Build arm64 images and setup cluster role aggregate labels (#36)

Author: treydock

.github/workflows/release.yaml

@@ -40,6 +40,7 @@ jobs:
         id: docker_build
         uses: docker/build-push-action@v7
         with:
+          platforms: linux/amd64,linux/arm64
           context: .
           file: ./Dockerfile
           push: true

Makefile

@@ -189,7 +189,7 @@ docker-push: ## Push docker image with the manager.
 # - have enabled BuildKit. More info: https://docs.docker.com/develop/develop-images/build_enhancements/
 # - be able to push the image to your registry (i.e. if you do not set a valid value via IMG=<myregistry/image:<tag>> then the export will fail)
 # To adequately provide solutions that are compatible with multiple platforms, you should consider using this option.
-PLATFORMS ?= linux/arm64,linux/amd64,linux/s390x,linux/ppc64le
+PLATFORMS ?= linux/arm64,linux/amd64
 .PHONY: docker-buildx
 docker-buildx: ## Build and push docker image for the manager for cross-platform support
 	# copy existing Dockerfile and insert --platform=${BUILDPLATFORM} into Dockerfile.cross, and preserve the original Dockerfile

charts/keycloak-cr-operator/templates/rbac/keycloakclient-admin-role.yaml

@@ -3,6 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
     {{- include "keycloak-cr-operator.labels" . | nindent 4 }}
   name: "keycloakclient-admin-role"
 rules:

charts/keycloak-cr-operator/templates/rbac/keycloakclient-editor-role.yaml

@@ -3,6 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
     {{- include "keycloak-cr-operator.labels" . | nindent 4 }}
   name: "keycloakclient-editor-role"
 rules:

charts/keycloak-cr-operator/templates/rbac/keycloakclient-viewer-role.yaml

@@ -3,6 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
+    rbac.authorization.k8s.io/aggregate-to-view: "true"
     {{- include "keycloak-cr-operator.labels" . | nindent 4 }}
   name: "keycloakclient-viewer-role"
 rules:

config/rbac/keycloakclient_admin_role.yaml

@@ -9,6 +9,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
     app.kubernetes.io/name: keycloak-cr-operator
     app.kubernetes.io/managed-by: kustomize
   name: keycloakclient-admin-role

config/rbac/keycloakclient_editor_role.yaml

@@ -9,6 +9,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
     app.kubernetes.io/name: keycloak-cr-operator
     app.kubernetes.io/managed-by: kustomize
   name: keycloakclient-editor-role

config/rbac/keycloakclient_viewer_role.yaml

@@ -9,6 +9,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
+    rbac.authorization.k8s.io/aggregate-to-view: "true"
     app.kubernetes.io/name: keycloak-cr-operator
     app.kubernetes.io/managed-by: kustomize
   name: keycloakclient-viewer-role