Initial scaffolding for standalone pgAdmin implementation

Includes basic implementation for CRD, installation, and a dummy
reconciliation loop. Reconciliation is feature-gated.

Makefile

@@ -279,8 +279,14 @@ generate-crd: ## Generate crd
 		paths='./pkg/apis/...' \
 		output:dir='build/crd/pgupgrades/generated' # build/crd/{plural}/generated/{group}_{plural}.yaml
 	@
+	GOBIN='$(CURDIR)/hack/tools' ./hack/controller-generator.sh \
+		crd:crdVersions='v1' \
+		paths='./pkg/apis/...' \
+		output:dir='build/crd/pgadmins/generated' # build/crd/{plural}/generated/{group}_{plural}.yaml
+	@
 	kubectl kustomize ./build/crd/postgresclusters > ./config/crd/bases/postgres-operator.crunchydata.com_postgresclusters.yaml
 	kubectl kustomize ./build/crd/pgupgrades > ./config/crd/bases/postgres-operator.crunchydata.com_pgupgrades.yaml
+	kubectl kustomize ./build/crd/pgadmins > ./config/crd/bases/postgres-operator.crunchydata.com_pgadmins.yaml
 
 .PHONY: generate-crd-docs
 generate-crd-docs: ## Generate crd-docs

build/crd/.gitignore

@@ -1,2 +1,3 @@
 /postgresclusters/generated/
-/pgupgrades/generated/
+/pgupgrades/generated/
+/pgadmins/generated/

build/crd/pgadmins/kustomization.yaml

@@ -0,0 +1,37 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- generated/postgres-operator.crunchydata.com_pgadmins.yaml
+
+patches:
+# Remove the zero status field included by controller-gen@v0.8.0. These zero
+# values conflict with the CRD controller in Kubernetes before v1.22.
+# - https://github.com/kubernetes-sigs/controller-tools/pull/630
+# - https://pr.k8s.io/100970
+- target:
+    group: apiextensions.k8s.io
+    version: v1
+    kind: CustomResourceDefinition
+    name: pgadmins.postgres-operator.crunchydata.com
+  patch: |-
+    - op: remove
+      path: /status
+- target:
+    group: apiextensions.k8s.io
+    version: v1
+    kind: CustomResourceDefinition
+    name: pgadmins.postgres-operator.crunchydata.com
+  path: todos.yaml
+- target:
+    group: apiextensions.k8s.io
+    version: v1
+    kind: CustomResourceDefinition
+    name: pgadmins.postgres-operator.crunchydata.com
+# The version below should match the version on the PostgresCluster CRD
+  patch: |-
+    - op: add
+      path: "/metadata/labels"
+      value:
+        app.kubernetes.io/name: pgo
+        app.kubernetes.io/version: latest

build/crd/pgadmins/todos.yaml

@@ -0,0 +1,8 @@
+- op: add
+  path: /work
+  value: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+- op: copy
+  from: /work
+  path: /spec/versions/0/schema/openAPIV3Schema/properties/spec/properties/imagePullSecrets/items/properties/name/description
+- op: remove
+  path: /work

cmd/postgres-operator/main.go

@@ -31,6 +31,7 @@ import (
 	"github.com/crunchydata/postgres-operator/internal/controller/pgupgrade"
 	"github.com/crunchydata/postgres-operator/internal/controller/postgrescluster"
 	"github.com/crunchydata/postgres-operator/internal/controller/runtime"
+	"github.com/crunchydata/postgres-operator/internal/controller/standalone_pgadmin"
 	"github.com/crunchydata/postgres-operator/internal/logging"
 	"github.com/crunchydata/postgres-operator/internal/upgradecheck"
 	"github.com/crunchydata/postgres-operator/internal/util"
@@ -149,6 +150,19 @@ func addControllersToManager(mgr manager.Manager, openshift bool, log logr.Logge
 		log.Error(err, "unable to create PGUpgrade controller")
 		os.Exit(1)
 	}
+
+	if util.DefaultMutableFeatureGate.Enabled(util.StandalonePGAdmin) {
+		pgAdminReconciler := &standalone_pgadmin.PGAdminReconciler{
+			Client: mgr.GetClient(),
+			Owner:  "pgadmin-controller",
+			Scheme: mgr.GetScheme(),
+		}
+
+		if err := pgAdminReconciler.SetupWithManager(mgr); err != nil {
+			log.Error(err, "unable to create PGAdmin controller")
+			os.Exit(1)
+		}
+	}
 }
 
 func isOpenshift(cfg *rest.Config) bool {

config/crd/kustomization.yaml

@@ -4,3 +4,4 @@ kind: Kustomization
 resources:
 - bases/postgres-operator.crunchydata.com_postgresclusters.yaml
 - bases/postgres-operator.crunchydata.com_pgupgrades.yaml
+- bases/postgres-operator.crunchydata.com_pgadmins.yaml

config/manager/manager.yaml

@@ -40,6 +40,8 @@ spec:
           value: "registry.developers.crunchydata.com/crunchydata/crunchy-postgres-exporter:latest"
         - name: RELATED_IMAGE_PGUPGRADE
           value: "registry.developers.crunchydata.com/crunchydata/crunchy-upgrade:latest"
+        - name: RELATED_IMAGE_STANDALONE_PGADMIN
+          value: "registry.developers.crunchydata.com/crunchydata/crunchy-pgadmin4:ubi8-4.30-17"
         securityContext:
           allowPrivilegeEscalation: false
           capabilities: { drop: [ALL] }

config/rbac/cluster/role.yaml

@@ -102,18 +102,40 @@ rules:
 - apiGroups:
   - postgres-operator.crunchydata.com
   resources:
-  - pgupgrades
+  - pgadmins
   verbs:
+  - create
+  - delete
   - get
   - list
+  - patch
+  - update
   - watch
 - apiGroups:
   - postgres-operator.crunchydata.com
   resources:
+  - pgadmins/finalizers
   - pgupgrades/finalizers
   - postgresclusters/finalizers
   verbs:
   - update
+- apiGroups:
+  - postgres-operator.crunchydata.com
+  resources:
+  - pgadmins/status
+  verbs:
+  - get
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - postgres-operator.crunchydata.com
+  resources:
+  - pgupgrades
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - postgres-operator.crunchydata.com
   resources:

config/rbac/namespace/role.yaml

@@ -102,18 +102,40 @@ rules:
 - apiGroups:
   - postgres-operator.crunchydata.com
   resources:
-  - pgupgrades
+  - pgadmins
   verbs:
+  - create
+  - delete
   - get
   - list
+  - patch
+  - update
   - watch
 - apiGroups:
   - postgres-operator.crunchydata.com
   resources:
+  - pgadmins/finalizers
   - pgupgrades/finalizers
   - postgresclusters/finalizers
   verbs:
   - update
+- apiGroups:
+  - postgres-operator.crunchydata.com
+  resources:
+  - pgadmins/status
+  verbs:
+  - get
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - postgres-operator.crunchydata.com
+  resources:
+  - pgupgrades
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - postgres-operator.crunchydata.com
   resources: