apiVersion: operators.coreos.com/v1alpha1
kind: ClusterServiceVersion
metadata:
  annotations:
    alm-examples: |-
      [
        {
          "apiVersion": "fileintegrity.openshift.io/v1alpha1",
          "kind": "FileIntegrity",
          "metadata": {
            "name": "example-fileintegrity",
            "namespace": "openshift-file-integrity"
          },
          "spec": {
            "config": {},
            "debug": false
          }
        }
      ]
    capabilities: Seamless Upgrades
    categories: Monitoring,Security
    olm.skipRange: '>=0.1.6 <0.1.13'
    operatorframework.io/cluster-monitoring: "true"
    operatorframework.io/suggested-namespace: openshift-file-integrity
    operators.openshift.io/infrastructure-features: '["Disconnected"]'
    repository: https://github.com/openshift/file-integrity-operator
  name: file-integrity-operator.v0.1.13
  namespace: placeholder
spec:
  apiservicedefinitions: {}
  customresourcedefinitions:
    owned:
    - description: FileIntegrity is the Schema for the fileintegrities API
      kind: FileIntegrity
      name: fileintegrities.fileintegrity.openshift.io
      version: v1alpha1
    - description: FileIntegrityNodeStatus defines the status of a specific node
      kind: FileIntegrityNodeStatus
      name: fileintegritynodestatuses.fileintegrity.openshift.io
      version: v1alpha1
  description: An operator that manages file integrity checks on nodes.
  displayName: File Integrity Operator
  icon:
  - base64data: [encoded data, 18564 characters]
    mediatype: image/png
  install:
    spec:
      clusterPermissions:
      - rules:
        - apiGroups:
          - ""
          resources:
          - nodes
          verbs:
          - get
          - list
          - watch
        serviceAccountName: file-integrity-operator
      deployments:
      - name: file-integrity-operator
        spec:
          replicas: 1
          selector:
            matchLabels:
              name: file-integrity-operator
          strategy: {}
          template:
            metadata:
              labels:
                name: file-integrity-operator
            spec:
              containers:
              - args:
                - operator
                command:
                - file-integrity-operator
                env:
                - name: WATCH_NAMESPACE
                  valueFrom:
                    fieldRef:
                      fieldPath: metadata.annotations['olm.targetNamespaces']
                - name: POD_NAME
                  valueFrom:
                    fieldRef:
                      fieldPath: metadata.name
                - name: OPERATOR_NAME
                  value: file-integrity-operator
                - name: RELATED_IMAGE_AIDE
                  value: quay.io/file-integrity-operator/aide:0.1.13
                - name: RELATED_IMAGE_OPERATOR
                  value: quay.io/file-integrity-operator/file-integrity-operator:0.1.13
                image: quay.io/file-integrity-operator/file-integrity-operator:0.1.13
                imagePullPolicy: Always
                name: file-integrity-operator
                resources: {}
              nodeSelector:
                node-role.kubernetes.io/master: ""
              serviceAccountName: file-integrity-operator
              tolerations:
              - effect: NoSchedule
                key: node-role.kubernetes.io/master
                operator: Exists
              - effect: NoExecute
                key: node.kubernetes.io/unreachable
                operator: Exists
                tolerationSeconds: 120
              - effect: NoExecute
                key: node.kubernetes.io/not-ready
                operator: Exists
                tolerationSeconds: 120
      permissions:
      - rules:
        - apiGroups:
          - ""
          resources:
          - pods
          - services
          - services/finalizers
          - endpoints
          - persistentvolumeclaims
          - events
          - configmaps
          - secrets
          verbs:
          - '*'
        - apiGroups:
          - apps
          resources:
          - deployments
          - daemonsets
          - replicasets
          - statefulsets
          verbs:
          - '*'
        - apiGroups:
          - monitoring.coreos.com
          resources:
          - servicemonitors
          verbs:
          - get
          - create
        - apiGroups:
          - apps
          resourceNames:
          - file-integrity-operator
          resources:
          - deployments/finalizers
          verbs:
          - update
        - apiGroups:
          - ""
          resources:
          - pods
          verbs:
          - get
        - apiGroups:
          - apps
          resources:
          - replicasets
          verbs:
          - get
        - apiGroups:
          - fileintegrity.openshift.io
          resources:
          - '*'
          verbs:
          - '*'
        - apiGroups:
          - security.openshift.io
          resourceNames:
          - privileged
          resources:
          - securitycontextconstraints
          verbs:
          - use
        serviceAccountName: file-integrity-operator
      - rules:
        - apiGroups:
          - ""
          resources:
          - events
          - configmaps
          verbs:
          - create
        - apiGroups:
          - fileintegrity.openshift.io
          resources:
          - fileintegrities
          verbs:
          - get
          - watch
        - apiGroups:
          - security.openshift.io
          resourceNames:
          - privileged
          resources:
          - securitycontextconstraints
          verbs:
          - use
        serviceAccountName: file-integrity-daemon
    strategy: deployment
  installModes:
  - supported: true
    type: OwnNamespace
  - supported: true
    type: SingleNamespace
  - supported: false
    type: MultiNamespace
  - supported: false
    type: AllNamespaces
  keywords:
  - Integrity
  - security
  links:
  - name: File Integrity Operator
    url: https://file-integrity-operator.domain
  maintainers:
  - email: mrogers@redhat.com
    name: Matt Rogers
  maturity: alpha
  provider:
    name: Red Hat
    url: https://github.com/openshift/file-integrity-operator
  version: 0.1.13
