Auth enabled + parameters updated

api/v1alpha1/types.go

@@ -28,6 +28,7 @@ type RedisSpec struct {
 	Sentinel                                *SentinelProperties    `json:"sentinel,omitempty"`
 	Metrics                                 *MetricsProperties     `json:"metrics,omitempty"`
 	TLS                                     *TLSProperties         `json:"tls,omitempty"`
+	Auth                                    *AuthProperties        `json:"auth,omitempty"`
 	Persistence                             *PersistenceProperties `json:"persistence,omitempty"`
 	Binding                                 *BindingProperties     `json:"binding,omitempty"`
 }
@@ -69,6 +70,12 @@ type TLSProperties struct {
 	CertManager *CertManagerProperties `json:"certManager,omitempty"`
 }
 
+// AuthProperties models for authentication
+type AuthProperties struct {
+	Enabled        bool   `json:"enabled,omitempty"`
+	ExistingSecret string `json:"existingSecret,omitempty"`
+}
+
 // CertManagerProperties models cert-manager related attributes
 type CertManagerProperties struct {
 	Issuer *ObjectReference `json:"issuer,omitempty"`

crds/cache.cs.sap.com_redis.yaml

@@ -932,6 +932,14 @@ spec:
                         type: array
                     type: object
                 type: object
+              auth:
+                description: AuthProperties models for authentication
+                properties:
+                  enabled:
+                    type: boolean
+                  existingSecret:
+                    type: string
+                type: object
               binding:
                 description: BindingProperties models custom properties for the generated
                   binding secret

pkg/operator/data/parameters.yaml

@@ -7,6 +7,7 @@ fullnameOverride: {{ $fullname }}
 {{- $metricsServiceMonitorEnabled := (dig "metrics" "monitor" "enabled" false .) }}
 {{- $metricsPrometheusRuleEnabled := (dig "metrics" "prometheusRule" "enabled" false .) }}
 {{- $tlsEnabled := (dig "tls" "enabled" false .) }}
+{{- $authEnabled := (dig "auth" "enabled" true .) }}
 {{- $persistenceEnabled := (dig "persistence" "enabled" false .) }}
 
 {{- with .Version}}
@@ -203,6 +204,12 @@ tls:
   {{- end }}
 {{- end }}
 
+auth:
+  enabled: {{ $authEnabled }}
+  {{- if and .auth .auth.existingSecret }}
+  existingSecret: {{ .auth.existingSecret }}
+  {{- end }}
+
 networkPolicy:
   enabled: true
   extraEgress:

tests/e2e/operator_suite_test.go

@@ -258,6 +258,23 @@
 		doSomethingWithRedis(redis)
 	})
 
+	It("should deploy Redis with one master and zero read replicas without authentication", func() {
+		redis := &operatorv1alpha1.Redis{
+			ObjectMeta: metav1.ObjectMeta{
+				Namespace:    namespace,
+				GenerateName: "test-",
+			},
+			Spec: operatorv1alpha1.RedisSpec{
+				Auth: &operatorv1alpha1.AuthProperties{
+					Enabled: false,
+				},
+			},
+		}
+		defer deleteRedis(redis, true, "60s")
+		createRedis(redis, true, "300s")
+		doSomethingWithRedis(redis)
+	})
+
 	It("should deploy Redis with sentinel (three nodes), with metrics, TLS, persistence enabled", func() {
 		redis := &operatorv1alpha1.Redis{
 			ObjectMeta: metav1.ObjectMeta{