Merge branch 'main' into remove-prometheus-dependency

Author: creydr

.github/workflows/test-e2e-bundle.yml

@@ -0,0 +1,45 @@
+name: Bundle E2E Tests
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  test-bundle-e2e:
+    name: Run on Ubuntu
+    runs-on: ubuntu-latest
+    steps:
+      - name: Clone the code
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+
+      - name: Install the latest version of kind
+        run: |
+          curl -Lo ./kind https://kind.sigs.k8s.io/dl/latest/kind-linux-amd64
+          chmod +x ./kind
+          sudo mv ./kind /usr/local/bin/kind
+
+      - name: Verify kind installation
+        run: kind version
+
+      - name: Install helm
+        uses: azure/setup-helm@v4.3.0
+
+        # func CLI is needed in some e2e tests ATM
+      - name: Install func cli
+        uses: functions-dev/action@main
+        with:
+          version: nightly # use nightly as long as we use the latest in the operator too
+
+      - name: Setup KinD cluster
+        run: make create-kind-cluster
+
+      - name: Running Bundle Test e2e
+        env:
+          REGISTRY_INSECURE: true
+          REGISTRY: kind-registry:5000
+        run: make test-e2e-bundle

.github/workflows/test-e2e.yml

@@ -32,6 +32,8 @@ jobs:
         # func CLI is needed in some e2e tests ATM
       - name: Install func cli
         uses: functions-dev/action@main
+        with:
+          version: nightly # use nightly as long as we use the latest in the operator too
 
       - name: Setup KinD cluster
         run: make create-kind-cluster

Makefile

@@ -120,7 +120,15 @@ test: manifests generate fmt vet setup-envtest ## Run tests.
 
 .PHONY: test-e2e ## Run e2e tests.
 test-e2e:
-	go test ./test/e2e/ -v -ginkgo.v
+	go test ./test/e2e/ -v -ginkgo.v -ginkgo.timeout=1h -ginkgo.label-filter="!bundle"
+
+.PHONY: test-e2e-bundle ## Run bundle e2e tests.
+test-e2e-bundle: operator-sdk docker-build docker-push bundle bundle-build bundle-push install-olm-in-cluster
+	OPERATOR_SDK=$(OPERATOR_SDK) BUNDLE_IMG=$(BUNDLE_IMG) go test -timeout 1h ./test/e2e/ -v -ginkgo.v -ginkgo.timeout=1h -ginkgo.label-filter="bundle"
+
+.PHONY: install-olm-in-cluster
+install-olm-in-cluster: operator-sdk ## Install OLM in cluster if not already installed.
+	@$(OPERATOR_SDK) olm status || $(OPERATOR_SDK) olm install
 
 .PHONY: lint
 lint: golangci-lint ## Run golangci-lint linter
@@ -381,4 +389,4 @@ catalog-push: ## Push a catalog image.
 
 .PHONY: mocksgen
 gen-mocks: ${MOCKERY}
-	${MOCKERY}
+	${MOCKERY}

cmd/main.go

@@ -22,10 +22,12 @@ import (
 	"flag"
 	"os"
 	"path/filepath"
+	"strings"
 	"time"
 
 	"github.com/functions-dev/func-operator/internal/git"
 	"github.com/functions-dev/func-operator/internal/monitoring"
+	"sigs.k8s.io/controller-runtime/pkg/cache"
 
 	// Import all Kubernetes client auth plugins (e.g. Azure, GCP, OIDC, etc.)
 	// to ensure that exec-entrypoint and run can make use of them.
@@ -194,6 +196,20 @@ func main() {
 		})
 	}
 
+	watchNamespaces := getWatchNamespaces()
+	var cacheOpts cache.Options
+	if len(watchNamespaces) > 0 {
+		setupLog.Info("Operator watching specific namespaces", "namespaces", watchNamespaces)
+
+		// Map the namespaces into the Cache DefaultNamespaces map
+		cacheOpts.DefaultNamespaces = make(map[string]cache.Config)
+		for _, ns := range watchNamespaces {
+			cacheOpts.DefaultNamespaces[strings.TrimSpace(ns)] = cache.Config{}
+		}
+	} else {
+		setupLog.Info("Operator watching all namespaces")
+	}
+
 	mgr, err := ctrl.NewManager(ctrl.GetConfigOrDie(), ctrl.Options{
 		Scheme:                 scheme,
 		Metrics:                metricsServerOptions,
@@ -212,6 +228,7 @@ func main() {
 		// if you are doing or is intended to do any operation such as perform cleanups
 		// after the manager stops then its usage might be unsafe.
 		// LeaderElectionReleaseOnCancel: true,
+		Cache: cacheOpts,
 	})
 	if err != nil {
 		setupLog.Error(err, "unable to start manager")
@@ -282,3 +299,15 @@ func main() {
 		os.Exit(1)
 	}
 }
+
+// getWatchNamespaces returns the Namespaces the operator should be watching for changes
+func getWatchNamespaces() []string {
+	watchNamespaceEnvVar := "WATCH_NAMESPACE"
+	ns, found := os.LookupEnv(watchNamespaceEnvVar)
+	if !found || ns == "" {
+		return nil // Return nil to signify "watch all namespaces"
+	}
+
+	// Split by comma to support multiple namespaces
+	return strings.Split(ns, ",")
+}

config/manager/manager.yaml

@@ -65,6 +65,11 @@ spec:
           - --health-probe-bind-address=:8081
           - --disable-func-cli-update=true
           - --func-cli-path=/func
+        env:
+        - name: WATCH_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.annotations['olm.targetNamespaces']
         image: controller:latest
         imagePullPolicy: Always
         name: manager

config/manifests/bases/func-operator.clusterserviceversion.yaml

@@ -25,11 +25,11 @@ spec:
       deployments: null
     strategy: ""
   installModes:
-  - supported: false
+  - supported: true
     type: OwnNamespace
-  - supported: false
+  - supported: true
     type: SingleNamespace
-  - supported: false
+  - supported: true
     type: MultiNamespace
   - supported: true
     type: AllNamespaces

config/rbac/deploy_function_clusterrole.yaml

@@ -26,6 +26,3 @@ resources:
 - function_editor_role.yaml
 - function_viewer_role.yaml
 
-- deploy_function_clusterrole.yaml
-- deploy_function_clusterrole_binding.yaml
-

config/rbac/deploy_function_clusterrole_binding.yaml

@@ -84,6 +84,7 @@ rules:
   - rbac.authorization.k8s.io
   resources:
   - rolebindings
+  - roles
   verbs:
   - create
   - delete
@@ -95,6 +96,7 @@ rules:
 - apiGroups:
   - serving.knative.dev
   resources:
+  - routes
   - services
   verbs:
   - create