feat(cloudnativepg_operator): upgrade 1.23.2 -> 1.26.0

https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/1535f3c1742525b93f4f8bbb7dd37e42e122f41f/releases/cnpg-1.26.0.yaml

ref: #15 #13 infrastructure/argo#3

Author: jon-nfc

manifests/cloudnativepg-operator/.gitignore

@@ -0,0 +1 @@
+base/Namespace**

manifests/cloudnativepg-operator/base/ClusterRole-cnpg-database-editor-role.yaml

@@ -0,0 +1,27 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: cloudnative-pg-kubebuilderv4
+  name: cnpg-database-editor-role
+rules:
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - databases
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - databases/status
+    verbs:
+      - get

manifests/cloudnativepg-operator/base/ClusterRole-cnpg-database-viewer-role.yaml

@@ -0,0 +1,23 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: cloudnative-pg-kubebuilderv4
+  name: cnpg-database-viewer-role
+rules:
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - databases
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - databases/status
+    verbs:
+      - get

manifests/cloudnativepg-operator/base/ClusterRole-cnpg-manager.yaml

@@ -8,6 +8,8 @@ rules:
       - ''
     resources:
       - configmaps
+      - secrets
+      - services
     verbs:
       - create
       - delete
@@ -20,6 +22,7 @@ rules:
       - ''
     resources:
       - configmaps/status
+      - secrets/status
     verbs:
       - get
       - patch
@@ -43,27 +46,7 @@ rules:
       - ''
     resources:
       - persistentvolumeclaims
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - watch
-  - apiGroups:
-      - ''
-    resources:
       - pods
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - watch
-  - apiGroups:
-      - ''
-    resources:
       - pods/exec
     verbs:
       - create
@@ -78,26 +61,6 @@ rules:
       - pods/status
     verbs:
       - get
-  - apiGroups:
-      - ''
-    resources:
-      - secrets
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - ''
-    resources:
-      - secrets/status
-    verbs:
-      - get
-      - patch
-      - update
   - apiGroups:
       - ''
     resources:
@@ -109,44 +72,14 @@ rules:
       - patch
       - update
       - watch
-  - apiGroups:
-      - ''
-    resources:
-      - services
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
   - apiGroups:
       - admissionregistration.k8s.io
     resources:
       - mutatingwebhookconfigurations
-    verbs:
-      - get
-      - list
-      - patch
-      - update
-  - apiGroups:
-      - admissionregistration.k8s.io
-    resources:
       - validatingwebhookconfigurations
     verbs:
       - get
-      - list
       - patch
-      - update
-  - apiGroups:
-      - apiextensions.k8s.io
-    resources:
-      - customresourcedefinitions
-    verbs:
-      - get
-      - list
-      - update
   - apiGroups:
       - apps
     resources:
@@ -205,6 +138,12 @@ rules:
       - postgresql.cnpg.io
     resources:
       - backups
+      - clusters
+      - databases
+      - poolers
+      - publications
+      - scheduledbackups
+      - subscriptions
     verbs:
       - create
       - delete
@@ -217,6 +156,10 @@ rules:
       - postgresql.cnpg.io
     resources:
       - backups/status
+      - databases/status
+      - publications/status
+      - scheduledbackups/status
+      - subscriptions/status
     verbs:
       - get
       - patch
@@ -225,40 +168,6 @@ rules:
       - postgresql.cnpg.io
     resources:
       - clusterimagecatalogs
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-      - postgresql.cnpg.io
-    resources:
-      - clusters
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - postgresql.cnpg.io
-    resources:
-      - clusters/finalizers
-    verbs:
-      - update
-  - apiGroups:
-      - postgresql.cnpg.io
-    resources:
-      - clusters/status
-    verbs:
-      - get
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - postgresql.cnpg.io
-    resources:
       - imagecatalogs
     verbs:
       - get
@@ -267,64 +176,24 @@ rules:
   - apiGroups:
       - postgresql.cnpg.io
     resources:
-      - poolers
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - postgresql.cnpg.io
-    resources:
+      - clusters/finalizers
       - poolers/finalizers
     verbs:
       - update
   - apiGroups:
       - postgresql.cnpg.io
     resources:
+      - clusters/status
       - poolers/status
     verbs:
       - get
       - patch
       - update
       - watch
-  - apiGroups:
-      - postgresql.cnpg.io
-    resources:
-      - scheduledbackups
-    verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - postgresql.cnpg.io
-    resources:
-      - scheduledbackups/status
-    verbs:
-      - get
-      - patch
-      - update
   - apiGroups:
       - rbac.authorization.k8s.io
     resources:
       - rolebindings
-    verbs:
-      - create
-      - get
-      - list
-      - patch
-      - update
-      - watch
-  - apiGroups:
-      - rbac.authorization.k8s.io
-    resources:
       - roles
     verbs:
       - create

manifests/cloudnativepg-operator/base/ClusterRole-cnpg-publication-editor-role.yaml

@@ -0,0 +1,27 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: cloudnative-pg-kubebuilderv4
+  name: cnpg-publication-editor-role
+rules:
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - publications
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - publications/status
+    verbs:
+      - get

manifests/cloudnativepg-operator/base/ClusterRole-cnpg-publication-viewer-role.yaml

@@ -0,0 +1,23 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: cloudnative-pg-kubebuilderv4
+  name: cnpg-publication-viewer-role
+rules:
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - publications
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - publications/status
+    verbs:
+      - get

manifests/cloudnativepg-operator/base/ClusterRole-cnpg-subscription-editor-role.yaml

@@ -0,0 +1,27 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/managed-by: kustomize
+    app.kubernetes.io/name: cloudnative-pg-kubebuilderv4
+  name: cnpg-subscription-editor-role
+rules:
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - subscriptions
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - postgresql.cnpg.io
+    resources:
+      - subscriptions/status
+    verbs:
+      - get