feat: Add conversion webhook server

Author: Techassi

Cargo.lock

@@ -11,7 +11,11 @@ repository = "https://github.com/stackabletech/opa-operator"
 
 [workspace.dependencies]
 product-config = { git = "https://github.com/stackabletech/product-config.git", tag = "0.8.0" }
-stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.101.2", features = ["telemetry", "versioned"] }
+stackable-operator = { git = "https://github.com/stackabletech/operator-rs.git", tag = "stackable-operator-0.101.2", features = [
+  "telemetry",
+  "versioned",
+  "webhook",
+] }
 krb5 = { git = "https://github.com/stackabletech/krb5-rs.git", tag = "v0.1.0" }
 
 anyhow = "1.0"

Cargo.nix

@@ -45,8 +45,8 @@ config:
 	fi
 
 crds:
-	mkdir -p deploy/helm/"${OPERATOR_NAME}"/crds
-	cargo run --bin stackable-"${OPERATOR_NAME}" -- crd | yq eval '.metadata.annotations["helm.sh/resource-policy"]="keep"' - > "deploy/helm/${OPERATOR_NAME}/crds/crds.yaml"
+	mkdir -p extra
+	cargo run --bin stackable-"${OPERATOR_NAME}" -- crd > extra/crds.yaml
 
 chart-lint: compile-chart
 	docker run -it -v $(shell pwd):/build/helm-charts -w /build/helm-charts quay.io/helmpack/chart-testing:v3.5.0  ct lint --config deploy/helm/ct.yaml

Cargo.toml

@@ -35,18 +35,12 @@ helm_values = settings.get('helm_values', None)
 
 helm_override_image_repository = 'image.repository=' + registry + '/' + operator_name
 
-# Exclude stale CRDs from Helm chart, and apply the rest
-helm_crds, helm_non_crds = filter_yaml(
-   helm(
-      'deploy/helm/' + operator_name,
-      name=operator_name,
-      namespace="stackable-operators",
-      set=[
-         helm_override_image_repository,
-      ],
-      values=helm_values,
-   ),
-   api_version = "^apiextensions\\.k8s\\.io/.*$",
-   kind = "^CustomResourceDefinition$",
-)
-k8s_yaml(helm_non_crds)
+k8s_yaml(helm(
+   'deploy/helm/' + operator_name,
+   name=operator_name,
+   namespace="stackable-operators",
+   set=[
+      helm_override_image_repository,
+   ],
+   values=helm_values,
+))

Makefile

@@ -36,6 +36,7 @@ pub mod user_info_fetcher;
 
 pub const APP_NAME: &str = "opa";
 pub const OPERATOR_NAME: &str = "opa.stackable.tech";
+pub const FIELD_MANAGER: &str = "opa-operator";
 
 pub const DEFAULT_SERVER_GRACEFUL_SHUTDOWN_TIMEOUT: Duration = Duration::from_minutes_unchecked(2);
 /// Safety puffer to guarantee the graceful shutdown works every time.

Tiltfile

@@ -3,8 +3,9 @@
 #![allow(clippy::result_large_err)]
 use std::sync::Arc;
 
+use anyhow::anyhow;
 use clap::Parser;
-use futures::StreamExt;
+use futures::{FutureExt, StreamExt, TryFutureExt};
 use product_config::ProductConfigManager;
 use stackable_operator::{
     YamlSchema,
@@ -34,6 +35,7 @@ use stackable_operator::{
 use crate::{
     controller::OPA_FULL_CONTROLLER_NAME,
     crd::{OPERATOR_NAME, OpaCluster, OpaClusterVersion, v1alpha2},
+    webhooks::conversion::create_webhook_server,
 };
 
 mod controller;
@@ -42,6 +44,7 @@ mod discovery;
 mod operations;
 mod product_logging;
 mod service;
+mod webhooks;
 
 pub mod built_info {
     include!(concat!(env!("OUT_DIR"), "/built.rs"));
@@ -76,7 +79,7 @@ async fn main() -> anyhow::Result<()> {
             operator_image,
             common:
                 RunArguments {
-                    operator_environment: _,
+                    operator_environment,
                     watch_namespace,
                     product_config,
                     maintenance,
@@ -102,7 +105,8 @@ async fn main() -> anyhow::Result<()> {
 
             let eos_checker =
                 EndOfSupportChecker::new(built_info::BUILT_TIME_UTC, maintenance.end_of_support)?
-                    .run();
+                    .run()
+                    .map(anyhow::Ok);
 
             let product_config = product_config.load(&[
                 "deploy/config-spec/properties.yaml",
@@ -115,16 +119,28 @@ async fn main() -> anyhow::Result<()> {
 
             let kubernetes_cluster_info = client.kubernetes_cluster_info.clone();
 
+            let webhook_server = create_webhook_server(
+                &operator_environment,
+                maintenance.disable_crd_maintenance,
+                client.as_kube_client(),
+            )
+            .await?;
+
+            let webhook_server = webhook_server
+                .run()
+                .map_err(|err| anyhow!(err).context("failed to run webhook server"));
+
             let controller = create_controller(
                 client,
                 product_config,
                 watch_namespace,
                 operator_image.clone(),
                 operator_image,
                 kubernetes_cluster_info,
-            );
+            )
+            .map(anyhow::Ok);
 
-            futures::join!(controller, eos_checker);
+            futures::try_join!(controller, webhook_server, eos_checker)?;
         }
     };