Add ability to provide annotations to the jobs.

config/crd/bases/raczylo.com_clusterimageexports.yaml

@@ -75,6 +75,10 @@ spec:
                 items:
                   type: string
                 type: array
+              jobAnnotations:
+                additionalProperties:
+                  type: string
+                type: object
               maxConcurrentJobs:
                 type: integer
               name:

config/crd/bases/raczylo.com_clusterimages.yaml

@@ -77,6 +77,10 @@ spec:
                 type: string
               imageNamespace:
                 type: string
+              jobAnnotations:
+                additionalProperties:
+                  type: string
+                type: object
               sha:
                 type: string
               storage:

config/default/metrics_service.yaml

@@ -2,10 +2,10 @@ apiVersion: v1
 kind: Service
 metadata:
   labels:
-    control-plane: cm-raczylo-com
+    control-plane: sa
     app.kubernetes.io/name: kubernetes-images-sync-operator
     app.kubernetes.io/managed-by: kustomize
-  name: cm-raczylo-com-metrics-service
+  name: sa-metrics-service
   namespace: system
 spec:
   ports:
@@ -14,4 +14,4 @@ spec:
       protocol: TCP
       targetPort: 8443
   selector:
-    control-plane: cm-raczylo-com
+    control-plane: sa

config/manager/manager.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: Namespace
 metadata:
   labels:
-    control-plane: cm-raczylo-com
+    control-plane: sa
     app.kubernetes.io/name: kubernetes-images-sync-operator
     app.kubernetes.io/managed-by: kustomize
   name: system
@@ -10,23 +10,23 @@ metadata:
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: cm-raczylo-com
+  name: sa
   namespace: system
   labels:
-    control-plane: cm-raczylo-com
+    control-plane: sa
     app.kubernetes.io/name: kubernetes-images-sync-operator
     app.kubernetes.io/managed-by: kustomize
 spec:
   selector:
     matchLabels:
-      control-plane: cm-raczylo-com
+      control-plane: sa
   replicas: 1
   template:
     metadata:
       annotations:
         kubectl.kubernetes.io/default-container: manager
       labels:
-        control-plane: cm-raczylo-com
+        control-plane: sa
     spec:
       # TODO(user): Uncomment the following code to configure the nodeAffinity expression
       # according to the platforms which are supported by your solution.
@@ -63,6 +63,11 @@ spec:
           args:
             - --leader-elect
             - --health-probe-bind-address=:8081
+          env:
+            - name: POD_SERVICE_ACCOUNT
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.serviceAccountName
           image: controller:latest
           name: manager
           securityContext:
@@ -91,5 +96,5 @@ spec:
             requests:
               cpu: 10m
               memory: 64Mi
-      serviceAccountName: cm-raczylo-com
+      serviceAccountName: sa
       terminationGracePeriodSeconds: 10

config/network-policy/allow-metrics-traffic.yaml

@@ -12,7 +12,7 @@ metadata:
 spec:
   podSelector:
     matchLabels:
-      control-plane: cm-raczylo-com
+      control-plane: sa
   policyTypes:
     - Ingress
   ingress:

config/prometheus/monitor.yaml

@@ -3,10 +3,10 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   labels:
-    control-plane: cm-raczylo-com
+    control-plane: sa
     app.kubernetes.io/name: kubernetes-images-sync-operator
     app.kubernetes.io/managed-by: kustomize
-  name: cm-raczylo-com-metrics-monitor
+  name: sa-metrics-monitor
   namespace: system
 spec:
   endpoints:
@@ -27,4 +27,4 @@ spec:
         insecureSkipVerify: true
   selector:
     matchLabels:
-      control-plane: cm-raczylo-com
+      control-plane: sa

config/rbac/leader_election_role_binding.yaml

@@ -11,5 +11,5 @@ roleRef:
   name: raczylo-com-leader
 subjects:
   - kind: ServiceAccount
-    name: cm-raczylo-com
+    name: sa
     namespace: system

config/rbac/metrics_auth_role_binding.yaml

@@ -8,5 +8,5 @@ roleRef:
   name: metrics-auth-raczylo
 subjects:
   - kind: ServiceAccount
-    name: cm-raczylo-com
+    name: sa
     namespace: system

config/rbac/role.yaml

@@ -2,7 +2,7 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: mr-raczylo-com
+  name: impex-mgr
 rules:
 - apiGroups:
   - ""

config/rbac/role_binding.yaml

@@ -4,12 +4,12 @@ metadata:
   labels:
     app.kubernetes.io/name: kubernetes-images-sync-operator
     app.kubernetes.io/managed-by: kustomize
-  name: mr-raczylo-combinding
+  name: impex-mgrbinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: mr-raczylo-com
+  name: impex-mgr
 subjects:
   - kind: ServiceAccount
-    name: cm-raczylo-com
+    name: sa
     namespace: system

config/rbac/service_account.yaml

@@ -4,5 +4,5 @@ metadata:
   labels:
     app.kubernetes.io/name: kubernetes-images-sync-operator
     app.kubernetes.io/managed-by: kustomize
-  name: cm-raczylo-com
+  name: sa
   namespace: system