feat: init operator project

.dockerignore

@@ -0,0 +1,11 @@
+# More info: https://docs.docker.com/engine/reference/builder/#dockerignore-file
+# Ignore everything by default and re-include only needed files
+**
+
+# Re-include Go source files (but not *_test.go)
+!**/*.go
+**/*_test.go
+
+# Re-include Go module files
+!go.mod
+!go.sum

.gitignore

@@ -0,0 +1,30 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+bin/*
+Dockerfile.cross
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# Go workspace file
+go.work
+
+# Kubernetes Generated files - skip generated files, except for vendored files
+!vendor/**/zz_generated.*
+
+# editor and IDE paraphernalia
+.idea
+.vscode
+*.swp
+*.swo
+*~
+
+# Kubeconfig might contain secrets
+*.kubeconfig

.golangci.yml

@@ -0,0 +1,61 @@
+version: "2"
+run:
+  allow-parallel-runners: true
+linters:
+  default: none
+  enable:
+    - copyloopvar
+    - dupl
+    - errcheck
+    - ginkgolinter
+    - goconst
+    - gocyclo
+    - govet
+    - ineffassign
+    - lll
+    - modernize
+    - misspell
+    - nakedret
+    - prealloc
+    - revive
+    - staticcheck
+    - unconvert
+    - unparam
+    - unused
+    - logcheck
+  settings:
+    custom:
+      logcheck:
+        type: "module"
+        description: Checks Go logging calls for Kubernetes logging conventions.
+    revive:
+      rules:
+        - name: comment-spacings
+        - name: import-shadowing
+    modernize:
+      disable:
+        - omitzero
+  exclusions:
+    generated: lax
+    rules:
+      - linters:
+          - lll
+        path: api/*
+      - linters:
+          - dupl
+          - lll
+        path: internal/*
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  enable:
+    - gofmt
+    - goimports
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$

Dockerfile

@@ -0,0 +1,60 @@
+####################################################################################################
+# back-end-builder
+####################################################################################################
+FROM --platform=$BUILDPLATFORM golang:1.25.5-bookworm AS back-end-builder
+
+ARG TARGETOS
+ARG TARGETARCH
+
+ARG VERSION_PACKAGE=github.com/orray-proj/orray/pkg/version
+
+ARG CGO_ENABLED=0
+
+WORKDIR /orray
+COPY ["go.mod", "go.sum", "./"]
+RUN go mod download
+COPY api/ api/
+COPY cmd/ cmd/
+COPY pkg/ pkg/
+
+ARG VERSION
+ARG GIT_COMMIT
+ARG GIT_TREE_STATE
+
+RUN CGO_ENABLED=${CGO_ENABLED} GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build \
+    -ldflags="-s -w -X ${VERSION_PACKAGE}.version=${VERSION} -X ${VERSION_PACKAGE}.buildDate=$(date -u +'%Y-%m-%dT%H:%M:%SZ') -X ${VERSION_PACKAGE}.gitCommit=${GIT_COMMIT} -X ${VERSION_PACKAGE}.gitTreeState=${GIT_TREE_STATE}" \
+    -o bin/orray ./cmd/controlplane
+
+####################################################################################################
+# back-end-dev
+# - no UI
+# - relies on go build that runs on host
+# - supports development
+# - not used for official image builds
+####################################################################################################
+FROM alpine:latest AS back-end-dev
+
+RUN apk update && apk add ca-certificates git gpg gpg-agent openssh-client tini
+
+COPY ./bin/controlplane/orray /usr/local/bin/orray
+
+RUN adduser -D -H -u 1000 orray
+USER 1000:0
+
+ENTRYPOINT ["/sbin/tini", "--"]
+CMD ["/usr/local/bin/orray"]
+
+####################################################################################################
+# final
+# - the official image we publish
+# - purposefully last so that it is the default target when building
+####################################################################################################
+FROM alpine:latest AS final
+
+
+RUN apk update && apk add ca-certificates git gpg gpg-agent openssh-client tini
+
+COPY --from=back-end-builder /orray/bin/ /usr/local/bin/
+
+ENTRYPOINT ["/sbin/tini", "--"]
+CMD ["/usr/local/bin/orray"]

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Orray
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

Makefile

@@ -0,0 +1,110 @@
+## Tool Binaries
+KUBECTL ?= kubectl
+CONTROLLER_GEN ?= go tool sigs.k8s.io/controller-tools/cmd/controller-gen
+ENVTEST ?= go tool sigs.k8s.io/controller-runtime/tools/setup-envtest
+KUSTOMIZE ?= go tool sigs.k8s.io/kustomize/kustomize/v5
+GOLANGCI_LINT = go tool github.com/golangci/golangci-lint/cmd/golangci-lint
+CTLPTL ?= ./bin/ctlptl
+
+KUBERNETES_VERSION ?= 1.34.0
+CERT_MANAGER_CHART_VERSION 	:= 1.16.1
+
+# Get the currently used golang install path (in GOPATH/bin, unless GOBIN is set)
+ifeq (,$(shell go env GOBIN))
+GOBIN=$(shell go env GOPATH)/bin
+else
+GOBIN=$(shell go env GOBIN)
+endif
+
+# Setting SHELL to bash allows bash commands to be executed by recipes.
+# Options are set to exit when a recipe line exits non-zero or a piped command fails.
+SHELL = /usr/bin/env bash -o pipefail
+.SHELLFLAGS = -ec
+
+.PHONY: all
+all: build
+
+##@ General
+
+.PHONY: help
+help: ## Display this help.
+	@awk 'BEGIN {FS = ":.*##"; printf "\nUsage:\n  make \033[36m<target>\033[0m\n"} /^[a-zA-Z_0-9-]+:.*?##/ { printf "  \033[36m%-15s\033[0m %s\n", $$1, $$2 } /^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) } ' $(MAKEFILE_LIST)
+
+##@ Development
+
+.PHONY: manifests
+manifests: ## Generate CustomResourceDefinition objects.
+	$(CONTROLLER_GEN) crd paths="./..." output:crd:artifacts:config=charts/web-operator/resources/crds
+
+.PHONY: generate
+generate: ## Generate code containing DeepCopy, DeepCopyInto, and DeepCopyObject method implementations.
+	$(CONTROLLER_GEN) object:headerFile="hack/boilerplate.go.txt" paths="./..."
+
+.PHONY: fmt
+fmt: ## Run go fmt against code.
+	go fmt ./...
+
+.PHONY: vet
+vet: ## Run go vet against code.
+	go vet ./...
+
+.PHONY: test
+test: manifests generate fmt vet ## Run tests.
+	KUBEBUILDER_ASSETS="$(shell $(ENVTEST) use $(KUBERNETES_VERSION) -p path)" go test $$(go list ./... | grep -v /e2e | grep -v /api | grep -v /cmd) -coverprofile cover.out
+
+.PHONY: lint
+lint: ## Run golangci-lint linter
+	$(GOLANGCI_LINT) run
+
+.PHONY: lint-fix
+lint-fix: ## Run golangci-lint linter and perform fixes
+	$(GOLANGCI_LINT) run --fix
+
+.PHONY: lint-config
+lint-config: ## Verify golangci-lint linter configuration
+	$(GOLANGCI_LINT) config verify
+
+##@ Build
+
+.PHONY: build
+build: manifests generate fmt vet ## Build manager binary.
+	go build -o bin/web-operator ./cmd/controlplane
+
+.PHONY: build-image
+build-image: ## Build the image
+	docker build -t ghcr.io/orray-proj/orray:1.0.0 -f Dockerfile \
+		--build-arg VERSION=1.0.0 \
+		--build-arg GIT_COMMIT=1234567890 \
+		--build-arg GIT_TREE_STATE=dirty \
+		--build-arg TARGETARCH=amd64 \
+		.
+
+##@ Test
+
+.PHONY: test-kuttl
+test-kuttl: build-image ## Run KUTTL tests
+	cd tests && kubectl kuttl test --config kuttl-test.yaml
+
+##@ Hack
+.PHONY: hack-kind-up
+hack-kind-up:
+	$(CTLPTL) apply -f hack/kind/cluster.yaml
+	make hack-install-prereqs
+
+.PHONY: hack-kind-down
+hack-kind-down:
+	$(CTLPTL) delete -f hack/kind/cluster.yaml
+
+.PHONY: hack-install-prereqs
+hack-install-prereqs: hack-install-cert-manager
+
+.PHONY: hack-install-cert-manager
+hack-install-cert-manager:
+	helm upgrade cert-manager cert-manager \
+		--repo https://charts.jetstack.io \
+		--version $(CERT_MANAGER_CHART_VERSION) \
+		--install \
+		--create-namespace \
+		--namespace cert-manager \
+		--set crds.enabled=true \
+		--wait