feat(devenv): move to controller folder and remove reqs

Signed-off-by: Alessio Pragliola <seth.pro@gmail.com>

Author: Al-Pragliola

devenv/.gitignore

@@ -0,0 +1,2 @@
+bin/*
+tilt_config.json

devenv/Makefile

@@ -0,0 +1,60 @@
+detected_OS := $(shell uname -s)
+real_OS := $(detected_OS)
+arch := $(shell uname -m)
+goarch := $(shell go env GOARCH)
+ifeq ($(detected_OS),Darwin)
+	detected_OS := mac
+	real_OS := darwin
+endif
+ifeq ($(detected_OS),Linux)
+	detected_OS := linux
+	real_OS := linux
+endif
+
+## Cleanup targets
+
+.PHONY: cleanup-crds
+cleanup-crds:
+	@echo "Cleaning up CRDs..."
+	@kubectl delete -f ../config/crd/bases/ || true
+
+## Requirements
+
+CERT_MANAGER_VERSION := 1.17.1
+
+.PHONY: cmctl check-cert-manager
+check-cert-manager:
+	@echo "Checking if cert-manager is installed and ready..."
+	@$(LOCALBIN)/cmctl check api > /dev/null 2>&1 || (printf "cert-manager is not installed or is not ready yet, please install cert-manager first or wait for it to be ready.\nYou can install cert-manager by running the following command:\n\nkubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v$(CERT_MANAGER_VERSION)/cert-manager.yaml\n\n" && exit 1)
+	@echo "cert-manager is installed and ready."
+
+## Location to install dependencies to
+LOCALBIN ?= $(shell pwd)/bin
+$(LOCALBIN):
+	mkdir -p $(LOCALBIN)
+
+## Tool Binaries
+TILT ?= $(LOCALBIN)/tilt
+CMCTL ?= $(LOCALBIN)/cmctl
+
+## Tool Versions
+TILT_VERSION := 0.33.22
+CMCTL_VERSION := 2.1.1
+
+.PHONY: cmctl
+.PHONY: $(CMCTL)
+cmctl: $(CMCTL)
+$(CMCTL): $(LOCALBIN)
+	test -s $(LOCALBIN)/cmctl || curl -fsSL https://github.com/cert-manager/cmctl/releases/download/v$(CMCTL_VERSION)/cmctl_$(detected_OS)_$(goarch).tar.gz | tar -xz -C $(LOCALBIN) cmctl
+
+.PHONY: tilt
+.PHONY: $(TILT)
+tilt: $(TILT)
+$(TILT): $(LOCALBIN)
+	test -s $(LOCALBIN)/tilt || curl -fsSL https://github.com/tilt-dev/tilt/releases/download/v$(TILT_VERSION)/tilt.$(TILT_VERSION).$(detected_OS).$(arch).tar.gz | tar -xz -C $(LOCALBIN) tilt
+
+tilt-up: tilt check-cert-manager
+	$(LOCALBIN)/tilt up
+
+tilt-down: tilt cleanup-crds
+	$(LOCALBIN)/tilt down

devenv/Tiltfile

@@ -0,0 +1,122 @@
+load("ext://restart_process", "docker_build_with_restart")
+
+load_dynamic("./configs/tiltfiles/Tiltfile.setup")
+
+config.define_string_list("services")
+
+parsed_config = config.parse()
+
+for service in parsed_config.get("services", []):
+  load_dynamic("./configs/tiltfiles/Tiltfile.%s" % (service))
+
+manifests = kustomize("../config/default")
+
+objects = decode_yaml_stream(manifests)
+
+for o in objects:
+    if o["kind"] == "Deployment" and o.get("metadata").get("name") in ["workspace-controller-controller-manager"]:
+        o["spec"]["template"]["spec"]["securityContext"] = {"runAsNonRoot": False, "readOnlyRootFilesystem": False}
+        o["spec"]["template"]["spec"]["containers"][0]["imagePullPolicy"] = "Always"
+
+overridden_manifests = encode_yaml_stream(objects)
+
+k8s_yaml(overridden_manifests, allow_duplicates=True)
+
+local_resource(
+    "cert-manager-req-check",
+    serve_cmd="sleep infinity",
+    labels="requirements",
+    readiness_probe=probe(
+        exec=exec_action(
+            command=["/bin/sh", "-c", "./bin/cmctl check api"]
+        ), initial_delay_secs=5, timeout_secs=60
+    )
+)
+
+k8s_resource(
+    new_name="certs",
+    objects=[
+        "workspace-controller-serving-cert:certificate",
+        "workspace-controller-selfsigned-issuer:issuer"
+    ],
+    labels="controller",
+    resource_deps=[
+        "controller-namespace",
+        "cert-manager-req-check"
+    ]
+)
+
+k8s_resource(
+    new_name="reqs",
+    objects=[
+       "workspace-controller-controller-manager:serviceaccount",
+       "workspace-controller-leader-election-role:role",
+       "workspace-controller-manager-role:clusterrole",
+       "workspace-controller-workspace-editor-role:clusterrole",
+       "workspace-controller-workspace-viewer-role:clusterrole",
+       "workspace-controller-workspacekind-editor-role:clusterrole",
+       "workspace-controller-workspacekind-viewer-role:clusterrole",
+       "workspace-controller-leader-election-rolebinding:rolebinding",
+       "workspace-controller-manager-rolebinding:clusterrolebinding",
+       "workspace-controller-validating-webhook-configuration:validatingwebhookconfiguration"
+    ],
+    labels="controller",
+    resource_deps=[
+        "controller-namespace"
+    ]
+)
+
+k8s_resource(
+    new_name="crds",
+    objects=[
+       "workspacekinds.kubeflow.org:customresourcedefinition",
+       "workspaces.kubeflow.org:customresourcedefinition"
+    ],
+    labels="controller",
+    resource_deps=[
+        "controller-namespace",
+    ]
+)
+
+k8s_resource(
+    new_name="controller-namespace",
+    objects=["workspace-controller-system:Namespace:default"],
+    labels="requirements"
+)
+
+k8s_resource(
+    workload="workspace-controller-controller-manager",
+    new_name="controller",
+    labels="controller",
+    resource_deps=[
+        "controller-namespace",
+        "cert-manager-req-check",
+        "certs"
+    ]
+)
+
+local_resource(
+    "manager-bin",
+    "CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o bin/manager cmd/main.go",
+    dir = "../",
+    deps = [
+        "../cmd",
+        "../internal",
+        "../go.mod",
+        "../go.sum",
+    ],
+    labels="controller",
+)
+
+docker_build_with_restart(
+    "ghcr.io/kubeflow/notebooks/workspace-controller",
+    context = "../",
+    dockerfile = "../tilt.dockerfile",
+    entrypoint = ["/manager"],
+    only=[
+      "bin/",
+    ],
+    live_update = [
+        sync("../bin/manager", "/manager"),
+    ],
+)

devenv/configs/tiltfiles/cert-manager.tiltfile

@@ -1,8 +1,4 @@
-load("ext://namespace", "namespace_create")
-
 # Disable analytics
 analytics_settings(False)
 
 update_settings(k8s_upsert_timeout_secs = 120)
-
-namespace_create("workspace-controller-system")