Allow having one operator for all namespaces

manifests/arango-deployment.yaml

@@ -34,6 +34,24 @@ rules:
     - apiGroups: ["storage.k8s.io"]
       resources: ["storageclasses"]
       verbs: ["get", "list"]
+    - apiGroups: ["database.arangodb.com"]
+      resources: ["arangodeployments"]
+      verbs: ["*"]
+    - apiGroups: [""]
+      resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts"]
+      verbs: ["*"]
+    - apiGroups: ["apps"]
+      resources: ["deployments", "replicasets"]
+      verbs: ["get"]
+    - apiGroups: ["policy"]
+      resources: ["poddisruptionbudgets"]
+      verbs: ["*"]
+    - apiGroups: ["backup.arangodb.com"]
+      resources: ["arangobackuppolicies", "arangobackups"]
+      verbs: ["get", "list", "watch"]
+    - apiGroups: ["monitoring.coreos.com"]
+      resources: ["servicemonitors"]
+      verbs: ["get", "create", "delete"]
 ---
 # Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -58,7 +76,7 @@ subjects:
 ---
 # Source: kube-arangodb/templates/deployment-operator/default-role.yaml
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
     name: arango-deployment-operator-rbac-default
     namespace: default
@@ -73,41 +91,9 @@ rules:
       resources: ["pods"]
       verbs: ["get"]
 ---
-# Source: kube-arangodb/templates/deployment-operator/role.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-    name: arango-deployment-operator-rbac-deployment
-    namespace: default
-    labels:
-        app.kubernetes.io/name: kube-arangodb
-        helm.sh/chart: kube-arangodb-1.0.3
-        app.kubernetes.io/managed-by: Tiller
-        app.kubernetes.io/instance: deployment
-        release: deployment
-rules:
-    - apiGroups: ["database.arangodb.com"]
-      resources: ["arangodeployments"]
-      verbs: ["*"]
-    - apiGroups: [""]
-      resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts"]
-      verbs: ["*"]
-    - apiGroups: ["apps"]
-      resources: ["deployments", "replicasets"]
-      verbs: ["get"]
-    - apiGroups: ["policy"]
-      resources: ["poddisruptionbudgets"]
-      verbs: ["*"]
-    - apiGroups: ["backup.arangodb.com"]
-      resources: ["arangobackuppolicies", "arangobackups"]
-      verbs: ["get", "list", "watch"]
-    - apiGroups: ["monitoring.coreos.com"]
-      resources: ["servicemonitors"]
-      verbs: ["get", "create", "delete", "update"]
----
 # Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
     name: arango-deployment-operator-rbac-default
     namespace: default
@@ -119,34 +105,14 @@ metadata:
         release: deployment
 roleRef:
     apiGroup: rbac.authorization.k8s.io
-    kind: Role
+    kind: ClusterRole
     name: arango-deployment-operator-rbac-default
 subjects:
     - kind: ServiceAccount
       name: default
       namespace: default
 ---
-# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-    name: arango-deployment-operator-rbac-deployment
-    namespace: default
-    labels:
-        app.kubernetes.io/name: kube-arangodb
-        helm.sh/chart: kube-arangodb-1.0.3
-        app.kubernetes.io/managed-by: Tiller
-        app.kubernetes.io/instance: deployment
-        release: deployment
-roleRef:
-    apiGroup: rbac.authorization.k8s.io
-    kind: Role
-    name: arango-deployment-operator-rbac-deployment
-subjects:
-    - kind: ServiceAccount
-      name: arango-deployment-operator
-      namespace: default
----
+
 # Source: kube-arangodb/templates/service.yaml
 apiVersion: v1
 kind: Service

pkg/deployment/informers.go

@@ -25,6 +25,7 @@ package deployment
 import (
 	v1 "k8s.io/api/core/v1"
 	"k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/client-go/tools/cache"
 
 	"github.com/arangodb/kube-arangodb/pkg/util/k8sutil"
@@ -49,7 +50,7 @@ func (d *Deployment) listenForPodEvents(stopCh <-chan struct{}) {
 		d.deps.Log,
 		d.deps.KubeCli.CoreV1().RESTClient(),
 		"pods",
-		d.apiObject.GetNamespace(),
+		metav1.NamespaceAll,
 		&v1.Pod{},
 		cache.ResourceEventHandlerFuncs{
 			AddFunc: func(obj interface{}) {
@@ -91,7 +92,7 @@ func (d *Deployment) listenForPVCEvents(stopCh <-chan struct{}) {
 		d.deps.Log,
 		d.deps.KubeCli.CoreV1().RESTClient(),
 		"persistentvolumeclaims",
-		d.apiObject.GetNamespace(),
+		metav1.NamespaceAll,
 		&v1.PersistentVolumeClaim{},
 		cache.ResourceEventHandlerFuncs{
 			AddFunc: func(obj interface{}) {
@@ -133,7 +134,7 @@ func (d *Deployment) listenForSecretEvents(stopCh <-chan struct{}) {
 		d.deps.Log,
 		d.deps.KubeCli.CoreV1().RESTClient(),
 		"secrets",
-		d.apiObject.GetNamespace(),
+		metav1.NamespaceAll,
 		&v1.Secret{},
 		cache.ResourceEventHandlerFuncs{
 			// Note: For secrets we look at all of them because they do not have to be owned by this deployment.
@@ -176,7 +177,7 @@ func (d *Deployment) listenForServiceEvents(stopCh <-chan struct{}) {
 		d.deps.Log,
 		d.deps.KubeCli.CoreV1().RESTClient(),
 		"services",
-		d.apiObject.GetNamespace(),
+		metav1.NamespaceAll,
 		&v1.Service{},
 		cache.ResourceEventHandlerFuncs{
 			AddFunc: func(obj interface{}) {

pkg/operator/operator_deployment.go

@@ -28,6 +28,7 @@ import (
 	deploymentType "github.com/arangodb/kube-arangodb/pkg/apis/deployment"
 
 	"github.com/pkg/errors"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	kwatch "k8s.io/apimachinery/pkg/watch"
 	"k8s.io/client-go/tools/cache"
 
@@ -52,7 +53,7 @@ func (o *Operator) runDeployments(stop <-chan struct{}) {
 		o.log,
 		o.Dependencies.CRCli.DatabaseV1().RESTClient(),
 		deploymentType.ArangoDeploymentResourcePlural,
-		o.Config.Namespace,
+		metav1.NamespaceAll,
 		&api.ArangoDeployment{},
 		cache.ResourceEventHandlerFuncs{
 			AddFunc:    o.onAddArangoDeployment,

pkg/operator/operator_deployment_relication.go

@@ -28,6 +28,7 @@ import (
 	replication2 "github.com/arangodb/kube-arangodb/pkg/apis/replication"
 
 	"github.com/pkg/errors"
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	kwatch "k8s.io/apimachinery/pkg/watch"
 	"k8s.io/client-go/tools/cache"
 
@@ -52,7 +53,7 @@ func (o *Operator) runDeploymentReplications(stop <-chan struct{}) {
 		o.log,
 		o.Dependencies.CRCli.ReplicationV1().RESTClient(),
 		replication2.ArangoDeploymentReplicationResourcePlural,
-		o.Config.Namespace,
+		v1.NamespaceAll,
 		&api.ArangoDeploymentReplication{},
 		cache.ResourceEventHandlerFuncs{
 			AddFunc:    o.onAddArangoDeploymentReplication,

pkg/util/k8sutil/informer.go

@@ -44,7 +44,6 @@ func NewResourceWatcher(log zerolog.Logger, getter cache.Getter, resource, names
 		resource,
 		namespace,
 		fields.Everything())
-
 	_, informer := cache.NewIndexerInformer(source, objType, 0, cache.ResourceEventHandlerFuncs{
 		AddFunc: func(obj interface{}) {
 			defer func() {