feat(deployment): add ExtraVolumes and ExtraVolumeMounts to DeploymentSpec (#118)

* chore: update build submodule

* feat(deployment): add Volumes and ExtraVolumes to `PodSpec`

* chore: update build submodule

* chore: go mod tidy

* chore: run `task generate`

* fix: default permissions  on `ClusterProfile` during Init job

* chore: update build submodule

Author: maximiliantech

api/crds/manifests/openmcp.cloud_clusterproviders.yaml

@@ -17,6 +17,7 @@ limitations under the License.
 package v1alpha1
 
 import (
+	corev1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 )
 
@@ -45,6 +46,24 @@ type DeploymentSpec struct {
 	// +kubebuilder:validation:Enum=DEBUG;INFO;ERROR
 	// +kubebuilder:default=INFO
 	Verbosity string `json:"verbosity,omitempty"`
+
+	// List of additional volumes that are mounted in the main container.
+	// More info: https://kubernetes.io/docs/concepts/storage/volumes
+	// +optional
+	// +patchMergeKey=name
+	// +patchStrategy=merge,retainKeys
+	// +listType=map
+	// +listMapKey=name
+	ExtraVolumes []corev1.Volume `json:"extraVolumes,omitempty" patchStrategy:"merge,retainKeys" patchMergeKey:"name"`
+
+	// List of additional volume mounts that are mounted in the main container.
+	// Cannot be updated.
+	// +optional
+	// +patchMergeKey=mountPath
+	// +patchStrategy=merge
+	// +listType=map
+	// +listMapKey=mountPath
+	ExtraVolumeMounts []corev1.VolumeMount `json:"extraVolumeMounts,omitempty" patchStrategy:"merge" patchMergeKey:"mountPath"`
 }
 
 // DeploymentStatus defines the observed state of a provider.

api/crds/manifests/openmcp.cloud_platformservices.yaml

@@ -75,11 +75,13 @@ func (m *deploymentMutator) Mutate(d *appsv1.Deployment) error {
 							"--verbosity=" + m.values.Verbosity(),
 							"--provider-name=" + m.values.provider.GetName(),
 						},
-						Env: env,
+						Env:          env,
+						VolumeMounts: m.values.deploymentSpec.ExtraVolumeMounts,
 					},
 				},
 				ImagePullSecrets:   m.values.ImagePullSecrets(),
 				ServiceAccountName: m.values.NamespacedDefaultResourceName(),
+				Volumes:            m.values.deploymentSpec.ExtraVolumes,
 			},
 		},
 	}

api/crds/manifests/openmcp.cloud_serviceproviders.yaml

@@ -50,7 +50,7 @@ func newInitClusterRoleMutator(values *Values) resources.Mutator[*rbac.ClusterRo
 			},
 			{
 				APIGroups: []string{"clusters.openmcp.cloud"},
-				Resources: []string{"accessrequests", "clusterrequests"},
+				Resources: []string{"accessrequests", "clusterrequests", "clusterprofiles"},
 				Verbs:     []string{"get", "list", "watch", "create", "update", "patch", "delete"},
 			},
 		},