From 549904b2540c4fe5f64045e3fcca32702d39d9ff Mon Sep 17 00:00:00 2001 From: Camila Macedo <7708031+camilamacedo86@users.noreply.github.com> Date: Thu, 7 Aug 2025 19:04:57 +0100 Subject: [PATCH] [OLMv1] Remove Preflight checks since those were migrated to OTE --- test/extended/olm/olmv1-preflight.go | 136 - test/extended/testdata/bindata.go | 2459 ----------------- .../olmv1/install-pipeline-operator-0.yaml | 334 --- .../olmv1/install-pipeline-operator-1.yaml | 329 --- .../olmv1/install-pipeline-operator-2.yaml | 330 --- .../olmv1/install-pipeline-operator-3.yaml | 329 --- .../olmv1/install-pipeline-operator-4.yaml | 347 --- .../olmv1/install-pipeline-operator-5.yaml | 322 --- .../olmv1/install-pipeline-operator-6.yaml | 328 --- .../generated/zz_generated.annotations.go | 12 - zz_generated.manifests/test-reporting.yaml | 20 - 11 files changed, 4946 deletions(-) delete mode 100644 test/extended/olm/olmv1-preflight.go delete mode 100644 test/extended/testdata/olmv1/install-pipeline-operator-0.yaml delete mode 100644 test/extended/testdata/olmv1/install-pipeline-operator-1.yaml delete mode 100644 test/extended/testdata/olmv1/install-pipeline-operator-2.yaml delete mode 100644 test/extended/testdata/olmv1/install-pipeline-operator-3.yaml delete mode 100644 test/extended/testdata/olmv1/install-pipeline-operator-4.yaml delete mode 100644 test/extended/testdata/olmv1/install-pipeline-operator-5.yaml delete mode 100644 test/extended/testdata/olmv1/install-pipeline-operator-6.yaml diff --git a/test/extended/olm/olmv1-preflight.go b/test/extended/olm/olmv1-preflight.go deleted file mode 100644 index 8cea1e5a5428..000000000000 --- a/test/extended/olm/olmv1-preflight.go +++ /dev/null @@ -1,136 +0,0 @@ -package operators - -import ( - "context" - "encoding/json" - "fmt" - "path/filepath" - "strings" - "time" - - g "github.com/onsi/ginkgo/v2" - o "github.com/onsi/gomega" - "k8s.io/apimachinery/pkg/api/meta" - metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" - "k8s.io/apimachinery/pkg/util/wait" - - exutil "github.com/openshift/origin/test/extended/util" -) - -var _ = g.Describe("[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] OLMv1 operator preflight checks", func() { - defer g.GinkgoRecover() - - oc := exutil.NewCLI("openshift-operator-controller") - - g.BeforeEach(func() { - exutil.PreTestDump() - }) - - g.AfterEach(func() { - if g.CurrentSpecReport().Failed() { - exutil.DumpPodLogsStartingWith("", oc) - } - }) - - g.It("should report error when {services} are not specified", func(ctx g.SpecContext) { - runNegativePreflightTest(ctx, oc, 1) - }) - - g.It("should report error when {create} verb is not specified", func(ctx g.SpecContext) { - runNegativePreflightTest(ctx, oc, 2) - }) - - g.It("should report error when {ClusterRoleBindings} are not specified", func(ctx g.SpecContext) { - runNegativePreflightTest(ctx, oc, 3) - }) - - g.It("should report error when {ConfigMap:resourceNames} are not all specified", func(ctx g.SpecContext) { - runNegativePreflightTest(ctx, oc, 4) - }) - - g.It("should report error when {clusterextension/finalizer} is not specified", func(ctx g.SpecContext) { - runNegativePreflightTest(ctx, oc, 5) - }) - - g.It("should report error when {escalate, bind} is not specified", func(ctx g.SpecContext) { - runNegativePreflightTest(ctx, oc, 6) - }) -}) - -func runNegativePreflightTest(ctx g.SpecContext, oc *exutil.CLI, iteration int) { - checkFeatureCapability(oc) - - baseDir := exutil.FixturePath("testdata", "olmv1") - crFile := filepath.Join(baseDir, fmt.Sprintf("install-pipeline-operator-%d.yaml", iteration)) - ceFile := filepath.Join(baseDir, "install-pipeline-operator-base.yaml") - - g.By(fmt.Sprintf("applying %s", crFile)) - cleanupCr, unique := applyPreflightFile(oc, "", crFile) - g.DeferCleanup(cleanupCr) - - g.By(fmt.Sprintf("applying %s", ceFile)) - cleanupCe, _ := applyPreflightFile(oc, unique, ceFile) - g.DeferCleanup(cleanupCe) - - ceName := "install-test-ce-" + unique - - g.By("waiting for the ClusterExtention to report failure") - var lastReason string - err := wait.PollUntilContextTimeout(ctx, 5*time.Second, 5*time.Minute, true, - func(ctx context.Context) (bool, error) { - b, err, s := waitForPreflightFailure(oc, ceName) - if lastReason != s { - g.GinkgoLogr.Info(fmt.Sprintf("waitForPreflightFailure: %q", s)) - lastReason = s - } - return b, err - }) - o.Expect(lastReason).To(o.BeEmpty()) - o.Expect(err).NotTo(o.HaveOccurred()) -} - -func applyPreflightFile(oc *exutil.CLI, unique, file string) (func(), string) { - // packageName and version are specified in the files and do not change - return applyResourceFile(oc, "", "", unique, file) -} - -func waitForPreflightFailure(oc *exutil.CLI, ceName string) (bool, error, string) { - var conditions []metav1.Condition - output, err := oc.AsAdmin().WithoutNamespace().Run("get").Args("clusterextensions.olm.operatorframework.io", ceName, "-o=jsonpath={.status.conditions}").Output() - if err != nil { - return false, err, "" - } - // no data yet, so try again - if output == "" { - return false, nil, "no output" - } - if err := json.Unmarshal([]byte(output), &conditions); err != nil { - return false, fmt.Errorf("error in json.Unmarshal(%v): %v", output, err), "" - } - c := meta.FindStatusCondition(conditions, typeProgressing) - if c == nil { - return false, nil, fmt.Sprintf("condition not present: %q", typeProgressing) - } - if c.Status != metav1.ConditionTrue { - return false, nil, fmt.Sprintf("expected status to be %q: %+v", metav1.ConditionTrue, c) - } - - messageFailed := "pre-authorization failed:" - if !strings.Contains(c.Message, messageFailed) { - return false, nil, fmt.Sprintf("expected message to contain %q: %+v", messageFailed, c) - } - - messageServiceAccount := "service account requires the following permissions to manage cluster extension:" - if !strings.Contains(c.Message, messageServiceAccount) { - return false, nil, fmt.Sprintf("expected message to contain %q: %+v", messageServiceAccount, c) - } - - c = meta.FindStatusCondition(conditions, typeInstalled) - if c == nil { - return false, nil, fmt.Sprintf("condition not present: %q", typeInstalled) - } - if c.Status != metav1.ConditionFalse { - return false, nil, fmt.Sprintf("expected status to be %q: %+v", metav1.ConditionFalse, c) - } - return true, nil, "" -} diff --git a/test/extended/testdata/bindata.go b/test/extended/testdata/bindata.go index c4ead0317569..714f62dffb46 100644 --- a/test/extended/testdata/bindata.go +++ b/test/extended/testdata/bindata.go @@ -467,13 +467,6 @@ // test/extended/testdata/olmv1/install-catalog.yaml // test/extended/testdata/olmv1/install-openshift-pipelines-operator-ownns.yaml // test/extended/testdata/olmv1/install-operator.yaml -// test/extended/testdata/olmv1/install-pipeline-operator-0.yaml -// test/extended/testdata/olmv1/install-pipeline-operator-1.yaml -// test/extended/testdata/olmv1/install-pipeline-operator-2.yaml -// test/extended/testdata/olmv1/install-pipeline-operator-3.yaml -// test/extended/testdata/olmv1/install-pipeline-operator-4.yaml -// test/extended/testdata/olmv1/install-pipeline-operator-5.yaml -// test/extended/testdata/olmv1/install-pipeline-operator-6.yaml // test/extended/testdata/olmv1/install-pipeline-operator-base.yaml // test/extended/testdata/olmv1/install-quay-operator-ownns.yaml // test/extended/testdata/olmv1/install-quay-operator-singlens.yaml @@ -51132,2444 +51125,6 @@ func testExtendedTestdataOlmv1InstallOperatorYaml() (*asset, error) { return a, nil } -var _testExtendedTestdataOlmv1InstallPipelineOperator0Yaml = []byte(`# This is the baseline RBAC needed to install the operator. -# Other versions of install-pipeline-operator-X.yaml have had something removed -# So, diff against this version to know exactly what has been removed (even though -# there is a comment at the top of the file). -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch -`) - -func testExtendedTestdataOlmv1InstallPipelineOperator0YamlBytes() ([]byte, error) { - return _testExtendedTestdataOlmv1InstallPipelineOperator0Yaml, nil -} - -func testExtendedTestdataOlmv1InstallPipelineOperator0Yaml() (*asset, error) { - bytes, err := testExtendedTestdataOlmv1InstallPipelineOperator0YamlBytes() - if err != nil { - return nil, err - } - - info := bindataFileInfo{name: "test/extended/testdata/olmv1/install-pipeline-operator-0.yaml", size: 0, mode: os.FileMode(0), modTime: time.Unix(0, 0)} - a := &asset{bytes: bytes, info: info} - return a, nil -} - -var _testExtendedTestdataOlmv1InstallPipelineOperator1Yaml = []byte(`# Remove (namespace-scoped) services from resources -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch -`) - -func testExtendedTestdataOlmv1InstallPipelineOperator1YamlBytes() ([]byte, error) { - return _testExtendedTestdataOlmv1InstallPipelineOperator1Yaml, nil -} - -func testExtendedTestdataOlmv1InstallPipelineOperator1Yaml() (*asset, error) { - bytes, err := testExtendedTestdataOlmv1InstallPipelineOperator1YamlBytes() - if err != nil { - return nil, err - } - - info := bindataFileInfo{name: "test/extended/testdata/olmv1/install-pipeline-operator-1.yaml", size: 0, mode: os.FileMode(0), modTime: time.Unix(0, 0)} - a := &asset{bytes: bytes, info: info} - return a, nil -} - -var _testExtendedTestdataOlmv1InstallPipelineOperator2Yaml = []byte(`# Remove create verb from '' API group -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch -`) - -func testExtendedTestdataOlmv1InstallPipelineOperator2YamlBytes() ([]byte, error) { - return _testExtendedTestdataOlmv1InstallPipelineOperator2Yaml, nil -} - -func testExtendedTestdataOlmv1InstallPipelineOperator2Yaml() (*asset, error) { - bytes, err := testExtendedTestdataOlmv1InstallPipelineOperator2YamlBytes() - if err != nil { - return nil, err - } - - info := bindataFileInfo{name: "test/extended/testdata/olmv1/install-pipeline-operator-2.yaml", size: 0, mode: os.FileMode(0), modTime: time.Unix(0, 0)} - a := &asset{bytes: bytes, info: info} - return a, nil -} - -var _testExtendedTestdataOlmv1InstallPipelineOperator3Yaml = []byte(`# Remove CRB from list of resources -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch -`) - -func testExtendedTestdataOlmv1InstallPipelineOperator3YamlBytes() ([]byte, error) { - return _testExtendedTestdataOlmv1InstallPipelineOperator3Yaml, nil -} - -func testExtendedTestdataOlmv1InstallPipelineOperator3Yaml() (*asset, error) { - bytes, err := testExtendedTestdataOlmv1InstallPipelineOperator3YamlBytes() - if err != nil { - return nil, err - } - - info := bindataFileInfo{name: "test/extended/testdata/olmv1/install-pipeline-operator-3.yaml", size: 0, mode: os.FileMode(0), modTime: time.Unix(0, 0)} - a := &asset{bytes: bytes, info: info} - return a, nil -} - -var _testExtendedTestdataOlmv1InstallPipelineOperator4Yaml = []byte(`# Be explicit about configmap resource names -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - configmaps - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - resourceNames: - - config-logging - - tekton-config-defaults - - tekton-config-observability -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch -`) - -func testExtendedTestdataOlmv1InstallPipelineOperator4YamlBytes() ([]byte, error) { - return _testExtendedTestdataOlmv1InstallPipelineOperator4Yaml, nil -} - -func testExtendedTestdataOlmv1InstallPipelineOperator4Yaml() (*asset, error) { - bytes, err := testExtendedTestdataOlmv1InstallPipelineOperator4YamlBytes() - if err != nil { - return nil, err - } - - info := bindataFileInfo{name: "test/extended/testdata/olmv1/install-pipeline-operator-4.yaml", size: 0, mode: os.FileMode(0), modTime: time.Unix(0, 0)} - a := &asset{bytes: bytes, info: info} - return a, nil -} - -var _testExtendedTestdataOlmv1InstallPipelineOperator5Yaml = []byte(`# Remove clusterextensions/finalizers -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch -`) - -func testExtendedTestdataOlmv1InstallPipelineOperator5YamlBytes() ([]byte, error) { - return _testExtendedTestdataOlmv1InstallPipelineOperator5Yaml, nil -} - -func testExtendedTestdataOlmv1InstallPipelineOperator5Yaml() (*asset, error) { - bytes, err := testExtendedTestdataOlmv1InstallPipelineOperator5YamlBytes() - if err != nil { - return nil, err - } - - info := bindataFileInfo{name: "test/extended/testdata/olmv1/install-pipeline-operator-5.yaml", size: 0, mode: os.FileMode(0), modTime: time.Unix(0, 0)} - a := &asset{bytes: bytes, info: info} - return a, nil -} - -var _testExtendedTestdataOlmv1InstallPipelineOperator6Yaml = []byte(`apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch -`) - -func testExtendedTestdataOlmv1InstallPipelineOperator6YamlBytes() ([]byte, error) { - return _testExtendedTestdataOlmv1InstallPipelineOperator6Yaml, nil -} - -func testExtendedTestdataOlmv1InstallPipelineOperator6Yaml() (*asset, error) { - bytes, err := testExtendedTestdataOlmv1InstallPipelineOperator6YamlBytes() - if err != nil { - return nil, err - } - - info := bindataFileInfo{name: "test/extended/testdata/olmv1/install-pipeline-operator-6.yaml", size: 0, mode: os.FileMode(0), modTime: time.Unix(0, 0)} - a := &asset{bytes: bytes, info: info} - return a, nil -} - var _testExtendedTestdataOlmv1InstallPipelineOperatorBaseYaml = []byte(`apiVersion: v1 kind: ServiceAccount metadata: @@ -59399,13 +56954,6 @@ var _bindata = map[string]func() (*asset, error){ "test/extended/testdata/olmv1/install-catalog.yaml": testExtendedTestdataOlmv1InstallCatalogYaml, "test/extended/testdata/olmv1/install-openshift-pipelines-operator-ownns.yaml": testExtendedTestdataOlmv1InstallOpenshiftPipelinesOperatorOwnnsYaml, "test/extended/testdata/olmv1/install-operator.yaml": testExtendedTestdataOlmv1InstallOperatorYaml, - "test/extended/testdata/olmv1/install-pipeline-operator-0.yaml": testExtendedTestdataOlmv1InstallPipelineOperator0Yaml, - "test/extended/testdata/olmv1/install-pipeline-operator-1.yaml": testExtendedTestdataOlmv1InstallPipelineOperator1Yaml, - "test/extended/testdata/olmv1/install-pipeline-operator-2.yaml": testExtendedTestdataOlmv1InstallPipelineOperator2Yaml, - "test/extended/testdata/olmv1/install-pipeline-operator-3.yaml": testExtendedTestdataOlmv1InstallPipelineOperator3Yaml, - "test/extended/testdata/olmv1/install-pipeline-operator-4.yaml": testExtendedTestdataOlmv1InstallPipelineOperator4Yaml, - "test/extended/testdata/olmv1/install-pipeline-operator-5.yaml": testExtendedTestdataOlmv1InstallPipelineOperator5Yaml, - "test/extended/testdata/olmv1/install-pipeline-operator-6.yaml": testExtendedTestdataOlmv1InstallPipelineOperator6Yaml, "test/extended/testdata/olmv1/install-pipeline-operator-base.yaml": testExtendedTestdataOlmv1InstallPipelineOperatorBaseYaml, "test/extended/testdata/olmv1/install-quay-operator-ownns.yaml": testExtendedTestdataOlmv1InstallQuayOperatorOwnnsYaml, "test/extended/testdata/olmv1/install-quay-operator-singlens.yaml": testExtendedTestdataOlmv1InstallQuayOperatorSinglensYaml, @@ -60213,13 +57761,6 @@ var _bintree = &bintree{nil, map[string]*bintree{ "install-catalog.yaml": {testExtendedTestdataOlmv1InstallCatalogYaml, map[string]*bintree{}}, "install-openshift-pipelines-operator-ownns.yaml": {testExtendedTestdataOlmv1InstallOpenshiftPipelinesOperatorOwnnsYaml, map[string]*bintree{}}, "install-operator.yaml": {testExtendedTestdataOlmv1InstallOperatorYaml, map[string]*bintree{}}, - "install-pipeline-operator-0.yaml": {testExtendedTestdataOlmv1InstallPipelineOperator0Yaml, map[string]*bintree{}}, - "install-pipeline-operator-1.yaml": {testExtendedTestdataOlmv1InstallPipelineOperator1Yaml, map[string]*bintree{}}, - "install-pipeline-operator-2.yaml": {testExtendedTestdataOlmv1InstallPipelineOperator2Yaml, map[string]*bintree{}}, - "install-pipeline-operator-3.yaml": {testExtendedTestdataOlmv1InstallPipelineOperator3Yaml, map[string]*bintree{}}, - "install-pipeline-operator-4.yaml": {testExtendedTestdataOlmv1InstallPipelineOperator4Yaml, map[string]*bintree{}}, - "install-pipeline-operator-5.yaml": {testExtendedTestdataOlmv1InstallPipelineOperator5Yaml, map[string]*bintree{}}, - "install-pipeline-operator-6.yaml": {testExtendedTestdataOlmv1InstallPipelineOperator6Yaml, map[string]*bintree{}}, "install-pipeline-operator-base.yaml": {testExtendedTestdataOlmv1InstallPipelineOperatorBaseYaml, map[string]*bintree{}}, "install-quay-operator-ownns.yaml": {testExtendedTestdataOlmv1InstallQuayOperatorOwnnsYaml, map[string]*bintree{}}, "install-quay-operator-singlens.yaml": {testExtendedTestdataOlmv1InstallQuayOperatorSinglensYaml, map[string]*bintree{}}, diff --git a/test/extended/testdata/olmv1/install-pipeline-operator-0.yaml b/test/extended/testdata/olmv1/install-pipeline-operator-0.yaml deleted file mode 100644 index 3bc743db9bc6..000000000000 --- a/test/extended/testdata/olmv1/install-pipeline-operator-0.yaml +++ /dev/null @@ -1,334 +0,0 @@ -# This is the baseline RBAC needed to install the operator. -# Other versions of install-pipeline-operator-X.yaml have had something removed -# So, diff against this version to know exactly what has been removed (even though -# there is a comment at the top of the file). -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch diff --git a/test/extended/testdata/olmv1/install-pipeline-operator-1.yaml b/test/extended/testdata/olmv1/install-pipeline-operator-1.yaml deleted file mode 100644 index 35471dd1e431..000000000000 --- a/test/extended/testdata/olmv1/install-pipeline-operator-1.yaml +++ /dev/null @@ -1,329 +0,0 @@ -# Remove (namespace-scoped) services from resources -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch diff --git a/test/extended/testdata/olmv1/install-pipeline-operator-2.yaml b/test/extended/testdata/olmv1/install-pipeline-operator-2.yaml deleted file mode 100644 index 11fba49e2af4..000000000000 --- a/test/extended/testdata/olmv1/install-pipeline-operator-2.yaml +++ /dev/null @@ -1,330 +0,0 @@ -# Remove create verb from '' API group -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch diff --git a/test/extended/testdata/olmv1/install-pipeline-operator-3.yaml b/test/extended/testdata/olmv1/install-pipeline-operator-3.yaml deleted file mode 100644 index d2a9f45de9f3..000000000000 --- a/test/extended/testdata/olmv1/install-pipeline-operator-3.yaml +++ /dev/null @@ -1,329 +0,0 @@ -# Remove CRB from list of resources -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch diff --git a/test/extended/testdata/olmv1/install-pipeline-operator-4.yaml b/test/extended/testdata/olmv1/install-pipeline-operator-4.yaml deleted file mode 100644 index 157391563c95..000000000000 --- a/test/extended/testdata/olmv1/install-pipeline-operator-4.yaml +++ /dev/null @@ -1,347 +0,0 @@ -# Be explicit about configmap resource names -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - configmaps - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - resourceNames: - - config-logging - - tekton-config-defaults - - tekton-config-observability -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch diff --git a/test/extended/testdata/olmv1/install-pipeline-operator-5.yaml b/test/extended/testdata/olmv1/install-pipeline-operator-5.yaml deleted file mode 100644 index 207e08845443..000000000000 --- a/test/extended/testdata/olmv1/install-pipeline-operator-5.yaml +++ /dev/null @@ -1,322 +0,0 @@ -# Remove clusterextensions/finalizers -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch - - bind - - escalate -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch diff --git a/test/extended/testdata/olmv1/install-pipeline-operator-6.yaml b/test/extended/testdata/olmv1/install-pipeline-operator-6.yaml deleted file mode 100644 index 7bdb3cf26a31..000000000000 --- a/test/extended/testdata/olmv1/install-pipeline-operator-6.yaml +++ /dev/null @@ -1,328 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: install-test-cr-{UNIQUE} -rules: -- apiGroups: - - olm.operatorframework.io - resources: - - clusterextensions/finalizers - verbs: - - update - # Scoped to the name of the ClusterExtension - resourceNames: - - install-test-ce-{UNIQUE} -- apiGroups: - - '' - resources: - - nodes - verbs: - - list -- apiGroups: - - '' - resources: - - pods - - pods/finalizers - - services - - services/finalizers - - endpoints - - endpoints/finalizers - - persistentvolumeclaims - - persistentvolumeclaims/finalizers - - events - - events/finalizers - - configmaps - - configmaps/finalizers - - secrets - - secrets/finalizers - - pods/log - - limitranges - - limitranges/finalizers - - namespaces - - namespaces/finalizers - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - extensions - - apps - resources: - - ingresses - - ingresses/finalizers - - ingresses/status - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - apps - resources: - - deployments - - deployments/finalizers - - daemonsets - - daemonsets/finalizers - - replicasets - - replicasets/finalizers - - statefulsets - - statefulsets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterroles - - clusterroles/finalizers - - roles - - roles/finalizers - - clusterrolebindings - - clusterrolebindings/finalizers - - rolebindings - - rolebindings/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - '' - resources: - - serviceaccounts - - serviceaccounts/finalizers - verbs: - - impersonate -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - - customresourcedefinitions/finalizers - - customresourcedefinitions/status - verbs: - - get - - create - - update - - delete - - list - - patch - - watch -- apiGroups: - - admissionregistration.k8s.io - resources: - - mutatingwebhookconfigurations - - mutatingwebhookconfigurations/finalizers - - validatingwebhookconfigurations - - validatingwebhookconfigurations/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - build.knative.dev - resources: - - builds - - builds/finalizers - - buildtemplates - - buildtemplates/finalizers - - clusterbuildtemplates - - clusterbuildtemplates/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - extensions - resources: - - deployments - - deployments/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - tekton.dev - - resolution.tekton.dev - - triggers.tekton.dev - - operator.tekton.dev - - pipelinesascode.tekton.dev - - dashboard.tekton.dev - resources: - - '*' - verbs: - - add - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - security.openshift.io - resources: - - securitycontextconstraints - - securitycontextconstraints/finalizers - verbs: - - use - - get - - list - - create - - update - - delete -- apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create -- apiGroups: - - route.openshift.io - resources: - - routes - - routes/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - coordination.k8s.io - resources: - - leases - - leases/finalizers - verbs: - - get - - list - - create - - update - - delete - - patch - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleyamlsamples - - consoleyamlsamples/finalizers - - consoleclidownloads - - consoleclidownloads/finalizers - - consolequickstarts - - consolequickstarts/finalizers - - consolelinks - - consolelinks/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - - horizontalpodautoscalers/finalizers - verbs: - - delete - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - policy - resources: - - poddisruptionbudgets - - poddisruptionbudgets/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - - servicemonitors/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - batch - resources: - - jobs - - jobs/finalizers - - cronjobs - - cronjobs/finalizers - verbs: - - delete - - deletecollection - - create - - patch - - get - - list - - update - - watch -- apiGroups: - - console.openshift.io - resources: - - consoleplugins - - consoleplugins/finalizers - verbs: - - get - - list - - watch - - create - - delete - - update - - patch diff --git a/test/extended/util/annotate/generated/zz_generated.annotations.go b/test/extended/util/annotate/generated/zz_generated.annotations.go index 6399c82c3432..7670bb21bcae 100644 --- a/test/extended/util/annotate/generated/zz_generated.annotations.go +++ b/test/extended/util/annotate/generated/zz_generated.annotations.go @@ -1995,18 +1995,6 @@ var Annotations = map[string]string{ "[sig-olmv1][OCPFeatureGate:NewOLMOwnSingleNamespace][Skipped:Disconnected] OLMv1 operator installation support for singleNamespace watch mode with quay-operator should install a cluster extension successfully": " [Suite:openshift/conformance/parallel]", - "[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] OLMv1 operator preflight checks should report error when {ClusterRoleBindings} are not specified": " [Suite:openshift/conformance/parallel]", - - "[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] OLMv1 operator preflight checks should report error when {ConfigMap:resourceNames} are not all specified": " [Suite:openshift/conformance/parallel]", - - "[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] OLMv1 operator preflight checks should report error when {clusterextension/finalizer} is not specified": " [Suite:openshift/conformance/parallel]", - - "[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] OLMv1 operator preflight checks should report error when {create} verb is not specified": " [Suite:openshift/conformance/parallel]", - - "[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] OLMv1 operator preflight checks should report error when {escalate, bind} is not specified": " [Suite:openshift/conformance/parallel]", - - "[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] OLMv1 operator preflight checks should report error when {services} are not specified": " [Suite:openshift/conformance/parallel]", - "[sig-olmv1][OCPFeatureGate:NewOLM][Skipped:Disconnected] OLMv1 Catalogs should be installed": " [Suite:openshift/conformance/parallel]", "[sig-olmv1][OCPFeatureGate:NewOLM][Skipped:Disconnected] OLMv1 New Catalog Install should fail to install if it has an invalid reference": " [Suite:openshift/conformance/parallel]", diff --git a/zz_generated.manifests/test-reporting.yaml b/zz_generated.manifests/test-reporting.yaml index f77d7b864460..d5d784571771 100644 --- a/zz_generated.manifests/test-reporting.yaml +++ b/zz_generated.manifests/test-reporting.yaml @@ -1015,26 +1015,6 @@ spec: - testName: '[sig-olmv1][OCPFeatureGate:NewOLMOwnSingleNamespace][Skipped:Disconnected] OLMv1 operator installation support for singleNamespace watch mode with quay-operator should install a cluster extension successfully' - - featureGate: NewOLMPreflightPermissionChecks - tests: - - testName: '[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] - OLMv1 operator preflight checks should report error when {ClusterRoleBindings} - are not specified' - - testName: '[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] - OLMv1 operator preflight checks should report error when {ConfigMap:resourceNames} - are not all specified' - - testName: '[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] - OLMv1 operator preflight checks should report error when {clusterextension/finalizer} - is not specified' - - testName: '[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] - OLMv1 operator preflight checks should report error when {create} verb is - not specified' - - testName: '[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] - OLMv1 operator preflight checks should report error when {escalate, bind} - is not specified' - - testName: '[sig-olmv1][OCPFeatureGate:NewOLMPreflightPermissionChecks][Skipped:Disconnected] - OLMv1 operator preflight checks should report error when {services} are not - specified' - featureGate: OrderedNamespaceDeletion tests: - testName: '[sig-api-machinery] OrderedNamespaceDeletion namespace deletion should