ce7cb702218693d08ea6d83464d2457c9250027c

vendor/platform/quay-operator/catalog-source.yaml

@@ -0,0 +1,12 @@
+apiVersion: operators.coreos.com/v1alpha1
+kind: CatalogSource
+metadata:
+  name: operatorhubio-catalog
+  namespace: olm
+spec:
+  sourceType: grpc
+  image: zot.quorate.internal/olm/project-quay-catalog@sha256:e0a52caf62a92bc8a897d9a819aa19b160371e5160a6f342a2968cc92b8b8d44
+  displayName: Project Quay Catalog
+  publisher: Quorate
+  grpcPodConfig:
+    securityContextConfig: restricted

vendor/platform/quay-operator/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - catalog-source.yaml
+  - operator-group.yaml
+  - subscription.yaml
+  - network-policies.yaml

vendor/platform/quay-operator/namespace.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: quay
+  labels:
+    gateway.quorate.internal/allow-internal: "true"
+    pod-security.kubernetes.io/enforce: baseline
+    pod-security.kubernetes.io/enforce-version: latest
+    pod-security.kubernetes.io/audit: restricted
+    pod-security.kubernetes.io/audit-version: latest
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/warn-version: latest

vendor/platform/quay-operator/network-policies.yaml

@@ -0,0 +1,36 @@
+---
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: quay-operator-bootstrap
+  namespace: quay
+spec:
+  endpointSelector: {}
+  ingress:
+    - fromEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: quay
+    - fromEntities:
+        - host
+        - kube-apiserver
+        - remote-node
+  egress:
+    - toEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: quay
+    - toEntities:
+        - kube-apiserver
+      toPorts:
+        - ports:
+            - port: "6443"
+              protocol: TCP
+    - toEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: kube-system
+            k8s-app: kube-dns
+      toPorts:
+        - ports:
+            - port: "53"
+              protocol: UDP
+            - port: "53"
+              protocol: TCP

vendor/platform/quay-operator/operator-group.yaml

@@ -0,0 +1,8 @@
+apiVersion: operators.coreos.com/v1
+kind: OperatorGroup
+metadata:
+  name: quay-operator
+  namespace: quay
+spec:
+  targetNamespaces:
+    - quay

vendor/platform/quay-operator/subscription.yaml

@@ -0,0 +1,16 @@
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: project-quay
+  namespace: quay
+spec:
+  channel: stable-3.18
+  installPlanApproval: Automatic
+  name: project-quay
+  source: operatorhubio-catalog
+  sourceNamespace: olm
+  startingCSV: quay-operator.v3.18.2
+  config:
+    env:
+      - name: RELATED_IMAGE_COMPONENT_QUAY
+        value: zot.quorate.internal/quay/quay@sha256:b99085687abf7af63c8277f7ca1e29adf4a1162fa3f68dbfef31f87b3ebe3c50