Kubernetes Enterprise Operator Release 1.15.0 (#216)

Author: mms-build-account

crds.yaml

@@ -581,21 +581,25 @@ spec:
                           created already.
                         type: string
                       enabled:
-                        description: Enables TLS for this resource. This will make
-                          the operator try to mount a Secret with a defined name (<resource-name>-cert).
-                          This is only used when enabling TLS on a MongoDB resource,
-                          and not on the AppDB, where TLS is configured by setting
-                          `secretRef.Name`.
+                        description: DEPRECATED please enable TLS by setting `security.certsSecretPrefix`
+                          or `security.tls.secretRef.prefix`. Enables TLS for this
+                          resource. This will make the operator try to mount a Secret
+                          with a defined name (<resource-name>-cert). This is only
+                          used when enabling TLS on a MongoDB resource, and not on
+                          the AppDB, where TLS is configured by setting `secretRef.Name`.
                         type: boolean
                       secretRef:
-                        description: SecretRef points to a Secret object containing
-                          the certificates to use when enabling TLS.
+                        description: DEPRECATED please use security.certsSecretPrefix
+                          instead SecretRef points to a Secret object containing the
+                          certificates to use when enabling TLS.
                         properties:
                           name:
-                            description: DEPRECATED please use security.tls.secretRef.prefix
+                            description: DEPRECATED please use security.certsSecretPrefix
                               instead
                             type: string
                           prefix:
+                            description: DEPRECATED please use security.certsSecretPrefix
+                              instead
                             type: string
                         type: object
                     type: object
@@ -1149,21 +1153,25 @@ spec:
                           created already.
                         type: string
                       enabled:
-                        description: Enables TLS for this resource. This will make
-                          the operator try to mount a Secret with a defined name (<resource-name>-cert).
-                          This is only used when enabling TLS on a MongoDB resource,
-                          and not on the AppDB, where TLS is configured by setting
-                          `secretRef.Name`.
+                        description: DEPRECATED please enable TLS by setting `security.certsSecretPrefix`
+                          or `security.tls.secretRef.prefix`. Enables TLS for this
+                          resource. This will make the operator try to mount a Secret
+                          with a defined name (<resource-name>-cert). This is only
+                          used when enabling TLS on a MongoDB resource, and not on
+                          the AppDB, where TLS is configured by setting `secretRef.Name`.
                         type: boolean
                       secretRef:
-                        description: SecretRef points to a Secret object containing
-                          the certificates to use when enabling TLS.
+                        description: DEPRECATED please use security.certsSecretPrefix
+                          instead SecretRef points to a Secret object containing the
+                          certificates to use when enabling TLS.
                         properties:
                           name:
-                            description: DEPRECATED please use security.tls.secretRef.prefix
+                            description: DEPRECATED please use security.certsSecretPrefix
                               instead
                             type: string
                           prefix:
+                            description: DEPRECATED please use security.certsSecretPrefix
+                              instead
                             type: string
                         type: object
                     type: object
@@ -1567,6 +1575,29 @@ spec:
                           type: string
                         type: object
                     type: object
+                  automationConfig:
+                    description: AutomationConfigOverride holds any fields that will
+                      be merged on top of the Automation Config that the operator
+                      creates for the AppDB. Currently only the process.disabled field
+                      is recognized.
+                    properties:
+                      processes:
+                        items:
+                          description: OverrideProcess contains fields that we can
+                            override on the AutomationConfig processes.
+                          properties:
+                            disabled:
+                              type: boolean
+                            name:
+                              type: string
+                          required:
+                          - disabled
+                          - name
+                          type: object
+                        type: array
+                    required:
+                    - processes
+                    type: object
                   cloudManager:
                     properties:
                       configMapRef:
@@ -1903,21 +1934,26 @@ spec:
                               the certificates created already.
                             type: string
                           enabled:
-                            description: Enables TLS for this resource. This will
-                              make the operator try to mount a Secret with a defined
-                              name (<resource-name>-cert). This is only used when
-                              enabling TLS on a MongoDB resource, and not on the AppDB,
-                              where TLS is configured by setting `secretRef.Name`.
+                            description: DEPRECATED please enable TLS by setting `security.certsSecretPrefix`
+                              or `security.tls.secretRef.prefix`. Enables TLS for
+                              this resource. This will make the operator try to mount
+                              a Secret with a defined name (<resource-name>-cert).
+                              This is only used when enabling TLS on a MongoDB resource,
+                              and not on the AppDB, where TLS is configured by setting
+                              `secretRef.Name`.
                             type: boolean
                           secretRef:
-                            description: SecretRef points to a Secret object containing
+                            description: DEPRECATED please use security.certsSecretPrefix
+                              instead SecretRef points to a Secret object containing
                               the certificates to use when enabling TLS.
                             properties:
                               name:
-                                description: DEPRECATED please use security.tls.secretRef.prefix
+                                description: DEPRECATED please use security.certsSecretPrefix
                                   instead
                                 type: string
                               prefix:
+                                description: DEPRECATED please use security.certsSecretPrefix
+                                  instead
                                 type: string
                             type: object
                         type: object
@@ -2038,6 +2074,16 @@ spec:
                       - name
                       type: object
                     type: array
+                  queryableBackupSecretRef:
+                    description: QueryableBackupSecretRef references the secret which
+                      contains the pem file which is used for queryable backup. This
+                      will be mounted into the Ops Manager pod.
+                    properties:
+                      name:
+                        type: string
+                    required:
+                    - name
+                    type: object
                   s3OpLogStores:
                     description: S3OplogStoreConfigs describes the list of s3 oplog
                       store configs used for backup.

dockerfiles/mongodb-enterprise-init-database/1.0.6/ubi/Dockerfile

@@ -31,3 +31,4 @@ RUN tar xfz /tools/mongodb_tools.tgz --directory /tools \
 USER 2000
 ENTRYPOINT [ "/bin/cp", "-f", "-r", "/scripts/agent-launcher.sh", "/scripts/agent-launcher-lib.sh", "/probes/readinessprobe", "/probes/probe.sh", "/tools", "/opt/scripts/" ]
 
+

dockerfiles/mongodb-enterprise-init-database/1.0.6/ubuntu/Dockerfile

@@ -27,3 +27,4 @@ RUN tar xfz /tools/mongodb_tools.tgz --directory /tools \
 USER 2000
 ENTRYPOINT [ "/bin/cp", "-f", "-r", "/scripts/agent-launcher.sh", "/scripts/agent-launcher-lib.sh", "/probes/readinessprobe", "/probes/probe.sh", "/tools", "/opt/scripts/" ]
 
+

dockerfiles/mongodb-enterprise-operator/1.14.0/ubi/Dockerfile

@@ -36,3 +36,4 @@ USER 2000
 
 ENTRYPOINT exec /usr/local/bin/mongodb-enterprise-operator
 
+

dockerfiles/mongodb-enterprise-operator/1.14.0/ubuntu/Dockerfile

@@ -38,3 +38,4 @@ USER 2000
 
 ENTRYPOINT exec /usr/local/bin/mongodb-enterprise-operator
 
+

mongodb-enterprise-openshift.yaml

@@ -1,17 +1,16 @@
 ---
-# Source: mongodb-enterprise-operator/templates/operator-roles.yaml
+# Source: enterprise-operator/templates/operator-roles.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: mongodb-enterprise-operator
   namespace: mongodb
 ---
-# Source: mongodb-enterprise-operator/templates/operator-roles.yaml
+# Source: enterprise-operator/templates/operator-roles.yaml
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: mongodb-enterprise-operator-mongodb-webhook-binding
-  namespace: mongodb
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -21,7 +20,7 @@ subjects:
   name: mongodb-enterprise-operator
   namespace: mongodb
 ---
-# Source: mongodb-enterprise-operator/templates/operator-roles.yaml
+# Source: enterprise-operator/templates/operator-roles.yaml
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -94,7 +93,7 @@ rules:
 # definitions. The validating webhooks are optional so this can be removed if
 # necessary.
 ---
-# Source: mongodb-enterprise-operator/templates/operator-roles.yaml
+# Source: enterprise-operator/templates/operator-roles.yaml
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -109,28 +108,28 @@ subjects:
   name: mongodb-enterprise-operator
   namespace: mongodb
 ---
-# Source: mongodb-enterprise-operator/templates/database-roles.yaml
+# Source: enterprise-operator/templates/database-roles.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: mongodb-enterprise-appdb
   namespace: mongodb
 ---
-# Source: mongodb-enterprise-operator/templates/database-roles.yaml
+# Source: enterprise-operator/templates/database-roles.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: mongodb-enterprise-database-pods
   namespace: mongodb
 ---
-# Source: mongodb-enterprise-operator/templates/database-roles.yaml
+# Source: enterprise-operator/templates/database-roles.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: mongodb-enterprise-ops-manager
   namespace: mongodb
 ---
-# Source: mongodb-enterprise-operator/templates/database-roles.yaml
+# Source: enterprise-operator/templates/database-roles.yaml
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -152,7 +151,7 @@ rules:
       - delete
       - get
 ---
-# Source: mongodb-enterprise-operator/templates/database-roles.yaml
+# Source: enterprise-operator/templates/database-roles.yaml
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -167,7 +166,7 @@ subjects:
     name: mongodb-enterprise-appdb
     namespace: mongodb
 ---
-# Source: mongodb-enterprise-operator/templates/operator.yaml
+# Source: enterprise-operator/templates/operator.yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -190,7 +189,7 @@ spec:
       serviceAccountName: mongodb-enterprise-operator
       containers:
       - name: mongodb-enterprise-operator
-        image: registry.connect.redhat.com/mongodb/enterprise-operator:1.14.0
+        image: registry.connect.redhat.com/mongodb/enterprise-operator:1.15.0
         imagePullPolicy: Always
         args:
           - "-watch-resource=mongodb"
@@ -226,7 +225,7 @@ spec:
         - name: INIT_DATABASE_IMAGE_REPOSITORY
           value: registry.connect.redhat.com/mongodb/mongodb-enterprise-init-database
         - name: INIT_DATABASE_VERSION
-          value: 1.0.6
+          value: 1.0.7
         - name: DATABASE_VERSION
           value: 2.0.2
         # Ops Manager
@@ -235,16 +234,16 @@ spec:
         - name: INIT_OPS_MANAGER_IMAGE_REPOSITORY
           value: registry.connect.redhat.com/mongodb/mongodb-enterprise-init-ops-manager
         - name: INIT_OPS_MANAGER_VERSION
-          value: 1.0.5
+          value: 1.0.6
         # AppDB
         - name: INIT_APPDB_IMAGE_REPOSITORY
           value: registry.connect.redhat.com/mongodb/mongodb-enterprise-init-appdb
         - name: INIT_APPDB_VERSION
-          value: 1.0.8
+          value: 1.0.9
         - name: OPS_MANAGER_IMAGE_PULL_POLICY
           value: Always
         - name: AGENT_IMAGE
-          value: "registry.connect.redhat.com/mongodb/mongodb-agent:11.0.5.6963-1"
+          value: "registry.connect.redhat.com/mongodb/mongodb-agent:11.0.11.7036-1"
         - name: MONGODB_IMAGE
           value: mongodb-enterprise-appdb-database
         - name: MONGODB_REPO_URL