[CORE-11082] Adding ocp-bpf.tgz to the release process.

Author: lucastigera

Makefile

@@ -184,6 +184,9 @@ helm-index:
 bin/ocp.tgz: manifests/ocp/ bin/yq
 	tar czvf $@ -C manifests/ ocp
 
+bin/ocp-bpf.tgz: manifests/ocp-bpf/ bin/yq
+	tar czvf $@ -C manifests/ ocp-bpf
+
 ## Generates release notes for the given version.
 .PHONY: release-notes
 release-notes:

hack/postrelease/golang/tests/oss/github/calico/github_calico_test.go

@@ -28,6 +28,7 @@ var expectedCalicoAssets = []string{
 	"install-calico-windows.ps1",
 	"metadata.yaml",
 	"ocp.tgz",
+	"ocp-bpf.tgz",
 	"release-%s.tgz",
 	"SHA256SUMS",
 	"tigera-operator-%s.tgz",

manifests/generate.sh

@@ -110,6 +110,8 @@ ${HELM} template \
 # The first two lines are a newline and a yaml separator - remove them.
 find ocp/tigera-operator -name "*.yaml" | xargs sed -i -e 1,2d
 mv $(find ocp/tigera-operator -name "*.yaml") ocp/ && rm -r ocp/tigera-operator
+# Copy the OCP manifests to a new directory for BPF dataplane, without overwriting existing files in the destination.
+cp -rn ocp/ ocp-bpf/
 
 ##########################################################################
 # Build Calico manifest used for in-repo testing. This is largely the same as the

manifests/ocp-bpf/.gitattributes

@@ -0,0 +1,3 @@
+crd*.yaml          linguist-generated=true
+operator*crd.yaml  linguist-generated=true
+02*.yaml           linguist-generated=true

manifests/ocp-bpf/00-namespace-calico-apiserver.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: calico-apiserver
+  annotations:
+    openshift.io/node-selector: ""
+  labels:
+    name: calico-apiserver
+    security.openshift.io/scc.podSecurityLabelSync: "false"
+    pod-security.kubernetes.io/audit: restricted
+    pod-security.kubernetes.io/enforce: restricted
+    pod-security.kubernetes.io/warn: restricted

manifests/ocp-bpf/00-namespace-calico-system.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: calico-system
+  annotations:
+    openshift.io/node-selector: ""
+  labels:
+    name: calico-system
+    security.openshift.io/scc.podSecurityLabelSync: "false"
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/warn: privileged

manifests/ocp-bpf/00-namespace-tigera-operator.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: tigera-operator
+  annotations:
+    openshift.io/node-selector: ""
+  labels:
+    name: tigera-operator
+    openshift.io/run-level: "0"

manifests/ocp-bpf/01-configmap-kubernetes-services-endpoint.yaml

@@ -0,0 +1,8 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: kubernetes-services-endpoint
+  namespace: tigera-operator
+data:
+  KUBERNETES_SERVICE_HOST: "api.<cluster_name>.<base_domain>"
+  KUBERNETES_SERVICE_PORT: "6443"

manifests/ocp-bpf/01-cr-apiserver.yaml

@@ -0,0 +1,8 @@
+# This section configures the Calico API server.
+# For more information see {{site.url}}/{{page.version}}/reference/installation/api#operator.tigera.io/v1.APIServer
+# and {{site.url}}/{{page.version}}/getting-started/kubernetes/apiserver-preview
+apiVersion: operator.tigera.io/v1
+kind: APIServer
+metadata:
+  name: default
+spec: {}

manifests/ocp-bpf/01-cr-installation.yaml

@@ -0,0 +1,17 @@
+# This section includes Calico installation configuration.
+apiVersion: operator.tigera.io/v1
+kind: Installation
+metadata:
+  name: default
+spec:
+  calicoNetwork:
+    linuxDataplane: BPF
+  variant: Calico
+
+  # List of image pull secrets to use when installing images from a container registry.
+  # If specified, secrets must be created in the `tigera-operator` namespace.
+  #imagePullSecrets:
+  #  - name: calico-pull-secret
+
+  # Registry to use for pulling Calico images.
+  # registry: <my-registry>

manifests/ocp-bpf/cluster-network-operator.yaml

@@ -0,0 +1,16 @@
+apiVersion: operator.openshift.io/v1
+kind: Network
+metadata:
+  creationTimestamp: null
+  name: cluster
+spec:
+  clusterNetwork:
+  - cidr: 10.128.0.0/14
+    hostPrefix: 23
+  externalIP:
+    policy: {}
+  networkType: Calico
+  deployKubeProxy: false
+  serviceNetwork:
+  - 172.30.0.0/16
+status: {}