Merge pull request GoogleCloudPlatform#2738 from yuwenma/release-1.123.0

Update operator to 1.123.0

operator/autopilot-channels/packages/configconnector/1.123.0/namespaced/per-namespace-components.yaml

@@ -0,0 +1,173 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  annotations:
+    cnrm.cloud.google.com/version: 1.123.0
+    iam.gke.io/gcp-service-account: cnrm-system-${NAMESPACE?}@${PROJECT_ID?}.iam.gserviceaccount.com
+  labels:
+    cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+    cnrm.cloud.google.com/system: "true"
+  name: cnrm-controller-manager-${NAMESPACE?}
+  namespace: cnrm-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  annotations:
+    cnrm.cloud.google.com/version: 1.123.0
+  finalizers:
+  - configconnector.cnrm.cloud.google.com/finalizer
+  labels:
+    cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+    cnrm.cloud.google.com/system: "true"
+  name: cnrm-admin-binding-${NAMESPACE?}
+  namespace: ${NAMESPACE?}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cnrm-admin
+subjects:
+- kind: ServiceAccount
+  name: cnrm-controller-manager-${NAMESPACE?}
+  namespace: cnrm-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  annotations:
+    cnrm.cloud.google.com/version: 1.123.0
+  finalizers:
+  - configconnector.cnrm.cloud.google.com/finalizer
+  labels:
+    cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+    cnrm.cloud.google.com/system: "true"
+  name: cnrm-manager-ns-binding-${NAMESPACE?}
+  namespace: ${NAMESPACE?}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cnrm-manager-ns-role
+subjects:
+- kind: ServiceAccount
+  name: cnrm-controller-manager-${NAMESPACE?}
+  namespace: cnrm-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  annotations:
+    cnrm.cloud.google.com/version: 1.123.0
+  labels:
+    cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+    cnrm.cloud.google.com/system: "true"
+  name: cnrm-manager-ns-binding-${NAMESPACE?}
+  namespace: cnrm-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cnrm-manager-ns-role
+subjects:
+- kind: ServiceAccount
+  name: cnrm-controller-manager-${NAMESPACE?}
+  namespace: cnrm-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  annotations:
+    cnrm.cloud.google.com/version: 1.123.0
+  labels:
+    cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+    cnrm.cloud.google.com/system: "true"
+  name: cnrm-manager-cluster-binding-${NAMESPACE?}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cnrm-manager-cluster-role
+subjects:
+- kind: ServiceAccount
+  name: cnrm-controller-manager-${NAMESPACE?}
+  namespace: cnrm-system
+---
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    cnrm.cloud.google.com/version: 1.123.0
+    prometheus.io/port: "8888"
+    prometheus.io/scrape: "true"
+  labels:
+    cnrm.cloud.google.com/monitored: "true"
+    cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+    cnrm.cloud.google.com/system: "true"
+  name: cnrm-manager-${NAMESPACE?}
+  namespace: cnrm-system
+spec:
+  ports:
+  - name: controller-manager
+    port: 443
+  - name: metrics
+    port: 8888
+  selector:
+    cnrm.cloud.google.com/component: cnrm-controller-manager
+    cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+    cnrm.cloud.google.com/system: "true"
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  annotations:
+    cnrm.cloud.google.com/version: 1.123.0
+  labels:
+    cnrm.cloud.google.com/component: cnrm-controller-manager
+    cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+    cnrm.cloud.google.com/system: "true"
+  name: cnrm-controller-manager-${NAMESPACE?}
+  namespace: cnrm-system
+spec:
+  selector:
+    matchLabels:
+      cnrm.cloud.google.com/component: cnrm-controller-manager
+      cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+      cnrm.cloud.google.com/system: "true"
+  serviceName: cnrm-manager-${NAMESPACE?}
+  template:
+    metadata:
+      annotations:
+        cnrm.cloud.google.com/version: 1.123.0
+      labels:
+        cnrm.cloud.google.com/component: cnrm-controller-manager
+        cnrm.cloud.google.com/scoped-namespace: ${NAMESPACE?}
+        cnrm.cloud.google.com/system: "true"
+    spec:
+      containers:
+      - args:
+        - --scoped-namespace=${NAMESPACE?}
+        - --prometheus-scrape-endpoint=:8888
+        command:
+        - /configconnector/manager
+        image: gcr.io/gke-release/cnrm/controller:c4e7641
+        imagePullPolicy: Always
+        name: manager
+        ports:
+        - containerPort: 23232
+        readinessProbe:
+          httpGet:
+            path: /ready
+            port: 23232
+          initialDelaySeconds: 7
+          periodSeconds: 3
+        resources:
+          limits:
+            memory: 512Mi
+          requests:
+            cpu: 100m
+            memory: 512Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          privileged: false
+          runAsNonRoot: true
+          runAsUser: 1000
+      enableServiceLinks: false
+      serviceAccountName: cnrm-controller-manager-${NAMESPACE?}
+      terminationGracePeriodSeconds: 10

operator/autopilot-channels/stable

@@ -1,2 +1,2 @@
 manifests:
- - version: 1.122.0
+ - version: 1.123.0