Add TLS options to Ingresses

use defaultIngressTls and siteMappings.tls to configure whether a TLS entry should be added to the Ingresses, and which secret to use.

New ingress builder onlylang

Optionally use an ingress builder for URLs with only the language instead of the site segment

Only create Ingress for CAE when CAEs are created

Previously, the CAE Ingress resources were created at every milestone. Now check to see if the preview and live CAEs even exist, and only add the Ingresses when the CAEs are being created.

Use ConfigMap in addition to CRD

Make it possible to use a ConfigMap instead of (or in addition to) a custom resource.

This allows the operator to work in clusters where the CRD can not be installed.

Determine resources to be removed dynamically

The operator now determines resources previously created but not longer needed dynamically based on their labels and ownerReferenes information. The field status.ownedResourceRefs is no longer used and will be removed in a future version of the CRD.

Run Job after initial deployment has completed

Enable spec.job so a job run can be triggered at a later stage.

Correctly handle pre-existing secrets

Using clientSecretRefs to use pre-exisiting secrets should now work correctly.

Enable use of pre-existing secrets

BREAKING This release contains a new version of the CRD. Please delete any existing custom resource before importing the new CRD.

When with.databases is not set, is is necessary to provide the database connection information through pre-existing secrets. The new property clientSecretRefs allows the specification of those.

Automatically change password for admin user

During deployment, the password for the admin user is changed to a random password (or to the one set with defaults.insecureDatabasePassword). The password is stored in a secret, and the content import job is run with this new password.

BREAKING The CRD has changed, and you will need to delete any cmcc resource before importing it.

Increase Studio upload size, add DB vars for management-tools

• The Studio ingress will now accept 500MB of upload size, so the pnmp start/Theme uploader works.
• The management-tools job has the DB env vars for both management and master set, so tools needing to talk to the database directly will work.