use pre-upgrade hook to set resource policy on CRD

charts/cass-operator-chart/templates/preserve-crd/cluster_role.yaml

@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ .Release.Name }}-preserve-crd
+  annotations:
+    "helm.sh/hook": pre-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
+rules:
+  - apiGroups:
+      - apiextensions.k8s.io
+    resources:
+      - customresourcedefinitions
+    verbs:
+      - get
+      - patch

charts/cass-operator-chart/templates/preserve-crd/cluster_role_binding.yaml

@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ .Release.Name }}-preserve-crd
+  annotations:
+    "helm.sh/hook": pre-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ .Release.Name }}-preserve-crd
+subjects:
+  - kind: ServiceAccount
+    namespace: {{ .Release.Namespace }}
+    name: {{ .Release.Name }}-preserve-crd

charts/cass-operator-chart/templates/preserve-crd/job.yaml

@@ -0,0 +1,23 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ .Release.Name }}-preserve-crd
+  annotations:
+    "helm.sh/hook": pre-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation
+spec:
+  backoffLimit: 3
+  template:
+    spec:
+      restartPolicy: Never
+      serviceAccountName: {{ .Release.Name }}-preserve-crd
+      containers:
+        - name: apply-resource-policy
+          image: bitnami/kubectl:1.20.1
+          imagePullPolicy: IfNotPresent
+          args:
+          - patch
+          - crd
+          - cassandradatacenters.cassandra.datastax.com
+          - -p
+          - '{"metadata":{"annotations": {"helm.sh/resource-policy": "keep"}}}'

charts/cass-operator-chart/templates/preserve-crd/service_account.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  #namespace: {{ .Release.Namespace }}
+  name: {{ .Release.Name }}-preserve-crd
+  annotations:
+    "helm.sh/hook": pre-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded,before-hook-creation