feat(helm): support labels in values.yaml (#507)

Co-authored-by: Techassi <[email protected]>

CHANGELOG.md

@@ -7,12 +7,14 @@ All notable changes to this project will be documented in this file.
 ### Added
 
 - Add user-info-fetcher to fetch user metadata from directory services ([#433]).
+- Helm: support labels in values.yaml ([#507]).
 
 ### Changed
 
 - [BREAKING]: Remove legacy `nodeSelector` on rolegroups. Use the field `affinity.nodeAffinity` instead ([#433]).
 
 [#433]: https://github.com/stackabletech/opa-operator/pull/433
+[#507]: https://github.com/stackabletech/opa-operator/pull/507
 
 ## [23.11.0] - 2023-11-24
 

deploy/helm/opa-operator/templates/_helpers.tpl

@@ -55,6 +55,9 @@ Selector labels
 {{- define "operator.selectorLabels" -}}
 app.kubernetes.io/name: {{ include "operator.appname" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
+{{- with .Values.labels }}
+{{ toYaml . }}
+{{- end }}
 {{- end }}
 
 {{/*

deploy/helm/opa-operator/templates/deployment.yaml

@@ -23,7 +23,7 @@ spec:
       labels:
         {{- include "operator.selectorLabels" . | nindent 8 }}
     spec:
-      {{- with .Values.imagePullSecrets }}
+      {{- with .Values.image.pullSecrets }}
       imagePullSecrets:
         {{- toYaml . | nindent 8 }}
       {{- end }}

deploy/helm/opa-operator/templates/roles.yaml

@@ -3,6 +3,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: {{ include "operator.fullname" . }}-clusterrole
+  labels:
+  {{- include "operator.labels" . | nindent 4 }}
 rules:
   - apiGroups:
       - ""
@@ -105,6 +107,8 @@ apiVersion: security.openshift.io/v1
 kind: SecurityContextConstraints
 metadata:
   name: opa-scc
+  labels:
+  {{- include "operator.labels" . | nindent 4 }}
   annotations:
     kubernetes.io/description: |-
       This resource is derived from hostmount-anyuid. It provides all the features of the
@@ -148,6 +152,8 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: {{ include "operator.name" . }}-clusterrole
+  labels:
+  {{- include "operator.labels" . | nindent 4 }}
 rules:
   - apiGroups:
       - ""
@@ -174,4 +180,4 @@ rules:
       - opa-scc
     verbs:
       - use
-{{ end }}
+{{ end }}

deploy/helm/opa-operator/values.yaml

@@ -3,8 +3,8 @@
 image:
   repository: docker.stackable.tech/stackable/opa-operator
   pullPolicy: IfNotPresent
+  pullSecrets: []
 
-imagePullSecrets: []
 nameOverride: ""
 fullnameOverride: ""
 
@@ -19,6 +19,9 @@ serviceAccount:
 
 podAnnotations: {}
 
+# Provide additional labels which get attached to all deployed resources
+labels: {}
+
 podSecurityContext: {}
   # fsGroup: 2000