Create UsageProfile CRD (#165)

See https://kb.vshn.ch/appuio-cloud/references/architecture/control-api-usage-profile.html

apis/v1/usage_profile_types.go

@@ -0,0 +1,46 @@
+package v1
+
+import (
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/runtime"
+)
+
+// +kubebuilder:object:root=true
+// +kubebuilder:resource:scope=Cluster
+// +kubebuilder:subresource:status
+
+// UsageProfile is a representation of an APPUiO Cloud usage profile
+type UsageProfile struct {
+	metav1.TypeMeta   `json:",inline"`
+	metav1.ObjectMeta `json:"metadata,omitempty"`
+
+	Spec   UsageProfileSpec   `json:"spec,omitempty"`
+	Status UsageProfileStatus `json:"status,omitempty"`
+}
+
+// UsageProfileSpec contains the desired state of the usage profile
+type UsageProfileSpec struct {
+	// NamespaceCount is the number of namespaces an organization with this usage profile can create per zone.
+	NamespaceCount int `json:"namespaceCount,omitempty"`
+	// Resources is the set of resources which are created in each namespace for which the usage profile is applied.
+	// The key is used as the name of the resource and the value is the resource definition.
+	Resources map[string]runtime.RawExtension `json:"resources,omitempty"`
+}
+
+// UsageProfileStatus contains the actual state of the usage profile
+type UsageProfileStatus struct {
+}
+
+// +kubebuilder:object:root=true
+
+// UsageProfileList contains a list of UsageProfiles.
+type UsageProfileList struct {
+	metav1.TypeMeta `json:",inline"`
+	metav1.ListMeta `json:"metadata,omitempty"`
+
+	Items []UsageProfile `json:"items"`
+}
+
+func init() {
+	SchemeBuilder.Register(&UsageProfile{}, &UsageProfileList{})
+}

config/crd/apiextensions.k8s.io/v1/base/appuio.io_usageprofiles.yaml

@@ -0,0 +1,60 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.11.3
+  creationTimestamp: null
+  name: usageprofiles.appuio.io
+spec:
+  group: appuio.io
+  names:
+    kind: UsageProfile
+    listKind: UsageProfileList
+    plural: usageprofiles
+    singular: usageprofile
+  scope: Cluster
+  versions:
+  - name: v1
+    schema:
+      openAPIV3Schema:
+        description: UsageProfile is a representation of an APPUiO Cloud usage profile
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: UsageProfileSpec contains the desired state of the usage
+              profile
+            properties:
+              namespaceCount:
+                description: NamespaceCount is the number of namespaces an organization
+                  with this usage profile can create per zone.
+                type: integer
+              resources:
+                additionalProperties:
+                  type: object
+                  x-kubernetes-preserve-unknown-fields: true
+                description: Resources is the set of resources which are created in
+                  each namespace for which the usage profile is applied. The key is
+                  used as the name of the resource and the value is the resource definition.
+                type: object
+            type: object
+          status:
+            description: UsageProfileStatus contains the actual state of the usage
+              profile
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}

config/crd/apiextensions.k8s.io/v1/kustomization.yaml

@@ -6,6 +6,7 @@ resources:
 - base/appuio.io_organizationmembers.yaml
 - base/appuio.io_users.yaml
 - base/appuio.io_teams.yaml
+- base/appuio.io_usageprofiles.yaml
 # +kubebuilder:scaffold:crdkustomizeresource
 
 # the following config is for teaching kustomize how to do kustomization for CRDs.

config/examples/usageprofile.yaml

@@ -0,0 +1,72 @@
+apiVersion: appuio.io/v1
+kind: UsageProfile
+metadata:
+  name: example
+spec:
+  namespaceCount: 20
+  resources:
+    organization-compute:
+      apiVersion: v1
+      kind: ResourceQuota
+      spec:
+        hard:
+          limits.cpu: "8"
+          limits.memory: 20Gi
+          pods: "45"
+          requests.cpu: "4"
+          requests.memory: 4Gi
+        scopes:
+          - NotTerminating
+    organization-compute-terminating:
+      apiVersion: v1
+      kind: ResourceQuota
+      metadata:
+        labels:
+          foo: bar
+      spec:
+        hard:
+          limits.cpu: "4"
+          limits.memory: 4Gi
+          pods: "5"
+          requests.cpu: 500m
+          requests.memory: 2Gi
+        scopes:
+        - Terminating
+    organization-objects:
+      apiVersion: v1
+      kind: ResourceQuota
+      spec:
+        hard:
+          cephfs-fspool-cluster.storageclass.storage.k8s.io/requests.storage: 25Gi
+          count/configmaps: "150"
+          count/jobs.batch: "150"
+          count/replicationcontrollers: "100"
+          count/secrets: "150"
+          count/services: "20"
+          count/services.loadbalancers: "0"
+          count/services.nodeports: "0"
+          limits.ephemeral-storage: 500Mi
+          localblock-storage.storageclass.storage.k8s.io/persistentvolumeclaims: "0"
+          openshift.io/imagestreams: "20"
+          openshift.io/imagestreamtags: "50"
+          persistentvolumeclaims: "10"
+          rbd-storagepool-cluster.storageclass.storage.k8s.io/requests.storage: 25Gi
+          requests.ephemeral-storage: 250Mi
+          requests.storage: 1000Gi
+    deny-egress-tcp-25:
+      apiVersion: networking.k8s.io/v1
+      kind: NetworkPolicy
+      metadata:
+        annotations:
+          description: "Deny egress traffic to all hosts on ports 25"
+      spec:
+        podSelector: {}
+        egress:
+          - to:
+              - ipBlock:
+                  cidr: 0.0.0.0/0
+            ports:
+              - protocol: TCP
+                port: 25
+        policyTypes:
+          - Egress