[WIP] STOR-2465: Add ExternalSnapshotMetadata CRD

assets/snapshotmetadataservices.yaml

@@ -0,0 +1,76 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.15.0
+    api-approved.kubernetes.io: "https://github.com/kubernetes-csi/external-snapshot-metadata/pull/2"
+  name: snapshotmetadataservices.cbt.storage.k8s.io
+spec:
+  group: cbt.storage.k8s.io
+  names:
+    kind: SnapshotMetadataService
+    listKind: SnapshotMetadataServiceList
+    plural: snapshotmetadataservices
+    shortNames:
+    - sms
+    singular: snapshotmetadataservice
+  scope: Cluster
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: |-
+          SnapshotMetadataService is the Schema for the snapshotmetadataservices API
+          The presence of a SnapshotMetadataService CR advertises the existence of a CSI
+          driver's Kubernetes SnapshotMetadata gRPC service.
+          An audience scoped Kubernetes authentication bearer token must be passed in the
+          "security_token" field of each gRPC call made by a Kubernetes backup client.
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Required.
+            properties:
+              address:
+                description: |-
+                  The TCP endpoint address of the gRPC service.
+                  Required.
+                type: string
+              audience:
+                description: |-
+                  The audience string value expected in a client's authentication token passed
+                  in the "security_token" field of each gRPC call.
+                  Required.
+                type: string
+              caCert:
+                description: |-
+                  Certificate authority bundle needed by the client to validate the service.
+                  Required.
+                format: byte
+                type: string
+            required:
+            - address
+            - audience
+            - caCert
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true

go.mod

@@ -116,3 +116,6 @@ require (
 	sigs.k8s.io/structured-merge-diff/v4 v4.5.0 // indirect
 	sigs.k8s.io/yaml v1.4.0 // indirect
 )
+
+// DO NOT MERGE: testing https://github.com/openshift/api/pull/2381
+replace github.com/openshift/api => github.com/dobsonj/api v0.0.0-20250623200502-11cdf0244887

go.sum

@@ -32,6 +32,8 @@ github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/dobsonj/api v0.0.0-20250623200502-11cdf0244887 h1:xkHdWA4dh026kgUTJ6PI5K8Ijcw17fsDMo3G4aCrMJA=
+github.com/dobsonj/api v0.0.0-20250623200502-11cdf0244887/go.mod h1:yk60tHAmHhtVpJQo3TwVYq2zpuP70iJIFDCmeKMIzPw=
 github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
 github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
 github.com/emicklei/go-restful/v3 v3.12.1 h1:PJMDIM/ak7btuL8Ex0iYET9hxM3CI2sjZtzpL63nKAU=
@@ -138,8 +140,6 @@ github.com/onsi/ginkgo/v2 v2.21.0 h1:7rg/4f3rB88pb5obDgNZrNHrQ4e6WpjonchcpuBRnZM
 github.com/onsi/ginkgo/v2 v2.21.0/go.mod h1:7Du3c42kxCUegi0IImZ1wUQzMBVecgIHjR1C+NkhLQo=
 github.com/onsi/gomega v1.35.1 h1:Cwbd75ZBPxFSuZ6T+rN/WCb/gOc6YgFBXLlZLhC7Ds4=
 github.com/onsi/gomega v1.35.1/go.mod h1:PvZbdDc8J6XJEpDK4HCuRBm8a6Fzp9/DmhC9C7yFlog=
-github.com/openshift/api v0.0.0-20250224185818-544b3ca4e8f5 h1:23Dw8Zv4oHwRjfwMY/OpPnc+WUMrc+/EVuSdjx/+ILc=
-github.com/openshift/api v0.0.0-20250224185818-544b3ca4e8f5/go.mod h1:yk60tHAmHhtVpJQo3TwVYq2zpuP70iJIFDCmeKMIzPw=
 github.com/openshift/build-machinery-go v0.0.0-20250102153059-e85a1a7ecb5c h1:6XcszPFZpan4qll5XbdLll7n1So3IsPn28aw2j1obMo=
 github.com/openshift/build-machinery-go v0.0.0-20250102153059-e85a1a7ecb5c/go.mod h1:8jcm8UPtg2mCAsxfqKil1xrmRMI3a+XU2TZ9fF8A7TE=
 github.com/openshift/client-go v0.0.0-20250131180035-f7ec47e2d87a h1:duO3JMrUOqVx50QhzxvDeOYIwTNOB8/EEuRLPyvAMBg=

pkg/operator/starter.go

@@ -170,9 +170,10 @@ func RunOperator(ctx context.Context, controllerConfig *controllercmd.Controller
 		return err
 	}
 
-	// Verify whether the VolumeGroupSnapshot feature is enabled or not. This variable will be
+	// Check whether the following featuregates are enabled or not. These variables will be
 	// used to decided what resources will be deployed in the cluster.
 	volumeGroupSnapshotAPIEnabled := featureGates.Enabled(configv1.FeatureGateName("VolumeGroupSnapshot"))
+	externalSnapshotMetadataAPIEnabled := featureGates.Enabled(configv1.FeatureGateName("ExternalSnapshotMetadata"))
 
 	namespacedAssetFunc := namespaceReplacer(assets.ReadFile, "${CONTROLPLANE_NAMESPACE}", controlPlaneNamespace)
 	guestStaticResourceController := staticresourcecontroller.NewStaticResourceController(
@@ -195,6 +196,13 @@ func RunOperator(ctx context.Context, controllerConfig *controllercmd.Controller
 		},
 		func() bool { return volumeGroupSnapshotAPIEnabled },
 		func() bool { return false },
+	).WithConditionalResources(
+		namespacedAssetFunc,
+		[]string{
+			"snapshotmetadataservices.yaml",
+		},
+		func() bool { return externalSnapshotMetadataAPIEnabled },
+		func() bool { return false },
 	)
 
 	controlPlaneStaticResourcesController := staticresourcecontroller.NewStaticResourceController(