> then the export will fail)
-# To adequately provide solutions that are compatible with multiple platforms, you should consider using this option.
-#PLATFORMS ?= linux/arm64,linux/amd64,linux/s390x,linux/ppc64le
-PLATFORMS ?= linux/arm64,linux/amd64
-.PHONY: docker-buildx
-docker-buildx: ## Build and push docker image for the manager for cross-platform support
- # copy existing Dockerfile and insert --platform=${BUILDPLATFORM} into Dockerfile.cross, and preserve the original Dockerfile
- sed -e '1 s/\(^FROM\)/FROM --platform=\$$\{BUILDPLATFORM\}/; t' -e ' 1,// s//FROM --platform=\$$\{BUILDPLATFORM\}/' Dockerfile > Dockerfile.cross
- - $(CONTAINER_TOOL) buildx create --name operator-builder
- $(CONTAINER_TOOL) buildx use operator-builder
- - $(CONTAINER_TOOL) buildx build --push --platform=$(PLATFORMS) --tag ${IMG} -f Dockerfile.cross .
- - $(CONTAINER_TOOL) buildx rm operator-builder
- rm Dockerfile.cross
-
-.PHONY: build-installer
-build-installer: manifests generate kustomize ## Generate a consolidated YAML with CRDs and deployment.
- mkdir -p dist
- cd config/manager && $(KUSTOMIZE) edit set image controller=${IMG}
- $(KUSTOMIZE) build config/default > dist/install.yaml
-
-##@ Deployment
-
-ifndef ignore-not-found
- ignore-not-found = false
-endif
-
-.PHONY: install
-install: manifests kustomize ## Install CRDs into the K8s cluster specified in ~/.kube/config.
- $(KUSTOMIZE) build config/crd | $(KUBECTL) apply -f -
-
-.PHONY: uninstall
-uninstall: manifests kustomize ## Uninstall CRDs from the K8s cluster specified in ~/.kube/config. Call with ignore-not-found=true to ignore resource not found errors during deletion.
- $(KUSTOMIZE) build config/crd | $(KUBECTL) delete --ignore-not-found=$(ignore-not-found) -f -
-
-.PHONY: deploy
-deploy: manifests kustomize ## Deploy controller to the K8s cluster specified in ~/.kube/config.
- cd config/manager && $(KUSTOMIZE) edit set image controller=${IMG}
- $(KUSTOMIZE) build config/default | $(KUBECTL) apply -f -
-
-.PHONY: undeploy
-undeploy: kustomize ## Undeploy controller from the K8s cluster specified in ~/.kube/config. Call with ignore-not-found=true to ignore resource not found errors during deletion.
- $(KUSTOMIZE) build config/default | $(KUBECTL) delete --ignore-not-found=$(ignore-not-found) -f -
-
-##@ Dependencies
-
-## Location to install dependencies to
-LOCALBIN ?= $(shell pwd)/bin
-$(LOCALBIN):
- mkdir -p $(LOCALBIN)
-
-## Tool Binaries
-KUBECTL ?= kubectl
-KIND ?= kind
-KUSTOMIZE ?= $(LOCALBIN)/kustomize
-CONTROLLER_GEN ?= $(LOCALBIN)/controller-gen
-ENVTEST ?= $(LOCALBIN)/setup-envtest
-GOLANGCI_LINT = $(LOCALBIN)/golangci-lint
-CODEGEN ?= $(LOCALBIN)/code-generator
-
-## Tool Versions
-KUSTOMIZE_VERSION ?= v5.6.0
-CONTROLLER_TOOLS_VERSION ?= v0.17.2
-CODEGEN_VERSION ?= v0.32.1
-#ENVTEST_VERSION is the version of controller-runtime release branch to fetch the envtest setup script (i.e. release-0.20)
-ENVTEST_VERSION ?= $(shell go list -m -f "{{ .Version }}" sigs.k8s.io/controller-runtime | awk -F'[v.]' '{printf "release-%d.%d", $$2, $$3}')
-#ENVTEST_K8S_VERSION is the version of Kubernetes to use for setting up ENVTEST binaries (i.e. 1.31)
-ENVTEST_K8S_VERSION ?= $(shell go list -m -f "{{ .Version }}" k8s.io/api | awk -F'[v.]' '{printf "1.%d", $$3}')
-GOLANGCI_LINT_VERSION ?= v1.63.4
-
-.PHONY: kustomize
-kustomize: $(KUSTOMIZE) ## Download kustomize locally if necessary.
-$(KUSTOMIZE): $(LOCALBIN)
- $(call go-install-tool,$(KUSTOMIZE),sigs.k8s.io/kustomize/kustomize/v5,$(KUSTOMIZE_VERSION))
-
-.PHONY: controller-gen
-controller-gen: $(CONTROLLER_GEN) ## Download controller-gen locally if necessary.
-$(CONTROLLER_GEN): $(LOCALBIN)
- $(call go-install-tool,$(CONTROLLER_GEN),sigs.k8s.io/controller-tools/cmd/controller-gen,$(CONTROLLER_TOOLS_VERSION))
-
-.PHONY: setup-envtest
-setup-envtest: envtest ## Download the binaries required for ENVTEST in the local bin directory.
- @echo "Setting up envtest binaries for Kubernetes version $(ENVTEST_K8S_VERSION)..."
- @$(ENVTEST) use $(ENVTEST_K8S_VERSION) --bin-dir $(LOCALBIN) -p path || { \
- echo "Error: Failed to set up envtest binaries for version $(ENVTEST_K8S_VERSION)."; \
- exit 1; \
- }
-
-.PHONY: envtest
-envtest: $(ENVTEST) ## Download setup-envtest locally if necessary.
-$(ENVTEST): $(LOCALBIN)
- $(call go-install-tool,$(ENVTEST),sigs.k8s.io/controller-runtime/tools/setup-envtest,$(ENVTEST_VERSION))
-
-.PHONY: golangci-lint
-golangci-lint: $(GOLANGCI_LINT) ## Download golangci-lint locally if necessary.
-$(GOLANGCI_LINT): $(LOCALBIN)
- $(call go-install-tool,$(GOLANGCI_LINT),github.com/golangci/golangci-lint/cmd/golangci-lint,$(GOLANGCI_LINT_VERSION))
-
-.PHONY: code-generator
-code-generator: $(CODEGEN) ## Download code-generator locally if necessary.
-$(CODEGEN): $(LOCALBIN)
- $(call go-install-tool,$(CODEGEN),k8s.io/code-generator/cmd/...,$(CODEGEN_VERSION))
-
-.PHONY: generate-client
-generate-client: ## Generate client SDK using code-generator
- @echo "Generating client SDK..."
- @mkdir -p pkg/client
- @go install k8s.io/code-generator/cmd/client-gen@v0.32.1
- @go install k8s.io/code-generator/cmd/lister-gen@v0.32.1
- @go install k8s.io/code-generator/cmd/informer-gen@v0.32.1
- @go install k8s.io/code-generator/cmd/deepcopy-gen@v0.32.1
- @hack/update-codegen.sh
-
-# go-install-tool will 'go install' any package with custom target and name of binary, if it doesn't exist
-# $1 - target path with name of binary
-# $2 - package url which can be installed
-# $3 - specific version of package
-define go-install-tool
-@[ -f "$(1)-$(3)" ] || { \
-set -e; \
-package=$(2)@$(3) ;\
-echo "Downloading $${package}" ;\
-rm -f $(1) || true ;\
-GOBIN=$(LOCALBIN) go install $${package} ;\
-mv $(1) $(1)-$(3) ;\
-} ;\
-ln -sf $(1)-$(3) $(1)
-endef
-
-generate-helm:
- rm -rf deploy
- rm -rf dist
- kubebuilder edit --plugins=helm/v1-alpha --force
- mv dist deploy
- patch -p1 < hack/helm.patch
-
-generate-hack-helm-patch:
- kubebuilder edit --plugins=helm/v1-alpha --force
- git diff --no-index dist deploy > hack/helm.patch || true
-
-generate-deploy-yaml:
- helm template functionstream ./deploy/chart --set pulsar.standalone.enable=true --set createNamespace=true --namespace function-stream --create-namespace > ./scripts/deploy.yaml
\ No newline at end of file
diff --git a/operator/PROJECT b/operator/PROJECT
deleted file mode 100644
index 1ebc9a4d..00000000
--- a/operator/PROJECT
+++ /dev/null
@@ -1,39 +0,0 @@
-# Code generated by tool. DO NOT EDIT.
-# This file is used to track the info used to scaffold your project
-# and allow the plugins properly work.
-# More info: https://book.kubebuilder.io/reference/project-config.html
-domain: functionstream.github.io
-layout:
-- go.kubebuilder.io/v4
-plugins:
- helm.kubebuilder.io/v1-alpha: {}
-projectName: operator
-repo: github.com/FunctionStream/function-stream/operator
-resources:
-- api:
- crdVersion: v1
- namespaced: true
- controller: true
- domain: functionstream.github.io
- group: fs
- kind: Package
- path: github.com/FunctionStream/function-stream/operator/api/v1alpha1
- version: v1alpha1
- webhooks:
- defaulting: true
- validation: true
- webhookVersion: v1
-- api:
- crdVersion: v1
- namespaced: true
- controller: true
- domain: functionstream.github.io
- group: fs
- kind: Function
- path: github.com/FunctionStream/function-stream/operator/api/v1alpha1
- version: v1alpha1
- webhooks:
- defaulting: true
- validation: true
- webhookVersion: v1
-version: "3"
diff --git a/operator/README.md b/operator/README.md
deleted file mode 100644
index 68ca56f2..00000000
--- a/operator/README.md
+++ /dev/null
@@ -1,308 +0,0 @@
-# Function Stream Operator
-
-FunctionStream Operator is a Kubernetes operator designed to manage custom resources for serverless function
-orchestration and package management on Kubernetes clusters.
-
-## 🚀 Get Started Now!
-
-**New to FunctionStream Operator?** This step-by-step tutorial will guide you through everything you need to know.
-
-## What is FunctionStream Operator?
-
-This project provides a Kubernetes operator that automates the lifecycle of custom resources such as Functions and
-Packages. It enables users to define, deploy, and manage serverless functions and their dependencies using
-Kubernetes-native APIs. The operator ensures that the desired state specified in custom resources is reflected in the
-actual cluster state, supporting extensibility and integration with cloud-native workflows.
-
-## 📋 Prerequisites
-
-Before you begin, ensure you have:
-
-- [Helm](https://helm.sh/) v3.0+
-- Access to a Kubernetes v1.19+ cluster
-- `kubectl` configured to communicate with your cluster
-- cert-manager (required for TLS certificates)
-
-## 🛠️ Installation
-
-The recommended way to deploy the FunctionStream Operator is using the provided Helm chart.
-
-### 1. Install cert-manager
-
-The FunctionStream Operator requires cert-manager for TLS certificates:
-
-```sh
-./scripts/install-cert-manager.sh
-```
-
-### 2. Deploy the Operator
-
-**Option A: With Pulsar Standalone (Recommended for testing)**
-```bash
-helm install fs ./deploy/chart \
- --namespace fs --create-namespace \
- --set pulsar.standalone.enable=true
-```
-
-**Option B: With External Pulsar Cluster**
-```bash
-helm install fs ./deploy/chart \
- --namespace fs --create-namespace \
- --set pulsar.serviceUrl=pulsar://your-pulsar-cluster:6650
-```
-
-### 3. Verify Installation
-
-```bash
-kubectl get pods -n fs
-kubectl get crd | grep functionstream
-```
-
-## 📖 Next Steps
-
-
-
-### 🎯 **Ready to deploy your first function?**
-
-**[📖 Complete Tutorial](TUTORIAL.md)** - Your step-by-step guide to success!
-
-
-
-This comprehensive tutorial will teach you how to:
-- ✅ Create your first package and function
-- ✅ Test your deployment with real examples
-- ✅ Monitor and troubleshoot issues
-- ✅ Understand advanced configurations
-- ✅ Follow best practices
-
-**Estimated time**: 15-20 minutes
-
-## 📁 Examples
-
-Ready-to-use examples are available:
-
-- `examples/package.yaml` - Sample package definition
-- `examples/function.yaml` - Sample function that uses the package
-
-## 📚 Documentation
-
-### Getting Started
-- **[📖 Complete Tutorial](TUTORIAL.md)** - Step-by-step guide with detailed explanations
-
-### Development
-- **[🔧 Developer Guide](DEVELOPER.md)** - Information for contributors and developers
-
-## Configuration
-
-#### Pulsar Configuration
-
-The chart supports two modes for Pulsar:
-
-##### 1. Pulsar Standalone Mode
-
-When `pulsar.standalone.enable=true`, the chart will:
-
-- Deploy a Pulsar standalone StatefulSet in the same namespace
-- Create persistent storage for Pulsar data and logs
-- Expose Pulsar service on ports 6650 (Pulsar) and 8080 (Admin)
-- Automatically configure the operator to connect to the standalone Pulsar
-
-```yaml
-pulsar:
- standalone:
- enable: true
- image:
- repository: apachepulsar/pulsar
- tag: "3.4.0"
- resources:
- limits:
- cpu: 1000m
- memory: 2Gi
- requests:
- cpu: 500m
- memory: 1Gi
- storage:
- size: 10Gi
- storageClass: "" # Use default storage class if empty
- service:
- type: ClusterIP
- ports:
- pulsar: 6650
- admin: 8080
-```
-
-##### 2. External Pulsar Mode
-
-When `pulsar.standalone.enable=false` (default), you can specify an external Pulsar cluster:
-
-```yaml
-pulsar:
- serviceUrl: pulsar://your-pulsar-cluster:6650
- authPlugin: "" # Optional: Pulsar authentication plugin
- authParams: "" # Optional: Pulsar authentication parameters
-```
-
-#### Manager Configuration
-
-```yaml
-controllerManager:
- replicas: 1
- container:
- image:
- repository: functionstream/operator
- tag: latest
- resources:
- limits:
- cpu: 500m
- memory: 128Mi
- requests:
- cpu: 10m
- memory: 64Mi
-```
-
-#### Other Features
-
-- **RBAC**: Enable/disable RBAC permissions
-- **CRDs**: Control CRD installation and retention
-- **Metrics**: Enable metrics export
-- **Webhooks**: Enable admission webhooks
-- **Prometheus**: Enable ServiceMonitor for Prometheus
-- **Cert-Manager**: Enable cert-manager integration
-- **Network Policies**: Enable network policies
-
-### Accessing Pulsar
-
-#### When Using Pulsar Standalone
-
-The Pulsar standalone service is exposed as:
-
-- **Pulsar Service**: `pulsar-standalone:6650`
-- **Admin Interface**: `pulsar-standalone:8080`
-
-You can access the admin interface by port-forwarding:
-
-```bash
-kubectl port-forward svc/pulsar-standalone 8080:8080
-```
-
-Then visit `http://localhost:8080` in your browser.
-
-#### Pulsar Client Configuration
-
-When using Pulsar standalone, your Pulsar clients should connect to:
-
-```
-pulsar://pulsar-standalone:6650
-```
-
-### Storage
-
-When Pulsar standalone is enabled, the chart creates two PersistentVolumeClaims:
-
-- `pulsar-data`: For Pulsar data storage
-- `pulsar-logs`: For Pulsar logs storage
-
-Both use the same storage size and storage class configuration.
-
-### Troubleshooting
-
-#### Certificate Mounting Issues
-
-If you encounter errors like:
-
-```
-Warning FailedMount 95s (x9 over 3m43s) kubelet MountVolume.SetUp failed for volume "metrics-certs" : secret "metrics-server-cert" not found
-Warning FailedMount 95s (x9 over 3m43s) kubelet MountVolume.SetUp failed for volume "webhook-cert" : secret "webhook-server-cert" not found
-```
-
-This happens because cert-manager is not installed or not running in your cluster. The operator requires cert-manager to
-create TLS certificates for webhooks and metrics.
-
-**Solution:**
-
-1. **Verify cert-manager installation:**
- ```bash
- kubectl get pods -n cert-manager
- ```
- All cert-manager pods should be in `Running` status.
-
-2. **Check cert-manager namespace exists:**
- ```bash
- kubectl get namespace cert-manager
- ```
-
-3. **If cert-manager is not installed, install it:**
- ```bash
- # Using the provided script
- chmod +x scripts/install-cert-manager.sh
- ./scripts/install-cert-manager.sh
-
- # Or manually
- kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.13.0/cert-manager.yaml
- ```
-
-4. **Wait for cert-manager to be ready:**
- ```bash
- kubectl wait --for=jsonpath='{.status.phase}=Running' pods -l app.kubernetes.io/instance=cert-manager -n cert-manager --timeout=300s
- ```
-
-5. **Reinstall the operator after cert-manager is ready:**
- ```bash
- helm uninstall fs -n fs
- helm install fs ./deploy/chart --namespace fs --create-namespace
- ```
-
-#### Check cert-manager Status
-
-To verify that cert-manager is working correctly:
-
-```bash
-# Check cert-manager pods
-kubectl get pods -n cert-manager
-
-# Check cert-manager CRDs
-kubectl get crd | grep cert-manager
-
-# Check cert-manager logs
-kubectl logs -n cert-manager -l app.kubernetes.io/name=cert-manager
-```
-
-### Upgrading
-
-To upgrade the operator after making changes or pulling a new chart version:
-
-```sh
-helm upgrade fs ./deploy/chart \
- --namespace fs
-```
-
-### Uninstallation
-
-To uninstall the operator and all associated resources:
-
-```bash
-helm uninstall fs -n fs
-```
-
-**Note**:
-
-- By default, CRDs are deleted during uninstall. If you want to retain CRDs after uninstall, set `crd.keep: true` in
- your values file. Be aware that retaining CRDs will also prevent the deletion of any custom resources (Functions,
- Packages, etc.) that depend on these CRDs.
-- If you enabled Pulsar standalone, the persistent volumes will remain unless you manually delete them.
-
-## License
-
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
\ No newline at end of file
diff --git a/operator/TUTORIAL.md b/operator/TUTORIAL.md
deleted file mode 100644
index 842f2e50..00000000
--- a/operator/TUTORIAL.md
+++ /dev/null
@@ -1,314 +0,0 @@
-# FunctionStream Operator Tutorial
-
-Welcome to the FunctionStream Operator tutorial! This guide will walk you through creating and deploying your first serverless function using the FunctionStream Operator on Kubernetes.
-
-## Overview
-
-FunctionStream Operator is a Kubernetes operator that manages custom resources for serverless function orchestration and package management. In this tutorial, you'll learn how to:
-
-- Deploy a Package resource that defines a reusable function module
-- Deploy a Function resource that instantiates the package
-- Monitor and manage your deployed functions
-- Understand the architecture and components
-
-## Prerequisites
-
-Before you begin, ensure you have:
-
-- A Kubernetes cluster (v1.19+) with kubectl configured
-- FunctionStream Operator installed (see [Installation Guide](README.md))
-- Basic understanding of Kubernetes concepts
-
-Follow the [Installation Guide](README.md) to set up the FunctionStream Operator if you haven't done so already.
-
-## Step 1: Verify Installation
-
-First, let's verify that the FunctionStream Operator is properly installed:
-
-```bash
-# Check if the operator namespace exists
-kubectl get namespace fs
-
-# Verify operator pods are running
-kubectl get pods -n fs
-
-# Check that Custom Resource Definitions are installed
-kubectl get crd | grep functionstream
-```
-
-Expected output:
-```
-NAME READY STATUS RESTARTS AGE
-fs-pulsar-standalone-0 1/1 Running 1 21h
-operator-controller-manager-c99489d8b-zk78h 1/1 Running 0 21h
-
-NAME CREATED AT
-functions.fs.functionstream.github.io 2025-06-23T14:53:30Z
-packages.fs.functionstream.github.io 2025-06-23T14:53:30Z
-```
-
-## Step 2: Create Your First Package
-
-A Package defines a reusable function module with its container image and available functions. Let's create a simple "current time" package:
-
-```yaml
-# examples/package.yaml
-apiVersion: fs.functionstream.github.io/v1alpha1
-kind: Package
-metadata:
- name: current-time
-spec:
- displayName: Get Current Time
- logo: ""
- description: "A function for getting the current time."
- functionType:
- cloud:
- image: "functionstream/time-function:latest"
- modules:
- getCurrentTime:
- displayName: Get Current Time
- description: "A tool that returns the current time."
-```
-
-### Package Components Explained
-
-- **`displayName`**: Human-readable name for the package
-- **`description`**: Detailed description of what the package does
-- **`functionType.cloud.image`**: Docker image containing the function code
-- **`modules`**: Available functions within the package
- - Each module has a unique key (e.g., `getCurrentTime`)
- - Modules can have their own display names and descriptions
-
-### Deploy the Package
-
-```bash
-kubectl apply -f examples/package.yaml
-```
-
-Verify the package was created:
-
-```bash
-kubectl get packages
-kubectl describe package current-time
-```
-
-Expected output:
-```
-NAME AGE
-current-time 21h
-
-Name: current-time
-Namespace: default
-Spec:
- Description: A function for getting the current time.
- Display Name: Get Current Time
- Function Type:
- Cloud:
- Image: functionstream/time-function:latest
- Modules:
- Get Current Time:
- Description: A tool that returns the current time.
- Display Name: Get Current Time
-```
-
-## Step 3: Create Your First Function
-
-A Function instantiates a package with specific configuration and request sources. Let's create a function that uses our current-time package:
-
-```yaml
-# examples/function.yaml
-apiVersion: fs.functionstream.github.io/v1alpha1
-kind: Function
-metadata:
- name: current-time-function
-spec:
- displayName: Get Current Time Function
- package: current-time
- module: getCurrentTime
- requestSource: # RPC
- pulsar:
- topic: request_current_time
- source:
- pulsar:
- topic: current_time_source
- sink:
- pulsar:
- topic: current_time_sink
-```
-
-### Function Components Explained
-
-- **`package`**: References the package name to instantiate
-- **`module`**: Specifies which module from the package to use
-- **`requestSource.pulsar.topic`**: Pulsar topic that triggers the function
-- **`displayName`**: Human-readable name for the function instance
-
-### Deploy the Function
-
-```bash
-kubectl apply -f examples/function.yaml
-```
-
-Verify the function was created:
-
-```bash
-kubectl get functions
-kubectl describe function current-time-function
-```
-
-Expected output:
-```
-NAME AGE
-current-time-function 21h
-
-Name: current-time-function
-Namespace: default
-Labels: package=current-time
-Spec:
- Display Name: Get Current Time Function
- Module: getCurrentTime
- Package: current-time
- Request Source:
- Pulsar:
- Topic: request_current_time
-Status:
- Available Replicas: 1
- Ready Replicas: 1
- Replicas: 1
- Updated Replicas: 1
-```
-
-## Step 4: Monitor Function Deployment
-
-The operator automatically creates Kubernetes resources to run your function. Let's check what was created:
-
-```bash
-# Check the function pod
-kubectl get pods -l function=current-time-function
-
-# Check the deployment
-kubectl get deployments -l function=current-time-function
-```
-
-Expected output:
-```
-NAME READY STATUS RESTARTS AGE
-function-current-time-function-b8b89f856-brvx7 1/1 Running 0 21h
-
-NAME READY UP-TO-DATE AVAILABLE AGE
-function-current-time-function 1/1 1 1 21h
-```
-
-## Step 5: Test Your Function
-
-Now let's test the function by sending a message to the Pulsar topic. First, let's access Pulsar:
-
-```bash
-# Port forward Pulsar service
-kubectl port-forward svc/fs-pulsar-standalone 6650:6650 -n fs &
-kubectl port-forward svc/fs-pulsar-standalone 8080:8080 -n fs &
-```
-
-### Using Pulsar Admin Interface
-
-1. Open your browser and navigate to `http://localhost:8080`
-2. You'll see the Pulsar admin interface
-3. Navigate to "Topics" to see the `request_current_time` topic
-
-### Using Pulsar Client
-
-You can test the function by shelling into the Pulsar standalone pod:
-
-```bash
-# Shell into the Pulsar standalone pod
-kubectl exec -it fs-pulsar-standalone-0 -n fs -- bash
-```
-
-**1. Start a consumer in a separate terminal window**
-
-Open a new terminal window and shell into the Pulsar pod:
-
-```bash
-kubectl exec -it fs-pulsar-standalone-0 -n fs -- bash
-```
-
-Then start consuming messages from the function output topic:
-
-```bash
-# Start consuming messages from the function output topic
-pulsar-client consume current_time_sink -s "test-subscription"
-```
-
-This will start listening for messages from the function's output topic.
-
-**2. Send a test message in another terminal window**
-
-In your original terminal window (or another terminal), shell into the Pulsar pod and send a test message:
-
-```bash
-kubectl exec -it fs-pulsar-standalone-0 -n fs -- bash
-```
-
-Then send a test message to trigger the function:
-
-```bash
-# Send a test message to trigger the function
-pulsar-client produce request_current_time -m "{}"
-```
-
-You should see the function process the message and output the current time to the `current_time_sink` topic, which will appear in your consumer window.
-
-```
-publishTime:[1750775397910], eventTime:[1750775397907], key:[null], properties:[], content:{"result": "The current time is 2025-06-24 14:29:57 ."}
-```
-
-## Step 6: Cleanup
-
-When you're done testing, clean up the resources:
-
-```bash
-# Delete the function
-kubectl delete function current-time-function
-
-# Delete the package
-kubectl delete package current-time
-
-# Verify cleanup
-kubectl get packages
-kubectl get functions
-kubectl get pods -l function=current-time-function
-```
-
-## Troubleshooting
-
-### Common Issues
-
-1. **Package Not Found**
- ```
- Error: package "current-time" not found
- ```
- **Solution**: Ensure the package is created before the function
-
-2. **Image Pull Errors**
- ```
- Error: ImagePullBackOff
- ```
- **Solution**: Check if the container image exists and is accessible
-
-3. **Pulsar Connection Issues**
- ```
- Error: Failed to connect to Pulsar
- ```
- **Solution**: Verify Pulsar is running and accessible
-
-### Debug Commands
-
-```bash
-# Check operator logs
-kubectl logs -n fs -l app.kubernetes.io/name=operator
-
-# Check function pod events
-kubectl describe pod -l function=current-time-function
-```
-
-Congratulations! You've successfully deployed your first serverless function using FunctionStream Operator. The operator handled all the complexity of managing Kubernetes resources, scaling, and integration with Pulsar, allowing you to focus on your function logic.
\ No newline at end of file
diff --git a/operator/api/v1alpha1/function_types.go b/operator/api/v1alpha1/function_types.go
deleted file mode 100644
index 7546ea6e..00000000
--- a/operator/api/v1alpha1/function_types.go
+++ /dev/null
@@ -1,145 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1alpha1
-
-import (
- v1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
- metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-)
-
-// PackageRef defines a reference to a Package resource
-// +kubebuilder:object:generate=true
-// +kubebuilder:validation:Optional
-type PackageRef struct {
- // Name of the Package resource
- // +kubebuilder:validation:Required
- Name string `json:"name"`
- // Namespace of the Package resource
- // +kubebuilder:validation:Optional
- Namespace string `json:"namespace,omitempty"`
-}
-
-// FunctionSpec defines the desired state of Function
-// +kubebuilder:object:generate=true
-// +kubebuilder:validation:Optional
-type FunctionSpec struct {
- // Display name of the function
- // +kubebuilder:validation:Optional
- DisplayName string `json:"displayName,omitempty"`
- // Description of the function
- // +kubebuilder:validation:Optional
- Description string `json:"description,omitempty"`
- // Package reference
- // +kubebuilder:validation:Required
- PackageRef PackageRef `json:"packageRef"`
- // Module name
- // +kubebuilder:validation:Required
- Module string `json:"module"`
- // Number of replicas for the function deployment
- // +kubebuilder:validation:Optional
- // +kubebuilder:default=1
- Replicas *int32 `json:"replicas,omitempty"`
- // +kubebuilder:validation:Optional
- SubscriptionName string `json:"subscriptionName,omitempty"`
- // List of sources
- // +kubebuilder:validation:Optional
- Sources []SourceSpec `json:"sources,omitempty"`
- // Request source
- // +kubebuilder:validation:Optional
- RequestSource *SourceSpec `json:"requestSource,omitempty"`
- // Sink specifies the sink configuration
- // +kubebuilder:validation:Optional
- Sink *SinkSpec `json:"sink,omitempty"`
- // Configurations as key-value pairs
- // +kubebuilder:validation:Optional
- Config map[string]v1.JSON `json:"config,omitempty"`
-}
-
-// SourceSpec defines a source or sink specification
-// +kubebuilder:object:generate=true
-// +kubebuilder:validation:Optional
-type SourceSpec struct {
- // Pulsar source specification
- // +kubebuilder:validation:Optional
- Pulsar *PulsarSourceSpec `json:"pulsar,omitempty"`
-}
-
-// PulsarSourceSpec defines the Pulsar source details
-// +kubebuilder:object:generate=true
-// +kubebuilder:validation:Optional
-type PulsarSourceSpec struct {
- // Topic name
- // +kubebuilder:validation:Required
- Topic string `json:"topic"`
-}
-
-// SinkSpec defines a sink specification
-// +kubebuilder:object:generate=true
-// +kubebuilder:validation:Optional
-type SinkSpec struct {
- // Pulsar sink specification
- // +kubebuilder:validation:Optional
- Pulsar *PulsarSinkSpec `json:"pulsar,omitempty"`
-}
-
-// PulsarSinkSpec defines the Pulsar sink details
-// +kubebuilder:object:generate=true
-// +kubebuilder:validation:Optional
-type PulsarSinkSpec struct {
- // Topic name
- // +kubebuilder:validation:Required
- Topic string `json:"topic"`
-}
-
-// FunctionStatus defines the observed state of Function
-type FunctionStatus struct {
- // Number of available pods (ready for at least minReadySeconds)
- AvailableReplicas int32 `json:"availableReplicas,omitempty"`
- // Total number of ready pods
- ReadyReplicas int32 `json:"readyReplicas,omitempty"`
- // Total number of non-terminated pods targeted by this deployment
- Replicas int32 `json:"replicas,omitempty"`
- // Total number of updated pods
- UpdatedReplicas int32 `json:"updatedReplicas,omitempty"`
- // Most recent generation observed for this Function
- ObservedGeneration int64 `json:"observedGeneration,omitempty"`
-}
-
-// +kubebuilder:object:root=true
-// +kubebuilder:subresource:status
-
-// Function is the Schema for the functions API.
-type Function struct {
- metav1.TypeMeta `json:",inline"`
- metav1.ObjectMeta `json:"metadata,omitempty"`
-
- Spec FunctionSpec `json:"spec,omitempty"`
- Status FunctionStatus `json:"status,omitempty"`
-}
-
-// +kubebuilder:object:root=true
-
-// FunctionList contains a list of Function.
-type FunctionList struct {
- metav1.TypeMeta `json:",inline"`
- metav1.ListMeta `json:"metadata,omitempty"`
- Items []Function `json:"items"`
-}
-
-func init() {
- SchemeBuilder.Register(&Function{}, &FunctionList{})
-}
diff --git a/operator/api/v1alpha1/groupversion_info.go b/operator/api/v1alpha1/groupversion_info.go
deleted file mode 100644
index fc3042f1..00000000
--- a/operator/api/v1alpha1/groupversion_info.go
+++ /dev/null
@@ -1,36 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Package v1alpha1 contains API Schema definitions for the fs v1alpha1 API group.
-// +kubebuilder:object:generate=true
-// +groupName=fs.functionstream.github.io
-package v1alpha1
-
-import (
- "k8s.io/apimachinery/pkg/runtime/schema"
- "sigs.k8s.io/controller-runtime/pkg/scheme"
-)
-
-var (
- // GroupVersion is group version used to register these objects.
- GroupVersion = schema.GroupVersion{Group: "fs.functionstream.github.io", Version: "v1alpha1"}
-
- // SchemeBuilder is used to add go types to the GroupVersionKind scheme.
- SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion}
-
- // AddToScheme adds the types in this group-version to the given scheme.
- AddToScheme = SchemeBuilder.AddToScheme
-)
diff --git a/operator/api/v1alpha1/packages_types.go b/operator/api/v1alpha1/packages_types.go
deleted file mode 100644
index c51b3c47..00000000
--- a/operator/api/v1alpha1/packages_types.go
+++ /dev/null
@@ -1,118 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1alpha1
-
-import (
- metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-)
-
-// ConfigItem defines a configuration item for a module
-type ConfigItem struct {
- // DisplayName is the human-readable name of the config item
- // +kubebuilder:validation:Optional
- DisplayName string `json:"displayName,omitempty"`
- // Description provides additional information about the config item
- // +kubebuilder:validation:Optional
- Description string `json:"description,omitempty"`
- // Type specifies the data type of the config item
- // +kubebuilder:validation:Optional
- Type string `json:"type,omitempty"`
- // Required indicates whether this config item is mandatory
- // +kubebuilder:validation:Optional
- Required bool `json:"required,omitempty"`
-}
-
-// Module defines a module within a package
-type Module struct {
- // DisplayName is the human-readable name of the module
- // +kubebuilder:validation:Optional
- DisplayName string `json:"displayName,omitempty"`
- // Description provides additional information about the module
- // +kubebuilder:validation:Optional
- Description string `json:"description,omitempty"`
- // SourceSchema defines the input schema for the module
- // +kubebuilder:validation:Optional
- SourceSchema string `json:"sourceSchema,omitempty"`
- // SinkSchema defines the output schema for the module
- // +kubebuilder:validation:Optional
- SinkSchema string `json:"sinkSchema,omitempty"`
- // Config is a list of configuration items for the module
- // +kubebuilder:validation:Optional
- Config map[string]ConfigItem `json:"config,omitempty"`
-}
-
-// CloudType defines cloud function package configuration
-type CloudType struct {
- // Image specifies the container image for cloud deployment
- Image string `json:"image"`
-}
-
-// FunctionType defines the function type configuration
-type FunctionType struct {
- // Cloud contains cloud function package configuration
- // +kubebuilder:validation:Optional
- Cloud *CloudType `json:"cloud,omitempty"`
-}
-
-// PackageSpec defines the desired state of Package
-type PackageSpec struct {
- // DisplayName is the human-readable name of the package
- // +kubebuilder:validation:Optional
- DisplayName string `json:"displayName,omitempty"`
- // Logo is the URL or base64 encoded image for the package logo
- // +kubebuilder:validation:Optional
- Logo string `json:"logo,omitempty"`
- // Description provides additional information about the package
- // +kubebuilder:validation:Optional
- Description string `json:"description,omitempty"`
- // FunctionType contains function type configuration
- FunctionType FunctionType `json:"functionType"`
- // Modules is a map of module names to their configurations
- Modules map[string]Module `json:"modules"`
-}
-
-// PackageStatus defines the observed state of Package.
-type PackageStatus struct {
- // INSERT ADDITIONAL STATUS FIELD - define observed state of cluster
- // Important: Run "make" to regenerate code after modifying this file
-}
-
-// +kubebuilder:object:root=true
-// +kubebuilder:subresource:status
-// +kubebuilder:resource:path=packages,scope=Namespaced,singular=package,shortName=pkg
-
-// Package is the Schema for the packages API.
-type Package struct {
- metav1.TypeMeta `json:",inline"`
- metav1.ObjectMeta `json:"metadata,omitempty"`
-
- Spec PackageSpec `json:"spec,omitempty"`
- Status PackageStatus `json:"status,omitempty"`
-}
-
-// +kubebuilder:object:root=true
-
-// PackageList contains a list of Package.
-type PackageList struct {
- metav1.TypeMeta `json:",inline"`
- metav1.ListMeta `json:"metadata,omitempty"`
- Items []Package `json:"items"`
-}
-
-func init() {
- SchemeBuilder.Register(&Package{}, &PackageList{})
-}
diff --git a/operator/api/v1alpha1/zz_generated.deepcopy.go b/operator/api/v1alpha1/zz_generated.deepcopy.go
deleted file mode 100644
index e86d3102..00000000
--- a/operator/api/v1alpha1/zz_generated.deepcopy.go
+++ /dev/null
@@ -1,399 +0,0 @@
-//go:build !ignore_autogenerated
-
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by controller-gen. DO NOT EDIT.
-
-package v1alpha1
-
-import (
- "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
- runtime "k8s.io/apimachinery/pkg/runtime"
-)
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *CloudType) DeepCopyInto(out *CloudType) {
- *out = *in
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CloudType.
-func (in *CloudType) DeepCopy() *CloudType {
- if in == nil {
- return nil
- }
- out := new(CloudType)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *ConfigItem) DeepCopyInto(out *ConfigItem) {
- *out = *in
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ConfigItem.
-func (in *ConfigItem) DeepCopy() *ConfigItem {
- if in == nil {
- return nil
- }
- out := new(ConfigItem)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *Function) DeepCopyInto(out *Function) {
- *out = *in
- out.TypeMeta = in.TypeMeta
- in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
- in.Spec.DeepCopyInto(&out.Spec)
- out.Status = in.Status
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Function.
-func (in *Function) DeepCopy() *Function {
- if in == nil {
- return nil
- }
- out := new(Function)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *Function) DeepCopyObject() runtime.Object {
- if c := in.DeepCopy(); c != nil {
- return c
- }
- return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *FunctionList) DeepCopyInto(out *FunctionList) {
- *out = *in
- out.TypeMeta = in.TypeMeta
- in.ListMeta.DeepCopyInto(&out.ListMeta)
- if in.Items != nil {
- in, out := &in.Items, &out.Items
- *out = make([]Function, len(*in))
- for i := range *in {
- (*in)[i].DeepCopyInto(&(*out)[i])
- }
- }
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FunctionList.
-func (in *FunctionList) DeepCopy() *FunctionList {
- if in == nil {
- return nil
- }
- out := new(FunctionList)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *FunctionList) DeepCopyObject() runtime.Object {
- if c := in.DeepCopy(); c != nil {
- return c
- }
- return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *FunctionSpec) DeepCopyInto(out *FunctionSpec) {
- *out = *in
- out.PackageRef = in.PackageRef
- if in.Replicas != nil {
- in, out := &in.Replicas, &out.Replicas
- *out = new(int32)
- **out = **in
- }
- if in.Sources != nil {
- in, out := &in.Sources, &out.Sources
- *out = make([]SourceSpec, len(*in))
- for i := range *in {
- (*in)[i].DeepCopyInto(&(*out)[i])
- }
- }
- if in.RequestSource != nil {
- in, out := &in.RequestSource, &out.RequestSource
- *out = new(SourceSpec)
- (*in).DeepCopyInto(*out)
- }
- if in.Sink != nil {
- in, out := &in.Sink, &out.Sink
- *out = new(SinkSpec)
- (*in).DeepCopyInto(*out)
- }
- if in.Config != nil {
- in, out := &in.Config, &out.Config
- *out = make(map[string]v1.JSON, len(*in))
- for key, val := range *in {
- (*out)[key] = *val.DeepCopy()
- }
- }
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FunctionSpec.
-func (in *FunctionSpec) DeepCopy() *FunctionSpec {
- if in == nil {
- return nil
- }
- out := new(FunctionSpec)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *FunctionStatus) DeepCopyInto(out *FunctionStatus) {
- *out = *in
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FunctionStatus.
-func (in *FunctionStatus) DeepCopy() *FunctionStatus {
- if in == nil {
- return nil
- }
- out := new(FunctionStatus)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *FunctionType) DeepCopyInto(out *FunctionType) {
- *out = *in
- if in.Cloud != nil {
- in, out := &in.Cloud, &out.Cloud
- *out = new(CloudType)
- **out = **in
- }
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FunctionType.
-func (in *FunctionType) DeepCopy() *FunctionType {
- if in == nil {
- return nil
- }
- out := new(FunctionType)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *Module) DeepCopyInto(out *Module) {
- *out = *in
- if in.Config != nil {
- in, out := &in.Config, &out.Config
- *out = make(map[string]ConfigItem, len(*in))
- for key, val := range *in {
- (*out)[key] = val
- }
- }
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Module.
-func (in *Module) DeepCopy() *Module {
- if in == nil {
- return nil
- }
- out := new(Module)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *Package) DeepCopyInto(out *Package) {
- *out = *in
- out.TypeMeta = in.TypeMeta
- in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
- in.Spec.DeepCopyInto(&out.Spec)
- out.Status = in.Status
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Package.
-func (in *Package) DeepCopy() *Package {
- if in == nil {
- return nil
- }
- out := new(Package)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *Package) DeepCopyObject() runtime.Object {
- if c := in.DeepCopy(); c != nil {
- return c
- }
- return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *PackageList) DeepCopyInto(out *PackageList) {
- *out = *in
- out.TypeMeta = in.TypeMeta
- in.ListMeta.DeepCopyInto(&out.ListMeta)
- if in.Items != nil {
- in, out := &in.Items, &out.Items
- *out = make([]Package, len(*in))
- for i := range *in {
- (*in)[i].DeepCopyInto(&(*out)[i])
- }
- }
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PackageList.
-func (in *PackageList) DeepCopy() *PackageList {
- if in == nil {
- return nil
- }
- out := new(PackageList)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
-func (in *PackageList) DeepCopyObject() runtime.Object {
- if c := in.DeepCopy(); c != nil {
- return c
- }
- return nil
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *PackageRef) DeepCopyInto(out *PackageRef) {
- *out = *in
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PackageRef.
-func (in *PackageRef) DeepCopy() *PackageRef {
- if in == nil {
- return nil
- }
- out := new(PackageRef)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *PackageSpec) DeepCopyInto(out *PackageSpec) {
- *out = *in
- in.FunctionType.DeepCopyInto(&out.FunctionType)
- if in.Modules != nil {
- in, out := &in.Modules, &out.Modules
- *out = make(map[string]Module, len(*in))
- for key, val := range *in {
- (*out)[key] = *val.DeepCopy()
- }
- }
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PackageSpec.
-func (in *PackageSpec) DeepCopy() *PackageSpec {
- if in == nil {
- return nil
- }
- out := new(PackageSpec)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *PackageStatus) DeepCopyInto(out *PackageStatus) {
- *out = *in
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PackageStatus.
-func (in *PackageStatus) DeepCopy() *PackageStatus {
- if in == nil {
- return nil
- }
- out := new(PackageStatus)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *PulsarSinkSpec) DeepCopyInto(out *PulsarSinkSpec) {
- *out = *in
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PulsarSinkSpec.
-func (in *PulsarSinkSpec) DeepCopy() *PulsarSinkSpec {
- if in == nil {
- return nil
- }
- out := new(PulsarSinkSpec)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *PulsarSourceSpec) DeepCopyInto(out *PulsarSourceSpec) {
- *out = *in
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PulsarSourceSpec.
-func (in *PulsarSourceSpec) DeepCopy() *PulsarSourceSpec {
- if in == nil {
- return nil
- }
- out := new(PulsarSourceSpec)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *SinkSpec) DeepCopyInto(out *SinkSpec) {
- *out = *in
- if in.Pulsar != nil {
- in, out := &in.Pulsar, &out.Pulsar
- *out = new(PulsarSinkSpec)
- **out = **in
- }
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SinkSpec.
-func (in *SinkSpec) DeepCopy() *SinkSpec {
- if in == nil {
- return nil
- }
- out := new(SinkSpec)
- in.DeepCopyInto(out)
- return out
-}
-
-// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
-func (in *SourceSpec) DeepCopyInto(out *SourceSpec) {
- *out = *in
- if in.Pulsar != nil {
- in, out := &in.Pulsar, &out.Pulsar
- *out = new(PulsarSourceSpec)
- **out = **in
- }
-}
-
-// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SourceSpec.
-func (in *SourceSpec) DeepCopy() *SourceSpec {
- if in == nil {
- return nil
- }
- out := new(SourceSpec)
- in.DeepCopyInto(out)
- return out
-}
diff --git a/operator/cmd/main.go b/operator/cmd/main.go
deleted file mode 100644
index 5a9f0644..00000000
--- a/operator/cmd/main.go
+++ /dev/null
@@ -1,280 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package main
-
-import (
- "crypto/tls"
- "flag"
- "os"
- "path/filepath"
-
- // Import all Kubernetes client auth plugins (e.g. Azure, GCP, OIDC, etc.)
- // to ensure that exec-entrypoint and run can make use of them.
- _ "k8s.io/client-go/plugin/pkg/client/auth"
-
- "k8s.io/apimachinery/pkg/runtime"
- utilruntime "k8s.io/apimachinery/pkg/util/runtime"
- clientgoscheme "k8s.io/client-go/kubernetes/scheme"
- ctrl "sigs.k8s.io/controller-runtime"
- "sigs.k8s.io/controller-runtime/pkg/certwatcher"
- "sigs.k8s.io/controller-runtime/pkg/healthz"
- "sigs.k8s.io/controller-runtime/pkg/log/zap"
- "sigs.k8s.io/controller-runtime/pkg/metrics/filters"
- metricsserver "sigs.k8s.io/controller-runtime/pkg/metrics/server"
- "sigs.k8s.io/controller-runtime/pkg/webhook"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
- "github.com/FunctionStream/function-stream/operator/internal/controller"
- webhookfsv1alpha1 "github.com/FunctionStream/function-stream/operator/internal/webhook/v1alpha1"
- // +kubebuilder:scaffold:imports
-)
-
-var (
- scheme = runtime.NewScheme()
- setupLog = ctrl.Log.WithName("setup")
-)
-
-func init() {
- utilruntime.Must(clientgoscheme.AddToScheme(scheme))
-
- utilruntime.Must(fsv1alpha1.AddToScheme(scheme))
- // +kubebuilder:scaffold:scheme
-}
-
-// nolint:gocyclo
-func main() {
- var metricsAddr string
- var metricsCertPath, metricsCertName, metricsCertKey string
- var webhookCertPath, webhookCertName, webhookCertKey string
- var enableLeaderElection bool
- var probeAddr string
- var secureMetrics bool
- var enableHTTP2 bool
- var pulsarServiceUrl string
- var pulsarAuthPlugin string
- var pulsarAuthParams string
- var tlsOpts []func(*tls.Config)
- flag.StringVar(&metricsAddr, "metrics-bind-address", "0", "The address the metrics endpoint binds to. "+
- "Use :8443 for HTTPS or :8080 for HTTP, or leave as 0 to disable the metrics service.")
- flag.StringVar(&probeAddr, "health-probe-bind-address", ":8081", "The address the probe endpoint binds to.")
- flag.BoolVar(&enableLeaderElection, "leader-elect", false,
- "Enable leader election for controller manager. "+
- "Enabling this will ensure there is only one active controller manager.")
- flag.BoolVar(&secureMetrics, "metrics-secure", true,
- "If set, the metrics endpoint is served securely via HTTPS. Use --metrics-secure=false to use HTTP instead.")
- flag.StringVar(&webhookCertPath, "webhook-cert-path", "", "The directory that contains the webhook certificate.")
- flag.StringVar(&webhookCertName, "webhook-cert-name", "tls.crt", "The name of the webhook certificate file.")
- flag.StringVar(&webhookCertKey, "webhook-cert-key", "tls.key", "The name of the webhook key file.")
- flag.StringVar(&metricsCertPath, "metrics-cert-path", "",
- "The directory that contains the metrics server certificate.")
- flag.StringVar(&metricsCertName, "metrics-cert-name", "tls.crt", "The name of the metrics server certificate file.")
- flag.StringVar(&metricsCertKey, "metrics-cert-key", "tls.key", "The name of the metrics server key file.")
- flag.BoolVar(&enableHTTP2, "enable-http2", false,
- "If set, HTTP/2 will be enabled for the metrics and webhook servers")
- // Pulsar CLI flags
- flag.StringVar(&pulsarServiceUrl, "pulsar-service-url", os.Getenv("PULSAR_SERVICE_URL"), "Pulsar service URL")
- flag.StringVar(&pulsarAuthPlugin, "pulsar-auth-plugin", os.Getenv("PULSAR_AUTH_PLUGIN"), "Pulsar auth plugin")
- flag.StringVar(&pulsarAuthParams, "pulsar-auth-params", os.Getenv("PULSAR_AUTH_PARAMS"), "Pulsar auth params")
- opts := zap.Options{
- Development: true,
- }
- opts.BindFlags(flag.CommandLine)
- flag.Parse()
-
- config := controller.Config{
- PulsarServiceURL: pulsarServiceUrl,
- PulsarAuthPlugin: pulsarAuthPlugin,
- PulsarAuthParams: pulsarAuthParams,
- }
-
- ctrl.SetLogger(zap.New(zap.UseFlagOptions(&opts)))
-
- // if the enable-http2 flag is false (the default), http/2 should be disabled
- // due to its vulnerabilities. More specifically, disabling http/2 will
- // prevent from being vulnerable to the HTTP/2 Stream Cancellation and
- // Rapid Reset CVEs. For more information see:
- // - https://github.com/advisories/GHSA-qppj-fm5r-hxr3
- // - https://github.com/advisories/GHSA-4374-p667-p6c8
- disableHTTP2 := func(c *tls.Config) {
- setupLog.Info("disabling http/2")
- c.NextProtos = []string{"http/1.1"}
- }
-
- if !enableHTTP2 {
- tlsOpts = append(tlsOpts, disableHTTP2)
- }
-
- // Create watchers for metrics and webhooks certificates
- var metricsCertWatcher, webhookCertWatcher *certwatcher.CertWatcher
-
- // Initial webhook TLS options
- webhookTLSOpts := tlsOpts
-
- if len(webhookCertPath) > 0 {
- setupLog.Info("Initializing webhook certificate watcher using provided certificates",
- "webhook-cert-path", webhookCertPath, "webhook-cert-name", webhookCertName, "webhook-cert-key", webhookCertKey)
-
- var err error
- webhookCertWatcher, err = certwatcher.New(
- filepath.Join(webhookCertPath, webhookCertName),
- filepath.Join(webhookCertPath, webhookCertKey),
- )
- if err != nil {
- setupLog.Error(err, "Failed to initialize webhook certificate watcher")
- os.Exit(1)
- }
-
- webhookTLSOpts = append(webhookTLSOpts, func(config *tls.Config) {
- config.GetCertificate = webhookCertWatcher.GetCertificate
- })
- }
-
- webhookServer := webhook.NewServer(webhook.Options{
- TLSOpts: webhookTLSOpts,
- })
-
- // Metrics endpoint is enabled in 'config/default/kustomization.yaml'. The Metrics options configure the server.
- // More info:
- // - https://pkg.go.dev/sigs.k8s.io/controller-runtime@v0.20.4/pkg/metrics/server
- // - https://book.kubebuilder.io/reference/metrics.html
- metricsServerOptions := metricsserver.Options{
- BindAddress: metricsAddr,
- SecureServing: secureMetrics,
- TLSOpts: tlsOpts,
- }
-
- if secureMetrics {
- // FilterProvider is used to protect the metrics endpoint with authn/authz.
- // These configurations ensure that only authorized users and service accounts
- // can access the metrics endpoint. The RBAC are configured in 'config/rbac/kustomization.yaml'. More info:
- // https://pkg.go.dev/sigs.k8s.io/controller-runtime@v0.20.4/pkg/metrics/filters#WithAuthenticationAndAuthorization
- metricsServerOptions.FilterProvider = filters.WithAuthenticationAndAuthorization
- }
-
- // If the certificate is not specified, controller-runtime will automatically
- // generate self-signed certificates for the metrics server. While convenient for development and testing,
- // this setup is not recommended for production.
- //
- // TODO(user): If you enable certManager, uncomment the following lines:
- // - [METRICS-WITH-CERTS] at config/default/kustomization.yaml to generate and use certificates
- // managed by cert-manager for the metrics server.
- // - [PROMETHEUS-WITH-CERTS] at config/prometheus/kustomization.yaml for TLS certification.
- if len(metricsCertPath) > 0 {
- setupLog.Info("Initializing metrics certificate watcher using provided certificates",
- "metrics-cert-path", metricsCertPath, "metrics-cert-name", metricsCertName, "metrics-cert-key", metricsCertKey)
-
- var err error
- metricsCertWatcher, err = certwatcher.New(
- filepath.Join(metricsCertPath, metricsCertName),
- filepath.Join(metricsCertPath, metricsCertKey),
- )
- if err != nil {
- setupLog.Error(err, "Failed to initialize metrics certificate watcher", "error", err)
- os.Exit(1)
- }
-
- metricsServerOptions.TLSOpts = append(metricsServerOptions.TLSOpts, func(config *tls.Config) {
- config.GetCertificate = metricsCertWatcher.GetCertificate
- })
- }
-
- mgr, err := ctrl.NewManager(ctrl.GetConfigOrDie(), ctrl.Options{
- Scheme: scheme,
- Metrics: metricsServerOptions,
- WebhookServer: webhookServer,
- HealthProbeBindAddress: probeAddr,
- LeaderElection: enableLeaderElection,
- LeaderElectionID: "2da2b91f.functionstream.github.io",
- // LeaderElectionReleaseOnCancel defines if the leader should step down voluntarily
- // when the Manager ends. This requires the binary to immediately end when the
- // Manager is stopped, otherwise, this setting is unsafe. Setting this significantly
- // speeds up voluntary leader transitions as the new leader don't have to wait
- // LeaseDuration time first.
- //
- // In the default scaffold provided, the program ends immediately after
- // the manager stops, so would be fine to enable this option. However,
- // if you are doing or is intended to do any operation such as perform cleanups
- // after the manager stops then its usage might be unsafe.
- // LeaderElectionReleaseOnCancel: true,
- })
- if err != nil {
- setupLog.Error(err, "unable to start manager")
- os.Exit(1)
- }
-
- if err = (&controller.PackagesReconciler{
- Client: mgr.GetClient(),
- Scheme: mgr.GetScheme(),
- }).SetupWithManager(mgr); err != nil {
- setupLog.Error(err, "unable to create controller", "controller", "Package")
- os.Exit(1)
- }
- if err = (&controller.FunctionReconciler{
- Client: mgr.GetClient(),
- Scheme: mgr.GetScheme(),
- Config: config,
- }).SetupWithManager(mgr); err != nil {
- setupLog.Error(err, "unable to create controller", "controller", "Function")
- os.Exit(1)
- }
- // nolint:goconst
- if os.Getenv("ENABLE_WEBHOOKS") != "false" {
- if err = webhookfsv1alpha1.SetupFunctionWebhookWithManager(mgr); err != nil {
- setupLog.Error(err, "unable to create webhook", "webhook", "Function")
- os.Exit(1)
- }
- }
- // nolint:goconst
- if os.Getenv("ENABLE_WEBHOOKS") != "false" {
- if err = webhookfsv1alpha1.SetupPackagesWebhookWithManager(mgr); err != nil {
- setupLog.Error(err, "unable to create webhook", "webhook", "Package")
- os.Exit(1)
- }
- }
- // +kubebuilder:scaffold:builder
-
- if metricsCertWatcher != nil {
- setupLog.Info("Adding metrics certificate watcher to manager")
- if err := mgr.Add(metricsCertWatcher); err != nil {
- setupLog.Error(err, "unable to add metrics certificate watcher to manager")
- os.Exit(1)
- }
- }
-
- if webhookCertWatcher != nil {
- setupLog.Info("Adding webhook certificate watcher to manager")
- if err := mgr.Add(webhookCertWatcher); err != nil {
- setupLog.Error(err, "unable to add webhook certificate watcher to manager")
- os.Exit(1)
- }
- }
-
- if err := mgr.AddHealthzCheck("healthz", healthz.Ping); err != nil {
- setupLog.Error(err, "unable to set up health check")
- os.Exit(1)
- }
- if err := mgr.AddReadyzCheck("readyz", healthz.Ping); err != nil {
- setupLog.Error(err, "unable to set up ready check")
- os.Exit(1)
- }
-
- setupLog.Info("starting manager")
- if err := mgr.Start(ctrl.SetupSignalHandler()); err != nil {
- setupLog.Error(err, "problem running manager")
- os.Exit(1)
- }
-}
diff --git a/operator/config/certmanager/certificate-metrics.yaml b/operator/config/certmanager/certificate-metrics.yaml
deleted file mode 100644
index 1125de29..00000000
--- a/operator/config/certmanager/certificate-metrics.yaml
+++ /dev/null
@@ -1,20 +0,0 @@
-# The following manifests contain a self-signed issuer CR and a metrics certificate CR.
-# More document can be found at https://docs.cert-manager.io
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: metrics-certs # this name should match the one appeared in kustomizeconfig.yaml
- namespace: system
-spec:
- dnsNames:
- # SERVICE_NAME and SERVICE_NAMESPACE will be substituted by kustomize
- # replacements in the config/default/kustomization.yaml file.
- - SERVICE_NAME.SERVICE_NAMESPACE.svc
- - SERVICE_NAME.SERVICE_NAMESPACE.svc.cluster.local
- issuerRef:
- kind: Issuer
- name: selfsigned-issuer
- secretName: metrics-server-cert
diff --git a/operator/config/certmanager/certificate-webhook.yaml b/operator/config/certmanager/certificate-webhook.yaml
deleted file mode 100644
index a839fa0e..00000000
--- a/operator/config/certmanager/certificate-webhook.yaml
+++ /dev/null
@@ -1,20 +0,0 @@
-# The following manifests contain a self-signed issuer CR and a certificate CR.
-# More document can be found at https://docs.cert-manager.io
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml
- namespace: system
-spec:
- # SERVICE_NAME and SERVICE_NAMESPACE will be substituted by kustomize
- # replacements in the config/default/kustomization.yaml file.
- dnsNames:
- - SERVICE_NAME.SERVICE_NAMESPACE.svc
- - SERVICE_NAME.SERVICE_NAMESPACE.svc.cluster.local
- issuerRef:
- kind: Issuer
- name: selfsigned-issuer
- secretName: webhook-server-cert
diff --git a/operator/config/certmanager/issuer.yaml b/operator/config/certmanager/issuer.yaml
deleted file mode 100644
index 82ee162c..00000000
--- a/operator/config/certmanager/issuer.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-# The following manifest contains a self-signed issuer CR.
-# More information can be found at https://docs.cert-manager.io
-# WARNING: Targets CertManager v1.0. Check https://cert-manager.io/docs/installation/upgrading/ for breaking changes.
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: selfsigned-issuer
- namespace: system
-spec:
- selfSigned: {}
diff --git a/operator/config/certmanager/kustomization.yaml b/operator/config/certmanager/kustomization.yaml
deleted file mode 100644
index fcb7498e..00000000
--- a/operator/config/certmanager/kustomization.yaml
+++ /dev/null
@@ -1,7 +0,0 @@
-resources:
-- issuer.yaml
-- certificate-webhook.yaml
-- certificate-metrics.yaml
-
-configurations:
-- kustomizeconfig.yaml
diff --git a/operator/config/certmanager/kustomizeconfig.yaml b/operator/config/certmanager/kustomizeconfig.yaml
deleted file mode 100644
index cf6f89e8..00000000
--- a/operator/config/certmanager/kustomizeconfig.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-# This configuration is for teaching kustomize how to update name ref substitution
-nameReference:
-- kind: Issuer
- group: cert-manager.io
- fieldSpecs:
- - kind: Certificate
- group: cert-manager.io
- path: spec/issuerRef/name
diff --git a/operator/config/crd/bases/fs.functionstream.github.io_functions.yaml b/operator/config/crd/bases/fs.functionstream.github.io_functions.yaml
deleted file mode 100644
index 9214f7d7..00000000
--- a/operator/config/crd/bases/fs.functionstream.github.io_functions.yaml
+++ /dev/null
@@ -1,150 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
- annotations:
- controller-gen.kubebuilder.io/version: v0.17.2
- name: functions.fs.functionstream.github.io
-spec:
- group: fs.functionstream.github.io
- names:
- kind: Function
- listKind: FunctionList
- plural: functions
- singular: function
- scope: Namespaced
- versions:
- - name: v1alpha1
- schema:
- openAPIV3Schema:
- description: Function is the Schema for the functions API.
- properties:
- apiVersion:
- description: |-
- APIVersion defines the versioned schema of this representation of an object.
- Servers should convert recognized schemas to the latest internal value, and
- may reject unrecognized values.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
- type: string
- kind:
- description: |-
- Kind is a string value representing the REST resource this object represents.
- Servers may infer this from the endpoint the client submits requests to.
- Cannot be updated.
- In CamelCase.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
- type: string
- metadata:
- type: object
- spec:
- description: FunctionSpec defines the desired state of Function
- properties:
- config:
- additionalProperties:
- x-kubernetes-preserve-unknown-fields: true
- description: Configurations as key-value pairs
- type: object
- description:
- description: Description of the function
- type: string
- displayName:
- description: Display name of the function
- type: string
- module:
- description: Module name
- type: string
- packageRef:
- description: Package reference
- properties:
- name:
- description: Name of the Package resource
- type: string
- namespace:
- description: Namespace of the Package resource
- type: string
- required:
- - name
- type: object
- replicas:
- default: 1
- description: Number of replicas for the function deployment
- format: int32
- type: integer
- requestSource:
- description: Request source
- properties:
- pulsar:
- description: Pulsar source specification
- properties:
- topic:
- description: Topic name
- type: string
- required:
- - topic
- type: object
- type: object
- sink:
- description: Sink specifies the sink configuration
- properties:
- pulsar:
- description: Pulsar sink specification
- properties:
- topic:
- description: Topic name
- type: string
- required:
- - topic
- type: object
- type: object
- sources:
- description: List of sources
- items:
- description: SourceSpec defines a source or sink specification
- properties:
- pulsar:
- description: Pulsar source specification
- properties:
- topic:
- description: Topic name
- type: string
- required:
- - topic
- type: object
- type: object
- type: array
- subscriptionName:
- type: string
- required:
- - module
- - packageRef
- type: object
- status:
- description: FunctionStatus defines the observed state of Function
- properties:
- availableReplicas:
- description: Number of available pods (ready for at least minReadySeconds)
- format: int32
- type: integer
- observedGeneration:
- description: Most recent generation observed for this Function
- format: int64
- type: integer
- readyReplicas:
- description: Total number of ready pods
- format: int32
- type: integer
- replicas:
- description: Total number of non-terminated pods targeted by this
- deployment
- format: int32
- type: integer
- updatedReplicas:
- description: Total number of updated pods
- format: int32
- type: integer
- type: object
- type: object
- served: true
- storage: true
- subresources:
- status: {}
diff --git a/operator/config/crd/bases/fs.functionstream.github.io_packages.yaml b/operator/config/crd/bases/fs.functionstream.github.io_packages.yaml
deleted file mode 100644
index 5e2238fb..00000000
--- a/operator/config/crd/bases/fs.functionstream.github.io_packages.yaml
+++ /dev/null
@@ -1,125 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
- annotations:
- controller-gen.kubebuilder.io/version: v0.17.2
- name: packages.fs.functionstream.github.io
-spec:
- group: fs.functionstream.github.io
- names:
- kind: Package
- listKind: PackageList
- plural: packages
- shortNames:
- - pkg
- singular: package
- scope: Namespaced
- versions:
- - name: v1alpha1
- schema:
- openAPIV3Schema:
- description: Package is the Schema for the packages API.
- properties:
- apiVersion:
- description: |-
- APIVersion defines the versioned schema of this representation of an object.
- Servers should convert recognized schemas to the latest internal value, and
- may reject unrecognized values.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
- type: string
- kind:
- description: |-
- Kind is a string value representing the REST resource this object represents.
- Servers may infer this from the endpoint the client submits requests to.
- Cannot be updated.
- In CamelCase.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
- type: string
- metadata:
- type: object
- spec:
- description: PackageSpec defines the desired state of Package
- properties:
- description:
- description: Description provides additional information about the
- package
- type: string
- displayName:
- description: DisplayName is the human-readable name of the package
- type: string
- functionType:
- description: FunctionType contains function type configuration
- properties:
- cloud:
- description: Cloud contains cloud function package configuration
- properties:
- image:
- description: Image specifies the container image for cloud
- deployment
- type: string
- required:
- - image
- type: object
- type: object
- logo:
- description: Logo is the URL or base64 encoded image for the package
- logo
- type: string
- modules:
- additionalProperties:
- description: Module defines a module within a package
- properties:
- config:
- additionalProperties:
- description: ConfigItem defines a configuration item for a
- module
- properties:
- description:
- description: Description provides additional information
- about the config item
- type: string
- displayName:
- description: DisplayName is the human-readable name of
- the config item
- type: string
- required:
- description: Required indicates whether this config item
- is mandatory
- type: boolean
- type:
- description: Type specifies the data type of the config
- item
- type: string
- type: object
- description: Config is a list of configuration items for the
- module
- type: object
- description:
- description: Description provides additional information about
- the module
- type: string
- displayName:
- description: DisplayName is the human-readable name of the module
- type: string
- sinkSchema:
- description: SinkSchema defines the output schema for the module
- type: string
- sourceSchema:
- description: SourceSchema defines the input schema for the module
- type: string
- type: object
- description: Modules is a map of module names to their configurations
- type: object
- required:
- - functionType
- - modules
- type: object
- status:
- description: PackageStatus defines the observed state of Package.
- type: object
- type: object
- served: true
- storage: true
- subresources:
- status: {}
diff --git a/operator/config/crd/kustomization.yaml b/operator/config/crd/kustomization.yaml
deleted file mode 100644
index a141ac7c..00000000
--- a/operator/config/crd/kustomization.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-# This kustomization.yaml is not intended to be run by itself,
-# since it depends on service name and namespace that are out of this kustomize package.
-# It should be run by config/default
-resources:
-- bases/fs.functionstream.github.io_functions.yaml
-- bases/fs.functionstream.github.io_packages.yaml
-# +kubebuilder:scaffold:crdkustomizeresource
-
-patches:
-# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix.
-# patches here are for enabling the conversion webhook for each CRD
-# +kubebuilder:scaffold:crdkustomizewebhookpatch
-
-# [WEBHOOK] To enable webhook, uncomment the following section
-# the following config is for teaching kustomize how to do kustomization for CRDs.
-#configurations:
-#- kustomizeconfig.yaml
diff --git a/operator/config/crd/kustomizeconfig.yaml b/operator/config/crd/kustomizeconfig.yaml
deleted file mode 100644
index ec5c150a..00000000
--- a/operator/config/crd/kustomizeconfig.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-# This file is for teaching kustomize how to substitute name and namespace reference in CRD
-nameReference:
-- kind: Service
- version: v1
- fieldSpecs:
- - kind: CustomResourceDefinition
- version: v1
- group: apiextensions.k8s.io
- path: spec/conversion/webhook/clientConfig/service/name
-
-namespace:
-- kind: CustomResourceDefinition
- version: v1
- group: apiextensions.k8s.io
- path: spec/conversion/webhook/clientConfig/service/namespace
- create: false
-
-varReference:
-- path: metadata/annotations
diff --git a/operator/config/default/cert_metrics_manager_patch.yaml b/operator/config/default/cert_metrics_manager_patch.yaml
deleted file mode 100644
index d9750155..00000000
--- a/operator/config/default/cert_metrics_manager_patch.yaml
+++ /dev/null
@@ -1,30 +0,0 @@
-# This patch adds the args, volumes, and ports to allow the manager to use the metrics-server certs.
-
-# Add the volumeMount for the metrics-server certs
-- op: add
- path: /spec/template/spec/containers/0/volumeMounts/-
- value:
- mountPath: /tmp/k8s-metrics-server/metrics-certs
- name: metrics-certs
- readOnly: true
-
-# Add the --metrics-cert-path argument for the metrics server
-- op: add
- path: /spec/template/spec/containers/0/args/-
- value: --metrics-cert-path=/tmp/k8s-metrics-server/metrics-certs
-
-# Add the metrics-server certs volume configuration
-- op: add
- path: /spec/template/spec/volumes/-
- value:
- name: metrics-certs
- secret:
- secretName: metrics-server-cert
- optional: false
- items:
- - key: ca.crt
- path: ca.crt
- - key: tls.crt
- path: tls.crt
- - key: tls.key
- path: tls.key
diff --git a/operator/config/default/kustomization.yaml b/operator/config/default/kustomization.yaml
deleted file mode 100644
index cf22f0b5..00000000
--- a/operator/config/default/kustomization.yaml
+++ /dev/null
@@ -1,234 +0,0 @@
-# Adds namespace to all resources.
-namespace: operator-system
-
-# Value of this field is prepended to the
-# names of all resources, e.g. a deployment named
-# "wordpress" becomes "alices-wordpress".
-# Note that it should also match with the prefix (text before '-') of the namespace
-# field above.
-namePrefix: operator-
-
-# Labels to add to all resources and selectors.
-#labels:
-#- includeSelectors: true
-# pairs:
-# someName: someValue
-
-resources:
-- ../crd
-- ../rbac
-- ../manager
-# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
-# crd/kustomization.yaml
-- ../webhook
-# [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'. 'WEBHOOK' components are required.
-- ../certmanager
-# [PROMETHEUS] To enable prometheus monitor, uncomment all sections with 'PROMETHEUS'.
-#- ../prometheus
-# [METRICS] Expose the controller manager metrics service.
-- metrics_service.yaml
-# [NETWORK POLICY] Protect the /metrics endpoint and Webhook Server with NetworkPolicy.
-# Only Pod(s) running a namespace labeled with 'metrics: enabled' will be able to gather the metrics.
-# Only CR(s) which requires webhooks and are applied on namespaces labeled with 'webhooks: enabled' will
-# be able to communicate with the Webhook Server.
-#- ../network-policy
-
-# Uncomment the patches line if you enable Metrics
-patches:
-# [METRICS] The following patch will enable the metrics endpoint using HTTPS and the port :8443.
-# More info: https://book.kubebuilder.io/reference/metrics
-- path: manager_metrics_patch.yaml
- target:
- kind: Deployment
-
-# Uncomment the patches line if you enable Metrics and CertManager
-# [METRICS-WITH-CERTS] To enable metrics protected with certManager, uncomment the following line.
-# This patch will protect the metrics with certManager self-signed certs.
-#- path: cert_metrics_manager_patch.yaml
-# target:
-# kind: Deployment
-
-# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
-# crd/kustomization.yaml
-- path: manager_webhook_patch.yaml
- target:
- kind: Deployment
-
-# [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER' prefix.
-# Uncomment the following replacements to add the cert-manager CA injection annotations
-replacements:
- - source: # Uncomment the following block to enable certificates for metrics
- kind: Service
- version: v1
- name: controller-manager-metrics-service
- fieldPath: metadata.name
- targets:
- - select:
- kind: Certificate
- group: cert-manager.io
- version: v1
- name: metrics-certs
- fieldPaths:
- - spec.dnsNames.0
- - spec.dnsNames.1
- options:
- delimiter: '.'
- index: 0
- create: true
- - select: # Uncomment the following to set the Service name for TLS config in Prometheus ServiceMonitor
- kind: ServiceMonitor
- group: monitoring.coreos.com
- version: v1
- name: controller-manager-metrics-monitor
- fieldPaths:
- - spec.endpoints.0.tlsConfig.serverName
- options:
- delimiter: '.'
- index: 0
- create: true
-
- - source:
- kind: Service
- version: v1
- name: controller-manager-metrics-service
- fieldPath: metadata.namespace
- targets:
- - select:
- kind: Certificate
- group: cert-manager.io
- version: v1
- name: metrics-certs
- fieldPaths:
- - spec.dnsNames.0
- - spec.dnsNames.1
- options:
- delimiter: '.'
- index: 1
- create: true
- - select: # Uncomment the following to set the Service namespace for TLS in Prometheus ServiceMonitor
- kind: ServiceMonitor
- group: monitoring.coreos.com
- version: v1
- name: controller-manager-metrics-monitor
- fieldPaths:
- - spec.endpoints.0.tlsConfig.serverName
- options:
- delimiter: '.'
- index: 1
- create: true
-
- - source: # Uncomment the following block if you have any webhook
- kind: Service
- version: v1
- name: webhook-service
- fieldPath: .metadata.name # Name of the service
- targets:
- - select:
- kind: Certificate
- group: cert-manager.io
- version: v1
- name: serving-cert
- fieldPaths:
- - .spec.dnsNames.0
- - .spec.dnsNames.1
- options:
- delimiter: '.'
- index: 0
- create: true
- - source:
- kind: Service
- version: v1
- name: webhook-service
- fieldPath: .metadata.namespace # Namespace of the service
- targets:
- - select:
- kind: Certificate
- group: cert-manager.io
- version: v1
- name: serving-cert
- fieldPaths:
- - .spec.dnsNames.0
- - .spec.dnsNames.1
- options:
- delimiter: '.'
- index: 1
- create: true
-
- - source: # Uncomment the following block if you have a ValidatingWebhook (--programmatic-validation)
- kind: Certificate
- group: cert-manager.io
- version: v1
- name: serving-cert # This name should match the one in certificate.yaml
- fieldPath: .metadata.namespace # Namespace of the certificate CR
- targets:
- - select:
- kind: ValidatingWebhookConfiguration
- fieldPaths:
- - .metadata.annotations.[cert-manager.io/inject-ca-from]
- options:
- delimiter: '/'
- index: 0
- create: true
- - source:
- kind: Certificate
- group: cert-manager.io
- version: v1
- name: serving-cert
- fieldPath: .metadata.name
- targets:
- - select:
- kind: ValidatingWebhookConfiguration
- fieldPaths:
- - .metadata.annotations.[cert-manager.io/inject-ca-from]
- options:
- delimiter: '/'
- index: 1
- create: true
-
- - source: # Uncomment the following block if you have a DefaultingWebhook (--defaulting )
- kind: Certificate
- group: cert-manager.io
- version: v1
- name: serving-cert
- fieldPath: .metadata.namespace # Namespace of the certificate CR
- targets:
- - select:
- kind: MutatingWebhookConfiguration
- fieldPaths:
- - .metadata.annotations.[cert-manager.io/inject-ca-from]
- options:
- delimiter: '/'
- index: 0
- create: true
- - source:
- kind: Certificate
- group: cert-manager.io
- version: v1
- name: serving-cert
- fieldPath: .metadata.name
- targets:
- - select:
- kind: MutatingWebhookConfiguration
- fieldPaths:
- - .metadata.annotations.[cert-manager.io/inject-ca-from]
- options:
- delimiter: '/'
- index: 1
- create: true
-
-# - source: # Uncomment the following block if you have a ConversionWebhook (--conversion)
-# kind: Certificate
-# group: cert-manager.io
-# version: v1
-# name: serving-cert
-# fieldPath: .metadata.namespace # Namespace of the certificate CR
-# targets: # Do not remove or uncomment the following scaffold marker; required to generate code for target CRD.
-# +kubebuilder:scaffold:crdkustomizecainjectionns
-# - source:
-# kind: Certificate
-# group: cert-manager.io
-# version: v1
-# name: serving-cert
-# fieldPath: .metadata.name
-# targets: # Do not remove or uncomment the following scaffold marker; required to generate code for target CRD.
-# +kubebuilder:scaffold:crdkustomizecainjectionname
diff --git a/operator/config/default/manager_metrics_patch.yaml b/operator/config/default/manager_metrics_patch.yaml
deleted file mode 100644
index 2aaef653..00000000
--- a/operator/config/default/manager_metrics_patch.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-# This patch adds the args to allow exposing the metrics endpoint using HTTPS
-- op: add
- path: /spec/template/spec/containers/0/args/0
- value: --metrics-bind-address=:8443
diff --git a/operator/config/default/manager_webhook_patch.yaml b/operator/config/default/manager_webhook_patch.yaml
deleted file mode 100644
index 963c8a4c..00000000
--- a/operator/config/default/manager_webhook_patch.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-# This patch ensures the webhook certificates are properly mounted in the manager container.
-# It configures the necessary arguments, volumes, volume mounts, and container ports.
-
-# Add the --webhook-cert-path argument for configuring the webhook certificate path
-- op: add
- path: /spec/template/spec/containers/0/args/-
- value: --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs
-
-# Add the volumeMount for the webhook certificates
-- op: add
- path: /spec/template/spec/containers/0/volumeMounts/-
- value:
- mountPath: /tmp/k8s-webhook-server/serving-certs
- name: webhook-certs
- readOnly: true
-
-# Add the port configuration for the webhook server
-- op: add
- path: /spec/template/spec/containers/0/ports/-
- value:
- containerPort: 9443
- name: webhook-server
- protocol: TCP
-
-# Add the volume configuration for the webhook certificates
-- op: add
- path: /spec/template/spec/volumes/-
- value:
- name: webhook-certs
- secret:
- secretName: webhook-server-cert
diff --git a/operator/config/default/metrics_service.yaml b/operator/config/default/metrics_service.yaml
deleted file mode 100644
index 1f4155a7..00000000
--- a/operator/config/default/metrics_service.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
- labels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: controller-manager-metrics-service
- namespace: system
-spec:
- ports:
- - name: https
- port: 8443
- protocol: TCP
- targetPort: 8443
- selector:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
diff --git a/operator/config/manager/kustomization.yaml b/operator/config/manager/kustomization.yaml
deleted file mode 100644
index f107c4d3..00000000
--- a/operator/config/manager/kustomization.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-resources:
-- manager.yaml
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-images:
-- name: controller
- newName: functionstream/operator
- newTag: latest
diff --git a/operator/config/manager/manager.yaml b/operator/config/manager/manager.yaml
deleted file mode 100644
index 5c9e4c42..00000000
--- a/operator/config/manager/manager.yaml
+++ /dev/null
@@ -1,98 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
- labels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: system
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: controller-manager
- namespace: system
- labels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
-spec:
- selector:
- matchLabels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- replicas: 1
- template:
- metadata:
- annotations:
- kubectl.kubernetes.io/default-container: manager
- labels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- spec:
- # TODO(user): Uncomment the following code to configure the nodeAffinity expression
- # according to the platforms which are supported by your solution.
- # It is considered best practice to support multiple architectures. You can
- # build your manager image using the makefile target docker-buildx.
- # affinity:
- # nodeAffinity:
- # requiredDuringSchedulingIgnoredDuringExecution:
- # nodeSelectorTerms:
- # - matchExpressions:
- # - key: kubernetes.io/arch
- # operator: In
- # values:
- # - amd64
- # - arm64
- # - ppc64le
- # - s390x
- # - key: kubernetes.io/os
- # operator: In
- # values:
- # - linux
- securityContext:
- # Projects are configured by default to adhere to the "restricted" Pod Security Standards.
- # This ensures that deployments meet the highest security requirements for Kubernetes.
- # For more details, see: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
- runAsNonRoot: true
- seccompProfile:
- type: RuntimeDefault
- containers:
- - command:
- - /manager
- args:
- - --leader-elect
- - --health-probe-bind-address=:8081
- image: functionstream/operator:latest
- name: manager
- ports: []
- securityContext:
- allowPrivilegeEscalation: false
- capabilities:
- drop:
- - "ALL"
- livenessProbe:
- httpGet:
- path: /healthz
- port: 8081
- initialDelaySeconds: 15
- periodSeconds: 20
- readinessProbe:
- httpGet:
- path: /readyz
- port: 8081
- initialDelaySeconds: 5
- periodSeconds: 10
- # TODO(user): Configure the resources accordingly based on the project requirements.
- # More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
- resources:
- limits:
- cpu: 500m
- memory: 128Mi
- requests:
- cpu: 10m
- memory: 64Mi
- volumeMounts: []
- volumes: []
- serviceAccountName: controller-manager
- terminationGracePeriodSeconds: 10
diff --git a/operator/config/network-policy/allow-metrics-traffic.yaml b/operator/config/network-policy/allow-metrics-traffic.yaml
deleted file mode 100644
index d3ac9836..00000000
--- a/operator/config/network-policy/allow-metrics-traffic.yaml
+++ /dev/null
@@ -1,27 +0,0 @@
-# This NetworkPolicy allows ingress traffic
-# with Pods running on namespaces labeled with 'metrics: enabled'. Only Pods on those
-# namespaces are able to gather data from the metrics endpoint.
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: allow-metrics-traffic
- namespace: system
-spec:
- podSelector:
- matchLabels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- policyTypes:
- - Ingress
- ingress:
- # This allows ingress traffic from any namespace with the label metrics: enabled
- - from:
- - namespaceSelector:
- matchLabels:
- metrics: enabled # Only from namespaces with this label
- ports:
- - port: 8443
- protocol: TCP
diff --git a/operator/config/network-policy/allow-webhook-traffic.yaml b/operator/config/network-policy/allow-webhook-traffic.yaml
deleted file mode 100644
index 08fbd901..00000000
--- a/operator/config/network-policy/allow-webhook-traffic.yaml
+++ /dev/null
@@ -1,27 +0,0 @@
-# This NetworkPolicy allows ingress traffic to your webhook server running
-# as part of the controller-manager from specific namespaces and pods. CR(s) which uses webhooks
-# will only work when applied in namespaces labeled with 'webhook: enabled'
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: allow-webhook-traffic
- namespace: system
-spec:
- podSelector:
- matchLabels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- policyTypes:
- - Ingress
- ingress:
- # This allows ingress traffic from any namespace with the label webhook: enabled
- - from:
- - namespaceSelector:
- matchLabels:
- webhook: enabled # Only from namespaces with this label
- ports:
- - port: 443
- protocol: TCP
diff --git a/operator/config/network-policy/kustomization.yaml b/operator/config/network-policy/kustomization.yaml
deleted file mode 100644
index 0872bee1..00000000
--- a/operator/config/network-policy/kustomization.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-resources:
-- allow-webhook-traffic.yaml
-- allow-metrics-traffic.yaml
diff --git a/operator/config/prometheus/kustomization.yaml b/operator/config/prometheus/kustomization.yaml
deleted file mode 100644
index fdc5481b..00000000
--- a/operator/config/prometheus/kustomization.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-resources:
-- monitor.yaml
-
-# [PROMETHEUS-WITH-CERTS] The following patch configures the ServiceMonitor in ../prometheus
-# to securely reference certificates created and managed by cert-manager.
-# Additionally, ensure that you uncomment the [METRICS WITH CERTMANAGER] patch under config/default/kustomization.yaml
-# to mount the "metrics-server-cert" secret in the Manager Deployment.
-#patches:
-# - path: monitor_tls_patch.yaml
-# target:
-# kind: ServiceMonitor
diff --git a/operator/config/prometheus/monitor.yaml b/operator/config/prometheus/monitor.yaml
deleted file mode 100644
index b73583e3..00000000
--- a/operator/config/prometheus/monitor.yaml
+++ /dev/null
@@ -1,27 +0,0 @@
-# Prometheus Monitor Service (Metrics)
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
- labels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: controller-manager-metrics-monitor
- namespace: system
-spec:
- endpoints:
- - path: /metrics
- port: https # Ensure this is the name of the port that exposes HTTPS metrics
- scheme: https
- bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
- tlsConfig:
- # TODO(user): The option insecureSkipVerify: true is not recommended for production since it disables
- # certificate verification, exposing the system to potential man-in-the-middle attacks.
- # For production environments, it is recommended to use cert-manager for automatic TLS certificate management.
- # To apply this configuration, enable cert-manager and use the patch located at config/prometheus/servicemonitor_tls_patch.yaml,
- # which securely references the certificate from the 'metrics-server-cert' secret.
- insecureSkipVerify: true
- selector:
- matchLabels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
diff --git a/operator/config/prometheus/monitor_tls_patch.yaml b/operator/config/prometheus/monitor_tls_patch.yaml
deleted file mode 100644
index 5bf84ce0..00000000
--- a/operator/config/prometheus/monitor_tls_patch.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-# Patch for Prometheus ServiceMonitor to enable secure TLS configuration
-# using certificates managed by cert-manager
-- op: replace
- path: /spec/endpoints/0/tlsConfig
- value:
- # SERVICE_NAME and SERVICE_NAMESPACE will be substituted by kustomize
- serverName: SERVICE_NAME.SERVICE_NAMESPACE.svc
- insecureSkipVerify: false
- ca:
- secret:
- name: metrics-server-cert
- key: ca.crt
- cert:
- secret:
- name: metrics-server-cert
- key: tls.crt
- keySecret:
- name: metrics-server-cert
- key: tls.key
diff --git a/operator/config/rbac/function_admin_role.yaml b/operator/config/rbac/function_admin_role.yaml
deleted file mode 100644
index 6dd5cc7d..00000000
--- a/operator/config/rbac/function_admin_role.yaml
+++ /dev/null
@@ -1,27 +0,0 @@
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants full permissions ('*') over fs.functionstream.github.io.
-# This role is intended for users authorized to modify roles and bindings within the cluster,
-# enabling them to delegate specific permissions to other users or groups as needed.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: function-admin-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- verbs:
- - '*'
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- verbs:
- - get
diff --git a/operator/config/rbac/function_editor_role.yaml b/operator/config/rbac/function_editor_role.yaml
deleted file mode 100644
index 20cf07a7..00000000
--- a/operator/config/rbac/function_editor_role.yaml
+++ /dev/null
@@ -1,33 +0,0 @@
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants permissions to create, update, and delete resources within the fs.functionstream.github.io.
-# This role is intended for users who need to manage these resources
-# but should not control RBAC or manage permissions for others.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: function-editor-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- verbs:
- - get
diff --git a/operator/config/rbac/function_viewer_role.yaml b/operator/config/rbac/function_viewer_role.yaml
deleted file mode 100644
index 877da612..00000000
--- a/operator/config/rbac/function_viewer_role.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants read-only access to fs.functionstream.github.io resources.
-# This role is intended for users who need visibility into these resources
-# without permissions to modify them. It is ideal for monitoring purposes and limited-access viewing.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: function-viewer-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- verbs:
- - get
- - list
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- verbs:
- - get
diff --git a/operator/config/rbac/kustomization.yaml b/operator/config/rbac/kustomization.yaml
deleted file mode 100644
index 4d84bad8..00000000
--- a/operator/config/rbac/kustomization.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-resources:
-# All RBAC will be applied under this service account in
-# the deployment namespace. You may comment out this resource
-# if your manager will use a service account that exists at
-# runtime. Be sure to update RoleBinding and ClusterRoleBinding
-# subjects if changing service account names.
-- service_account.yaml
-- role.yaml
-- role_binding.yaml
-- leader_election_role.yaml
-- leader_election_role_binding.yaml
-# The following RBAC configurations are used to protect
-# the metrics endpoint with authn/authz. These configurations
-# ensure that only authorized users and service accounts
-# can access the metrics endpoint. Comment the following
-# permissions if you want to disable this protection.
-# More info: https://book.kubebuilder.io/reference/metrics.html
-- metrics_auth_role.yaml
-- metrics_auth_role_binding.yaml
-- metrics_reader_role.yaml
-# For each CRD, "Admin", "Editor" and "Viewer" roles are scaffolded by
-# default, aiding admins in cluster management. Those roles are
-# not used by the {{ .ProjectName }} itself. You can comment the following lines
-# if you do not want those helpers be installed with your Project.
-- function_admin_role.yaml
-- function_editor_role.yaml
-- function_viewer_role.yaml
-- packages_admin_role.yaml
-- packages_editor_role.yaml
-- packages_viewer_role.yaml
-
diff --git a/operator/config/rbac/leader_election_role.yaml b/operator/config/rbac/leader_election_role.yaml
deleted file mode 100644
index 507e52b1..00000000
--- a/operator/config/rbac/leader_election_role.yaml
+++ /dev/null
@@ -1,40 +0,0 @@
-# permissions to do leader election.
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: leader-election-role
-rules:
-- apiGroups:
- - ""
- resources:
- - configmaps
- verbs:
- - get
- - list
- - watch
- - create
- - update
- - patch
- - delete
-- apiGroups:
- - coordination.k8s.io
- resources:
- - leases
- verbs:
- - get
- - list
- - watch
- - create
- - update
- - patch
- - delete
-- apiGroups:
- - ""
- resources:
- - events
- verbs:
- - create
- - patch
diff --git a/operator/config/rbac/leader_election_role_binding.yaml b/operator/config/rbac/leader_election_role_binding.yaml
deleted file mode 100644
index c60ecc72..00000000
--- a/operator/config/rbac/leader_election_role_binding.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: leader-election-rolebinding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: leader-election-role
-subjects:
-- kind: ServiceAccount
- name: controller-manager
- namespace: system
diff --git a/operator/config/rbac/metrics_auth_role.yaml b/operator/config/rbac/metrics_auth_role.yaml
deleted file mode 100644
index 32d2e4ec..00000000
--- a/operator/config/rbac/metrics_auth_role.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: metrics-auth-role
-rules:
-- apiGroups:
- - authentication.k8s.io
- resources:
- - tokenreviews
- verbs:
- - create
-- apiGroups:
- - authorization.k8s.io
- resources:
- - subjectaccessreviews
- verbs:
- - create
diff --git a/operator/config/rbac/metrics_auth_role_binding.yaml b/operator/config/rbac/metrics_auth_role_binding.yaml
deleted file mode 100644
index e775d67f..00000000
--- a/operator/config/rbac/metrics_auth_role_binding.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: metrics-auth-rolebinding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: metrics-auth-role
-subjects:
-- kind: ServiceAccount
- name: controller-manager
- namespace: system
diff --git a/operator/config/rbac/metrics_reader_role.yaml b/operator/config/rbac/metrics_reader_role.yaml
deleted file mode 100644
index 51a75db4..00000000
--- a/operator/config/rbac/metrics_reader_role.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: metrics-reader
-rules:
-- nonResourceURLs:
- - "/metrics"
- verbs:
- - get
diff --git a/operator/config/rbac/packages_admin_role.yaml b/operator/config/rbac/packages_admin_role.yaml
deleted file mode 100644
index 55d2e6d8..00000000
--- a/operator/config/rbac/packages_admin_role.yaml
+++ /dev/null
@@ -1,27 +0,0 @@
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants full permissions ('*') over fs.functionstream.github.io.
-# This role is intended for users authorized to modify roles and bindings within the cluster,
-# enabling them to delegate specific permissions to other users or groups as needed.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: packages-admin-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - '*'
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages/status
- verbs:
- - get
diff --git a/operator/config/rbac/packages_editor_role.yaml b/operator/config/rbac/packages_editor_role.yaml
deleted file mode 100644
index af55448f..00000000
--- a/operator/config/rbac/packages_editor_role.yaml
+++ /dev/null
@@ -1,33 +0,0 @@
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants permissions to create, update, and delete resources within the fs.functionstream.github.io.
-# This role is intended for users who need to manage these resources
-# but should not control RBAC or manage permissions for others.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: packages-editor-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages/status
- verbs:
- - get
diff --git a/operator/config/rbac/packages_viewer_role.yaml b/operator/config/rbac/packages_viewer_role.yaml
deleted file mode 100644
index dae9caa4..00000000
--- a/operator/config/rbac/packages_viewer_role.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants read-only access to fs.functionstream.github.io resources.
-# This role is intended for users who need visibility into these resources
-# without permissions to modify them. It is ideal for monitoring purposes and limited-access viewing.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: packages-viewer-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - get
- - list
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages/status
- verbs:
- - get
diff --git a/operator/config/rbac/role.yaml b/operator/config/rbac/role.yaml
deleted file mode 100644
index 79cfd5c4..00000000
--- a/operator/config/rbac/role.yaml
+++ /dev/null
@@ -1,55 +0,0 @@
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: manager-role
-rules:
-- apiGroups:
- - apps
- resources:
- - deployments
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- - package
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/finalizers
- - package/finalizers
- verbs:
- - update
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- - package/status
- verbs:
- - get
- - patch
- - update
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - get
- - list
- - watch
diff --git a/operator/config/rbac/role_binding.yaml b/operator/config/rbac/role_binding.yaml
deleted file mode 100644
index 5d279606..00000000
--- a/operator/config/rbac/role_binding.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: manager-rolebinding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: manager-role
-subjects:
-- kind: ServiceAccount
- name: controller-manager
- namespace: system
diff --git a/operator/config/rbac/service_account.yaml b/operator/config/rbac/service_account.yaml
deleted file mode 100644
index 3567d2fe..00000000
--- a/operator/config/rbac/service_account.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: controller-manager
- namespace: system
diff --git a/operator/config/samples/fs_v1alpha1_function.yaml b/operator/config/samples/fs_v1alpha1_function.yaml
deleted file mode 100644
index 62ca5471..00000000
--- a/operator/config/samples/fs_v1alpha1_function.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: fs.functionstream.github.io/v1alpha1
-kind: Function
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: function-sample
-spec:
- displayName: "Sample Function"
- description: "A sample function for demonstration purposes."
- packageRef:
- name: "sample-package"
- # namespace: "default" # Optional: defaults to the same namespace as the Function
- module: "sample-module"
- # TODO(user): Add fields here
diff --git a/operator/config/samples/fs_v1alpha1_packages.yaml b/operator/config/samples/fs_v1alpha1_packages.yaml
deleted file mode 100644
index b0b3dffa..00000000
--- a/operator/config/samples/fs_v1alpha1_packages.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
-apiVersion: fs.functionstream.github.io/v1alpha1
-kind: Packages
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: packages-sample
-spec:
- # TODO(user): Add fields here
diff --git a/operator/config/samples/kustomization.yaml b/operator/config/samples/kustomization.yaml
deleted file mode 100644
index 0dc1f452..00000000
--- a/operator/config/samples/kustomization.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-## Append samples of your project ##
-resources:
-- fs_v1alpha1_packages.yaml
-- fs_v1alpha1_function.yaml
-# +kubebuilder:scaffold:manifestskustomizesamples
diff --git a/operator/config/webhook/kustomization.yaml b/operator/config/webhook/kustomization.yaml
deleted file mode 100644
index 9cf26134..00000000
--- a/operator/config/webhook/kustomization.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-resources:
-- manifests.yaml
-- service.yaml
-
-configurations:
-- kustomizeconfig.yaml
diff --git a/operator/config/webhook/kustomizeconfig.yaml b/operator/config/webhook/kustomizeconfig.yaml
deleted file mode 100644
index 206316e5..00000000
--- a/operator/config/webhook/kustomizeconfig.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-# the following config is for teaching kustomize where to look at when substituting nameReference.
-# It requires kustomize v2.1.0 or newer to work properly.
-nameReference:
-- kind: Service
- version: v1
- fieldSpecs:
- - kind: MutatingWebhookConfiguration
- group: admissionregistration.k8s.io
- path: webhooks/clientConfig/service/name
- - kind: ValidatingWebhookConfiguration
- group: admissionregistration.k8s.io
- path: webhooks/clientConfig/service/name
-
-namespace:
-- kind: MutatingWebhookConfiguration
- group: admissionregistration.k8s.io
- path: webhooks/clientConfig/service/namespace
- create: true
-- kind: ValidatingWebhookConfiguration
- group: admissionregistration.k8s.io
- path: webhooks/clientConfig/service/namespace
- create: true
diff --git a/operator/config/webhook/manifests.yaml b/operator/config/webhook/manifests.yaml
deleted file mode 100644
index 12c9404a..00000000
--- a/operator/config/webhook/manifests.yaml
+++ /dev/null
@@ -1,94 +0,0 @@
----
-apiVersion: admissionregistration.k8s.io/v1
-kind: MutatingWebhookConfiguration
-metadata:
- name: mutating-webhook-configuration
-webhooks:
-- admissionReviewVersions:
- - v1
- clientConfig:
- service:
- name: webhook-service
- namespace: system
- path: /mutate-fs-functionstream-github-io-v1alpha1-function
- failurePolicy: Fail
- name: mfunction-v1alpha1.kb.io
- rules:
- - apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- operations:
- - CREATE
- - UPDATE
- resources:
- - functions
- sideEffects: None
-- admissionReviewVersions:
- - v1
- clientConfig:
- service:
- name: webhook-service
- namespace: system
- path: /mutate-fs-functionstream-github-io-v1alpha1-package
- failurePolicy: Fail
- name: mpackage-v1alpha1.kb.io
- rules:
- - apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- operations:
- - CREATE
- - UPDATE
- resources:
- - packages
- sideEffects: None
----
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
- name: validating-webhook-configuration
-webhooks:
-- admissionReviewVersions:
- - v1
- clientConfig:
- service:
- name: webhook-service
- namespace: system
- path: /validate-fs-functionstream-github-io-v1alpha1-function
- failurePolicy: Fail
- name: vfunction-v1alpha1.kb.io
- rules:
- - apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- operations:
- - CREATE
- - UPDATE
- - DELETE
- resources:
- - functions
- sideEffects: None
-- admissionReviewVersions:
- - v1
- clientConfig:
- service:
- name: webhook-service
- namespace: system
- path: /validate-fs-functionstream-github-io-v1alpha1-package
- failurePolicy: Fail
- name: vpackage-v1alpha1.kb.io
- rules:
- - apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- operations:
- - CREATE
- - UPDATE
- - DELETE
- resources:
- - packages
- sideEffects: None
diff --git a/operator/config/webhook/service.yaml b/operator/config/webhook/service.yaml
deleted file mode 100644
index a10cc235..00000000
--- a/operator/config/webhook/service.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
- labels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/managed-by: kustomize
- name: webhook-service
- namespace: system
-spec:
- ports:
- - port: 443
- protocol: TCP
- targetPort: 9443
- selector:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
diff --git a/operator/deploy/chart/.helmignore b/operator/deploy/chart/.helmignore
deleted file mode 100644
index 7d92f7fb..00000000
--- a/operator/deploy/chart/.helmignore
+++ /dev/null
@@ -1,25 +0,0 @@
-# Patterns to ignore when building Helm packages.
-# Operating system files
-.DS_Store
-
-# Version control directories
-.git/
-.gitignore
-.bzr/
-.hg/
-.hgignore
-.svn/
-
-# Backup and temporary files
-*.swp
-*.tmp
-*.bak
-*.orig
-*~
-
-# IDE and editor-related files
-.idea/
-.vscode/
-
-# Helm chart artifacts
-dist/chart/*.tgz
diff --git a/operator/deploy/chart/Chart.yaml b/operator/deploy/chart/Chart.yaml
deleted file mode 100644
index 2eac6b8b..00000000
--- a/operator/deploy/chart/Chart.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-apiVersion: v2
-name: operator
-description: A Helm chart to deploy the FunctionStream operator on Kubernetes.
-type: application
-version: 0.1.0
-appVersion: "0.1.0"
-home: "https://github.com/FunctionStream/function-stream"
-sources:
- - "https://github.com/FunctionStream/function-stream/operator"
-maintainers:
- - name: Zike Yang
- email: zike@apache.org
-keywords:
- - serverless
- - streaming
- - functionstream
- - operators
-annotations:
- category: "Operators"
diff --git a/operator/deploy/chart/templates/_helpers.tpl b/operator/deploy/chart/templates/_helpers.tpl
deleted file mode 100644
index 668abe33..00000000
--- a/operator/deploy/chart/templates/_helpers.tpl
+++ /dev/null
@@ -1,50 +0,0 @@
-{{- define "chart.name" -}}
-{{- if .Chart }}
- {{- if .Chart.Name }}
- {{- .Chart.Name | trunc 63 | trimSuffix "-" }}
- {{- else if .Values.nameOverride }}
- {{ .Values.nameOverride | trunc 63 | trimSuffix "-" }}
- {{- else }}
- operator
- {{- end }}
-{{- else }}
- operator
-{{- end }}
-{{- end }}
-
-
-{{- define "chart.labels" -}}
-{{- if .Chart.AppVersion -}}
-app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
-{{- end }}
-{{- if .Chart.Version }}
-helm.sh/chart: {{ .Chart.Version | quote }}
-{{- end }}
-app.kubernetes.io/name: {{ include "chart.name" . }}
-app.kubernetes.io/instance: {{ .Release.Name }}
-app.kubernetes.io/managed-by: {{ .Release.Service }}
-{{- end }}
-
-
-{{- define "chart.selectorLabels" -}}
-app.kubernetes.io/name: {{ include "chart.name" . }}
-app.kubernetes.io/instance: {{ .Release.Name }}
-{{- end }}
-
-
-{{- define "chart.hasMutatingWebhooks" -}}
-{{- $hasMutating := false }}
-{{- range . }}
- {{- if eq .type "mutating" }}
- $hasMutating = true }}{{- end }}
-{{- end }}
-{{ $hasMutating }}}}{{- end }}
-
-
-{{- define "chart.hasValidatingWebhooks" -}}
-{{- $hasValidating := false }}
-{{- range . }}
- {{- if eq .type "validating" }}
- $hasValidating = true }}{{- end }}
-{{- end }}
-{{ $hasValidating }}}}{{- end }}
diff --git a/operator/deploy/chart/templates/certmanager/certificate.yaml b/operator/deploy/chart/templates/certmanager/certificate.yaml
deleted file mode 100644
index 2dfb9e9b..00000000
--- a/operator/deploy/chart/templates/certmanager/certificate.yaml
+++ /dev/null
@@ -1,60 +0,0 @@
-{{- if .Values.certmanager.enable }}
-# Self-signed Issuer
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: selfsigned-issuer
- namespace: {{ .Release.Namespace }}
-spec:
- selfSigned: {}
-{{- if .Values.webhook.enable }}
----
-# Certificate for the webhook
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
- annotations:
- {{- if .Values.crd.keep }}
- "helm.sh/resource-policy": keep
- {{- end }}
- name: serving-cert
- namespace: {{ .Release.Namespace }}
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-spec:
- dnsNames:
- - operator.{{ .Release.Namespace }}.svc
- - operator.{{ .Release.Namespace }}.svc.cluster.local
- - operator-webhook-service.{{ .Release.Namespace }}.svc
- issuerRef:
- kind: Issuer
- name: selfsigned-issuer
- secretName: webhook-server-cert
-{{- end }}
-{{- if .Values.metrics.enable }}
----
-# Certificate for the metrics
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
- annotations:
- {{- if .Values.crd.keep }}
- "helm.sh/resource-policy": keep
- {{- end }}
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: metrics-certs
- namespace: {{ .Release.Namespace }}
-spec:
- dnsNames:
- - operator.{{ .Release.Namespace }}.svc
- - operator.{{ .Release.Namespace }}.svc.cluster.local
- - operator-metrics-service.{{ .Release.Namespace }}.svc
- issuerRef:
- kind: Issuer
- name: selfsigned-issuer
- secretName: metrics-server-cert
-{{- end }}
-{{- end }}
diff --git a/operator/deploy/chart/templates/crd/fs.functionstream.github.io_functions.yaml b/operator/deploy/chart/templates/crd/fs.functionstream.github.io_functions.yaml
deleted file mode 100755
index d5795e77..00000000
--- a/operator/deploy/chart/templates/crd/fs.functionstream.github.io_functions.yaml
+++ /dev/null
@@ -1,157 +0,0 @@
-{{- if .Values.crd.enable }}
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- annotations:
- {{- if .Values.crd.keep }}
- "helm.sh/resource-policy": keep
- {{- end }}
- controller-gen.kubebuilder.io/version: v0.17.2
- name: functions.fs.functionstream.github.io
-spec:
- group: fs.functionstream.github.io
- names:
- kind: Function
- listKind: FunctionList
- plural: functions
- singular: function
- scope: Namespaced
- versions:
- - name: v1alpha1
- schema:
- openAPIV3Schema:
- description: Function is the Schema for the functions API.
- properties:
- apiVersion:
- description: |-
- APIVersion defines the versioned schema of this representation of an object.
- Servers should convert recognized schemas to the latest internal value, and
- may reject unrecognized values.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
- type: string
- kind:
- description: |-
- Kind is a string value representing the REST resource this object represents.
- Servers may infer this from the endpoint the client submits requests to.
- Cannot be updated.
- In CamelCase.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
- type: string
- metadata:
- type: object
- spec:
- description: FunctionSpec defines the desired state of Function
- properties:
- config:
- additionalProperties:
- x-kubernetes-preserve-unknown-fields: true
- description: Configurations as key-value pairs
- type: object
- description:
- description: Description of the function
- type: string
- displayName:
- description: Display name of the function
- type: string
- module:
- description: Module name
- type: string
- packageRef:
- description: Package reference
- properties:
- name:
- description: Name of the Package resource
- type: string
- namespace:
- description: Namespace of the Package resource
- type: string
- required:
- - name
- type: object
- replicas:
- default: 1
- description: Number of replicas for the function deployment
- format: int32
- type: integer
- requestSource:
- description: Request source
- properties:
- pulsar:
- description: Pulsar source specification
- properties:
- topic:
- description: Topic name
- type: string
- required:
- - topic
- type: object
- type: object
- sink:
- description: Sink specifies the sink configuration
- properties:
- pulsar:
- description: Pulsar sink specification
- properties:
- topic:
- description: Topic name
- type: string
- required:
- - topic
- type: object
- type: object
- sources:
- description: List of sources
- items:
- description: SourceSpec defines a source or sink specification
- properties:
- pulsar:
- description: Pulsar source specification
- properties:
- topic:
- description: Topic name
- type: string
- required:
- - topic
- type: object
- type: object
- type: array
- subscriptionName:
- type: string
- required:
- - module
- - packageRef
- type: object
- status:
- description: FunctionStatus defines the observed state of Function
- properties:
- availableReplicas:
- description: Number of available pods (ready for at least minReadySeconds)
- format: int32
- type: integer
- observedGeneration:
- description: Most recent generation observed for this Function
- format: int64
- type: integer
- readyReplicas:
- description: Total number of ready pods
- format: int32
- type: integer
- replicas:
- description: Total number of non-terminated pods targeted by this
- deployment
- format: int32
- type: integer
- updatedReplicas:
- description: Total number of updated pods
- format: int32
- type: integer
- type: object
- type: object
- served: true
- storage: true
- subresources:
- status: {}
-{{- end -}}
diff --git a/operator/deploy/chart/templates/crd/fs.functionstream.github.io_packages.yaml b/operator/deploy/chart/templates/crd/fs.functionstream.github.io_packages.yaml
deleted file mode 100755
index 00f60dae..00000000
--- a/operator/deploy/chart/templates/crd/fs.functionstream.github.io_packages.yaml
+++ /dev/null
@@ -1,132 +0,0 @@
-{{- if .Values.crd.enable }}
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- annotations:
- {{- if .Values.crd.keep }}
- "helm.sh/resource-policy": keep
- {{- end }}
- controller-gen.kubebuilder.io/version: v0.17.2
- name: packages.fs.functionstream.github.io
-spec:
- group: fs.functionstream.github.io
- names:
- kind: Package
- listKind: PackageList
- plural: packages
- shortNames:
- - pkg
- singular: package
- scope: Namespaced
- versions:
- - name: v1alpha1
- schema:
- openAPIV3Schema:
- description: Package is the Schema for the packages API.
- properties:
- apiVersion:
- description: |-
- APIVersion defines the versioned schema of this representation of an object.
- Servers should convert recognized schemas to the latest internal value, and
- may reject unrecognized values.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
- type: string
- kind:
- description: |-
- Kind is a string value representing the REST resource this object represents.
- Servers may infer this from the endpoint the client submits requests to.
- Cannot be updated.
- In CamelCase.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
- type: string
- metadata:
- type: object
- spec:
- description: PackageSpec defines the desired state of Package
- properties:
- description:
- description: Description provides additional information about the
- package
- type: string
- displayName:
- description: DisplayName is the human-readable name of the package
- type: string
- functionType:
- description: FunctionType contains function type configuration
- properties:
- cloud:
- description: Cloud contains cloud function package configuration
- properties:
- image:
- description: Image specifies the container image for cloud
- deployment
- type: string
- required:
- - image
- type: object
- type: object
- logo:
- description: Logo is the URL or base64 encoded image for the package
- logo
- type: string
- modules:
- additionalProperties:
- description: Module defines a module within a package
- properties:
- config:
- additionalProperties:
- description: ConfigItem defines a configuration item for a
- module
- properties:
- description:
- description: Description provides additional information
- about the config item
- type: string
- displayName:
- description: DisplayName is the human-readable name of
- the config item
- type: string
- required:
- description: Required indicates whether this config item
- is mandatory
- type: boolean
- type:
- description: Type specifies the data type of the config
- item
- type: string
- type: object
- description: Config is a list of configuration items for the
- module
- type: object
- description:
- description: Description provides additional information about
- the module
- type: string
- displayName:
- description: DisplayName is the human-readable name of the module
- type: string
- sinkSchema:
- description: SinkSchema defines the output schema for the module
- type: string
- sourceSchema:
- description: SourceSchema defines the input schema for the module
- type: string
- type: object
- description: Modules is a map of module names to their configurations
- type: object
- required:
- - functionType
- - modules
- type: object
- status:
- description: PackageStatus defines the observed state of Package.
- type: object
- type: object
- served: true
- storage: true
- subresources:
- status: {}
-{{- end -}}
diff --git a/operator/deploy/chart/templates/manager/manager.yaml b/operator/deploy/chart/templates/manager/manager.yaml
deleted file mode 100644
index 8cdb2475..00000000
--- a/operator/deploy/chart/templates/manager/manager.yaml
+++ /dev/null
@@ -1,103 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: function-stream
- namespace: {{ .Release.Namespace }}
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- control-plane: controller-manager
-spec:
- replicas: {{ .Values.controllerManager.replicas }}
- selector:
- matchLabels:
- {{- include "chart.selectorLabels" . | nindent 6 }}
- control-plane: controller-manager
- template:
- metadata:
- annotations:
- kubectl.kubernetes.io/default-container: manager
- labels:
- {{- include "chart.labels" . | nindent 8 }}
- control-plane: controller-manager
- {{- if and .Values.controllerManager.pod .Values.controllerManager.pod.labels }}
- {{- range $key, $value := .Values.controllerManager.pod.labels }}
- {{ $key }}: {{ $value }}
- {{- end }}
- {{- end }}
- spec:
- containers:
- - name: manager
- args:
- {{- range .Values.controllerManager.container.args }}
- - {{ . }}
- {{- end }}
- command:
- - /manager
- image: {{ .Values.controllerManager.container.image.repository }}:{{ .Values.controllerManager.container.image.tag }}
- imagePullPolicy: {{ .Values.controllerManager.container.imagePullPolicy }}
- env:
- {{- if .Values.pulsar.standalone.enable }}
- - name: PULSAR_SERVICE_URL
- value: pulsar://{{ .Release.Name }}-pulsar-standalone.{{ .Release.Namespace }}.svc.cluster.local:6650
- {{- else if .Values.pulsar.serviceUrl }}
- - name: PULSAR_SERVICE_URL
- value: {{ .Values.pulsar.serviceUrl }}
- {{- end }}
- {{- if .Values.pulsar.authPlugin }}
- - name: PULSAR_AUTH_PLUGIN
- value: {{ .Values.pulsar.authPlugin }}
- {{- end }}
- {{- if .Values.pulsar.authParams }}
- - name: PULSAR_AUTH_PARAMS
- value: {{ .Values.pulsar.authParams }}
- {{- end }}
- {{- if .Values.controllerManager.container.env }}
- {{- range $key, $value := .Values.controllerManager.container.env }}
- - name: {{ $key }}
- value: {{ $value }}
- {{- end }}
- {{- end }}
- livenessProbe:
- {{- toYaml .Values.controllerManager.container.livenessProbe | nindent 12 }}
- readinessProbe:
- {{- toYaml .Values.controllerManager.container.readinessProbe | nindent 12 }}
- {{- if .Values.webhook.enable }}
- ports:
- - containerPort: 9443
- name: webhook-server
- protocol: TCP
- {{- end }}
- resources:
- {{- toYaml .Values.controllerManager.container.resources | nindent 12 }}
- securityContext:
- {{- toYaml .Values.controllerManager.container.securityContext | nindent 12 }}
- {{- if and .Values.certmanager.enable (or .Values.webhook.enable .Values.metrics.enable) }}
- volumeMounts:
- {{- if and .Values.webhook.enable .Values.certmanager.enable }}
- - name: webhook-cert
- mountPath: /tmp/k8s-webhook-server/serving-certs
- readOnly: true
- {{- end }}
- {{- if and .Values.metrics.enable .Values.certmanager.enable }}
- - name: metrics-certs
- mountPath: /tmp/k8s-metrics-server/metrics-certs
- readOnly: true
- {{- end }}
- {{- end }}
- securityContext:
- {{- toYaml .Values.controllerManager.securityContext | nindent 8 }}
- serviceAccountName: {{ .Values.controllerManager.serviceAccountName }}
- terminationGracePeriodSeconds: {{ .Values.controllerManager.terminationGracePeriodSeconds }}
- {{- if and .Values.certmanager.enable (or .Values.webhook.enable .Values.metrics.enable) }}
- volumes:
- {{- if and .Values.webhook.enable .Values.certmanager.enable }}
- - name: webhook-cert
- secret:
- secretName: webhook-server-cert
- {{- end }}
- {{- if and .Values.metrics.enable .Values.certmanager.enable }}
- - name: metrics-certs
- secret:
- secretName: metrics-server-cert
- {{- end }}
- {{- end }}
diff --git a/operator/deploy/chart/templates/metrics/metrics-service.yaml b/operator/deploy/chart/templates/metrics/metrics-service.yaml
deleted file mode 100644
index a91cc04a..00000000
--- a/operator/deploy/chart/templates/metrics/metrics-service.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-{{- if .Values.metrics.enable }}
-apiVersion: v1
-kind: Service
-metadata:
- name: operator-controller-manager-metrics-service
- namespace: {{ .Release.Namespace }}
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-spec:
- ports:
- - port: 8443
- targetPort: 8443
- protocol: TCP
- name: https
- selector:
- control-plane: controller-manager
-{{- end }}
diff --git a/operator/deploy/chart/templates/namespace/namespace.yaml b/operator/deploy/chart/templates/namespace/namespace.yaml
deleted file mode 100644
index 3b40a0cb..00000000
--- a/operator/deploy/chart/templates/namespace/namespace.yaml
+++ /dev/null
@@ -1,6 +0,0 @@
-{{- if .Values.createNamespace }}
-apiVersion: v1
-kind: Namespace
-metadata:
- name: {{ .Release.Namespace }}
-{{- end -}}
\ No newline at end of file
diff --git a/operator/deploy/chart/templates/network-policy/allow-metrics-traffic.yaml b/operator/deploy/chart/templates/network-policy/allow-metrics-traffic.yaml
deleted file mode 100755
index 9f392cf9..00000000
--- a/operator/deploy/chart/templates/network-policy/allow-metrics-traffic.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-{{- if .Values.networkPolicy.enable }}
-# This NetworkPolicy allows ingress traffic
-# with Pods running on namespaces labeled with 'metrics: enabled'. Only Pods on those
-# namespaces are able to gather data from the metrics endpoint.
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: allow-metrics-traffic
- namespace: {{ .Release.Namespace }}
-spec:
- podSelector:
- matchLabels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- policyTypes:
- - Ingress
- ingress:
- # This allows ingress traffic from any namespace with the label metrics: enabled
- - from:
- - namespaceSelector:
- matchLabels:
- metrics: enabled # Only from namespaces with this label
- ports:
- - port: 8443
- protocol: TCP
-{{- end -}}
diff --git a/operator/deploy/chart/templates/network-policy/allow-webhook-traffic.yaml b/operator/deploy/chart/templates/network-policy/allow-webhook-traffic.yaml
deleted file mode 100755
index b42e482f..00000000
--- a/operator/deploy/chart/templates/network-policy/allow-webhook-traffic.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-{{- if .Values.networkPolicy.enable }}
-# This NetworkPolicy allows ingress traffic to your webhook server running
-# as part of the controller-manager from specific namespaces and pods. CR(s) which uses webhooks
-# will only work when applied in namespaces labeled with 'webhook: enabled'
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: allow-webhook-traffic
- namespace: {{ .Release.Namespace }}
-spec:
- podSelector:
- matchLabels:
- control-plane: controller-manager
- app.kubernetes.io/name: operator
- policyTypes:
- - Ingress
- ingress:
- # This allows ingress traffic from any namespace with the label webhook: enabled
- - from:
- - namespaceSelector:
- matchLabels:
- webhook: enabled # Only from namespaces with this label
- ports:
- - port: 443
- protocol: TCP
-{{- end -}}
diff --git a/operator/deploy/chart/templates/prometheus/monitor.yaml b/operator/deploy/chart/templates/prometheus/monitor.yaml
deleted file mode 100644
index c0bbc922..00000000
--- a/operator/deploy/chart/templates/prometheus/monitor.yaml
+++ /dev/null
@@ -1,39 +0,0 @@
-# To integrate with Prometheus.
-{{- if .Values.prometheus.enable }}
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: fs-operator-controller-manager-metrics-monitor
- namespace: {{ .Release.Namespace }}
-spec:
- endpoints:
- - path: /metrics
- port: https
- scheme: https
- bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
- tlsConfig:
- {{- if .Values.certmanager.enable }}
- serverName: operator-controller-manager-metrics-service.{{ .Release.Namespace }}.svc
- # Apply secure TLS configuration with cert-manager
- insecureSkipVerify: false
- ca:
- secret:
- name: metrics-server-cert
- key: ca.crt
- cert:
- secret:
- name: metrics-server-cert
- key: tls.crt
- keySecret:
- name: metrics-server-cert
- key: tls.key
- {{- else }}
- # Development/Test mode (insecure configuration)
- insecureSkipVerify: true
- {{- end }}
- selector:
- matchLabels:
- control-plane: controller-manager
-{{- end }}
diff --git a/operator/deploy/chart/templates/pulsar/service.yaml b/operator/deploy/chart/templates/pulsar/service.yaml
deleted file mode 100644
index a460cbc2..00000000
--- a/operator/deploy/chart/templates/pulsar/service.yaml
+++ /dev/null
@@ -1,24 +0,0 @@
-{{- if .Values.pulsar.standalone.enable }}
-apiVersion: v1
-kind: Service
-metadata:
- name: {{ .Release.Name }}-pulsar-standalone
- namespace: {{ .Release.Namespace }}
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- app: pulsar-standalone
-spec:
- type: {{ .Values.pulsar.standalone.service.type }}
- ports:
- - name: pulsar
- port: {{ .Values.pulsar.standalone.service.ports.pulsar }}
- targetPort: 6650
- protocol: TCP
- - name: admin
- port: {{ .Values.pulsar.standalone.service.ports.admin }}
- targetPort: 8080
- protocol: TCP
- selector:
- {{- include "chart.selectorLabels" . | nindent 4 }}
- app: pulsar-standalone
-{{- end }}
\ No newline at end of file
diff --git a/operator/deploy/chart/templates/pulsar/statefulset.yaml b/operator/deploy/chart/templates/pulsar/statefulset.yaml
deleted file mode 100644
index a7f7ef85..00000000
--- a/operator/deploy/chart/templates/pulsar/statefulset.yaml
+++ /dev/null
@@ -1,77 +0,0 @@
-{{- if .Values.pulsar.standalone.enable }}
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
- name: {{ .Release.Name }}-pulsar-standalone
- namespace: {{ .Release.Namespace }}
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- app: pulsar-standalone
- app.kubernetes.io/component: messaging
-spec:
- serviceName: {{ .Release.Name }}-pulsar-standalone
- replicas: 1
- selector:
- matchLabels:
- {{- include "chart.selectorLabels" . | nindent 6 }}
- app: pulsar-standalone
- template:
- metadata:
- labels:
- {{- include "chart.labels" . | nindent 8 }}
- app: pulsar-standalone
- app.kubernetes.io/component: messaging
- spec:
- containers:
- - name: pulsar
- image: {{ .Values.pulsar.standalone.image.repository }}:{{ .Values.pulsar.standalone.image.tag }}
- command:
- - sh
- - -c
- - |
- # Initialize Pulsar standalone
- bin/pulsar standalone -nfw -nss
- ports:
- - name: pulsar
- containerPort: 6650
- protocol: TCP
- - name: admin
- containerPort: 8080
- protocol: TCP
- resources:
- {{- toYaml .Values.pulsar.standalone.resources | nindent 12 }}
- {{- if .Values.pulsar.standalone.storage.persistence.enabled }}
- volumeMounts:
- - name: pulsar-data
- mountPath: /pulsar/data
- {{- end }}
- livenessProbe:
- httpGet:
- path: /admin/v2/brokers/health
- port: 8080
- initialDelaySeconds: 60
- periodSeconds: 30
- timeoutSeconds: 5
- failureThreshold: 3
- readinessProbe:
- httpGet:
- path: /admin/v2/brokers/health
- port: 8080
- initialDelaySeconds: 30
- periodSeconds: 10
- timeoutSeconds: 3
- failureThreshold: 3
- {{- if .Values.pulsar.standalone.storage.persistence.enabled }}
- volumeClaimTemplates:
- - metadata:
- name: pulsar-data
- spec:
- accessModes: ["ReadWriteOnce"]
- {{- if .Values.pulsar.standalone.storage.storageClass }}
- storageClassName: {{ .Values.pulsar.standalone.storage.storageClass }}
- {{- end }}
- resources:
- requests:
- storage: {{ .Values.pulsar.standalone.storage.size }}
- {{- end }}
-{{- end }}
\ No newline at end of file
diff --git a/operator/deploy/chart/templates/rbac/function_admin_role.yaml b/operator/deploy/chart/templates/rbac/function_admin_role.yaml
deleted file mode 100755
index a8075cfd..00000000
--- a/operator/deploy/chart/templates/rbac/function_admin_role.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-{{- if .Values.rbac.enable }}
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants full permissions ('*') over fs.functionstream.github.io.
-# This role is intended for users authorized to modify roles and bindings within the cluster,
-# enabling them to delegate specific permissions to other users or groups as needed.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: function-admin-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- verbs:
- - '*'
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- verbs:
- - get
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/function_editor_role.yaml b/operator/deploy/chart/templates/rbac/function_editor_role.yaml
deleted file mode 100755
index c0d80285..00000000
--- a/operator/deploy/chart/templates/rbac/function_editor_role.yaml
+++ /dev/null
@@ -1,34 +0,0 @@
-{{- if .Values.rbac.enable }}
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants permissions to create, update, and delete resources within the fs.functionstream.github.io.
-# This role is intended for users who need to manage these resources
-# but should not control RBAC or manage permissions for others.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: function-editor-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- verbs:
- - get
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/function_viewer_role.yaml b/operator/deploy/chart/templates/rbac/function_viewer_role.yaml
deleted file mode 100755
index e488bf97..00000000
--- a/operator/deploy/chart/templates/rbac/function_viewer_role.yaml
+++ /dev/null
@@ -1,30 +0,0 @@
-{{- if .Values.rbac.enable }}
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants read-only access to fs.functionstream.github.io resources.
-# This role is intended for users who need visibility into these resources
-# without permissions to modify them. It is ideal for monitoring purposes and limited-access viewing.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: function-viewer-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- verbs:
- - get
- - list
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- verbs:
- - get
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/leader_election_role.yaml b/operator/deploy/chart/templates/rbac/leader_election_role.yaml
deleted file mode 100755
index e28d0924..00000000
--- a/operator/deploy/chart/templates/rbac/leader_election_role.yaml
+++ /dev/null
@@ -1,42 +0,0 @@
-{{- if .Values.rbac.enable }}
-# permissions to do leader election.
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- namespace: {{ .Release.Namespace }}
- name: fs-operator-leader-election-role
-rules:
-- apiGroups:
- - ""
- resources:
- - configmaps
- verbs:
- - get
- - list
- - watch
- - create
- - update
- - patch
- - delete
-- apiGroups:
- - coordination.k8s.io
- resources:
- - leases
- verbs:
- - get
- - list
- - watch
- - create
- - update
- - patch
- - delete
-- apiGroups:
- - ""
- resources:
- - events
- verbs:
- - create
- - patch
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/leader_election_role_binding.yaml b/operator/deploy/chart/templates/rbac/leader_election_role_binding.yaml
deleted file mode 100755
index 87a4593c..00000000
--- a/operator/deploy/chart/templates/rbac/leader_election_role_binding.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-{{- if .Values.rbac.enable }}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- namespace: {{ .Release.Namespace }}
- name: {{ .Release.Name }}-fs-operator-leader-election-rolebinding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: fs-operator-leader-election-role
-subjects:
-- kind: ServiceAccount
- name: {{ .Values.controllerManager.serviceAccountName }}
- namespace: {{ .Release.Namespace }}
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/metrics_auth_role.yaml b/operator/deploy/chart/templates/rbac/metrics_auth_role.yaml
deleted file mode 100755
index 1458716f..00000000
--- a/operator/deploy/chart/templates/rbac/metrics_auth_role.yaml
+++ /dev/null
@@ -1,21 +0,0 @@
-{{- if and .Values.rbac.enable .Values.metrics.enable }}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: fs-operator-metrics-auth-role
-rules:
-- apiGroups:
- - authentication.k8s.io
- resources:
- - tokenreviews
- verbs:
- - create
-- apiGroups:
- - authorization.k8s.io
- resources:
- - subjectaccessreviews
- verbs:
- - create
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/metrics_auth_role_binding.yaml b/operator/deploy/chart/templates/rbac/metrics_auth_role_binding.yaml
deleted file mode 100755
index 2f5fb6ff..00000000
--- a/operator/deploy/chart/templates/rbac/metrics_auth_role_binding.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-{{- if and .Values.rbac.enable .Values.metrics.enable }}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: {{ .Release.Name }}-fs-operator-metrics-auth-rolebinding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: fs-operator-metrics-auth-role
-subjects:
-- kind: ServiceAccount
- name: {{ .Values.controllerManager.serviceAccountName }}
- namespace: {{ .Release.Namespace }}
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/metrics_reader_role.yaml b/operator/deploy/chart/templates/rbac/metrics_reader_role.yaml
deleted file mode 100755
index 495caa48..00000000
--- a/operator/deploy/chart/templates/rbac/metrics_reader_role.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-{{- if and .Values.rbac.enable .Values.metrics.enable }}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: fs-operator-metrics-reader
-rules:
-- nonResourceURLs:
- - "/metrics"
- verbs:
- - get
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/packages_admin_role.yaml b/operator/deploy/chart/templates/rbac/packages_admin_role.yaml
deleted file mode 100755
index 923a4c35..00000000
--- a/operator/deploy/chart/templates/rbac/packages_admin_role.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-{{- if .Values.rbac.enable }}
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants full permissions ('*') over fs.functionstream.github.io.
-# This role is intended for users authorized to modify roles and bindings within the cluster,
-# enabling them to delegate specific permissions to other users or groups as needed.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: packages-admin-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - '*'
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages/status
- verbs:
- - get
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/packages_editor_role.yaml b/operator/deploy/chart/templates/rbac/packages_editor_role.yaml
deleted file mode 100755
index 2aec9a1b..00000000
--- a/operator/deploy/chart/templates/rbac/packages_editor_role.yaml
+++ /dev/null
@@ -1,34 +0,0 @@
-{{- if .Values.rbac.enable }}
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants permissions to create, update, and delete resources within the fs.functionstream.github.io.
-# This role is intended for users who need to manage these resources
-# but should not control RBAC or manage permissions for others.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: packages-editor-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages/status
- verbs:
- - get
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/packages_viewer_role.yaml b/operator/deploy/chart/templates/rbac/packages_viewer_role.yaml
deleted file mode 100755
index 3c1345ff..00000000
--- a/operator/deploy/chart/templates/rbac/packages_viewer_role.yaml
+++ /dev/null
@@ -1,30 +0,0 @@
-{{- if .Values.rbac.enable }}
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants read-only access to fs.functionstream.github.io resources.
-# This role is intended for users who need visibility into these resources
-# without permissions to modify them. It is ideal for monitoring purposes and limited-access viewing.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: packages-viewer-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - get
- - list
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages/status
- verbs:
- - get
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/role.yaml b/operator/deploy/chart/templates/rbac/role.yaml
deleted file mode 100755
index 9ba521c1..00000000
--- a/operator/deploy/chart/templates/rbac/role.yaml
+++ /dev/null
@@ -1,59 +0,0 @@
-{{- if .Values.rbac.enable }}
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: fs-operator-manager-role
-rules:
-- apiGroups:
- - apps
- resources:
- - deployments
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- - package
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/finalizers
- - package/finalizers
- verbs:
- - update
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- - package/status
- verbs:
- - get
- - patch
- - update
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - get
- - list
- - watch
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/role_binding.yaml b/operator/deploy/chart/templates/rbac/role_binding.yaml
deleted file mode 100755
index 2bdd9aa4..00000000
--- a/operator/deploy/chart/templates/rbac/role_binding.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-{{- if .Values.rbac.enable }}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- name: {{ .Release.Name }}-fs-operator-manager-rolebinding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: fs-operator-manager-role
-subjects:
-- kind: ServiceAccount
- name: {{ .Values.controllerManager.serviceAccountName }}
- namespace: {{ .Release.Namespace }}
-{{- end -}}
diff --git a/operator/deploy/chart/templates/rbac/service_account.yaml b/operator/deploy/chart/templates/rbac/service_account.yaml
deleted file mode 100755
index 93e0a323..00000000
--- a/operator/deploy/chart/templates/rbac/service_account.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-{{- if .Values.rbac.enable }}
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
- {{- if and .Values.controllerManager.serviceAccount .Values.controllerManager.serviceAccount.annotations }}
- annotations:
- {{- range $key, $value := .Values.controllerManager.serviceAccount.annotations }}
- {{ $key }}: {{ $value }}
- {{- end }}
- {{- end }}
- name: {{ .Values.controllerManager.serviceAccountName }}
- namespace: {{ .Release.Namespace }}
-{{- end -}}
diff --git a/operator/deploy/chart/templates/webhook/service.yaml b/operator/deploy/chart/templates/webhook/service.yaml
deleted file mode 100644
index 442afa65..00000000
--- a/operator/deploy/chart/templates/webhook/service.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-{{- if .Values.webhook.enable }}
-apiVersion: v1
-kind: Service
-metadata:
- name: operator-webhook-service
- namespace: {{ .Release.Namespace }}
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-spec:
- ports:
- - port: 443
- protocol: TCP
- targetPort: 9443
- selector:
- control-plane: controller-manager
-{{- end }}
diff --git a/operator/deploy/chart/templates/webhook/webhooks.yaml b/operator/deploy/chart/templates/webhook/webhooks.yaml
deleted file mode 100644
index aec57d5a..00000000
--- a/operator/deploy/chart/templates/webhook/webhooks.yaml
+++ /dev/null
@@ -1,109 +0,0 @@
-{{- if .Values.webhook.enable }}
-apiVersion: admissionregistration.k8s.io/v1
-kind: MutatingWebhookConfiguration
-metadata:
- name: operator-mutating-webhook-configuration
- namespace: {{ .Release.Namespace }}
- annotations:
- {{- if .Values.certmanager.enable }}
- cert-manager.io/inject-ca-from: "{{ $.Release.Namespace }}/serving-cert"
- {{- end }}
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-webhooks:
- - name: mfunction-v1alpha1.kb.io
- clientConfig:
- service:
- name: operator-webhook-service
- namespace: {{ .Release.Namespace }}
- path: /mutate-fs-functionstream-github-io-v1alpha1-function
- failurePolicy: Fail
- sideEffects: None
- admissionReviewVersions:
- - v1
- rules:
- - operations:
- - CREATE
- - UPDATE
- apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- resources:
- - functions
- - name: mpackage-v1alpha1.kb.io
- clientConfig:
- service:
- name: operator-webhook-service
- namespace: {{ .Release.Namespace }}
- path: /mutate-fs-functionstream-github-io-v1alpha1-package
- failurePolicy: Fail
- sideEffects: None
- admissionReviewVersions:
- - v1
- rules:
- - operations:
- - CREATE
- - UPDATE
- apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- resources:
- - packages
----
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
- name: operator-validating-webhook-configuration
- namespace: {{ .Release.Namespace }}
- annotations:
- {{- if .Values.certmanager.enable }}
- cert-manager.io/inject-ca-from: "{{ $.Release.Namespace }}/serving-cert"
- {{- end }}
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-webhooks:
- - name: vfunction-v1alpha1.kb.io
- clientConfig:
- service:
- name: operator-webhook-service
- namespace: {{ .Release.Namespace }}
- path: /validate-fs-functionstream-github-io-v1alpha1-function
- failurePolicy: Fail
- sideEffects: None
- admissionReviewVersions:
- - v1
- rules:
- - operations:
- - CREATE
- - UPDATE
- - DELETE
- apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- resources:
- - functions
- - name: vpackage-v1alpha1.kb.io
- clientConfig:
- service:
- name: operator-webhook-service
- namespace: {{ .Release.Namespace }}
- path: /validate-fs-functionstream-github-io-v1alpha1-package
- failurePolicy: Fail
- sideEffects: None
- admissionReviewVersions:
- - v1
- rules:
- - operations:
- - CREATE
- - UPDATE
- - DELETE
- apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- resources:
- - packages
-{{- end }}
diff --git a/operator/deploy/chart/values.yaml b/operator/deploy/chart/values.yaml
deleted file mode 100644
index a7756d8e..00000000
--- a/operator/deploy/chart/values.yaml
+++ /dev/null
@@ -1,114 +0,0 @@
-# [MANAGER]: Manager Deployment Configurations
-controllerManager:
- replicas: 1
- container:
- image:
- repository: functionstream/operator
- tag: latest
- imagePullPolicy: Always
- args:
- - "--leader-elect"
- - "--metrics-bind-address=:8443"
- - "--health-probe-bind-address=:8081"
- resources:
- limits:
- cpu: 500m
- memory: 128Mi
- requests:
- cpu: 10m
- memory: 64Mi
- livenessProbe:
- initialDelaySeconds: 15
- periodSeconds: 20
- httpGet:
- path: /healthz
- port: 8081
- readinessProbe:
- initialDelaySeconds: 5
- periodSeconds: 10
- httpGet:
- path: /readyz
- port: 8081
- securityContext:
- allowPrivilegeEscalation: false
- capabilities:
- drop:
- - "ALL"
- securityContext:
- runAsNonRoot: true
- seccompProfile:
- type: RuntimeDefault
- terminationGracePeriodSeconds: 10
- serviceAccountName: functionstream-operator
-
-createNamespace: false
-
-# [RBAC]: To enable RBAC (Permissions) configurations
-rbac:
- enable: true
-
-# [CRDs]: To enable the CRDs
-crd:
- # This option determines whether the CRDs are included
- # in the installation process.
- enable: true
-
- # Enabling this option adds the "helm.sh/resource-policy": keep
- # annotation to the CRD, ensuring it remains installed even when
- # the Helm release is uninstalled.
- # NOTE: Removing the CRDs will also remove all cert-manager CR(s)
- # (Certificates, Issuers, ...) due to garbage collection.
- keep: true
-
-# [METRICS]: Set to true to generate manifests for exporting metrics.
-# To disable metrics export set false, and ensure that the
-# ControllerManager argument "--metrics-bind-address=:8443" is removed.
-metrics:
- enable: true
-
-# [WEBHOOKS]: Webhooks configuration
-# The following configuration is automatically generated from the manifests
-# generated by controller-gen. To update run 'make manifests' and
-# the edit command with the '--force' flag
-webhook:
- enable: true
-
-# [PROMETHEUS]: To enable a ServiceMonitor to export metrics to Prometheus set true
-prometheus:
- enable: false
-
-# [CERT-MANAGER]: To enable cert-manager injection to webhooks set true
-certmanager:
- enable: true
-
-# [NETWORK POLICIES]: To enable NetworkPolicies set true
-networkPolicy:
- enable: false
-
-# [PULSAR]: Pulsar configuration
-pulsar:
- # Enable Pulsar standalone cluster deployment
- standalone:
- enable: false
- image:
- repository: apachepulsar/pulsar
- tag: "latest"
- resources:
- requests:
- cpu: 500m
- memory: 1Gi
- storage:
- # Enable persistence for Pulsar data
- persistence:
- enabled: false
- size: 10Gi
- storageClass: ""
- service:
- type: ClusterIP
- ports:
- pulsar: 6650
- admin: 8080
- # External Pulsar cluster configuration (used when standalone.enable is false)
- serviceUrl: pulsar://your-pulsar-cluster:6650
- authPlugin: ""
- authParams: ""
diff --git a/operator/go.mod b/operator/go.mod
deleted file mode 100644
index 849a861d..00000000
--- a/operator/go.mod
+++ /dev/null
@@ -1,101 +0,0 @@
-module github.com/FunctionStream/function-stream/operator
-
-go 1.23.0
-
-godebug default=go1.23
-
-require (
- github.com/go-logr/logr v1.4.2
- github.com/onsi/ginkgo/v2 v2.22.0
- github.com/onsi/gomega v1.36.1
- gopkg.in/yaml.v3 v3.0.1
- k8s.io/api v0.32.1
- k8s.io/apiextensions-apiserver v0.32.1
- k8s.io/apimachinery v0.32.1
- k8s.io/client-go v0.32.1
- sigs.k8s.io/controller-runtime v0.20.4
-)
-
-require (
- cel.dev/expr v0.18.0 // indirect
- github.com/antlr4-go/antlr/v4 v4.13.0 // indirect
- github.com/asaskevich/govalidator v0.0.0-20200428143746-21a406dcc535 // indirect
- github.com/beorn7/perks v1.0.1 // indirect
- github.com/blang/semver/v4 v4.0.0 // indirect
- github.com/cenkalti/backoff/v4 v4.3.0 // indirect
- github.com/cespare/xxhash/v2 v2.3.0 // indirect
- github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
- github.com/emicklei/go-restful/v3 v3.11.0 // indirect
- github.com/evanphx/json-patch v5.6.0+incompatible // indirect
- github.com/evanphx/json-patch/v5 v5.9.11 // indirect
- github.com/felixge/httpsnoop v1.0.4 // indirect
- github.com/fsnotify/fsnotify v1.7.0 // indirect
- github.com/fxamacker/cbor/v2 v2.7.0 // indirect
- github.com/go-logr/stdr v1.2.2 // indirect
- github.com/go-logr/zapr v1.3.0 // indirect
- github.com/go-openapi/jsonpointer v0.21.0 // indirect
- github.com/go-openapi/jsonreference v0.20.2 // indirect
- github.com/go-openapi/swag v0.23.0 // indirect
- github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
- github.com/gogo/protobuf v1.3.2 // indirect
- github.com/golang/protobuf v1.5.4 // indirect
- github.com/google/btree v1.1.3 // indirect
- github.com/google/cel-go v0.22.0 // indirect
- github.com/google/gnostic-models v0.6.8 // indirect
- github.com/google/go-cmp v0.6.0 // indirect
- github.com/google/gofuzz v1.2.0 // indirect
- github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db // indirect
- github.com/google/uuid v1.6.0 // indirect
- github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 // indirect
- github.com/inconshreveable/mousetrap v1.1.0 // indirect
- github.com/josharian/intern v1.0.0 // indirect
- github.com/json-iterator/go v1.1.12 // indirect
- github.com/mailru/easyjson v0.7.7 // indirect
- github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
- github.com/modern-go/reflect2 v1.0.2 // indirect
- github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
- github.com/pkg/errors v0.9.1 // indirect
- github.com/prometheus/client_golang v1.19.1 // indirect
- github.com/prometheus/client_model v0.6.1 // indirect
- github.com/prometheus/common v0.55.0 // indirect
- github.com/prometheus/procfs v0.15.1 // indirect
- github.com/spf13/cobra v1.8.1 // indirect
- github.com/spf13/pflag v1.0.5 // indirect
- github.com/stoewer/go-strcase v1.3.0 // indirect
- github.com/x448/float16 v0.8.4 // indirect
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 // indirect
- go.opentelemetry.io/otel v1.28.0 // indirect
- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 // indirect
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.27.0 // indirect
- go.opentelemetry.io/otel/metric v1.28.0 // indirect
- go.opentelemetry.io/otel/sdk v1.28.0 // indirect
- go.opentelemetry.io/otel/trace v1.28.0 // indirect
- go.opentelemetry.io/proto/otlp v1.3.1 // indirect
- go.uber.org/multierr v1.11.0 // indirect
- go.uber.org/zap v1.27.0 // indirect
- golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
- golang.org/x/net v0.30.0 // indirect
- golang.org/x/oauth2 v0.23.0 // indirect
- golang.org/x/sync v0.8.0 // indirect
- golang.org/x/sys v0.26.0 // indirect
- golang.org/x/term v0.25.0 // indirect
- golang.org/x/text v0.19.0 // indirect
- golang.org/x/time v0.7.0 // indirect
- golang.org/x/tools v0.26.0 // indirect
- gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
- google.golang.org/genproto/googleapis/api v0.0.0-20240826202546-f6391c0de4c7 // indirect
- google.golang.org/genproto/googleapis/rpc v0.0.0-20240826202546-f6391c0de4c7 // indirect
- google.golang.org/grpc v1.65.0 // indirect
- google.golang.org/protobuf v1.35.1 // indirect
- gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
- gopkg.in/inf.v0 v0.9.1 // indirect
- k8s.io/apiserver v0.32.1 // indirect
- k8s.io/component-base v0.32.1 // indirect
- k8s.io/klog/v2 v2.130.1 // indirect
- k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f // indirect
- k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 // indirect
- sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.0 // indirect
- sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 // indirect
- sigs.k8s.io/structured-merge-diff/v4 v4.4.2 // indirect
- sigs.k8s.io/yaml v1.4.0 // indirect
-)
diff --git a/operator/go.sum b/operator/go.sum
deleted file mode 100644
index db9edd2e..00000000
--- a/operator/go.sum
+++ /dev/null
@@ -1,247 +0,0 @@
-cel.dev/expr v0.18.0 h1:CJ6drgk+Hf96lkLikr4rFf19WrU0BOWEihyZnI2TAzo=
-cel.dev/expr v0.18.0/go.mod h1:MrpN08Q+lEBs+bGYdLxxHkZoUSsCp0nSKTs0nTymJgw=
-github.com/antlr4-go/antlr/v4 v4.13.0 h1:lxCg3LAv+EUK6t1i0y1V6/SLeUi0eKEKdhQAlS8TVTI=
-github.com/antlr4-go/antlr/v4 v4.13.0/go.mod h1:pfChB/xh/Unjila75QW7+VU4TSnWnnk9UTnmpPaOR2g=
-github.com/asaskevich/govalidator v0.0.0-20200428143746-21a406dcc535 h1:4daAzAu0S6Vi7/lbWECcX0j45yZReDZ56BQsrVBOEEY=
-github.com/asaskevich/govalidator v0.0.0-20200428143746-21a406dcc535/go.mod h1:oGkLhpf+kjZl6xBf758TQhh5XrAeiJv/7FRz/2spLIg=
-github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
-github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
-github.com/blang/semver/v4 v4.0.0 h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM=
-github.com/blang/semver/v4 v4.0.0/go.mod h1:IbckMUScFkM3pff0VJDNKRiT6TG/YpiHIM2yvyW5YoQ=
-github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8=
-github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE=
-github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
-github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
-github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
-github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
-github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
-github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/emicklei/go-restful/v3 v3.11.0 h1:rAQeMHw1c7zTmncogyy8VvRZwtkmkZ4FxERmMY4rD+g=
-github.com/emicklei/go-restful/v3 v3.11.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
-github.com/evanphx/json-patch v5.6.0+incompatible h1:jBYDEEiFBPxA0v50tFdvOzQQTCvpL6mnFh5mB2/l16U=
-github.com/evanphx/json-patch v5.6.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
-github.com/evanphx/json-patch/v5 v5.9.11 h1:/8HVnzMq13/3x9TPvjG08wUGqBTmZBsCWzjTM0wiaDU=
-github.com/evanphx/json-patch/v5 v5.9.11/go.mod h1:3j+LviiESTElxA4p3EMKAB9HXj3/XEtnUf6OZxqIQTM=
-github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=
-github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
-github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=
-github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
-github.com/fxamacker/cbor/v2 v2.7.0 h1:iM5WgngdRBanHcxugY4JySA0nk1wZorNOpTgCMedv5E=
-github.com/fxamacker/cbor/v2 v2.7.0/go.mod h1:pxXPTn3joSm21Gbwsv0w9OSA2y1HFR9qXEeXQVeNoDQ=
-github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
-github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY=
-github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
-github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
-github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
-github.com/go-logr/zapr v1.3.0 h1:XGdV8XW8zdwFiwOA2Dryh1gj2KRQyOOoNmBy4EplIcQ=
-github.com/go-logr/zapr v1.3.0/go.mod h1:YKepepNBd1u/oyhd/yQmtjVXmm9uML4IXUgMOwR8/Gg=
-github.com/go-openapi/jsonpointer v0.19.6/go.mod h1:osyAmYz/mB/C3I+WsTTSgw1ONzaLJoLCyoi6/zppojs=
-github.com/go-openapi/jsonpointer v0.21.0 h1:YgdVicSA9vH5RiHs9TZW5oyafXZFc6+2Vc1rr/O9oNQ=
-github.com/go-openapi/jsonpointer v0.21.0/go.mod h1:IUyH9l/+uyhIYQ/PXVA41Rexl+kOkAPDdXEYns6fzUY=
-github.com/go-openapi/jsonreference v0.20.2 h1:3sVjiK66+uXK/6oQ8xgcRKcFgQ5KXa2KvnJRumpMGbE=
-github.com/go-openapi/jsonreference v0.20.2/go.mod h1:Bl1zwGIM8/wsvqjsOQLJ/SH+En5Ap4rVB5KVcIDZG2k=
-github.com/go-openapi/swag v0.22.3/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
-github.com/go-openapi/swag v0.23.0 h1:vsEVJDUo2hPJ2tu0/Xc+4noaxyEffXNIs3cOULZ+GrE=
-github.com/go-openapi/swag v0.23.0/go.mod h1:esZ8ITTYEsH1V2trKHjAN8Ai7xHb8RV+YSZ577vPjgQ=
-github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI=
-github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
-github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
-github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
-github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=
-github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=
-github.com/google/btree v1.1.3 h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg=
-github.com/google/btree v1.1.3/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4=
-github.com/google/cel-go v0.22.0 h1:b3FJZxpiv1vTMo2/5RDUqAHPxkT8mmMfJIrq1llbf7g=
-github.com/google/cel-go v0.22.0/go.mod h1:BuznPXXfQDpXKWQ9sPW3TzlAJN5zzFe+i9tIs0yC4s8=
-github.com/google/gnostic-models v0.6.8 h1:yo/ABAfM5IMRsS1VnXjTBvUb61tFIHozhlYvRgGre9I=
-github.com/google/gnostic-models v0.6.8/go.mod h1:5n7qKqH0f5wFt+aWF8CW6pZLLNOfYuF5OpfBSENuI8U=
-github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
-github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
-github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
-github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db h1:097atOisP2aRj7vFgYQBbFN4U4JNXUNYpxael3UzMyo=
-github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144=
-github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
-github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 h1:bkypFPDjIYGfCYD5mRBvpqxfYX1YCS1PXdKYWi8FsN0=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0/go.mod h1:P+Lt/0by1T8bfcF3z737NnSbmxQAppXMRziHUxPOC8k=
-github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
-github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
-github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
-github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
-github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
-github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
-github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
-github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
-github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
-github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
-github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
-github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
-github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
-github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
-github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
-github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
-github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
-github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
-github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
-github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
-github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
-github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
-github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
-github.com/onsi/ginkgo/v2 v2.22.0 h1:Yed107/8DjTr0lKCNt7Dn8yQ6ybuDRQoMGrNFKzMfHg=
-github.com/onsi/ginkgo/v2 v2.22.0/go.mod h1:7Du3c42kxCUegi0IImZ1wUQzMBVecgIHjR1C+NkhLQo=
-github.com/onsi/gomega v1.36.1 h1:bJDPBO7ibjxcbHMgSCoo4Yj18UWbKDlLwX1x9sybDcw=
-github.com/onsi/gomega v1.36.1/go.mod h1:PvZbdDc8J6XJEpDK4HCuRBm8a6Fzp9/DmhC9C7yFlog=
-github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
-github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
-github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
-github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/prometheus/client_golang v1.19.1 h1:wZWJDwK+NameRJuPGDhlnFgx8e8HN3XHQeLaYJFJBOE=
-github.com/prometheus/client_golang v1.19.1/go.mod h1:mP78NwGzrVks5S2H6ab8+ZZGJLZUq1hoULYBAYBw1Ho=
-github.com/prometheus/client_model v0.6.1 h1:ZKSh/rekM+n3CeS952MLRAdFwIKqeY8b62p8ais2e9E=
-github.com/prometheus/client_model v0.6.1/go.mod h1:OrxVMOVHjw3lKMa8+x6HeMGkHMQyHDk9E3jmP2AmGiY=
-github.com/prometheus/common v0.55.0 h1:KEi6DK7lXW/m7Ig5i47x0vRzuBsHuvJdi5ee6Y3G1dc=
-github.com/prometheus/common v0.55.0/go.mod h1:2SECS4xJG1kd8XF9IcM1gMX6510RAEL65zxzNImwdc8=
-github.com/prometheus/procfs v0.15.1 h1:YagwOFzUgYfKKHX6Dr+sHT7km/hxC76UB0learggepc=
-github.com/prometheus/procfs v0.15.1/go.mod h1:fB45yRUv8NstnjriLhBQLuOUt+WW4BsoGhij/e3PBqk=
-github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU5NdKM8=
-github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99yedzYV+kq4uf4=
-github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
-github.com/spf13/cobra v1.8.1 h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM=
-github.com/spf13/cobra v1.8.1/go.mod h1:wHxEcudfqmLYa8iTfL+OuZPbBZkmvliBWKIezN3kD9Y=
-github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
-github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
-github.com/stoewer/go-strcase v1.3.0 h1:g0eASXYtp+yvN9fK8sH94oCIk0fau9uV1/ZdJ0AVEzs=
-github.com/stoewer/go-strcase v1.3.0/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo=
-github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
-github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
-github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
-github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
-github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
-github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
-github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
-github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
-github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
-github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
-github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 h1:4K4tsIXefpVJtvA/8srF4V4y0akAoPHkIslgAkjixJA=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0/go.mod h1:jjdQuTGVsXV4vSs+CJ2qYDeDPf9yIJV23qlIzBm73Vg=
-go.opentelemetry.io/otel v1.28.0 h1:/SqNcYk+idO0CxKEUOtKQClMK/MimZihKYMruSMViUo=
-go.opentelemetry.io/otel v1.28.0/go.mod h1:q68ijF8Fc8CnMHKyzqL6akLO46ePnjkgfIMIjUIX9z4=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 h1:3Q/xZUyC1BBkualc9ROb4G8qkH90LXEIICcs5zv1OYY=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0/go.mod h1:s75jGIWA9OfCMzF0xr+ZgfrB5FEbbV7UuYo32ahUiFI=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.27.0 h1:qFffATk0X+HD+f1Z8lswGiOQYKHRlzfmdJm0wEaVrFA=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.27.0/go.mod h1:MOiCmryaYtc+V0Ei+Tx9o5S1ZjA7kzLucuVuyzBZloQ=
-go.opentelemetry.io/otel/metric v1.28.0 h1:f0HGvSl1KRAU1DLgLGFjrwVyismPlnuU6JD6bOeuA5Q=
-go.opentelemetry.io/otel/metric v1.28.0/go.mod h1:Fb1eVBFZmLVTMb6PPohq3TO9IIhUisDsbJoL/+uQW4s=
-go.opentelemetry.io/otel/sdk v1.28.0 h1:b9d7hIry8yZsgtbmM0DKyPWMMUMlK9NEKuIG4aBqWyE=
-go.opentelemetry.io/otel/sdk v1.28.0/go.mod h1:oYj7ClPUA7Iw3m+r7GeEjz0qckQRJK2B8zjcZEfu7Pg=
-go.opentelemetry.io/otel/trace v1.28.0 h1:GhQ9cUuQGmNDd5BTCP2dAvv75RdMxEfTmYejp+lkx9g=
-go.opentelemetry.io/otel/trace v1.28.0/go.mod h1:jPyXzNPg6da9+38HEwElrQiHlVMTnVfM3/yv2OlIHaI=
-go.opentelemetry.io/proto/otlp v1.3.1 h1:TrMUixzpM0yuc/znrFTP9MMRh8trP93mkCiDVeXrui0=
-go.opentelemetry.io/proto/otlp v1.3.1/go.mod h1:0X1WI4de4ZsLrrJNLAQbFeLCm3T7yBkR0XqQ7niQU+8=
-go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
-go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
-go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
-go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
-go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8=
-go.uber.org/zap v1.27.0/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
-golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
-golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 h1:2dVuKD2vS7b0QIHQbpyTISPd0LeHDbnYEryqj5Q1ug8=
-golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56/go.mod h1:M4RDyNAINzryxdtnbRXRL/OHtkFuWGRjvuhBJpk2IlY=
-golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
-golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
-golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
-golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
-golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4=
-golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU=
-golang.org/x/oauth2 v0.23.0 h1:PbgcYx2W7i4LvjJWEbf0ngHV6qJYr86PkAV3bXdLEbs=
-golang.org/x/oauth2 v0.23.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI=
-golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
-golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo=
-golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/term v0.25.0 h1:WtHI/ltw4NvSUig5KARz9h521QvRC8RmF/cuYqifU24=
-golang.org/x/term v0.25.0/go.mod h1:RPyXicDX+6vLxogjjRxjgD2TKtmAO6NZBsBRfrOLu7M=
-golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
-golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM=
-golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
-golang.org/x/time v0.7.0 h1:ntUhktv3OPE6TgYxXWv9vKvUSJyIFJlyohwbkEwPrKQ=
-golang.org/x/time v0.7.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
-golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
-golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
-golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
-golang.org/x/tools v0.26.0 h1:v/60pFQmzmT9ExmjDv2gGIfi3OqfKoEP6I5+umXlbnQ=
-golang.org/x/tools v0.26.0/go.mod h1:TPVVj70c7JJ3WCazhD8OdXcZg/og+b9+tH/KxylGwH0=
-golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-gomodules.xyz/jsonpatch/v2 v2.4.0 h1:Ci3iUJyx9UeRx7CeFN8ARgGbkESwJK+KB9lLcWxY/Zw=
-gomodules.xyz/jsonpatch/v2 v2.4.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=
-google.golang.org/genproto/googleapis/api v0.0.0-20240826202546-f6391c0de4c7 h1:YcyjlL1PRr2Q17/I0dPk2JmYS5CDXfcdb2Z3YRioEbw=
-google.golang.org/genproto/googleapis/api v0.0.0-20240826202546-f6391c0de4c7/go.mod h1:OCdP9MfskevB/rbYvHTsXTtKC+3bHWajPdoKgjcYkfo=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20240826202546-f6391c0de4c7 h1:2035KHhUv+EpyB+hWgJnaWKJOdX1E95w2S8Rr4uWKTs=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20240826202546-f6391c0de4c7/go.mod h1:UqMtugtsSgubUsoxbuAoiCXvqvErP7Gf0so0mK9tHxU=
-google.golang.org/grpc v1.65.0 h1:bs/cUb4lp1G5iImFFd3u5ixQzweKizoZJAwBNLR42lc=
-google.golang.org/grpc v1.65.0/go.mod h1:WgYC2ypjlB0EiQi6wdKixMqukr6lBc0Vo+oOgjrM5ZQ=
-google.golang.org/protobuf v1.35.1 h1:m3LfL6/Ca+fqnjnlqQXNpFPABW1UD7mjh8KO2mKFytA=
-google.golang.org/protobuf v1.35.1/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
-gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
-gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
-gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSPG+6V4=
-gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M=
-gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
-gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
-gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
-gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.32.1 h1:f562zw9cy+GvXzXf0CKlVQ7yHJVYzLfL6JAS4kOAaOc=
-k8s.io/api v0.32.1/go.mod h1:/Yi/BqkuueW1BgpoePYBRdDYfjPF5sgTr5+YqDZra5k=
-k8s.io/apiextensions-apiserver v0.32.1 h1:hjkALhRUeCariC8DiVmb5jj0VjIc1N0DREP32+6UXZw=
-k8s.io/apiextensions-apiserver v0.32.1/go.mod h1:sxWIGuGiYov7Io1fAS2X06NjMIk5CbRHc2StSmbaQto=
-k8s.io/apimachinery v0.32.1 h1:683ENpaCBjma4CYqsmZyhEzrGz6cjn1MY/X2jB2hkZs=
-k8s.io/apimachinery v0.32.1/go.mod h1:GpHVgxoKlTxClKcteaeuF1Ul/lDVb74KpZcxcmLDElE=
-k8s.io/apiserver v0.32.1 h1:oo0OozRos66WFq87Zc5tclUX2r0mymoVHRq8JmR7Aak=
-k8s.io/apiserver v0.32.1/go.mod h1:UcB9tWjBY7aryeI5zAgzVJB/6k7E97bkr1RgqDz0jPw=
-k8s.io/client-go v0.32.1 h1:otM0AxdhdBIaQh7l1Q0jQpmo7WOFIk5FFa4bg6YMdUU=
-k8s.io/client-go v0.32.1/go.mod h1:aTTKZY7MdxUaJ/KiUs8D+GssR9zJZi77ZqtzcGXIiDg=
-k8s.io/component-base v0.32.1 h1:/5IfJ0dHIKBWysGV0yKTFfacZ5yNV1sulPh3ilJjRZk=
-k8s.io/component-base v0.32.1/go.mod h1:j1iMMHi/sqAHeG5z+O9BFNCF698a1u0186zkjMZQ28w=
-k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
-k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
-k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f h1:GA7//TjRY9yWGy1poLzYYJJ4JRdzg3+O6e8I+e+8T5Y=
-k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f/go.mod h1:R/HEjbvWI0qdfb8viZUeVZm0X6IZnxAydC7YU42CMw4=
-k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 h1:M3sRQVHv7vB20Xc2ybTt7ODCeFj6JSWYFzOFnYeS6Ro=
-k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.0 h1:CPT0ExVicCzcpeN4baWEV2ko2Z/AsiZgEdwgcfwLgMo=
-sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.0/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw=
-sigs.k8s.io/controller-runtime v0.20.4 h1:X3c+Odnxz+iPTRobG4tp092+CvBU9UK0t/bRf+n0DGU=
-sigs.k8s.io/controller-runtime v0.20.4/go.mod h1:xg2XB0K5ShQzAgsoujxuKN4LNXR2LfwwHsPj7Iaw+XY=
-sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 h1:/Rv+M11QRah1itp8VhT6HoVx1Ray9eB4DBr+K+/sCJ8=
-sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3/go.mod h1:18nIHnGi6636UCz6m8i4DhaJ65T6EruyzmoQqI2BVDo=
-sigs.k8s.io/structured-merge-diff/v4 v4.4.2 h1:MdmvkGuXi/8io6ixD5wud3vOLwc1rj0aNqRlpuvjmwA=
-sigs.k8s.io/structured-merge-diff/v4 v4.4.2/go.mod h1:N8f93tFZh9U6vpxwRArLiikrE5/2tiu1w1AGfACIGE4=
-sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
-sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=
diff --git a/operator/hack/boilerplate.go.txt b/operator/hack/boilerplate.go.txt
deleted file mode 100644
index 221dcbe0..00000000
--- a/operator/hack/boilerplate.go.txt
+++ /dev/null
@@ -1,15 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
\ No newline at end of file
diff --git a/operator/hack/helm.patch b/operator/hack/helm.patch
deleted file mode 100644
index fab1f6fb..00000000
--- a/operator/hack/helm.patch
+++ /dev/null
@@ -1,303 +0,0 @@
-diff --git a/dist/chart/Chart.yaml b/deploy/chart/Chart.yaml
-index 221f200..2eac6b8 100644
---- a/dist/chart/Chart.yaml
-+++ b/deploy/chart/Chart.yaml
-@@ -1,7 +1,19 @@
- apiVersion: v2
- name: operator
--description: A Helm chart to distribute the project operator
-+description: A Helm chart to deploy the FunctionStream operator on Kubernetes.
- type: application
- version: 0.1.0
- appVersion: "0.1.0"
--icon: "https://example.com/icon.png"
-+home: "https://github.com/FunctionStream/function-stream"
-+sources:
-+ - "https://github.com/FunctionStream/function-stream/operator"
-+maintainers:
-+ - name: Zike Yang
-+ email: zike@apache.org
-+keywords:
-+ - serverless
-+ - streaming
-+ - functionstream
-+ - operators
-+annotations:
-+ category: "Operators"
-diff --git a/dist/chart/templates/manager/manager.yaml b/deploy/chart/templates/manager/manager.yaml
-index 7f6c891..ce6c11d 100644
---- a/dist/chart/templates/manager/manager.yaml
-+++ b/deploy/chart/templates/manager/manager.yaml
-@@ -34,13 +34,29 @@ spec:
- command:
- - /manager
- image: {{ .Values.controllerManager.container.image.repository }}:{{ .Values.controllerManager.container.image.tag }}
-- {{- if .Values.controllerManager.container.env }}
-+ imagePullPolicy: {{ .Values.controllerManager.container.imagePullPolicy }}
- env:
-+ {{- if .Values.pulsar.standalone.enable }}
-+ - name: PULSAR_SERVICE_URL
-+ value: pulsar://{{ .Release.Name }}-pulsar-standalone.{{ .Release.Namespace }}.svc.cluster.local:6650
-+ {{- else if .Values.pulsar.serviceUrl }}
-+ - name: PULSAR_SERVICE_URL
-+ value: {{ .Values.pulsar.serviceUrl }}
-+ {{- end }}
-+ {{- if .Values.pulsar.authPlugin }}
-+ - name: PULSAR_AUTH_PLUGIN
-+ value: {{ .Values.pulsar.authPlugin }}
-+ {{- end }}
-+ {{- if .Values.pulsar.authParams }}
-+ - name: PULSAR_AUTH_PARAMS
-+ value: {{ .Values.pulsar.authParams }}
-+ {{- end }}
-+ {{- if .Values.controllerManager.container.env }}
- {{- range $key, $value := .Values.controllerManager.container.env }}
- - name: {{ $key }}
- value: {{ $value }}
- {{- end }}
-- {{- end }}
-+ {{- end }}
- livenessProbe:
- {{- toYaml .Values.controllerManager.container.livenessProbe | nindent 12 }}
- readinessProbe:
-diff --git a/deploy/chart/templates/pulsar/service.yaml b/deploy/chart/templates/pulsar/service.yaml
-new file mode 100644
-index 0000000..a460cbc
---- /dev/null
-+++ b/deploy/chart/templates/pulsar/service.yaml
-@@ -0,0 +1,24 @@
-+{{- if .Values.pulsar.standalone.enable }}
-+apiVersion: v1
-+kind: Service
-+metadata:
-+ name: {{ .Release.Name }}-pulsar-standalone
-+ namespace: {{ .Release.Namespace }}
-+ labels:
-+ {{- include "chart.labels" . | nindent 4 }}
-+ app: pulsar-standalone
-+spec:
-+ type: {{ .Values.pulsar.standalone.service.type }}
-+ ports:
-+ - name: pulsar
-+ port: {{ .Values.pulsar.standalone.service.ports.pulsar }}
-+ targetPort: 6650
-+ protocol: TCP
-+ - name: admin
-+ port: {{ .Values.pulsar.standalone.service.ports.admin }}
-+ targetPort: 8080
-+ protocol: TCP
-+ selector:
-+ {{- include "chart.selectorLabels" . | nindent 4 }}
-+ app: pulsar-standalone
-+{{- end }}
-\ No newline at end of file
-diff --git a/deploy/chart/templates/pulsar/statefulset.yaml b/deploy/chart/templates/pulsar/statefulset.yaml
-new file mode 100644
-index 0000000..a7f7ef8
---- /dev/null
-+++ b/deploy/chart/templates/pulsar/statefulset.yaml
-@@ -0,0 +1,77 @@
-+{{- if .Values.pulsar.standalone.enable }}
-+apiVersion: apps/v1
-+kind: StatefulSet
-+metadata:
-+ name: {{ .Release.Name }}-pulsar-standalone
-+ namespace: {{ .Release.Namespace }}
-+ labels:
-+ {{- include "chart.labels" . | nindent 4 }}
-+ app: pulsar-standalone
-+ app.kubernetes.io/component: messaging
-+spec:
-+ serviceName: {{ .Release.Name }}-pulsar-standalone
-+ replicas: 1
-+ selector:
-+ matchLabels:
-+ {{- include "chart.selectorLabels" . | nindent 6 }}
-+ app: pulsar-standalone
-+ template:
-+ metadata:
-+ labels:
-+ {{- include "chart.labels" . | nindent 8 }}
-+ app: pulsar-standalone
-+ app.kubernetes.io/component: messaging
-+ spec:
-+ containers:
-+ - name: pulsar
-+ image: {{ .Values.pulsar.standalone.image.repository }}:{{ .Values.pulsar.standalone.image.tag }}
-+ command:
-+ - sh
-+ - -c
-+ - |
-+ # Initialize Pulsar standalone
-+ bin/pulsar standalone -nfw -nss
-+ ports:
-+ - name: pulsar
-+ containerPort: 6650
-+ protocol: TCP
-+ - name: admin
-+ containerPort: 8080
-+ protocol: TCP
-+ resources:
-+ {{- toYaml .Values.pulsar.standalone.resources | nindent 12 }}
-+ {{- if .Values.pulsar.standalone.storage.persistence.enabled }}
-+ volumeMounts:
-+ - name: pulsar-data
-+ mountPath: /pulsar/data
-+ {{- end }}
-+ livenessProbe:
-+ httpGet:
-+ path: /admin/v2/brokers/health
-+ port: 8080
-+ initialDelaySeconds: 60
-+ periodSeconds: 30
-+ timeoutSeconds: 5
-+ failureThreshold: 3
-+ readinessProbe:
-+ httpGet:
-+ path: /admin/v2/brokers/health
-+ port: 8080
-+ initialDelaySeconds: 30
-+ periodSeconds: 10
-+ timeoutSeconds: 3
-+ failureThreshold: 3
-+ {{- if .Values.pulsar.standalone.storage.persistence.enabled }}
-+ volumeClaimTemplates:
-+ - metadata:
-+ name: pulsar-data
-+ spec:
-+ accessModes: ["ReadWriteOnce"]
-+ {{- if .Values.pulsar.standalone.storage.storageClass }}
-+ storageClassName: {{ .Values.pulsar.standalone.storage.storageClass }}
-+ {{- end }}
-+ resources:
-+ requests:
-+ storage: {{ .Values.pulsar.standalone.storage.size }}
-+ {{- end }}
-+{{- end }}
-\ No newline at end of file
-diff --git a/dist/chart/templates/rbac/metrics_auth_role.yaml b/deploy/chart/templates/rbac/metrics_auth_role.yaml
-index b0c7913..decef92 100755
---- a/dist/chart/templates/rbac/metrics_auth_role.yaml
-+++ b/deploy/chart/templates/rbac/metrics_auth_role.yaml
-@@ -4,7 +4,7 @@ kind: ClusterRole
- metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-- name: operator-metrics-auth-role
-+ name: {{ .Release.Name }}-operator-metrics-auth-role
- rules:
- - apiGroups:
- - authentication.k8s.io
-diff --git a/dist/chart/templates/rbac/metrics_auth_role_binding.yaml b/deploy/chart/templates/rbac/metrics_auth_role_binding.yaml
-index a13f6a6..0172099 100755
---- a/dist/chart/templates/rbac/metrics_auth_role_binding.yaml
-+++ b/deploy/chart/templates/rbac/metrics_auth_role_binding.yaml
-@@ -4,7 +4,7 @@ kind: ClusterRoleBinding
- metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-- name: operator-metrics-auth-rolebinding
-+ name: {{ .Release.Name }}-operator-metrics-auth-rolebinding
- roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
-diff --git a/dist/chart/templates/rbac/metrics_reader_role.yaml b/deploy/chart/templates/rbac/metrics_reader_role.yaml
-index 1f0a0f5..f5655e7 100755
---- a/dist/chart/templates/rbac/metrics_reader_role.yaml
-+++ b/deploy/chart/templates/rbac/metrics_reader_role.yaml
-@@ -4,7 +4,7 @@ kind: ClusterRole
- metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-- name: operator-metrics-reader
-+ name: {{ .Release.Name }}-operator-metrics-reader
- rules:
- - nonResourceURLs:
- - "/metrics"
-diff --git a/dist/chart/templates/rbac/role.yaml b/deploy/chart/templates/rbac/role.yaml
-index 3ae0961..a32998a 100755
---- a/dist/chart/templates/rbac/role.yaml
-+++ b/deploy/chart/templates/rbac/role.yaml
-@@ -5,7 +5,7 @@ kind: ClusterRole
- metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-- name: operator-manager-role
-+ name: functionstream-operator-manager-role
- rules:
- - apiGroups:
- - apps
-diff --git a/dist/chart/templates/rbac/role_binding.yaml b/deploy/chart/templates/rbac/role_binding.yaml
-index a4f2cfa..77c8250 100755
---- a/dist/chart/templates/rbac/role_binding.yaml
-+++ b/deploy/chart/templates/rbac/role_binding.yaml
-@@ -4,11 +4,11 @@ kind: ClusterRoleBinding
- metadata:
- labels:
- {{- include "chart.labels" . | nindent 4 }}
-- name: operator-manager-rolebinding
-+ name: {{ .Release.Name }}-functionstream-operator-manager-rolebinding
- roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
-- name: operator-manager-role
-+ name: functionstream-operator-manager-role
- subjects:
- - kind: ServiceAccount
- name: {{ .Values.controllerManager.serviceAccountName }}
-diff --git a/dist/chart/values.yaml b/deploy/chart/values.yaml
-index 9357643..4851d3b 100644
---- a/dist/chart/values.yaml
-+++ b/deploy/chart/values.yaml
-@@ -3,8 +3,9 @@ controllerManager:
- replicas: 1
- container:
- image:
-- repository: controller
-+ repository: functionstream/operator
- tag: latest
-+ imagePullPolicy: IfNotPresent
- args:
- - "--leader-elect"
- - "--metrics-bind-address=:8443"
-@@ -38,7 +39,7 @@ controllerManager:
- seccompProfile:
- type: RuntimeDefault
- terminationGracePeriodSeconds: 10
-- serviceAccountName: operator-controller-manager
-+ serviceAccountName: functionstream-operator
-
- # [RBAC]: To enable RBAC (Permissions) configurations
- rbac:
-@@ -81,3 +82,31 @@ certmanager:
- # [NETWORK POLICIES]: To enable NetworkPolicies set true
- networkPolicy:
- enable: false
-+
-+# [PULSAR]: Pulsar configuration
-+pulsar:
-+ # Enable Pulsar standalone cluster deployment
-+ standalone:
-+ enable: false
-+ image:
-+ repository: apachepulsar/pulsar
-+ tag: "latest"
-+ resources:
-+ requests:
-+ cpu: 500m
-+ memory: 1Gi
-+ storage:
-+ # Enable persistence for Pulsar data
-+ persistence:
-+ enabled: false
-+ size: 10Gi
-+ storageClass: ""
-+ service:
-+ type: ClusterIP
-+ ports:
-+ pulsar: 6650
-+ admin: 8080
-+ # External Pulsar cluster configuration (used when standalone.enable is false)
-+ serviceUrl: pulsar://your-pulsar-cluster:6650
-+ authPlugin: ""
-+ authParams: ""
diff --git a/operator/internal/controller/function_controller.go b/operator/internal/controller/function_controller.go
deleted file mode 100644
index abb82875..00000000
--- a/operator/internal/controller/function_controller.go
+++ /dev/null
@@ -1,346 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package controller
-
-import (
- "context"
- "fmt"
- "reflect"
-
- "github.com/FunctionStream/function-stream/operator/utils"
- "k8s.io/apimachinery/pkg/util/json"
-
- "gopkg.in/yaml.v3"
- appsv1 "k8s.io/api/apps/v1"
- corev1 "k8s.io/api/core/v1"
- "k8s.io/apimachinery/pkg/api/errors"
- metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
- "k8s.io/apimachinery/pkg/runtime"
- "k8s.io/apimachinery/pkg/types"
- ctrl "sigs.k8s.io/controller-runtime"
- "sigs.k8s.io/controller-runtime/pkg/builder"
- "sigs.k8s.io/controller-runtime/pkg/client"
- "sigs.k8s.io/controller-runtime/pkg/handler"
- logf "sigs.k8s.io/controller-runtime/pkg/log"
- "sigs.k8s.io/controller-runtime/pkg/predicate"
- "sigs.k8s.io/controller-runtime/pkg/reconcile"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
-)
-
-// Config holds operator configuration (e.g. for messaging systems)
-type Config struct {
- PulsarServiceURL string
- PulsarAuthPlugin string
- PulsarAuthParams string
-}
-
-// FunctionReconciler reconciles a Function object
-type FunctionReconciler struct {
- client.Client
- Scheme *runtime.Scheme
- Config Config
-}
-
-// +kubebuilder:rbac:groups=fs.functionstream.github.io,resources=functions,verbs=get;list;watch;create;update;patch;delete
-// +kubebuilder:rbac:groups=fs.functionstream.github.io,resources=packages,verbs=get;list;watch
-// +kubebuilder:rbac:groups=fs.functionstream.github.io,resources=functions/status,verbs=get;update;patch
-// +kubebuilder:rbac:groups=fs.functionstream.github.io,resources=functions/finalizers,verbs=update
-// +kubebuilder:rbac:groups=apps,resources=deployments,verbs=get;list;watch;create;update;patch;delete
-
-// Reconcile is part of the main kubernetes reconciliation loop which aims to
-// move the current state of the cluster closer to the desired state.
-// TODO(user): Modify the Reconcile function to compare the state specified by
-// the Function object against the actual cluster state, and then
-// perform operations to make the cluster state reflect the state specified by
-// the user.
-//
-// For more details, check Reconcile and its Result here:
-// - https://pkg.go.dev/sigs.k8s.io/controller-runtime@v0.20.4/pkg/reconcile
-func (r *FunctionReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
- log := logf.FromContext(ctx)
- log.Info("Reconciling Function", "function", req.NamespacedName)
-
- // 1. Get Function
- var fn fsv1alpha1.Function
- if err := r.Get(ctx, req.NamespacedName, &fn); err != nil {
- if errors.IsNotFound(err) {
- return ctrl.Result{}, nil
- }
- return ctrl.Result{}, err
- }
-
- // 2. Get package label for later use
- packageLabel := generatePackageLabel(&fn)
-
- // 3. Get Package
- var pkg fsv1alpha1.Package
- packageNamespace := fn.Spec.PackageRef.Namespace
- if packageNamespace == "" {
- packageNamespace = req.Namespace
- }
- if err := r.Get(ctx, types.NamespacedName{Name: fn.Spec.PackageRef.Name, Namespace: packageNamespace}, &pkg); err != nil {
- return ctrl.Result{}, err
- }
- image := ""
- if pkg.Spec.FunctionType.Cloud != nil {
- image = pkg.Spec.FunctionType.Cloud.Image
- }
- if image == "" {
- return ctrl.Result{}, fmt.Errorf("package %s has no image", packageLabel)
- }
-
- // 4. Build config yaml content
- configYaml, err := buildFunctionConfigYaml(&fn, r.Config)
- if err != nil {
- log.Error(err, "Failed to marshal config yaml")
- return ctrl.Result{}, err
- }
-
- // 5. Build Deployment
- deployName := fmt.Sprintf("function-%s", fn.Name)
- var replicas int32 = 1
- if fn.Spec.Replicas != nil {
- replicas = *fn.Spec.Replicas
- }
- labels := map[string]string{
- "function": fn.Name,
- }
-
- // Create init command to write config file
- initCommand := fmt.Sprintf(`cat > /config/config.yaml << 'EOF'
-%s
-EOF
-`, configYaml)
-
- deployment := &appsv1.Deployment{
- ObjectMeta: metav1.ObjectMeta{
- Name: deployName,
- Namespace: fn.Namespace,
- Labels: labels,
- },
- Spec: appsv1.DeploymentSpec{
- Replicas: &replicas,
- Selector: &metav1.LabelSelector{
- MatchLabels: map[string]string{"function": fn.Name},
- },
- Template: corev1.PodTemplateSpec{
- ObjectMeta: metav1.ObjectMeta{
- Labels: labels,
- },
- Spec: corev1.PodSpec{
- InitContainers: []corev1.Container{{
- Name: "init-config",
- Image: image,
- Command: []string{"/bin/sh", "-c", initCommand},
- VolumeMounts: []corev1.VolumeMount{{
- Name: "function-config",
- MountPath: "/config",
- }},
- }},
- Containers: []corev1.Container{{
- Name: "function",
- Image: image,
- VolumeMounts: []corev1.VolumeMount{{
- Name: "function-config",
- MountPath: "/config",
- }},
- Env: []corev1.EnvVar{{
- Name: "FS_CONFIG_PATH",
- Value: "/config/config.yaml",
- }},
- }},
- Volumes: []corev1.Volume{{
- Name: "function-config",
- VolumeSource: corev1.VolumeSource{
- EmptyDir: &corev1.EmptyDirVolumeSource{},
- },
- }},
- },
- },
- },
- }
- if err := ctrl.SetControllerReference(&fn, deployment, r.Scheme); err != nil {
- return ctrl.Result{}, err
- }
-
- // 6. Create or Update Deployment
- var existingDeploy appsv1.Deployment
- deployErr := r.Get(ctx, types.NamespacedName{Name: deployName, Namespace: fn.Namespace}, &existingDeploy)
- if deployErr == nil {
- // Only update if spec or labels changed
- if !reflect.DeepEqual(existingDeploy.Spec, deployment.Spec) ||
- !reflect.DeepEqual(existingDeploy.Labels, deployment.Labels) {
- existingDeploy.Spec = deployment.Spec
- existingDeploy.Labels = deployment.Labels
- err = r.Update(ctx, &existingDeploy)
- if err != nil {
- return utils.HandleReconcileError(log, err, "Conflict when updating Deployment, will retry automatically")
- }
- }
- } else if errors.IsNotFound(deployErr) {
- err = r.Create(ctx, deployment)
- if err != nil {
- return utils.HandleReconcileError(log, err, "Conflict when creating Deployment, will retry automatically")
- }
- } else {
- return ctrl.Result{}, deployErr
- }
-
- // 7. Update Function Status from Deployment Status
- if err := r.Get(ctx, types.NamespacedName{Name: deployName, Namespace: fn.Namespace}, &existingDeploy); err == nil {
- fn.Status = convertDeploymentStatusToFunctionStatus(&existingDeploy.Status)
- if err := r.Status().Update(ctx, &fn); err != nil {
- return utils.HandleReconcileError(log, err, "Conflict when updating Function status, will retry automatically")
- }
- }
-
- return ctrl.Result{}, nil
-}
-
-// buildFunctionConfigYaml builds the config.yaml content for the function
-func buildFunctionConfigYaml(fn *fsv1alpha1.Function, operatorCfg Config) (string, error) {
- cfg := map[string]interface{}{}
-
- // Inject pulsar config from operator config
- cfg["pulsar"] = map[string]interface{}{
- "serviceUrl": operatorCfg.PulsarServiceURL,
- "authPlugin": operatorCfg.PulsarAuthPlugin,
- "authParams": operatorCfg.PulsarAuthParams,
- }
-
- if len(fn.Spec.Sources) > 0 {
- cfg["sources"] = fn.Spec.Sources
- }
- if fn.Spec.RequestSource != nil {
- cfg["requestSource"] = fn.Spec.RequestSource
- }
- if fn.Spec.SubscriptionName != "" {
- cfg["subscriptionName"] = fn.Spec.SubscriptionName
- } else {
- cfg["subscriptionName"] = fmt.Sprintf("fs-%s", fn.Name)
- }
- if fn.Spec.Sink != nil {
- cfg["sink"] = fn.Spec.Sink
- }
- if fn.Spec.Module != "" {
- cfg["module"] = fn.Spec.Module
- }
- if fn.Spec.Config != nil {
- configMap := make(map[string]interface{})
- for k, v := range fn.Spec.Config {
- var r interface{}
- if err := json.Unmarshal(v.Raw, &r); err != nil {
- return "", fmt.Errorf("failed to unmarshal config value for key %s: %w", k, err)
- }
- configMap[k] = r
- }
- cfg["config"] = configMap
- }
- if fn.Spec.Description != "" {
- cfg["description"] = fn.Spec.Description
- }
- if fn.Spec.DisplayName != "" {
- cfg["displayName"] = fn.Spec.DisplayName
- }
- if fn.Spec.PackageRef.Name != "" {
- cfg["package"] = generatePackageLabel(fn)
- }
- out, err := yaml.Marshal(cfg)
- if err != nil {
- return "", err
- }
- return string(out), nil
-}
-
-// convertDeploymentStatusToFunctionStatus copies DeploymentStatus fields to FunctionStatus
-func convertDeploymentStatusToFunctionStatus(ds *appsv1.DeploymentStatus) fsv1alpha1.FunctionStatus {
- return fsv1alpha1.FunctionStatus{
- AvailableReplicas: ds.AvailableReplicas,
- ReadyReplicas: ds.ReadyReplicas,
- Replicas: ds.Replicas,
- UpdatedReplicas: ds.UpdatedReplicas,
- ObservedGeneration: ds.ObservedGeneration,
- }
-}
-
-func hasFunctionLabel(obj client.Object) bool {
- labels := obj.GetLabels()
- _, ok := labels["function"]
- return ok
-}
-
-// generatePackageLabel generates a package label in the format "{namespace}.{packageName}"
-func generatePackageLabel(fn *fsv1alpha1.Function) string {
- packageNamespace := fn.Spec.PackageRef.Namespace
- if packageNamespace == "" {
- packageNamespace = fn.Namespace
- }
- return fmt.Sprintf("%s.%s", packageNamespace, fn.Spec.PackageRef.Name)
-}
-
-// SetupWithManager sets up the controller with the Manager.
-func (r *FunctionReconciler) SetupWithManager(mgr ctrl.Manager) error {
- functionLabelPredicate := predicate.NewPredicateFuncs(hasFunctionLabel)
- return ctrl.NewControllerManagedBy(mgr).
- For(&fsv1alpha1.Function{}).
- Owns(&appsv1.Deployment{}, builder.WithPredicates(functionLabelPredicate)).
- Watches(
- &fsv1alpha1.Package{},
- handler.EnqueueRequestsFromMapFunc(r.mapPackageToFunctions),
- ).
- Named("function").
- Complete(r)
-}
-
-// mapPackageToFunctions maps Package changes to related Functions
-func (r *FunctionReconciler) mapPackageToFunctions(ctx context.Context, obj client.Object) []reconcile.Request {
- packageObj, ok := obj.(*fsv1alpha1.Package)
- if !ok {
- return nil
- }
-
- var requests []reconcile.Request
-
- // Get Functions that reference this Package using the new label format {namespace}.{package name}
- packageLabel := fmt.Sprintf("%s.%s", packageObj.Namespace, packageObj.Name)
- var functions fsv1alpha1.FunctionList
- if err := r.List(ctx, &functions,
- client.MatchingLabels(map[string]string{"package": packageLabel})); err != nil {
- return nil
- }
-
- for _, function := range functions.Items {
- // Check if this function actually references this package
- if function.Spec.PackageRef.Name == packageObj.Name {
- packageNamespace := function.Spec.PackageRef.Namespace
- if packageNamespace == "" {
- packageNamespace = function.Namespace
- }
- if packageNamespace == packageObj.Namespace {
- requests = append(requests, reconcile.Request{
- NamespacedName: types.NamespacedName{
- Name: function.Name,
- Namespace: function.Namespace,
- },
- })
- }
- }
- }
-
- return requests
-}
diff --git a/operator/internal/controller/function_controller_test.go b/operator/internal/controller/function_controller_test.go
deleted file mode 100644
index 53a6acca..00000000
--- a/operator/internal/controller/function_controller_test.go
+++ /dev/null
@@ -1,786 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package controller
-
-import (
- "context"
-
- . "github.com/onsi/ginkgo/v2"
- . "github.com/onsi/gomega"
- "k8s.io/apimachinery/pkg/api/errors"
- "k8s.io/apimachinery/pkg/types"
- "sigs.k8s.io/controller-runtime/pkg/reconcile"
-
- metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
- appsv1 "k8s.io/api/apps/v1"
- corev1 "k8s.io/api/core/v1"
- "sigs.k8s.io/controller-runtime/pkg/client"
-)
-
-var _ = Describe("Function Controller", func() {
- Context("When reconciling a resource", func() {
- const resourceName = "test-resource"
-
- ctx := context.Background()
-
- typeNamespacedName := types.NamespacedName{
- Name: resourceName,
- Namespace: "default", // TODO(user):Modify as needed
- }
- function := &fsv1alpha1.Function{}
-
- BeforeEach(func() {
- By("creating the custom resource for the Kind Function")
- err := k8sClient.Get(ctx, typeNamespacedName, function)
- if err != nil && errors.IsNotFound(err) {
- resource := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: typeNamespacedName.Name,
- Namespace: typeNamespacedName.Namespace,
- },
- }
- Expect(k8sClient.Create(ctx, resource)).To(Succeed())
- }
- })
-
- AfterEach(func() {
- // TODO(user): Cleanup logic after each test, like removing the resource instance.
- resource := &fsv1alpha1.Function{}
- err := k8sClient.Get(ctx, typeNamespacedName, resource)
- Expect(err).NotTo(HaveOccurred())
-
- By("Cleanup the specific resource instance Function")
- Expect(k8sClient.Delete(ctx, resource)).To(Succeed())
- })
- It("should successfully reconcile the resource and create Deployment with init container, and update Status", func() {
- By("Reconciling the created resource")
- controllerReconciler := &FunctionReconciler{
- Client: k8sClient,
- Scheme: k8sClient.Scheme(),
- Config: Config{
- PulsarServiceURL: "pulsar://test-broker:6650",
- PulsarAuthPlugin: "org.apache.pulsar.client.impl.auth.AuthenticationToken",
- PulsarAuthParams: "token:my-token",
- },
- }
-
- // Create a Package resource first
- pkg := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-pkg",
- Namespace: "default",
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "Test Package",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{
- Cloud: &fsv1alpha1.CloudType{Image: "busybox:latest"},
- },
- Modules: map[string]fsv1alpha1.Module{},
- },
- }
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
-
- // Re-fetch the latest Function object to ensure the Name field is set
- Expect(k8sClient.Get(ctx, typeNamespacedName, function)).To(Succeed())
-
- // Patch the Function to reference the Package and fill required fields
- patch := client.MergeFrom(function.DeepCopy())
- function.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "test-pkg"}
- function.Spec.Module = "mod"
- function.Spec.Sink = &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out"}}
- function.Spec.RequestSource = &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in"}}
- Expect(k8sClient.Patch(ctx, function, patch)).To(Succeed())
-
- _, err := controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: typeNamespacedName,
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Check Deployment
- deployName := "function-" + typeNamespacedName.Name
- deploy := &appsv1.Deployment{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: deployName, Namespace: typeNamespacedName.Namespace}, deploy)).To(Succeed())
-
- // Verify init container exists and has correct configuration
- Expect(deploy.Spec.Template.Spec.InitContainers).To(HaveLen(1))
- initContainer := deploy.Spec.Template.Spec.InitContainers[0]
- Expect(initContainer.Name).To(Equal("init-config"))
- Expect(initContainer.Image).To(Equal("busybox:latest"))
- Expect(initContainer.Command).To(HaveLen(3))
- Expect(initContainer.Command[0]).To(Equal("/bin/sh"))
- Expect(initContainer.Command[1]).To(Equal("-c"))
-
- // Verify the init command contains config.yaml content
- initCommand := initContainer.Command[2]
- Expect(initCommand).To(ContainSubstring("cat > /config/config.yaml"))
-
- // Verify main container configuration
- Expect(deploy.Spec.Template.Spec.Containers).To(HaveLen(1))
- mainContainer := deploy.Spec.Template.Spec.Containers[0]
- Expect(mainContainer.Name).To(Equal("function"))
- Expect(mainContainer.Image).To(Equal("busybox:latest"))
-
- // Verify volume mounts
- Expect(mainContainer.VolumeMounts).To(HaveLen(1))
- Expect(mainContainer.VolumeMounts[0].Name).To(Equal("function-config"))
- Expect(mainContainer.VolumeMounts[0].MountPath).To(Equal("/config"))
-
- // Verify environment variable
- Expect(mainContainer.Env).To(HaveLen(1))
- Expect(mainContainer.Env[0].Name).To(Equal("FS_CONFIG_PATH"))
- Expect(mainContainer.Env[0].Value).To(Equal("/config/config.yaml"))
-
- // Verify volumes
- Expect(deploy.Spec.Template.Spec.Volumes).To(HaveLen(1))
- Expect(deploy.Spec.Template.Spec.Volumes[0].Name).To(Equal("function-config"))
- Expect(deploy.Spec.Template.Spec.Volumes[0].EmptyDir).NotTo(BeNil())
-
- // Verify labels
- Expect(deploy.Labels).To(HaveKey("function"))
- Expect(deploy.Labels["function"]).To(Equal(typeNamespacedName.Name))
-
- // Simulate Deployment status update
- patchDeploy := client.MergeFrom(deploy.DeepCopy())
- deploy.Status.AvailableReplicas = 1
- deploy.Status.ReadyReplicas = 1
- deploy.Status.Replicas = 1
- deploy.Status.UpdatedReplicas = 1
- deploy.Status.ObservedGeneration = 2
- Expect(k8sClient.Status().Patch(ctx, deploy, patchDeploy)).To(Succeed())
-
- _, err = controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: typeNamespacedName,
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Check Function Status
- fn := &fsv1alpha1.Function{}
- Expect(k8sClient.Get(ctx, typeNamespacedName, fn)).To(Succeed())
- Expect(fn.Status.AvailableReplicas).To(Equal(int32(1)))
- Expect(fn.Status.ReadyReplicas).To(Equal(int32(1)))
- Expect(fn.Status.Replicas).To(Equal(int32(1)))
- Expect(fn.Status.UpdatedReplicas).To(Equal(int32(1)))
- Expect(fn.Status.ObservedGeneration).To(Equal(int64(2)))
-
- // Test deployment update when function spec changes
- // Update function spec to trigger deployment update
- patchFn := client.MergeFrom(fn.DeepCopy())
- fn.Spec.Description = "Updated description"
- Expect(k8sClient.Patch(ctx, fn, patchFn)).To(Succeed())
-
- _, err = controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: typeNamespacedName,
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Verify deployment was updated
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: deployName, Namespace: typeNamespacedName.Namespace}, deploy)).To(Succeed())
- // The deployment should still exist and be updated
- Expect(deploy).NotTo(BeNil())
- })
-
- It("should only reconcile when Deployment has 'function' label", func() {
- By("setting up a Function and its labeled Deployment")
- controllerReconciler := &FunctionReconciler{
- Client: k8sClient,
- Scheme: k8sClient.Scheme(),
- Config: Config{
- PulsarServiceURL: "pulsar://test-broker:6650",
- PulsarAuthPlugin: "org.apache.pulsar.client.impl.auth.AuthenticationToken",
- PulsarAuthParams: "token:my-token",
- },
- }
-
- pkg := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-pkg-label",
- Namespace: "default",
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "Test Package",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{
- Cloud: &fsv1alpha1.CloudType{Image: "busybox:latest"},
- },
- Modules: map[string]fsv1alpha1.Module{},
- },
- }
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
-
- fn := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-label",
- Namespace: "default",
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg-label"},
- Module: "mod",
- SubscriptionName: "sub",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in"}},
- },
- }
- Expect(k8sClient.Create(ctx, fn)).To(Succeed())
-
- // Initial reconcile to create Deployment
- _, err := controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn.Name, Namespace: fn.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- deployName := "function-" + fn.Name
- deploy := &appsv1.Deployment{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: deployName, Namespace: fn.Namespace}, deploy)).To(Succeed())
-
- // Create a Deployment without 'function' label
- unlabeledDeploy := &appsv1.Deployment{
- ObjectMeta: metav1.ObjectMeta{
- Name: "unlabeled-deploy",
- Namespace: fn.Namespace,
- Labels: map[string]string{"app": "test"},
- },
- Spec: appsv1.DeploymentSpec{
- Replicas: &[]int32{1}[0],
- Selector: &metav1.LabelSelector{
- MatchLabels: map[string]string{"app": "test"},
- },
- Template: corev1.PodTemplateSpec{
- ObjectMeta: metav1.ObjectMeta{
- Labels: map[string]string{"app": "test"},
- },
- Spec: corev1.PodSpec{
- Containers: []corev1.Container{{
- Name: "test",
- Image: "busybox:latest",
- }},
- },
- },
- },
- }
- Expect(k8sClient.Create(ctx, unlabeledDeploy)).To(Succeed())
-
- // Manually call Reconcile to simulate the event, but the hash should not change
- _, err = controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn.Name, Namespace: fn.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Get Deployment again, the hash should remain unchanged
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: deployName, Namespace: fn.Namespace}, deploy)).To(Succeed())
- })
-
- It("should automatically add package label to Function", func() {
- By("creating a Function without package label")
- controllerReconciler := &FunctionReconciler{
- Client: k8sClient,
- Scheme: k8sClient.Scheme(),
- Config: Config{
- PulsarServiceURL: "pulsar://test-broker:6650",
- PulsarAuthPlugin: "org.apache.pulsar.client.impl.auth.AuthenticationToken",
- PulsarAuthParams: "token:my-token",
- },
- }
-
- // Create Package first
- pkg := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-pkg-label-auto",
- Namespace: "default",
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "Test Package",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{
- Cloud: &fsv1alpha1.CloudType{Image: "busybox:latest"},
- },
- Modules: map[string]fsv1alpha1.Module{},
- },
- }
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
-
- // Create Function without package label
- fn := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-label-auto",
- Namespace: "default",
- Labels: map[string]string{"app": "test"}, // No package label initially
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg-label-auto"},
- Module: "mod",
- SubscriptionName: "sub",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in"}},
- },
- }
- Expect(k8sClient.Create(ctx, fn)).To(Succeed())
-
- // Reconcile the Function
- _, err := controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn.Name, Namespace: fn.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Verify other labels are preserved
- updatedFn := &fsv1alpha1.Function{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: fn.Name, Namespace: fn.Namespace}, updatedFn)).To(Succeed())
- Expect(updatedFn.Labels).To(HaveKey("app"))
- Expect(updatedFn.Labels["app"]).To(Equal("test"))
- })
-
- It("should update package label when Function package changes", func() {
- By("creating Functions with different packages")
- controllerReconciler := &FunctionReconciler{
- Client: k8sClient,
- Scheme: k8sClient.Scheme(),
- Config: Config{
- PulsarServiceURL: "pulsar://test-broker:6650",
- PulsarAuthPlugin: "org.apache.pulsar.client.impl.auth.AuthenticationToken",
- PulsarAuthParams: "token:my-token",
- },
- }
-
- // Create two Packages
- pkg1 := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-pkg-1",
- Namespace: "default",
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "Test Package 1",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{
- Cloud: &fsv1alpha1.CloudType{Image: "busybox:latest"},
- },
- Modules: map[string]fsv1alpha1.Module{},
- },
- }
- Expect(k8sClient.Create(ctx, pkg1)).To(Succeed())
-
- pkg2 := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-pkg-2",
- Namespace: "default",
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "Test Package 2",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{
- Cloud: &fsv1alpha1.CloudType{Image: "nginx:latest"},
- },
- Modules: map[string]fsv1alpha1.Module{},
- },
- }
- Expect(k8sClient.Create(ctx, pkg2)).To(Succeed())
-
- // Create Function with initial package
- fn := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-package-change",
- Namespace: "default",
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg-1"},
- Module: "mod",
- SubscriptionName: "sub",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in"}},
- },
- }
- Expect(k8sClient.Create(ctx, fn)).To(Succeed())
-
- // Initial reconcile
- _, err := controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn.Name, Namespace: fn.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Change the package
- patch := client.MergeFrom(fn.DeepCopy())
- fn.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "test-pkg-2"}
- Expect(k8sClient.Patch(ctx, fn, patch)).To(Succeed())
-
- // Reconcile again
- _, err = controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn.Name, Namespace: fn.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Verify deployment was updated with new image
- deployName := "function-" + fn.Name
- deploy := &appsv1.Deployment{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: deployName, Namespace: fn.Namespace}, deploy)).To(Succeed())
- Expect(deploy.Spec.Template.Spec.Containers[0].Image).To(Equal("nginx:latest"))
- })
-
- It("should map Package changes to related Functions", func() {
- By("creating multiple Functions that reference the same Package")
- controllerReconciler := &FunctionReconciler{
- Client: k8sClient,
- Scheme: k8sClient.Scheme(),
- Config: Config{
- PulsarServiceURL: "pulsar://test-broker:6650",
- PulsarAuthPlugin: "org.apache.pulsar.client.impl.auth.AuthenticationToken",
- PulsarAuthParams: "token:my-token",
- },
- }
-
- // Create Package
- pkg := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-pkg-mapping",
- Namespace: "default",
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "Test Package",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{
- Cloud: &fsv1alpha1.CloudType{Image: "busybox:latest"},
- },
- Modules: map[string]fsv1alpha1.Module{},
- },
- }
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
-
- // Create multiple Functions that reference the same Package
- fn1 := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-mapping-1",
- Namespace: "default",
- Labels: map[string]string{"package": "default.test-pkg-mapping"},
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg-mapping"},
- Module: "mod1",
- SubscriptionName: "sub1",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out1"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in1"}},
- },
- }
- Expect(k8sClient.Create(ctx, fn1)).To(Succeed())
-
- fn2 := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-mapping-2",
- Namespace: "default",
- Labels: map[string]string{"package": "default.test-pkg-mapping"},
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg-mapping"},
- Module: "mod2",
- SubscriptionName: "sub2",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out2"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in2"}},
- },
- }
- Expect(k8sClient.Create(ctx, fn2)).To(Succeed())
-
- // Create a Function that references a different Package
- fn3 := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-mapping-3",
- Namespace: "default",
- Labels: map[string]string{"package": "default.different-pkg"},
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "different-pkg"},
- Module: "mod3",
- SubscriptionName: "sub3",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out3"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in3"}},
- },
- }
- Expect(k8sClient.Create(ctx, fn3)).To(Succeed())
-
- // Initial reconcile
- _, err := controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn1.Name, Namespace: fn1.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- _, err = controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn2.Name, Namespace: fn2.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Test the mapPackageToFunctions function
- requests := controllerReconciler.mapPackageToFunctions(ctx, pkg)
- Expect(requests).To(HaveLen(2))
-
- // Verify the requests contain the correct Functions
- requestNames := make(map[string]bool)
- for _, req := range requests {
- requestNames[req.NamespacedName.Name] = true
- }
- Expect(requestNames).To(HaveKey("test-fn-mapping-1"))
- Expect(requestNames).To(HaveKey("test-fn-mapping-2"))
- Expect(requestNames).NotTo(HaveKey("test-fn-mapping-3")) // Should not be included
-
- // Test that updating the Package triggers reconciliation of related Functions
- // Update the Package image
- patch := client.MergeFrom(pkg.DeepCopy())
- pkg.Spec.FunctionType.Cloud.Image = "nginx:latest"
- Expect(k8sClient.Patch(ctx, pkg, patch)).To(Succeed())
-
- // Simulate the Package update by calling mapPackageToFunctions
- requests = controllerReconciler.mapPackageToFunctions(ctx, pkg)
- Expect(requests).To(HaveLen(2))
-
- // Manually reconcile the Functions to simulate the triggered reconciliation
- for _, req := range requests {
- _, err := controllerReconciler.Reconcile(ctx, req)
- Expect(err).NotTo(HaveOccurred())
- }
-
- // Verify that the Deployments were updated with the new image
- deploy1 := &appsv1.Deployment{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: "function-" + fn1.Name, Namespace: fn1.Namespace}, deploy1)).To(Succeed())
- Expect(deploy1.Spec.Template.Spec.Containers[0].Image).To(Equal("nginx:latest"))
-
- deploy2 := &appsv1.Deployment{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: "function-" + fn2.Name, Namespace: fn2.Namespace}, deploy2)).To(Succeed())
- Expect(deploy2.Spec.Template.Spec.Containers[0].Image).To(Equal("nginx:latest"))
- })
-
- It("should use the specified replicas from FunctionSpec", func() {
- By("creating a Function with custom replicas")
- controllerReconciler := &FunctionReconciler{
- Client: k8sClient,
- Scheme: k8sClient.Scheme(),
- Config: Config{
- PulsarServiceURL: "pulsar://test-broker:6650",
- PulsarAuthPlugin: "org.apache.pulsar.client.impl.auth.AuthenticationToken",
- PulsarAuthParams: "token:my-token",
- },
- }
-
- // Create a Package resource first
- pkg := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-pkg-replicas",
- Namespace: "default",
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "Test Package Replicas",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{
- Cloud: &fsv1alpha1.CloudType{Image: "busybox:latest"},
- },
- Modules: map[string]fsv1alpha1.Module{},
- },
- }
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
-
- // Create a Function with custom replicas
- customReplicas := int32(3)
- fn := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-replicas",
- Namespace: "default",
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg-replicas"},
- Module: "mod",
- Replicas: &customReplicas,
- SubscriptionName: "sub",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in"}},
- },
- }
- Expect(k8sClient.Create(ctx, fn)).To(Succeed())
-
- // Reconcile the Function
- _, err := controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn.Name, Namespace: fn.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Check that the Deployment has the correct number of replicas
- deployName := "function-" + fn.Name
- deploy := &appsv1.Deployment{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: deployName, Namespace: fn.Namespace}, deploy)).To(Succeed())
- Expect(deploy.Spec.Replicas).NotTo(BeNil())
- Expect(*deploy.Spec.Replicas).To(Equal(int32(3)))
-
- // Test updating replicas
- newReplicas := int32(5)
- patch := client.MergeFrom(fn.DeepCopy())
- fn.Spec.Replicas = &newReplicas
- Expect(k8sClient.Patch(ctx, fn, patch)).To(Succeed())
-
- // Reconcile again
- _, err = controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn.Name, Namespace: fn.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Verify the deployment was updated with new replicas
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: deployName, Namespace: fn.Namespace}, deploy)).To(Succeed())
- Expect(*deploy.Spec.Replicas).To(Equal(int32(5)))
-
- // Test default replicas when not specified
- fnDefault := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-default-replicas",
- Namespace: "default",
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg-replicas"},
- Module: "mod",
- SubscriptionName: "sub-default",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out-default"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in-default"}},
- },
- }
- Expect(k8sClient.Create(ctx, fnDefault)).To(Succeed())
-
- // Reconcile the Function with default replicas
- _, err = controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fnDefault.Name, Namespace: fnDefault.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Check that the Deployment has default replicas (1)
- deployDefaultName := "function-" + fnDefault.Name
- deployDefault := &appsv1.Deployment{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: deployDefaultName, Namespace: fnDefault.Namespace}, deployDefault)).To(Succeed())
- Expect(deployDefault.Spec.Replicas).NotTo(BeNil())
- Expect(*deployDefault.Spec.Replicas).To(Equal(int32(1)))
- })
-
- It("should handle Package updates in different namespaces", func() {
- By("creating Functions and Packages in different namespaces")
- controllerReconciler := &FunctionReconciler{
- Client: k8sClient,
- Scheme: k8sClient.Scheme(),
- Config: Config{
- PulsarServiceURL: "pulsar://test-broker:6650",
- PulsarAuthPlugin: "org.apache.pulsar.client.impl.auth.AuthenticationToken",
- PulsarAuthParams: "token:my-token",
- },
- }
-
- // Create namespaces
- ns1 := &corev1.Namespace{
- ObjectMeta: metav1.ObjectMeta{
- Name: "namespace1",
- },
- }
- Expect(k8sClient.Create(ctx, ns1)).To(Succeed())
-
- ns2 := &corev1.Namespace{
- ObjectMeta: metav1.ObjectMeta{
- Name: "namespace2",
- },
- }
- Expect(k8sClient.Create(ctx, ns2)).To(Succeed())
-
- // Create Package in namespace1
- pkg1 := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-pkg-ns1",
- Namespace: "namespace1",
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "Test Package NS1",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{
- Cloud: &fsv1alpha1.CloudType{Image: "busybox:latest"},
- },
- Modules: map[string]fsv1alpha1.Module{},
- },
- }
- Expect(k8sClient.Create(ctx, pkg1)).To(Succeed())
-
- // Create Package in namespace2
- pkg2 := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-pkg-ns2",
- Namespace: "namespace2",
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "Test Package NS2",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{
- Cloud: &fsv1alpha1.CloudType{Image: "nginx:latest"},
- },
- Modules: map[string]fsv1alpha1.Module{},
- },
- }
- Expect(k8sClient.Create(ctx, pkg2)).To(Succeed())
-
- // Create Function in namespace1
- fn1 := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-ns1",
- Namespace: "namespace1",
- Labels: map[string]string{"package": "namespace1.test-pkg-ns1"},
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg-ns1"},
- Module: "mod1",
- SubscriptionName: "sub1",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out1"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in1"}},
- },
- }
- Expect(k8sClient.Create(ctx, fn1)).To(Succeed())
-
- // Create Function in namespace2
- fn2 := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "test-fn-ns2",
- Namespace: "namespace2",
- Labels: map[string]string{"package": "namespace2.test-pkg-ns2"},
- },
- Spec: fsv1alpha1.FunctionSpec{
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg-ns2"},
- Module: "mod2",
- SubscriptionName: "sub2",
- Sink: &fsv1alpha1.SinkSpec{Pulsar: &fsv1alpha1.PulsarSinkSpec{Topic: "out2"}},
- RequestSource: &fsv1alpha1.SourceSpec{Pulsar: &fsv1alpha1.PulsarSourceSpec{Topic: "in2"}},
- },
- }
- Expect(k8sClient.Create(ctx, fn2)).To(Succeed())
-
- // Initial reconcile
- _, err := controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn1.Name, Namespace: fn1.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- _, err = controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: types.NamespacedName{Name: fn2.Name, Namespace: fn2.Namespace},
- })
- Expect(err).NotTo(HaveOccurred())
-
- // Test that Package updates only affect Functions in the same namespace
- requests1 := controllerReconciler.mapPackageToFunctions(ctx, pkg1)
- Expect(requests1).To(HaveLen(1))
- Expect(requests1[0].NamespacedName.Name).To(Equal("test-fn-ns1"))
- Expect(requests1[0].NamespacedName.Namespace).To(Equal("namespace1"))
-
- requests2 := controllerReconciler.mapPackageToFunctions(ctx, pkg2)
- Expect(requests2).To(HaveLen(1))
- Expect(requests2[0].NamespacedName.Name).To(Equal("test-fn-ns2"))
- Expect(requests2[0].NamespacedName.Namespace).To(Equal("namespace2"))
- })
- })
-})
diff --git a/operator/internal/controller/packages_controller.go b/operator/internal/controller/packages_controller.go
deleted file mode 100644
index fa114c46..00000000
--- a/operator/internal/controller/packages_controller.go
+++ /dev/null
@@ -1,63 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package controller
-
-import (
- "context"
-
- "k8s.io/apimachinery/pkg/runtime"
- ctrl "sigs.k8s.io/controller-runtime"
- "sigs.k8s.io/controller-runtime/pkg/client"
- logf "sigs.k8s.io/controller-runtime/pkg/log"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
-)
-
-// PackagesReconciler reconciles a Package object
-type PackagesReconciler struct {
- client.Client
- Scheme *runtime.Scheme
-}
-
-// +kubebuilder:rbac:groups=fs.functionstream.github.io,resources=package,verbs=get;list;watch;create;update;patch;delete
-// +kubebuilder:rbac:groups=fs.functionstream.github.io,resources=package/status,verbs=get;update;patch
-// +kubebuilder:rbac:groups=fs.functionstream.github.io,resources=package/finalizers,verbs=update
-
-// Reconcile is part of the main kubernetes reconciliation loop which aims to
-// move the current state of the cluster closer to the desired state.
-// TODO(user): Modify the Reconcile function to compare the state specified by
-// the Package object against the actual cluster state, and then
-// perform operations to make the cluster state reflect the state specified by
-// the user.
-//
-// For more details, check Reconcile and its Result here:
-// - https://pkg.go.dev/sigs.k8s.io/controller-runtime@v0.20.4/pkg/reconcile
-func (r *PackagesReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
- _ = logf.FromContext(ctx)
-
- // TODO(user): your logic here
-
- return ctrl.Result{}, nil
-}
-
-// SetupWithManager sets up the controller with the Manager.
-func (r *PackagesReconciler) SetupWithManager(mgr ctrl.Manager) error {
- return ctrl.NewControllerManagedBy(mgr).
- For(&fsv1alpha1.Package{}).
- Named("packages").
- Complete(r)
-}
diff --git a/operator/internal/controller/packages_controller_test.go b/operator/internal/controller/packages_controller_test.go
deleted file mode 100644
index a9890e92..00000000
--- a/operator/internal/controller/packages_controller_test.go
+++ /dev/null
@@ -1,89 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package controller
-
-import (
- "context"
-
- . "github.com/onsi/ginkgo/v2"
- . "github.com/onsi/gomega"
- "k8s.io/apimachinery/pkg/api/errors"
- "k8s.io/apimachinery/pkg/types"
- "sigs.k8s.io/controller-runtime/pkg/reconcile"
-
- metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
-)
-
-var _ = Describe("Package Controller", func() {
- Context("When reconciling a resource", func() {
- const resourceName = "test-resource"
-
- ctx := context.Background()
-
- typeNamespacedName := types.NamespacedName{
- Name: resourceName,
- Namespace: "default", // TODO(user):Modify as needed
- }
- packages := &fsv1alpha1.Package{}
-
- BeforeEach(func() {
- By("creating the custom resource for the Kind Package")
- err := k8sClient.Get(ctx, typeNamespacedName, packages)
- if err != nil && errors.IsNotFound(err) {
- resource := &fsv1alpha1.Package{
- ObjectMeta: metav1.ObjectMeta{
- Name: typeNamespacedName.Name,
- Namespace: typeNamespacedName.Namespace,
- },
- Spec: fsv1alpha1.PackageSpec{
- DisplayName: "test",
- Description: "desc",
- FunctionType: fsv1alpha1.FunctionType{},
- Modules: map[string]fsv1alpha1.Module{"mod": {DisplayName: "mod", Description: "desc"}},
- },
- }
- Expect(k8sClient.Create(ctx, resource)).To(Succeed())
- }
- })
-
- AfterEach(func() {
- // TODO(user): Cleanup logic after each test, like removing the resource instance.
- resource := &fsv1alpha1.Package{}
- err := k8sClient.Get(ctx, typeNamespacedName, resource)
- Expect(err).NotTo(HaveOccurred())
-
- By("Cleanup the specific resource instance Package")
- Expect(k8sClient.Delete(ctx, resource)).To(Succeed())
- })
- It("should successfully reconcile the resource", func() {
- By("Reconciling the created resource")
- controllerReconciler := &PackagesReconciler{
- Client: k8sClient,
- Scheme: k8sClient.Scheme(),
- }
-
- _, err := controllerReconciler.Reconcile(ctx, reconcile.Request{
- NamespacedName: typeNamespacedName,
- })
- Expect(err).NotTo(HaveOccurred())
- // TODO(user): Add more specific assertions depending on your controller's reconciliation logic.
- // Example: If you expect a certain status condition after reconciliation, verify it here.
- })
- })
-})
diff --git a/operator/internal/controller/suite_test.go b/operator/internal/controller/suite_test.go
deleted file mode 100644
index 21306439..00000000
--- a/operator/internal/controller/suite_test.go
+++ /dev/null
@@ -1,116 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package controller
-
-import (
- "context"
- "os"
- "path/filepath"
- "testing"
-
- . "github.com/onsi/ginkgo/v2"
- . "github.com/onsi/gomega"
-
- "k8s.io/client-go/kubernetes/scheme"
- "k8s.io/client-go/rest"
- "sigs.k8s.io/controller-runtime/pkg/client"
- "sigs.k8s.io/controller-runtime/pkg/envtest"
- logf "sigs.k8s.io/controller-runtime/pkg/log"
- "sigs.k8s.io/controller-runtime/pkg/log/zap"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
- // +kubebuilder:scaffold:imports
-)
-
-// These tests use Ginkgo (BDD-style Go testing framework). Refer to
-// http://onsi.github.io/ginkgo/ to learn more about Ginkgo.
-
-var (
- ctx context.Context
- cancel context.CancelFunc
- testEnv *envtest.Environment
- cfg *rest.Config
- k8sClient client.Client
-)
-
-func TestControllers(t *testing.T) {
- RegisterFailHandler(Fail)
-
- RunSpecs(t, "Controller Suite")
-}
-
-var _ = BeforeSuite(func() {
- logf.SetLogger(zap.New(zap.WriteTo(GinkgoWriter), zap.UseDevMode(true)))
-
- ctx, cancel = context.WithCancel(context.TODO())
-
- var err error
- err = fsv1alpha1.AddToScheme(scheme.Scheme)
- Expect(err).NotTo(HaveOccurred())
-
- // +kubebuilder:scaffold:scheme
-
- By("bootstrapping test environment")
- testEnv = &envtest.Environment{
- CRDDirectoryPaths: []string{filepath.Join("..", "..", "config", "crd", "bases")},
- ErrorIfCRDPathMissing: true,
- }
-
- // Retrieve the first found binary directory to allow running tests from IDEs
- if getFirstFoundEnvTestBinaryDir() != "" {
- testEnv.BinaryAssetsDirectory = getFirstFoundEnvTestBinaryDir()
- }
-
- // cfg is defined in this file globally.
- cfg, err = testEnv.Start()
- Expect(err).NotTo(HaveOccurred())
- Expect(cfg).NotTo(BeNil())
-
- k8sClient, err = client.New(cfg, client.Options{Scheme: scheme.Scheme})
- Expect(err).NotTo(HaveOccurred())
- Expect(k8sClient).NotTo(BeNil())
-})
-
-var _ = AfterSuite(func() {
- By("tearing down the test environment")
- cancel()
- err := testEnv.Stop()
- Expect(err).NotTo(HaveOccurred())
-})
-
-// getFirstFoundEnvTestBinaryDir locates the first binary in the specified path.
-// ENVTEST-based tests depend on specific binaries, usually located in paths set by
-// controller-runtime. When running tests directly (e.g., via an IDE) without using
-// Makefile targets, the 'BinaryAssetsDirectory' must be explicitly configured.
-//
-// This function streamlines the process by finding the required binaries, similar to
-// setting the 'KUBEBUILDER_ASSETS' environment variable. To ensure the binaries are
-// properly set up, run 'make setup-envtest' beforehand.
-func getFirstFoundEnvTestBinaryDir() string {
- basePath := filepath.Join("..", "..", "bin", "k8s")
- entries, err := os.ReadDir(basePath)
- if err != nil {
- logf.Log.Error(err, "Failed to read directory", "path", basePath)
- return ""
- }
- for _, entry := range entries {
- if entry.IsDir() {
- return filepath.Join(basePath, entry.Name())
- }
- }
- return ""
-}
diff --git a/operator/internal/webhook/v1alpha1/function_webhook.go b/operator/internal/webhook/v1alpha1/function_webhook.go
deleted file mode 100644
index f624336b..00000000
--- a/operator/internal/webhook/v1alpha1/function_webhook.go
+++ /dev/null
@@ -1,162 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1alpha1
-
-import (
- "context"
- "fmt"
-
- "k8s.io/apimachinery/pkg/runtime"
- ctrl "sigs.k8s.io/controller-runtime"
- "sigs.k8s.io/controller-runtime/pkg/client"
- logf "sigs.k8s.io/controller-runtime/pkg/log"
- "sigs.k8s.io/controller-runtime/pkg/webhook"
- "sigs.k8s.io/controller-runtime/pkg/webhook/admission"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
-)
-
-// nolint:unused
-// log is for logging in this package.
-var functionlog = logf.Log.WithName("function-resource")
-
-// SetupFunctionWebhookWithManager registers the webhook for Function in the manager.
-func SetupFunctionWebhookWithManager(mgr ctrl.Manager) error {
- return ctrl.NewWebhookManagedBy(mgr).For(&fsv1alpha1.Function{}).
- WithValidator(&FunctionCustomValidator{Client: mgr.GetClient()}).
- WithDefaulter(&FunctionCustomDefaulter{}).
- Complete()
-}
-
-// TODO(user): EDIT THIS FILE! THIS IS SCAFFOLDING FOR YOU TO OWN!
-
-// +kubebuilder:webhook:path=/mutate-fs-functionstream-github-io-v1alpha1-function,mutating=true,failurePolicy=fail,sideEffects=None,groups=fs.functionstream.github.io,resources=functions,verbs=create;update,versions=v1alpha1,name=mfunction-v1alpha1.kb.io,admissionReviewVersions=v1
-// +kubebuilder:rbac:groups=fs.functionstream.github.io,resources=packages,verbs=get;list;watch
-// +kubebuilder:rbac:groups=fs.functionstream.github.io,resources=functions,verbs=get;list;watch
-
-// FunctionCustomDefaulter struct is responsible for setting default values on the custom resource of the
-// Kind Function when those are created or updated.
-//
-// NOTE: The +kubebuilder:object:generate=false marker prevents controller-gen from generating DeepCopy methods,
-// as it is used only for temporary operations and does not need to be deeply copied.
-type FunctionCustomDefaulter struct {
- // TODO(user): Add more fields as needed for defaulting
-}
-
-var _ webhook.CustomDefaulter = &FunctionCustomDefaulter{}
-
-// Default implements webhook.CustomDefaulter so a webhook will be registered for the Kind Function.
-func (d *FunctionCustomDefaulter) Default(ctx context.Context, obj runtime.Object) error {
- function, ok := obj.(*fsv1alpha1.Function)
-
- if !ok {
- return fmt.Errorf("expected an Function object but got %T", obj)
- }
- functionlog.Info("Defaulting for Function", "name", function.GetName())
-
- // Ensure the 'package' label is always set to the current Spec.PackageRef value
- if function.Labels == nil {
- function.Labels = make(map[string]string)
- }
- packageNamespace := function.Spec.PackageRef.Namespace
- if packageNamespace == "" {
- packageNamespace = function.Namespace
- }
- packageLabel := fmt.Sprintf("%s.%s", packageNamespace, function.Spec.PackageRef.Name)
- function.Labels["package"] = packageLabel
-
- return nil
-}
-
-// TODO(user): change verbs to "verbs=create;update;delete" if you want to enable deletion validation.
-// NOTE: The 'path' attribute must follow a specific pattern and should not be modified directly here.
-// Modifying the path for an invalid path can cause API server errors; failing to locate the webhook.
-// +kubebuilder:webhook:path=/validate-fs-functionstream-github-io-v1alpha1-function,mutating=false,failurePolicy=fail,sideEffects=None,groups=fs.functionstream.github.io,resources=functions,verbs=create;update;delete,versions=v1alpha1,name=vfunction-v1alpha1.kb.io,admissionReviewVersions=v1
-
-// FunctionCustomValidator struct is responsible for validating the Function resource
-// when it is created, updated, or deleted.
-//
-// NOTE: The +kubebuilder:object:generate=false marker prevents controller-gen from generating DeepCopy methods,
-// as this struct is used only for temporary operations and does not need to be deeply copied.
-type FunctionCustomValidator struct {
- Client client.Client
- // TODO(user): Add more fields as needed for validation
-}
-
-var _ webhook.CustomValidator = &FunctionCustomValidator{}
-
-// validateReferences checks that all referenced resources in the Function exist.
-func (v *FunctionCustomValidator) validateReferences(ctx context.Context, function *fsv1alpha1.Function) error {
- // Check if the referenced package exists
- var pkg fsv1alpha1.Package
- packageNamespace := function.Spec.PackageRef.Namespace
- if packageNamespace == "" {
- packageNamespace = function.Namespace
- }
- err := v.Client.Get(ctx, client.ObjectKey{
- Namespace: packageNamespace,
- Name: function.Spec.PackageRef.Name,
- }, &pkg)
- if err != nil {
- return fmt.Errorf("referenced package '%s' not found in namespace '%s': %w", function.Spec.PackageRef.Name, packageNamespace, err)
- }
- // Add more reference checks here in the future as needed
- return nil
-}
-
-// ValidateCreate implements webhook.CustomValidator so a webhook will be registered for the type Function.
-func (v *FunctionCustomValidator) ValidateCreate(ctx context.Context, obj runtime.Object) (admission.Warnings, error) {
- function, ok := obj.(*fsv1alpha1.Function)
- if !ok {
- return nil, fmt.Errorf("expected a Function object but got %T", obj)
- }
- functionlog.Info("Validation for Function upon creation", "name", function.GetName())
-
- if err := v.validateReferences(ctx, function); err != nil {
- return nil, err
- }
-
- return nil, nil
-}
-
-// ValidateUpdate implements webhook.CustomValidator so a webhook will be registered for the type Function.
-func (v *FunctionCustomValidator) ValidateUpdate(ctx context.Context, oldObj, newObj runtime.Object) (admission.Warnings, error) {
- function, ok := newObj.(*fsv1alpha1.Function)
- if !ok {
- return nil, fmt.Errorf("expected a Function object for the newObj but got %T", newObj)
- }
- functionlog.Info("Validation for Function upon update", "name", function.GetName())
-
- if err := v.validateReferences(ctx, function); err != nil {
- return nil, err
- }
-
- return nil, nil
-}
-
-// ValidateDelete implements webhook.CustomValidator so a webhook will be registered for the type Function.
-func (v *FunctionCustomValidator) ValidateDelete(ctx context.Context, obj runtime.Object) (admission.Warnings, error) {
- function, ok := obj.(*fsv1alpha1.Function)
- if !ok {
- return nil, fmt.Errorf("expected a Function object but got %T", obj)
- }
- functionlog.Info("Validation for Function upon deletion", "name", function.GetName())
-
- // TODO(user): fill in your validation logic upon object deletion.
-
- return nil, nil
-}
diff --git a/operator/internal/webhook/v1alpha1/function_webhook_test.go b/operator/internal/webhook/v1alpha1/function_webhook_test.go
deleted file mode 100644
index 5406092a..00000000
--- a/operator/internal/webhook/v1alpha1/function_webhook_test.go
+++ /dev/null
@@ -1,540 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1alpha1
-
-import (
- "context"
-
- . "github.com/onsi/ginkgo/v2"
- . "github.com/onsi/gomega"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
- corev1 "k8s.io/api/core/v1"
- metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
- "k8s.io/apimachinery/pkg/types"
- // TODO (user): Add any additional imports if needed
-)
-
-const (
- defaultNamespace = "default"
- existingPkgName = "existing-pkg"
- testDisplayName = "test"
- testDescription = "desc"
-)
-
-var _ = Describe("Function Webhook", func() {
- var (
- obj *fsv1alpha1.Function
- oldObj *fsv1alpha1.Function
- validator FunctionCustomValidator
- defaulter FunctionCustomDefaulter
- ctx context.Context
- )
-
- BeforeEach(func() {
- ctx = context.Background()
- obj = &fsv1alpha1.Function{
- ObjectMeta: fsv1alpha1.Function{}.ObjectMeta,
- Spec: fsv1alpha1.FunctionSpec{
- DisplayName: "test-function",
- Description: "desc",
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg"},
- Module: "test-module",
- },
- }
- oldObj = &fsv1alpha1.Function{
- ObjectMeta: fsv1alpha1.Function{}.ObjectMeta,
- Spec: fsv1alpha1.FunctionSpec{
- DisplayName: "old-function",
- Description: "desc",
- PackageRef: fsv1alpha1.PackageRef{Name: "test-pkg"},
- Module: "test-module",
- },
- }
- validator = FunctionCustomValidator{Client: k8sClient}
- Expect(validator).NotTo(BeNil(), "Expected validator to be initialized")
- defaulter = FunctionCustomDefaulter{}
- Expect(defaulter).NotTo(BeNil(), "Expected defaulter to be initialized")
- Expect(oldObj).NotTo(BeNil(), "Expected oldObj to be initialized")
- Expect(obj).NotTo(BeNil(), "Expected obj to be initialized")
- // TODO (user): Add any setup logic common to all tests
- })
-
- AfterEach(func() {
- // Clean up the test package if it exists
- _ = k8sClient.Delete(ctx, &fsv1alpha1.Package{
- ObjectMeta: fsv1alpha1.Package{}.ObjectMeta,
- // Namespace and Name will be set in the test
- })
- // TODO (user): Add any teardown logic common to all tests
- })
-
- Context("Reference validation", func() {
- It("should deny creation if the referenced package does not exist", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef.Name = "nonexistent-pkg"
- _, err := validator.ValidateCreate(ctx, obj)
- Expect(err).To(HaveOccurred())
- Expect(err.Error()).To(ContainSubstring("referenced package"))
- })
-
- It("should allow creation if the referenced package exists", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef.Name = existingPkgName
- // Create the referenced package with required fields
- pkg := &fsv1alpha1.Package{}
- pkg.Name = existingPkgName
- pkg.Namespace = defaultNamespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
- _, err := validator.ValidateCreate(ctx, obj)
- Expect(err).ToNot(HaveOccurred())
- })
-
- It("should deny update if the referenced package does not exist", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef.Name = "nonexistent-pkg"
- _, err := validator.ValidateUpdate(ctx, oldObj, obj)
- Expect(err).To(HaveOccurred())
- Expect(err.Error()).To(ContainSubstring("referenced package"))
- })
-
- It("should allow update if the referenced package exists", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef.Name = existingPkgName
- // Create the referenced package with required fields
- pkg := &fsv1alpha1.Package{}
- pkg.Name = existingPkgName
- pkg.Namespace = defaultNamespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
- _, err := validator.ValidateUpdate(ctx, oldObj, obj)
- Expect(err).ToNot(HaveOccurred())
- })
- })
-
- Context("Defaulter logic for package label", func() {
- It("should set the 'package' label to the value of spec.package on creation", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef.Name = "pkg-on-create"
-
- // Create the referenced package
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "pkg-on-create"
- pkg.Namespace = defaultNamespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // Call the defaulter
- obj.Labels = nil // simulate no labels set
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "default.pkg-on-create"))
- })
-
- It("should update the 'package' label to the new spec.package value on update", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef.Name = "pkg-on-update"
-
- // Create the referenced package
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "pkg-on-update"
- pkg.Namespace = defaultNamespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // Simulate an existing label with an old value
- obj.Labels = map[string]string{"package": "old-pkg"}
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "default.pkg-on-update"))
- })
- })
-
- Context("Cross-namespace package references", func() {
- It("should allow creation if the referenced package exists in a different namespace", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "cross-pkg-1", Namespace: "other-ns-1"}
-
- // Create the namespace first
- ns := &corev1.Namespace{
- ObjectMeta: metav1.ObjectMeta{
- Name: "other-ns-1",
- },
- }
- Expect(k8sClient.Create(ctx, ns)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, ns) })
-
- // Create the referenced package in a different namespace
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "cross-pkg-1"
- pkg.Namespace = "other-ns-1"
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- _, err := validator.ValidateCreate(ctx, obj)
- Expect(err).ToNot(HaveOccurred())
- })
-
- It("should deny creation if the referenced package does not exist in the specified namespace", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "cross-pkg-2", Namespace: "wrong-ns-2"}
-
- // Create the namespace first
- ns := &corev1.Namespace{
- ObjectMeta: metav1.ObjectMeta{
- Name: "wrong-ns-2",
- },
- }
- Expect(k8sClient.Create(ctx, ns)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, ns) })
-
- // Create another namespace for the package
- ns2 := &corev1.Namespace{
- ObjectMeta: metav1.ObjectMeta{
- Name: "other-ns-3",
- },
- }
- Expect(k8sClient.Create(ctx, ns2)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, ns2) })
-
- // Create a package with the same name in a different namespace
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "cross-pkg-2"
- pkg.Namespace = "other-ns-3" // different namespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- _, err := validator.ValidateCreate(ctx, obj)
- Expect(err).To(HaveOccurred())
- Expect(err.Error()).To(ContainSubstring("referenced package"))
- })
-
- It("should set the 'package' label correctly for cross-namespace references", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "cross-pkg-3", Namespace: "other-ns-4"}
-
- // Create the namespace first
- ns := &corev1.Namespace{
- ObjectMeta: metav1.ObjectMeta{
- Name: "other-ns-4",
- },
- }
- Expect(k8sClient.Create(ctx, ns)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, ns) })
-
- // Create the referenced package
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "cross-pkg-3"
- pkg.Namespace = "other-ns-4"
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // Call the defaulter
- obj.Labels = nil // simulate no labels set
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "other-ns-4.cross-pkg-3"))
- })
-
- It("should set the 'package' label correctly for same-namespace references", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "same-pkg"} // no namespace specified
-
- // Create the referenced package
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "same-pkg"
- pkg.Namespace = "default"
- pkg.Spec.DisplayName = "test"
- pkg.Spec.Description = "desc"
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // Call the defaulter
- obj.Labels = nil // simulate no labels set
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "default.same-pkg"))
- })
- })
-
- Context("Automatic package label generation", func() {
- It("should automatically generate package label when function is created without labels", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "auto-gen-pkg"}
-
- // Create the referenced package
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "auto-gen-pkg"
- pkg.Namespace = defaultNamespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // Function starts with no labels
- obj.Labels = nil
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "default.auto-gen-pkg"))
- })
-
- It("should override user-specified package label with auto-generated one", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "override-pkg"}
-
- // Create the referenced package
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "override-pkg"
- pkg.Namespace = defaultNamespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // User tries to set their own package label (should be overridden)
- obj.Labels = map[string]string{
- "package": "user-specified-package",
- "app": "my-app", // This should be preserved
- }
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "default.override-pkg"))
- Expect(obj.Labels).To(HaveKeyWithValue("app", "my-app"))
- })
-
- It("should automatically generate package label for cross-namespace references", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "cross-pkg", Namespace: "other-ns"}
-
- // Create namespace
- ns := &corev1.Namespace{
- ObjectMeta: metav1.ObjectMeta{
- Name: "other-ns",
- },
- }
- Expect(k8sClient.Create(ctx, ns)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, ns) })
-
- // Create the referenced package in different namespace
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "cross-pkg"
- pkg.Namespace = "other-ns"
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // Function starts with no labels
- obj.Labels = nil
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "other-ns.cross-pkg"))
- })
-
- It("should update auto-generated package label when package reference changes", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "old-pkg"}
-
- // Create old package
- oldPkg := &fsv1alpha1.Package{}
- oldPkg.Name = "old-pkg"
- oldPkg.Namespace = defaultNamespace
- oldPkg.Spec.DisplayName = testDisplayName
- oldPkg.Spec.Description = testDescription
- oldPkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- oldPkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, oldPkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, oldPkg) })
-
- // Create new package
- newPkg := &fsv1alpha1.Package{}
- newPkg.Name = "new-pkg"
- newPkg.Namespace = defaultNamespace
- newPkg.Spec.DisplayName = testDisplayName
- newPkg.Spec.Description = testDescription
- newPkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- newPkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, newPkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, newPkg) })
-
- // Initial auto-generated label
- obj.Labels = nil
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "default.old-pkg"))
-
- // Change package reference
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "new-pkg"}
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "default.new-pkg"))
- })
-
- It("should preserve other labels when auto-generating package label", func() {
- obj.Namespace = defaultNamespace
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "preserve-pkg"}
-
- // Create the referenced package
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "preserve-pkg"
- pkg.Namespace = defaultNamespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // Function has existing labels
- obj.Labels = map[string]string{
- "app": "my-app",
- "version": "v1.0.0",
- "environment": "production",
- }
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
- Expect(obj.Labels).To(HaveKeyWithValue("package", "default.preserve-pkg"))
- Expect(obj.Labels).To(HaveKeyWithValue("app", "my-app"))
- Expect(obj.Labels).To(HaveKeyWithValue("version", "v1.0.0"))
- Expect(obj.Labels).To(HaveKeyWithValue("environment", "production"))
- })
- })
-
- Context("Integration tests for automatic package label generation", func() {
- It("should create function with auto-generated package label through webhook", func() {
- obj.Namespace = defaultNamespace
- obj.Name = "auto-gen-test-fn"
- obj.Spec.PackageRef = fsv1alpha1.PackageRef{Name: "auto-gen-integration-pkg"}
-
- // Create the referenced package
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "auto-gen-integration-pkg"
- pkg.Namespace = defaultNamespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // Apply defaulter to simulate webhook behavior
- Expect(defaulter.Default(ctx, obj)).To(Succeed())
-
- // Verify package label is auto-generated correctly
- Expect(obj.Labels).To(HaveKeyWithValue("package", "default.auto-gen-integration-pkg"))
-
- // Simulate creating the function in the cluster
- Expect(k8sClient.Create(ctx, obj)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, obj) })
-
- // Verify the function was created with the auto-generated label
- createdFn := &fsv1alpha1.Function{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: obj.Name, Namespace: obj.Namespace}, createdFn)).To(Succeed())
- Expect(createdFn.Labels).To(HaveKeyWithValue("package", "default.auto-gen-integration-pkg"))
- })
-
- It("should handle multiple functions with auto-generated package labels", func() {
- // Create the package
- pkg := &fsv1alpha1.Package{}
- pkg.Name = "multi-fn-pkg"
- pkg.Namespace = defaultNamespace
- pkg.Spec.DisplayName = testDisplayName
- pkg.Spec.Description = testDescription
- pkg.Spec.FunctionType = fsv1alpha1.FunctionType{}
- pkg.Spec.Modules = map[string]fsv1alpha1.Module{"test-module": {DisplayName: "mod", Description: "desc"}}
- Expect(k8sClient.Create(ctx, pkg)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, pkg) })
-
- // Create first function (no labels initially)
- fn1 := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "multi-fn1",
- Namespace: defaultNamespace,
- },
- Spec: fsv1alpha1.FunctionSpec{
- DisplayName: "Function 1",
- Description: "desc",
- PackageRef: fsv1alpha1.PackageRef{Name: "multi-fn-pkg"},
- Module: "test-module",
- },
- }
- Expect(defaulter.Default(ctx, fn1)).To(Succeed())
- Expect(k8sClient.Create(ctx, fn1)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, fn1) })
-
- // Create second function (with some existing labels)
- fn2 := &fsv1alpha1.Function{
- ObjectMeta: metav1.ObjectMeta{
- Name: "multi-fn2",
- Namespace: defaultNamespace,
- Labels: map[string]string{
- "app": "my-app",
- "version": "v1.0.0",
- },
- },
- Spec: fsv1alpha1.FunctionSpec{
- DisplayName: "Function 2",
- Description: "desc",
- PackageRef: fsv1alpha1.PackageRef{Name: "multi-fn-pkg"},
- Module: "test-module",
- },
- }
- Expect(defaulter.Default(ctx, fn2)).To(Succeed())
- Expect(k8sClient.Create(ctx, fn2)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, fn2) })
-
- // Verify both functions have the correct auto-generated package label
- createdFn1 := &fsv1alpha1.Function{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: fn1.Name, Namespace: fn1.Namespace}, createdFn1)).To(Succeed())
- Expect(createdFn1.Labels).To(HaveKeyWithValue("package", "default.multi-fn-pkg"))
-
- createdFn2 := &fsv1alpha1.Function{}
- Expect(k8sClient.Get(ctx, types.NamespacedName{Name: fn2.Name, Namespace: fn2.Namespace}, createdFn2)).To(Succeed())
- Expect(createdFn2.Labels).To(HaveKeyWithValue("package", "default.multi-fn-pkg"))
- Expect(createdFn2.Labels).To(HaveKeyWithValue("app", "my-app"))
- Expect(createdFn2.Labels).To(HaveKeyWithValue("version", "v1.0.0"))
- })
- })
-
-})
diff --git a/operator/internal/webhook/v1alpha1/packages_webhook.go b/operator/internal/webhook/v1alpha1/packages_webhook.go
deleted file mode 100644
index dccf70ec..00000000
--- a/operator/internal/webhook/v1alpha1/packages_webhook.go
+++ /dev/null
@@ -1,140 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1alpha1
-
-import (
- "context"
- "fmt"
-
- "k8s.io/apimachinery/pkg/runtime"
- ctrl "sigs.k8s.io/controller-runtime"
- "sigs.k8s.io/controller-runtime/pkg/client"
- logf "sigs.k8s.io/controller-runtime/pkg/log"
- "sigs.k8s.io/controller-runtime/pkg/webhook"
- "sigs.k8s.io/controller-runtime/pkg/webhook/admission"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
-)
-
-// nolint:unused
-// log is for logging in this package.
-var packageslog = logf.Log.WithName("package-resource")
-
-// SetupPackagesWebhookWithManager registers the webhook for Packages in the manager.
-func SetupPackagesWebhookWithManager(mgr ctrl.Manager) error {
- return ctrl.NewWebhookManagedBy(mgr).For(&fsv1alpha1.Package{}).
- WithValidator(&PackagesCustomValidator{Client: mgr.GetClient()}).
- WithDefaulter(&PackagesCustomDefaulter{}).
- Complete()
-}
-
-// TODO(user): EDIT THIS FILE! THIS IS SCAFFOLDING FOR YOU TO OWN!
-
-// +kubebuilder:webhook:path=/mutate-fs-functionstream-github-io-v1alpha1-package,mutating=true,failurePolicy=fail,sideEffects=None,groups=fs.functionstream.github.io,resources=packages,verbs=create;update,versions=v1alpha1,name=mpackage-v1alpha1.kb.io,admissionReviewVersions=v1
-
-// PackagesCustomDefaulter struct is responsible for setting default values on the custom resource of the
-// Kind Packages when those are created or updated.
-//
-// NOTE: The +kubebuilder:object:generate=false marker prevents controller-gen from generating DeepCopy methods,
-// as it is used only for temporary operations and does not need to be deeply copied.
-type PackagesCustomDefaulter struct {
- // TODO(user): Add more fields as needed for defaulting
-}
-
-var _ webhook.CustomDefaulter = &PackagesCustomDefaulter{}
-
-// Default implements webhook.CustomDefaulter so a webhook will be registered for the Kind Packages.
-func (d *PackagesCustomDefaulter) Default(ctx context.Context, obj runtime.Object) error {
- packages, ok := obj.(*fsv1alpha1.Package)
-
- if !ok {
- return fmt.Errorf("expected an Packages object but got %T", obj)
- }
- packageslog.Info("Defaulting for Packages", "name", packages.GetName())
-
- // TODO(user): fill in your defaulting logic.
-
- return nil
-}
-
-// TODO(user): change verbs to "verbs=create;update;delete" if you want to enable deletion validation.
-// NOTE: The 'path' attribute must follow a specific pattern and should not be modified directly here.
-// Modifying the path for an invalid path can cause API server errors; failing to locate the webhook.
-// +kubebuilder:webhook:path=/validate-fs-functionstream-github-io-v1alpha1-package,mutating=false,failurePolicy=fail,sideEffects=None,groups=fs.functionstream.github.io,resources=packages,verbs=create;update;delete,versions=v1alpha1,name=vpackage-v1alpha1.kb.io,admissionReviewVersions=v1
-
-// PackagesCustomValidator struct is responsible for validating the Packages resource
-// when it is created, updated, or deleted.
-//
-// NOTE: The +kubebuilder:object:generate=false marker prevents controller-gen from generating DeepCopy methods,
-// as this struct is used only for temporary operations and does not need to be deeply copied.
-type PackagesCustomValidator struct {
- Client client.Client
- // TODO(user): Add more fields as needed for validation
-}
-
-var _ webhook.CustomValidator = &PackagesCustomValidator{}
-
-// ValidateCreate implements webhook.CustomValidator so a webhook will be registered for the type Packages.
-func (v *PackagesCustomValidator) ValidateCreate(ctx context.Context, obj runtime.Object) (admission.Warnings, error) {
- packages, ok := obj.(*fsv1alpha1.Package)
- if !ok {
- return nil, fmt.Errorf("expected a Packages object but got %T", obj)
- }
- packageslog.Info("Validation for Packages upon creation", "name", packages.GetName())
-
- // TODO(user): fill in your validation logic upon object creation.
-
- return nil, nil
-}
-
-func (v *PackagesCustomValidator) referencingFunctions(ctx context.Context, namespace, packageName string) ([]string, error) {
- var functionList fsv1alpha1.FunctionList
- err := v.Client.List(ctx, &functionList, client.InNamespace(namespace))
- if err != nil {
- return nil, fmt.Errorf("failed to list Functions in namespace '%s': %w", namespace, err)
- }
- var referencing []string
- packageLabel := fmt.Sprintf("%s.%s", namespace, packageName)
- for _, fn := range functionList.Items {
- if fn.Labels["package"] == packageLabel {
- referencing = append(referencing, fn.Name)
- }
- }
- return referencing, nil
-}
-
-// ValidateUpdate implements webhook.CustomValidator so a webhook will be registered for the type Packages.
-func (v *PackagesCustomValidator) ValidateUpdate(ctx context.Context, oldObj, newObj runtime.Object) (admission.Warnings, error) {
- return nil, nil
-}
-
-// ValidateDelete implements webhook.CustomValidator so a webhook will be registered for the type Packages.
-func (v *PackagesCustomValidator) ValidateDelete(ctx context.Context, obj runtime.Object) (admission.Warnings, error) {
- packages, ok := obj.(*fsv1alpha1.Package)
- if !ok {
- return nil, fmt.Errorf("expected a Packages object but got %T", obj)
- }
- packageslog.Info("Validation for Packages upon deletion", "name", packages.GetName())
-
- if referencing, err := v.referencingFunctions(ctx, packages.Namespace, packages.Name); err != nil {
- return nil, err
- } else if len(referencing) > 0 {
- return nil, fmt.Errorf("cannot delete Package '%s' because it is referenced by the following Functions in the same namespace: %v", packages.Name, referencing)
- }
-
- return nil, nil
-}
diff --git a/operator/internal/webhook/v1alpha1/packages_webhook_test.go b/operator/internal/webhook/v1alpha1/packages_webhook_test.go
deleted file mode 100644
index 21614ef7..00000000
--- a/operator/internal/webhook/v1alpha1/packages_webhook_test.go
+++ /dev/null
@@ -1,139 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1alpha1
-
-import (
- . "github.com/onsi/ginkgo/v2"
- . "github.com/onsi/gomega"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
- // TODO (user): Add any additional imports if needed
- "context"
- "fmt"
-)
-
-var _ = Describe("Packages Webhook", func() {
- var (
- obj *fsv1alpha1.Package
- oldObj *fsv1alpha1.Package
- validator PackagesCustomValidator
- defaulter PackagesCustomDefaulter
- ctx context.Context
- )
-
- BeforeEach(func() {
- ctx = context.Background()
- obj = &fsv1alpha1.Package{}
- oldObj = &fsv1alpha1.Package{}
- obj.Name = "test-pkg"
- obj.Namespace = "default"
- obj.Spec.DisplayName = "test-pkg"
- obj.Spec.Description = "desc"
- obj.Spec.FunctionType = fsv1alpha1.FunctionType{}
- obj.Spec.Modules = map[string]fsv1alpha1.Module{"mod": {DisplayName: "mod", Description: "desc"}}
- oldObj.Name = obj.Name
- oldObj.Namespace = obj.Namespace
- oldObj.Spec = obj.Spec
- validator = PackagesCustomValidator{Client: k8sClient}
- Expect(validator).NotTo(BeNil(), "Expected validator to be initialized")
- defaulter = PackagesCustomDefaulter{}
- Expect(defaulter).NotTo(BeNil(), "Expected defaulter to be initialized")
- Expect(oldObj).NotTo(BeNil(), "Expected oldObj to be initialized")
- Expect(obj).NotTo(BeNil(), "Expected obj to be initialized")
- // Clean up before each test
- _ = k8sClient.Delete(ctx, obj)
- })
-
- AfterEach(func() {
- _ = k8sClient.Delete(ctx, obj)
- // TODO (user): Add any teardown logic common to all tests
- })
-
- Context("When creating Packages under Defaulting Webhook", func() {
- // TODO (user): Add logic for defaulting webhooks
- // Example:
- // It("Should apply defaults when a required field is empty", func() {
- // By("simulating a scenario where defaults should be applied")
- // obj.SomeFieldWithDefault = ""
- // By("calling the Default method to apply defaults")
- // defaulter.Default(ctx, obj)
- // By("checking that the default values are set")
- // Expect(obj.SomeFieldWithDefault).To(Equal("default_value"))
- // })
- })
-
- Context("When creating or updating Packages under Validating Webhook", func() {
- // TODO (user): Add logic for validating webhooks
- // Example:
- // It("Should deny creation if a required field is missing", func() {
- // By("simulating an invalid creation scenario")
- // obj.SomeRequiredField = ""
- // Expect(validator.ValidateCreate(ctx, obj)).Error().To(HaveOccurred())
- // })
- //
- // It("Should admit creation if all required fields are present", func() {
- // By("simulating an invalid creation scenario")
- // obj.SomeRequiredField = "valid_value"
- // Expect(validator.ValidateCreate(ctx, obj)).To(BeNil())
- // })
- //
- // It("Should validate updates correctly", func() {
- // By("simulating a valid update scenario")
- // oldObj.SomeRequiredField = "updated_value"
- // obj.SomeRequiredField = "updated_value"
- // Expect(validator.ValidateUpdate(ctx, oldObj, obj)).To(BeNil())
- // })
- })
-
- Context("Validating Webhook for update/delete with referencing Functions", func() {
-
- It("should deny delete if multiple Functions reference the Package", func() {
- Expect(k8sClient.Create(ctx, obj)).To(Succeed())
- // Create two referencing Functions
- fn1 := &fsv1alpha1.Function{
- ObjectMeta: fsv1alpha1.Function{}.ObjectMeta,
- Spec: fsv1alpha1.FunctionSpec{
- DisplayName: "fn1",
- Description: "desc",
- PackageRef: fsv1alpha1.PackageRef{Name: obj.Name},
- Module: "mod",
- },
- }
- fn1.Name = "fn1"
- fn1.Namespace = obj.Namespace
- fn1.Labels = map[string]string{"package": fmt.Sprintf("%s.%s", obj.Namespace, obj.Name)}
- fn2 := fn1.DeepCopy()
- fn2.Name = "fn2"
- Expect(k8sClient.Create(ctx, fn1)).To(Succeed())
- Expect(k8sClient.Create(ctx, fn2)).To(Succeed())
- DeferCleanup(func() { _ = k8sClient.Delete(ctx, fn1); _ = k8sClient.Delete(ctx, fn2) })
- _, err := validator.ValidateDelete(ctx, obj)
- Expect(err).To(HaveOccurred())
- Expect(err.Error()).To(ContainSubstring("referenced by the following Functions"))
- Expect(err.Error()).To(ContainSubstring("fn1"))
- Expect(err.Error()).To(ContainSubstring("fn2"))
- })
-
- It("should allow update and delete if no Function references the Package", func() {
- Expect(k8sClient.Create(ctx, obj)).To(Succeed())
- _, err := validator.ValidateUpdate(ctx, oldObj, obj)
- Expect(err).ToNot(HaveOccurred())
- _, err = validator.ValidateDelete(ctx, obj)
- Expect(err).ToNot(HaveOccurred())
- })
- })
-})
diff --git a/operator/internal/webhook/v1alpha1/webhook_suite_test.go b/operator/internal/webhook/v1alpha1/webhook_suite_test.go
deleted file mode 100644
index 3eae9fb2..00000000
--- a/operator/internal/webhook/v1alpha1/webhook_suite_test.go
+++ /dev/null
@@ -1,167 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package v1alpha1
-
-import (
- "context"
- "crypto/tls"
- "fmt"
- "net"
- "os"
- "path/filepath"
- "testing"
- "time"
-
- . "github.com/onsi/ginkgo/v2"
- . "github.com/onsi/gomega"
-
- "k8s.io/client-go/kubernetes/scheme"
- "k8s.io/client-go/rest"
- ctrl "sigs.k8s.io/controller-runtime"
- "sigs.k8s.io/controller-runtime/pkg/client"
- "sigs.k8s.io/controller-runtime/pkg/envtest"
- logf "sigs.k8s.io/controller-runtime/pkg/log"
- "sigs.k8s.io/controller-runtime/pkg/log/zap"
- metricsserver "sigs.k8s.io/controller-runtime/pkg/metrics/server"
- "sigs.k8s.io/controller-runtime/pkg/webhook"
-
- fsv1alpha1 "github.com/FunctionStream/function-stream/operator/api/v1alpha1"
- // +kubebuilder:scaffold:imports
-)
-
-// These tests use Ginkgo (BDD-style Go testing framework). Refer to
-// http://onsi.github.io/ginkgo/ to learn more about Ginkgo.
-
-var (
- ctx context.Context
- cancel context.CancelFunc
- k8sClient client.Client
- cfg *rest.Config
- testEnv *envtest.Environment
-)
-
-func TestAPIs(t *testing.T) {
- RegisterFailHandler(Fail)
-
- RunSpecs(t, "Webhook Suite")
-}
-
-var _ = BeforeSuite(func() {
- logf.SetLogger(zap.New(zap.WriteTo(GinkgoWriter), zap.UseDevMode(true)))
-
- ctx, cancel = context.WithCancel(context.TODO())
-
- var err error
- err = fsv1alpha1.AddToScheme(scheme.Scheme)
- Expect(err).NotTo(HaveOccurred())
-
- // +kubebuilder:scaffold:scheme
-
- By("bootstrapping test environment")
- testEnv = &envtest.Environment{
- CRDDirectoryPaths: []string{filepath.Join("..", "..", "..", "config", "crd", "bases")},
- ErrorIfCRDPathMissing: false,
-
- WebhookInstallOptions: envtest.WebhookInstallOptions{
- Paths: []string{filepath.Join("..", "..", "..", "config", "webhook")},
- },
- }
-
- // Retrieve the first found binary directory to allow running tests from IDEs
- if getFirstFoundEnvTestBinaryDir() != "" {
- testEnv.BinaryAssetsDirectory = getFirstFoundEnvTestBinaryDir()
- }
-
- // cfg is defined in this file globally.
- cfg, err = testEnv.Start()
- Expect(err).NotTo(HaveOccurred())
- Expect(cfg).NotTo(BeNil())
-
- k8sClient, err = client.New(cfg, client.Options{Scheme: scheme.Scheme})
- Expect(err).NotTo(HaveOccurred())
- Expect(k8sClient).NotTo(BeNil())
-
- // start webhook server using Manager.
- webhookInstallOptions := &testEnv.WebhookInstallOptions
- mgr, err := ctrl.NewManager(cfg, ctrl.Options{
- Scheme: scheme.Scheme,
- WebhookServer: webhook.NewServer(webhook.Options{
- Host: webhookInstallOptions.LocalServingHost,
- Port: webhookInstallOptions.LocalServingPort,
- CertDir: webhookInstallOptions.LocalServingCertDir,
- }),
- LeaderElection: false,
- Metrics: metricsserver.Options{BindAddress: "0"},
- })
- Expect(err).NotTo(HaveOccurred())
-
- err = SetupFunctionWebhookWithManager(mgr)
- Expect(err).NotTo(HaveOccurred())
-
- err = SetupPackagesWebhookWithManager(mgr)
- Expect(err).NotTo(HaveOccurred())
-
- // +kubebuilder:scaffold:webhook
-
- go func() {
- defer GinkgoRecover()
- err = mgr.Start(ctx)
- Expect(err).NotTo(HaveOccurred())
- }()
-
- // wait for the webhook server to get ready.
- dialer := &net.Dialer{Timeout: time.Second}
- addrPort := fmt.Sprintf("%s:%d", webhookInstallOptions.LocalServingHost, webhookInstallOptions.LocalServingPort)
- Eventually(func() error {
- conn, err := tls.DialWithDialer(dialer, "tcp", addrPort, &tls.Config{InsecureSkipVerify: true})
- if err != nil {
- return err
- }
-
- return conn.Close()
- }).Should(Succeed())
-})
-
-var _ = AfterSuite(func() {
- By("tearing down the test environment")
- cancel()
- err := testEnv.Stop()
- Expect(err).NotTo(HaveOccurred())
-})
-
-// getFirstFoundEnvTestBinaryDir locates the first binary in the specified path.
-// ENVTEST-based tests depend on specific binaries, usually located in paths set by
-// controller-runtime. When running tests directly (e.g., via an IDE) without using
-// Makefile targets, the 'BinaryAssetsDirectory' must be explicitly configured.
-//
-// This function streamlines the process by finding the required binaries, similar to
-// setting the 'KUBEBUILDER_ASSETS' environment variable. To ensure the binaries are
-// properly set up, run 'make setup-envtest' beforehand.
-func getFirstFoundEnvTestBinaryDir() string {
- basePath := filepath.Join("..", "..", "..", "bin", "k8s")
- entries, err := os.ReadDir(basePath)
- if err != nil {
- logf.Log.Error(err, "Failed to read directory", "path", basePath)
- return ""
- }
- for _, entry := range entries {
- if entry.IsDir() {
- return filepath.Join(basePath, entry.Name())
- }
- }
- return ""
-}
diff --git a/operator/scripts/deploy.yaml b/operator/scripts/deploy.yaml
deleted file mode 100644
index 94508835..00000000
--- a/operator/scripts/deploy.yaml
+++ /dev/null
@@ -1,1137 +0,0 @@
----
-# Source: operator/templates/namespace/namespace.yaml
-apiVersion: v1
-kind: Namespace
-metadata:
- name: function-stream
----
-# Source: operator/templates/rbac/service_account.yaml
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: functionstream-operator
- namespace: function-stream
----
-# Source: operator/templates/crd/fs.functionstream.github.io_functions.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- annotations:
- "helm.sh/resource-policy": keep
- controller-gen.kubebuilder.io/version: v0.17.2
- name: functions.fs.functionstream.github.io
-spec:
- group: fs.functionstream.github.io
- names:
- kind: Function
- listKind: FunctionList
- plural: functions
- singular: function
- scope: Namespaced
- versions:
- - name: v1alpha1
- schema:
- openAPIV3Schema:
- description: Function is the Schema for the functions API.
- properties:
- apiVersion:
- description: |-
- APIVersion defines the versioned schema of this representation of an object.
- Servers should convert recognized schemas to the latest internal value, and
- may reject unrecognized values.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
- type: string
- kind:
- description: |-
- Kind is a string value representing the REST resource this object represents.
- Servers may infer this from the endpoint the client submits requests to.
- Cannot be updated.
- In CamelCase.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
- type: string
- metadata:
- type: object
- spec:
- description: FunctionSpec defines the desired state of Function
- properties:
- config:
- additionalProperties:
- x-kubernetes-preserve-unknown-fields: true
- description: Configurations as key-value pairs
- type: object
- description:
- description: Description of the function
- type: string
- displayName:
- description: Display name of the function
- type: string
- module:
- description: Module name
- type: string
- package:
- description: Package name
- type: string
- replicas:
- default: 1
- description: Number of replicas for the function deployment
- format: int32
- type: integer
- requestSource:
- description: Request source
- properties:
- pulsar:
- description: Pulsar source specification
- properties:
- topic:
- description: Topic name
- type: string
- required:
- - topic
- type: object
- type: object
- sink:
- description: Sink specifies the sink configuration
- properties:
- pulsar:
- description: Pulsar sink specification
- properties:
- topic:
- description: Topic name
- type: string
- required:
- - topic
- type: object
- type: object
- sources:
- description: List of sources
- items:
- description: SourceSpec defines a source or sink specification
- properties:
- pulsar:
- description: Pulsar source specification
- properties:
- topic:
- description: Topic name
- type: string
- required:
- - topic
- type: object
- type: object
- type: array
- subscriptionName:
- type: string
- required:
- - module
- - package
- type: object
- status:
- description: FunctionStatus defines the observed state of Function
- properties:
- availableReplicas:
- description: Number of available pods (ready for at least minReadySeconds)
- format: int32
- type: integer
- observedGeneration:
- description: Most recent generation observed for this Function
- format: int64
- type: integer
- readyReplicas:
- description: Total number of ready pods
- format: int32
- type: integer
- replicas:
- description: Total number of non-terminated pods targeted by this
- deployment
- format: int32
- type: integer
- updatedReplicas:
- description: Total number of updated pods
- format: int32
- type: integer
- type: object
- type: object
- served: true
- storage: true
- subresources:
- status: {}
----
-# Source: operator/templates/crd/fs.functionstream.github.io_packages.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- annotations:
- "helm.sh/resource-policy": keep
- controller-gen.kubebuilder.io/version: v0.17.2
- name: packages.fs.functionstream.github.io
-spec:
- group: fs.functionstream.github.io
- names:
- kind: Package
- listKind: PackageList
- plural: packages
- shortNames:
- - pkg
- singular: package
- scope: Namespaced
- versions:
- - name: v1alpha1
- schema:
- openAPIV3Schema:
- description: Package is the Schema for the packages API.
- properties:
- apiVersion:
- description: |-
- APIVersion defines the versioned schema of this representation of an object.
- Servers should convert recognized schemas to the latest internal value, and
- may reject unrecognized values.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
- type: string
- kind:
- description: |-
- Kind is a string value representing the REST resource this object represents.
- Servers may infer this from the endpoint the client submits requests to.
- Cannot be updated.
- In CamelCase.
- More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
- type: string
- metadata:
- type: object
- spec:
- description: PackageSpec defines the desired state of Package
- properties:
- description:
- description: Description provides additional information about the
- package
- type: string
- displayName:
- description: DisplayName is the human-readable name of the package
- type: string
- functionType:
- description: FunctionType contains function type configuration
- properties:
- cloud:
- description: Cloud contains cloud function package configuration
- properties:
- image:
- description: Image specifies the container image for cloud
- deployment
- type: string
- required:
- - image
- type: object
- type: object
- logo:
- description: Logo is the URL or base64 encoded image for the package
- logo
- type: string
- modules:
- additionalProperties:
- description: Module defines a module within a package
- properties:
- config:
- additionalProperties:
- description: ConfigItem defines a configuration item for a
- module
- properties:
- description:
- description: Description provides additional information
- about the config item
- type: string
- displayName:
- description: DisplayName is the human-readable name of
- the config item
- type: string
- required:
- description: Required indicates whether this config item
- is mandatory
- type: boolean
- type:
- description: Type specifies the data type of the config
- item
- type: string
- type: object
- description: Config is a list of configuration items for the
- module
- type: object
- description:
- description: Description provides additional information about
- the module
- type: string
- displayName:
- description: DisplayName is the human-readable name of the module
- type: string
- sinkSchema:
- description: SinkSchema defines the output schema for the module
- type: string
- sourceSchema:
- description: SourceSchema defines the input schema for the module
- type: string
- type: object
- description: Modules is a map of module names to their configurations
- type: object
- required:
- - functionType
- - modules
- type: object
- status:
- description: PackageStatus defines the observed state of Package.
- type: object
- type: object
- served: true
- storage: true
- subresources:
- status: {}
----
-# Source: operator/templates/rbac/function_admin_role.yaml
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants full permissions ('*') over fs.functionstream.github.io.
-# This role is intended for users authorized to modify roles and bindings within the cluster,
-# enabling them to delegate specific permissions to other users or groups as needed.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: function-admin-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- verbs:
- - '*'
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- verbs:
- - get
----
-# Source: operator/templates/rbac/function_editor_role.yaml
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants permissions to create, update, and delete resources within the fs.functionstream.github.io.
-# This role is intended for users who need to manage these resources
-# but should not control RBAC or manage permissions for others.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: function-editor-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- verbs:
- - get
----
-# Source: operator/templates/rbac/function_viewer_role.yaml
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants read-only access to fs.functionstream.github.io resources.
-# This role is intended for users who need visibility into these resources
-# without permissions to modify them. It is ideal for monitoring purposes and limited-access viewing.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: function-viewer-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- verbs:
- - get
- - list
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- verbs:
- - get
----
-# Source: operator/templates/rbac/metrics_auth_role.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: fs-operator-metrics-auth-role
-rules:
-- apiGroups:
- - authentication.k8s.io
- resources:
- - tokenreviews
- verbs:
- - create
-- apiGroups:
- - authorization.k8s.io
- resources:
- - subjectaccessreviews
- verbs:
- - create
----
-# Source: operator/templates/rbac/metrics_reader_role.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: fs-operator-metrics-reader
-rules:
-- nonResourceURLs:
- - "/metrics"
- verbs:
- - get
----
-# Source: operator/templates/rbac/packages_admin_role.yaml
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants full permissions ('*') over fs.functionstream.github.io.
-# This role is intended for users authorized to modify roles and bindings within the cluster,
-# enabling them to delegate specific permissions to other users or groups as needed.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: packages-admin-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - '*'
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages/status
- verbs:
- - get
----
-# Source: operator/templates/rbac/packages_editor_role.yaml
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants permissions to create, update, and delete resources within the fs.functionstream.github.io.
-# This role is intended for users who need to manage these resources
-# but should not control RBAC or manage permissions for others.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: packages-editor-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages/status
- verbs:
- - get
----
-# Source: operator/templates/rbac/packages_viewer_role.yaml
-# This rule is not used by the project operator itself.
-# It is provided to allow the cluster admin to help manage permissions for users.
-#
-# Grants read-only access to fs.functionstream.github.io resources.
-# This role is intended for users who need visibility into these resources
-# without permissions to modify them. It is ideal for monitoring purposes and limited-access viewing.
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: packages-viewer-role
-rules:
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - get
- - list
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages/status
- verbs:
- - get
----
-# Source: operator/templates/rbac/role.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: fs-operator-manager-role
-rules:
-- apiGroups:
- - apps
- resources:
- - deployments
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions
- - package
- verbs:
- - create
- - delete
- - get
- - list
- - patch
- - update
- - watch
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/finalizers
- - package/finalizers
- verbs:
- - update
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - functions/status
- - package/status
- verbs:
- - get
- - patch
- - update
-- apiGroups:
- - fs.functionstream.github.io
- resources:
- - packages
- verbs:
- - get
- - list
- - watch
----
-# Source: operator/templates/rbac/metrics_auth_role_binding.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: functionstream-fs-operator-metrics-auth-rolebinding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: fs-operator-metrics-auth-role
-subjects:
-- kind: ServiceAccount
- name: functionstream-operator
- namespace: function-stream
----
-# Source: operator/templates/rbac/role_binding.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: functionstream-fs-operator-manager-rolebinding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: fs-operator-manager-role
-subjects:
-- kind: ServiceAccount
- name: functionstream-operator
- namespace: function-stream
----
-# Source: operator/templates/rbac/leader_election_role.yaml
-# permissions to do leader election.
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- namespace: function-stream
- name: fs-operator-leader-election-role
-rules:
-- apiGroups:
- - ""
- resources:
- - configmaps
- verbs:
- - get
- - list
- - watch
- - create
- - update
- - patch
- - delete
-- apiGroups:
- - coordination.k8s.io
- resources:
- - leases
- verbs:
- - get
- - list
- - watch
- - create
- - update
- - patch
- - delete
-- apiGroups:
- - ""
- resources:
- - events
- verbs:
- - create
- - patch
----
-# Source: operator/templates/rbac/leader_election_role_binding.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- namespace: function-stream
- name: functionstream-fs-operator-leader-election-rolebinding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: fs-operator-leader-election-role
-subjects:
-- kind: ServiceAccount
- name: functionstream-operator
- namespace: function-stream
----
-# Source: operator/templates/metrics/metrics-service.yaml
-apiVersion: v1
-kind: Service
-metadata:
- name: operator-controller-manager-metrics-service
- namespace: function-stream
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
-spec:
- ports:
- - port: 8443
- targetPort: 8443
- protocol: TCP
- name: https
- selector:
- control-plane: controller-manager
----
-# Source: operator/templates/pulsar/service.yaml
-apiVersion: v1
-kind: Service
-metadata:
- name: functionstream-pulsar-standalone
- namespace: function-stream
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- app: pulsar-standalone
-spec:
- type: ClusterIP
- ports:
- - name: pulsar
- port: 6650
- targetPort: 6650
- protocol: TCP
- - name: admin
- port: 8080
- targetPort: 8080
- protocol: TCP
- selector:
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app: pulsar-standalone
----
-# Source: operator/templates/webhook/service.yaml
-apiVersion: v1
-kind: Service
-metadata:
- name: operator-webhook-service
- namespace: function-stream
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
-spec:
- ports:
- - port: 443
- protocol: TCP
- targetPort: 9443
- selector:
- control-plane: controller-manager
----
-# Source: operator/templates/manager/manager.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: function-stream
- namespace: function-stream
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- control-plane: controller-manager
-spec:
- replicas: 1
- selector:
- matchLabels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- control-plane: controller-manager
- template:
- metadata:
- annotations:
- kubectl.kubernetes.io/default-container: manager
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- control-plane: controller-manager
- spec:
- containers:
- - name: manager
- args:
- - --leader-elect
- - --metrics-bind-address=:8443
- - --health-probe-bind-address=:8081
- command:
- - /manager
- image: functionstream/operator:latest
- imagePullPolicy: IfNotPresent
- env:
- - name: PULSAR_SERVICE_URL
- value: pulsar://functionstream-pulsar-standalone.function-stream.svc.cluster.local:6650
- livenessProbe:
- httpGet:
- path: /healthz
- port: 8081
- initialDelaySeconds: 15
- periodSeconds: 20
- readinessProbe:
- httpGet:
- path: /readyz
- port: 8081
- initialDelaySeconds: 5
- periodSeconds: 10
- ports:
- - containerPort: 9443
- name: webhook-server
- protocol: TCP
- resources:
- limits:
- cpu: 500m
- memory: 128Mi
- requests:
- cpu: 10m
- memory: 64Mi
- securityContext:
- allowPrivilegeEscalation: false
- capabilities:
- drop:
- - ALL
- volumeMounts:
- - name: webhook-cert
- mountPath: /tmp/k8s-webhook-server/serving-certs
- readOnly: true
- - name: metrics-certs
- mountPath: /tmp/k8s-metrics-server/metrics-certs
- readOnly: true
- securityContext:
- runAsNonRoot: true
- seccompProfile:
- type: RuntimeDefault
- serviceAccountName: functionstream-operator
- terminationGracePeriodSeconds: 10
- volumes:
- - name: webhook-cert
- secret:
- secretName: webhook-server-cert
- - name: metrics-certs
- secret:
- secretName: metrics-server-cert
----
-# Source: operator/templates/pulsar/statefulset.yaml
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
- name: functionstream-pulsar-standalone
- namespace: function-stream
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- app: pulsar-standalone
- app.kubernetes.io/component: messaging
-spec:
- serviceName: functionstream-pulsar-standalone
- replicas: 1
- selector:
- matchLabels:
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app: pulsar-standalone
- template:
- metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- app: pulsar-standalone
- app.kubernetes.io/component: messaging
- spec:
- containers:
- - name: pulsar
- image: apachepulsar/pulsar:latest
- command:
- - sh
- - -c
- - |
- # Initialize Pulsar standalone
- bin/pulsar standalone -nfw -nss
- ports:
- - name: pulsar
- containerPort: 6650
- protocol: TCP
- - name: admin
- containerPort: 8080
- protocol: TCP
- resources:
- requests:
- cpu: 500m
- memory: 1Gi
- livenessProbe:
- httpGet:
- path: /admin/v2/brokers/health
- port: 8080
- initialDelaySeconds: 60
- periodSeconds: 30
- timeoutSeconds: 5
- failureThreshold: 3
- readinessProbe:
- httpGet:
- path: /admin/v2/brokers/health
- port: 8080
- initialDelaySeconds: 30
- periodSeconds: 10
- timeoutSeconds: 3
- failureThreshold: 3
----
-# Source: operator/templates/prometheus/monitor.yaml
-# To integrate with Prometheus.
----
-# Source: operator/templates/certmanager/certificate.yaml
-# Certificate for the webhook
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
- annotations:
- "helm.sh/resource-policy": keep
- name: serving-cert
- namespace: function-stream
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
-spec:
- dnsNames:
- - operator.function-stream.svc
- - operator.function-stream.svc.cluster.local
- - operator-webhook-service.function-stream.svc
- issuerRef:
- kind: Issuer
- name: selfsigned-issuer
- secretName: webhook-server-cert
----
-# Source: operator/templates/certmanager/certificate.yaml
-# Certificate for the metrics
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
- annotations:
- "helm.sh/resource-policy": keep
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: metrics-certs
- namespace: function-stream
-spec:
- dnsNames:
- - operator.function-stream.svc
- - operator.function-stream.svc.cluster.local
- - operator-metrics-service.function-stream.svc
- issuerRef:
- kind: Issuer
- name: selfsigned-issuer
- secretName: metrics-server-cert
----
-# Source: operator/templates/certmanager/certificate.yaml
-# Self-signed Issuer
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
- name: selfsigned-issuer
- namespace: function-stream
-spec:
- selfSigned: {}
----
-# Source: operator/templates/webhook/webhooks.yaml
-apiVersion: admissionregistration.k8s.io/v1
-kind: MutatingWebhookConfiguration
-metadata:
- name: operator-mutating-webhook-configuration
- namespace: function-stream
- annotations:
- cert-manager.io/inject-ca-from: "function-stream/serving-cert"
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
-webhooks:
- - name: mfunction-v1alpha1.kb.io
- clientConfig:
- service:
- name: operator-webhook-service
- namespace: function-stream
- path: /mutate-fs-functionstream-github-io-v1alpha1-function
- failurePolicy: Fail
- sideEffects: None
- admissionReviewVersions:
- - v1
- rules:
- - operations:
- - CREATE
- - UPDATE
- apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- resources:
- - functions
- - name: mpackage-v1alpha1.kb.io
- clientConfig:
- service:
- name: operator-webhook-service
- namespace: function-stream
- path: /mutate-fs-functionstream-github-io-v1alpha1-package
- failurePolicy: Fail
- sideEffects: None
- admissionReviewVersions:
- - v1
- rules:
- - operations:
- - CREATE
- - UPDATE
- apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- resources:
- - packages
----
-# Source: operator/templates/webhook/webhooks.yaml
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
- name: operator-validating-webhook-configuration
- namespace: function-stream
- annotations:
- cert-manager.io/inject-ca-from: "function-stream/serving-cert"
- labels:
- app.kubernetes.io/version: "0.1.0"
- helm.sh/chart: "0.1.0"
- app.kubernetes.io/name: operator
- app.kubernetes.io/instance: functionstream
- app.kubernetes.io/managed-by: Helm
-webhooks:
- - name: vfunction-v1alpha1.kb.io
- clientConfig:
- service:
- name: operator-webhook-service
- namespace: function-stream
- path: /validate-fs-functionstream-github-io-v1alpha1-function
- failurePolicy: Fail
- sideEffects: None
- admissionReviewVersions:
- - v1
- rules:
- - operations:
- - CREATE
- - UPDATE
- - DELETE
- apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- resources:
- - functions
- - name: vpackage-v1alpha1.kb.io
- clientConfig:
- service:
- name: operator-webhook-service
- namespace: function-stream
- path: /validate-fs-functionstream-github-io-v1alpha1-package
- failurePolicy: Fail
- sideEffects: None
- admissionReviewVersions:
- - v1
- rules:
- - operations:
- - CREATE
- - UPDATE
- - DELETE
- apiGroups:
- - fs.functionstream.github.io
- apiVersions:
- - v1alpha1
- resources:
- - packages
diff --git a/operator/scripts/install-cert-manager.sh b/operator/scripts/install-cert-manager.sh
deleted file mode 100755
index f61fae5d..00000000
--- a/operator/scripts/install-cert-manager.sh
+++ /dev/null
@@ -1,43 +0,0 @@
-#!/bin/bash
-
-# FunctionStream Operator - cert-manager installation script
-# This script installs cert-manager which is required for the operator to work properly
-
-set -e
-
-echo "FunctionStream Operator - cert-manager installation script"
-echo "=========================================================="
-
-# Check if kubectl is available
-if ! command -v kubectl &> /dev/null; then
- echo "Error: kubectl is not installed or not in PATH"
- exit 1
-fi
-
-# Check if we can connect to the cluster
-if ! kubectl cluster-info &> /dev/null; then
- echo "Error: Cannot connect to Kubernetes cluster"
- exit 1
-fi
-
-echo "Installing cert-manager..."
-
-# Install cert-manager
-kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.13.0/cert-manager.yaml
-
-echo "Waiting for cert-manager to be ready..."
-
-# Wait for cert-manager namespace to be created
-kubectl wait --for=jsonpath='{.status.phase}=Active' namespace/cert-manager --timeout=60s
-
-# Wait for cert-manager pods to be ready
-kubectl wait --for=jsonpath='{.status.phase}=Running' pods -l app.kubernetes.io/instance=cert-manager -n cert-manager --timeout=300s
-
-
-echo "cert-manager installation completed successfully!"
-echo ""
-echo "You can now install the FunctionStream operator:"
-echo " helm install fs ./deploy/chart -n fs --create-namespace"
-echo ""
-echo "Or if you want to install with Pulsar standalone:"
-echo " helm install fs ./deploy/chart --set pulsar.standalone.enable=true -n fs --create-namespace"
\ No newline at end of file
diff --git a/operator/test/e2e/e2e_suite_test.go b/operator/test/e2e/e2e_suite_test.go
deleted file mode 100644
index afc21396..00000000
--- a/operator/test/e2e/e2e_suite_test.go
+++ /dev/null
@@ -1,89 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package e2e
-
-import (
- "fmt"
- "os"
- "os/exec"
- "testing"
-
- . "github.com/onsi/ginkgo/v2"
- . "github.com/onsi/gomega"
-
- "github.com/FunctionStream/function-stream/operator/test/utils"
-)
-
-var (
- // Optional Environment Variables:
- // - CERT_MANAGER_INSTALL_SKIP=true: Skips CertManager installation during test setup.
- // These variables are useful if CertManager is already installed, avoiding
- // re-installation and conflicts.
- skipCertManagerInstall = os.Getenv("CERT_MANAGER_INSTALL_SKIP") == "true"
- // isCertManagerAlreadyInstalled will be set true when CertManager CRDs be found on the cluster
- isCertManagerAlreadyInstalled = false
-
- // projectImage is the name of the image which will be build and loaded
- // with the code source changes to be tested.
- projectImage = "example.com/operator:v0.0.1"
-)
-
-// TestE2E runs the end-to-end (e2e) test suite for the project. These tests execute in an isolated,
-// temporary environment to validate project changes with the purposed to be used in CI jobs.
-// The default setup requires Kind, builds/loads the Manager Docker image locally, and installs
-// CertManager.
-func TestE2E(t *testing.T) {
- RegisterFailHandler(Fail)
- _, _ = fmt.Fprintf(GinkgoWriter, "Starting operator integration test suite\n")
- RunSpecs(t, "e2e suite")
-}
-
-var _ = BeforeSuite(func() {
- By("building the manager(Operator) image")
- cmd := exec.Command("make", "docker-build", fmt.Sprintf("IMG=%s", projectImage))
- _, err := utils.Run(cmd)
- ExpectWithOffset(1, err).NotTo(HaveOccurred(), "Failed to build the manager(Operator) image")
-
- // TODO(user): If you want to change the e2e test vendor from Kind, ensure the image is
- // built and available before running the tests. Also, remove the following block.
- By("loading the manager(Operator) image on Kind")
- err = utils.LoadImageToKindClusterWithName(projectImage)
- ExpectWithOffset(1, err).NotTo(HaveOccurred(), "Failed to load the manager(Operator) image into Kind")
-
- // The tests-e2e are intended to run on a temporary cluster that is created and destroyed for testing.
- // To prevent errors when tests run in environments with CertManager already installed,
- // we check for its presence before execution.
- // Setup CertManager before the suite if not skipped and if not already installed
- if !skipCertManagerInstall {
- By("checking if cert manager is installed already")
- isCertManagerAlreadyInstalled = utils.IsCertManagerCRDsInstalled()
- if !isCertManagerAlreadyInstalled {
- _, _ = fmt.Fprintf(GinkgoWriter, "Installing CertManager...\n")
- Expect(utils.InstallCertManager()).To(Succeed(), "Failed to install CertManager")
- } else {
- _, _ = fmt.Fprintf(GinkgoWriter, "WARNING: CertManager is already installed. Skipping installation...\n")
- }
- }
-})
-
-var _ = AfterSuite(func() {
- // Teardown CertManager after the suite if not skipped and if it was not already installed
- if !skipCertManagerInstall && !isCertManagerAlreadyInstalled {
- _, _ = fmt.Fprintf(GinkgoWriter, "Uninstalling CertManager...\n")
- utils.UninstallCertManager()
- }
-})
diff --git a/operator/test/e2e/e2e_test.go b/operator/test/e2e/e2e_test.go
deleted file mode 100644
index 30b55f7f..00000000
--- a/operator/test/e2e/e2e_test.go
+++ /dev/null
@@ -1,367 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package e2e
-
-import (
- "encoding/json"
- "fmt"
- "os"
- "os/exec"
- "path/filepath"
- "time"
-
- . "github.com/onsi/ginkgo/v2"
- . "github.com/onsi/gomega"
-
- "github.com/FunctionStream/function-stream/operator/test/utils"
-)
-
-// namespace where the project is deployed in
-const namespace = "operator-system"
-
-// serviceAccountName created for the project
-const serviceAccountName = "operator-controller-manager"
-
-// metricsServiceName is the name of the metrics service of the project
-const metricsServiceName = "operator-controller-manager-metrics-service"
-
-// metricsRoleBindingName is the name of the RBAC that will be created to allow get the metrics data
-const metricsRoleBindingName = "operator-metrics-binding"
-
-var _ = Describe("Manager", Ordered, func() {
- var controllerPodName string
-
- // Before running the tests, set up the environment by creating the namespace,
- // enforce the restricted security policy to the namespace, installing CRDs,
- // and deploying the controller.
- BeforeAll(func() {
- By("creating manager namespace")
- cmd := exec.Command("kubectl", "create", "ns", namespace)
- _, err := utils.Run(cmd)
- Expect(err).NotTo(HaveOccurred(), "Failed to create namespace")
-
- By("labeling the namespace to enforce the restricted security policy")
- cmd = exec.Command("kubectl", "label", "--overwrite", "ns", namespace,
- "pod-security.kubernetes.io/enforce=restricted")
- _, err = utils.Run(cmd)
- Expect(err).NotTo(HaveOccurred(), "Failed to label namespace with restricted policy")
-
- By("installing CRDs")
- cmd = exec.Command("make", "install")
- _, err = utils.Run(cmd)
- Expect(err).NotTo(HaveOccurred(), "Failed to install CRDs")
-
- By("deploying the controller-manager")
- cmd = exec.Command("make", "deploy", fmt.Sprintf("IMG=%s", projectImage))
- _, err = utils.Run(cmd)
- Expect(err).NotTo(HaveOccurred(), "Failed to deploy the controller-manager")
- })
-
- // After all tests have been executed, clean up by undeploying the controller, uninstalling CRDs,
- // and deleting the namespace.
- AfterAll(func() {
- By("cleaning up the curl pod for metrics")
- cmd := exec.Command("kubectl", "delete", "pod", "curl-metrics", "-n", namespace)
- _, _ = utils.Run(cmd)
-
- By("undeploying the controller-manager")
- cmd = exec.Command("make", "undeploy")
- _, _ = utils.Run(cmd)
-
- By("uninstalling CRDs")
- cmd = exec.Command("make", "uninstall")
- _, _ = utils.Run(cmd)
-
- By("removing manager namespace")
- cmd = exec.Command("kubectl", "delete", "ns", namespace)
- _, _ = utils.Run(cmd)
- })
-
- // After each test, check for failures and collect logs, events,
- // and pod descriptions for debugging.
- AfterEach(func() {
- specReport := CurrentSpecReport()
- if specReport.Failed() {
- By("Fetching controller manager pod logs")
- cmd := exec.Command("kubectl", "logs", controllerPodName, "-n", namespace)
- controllerLogs, err := utils.Run(cmd)
- if err == nil {
- _, _ = fmt.Fprintf(GinkgoWriter, "Controller logs:\n %s", controllerLogs)
- } else {
- _, _ = fmt.Fprintf(GinkgoWriter, "Failed to get Controller logs: %s", err)
- }
-
- By("Fetching Kubernetes events")
- cmd = exec.Command("kubectl", "get", "events", "-n", namespace, "--sort-by=.lastTimestamp")
- eventsOutput, err := utils.Run(cmd)
- if err == nil {
- _, _ = fmt.Fprintf(GinkgoWriter, "Kubernetes events:\n%s", eventsOutput)
- } else {
- _, _ = fmt.Fprintf(GinkgoWriter, "Failed to get Kubernetes events: %s", err)
- }
-
- By("Fetching curl-metrics logs")
- cmd = exec.Command("kubectl", "logs", "curl-metrics", "-n", namespace)
- metricsOutput, err := utils.Run(cmd)
- if err == nil {
- _, _ = fmt.Fprintf(GinkgoWriter, "Metrics logs:\n %s", metricsOutput)
- } else {
- _, _ = fmt.Fprintf(GinkgoWriter, "Failed to get curl-metrics logs: %s", err)
- }
-
- By("Fetching controller manager pod description")
- cmd = exec.Command("kubectl", "describe", "pod", controllerPodName, "-n", namespace)
- podDescription, err := utils.Run(cmd)
- if err == nil {
- fmt.Println("Pod description:\n", podDescription)
- } else {
- fmt.Println("Failed to describe controller pod")
- }
- }
- })
-
- SetDefaultEventuallyTimeout(2 * time.Minute)
- SetDefaultEventuallyPollingInterval(time.Second)
-
- Context("Manager", func() {
- It("should run successfully", func() {
- By("validating that the controller-manager pod is running as expected")
- verifyControllerUp := func(g Gomega) {
- // Get the name of the controller-manager pod
- cmd := exec.Command("kubectl", "get",
- "pods", "-l", "control-plane=controller-manager",
- "-o", "go-template={{ range .items }}"+
- "{{ if not .metadata.deletionTimestamp }}"+
- "{{ .metadata.name }}"+
- "{{ \"\\n\" }}{{ end }}{{ end }}",
- "-n", namespace,
- )
-
- podOutput, err := utils.Run(cmd)
- g.Expect(err).NotTo(HaveOccurred(), "Failed to retrieve controller-manager pod information")
- podNames := utils.GetNonEmptyLines(podOutput)
- g.Expect(podNames).To(HaveLen(1), "expected 1 controller pod running")
- controllerPodName = podNames[0]
- g.Expect(controllerPodName).To(ContainSubstring("controller-manager"))
-
- // Validate the pod's status
- cmd = exec.Command("kubectl", "get",
- "pods", controllerPodName, "-o", "jsonpath={.status.phase}",
- "-n", namespace,
- )
- output, err := utils.Run(cmd)
- g.Expect(err).NotTo(HaveOccurred())
- g.Expect(output).To(Equal("Running"), "Incorrect controller-manager pod status")
- }
- Eventually(verifyControllerUp).Should(Succeed())
- })
-
- It("should ensure the metrics endpoint is serving metrics", func() {
- By("creating a ClusterRoleBinding for the service account to allow access to metrics")
- cmd := exec.Command("kubectl", "create", "clusterrolebinding", metricsRoleBindingName,
- "--clusterrole=operator-metrics-reader",
- fmt.Sprintf("--serviceaccount=%s:%s", namespace, serviceAccountName),
- )
- _, err := utils.Run(cmd)
- Expect(err).NotTo(HaveOccurred(), "Failed to create ClusterRoleBinding")
-
- By("validating that the metrics service is available")
- cmd = exec.Command("kubectl", "get", "service", metricsServiceName, "-n", namespace)
- _, err = utils.Run(cmd)
- Expect(err).NotTo(HaveOccurred(), "Metrics service should exist")
-
- By("getting the service account token")
- token, err := serviceAccountToken()
- Expect(err).NotTo(HaveOccurred())
- Expect(token).NotTo(BeEmpty())
-
- By("waiting for the metrics endpoint to be ready")
- verifyMetricsEndpointReady := func(g Gomega) {
- cmd := exec.Command("kubectl", "get", "endpoints", metricsServiceName, "-n", namespace)
- output, err := utils.Run(cmd)
- g.Expect(err).NotTo(HaveOccurred())
- g.Expect(output).To(ContainSubstring("8443"), "Metrics endpoint is not ready")
- }
- Eventually(verifyMetricsEndpointReady).Should(Succeed())
-
- By("verifying that the controller manager is serving the metrics server")
- verifyMetricsServerStarted := func(g Gomega) {
- cmd := exec.Command("kubectl", "logs", controllerPodName, "-n", namespace)
- output, err := utils.Run(cmd)
- g.Expect(err).NotTo(HaveOccurred())
- g.Expect(output).To(ContainSubstring("controller-runtime.metrics\tServing metrics server"),
- "Metrics server not yet started")
- }
- Eventually(verifyMetricsServerStarted).Should(Succeed())
-
- By("creating the curl-metrics pod to access the metrics endpoint")
- cmd = exec.Command("kubectl", "run", "curl-metrics", "--restart=Never",
- "--namespace", namespace,
- "--image=curlimages/curl:latest",
- "--overrides",
- fmt.Sprintf(`{
- "spec": {
- "containers": [{
- "name": "curl",
- "image": "curlimages/curl:latest",
- "command": ["/bin/sh", "-c"],
- "args": ["curl -v -k -H 'Authorization: Bearer %s' https://%s.%s.svc.cluster.local:8443/metrics"],
- "securityContext": {
- "allowPrivilegeEscalation": false,
- "capabilities": {
- "drop": ["ALL"]
- },
- "runAsNonRoot": true,
- "runAsUser": 1000,
- "seccompProfile": {
- "type": "RuntimeDefault"
- }
- }
- }],
- "serviceAccount": "%s"
- }
- }`, token, metricsServiceName, namespace, serviceAccountName))
- _, err = utils.Run(cmd)
- Expect(err).NotTo(HaveOccurred(), "Failed to create curl-metrics pod")
-
- By("waiting for the curl-metrics pod to complete.")
- verifyCurlUp := func(g Gomega) {
- cmd := exec.Command("kubectl", "get", "pods", "curl-metrics",
- "-o", "jsonpath={.status.phase}",
- "-n", namespace)
- output, err := utils.Run(cmd)
- g.Expect(err).NotTo(HaveOccurred())
- g.Expect(output).To(Equal("Succeeded"), "curl pod in wrong status")
- }
- Eventually(verifyCurlUp, 5*time.Minute).Should(Succeed())
-
- By("getting the metrics by checking curl-metrics logs")
- metricsOutput := getMetricsOutput()
- Expect(metricsOutput).To(ContainSubstring(
- "controller_runtime_reconcile_total",
- ))
- })
-
- It("should provisioned cert-manager", func() {
- By("validating that cert-manager has the certificate Secret")
- verifyCertManager := func(g Gomega) {
- cmd := exec.Command("kubectl", "get", "secrets", "webhook-server-cert", "-n", namespace)
- _, err := utils.Run(cmd)
- g.Expect(err).NotTo(HaveOccurred())
- }
- Eventually(verifyCertManager).Should(Succeed())
- })
-
- It("should have CA injection for mutating webhooks", func() {
- By("checking CA injection for mutating webhooks")
- verifyCAInjection := func(g Gomega) {
- cmd := exec.Command("kubectl", "get",
- "mutatingwebhookconfigurations.admissionregistration.k8s.io",
- "operator-mutating-webhook-configuration",
- "-o", "go-template={{ range .webhooks }}{{ .clientConfig.caBundle }}{{ end }}")
- mwhOutput, err := utils.Run(cmd)
- g.Expect(err).NotTo(HaveOccurred())
- g.Expect(len(mwhOutput)).To(BeNumerically(">", 10))
- }
- Eventually(verifyCAInjection).Should(Succeed())
- })
-
- It("should have CA injection for validating webhooks", func() {
- By("checking CA injection for validating webhooks")
- verifyCAInjection := func(g Gomega) {
- cmd := exec.Command("kubectl", "get",
- "validatingwebhookconfigurations.admissionregistration.k8s.io",
- "operator-validating-webhook-configuration",
- "-o", "go-template={{ range .webhooks }}{{ .clientConfig.caBundle }}{{ end }}")
- vwhOutput, err := utils.Run(cmd)
- g.Expect(err).NotTo(HaveOccurred())
- g.Expect(len(vwhOutput)).To(BeNumerically(">", 10))
- }
- Eventually(verifyCAInjection).Should(Succeed())
- })
-
- // +kubebuilder:scaffold:e2e-webhooks-checks
-
- // TODO: Customize the e2e test suite with scenarios specific to your project.
- // Consider applying sample/CR(s) and check their status and/or verifying
- // the reconciliation by using the metrics, i.e.:
- // metricsOutput := getMetricsOutput()
- // Expect(metricsOutput).To(ContainSubstring(
- // fmt.Sprintf(`controller_runtime_reconcile_total{controller="%s",result="success"} 1`,
- // strings.ToLower(),
- // ))
- })
-})
-
-// serviceAccountToken returns a token for the specified service account in the given namespace.
-// It uses the Kubernetes TokenRequest API to generate a token by directly sending a request
-// and parsing the resulting token from the API response.
-func serviceAccountToken() (string, error) {
- const tokenRequestRawString = `{
- "apiVersion": "authentication.k8s.io/v1",
- "kind": "TokenRequest"
- }`
-
- // Temporary file to store the token request
- secretName := fmt.Sprintf("%s-token-request", serviceAccountName)
- tokenRequestFile := filepath.Join("/tmp", secretName)
- err := os.WriteFile(tokenRequestFile, []byte(tokenRequestRawString), os.FileMode(0o644))
- if err != nil {
- return "", err
- }
-
- var out string
- verifyTokenCreation := func(g Gomega) {
- // Execute kubectl command to create the token
- cmd := exec.Command("kubectl", "create", "--raw", fmt.Sprintf(
- "/api/v1/namespaces/%s/serviceaccounts/%s/token",
- namespace,
- serviceAccountName,
- ), "-f", tokenRequestFile)
-
- output, err := cmd.CombinedOutput()
- g.Expect(err).NotTo(HaveOccurred())
-
- // Parse the JSON output to extract the token
- var token tokenRequest
- err = json.Unmarshal(output, &token)
- g.Expect(err).NotTo(HaveOccurred())
-
- out = token.Status.Token
- }
- Eventually(verifyTokenCreation).Should(Succeed())
-
- return out, err
-}
-
-// getMetricsOutput retrieves and returns the logs from the curl pod used to access the metrics endpoint.
-func getMetricsOutput() string {
- By("getting the curl-metrics logs")
- cmd := exec.Command("kubectl", "logs", "curl-metrics", "-n", namespace)
- metricsOutput, err := utils.Run(cmd)
- Expect(err).NotTo(HaveOccurred(), "Failed to retrieve logs from curl pod")
- Expect(metricsOutput).To(ContainSubstring("< HTTP/1.1 200 OK"))
- return metricsOutput
-}
-
-// tokenRequest is a simplified representation of the Kubernetes TokenRequest API response,
-// containing only the token field that we need to extract.
-type tokenRequest struct {
- Status struct {
- Token string `json:"token"`
- } `json:"status"`
-}
diff --git a/operator/test/utils/utils.go b/operator/test/utils/utils.go
deleted file mode 100644
index 04a5141c..00000000
--- a/operator/test/utils/utils.go
+++ /dev/null
@@ -1,251 +0,0 @@
-/*
-Copyright 2025.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-package utils
-
-import (
- "bufio"
- "bytes"
- "fmt"
- "os"
- "os/exec"
- "strings"
-
- . "github.com/onsi/ginkgo/v2" //nolint:golint,revive
-)
-
-const (
- prometheusOperatorVersion = "v0.77.1"
- prometheusOperatorURL = "https://github.com/prometheus-operator/prometheus-operator/" +
- "releases/download/%s/bundle.yaml"
-
- certmanagerVersion = "v1.16.3"
- certmanagerURLTmpl = "https://github.com/cert-manager/cert-manager/releases/download/%s/cert-manager.yaml"
-)
-
-func warnError(err error) {
- _, _ = fmt.Fprintf(GinkgoWriter, "warning: %v\n", err)
-}
-
-// Run executes the provided command within this context
-func Run(cmd *exec.Cmd) (string, error) {
- dir, _ := GetProjectDir()
- cmd.Dir = dir
-
- if err := os.Chdir(cmd.Dir); err != nil {
- _, _ = fmt.Fprintf(GinkgoWriter, "chdir dir: %s\n", err)
- }
-
- cmd.Env = append(os.Environ(), "GO111MODULE=on")
- command := strings.Join(cmd.Args, " ")
- _, _ = fmt.Fprintf(GinkgoWriter, "running: %s\n", command)
- output, err := cmd.CombinedOutput()
- if err != nil {
- return string(output), fmt.Errorf("%s failed with error: (%v) %s", command, err, string(output))
- }
-
- return string(output), nil
-}
-
-// InstallPrometheusOperator installs the prometheus Operator to be used to export the enabled metrics.
-func InstallPrometheusOperator() error {
- url := fmt.Sprintf(prometheusOperatorURL, prometheusOperatorVersion)
- cmd := exec.Command("kubectl", "create", "-f", url)
- _, err := Run(cmd)
- return err
-}
-
-// UninstallPrometheusOperator uninstalls the prometheus
-func UninstallPrometheusOperator() {
- url := fmt.Sprintf(prometheusOperatorURL, prometheusOperatorVersion)
- cmd := exec.Command("kubectl", "delete", "-f", url)
- if _, err := Run(cmd); err != nil {
- warnError(err)
- }
-}
-
-// IsPrometheusCRDsInstalled checks if any Prometheus CRDs are installed
-// by verifying the existence of key CRDs related to Prometheus.
-func IsPrometheusCRDsInstalled() bool {
- // List of common Prometheus CRDs
- prometheusCRDs := []string{
- "prometheuses.monitoring.coreos.com",
- "prometheusrules.monitoring.coreos.com",
- "prometheusagents.monitoring.coreos.com",
- }
-
- cmd := exec.Command("kubectl", "get", "crds", "-o", "custom-columns=NAME:.metadata.name")
- output, err := Run(cmd)
- if err != nil {
- return false
- }
- crdList := GetNonEmptyLines(output)
- for _, crd := range prometheusCRDs {
- for _, line := range crdList {
- if strings.Contains(line, crd) {
- return true
- }
- }
- }
-
- return false
-}
-
-// UninstallCertManager uninstalls the cert manager
-func UninstallCertManager() {
- url := fmt.Sprintf(certmanagerURLTmpl, certmanagerVersion)
- cmd := exec.Command("kubectl", "delete", "-f", url)
- if _, err := Run(cmd); err != nil {
- warnError(err)
- }
-}
-
-// InstallCertManager installs the cert manager bundle.
-func InstallCertManager() error {
- url := fmt.Sprintf(certmanagerURLTmpl, certmanagerVersion)
- cmd := exec.Command("kubectl", "apply", "-f", url)
- if _, err := Run(cmd); err != nil {
- return err
- }
- // Wait for cert-manager-webhook to be ready, which can take time if cert-manager
- // was re-installed after uninstalling on a cluster.
- cmd = exec.Command("kubectl", "wait", "deployment.apps/cert-manager-webhook",
- "--for", "condition=Available",
- "--namespace", "cert-manager",
- "--timeout", "5m",
- )
-
- _, err := Run(cmd)
- return err
-}
-
-// IsCertManagerCRDsInstalled checks if any Cert Manager CRDs are installed
-// by verifying the existence of key CRDs related to Cert Manager.
-func IsCertManagerCRDsInstalled() bool {
- // List of common Cert Manager CRDs
- certManagerCRDs := []string{
- "certificates.cert-manager.io",
- "issuers.cert-manager.io",
- "clusterissuers.cert-manager.io",
- "certificaterequests.cert-manager.io",
- "orders.acme.cert-manager.io",
- "challenges.acme.cert-manager.io",
- }
-
- // Execute the kubectl command to get all CRDs
- cmd := exec.Command("kubectl", "get", "crds")
- output, err := Run(cmd)
- if err != nil {
- return false
- }
-
- // Check if any of the Cert Manager CRDs are present
- crdList := GetNonEmptyLines(output)
- for _, crd := range certManagerCRDs {
- for _, line := range crdList {
- if strings.Contains(line, crd) {
- return true
- }
- }
- }
-
- return false
-}
-
-// LoadImageToKindClusterWithName loads a local docker image to the kind cluster
-func LoadImageToKindClusterWithName(name string) error {
- cluster := "kind"
- if v, ok := os.LookupEnv("KIND_CLUSTER"); ok {
- cluster = v
- }
- kindOptions := []string{"load", "docker-image", name, "--name", cluster}
- cmd := exec.Command("kind", kindOptions...)
- _, err := Run(cmd)
- return err
-}
-
-// GetNonEmptyLines converts given command output string into individual objects
-// according to line breakers, and ignores the empty elements in it.
-func GetNonEmptyLines(output string) []string {
- var res []string
- elements := strings.Split(output, "\n")
- for _, element := range elements {
- if element != "" {
- res = append(res, element)
- }
- }
-
- return res
-}
-
-// GetProjectDir will return the directory where the project is
-func GetProjectDir() (string, error) {
- wd, err := os.Getwd()
- if err != nil {
- return wd, err
- }
- wd = strings.Replace(wd, "/test/e2e", "", -1)
- return wd, nil
-}
-
-// UncommentCode searches for target in the file and remove the comment prefix
-// of the target content. The target content may span multiple lines.
-func UncommentCode(filename, target, prefix string) error {
- // false positive
- // nolint:gosec
- content, err := os.ReadFile(filename)
- if err != nil {
- return err
- }
- strContent := string(content)
-
- idx := strings.Index(strContent, target)
- if idx < 0 {
- return fmt.Errorf("unable to find the code %s to be uncomment", target)
- }
-
- out := new(bytes.Buffer)
- _, err = out.Write(content[:idx])
- if err != nil {
- return err
- }
-
- scanner := bufio.NewScanner(bytes.NewBufferString(target))
- if !scanner.Scan() {
- return nil
- }
- for {
- _, err := out.WriteString(strings.TrimPrefix(scanner.Text(), prefix))
- if err != nil {
- return err
- }
- // Avoid writing a newline in case the previous line was the last in target.
- if !scanner.Scan() {
- break
- }
- if _, err := out.WriteString("\n"); err != nil {
- return err
- }
- }
-
- _, err = out.Write(content[idx+len(target):])
- if err != nil {
- return err
- }
- // false positive
- // nolint:gosec
- return os.WriteFile(filename, out.Bytes(), 0644)
-}
diff --git a/operator/utils/util.go b/operator/utils/util.go
deleted file mode 100644
index 67fd1658..00000000
--- a/operator/utils/util.go
+++ /dev/null
@@ -1,16 +0,0 @@
-package utils
-
-import (
- "github.com/go-logr/logr"
- "k8s.io/apimachinery/pkg/api/errors"
- ctrl "sigs.k8s.io/controller-runtime"
-)
-
-// HandleReconcileError handles errors in reconcile loops, logging conflicts as info and returning nil error for them.
-func HandleReconcileError(log logr.Logger, err error, conflictMsg string) (ctrl.Result, error) {
- if errors.IsConflict(err) {
- log.V(1).Info(conflictMsg, "error", err)
- return ctrl.Result{}, nil
- }
- return ctrl.Result{}, err
-}
diff --git a/perf/perf.go b/perf/perf.go
deleted file mode 100644
index 8c8c27ef..00000000
--- a/perf/perf.go
+++ /dev/null
@@ -1,272 +0,0 @@
-/*
- * Copyright 2024 Function Stream Org.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-package perf
-
-import (
- "context"
- "encoding/json"
- "fmt"
- "io"
- "log/slog"
- "math/rand"
- "os"
- "strconv"
- "sync/atomic"
- "time"
-
- "github.com/bmizerany/perks/quantile"
- adminclient "github.com/functionstream/function-stream/admin/client"
- "github.com/functionstream/function-stream/admin/utils"
- "github.com/functionstream/function-stream/common"
- "github.com/functionstream/function-stream/fs/contube"
- "golang.org/x/time/rate"
-)
-
-type TubeBuilder func(ctx context.Context) (contube.TubeFactory, error)
-
-type Config struct {
- PulsarURL string
- RequestRate float64
- Func *adminclient.ModelFunction
- QueueBuilder TubeBuilder
-}
-
-type Perf interface {
- Run(context.Context)
-}
-
-type perf struct {
- config *Config
- input chan<- contube.Record
- output <-chan contube.Record
- tubeBuilder TubeBuilder
-}
-
-func New(config *Config) Perf {
- p := &perf{
- config: config,
- }
- if config.QueueBuilder == nil {
- p.tubeBuilder = func(ctx context.Context) (contube.TubeFactory, error) {
- return contube.NewPulsarEventQueueFactory(ctx, (&contube.PulsarTubeFactoryConfig{
- PulsarURL: config.PulsarURL,
- }).ToConfigMap())
- }
- } else {
- p.tubeBuilder = config.QueueBuilder
- }
- return p
-}
-
-type Person struct {
- Name string `json:"name"`
- Money int `json:"money"`
- Expected int `json:"expected"`
-}
-
-func (p *perf) Run(ctx context.Context) {
- slog.Info(
- "Starting Function stream perf client",
- slog.Any("config", p.config),
- )
-
- name := "perf-" + strconv.Itoa(rand.Int())
- var f adminclient.ModelFunction
- if p.config.Func != nil {
- f = *p.config.Func
- } else {
- f = adminclient.ModelFunction{
- Runtime: adminclient.ModelRuntimeConfig{
- Config: map[string]interface{}{
- common.RuntimeArchiveConfigKey: "./bin/example_basic.wasm",
- },
- },
- Source: utils.MakeMemorySourceTubeConfig("test-input-" + strconv.Itoa(rand.Int())),
- Sink: *utils.MakeMemorySinkTubeConfig("test-output-" + strconv.Itoa(rand.Int())),
- }
- }
- f.Name = name
-
- queueFactory, err := p.tubeBuilder(ctx)
- if err != nil {
- slog.Error(
- "Failed to create Record Queue Factory",
- slog.Any("error", err),
- )
- os.Exit(1)
- }
-
- inputTopic, err := utils.GetInputTopics(&f)
- if err != nil {
- slog.Error(
- "Failed to get input topics",
- slog.Any("error", err),
- )
- os.Exit(1)
-
- }
- p.input, err = queueFactory.NewSinkTube(ctx, (&contube.SinkQueueConfig{
- Topic: inputTopic[0],
- }).ToConfigMap())
- if err != nil {
- slog.Error(
- "Failed to create Sink Perf Channel",
- slog.Any("error", err),
- )
- os.Exit(1)
- }
-
- outputTopic, err := utils.GetOutputTopic(&f)
- if err != nil {
- slog.Error(
- "Failed to get output topic",
- slog.Any("error", err),
- )
- os.Exit(1)
- }
- p.output, err = queueFactory.NewSourceTube(ctx, (&contube.SourceQueueConfig{
- Topics: []string{outputTopic},
- SubName: "perf",
- }).ToConfigMap())
- if err != nil {
- slog.Error(
- "Failed to create Sources Perf Channel",
- slog.Any("error", err),
- )
- os.Exit(1)
- }
-
- cfg := adminclient.NewConfiguration()
- cli := adminclient.NewAPIClient(cfg)
-
- res, err := cli.FunctionAPI.CreateFunction(context.Background()).Body(f).Execute()
- if err != nil {
- body, _ := io.ReadAll(res.Body)
- slog.Error(
- "Failed to create Create Function",
- slog.Any("error", err),
- slog.Any("body", body),
- )
- os.Exit(1)
- }
-
- defer func() {
- res, err := cli.FunctionAPI.DeleteFunction(context.Background(), name).Execute()
- if err != nil {
- slog.Error(
- "Failed to delete Function",
- slog.Any("error", err),
- )
- os.Exit(1)
- }
- if res.StatusCode != 200 {
- slog.Error(
- "Failed to delete Function",
- slog.Any("statusCode", res.StatusCode),
- )
- os.Exit(1)
- }
- }()
-
- latencyCh := make(chan int64)
- var failureCount int64
- go p.generateTraffic(ctx, latencyCh, &failureCount)
-
- reportInterval := time.Second
- ticker := time.NewTicker(reportInterval)
- defer ticker.Stop()
-
- q := quantile.NewTargeted(0.50, 0.95, 0.99, 0.999, 1.0)
- ops := 0
- for {
- select {
- case <-ticker.C:
- slog.Info(fmt.Sprintf(`Stats - Total ops: %6.1f ops/s - Failed ops: %6.1f ops/s
- Latency ms: 50%% %5.1f - 95%% %5.1f - 99%% %5.1f - 99.9%% %5.1f - max %6.1f`,
- float64(ops)/float64(reportInterval/time.Second),
- float64(failureCount)/float64(reportInterval/time.Second),
- q.Query(0.5),
- q.Query(0.95),
- q.Query(0.99),
- q.Query(0.999),
- q.Query(1.0),
- ))
- q.Reset()
- ops = 0
- atomic.StoreInt64(&failureCount, 0)
- case l := <-latencyCh:
- ops++
- q.Insert(float64(l) / 1000.0) // Convert to millis
- case <-ctx.Done():
- slog.InfoContext(ctx, "Shutting down perf client")
- return
- }
- }
-
-}
-
-func (p *perf) generateTraffic(ctx context.Context, latencyCh chan int64, failureCount *int64) {
- limiter := rate.NewLimiter(rate.Limit(p.config.RequestRate), int(p.config.RequestRate))
-
- count := 0
- for {
- if err := limiter.Wait(ctx); err != nil {
- return
- }
- c := count
- count++
- person := Person{Name: "rbt", Money: c, Expected: c + 1}
- jsonBytes, err := json.Marshal(person)
- if err != nil {
- slog.Error(
- "Failed to marshal Person",
- slog.Any("error", err),
- )
- os.Exit(1)
- }
- start := time.Now()
- if !common.SendToChannel(ctx, p.input, contube.NewRecordImpl(jsonBytes, func() {})) {
- return
- }
- go func() {
- e, ok := common.ReceiveFromChannel(ctx, p.output)
- if !ok {
- return
- }
- latencyCh <- time.Since(start).Microseconds()
- payload := e.GetPayload()
- e.Commit()
- var out Person
- err = json.Unmarshal(payload, &out)
- if err != nil {
- slog.Error(
- "Failed to unmarshal Person",
- slog.Any("error", err),
- slog.Any("payload", payload),
- )
- os.Exit(1)
- }
- if out.Money != out.Expected {
- slog.Error(
- "Unexpected value for money",
- slog.Any("money", out.Money),
- )
- atomic.AddInt64(failureCount, 1)
- }
- }()
- }
-}
diff --git a/protocol/Cargo.toml b/protocol/Cargo.toml
new file mode 100644
index 00000000..fde9de52
--- /dev/null
+++ b/protocol/Cargo.toml
@@ -0,0 +1,17 @@
+[package]
+name = "protocol"
+version = "0.1.0"
+edition = "2024"
+description = "Protocol Buffers protocol definitions for function stream"
+license = "MIT OR Apache-2.0"
+repository = "https://github.com/your-username/rust-function-stream"
+
+[dependencies]
+prost = "0.13"
+tonic = { version = "0.12", features = ["default"] }
+log = "0.4"
+
+[build-dependencies]
+tonic-build = "0.12"
+env_logger = "0.10"
+log = "0.4"
diff --git a/protocol/build.rs b/protocol/build.rs
new file mode 100644
index 00000000..ea969bc4
--- /dev/null
+++ b/protocol/build.rs
@@ -0,0 +1,51 @@
+use std::path::Path;
+
+fn main() -> Result<(), Box> {
+ // Initialize logger for build script
+ env_logger::init();
+
+ // Create output directories in the protocol package directory
+ // Use CARGO_MANIFEST_DIR to get the package root directory
+ let manifest_dir = std::env::var("CARGO_MANIFEST_DIR")?;
+ let out_dir = Path::new(&manifest_dir).join("generated");
+ let proto_file = Path::new(&manifest_dir).join("proto/function_stream.proto");
+
+ // Note: Cargo doesn't directly support cleaning custom directories via cargo clean.
+ // The generated directory will be automatically regenerated on each build if needed.
+ // To clean it manually, use: ./clean.sh or make clean or rm -rf protocol/generated
+
+ log::info!("Generated code will be placed in: {}", out_dir.display());
+ log::info!("Proto file: {}", proto_file.display());
+
+ // Create output directories
+ let cli_dir = out_dir.join("cli");
+ let service_dir = out_dir.join("service");
+
+ std::fs::create_dir_all(&cli_dir)?;
+ std::fs::create_dir_all(&service_dir)?;
+ log::info!(
+ "Created output directories: {} and {}",
+ cli_dir.display(),
+ service_dir.display()
+ );
+
+ // Generate code for CLI - only client code needed
+ tonic_build::configure()
+ .out_dir(&cli_dir)
+ .build_client(true) // Enable client code generation
+ .build_server(false) // Disable server code generation
+ .compile_protos(&["proto/function_stream.proto"], &["proto"])?;
+
+ // Generate code for Service - only server code needed
+ tonic_build::configure()
+ .out_dir(&service_dir)
+ .build_client(false) // Disable client code generation
+ .build_server(true) // Enable server code generation
+ .compile_protos(&["proto/function_stream.proto"], &["proto"])?;
+
+ log::info!("Protocol Buffers code generated successfully");
+ println!("cargo:rustc-env=PROTO_GEN_DIR={}", out_dir.display());
+ println!("cargo:rerun-if-changed={}", proto_file.display());
+
+ Ok(())
+}
diff --git a/protocol/generated/cli/function_stream.rs b/protocol/generated/cli/function_stream.rs
new file mode 100644
index 00000000..7bde3d1d
--- /dev/null
+++ b/protocol/generated/cli/function_stream.rs
@@ -0,0 +1,285 @@
+// This file is @generated by prost-build.
+/// Unified response structure
+#[derive(Clone, PartialEq, ::prost::Message)]
+pub struct Response {
+ #[prost(enumeration = "StatusCode", tag = "1")]
+ pub status_code: i32,
+ #[prost(string, tag = "2")]
+ pub message: ::prost::alloc::string::String,
+ #[prost(string, optional, tag = "3")]
+ pub data: ::core::option::Option<::prost::alloc::string::String>,
+}
+/// Login request
+#[derive(Clone, PartialEq, ::prost::Message)]
+pub struct LoginRequest {
+ #[prost(string, tag = "1")]
+ pub username: ::prost::alloc::string::String,
+ #[prost(string, tag = "2")]
+ pub password: ::prost::alloc::string::String,
+ #[prost(int64, optional, tag = "3")]
+ pub timestamp: ::core::option::Option,
+}
+/// User information
+#[derive(Clone, PartialEq, ::prost::Message)]
+pub struct UserInfo {
+ #[prost(string, tag = "1")]
+ pub user_id: ::prost::alloc::string::String,
+ #[prost(string, tag = "2")]
+ pub username: ::prost::alloc::string::String,
+}
+/// Empty request for logout
+#[derive(Clone, Copy, PartialEq, ::prost::Message)]
+pub struct LogoutRequest {}
+/// SQL execution request
+#[derive(Clone, PartialEq, ::prost::Message)]
+pub struct SqlRequest {
+ #[prost(string, tag = "1")]
+ pub sql: ::prost::alloc::string::String,
+}
+/// Status codes for API responses
+#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash, PartialOrd, Ord, ::prost::Enumeration)]
+#[repr(i32)]
+pub enum StatusCode {
+ /// Unknown status (default)
+ StatusUnknown = 0,
+ /// Success codes (2xx)
+ Ok = 200,
+ Created = 201,
+ Accepted = 202,
+ NoContent = 204,
+ /// Client error codes (4xx)
+ BadRequest = 400,
+ Unauthorized = 401,
+ Forbidden = 403,
+ NotFound = 404,
+ MethodNotAllowed = 405,
+ Conflict = 409,
+ UnprocessableEntity = 422,
+ TooManyRequests = 429,
+ /// Server error codes (5xx)
+ InternalServerError = 500,
+ NotImplemented = 501,
+ BadGateway = 502,
+ ServiceUnavailable = 503,
+ GatewayTimeout = 504,
+}
+impl StatusCode {
+ /// String value of the enum field names used in the ProtoBuf definition.
+ ///
+ /// The values are not transformed in any way and thus are considered stable
+ /// (if the ProtoBuf definition does not change) and safe for programmatic use.
+ pub fn as_str_name(&self) -> &'static str {
+ match self {
+ Self::StatusUnknown => "STATUS_UNKNOWN",
+ Self::Ok => "OK",
+ Self::Created => "CREATED",
+ Self::Accepted => "ACCEPTED",
+ Self::NoContent => "NO_CONTENT",
+ Self::BadRequest => "BAD_REQUEST",
+ Self::Unauthorized => "UNAUTHORIZED",
+ Self::Forbidden => "FORBIDDEN",
+ Self::NotFound => "NOT_FOUND",
+ Self::MethodNotAllowed => "METHOD_NOT_ALLOWED",
+ Self::Conflict => "CONFLICT",
+ Self::UnprocessableEntity => "UNPROCESSABLE_ENTITY",
+ Self::TooManyRequests => "TOO_MANY_REQUESTS",
+ Self::InternalServerError => "INTERNAL_SERVER_ERROR",
+ Self::NotImplemented => "NOT_IMPLEMENTED",
+ Self::BadGateway => "BAD_GATEWAY",
+ Self::ServiceUnavailable => "SERVICE_UNAVAILABLE",
+ Self::GatewayTimeout => "GATEWAY_TIMEOUT",
+ }
+ }
+ /// Creates an enum from field names used in the ProtoBuf definition.
+ pub fn from_str_name(value: &str) -> ::core::option::Option {
+ match value {
+ "STATUS_UNKNOWN" => Some(Self::StatusUnknown),
+ "OK" => Some(Self::Ok),
+ "CREATED" => Some(Self::Created),
+ "ACCEPTED" => Some(Self::Accepted),
+ "NO_CONTENT" => Some(Self::NoContent),
+ "BAD_REQUEST" => Some(Self::BadRequest),
+ "UNAUTHORIZED" => Some(Self::Unauthorized),
+ "FORBIDDEN" => Some(Self::Forbidden),
+ "NOT_FOUND" => Some(Self::NotFound),
+ "METHOD_NOT_ALLOWED" => Some(Self::MethodNotAllowed),
+ "CONFLICT" => Some(Self::Conflict),
+ "UNPROCESSABLE_ENTITY" => Some(Self::UnprocessableEntity),
+ "TOO_MANY_REQUESTS" => Some(Self::TooManyRequests),
+ "INTERNAL_SERVER_ERROR" => Some(Self::InternalServerError),
+ "NOT_IMPLEMENTED" => Some(Self::NotImplemented),
+ "BAD_GATEWAY" => Some(Self::BadGateway),
+ "SERVICE_UNAVAILABLE" => Some(Self::ServiceUnavailable),
+ "GATEWAY_TIMEOUT" => Some(Self::GatewayTimeout),
+ _ => None,
+ }
+ }
+}
+/// Generated client implementations.
+pub mod function_stream_service_client {
+ #![allow(
+ unused_variables,
+ dead_code,
+ missing_docs,
+ clippy::wildcard_imports,
+ clippy::let_unit_value,
+ )]
+ use tonic::codegen::*;
+ use tonic::codegen::http::Uri;
+ /// Function Stream service
+ #[derive(Debug, Clone)]
+ pub struct FunctionStreamServiceClient {
+ inner: tonic::client::Grpc,
+ }
+ impl FunctionStreamServiceClient {
+ /// Attempt to create a new client by connecting to a given endpoint.
+ pub async fn connect(dst: D) -> Result
+ where
+ D: TryInto,
+ D::Error: Into,
+ {
+ let conn = tonic::transport::Endpoint::new(dst)?.connect().await?;
+ Ok(Self::new(conn))
+ }
+ }
+ impl FunctionStreamServiceClient