opaque
data:
  service-account.key: {{.ServiceaccountKey}}
  root-ca.crt: {{.RootCaCert}}
  kube-ca.crt: {{.KubeCaCert}}
  kube-ca.key: {{.KubeCaKey}}
`))
)

var (
	// MachineConfigServerTLSSecret is the constant to represent contents of machine_configservertlssecret.yaml file
	MachineConfigServerTLSSecret = template.Must(template.New("machine-config-server-tls-secret.yaml").Parse(`
apiVersion: v1
kind: Secret
metadata:
  name: machine-config-server-tls
  namespace: openshift-machine-config-operator
type: Opaque
data:
  tls.crt: {{.McsTLSCert}}
  tls.key: {{.McsTLSKey}}
`))
)

var (
	// OpenshiftApiserverSecret is the constant to represent contents of openshift_apiserversecret.yaml file
	OpenshiftApiserverSecret = template.Must(template.New("openshift-apiserver-secret.yaml").Parse(`
apiVersion: v1
kind: Secret
metadata:
  name: openshift-apiserver
  namespace: kube-system
type: Opaque
data:
  aggregator-ca.crt: {{.AggregatorCaCert}}
  aggregator-ca.key: {{.AggregatorCaKey}}
  apiserver.key: {{.ApiserverKey}}
  apiserver.crt: {{.ApiserverCert}}
  openshift-apiserver.key: {{.OpenshiftApiserverKey}}
  openshift-apiserver.crt: {{.OpenshiftApiserverCert}}
  apiserver-proxy.key: {{.ApiserverProxyKey}}
  apiserver-proxy.crt: {{.ApiserverProxyCert}}
  service-account.pub: {{.ServiceaccountPub}}
  service-account.key: {{.ServiceaccountKey}}
  root-ca.crt: {{.RootCaCert}}
  kube-ca.crt: {{.KubeCaCert}}
  etcd-client-ca.crt: {{.EtcdCaCert}}
  etcd-client.crt: {{.EtcdClientCert}}
  etcd-client.key: {{.EtcdClientKey}}
  oidc-ca.crt: {{.OidcCaCert}}
  service-serving-ca.crt: {{.ServiceServingCaCert}}
  service-serving-ca.key: {{.ServiceServingCaKey}}
  kubeconfig: {{.OpenshiftLoopbackKubeconfig}}
`))
)

var (
	// OpenshiftServiceCertSignerSecret is the constant to represent the contents of openshift-service-signer-secret.yaml
	OpenshiftServiceCertSignerSecret = template.Must(template.New("openshift-service-signer-secret.yaml").Parse(`
apiVersion: v1
kind: Secret
metadata:
  name: service-serving-cert-signer-signing-key
  namespace: openshift-service-cert-signer
type: kubernetes.io/tls
data:
  tls.crt: {{.ServiceServingCaCert}}
  tls.key: {{.ServiceServingCaKey}}
`))
)

var (
	// Pull is the constant to represent contents of pull.yaml file
	Pull = template.Must(template.New("pull.json").Parse(`
{
  "apiVersion": "v1",
  "kind": "Secret",
  "type": "kubernetes.io/dockerconfigjson",
  "metadata": {
    "namespace": "kube-system",
    "name": "coreos-pull-secret"
  },
  "data": {
    ".dockerconfigjson": "{{.PullSecret}}"
  }
}
`))
)

var (
	// TectonicNetworkOperator represents the template variable for tectonic-network-operator.yaml file
	TectonicNetworkOperator = template.Must(template.New("tectonic-network-operator.yaml").Parse(`
---
apiVersion: apps/v1beta2
kind: DaemonSet
metadata:
  name: tectonic-network-operator
  namespace: kube-system
  labels:
    k8s-app: tectonic-network-operator
    managed-by-channel-operator: "true"
spec:
  selector:
    matchLabels:
      k8s-app: tectonic-network-operator
  updateStrategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      labels:
        k8s-app: tectonic-network-operator
        tectonic-app-version-name: tectonic-network
    spec:
      containers:
        - name: tectonic-network-operator
          image: {{.TectonicNetworkOperatorImage}}
          resources:
            limits:
              cpu: 20m
              memory: 50Mi
            requests:
              cpu: 20m
              memory: 50Mi
          volumeMounts:
            - name: cluster-config
              mountPath: /etc/cluster-config
      hostNetwork: true
      restartPolicy: Always
      imagePullSecrets:
        - name: coreos-pull-secret
      securityContext:
        runAsNonRoot: true
        runAsUser: 65534
      volumes:
        - name: cluster-config
          configMap:
            name: cluster-config-v1
            items:
              - key: network-config
                path: network-config
      nodeSelector:
        node-role.kubernetes.io/master: ""
      tolerations:
        - key: "node-role.kubernetes.io/master"
          operator: "Exists"
          effect: "NoSchedule"
    updateStrategy:
      rollingUpdate:
        maxUnavailable: 1
      type: RollingUpdate
`))
)