New update to stone soup chart

Author: claudiol

charts/stone-soup-pipelines/Chart.yaml

@@ -15,14 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.1
+version: 0.1.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
 appVersion: "1.16.0"
-
-maintainers:
-  - name: claudiol
-    email: [email protected]

charts/stone-soup-pipelines/templates/namespaces.yaml

@@ -1,6 +1,14 @@
+{{- if .Release.IsInstall }}
+{{- if (lookup "v1" "Namespace" "{{ .Values.stoneSoupPipeline.namespace }}" "") }}
+{{- end}}
 apiVersion: v1
 kind: Namespace
 metadata:
   name: {{ .Values.stoneSoupPipeline.namespace }}
+  labels:
+    app.kubernetes.io/managed-by: helm
 spec:
 ---
+{{- if .Release.IsInstall }}
+{{- end }}
+{{- end }}

charts/stone-soup-pipelines/templates/persistent-volume-claims/build-artifacts.rwo.yaml

@@ -2,6 +2,11 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: stone-soup-build-artifacts-rwo
+  labels:
+    app.kubernetes.io/managed-by: helm
+  annotations:
+    meta.helm.sh/release-name: stone-soup
+    meta.helm.sh/release-namespace: default
 spec:
   resources:
     requests:

charts/stone-soup-pipelines/templates/rbac/scc-pipeline-sa.yaml

@@ -1,9 +1,15 @@
 apiVersion: security.openshift.io/v1
 kind: SecurityContextConstraints
 metadata:
-  name: pipeline-sa
-  namespace: {{ default "stone-soup-ci" .Values.stoneSoupPipeline.namespace }}
+  name: pipeline
 allowPrivilegedContainer: true
+allowHostDirVolumePlugin: true
+allowHostIPC: true
+allowHostIPC: true
+allowHostPID: true
+allowHostPorts: true
+readOnlyRootFilesystem: true
+allowHostNetwork: true
 runAsUser:
   type: RunAsAny
 seLinuxContext:
@@ -13,4 +19,4 @@ fsGroup:
 supplementalGroups:
   type: RunAsAny
 users:
-  - system:serviceaccount:{{ .Values.stoneSoupPipeline.namespace }}:{{ .Values.stoneSoupPipeline.serviceAccount }}
+  - system:serviceaccount:{{ .Release.Namespace }}:{{ .Values.stoneSoupPipeline.serviceAccount }}

charts/stone-soup-pipelines/templates/sa-pipeline.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: pipeline
+secrets:
+- name: {{ default "stone-soup-secret" .Values.stoneSoupPipeline.secret }}

charts/stone-soup-pipelines/templates/subscription-osp.yaml

@@ -0,0 +1,20 @@
+{{- if $.Values.stoneSoupPipeline.subscription.install }}
+{{- if .Release.IsInstall }}
+{{- if (lookup "v1" "Subscription" "openshift-pipelines-operator-rh" "") }}
+{{- end }}
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: openshift-pipelines-operator-rh
+  namespace: openshift-operators
+  labels:
+    app.kubernetes.io/managed-by: helm
+spec:
+  name: openshift-pipelines-operator-rh 
+  source: redhat-operators
+  sourceNamespace: openshift-marketplace
+---
+{{- if .Release.IsInstall }}
+{{- end }}
+{{- end }}
+{{- end }}

charts/stone-soup-pipelines/values.yaml

@@ -7,3 +7,4 @@ stoneSoupPipeline:
     install: true
   namespace: stone-soup-ci
   serviceAccount: pipeline
+  secret: stone-soup-secret