diff --git a/README.md b/README.md index 8238dadf1..3e8cdc237 100644 --- a/README.md +++ b/README.md @@ -72,17 +72,17 @@ Feature-wise production readiness table: ## Operator Community Edition (CE) -Image: `arangodb/kube-arangodb:1.2.24` +Image: `arangodb/kube-arangodb:1.2.25` ### Installation of latest CE release using Kubectl ```bash -kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.24/manifests/arango-crd.yaml -kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.24/manifests/arango-deployment.yaml +kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.25/manifests/arango-crd.yaml +kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.25/manifests/arango-deployment.yaml # To use `ArangoLocalStorage`, also run -kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.24/manifests/arango-storage.yaml +kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.25/manifests/arango-storage.yaml # To use `ArangoDeploymentReplication`, also run -kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.24/manifests/arango-deployment-replication.yaml +kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.25/manifests/arango-deployment-replication.yaml ``` This procedure can also be used for upgrades and will not harm any @@ -115,9 +115,9 @@ upgrades. ```bash # The following will install the operator for `ArangoDeployment` & # `ArangoDeploymentReplication` resources. -helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.24/kube-arangodb-1.2.24.tgz +helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.25/kube-arangodb-1.2.25.tgz # To use `ArangoLocalStorage`, set field `operator.features.storage` to true -helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.24/kube-arangodb-1.2.24.tgz --set "operator.features.storage=true" +helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.25/kube-arangodb-1.2.25.tgz --set "operator.features.storage=true" ``` ### Upgrading the operator using Helm @@ -151,24 +151,24 @@ with `helm install` as normal: ```bash # The following will install the operator for `ArangoDeployment` & # `ArangoDeploymentReplication` resources. -helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.24/kube-arangodb-1.2.24.tgz +helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.25/kube-arangodb-1.2.25.tgz # To use `ArangoLocalStorage`, set field `operator.features.storage` to true -helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.24/kube-arangodb-1.2.24.tgz --set "operator.features.storage=true" +helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.25/kube-arangodb-1.2.25.tgz --set "operator.features.storage=true" ``` ## Operator Enterprise Edition (EE) -Image: `arangodb/kube-arangodb-enterprise:1.2.24` +Image: `arangodb/kube-arangodb-enterprise:1.2.25` ### Installation of latest EE release using Kubectl ```bash -kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.24/manifests/enterprise-crd.yaml -kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.24/manifests/enterprise-deployment.yaml +kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.25/manifests/enterprise-crd.yaml +kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.25/manifests/enterprise-deployment.yaml # To use `ArangoLocalStorage`, also run -kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.24/manifests/enterprise-storage.yaml +kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.25/manifests/enterprise-storage.yaml # To use `ArangoDeploymentReplication`, also run -kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.24/manifests/enterprise-deployment-replication.yaml +kubectl apply -f https://raw.githubusercontent.com/arangodb/kube-arangodb/1.2.25/manifests/enterprise-deployment-replication.yaml ``` This procedure can also be used for upgrades and will not harm any @@ -201,9 +201,9 @@ upgrades. ```bash # The following will install the operator for `ArangoDeployment` & # `ArangoDeploymentReplication` resources. -helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.24/kube-arangodb-1.2.24.tgz --set "operator.image=arangodb/kube-arangodb-enterprise:1.2.24" +helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.25/kube-arangodb-1.2.25.tgz --set "operator.image=arangodb/kube-arangodb-enterprise:1.2.25" # To use `ArangoLocalStorage`, set field `operator.features.storage` to true -helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.24/kube-arangodb-1.2.24.tgz --set "operator.image=arangodb/kube-arangodb-enterprise:1.2.24" --set "operator.features.storage=true" +helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.25/kube-arangodb-1.2.25.tgz --set "operator.image=arangodb/kube-arangodb-enterprise:1.2.25" --set "operator.features.storage=true" ``` ### Upgrading the operator using Helm @@ -237,9 +237,9 @@ with `helm install` as normal: ```bash # The following will install the operator for `ArangoDeployment` & # `ArangoDeploymentReplication` resources. -helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.24/kube-arangodb-1.2.24.tgz --set "operator.image=arangodb/kube-arangodb-enterprise:1.2.24" +helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.25/kube-arangodb-1.2.25.tgz --set "operator.image=arangodb/kube-arangodb-enterprise:1.2.25" # To use `ArangoLocalStorage`, set field `operator.features.storage` to true -helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.24/kube-arangodb-1.2.24.tgz --set "operator.image=arangodb/kube-arangodb-enterprise:1.2.24" --set "operator.features.storage=true" +helm install https://github.com/arangodb/kube-arangodb/releases/download/1.2.25/kube-arangodb-1.2.25.tgz --set "operator.image=arangodb/kube-arangodb-enterprise:1.2.25" --set "operator.features.storage=true" ``` ## Building diff --git a/VERSION b/VERSION index d80ee73a7..4582474e9 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.2.25-preview-1+git \ No newline at end of file +1.2.25 \ No newline at end of file diff --git a/chart/kube-arangodb-crd/Chart.yaml b/chart/kube-arangodb-crd/Chart.yaml index 4ea11c29e..6d0a9f4cc 100644 --- a/chart/kube-arangodb-crd/Chart.yaml +++ b/chart/kube-arangodb-crd/Chart.yaml @@ -1,5 +1,5 @@ name: kube-arangodb-crd -version: 1.2.24 +version: 1.2.25 description: "ArangoDB Kubernetes Custom Resource Definitions (Deprecated)" tillerVersion: ">2.7" appVersion: 3.5.0 diff --git a/chart/kube-arangodb/Chart.yaml b/chart/kube-arangodb/Chart.yaml index 03e2e31a5..27a08da85 100644 --- a/chart/kube-arangodb/Chart.yaml +++ b/chart/kube-arangodb/Chart.yaml @@ -1,5 +1,5 @@ # do not switch to V2 yet - we still need to support Helm 2 apiVersion: v1 name: kube-arangodb -version: 1.2.24 +version: 1.2.25 description: "ArangoDB Kubernetes Operator" diff --git a/chart/kube-arangodb/values.yaml b/chart/kube-arangodb/values.yaml index 51cb5c32d..cc2f1597b 100644 --- a/chart/kube-arangodb/values.yaml +++ b/chart/kube-arangodb/values.yaml @@ -1,5 +1,5 @@ operator: - image: arangodb/kube-arangodb:1.2.24 + image: arangodb/kube-arangodb:1.2.25 imagePullPolicy: IfNotPresent imagePullSecrets: [] scope: legacy diff --git a/examples/reboot-pod.yaml b/examples/reboot-pod.yaml index f8f92de8d..72cb80b82 100644 --- a/examples/reboot-pod.yaml +++ b/examples/reboot-pod.yaml @@ -6,7 +6,7 @@ spec: restartPolicy: Never serviceAccountName: arango-deployment-operator-reboot containers: - - image: arangodb/kube-arangodb:1.2.24 + - image: arangodb/kube-arangodb:1.2.25 name: reboot command: ["arangodb_operator", "reboot"] args: diff --git a/manifests/arango-all.yaml b/manifests/arango-all.yaml index 27f8e8028..d9fe84251 100644 --- a/manifests/arango-all.yaml +++ b/manifests/arango-all.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/apps-operator/service-account-job.yaml apiVersion: v1 kind: ServiceAccount @@ -5,11 +6,12 @@ metadata: name: arango-all-operator-job namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all + --- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 @@ -18,356 +20,358 @@ metadata: name: arango-all-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all --- # Source: kube-arangodb/templates/storage-operator/crd.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangolocalstorages.storage.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arangolocalstorages.storage.arangodb.com + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all spec: - group: storage.arangodb.com - names: - kind: ArangoLocalStorage - listKind: ArangoLocalStorageList - plural: arangolocalstorages - shortNames: - - arangostorage - singular: arangolocalstorage - scope: Cluster - versions: - - name: v1alpha - served: true - storage: true - schema: - openAPIV3Schema: - type: object - x-kubernetes-preserve-unknown-fields: true + group: storage.arangodb.com + names: + kind: ArangoLocalStorage + listKind: ArangoLocalStorageList + plural: arangolocalstorages + shortNames: + - arangostorage + singular: arangolocalstorage + scope: Cluster + versions: + - name: v1alpha + served: true + storage: true + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true --- # Source: kube-arangodb/templates/apps-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-apps - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-apps + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/backup-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-backup - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-backup + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-deployment - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes", "persistentvolumes"] - verbs: ["get", "list"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes", "persistentvolumes"] + verbs: ["get", "list"] --- # Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-deployment-replication - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment-replication + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes"] - verbs: ["get", "list"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes"] + verbs: ["get", "list"] --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-k2kclustersync - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-k2kclustersync + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + --- # Source: kube-arangodb/templates/storage-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-storage - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-storage + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"] - verbs: ["*"] - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes"] - verbs: ["get", "list", "watch"] - - apiGroups: ["storage.k8s.io"] - resources: ["storageclasses"] - verbs: ["*"] - - apiGroups: ["storage.arangodb.com"] - resources: ["arangolocalstorages"] - verbs: ["*"] + - apiGroups: [""] + resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"] + verbs: ["*"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes"] + verbs: ["get", "list", "watch"] + - apiGroups: ["storage.k8s.io"] + resources: ["storageclasses"] + verbs: ["*"] + - apiGroups: ["storage.arangodb.com"] + resources: ["arangolocalstorages"] + verbs: ["*"] --- # Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-apps - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-apps + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-apps + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-apps subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-backup - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-backup + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-backup + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-backup subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-deployment - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-deployment + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-deployment subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-deployment-replication - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment-replication + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-deployment-replication + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-deployment-replication subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-k2kclustersync - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-k2kclustersync + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-k2kclustersync + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-k2kclustersync subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default + --- # Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-storage - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-storage + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-storage + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-storage subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/apps-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-apps - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-apps + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["batch"] - resources: ["jobs"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get", "list", "watch"] - - apiGroups: ["apps.arangodb.com"] - resources: ["arangojobs", "arangojobs/status"] - verbs: ["*"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["batch"] + resources: ["jobs"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get", "list", "watch"] + - apiGroups: ["apps.arangodb.com"] + resources: ["arangojobs","arangojobs/status"] + verbs: ["*"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role @@ -376,7 +380,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: all release: all @@ -389,191 +393,194 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-backup - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-backup + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["backup.arangodb.com"] - resources: ["arangobackuppolicies", "arangobackuppolicies/status", "arangobackups", "arangobackups/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["backup.arangodb.com"] + resources: ["arangobackuppolicies", "arangobackuppolicies/status", "arangobackups", "arangobackups/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/deployment-operator/default-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-default - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-default + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods"] - verbs: ["get"] + - apiGroups: [""] + resources: ["pods"] + verbs: ["get"] --- # Source: kube-arangodb/templates/deployment-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-deployment - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments", "arangodeployments/status", "arangomembers", "arangomembers/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangoclustersynchronizations", "arangoclustersynchronizations/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangotasks", "arangotasks/status"] - verbs: ["*"] - - apiGroups: [""] - resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts", "configmaps"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["policy"] - resources: ["poddisruptionbudgets"] - verbs: ["*"] - - apiGroups: ["backup.arangodb.com"] - resources: ["arangobackuppolicies", "arangobackups"] - verbs: ["get", "list", "watch"] - - apiGroups: ["monitoring.coreos.com"] - resources: ["servicemonitors"] - verbs: ["get", "create", "delete", "update", "list", "watch", "patch"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments", "arangodeployments/status","arangomembers", "arangomembers/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangoclustersynchronizations", "arangoclustersynchronizations/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangotasks", "arangotasks/status"] + verbs: ["*"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts", "configmaps"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["policy"] + resources: ["poddisruptionbudgets"] + verbs: ["*"] + - apiGroups: ["backup.arangodb.com"] + resources: ["arangobackuppolicies", "arangobackups"] + verbs: ["get", "list", "watch"] + - apiGroups: ["monitoring.coreos.com"] + resources: ["servicemonitors"] + verbs: ["get", "create", "delete", "update", "list", "watch", "patch"] --- # Source: kube-arangodb/templates/deployment-replications-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-deployment-replication - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment-replication + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["replication.database.arangodb.com"] - resources: ["arangodeploymentreplications", "arangodeploymentreplications/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get"] - - apiGroups: [""] - resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] + - apiGroups: ["replication.database.arangodb.com"] + resources: ["arangodeploymentreplications", "arangodeploymentreplications/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-k2kclustersync - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-k2kclustersync + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments", "arangoclustersynchronizations"] - verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments", "arangoclustersynchronizations"] + verbs: ["get", "list", "watch"] + --- # Source: kube-arangodb/templates/storage-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-storage - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-storage + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods"] - verbs: ["get", "update", "watch", "list"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["daemonsets"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] + - apiGroups: [""] + resources: ["pods"] + verbs: ["get", "update", "watch", "list"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["daemonsets"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] --- # Source: kube-arangodb/templates/apps-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-apps - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-apps + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-apps + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-apps subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default + --- + apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: @@ -581,7 +588,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: all release: all @@ -598,127 +605,128 @@ subjects: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-backup - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-backup + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-backup + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-backup subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-default - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-default + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-default + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-default subjects: - - kind: ServiceAccount - name: default - namespace: default + - kind: ServiceAccount + name: default + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-deployment - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-deployment + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-deployment subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-deployment-replication - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment-replication + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-deployment-replication + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-deployment-replication subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-k2kclustersync - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-k2kclustersync + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-k2kclustersync + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-k2kclustersync subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default + --- # Source: kube-arangodb/templates/storage-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-storage - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-storage + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-storage + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-storage subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -728,7 +736,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: all release: all @@ -759,128 +767,134 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-all-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all - template: - metadata: - labels: + name: arango-all-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: all release: all - spec: - serviceAccountName: arango-all-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - all - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.deployment - - --operator.deployment-replication - - --operator.storage - - --operator.backup - - --operator.apps - - --operator.k2k-cluster-sync - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - - name: ARANGOJOB_SA_NAME - value: "arango-all-operator-job" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all + spec: + serviceAccountName: arango-all-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - all + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + - --operator.deployment + - --operator.deployment-replication + - --operator.storage + + - --operator.backup + - --mode.single + + - --operator.apps + + - --operator.k2k-cluster-sync + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + - name: ARANGOJOB_SA_NAME + value: "arango-all-operator-job" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + diff --git a/manifests/arango-apps.yaml b/manifests/arango-apps.yaml index 3bf8d3bca..899fa3b42 100644 --- a/manifests/arango-apps.yaml +++ b/manifests/arango-apps.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/apps-operator/service-account-job.yaml apiVersion: v1 kind: ServiceAccount @@ -5,11 +6,12 @@ metadata: name: arango-apps-operator-job namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps + --- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 @@ -18,128 +20,128 @@ metadata: name: arango-apps-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps --- # Source: kube-arangodb/templates/apps-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-apps-operator-rbac-apps - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-apps + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-apps-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-apps-operator-rbac-apps - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-apps + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-apps-operator-rbac-apps + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-apps-operator-rbac-apps subjects: - - kind: ServiceAccount - name: arango-apps-operator - namespace: default + - kind: ServiceAccount + name: arango-apps-operator + namespace: default --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-apps-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-apps-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-apps-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-apps-operator - namespace: default + - kind: ServiceAccount + name: arango-apps-operator + namespace: default --- # Source: kube-arangodb/templates/apps-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-apps-operator-rbac-apps - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-apps + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["batch"] - resources: ["jobs"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get", "list", "watch"] - - apiGroups: ["apps.arangodb.com"] - resources: ["arangojobs", "arangojobs/status"] - verbs: ["*"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["batch"] + resources: ["jobs"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get", "list", "watch"] + - apiGroups: ["apps.arangodb.com"] + resources: ["arangojobs","arangojobs/status"] + verbs: ["*"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role @@ -148,7 +150,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: apps release: apps @@ -161,23 +163,25 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-apps-operator-rbac-apps - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-apps + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-apps-operator-rbac-apps + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-apps-operator-rbac-apps subjects: - - kind: ServiceAccount - name: arango-apps-operator - namespace: default + - kind: ServiceAccount + name: arango-apps-operator + namespace: default + --- + apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: @@ -185,7 +189,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: apps release: apps @@ -206,7 +210,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: apps release: apps @@ -237,215 +241,202 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-apps-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps - template: - metadata: - labels: + name: arango-apps-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: apps release: apps - spec: - serviceAccountName: arango-apps-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - apps - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.apps - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - - name: ARANGOJOB_SA_NAME - value: "arango-apps-operator-job" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps + spec: + serviceAccountName: arango-apps-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - apps + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + + - --mode.single + + - --operator.apps + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + - name: ARANGOJOB_SA_NAME + value: "arango-apps-operator-job" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/arango-backup.yaml b/manifests/arango-backup.yaml index f990a3d60..ab56df5ca 100644 --- a/manifests/arango-backup.yaml +++ b/manifests/arango-backup.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,146 +6,146 @@ metadata: name: arango-backup-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup --- # Source: kube-arangodb/templates/backup-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-backup-operator-rbac-backup - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-backup + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-backup-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-backup-operator-rbac-backup - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-backup + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-backup-operator-rbac-backup + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-backup-operator-rbac-backup subjects: - - kind: ServiceAccount - name: arango-backup-operator - namespace: default + - kind: ServiceAccount + name: arango-backup-operator + namespace: default --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-backup-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-backup-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-backup-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-backup-operator - namespace: default + - kind: ServiceAccount + name: arango-backup-operator + namespace: default --- # Source: kube-arangodb/templates/backup-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-backup-operator-rbac-backup - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-backup + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["backup.arangodb.com"] - resources: ["arangobackuppolicies", "arangobackuppolicies/status", "arangobackups", "arangobackups/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["backup.arangodb.com"] + resources: ["arangobackuppolicies", "arangobackuppolicies/status", "arangobackups", "arangobackups/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/backup-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-backup-operator-rbac-backup - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-backup + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-backup-operator-rbac-backup + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-backup-operator-rbac-backup subjects: - - kind: ServiceAccount - name: arango-backup-operator - namespace: default + - kind: ServiceAccount + name: arango-backup-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -154,7 +155,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: backup release: backup @@ -185,217 +186,204 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-backup-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup - template: - metadata: - labels: + name: arango-backup-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: backup release: backup - spec: - serviceAccountName: arango-backup-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - backup - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.backup - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup + spec: + serviceAccountName: arango-backup-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - backup + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + + - --operator.backup + - --mode.single + + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/arango-crd.yaml b/manifests/arango-crd.yaml index c6f5c8ee9..5fc698c46 100644 --- a/manifests/arango-crd.yaml +++ b/manifests/arango-crd.yaml @@ -1,24 +1,18 @@ -# Source: kube-arangodb-crd/templates/backup-policy.yaml +--- +# File: chart/kube-arangodb/crds/apps-job.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangobackuppolicies.backup.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangojobs.apps.arangodb.com spec: - group: backup.arangodb.com + group: apps.arangodb.com names: - kind: ArangoBackupPolicy - listKind: ArangoBackupPolicyList - plural: arangobackuppolicies + kind: ArangoJob + listKind: ArangoJobList + plural: arangojobs + singular: arangojob shortNames: - - arangobackuppolicy - - arangobp - singular: arangobackuppolicy + - arangojob scope: Namespaced versions: - name: v1 @@ -29,56 +23,20 @@ spec: served: true storage: true additionalPrinterColumns: - - jsonPath: .spec.schedule - description: Schedule - name: Schedule - type: string - - jsonPath: .status.scheduled - description: Scheduled - name: Scheduled - type: string - - jsonPath: .status.message - priority: 1 - description: Message of the ArangoBackupPolicy object - name: Message - type: string - subresources: - status: {} - - name: v1alpha - schema: - openAPIV3Schema: - type: object - x-kubernetes-preserve-unknown-fields: true - served: true - storage: false - additionalPrinterColumns: - - jsonPath: .spec.schedule - description: Schedule - name: Schedule - type: string - - jsonPath: .status.scheduled - description: Scheduled - name: Scheduled - type: string - - jsonPath: .status.message - priority: 1 - description: Message of the ArangoBackupPolicy object - name: Message + - jsonPath: .spec.arangoDeploymentName + description: Deployment name + name: ArangoDeploymentName type: string subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/backup.yaml +# File: chart/kube-arangodb/crds/backups-backup.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: arangobackups.backup.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd spec: group: backup.arangodb.com names: @@ -178,27 +136,24 @@ spec: type: string subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/deployment-replications.yaml +# File: chart/kube-arangodb/crds/backups-backuppolicy.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangodeploymentreplications.replication.database.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangobackuppolicies.backup.arangodb.com spec: - group: replication.database.arangodb.com + group: backup.arangodb.com names: - kind: ArangoDeploymentReplication - listKind: ArangoDeploymentReplicationList - plural: arangodeploymentreplications + kind: ArangoBackupPolicy + listKind: ArangoBackupPolicyList + plural: arangobackuppolicies shortNames: - - arangorepl - singular: arangodeploymentreplication + - arangobackuppolicy + - arangobp + singular: arangobackuppolicy scope: Namespaced versions: - name: v1 @@ -208,6 +163,22 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: true + additionalPrinterColumns: + - jsonPath: .spec.schedule + description: Schedule + name: Schedule + type: string + - jsonPath: .status.scheduled + description: Scheduled + name: Scheduled + type: string + - jsonPath: .status.message + priority: 1 + description: Message of the ArangoBackupPolicy object + name: Message + type: string + subresources: + status: {} - name: v1alpha schema: openAPIV3Schema: @@ -215,6 +186,50 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: false + additionalPrinterColumns: + - jsonPath: .spec.schedule + description: Schedule + name: Schedule + type: string + - jsonPath: .status.scheduled + description: Scheduled + name: Scheduled + type: string + - jsonPath: .status.message + priority: 1 + description: Message of the ArangoBackupPolicy object + name: Message + type: string + subresources: + status: {} + + +--- +# File: chart/kube-arangodb/crds/database-clustersynchronization.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: arangoclustersynchronizations.database.arangodb.com +spec: + group: database.arangodb.com + names: + kind: ArangoClusterSynchronization + listKind: ArangoClusterSynchronizationList + plural: arangoclustersynchronizations + singular: arangoclustersynchronization + shortNames: + - arangoclustersync + scope: Namespaced + versions: + - name: v1 + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: true + subresources: + status: {} - name: v2alpha1 schema: openAPIV3Schema: @@ -224,18 +239,14 @@ spec: storage: false subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/deployment.yaml +# File: chart/kube-arangodb/crds/database-deployment.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: arangodeployments.database.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd spec: group: database.arangodb.com names: @@ -271,27 +282,23 @@ spec: storage: false subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/job.yaml +# File: chart/kube-arangodb/crds/database-member.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangojobs.apps.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangomembers.database.arangodb.com spec: - group: apps.arangodb.com + group: database.arangodb.com names: - kind: ArangoJob - listKind: ArangoJobList - plural: arangojobs - singular: arangojob + kind: ArangoMember + listKind: ArangoMemberList + plural: arangomembers shortNames: - - arangojob + - arangomembers + singular: arangomember scope: Namespaced versions: - name: v1 @@ -301,34 +308,35 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: true - additionalPrinterColumns: - - jsonPath: .spec.arangoDeploymentName - description: Deployment name - name: ArangoDeploymentName - type: string subresources: status: {} + - name: v2alpha1 + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: false + subresources: + status: {} + + --- -# Source: kube-arangodb-crd/templates/k2kclustersync.yaml +# File: chart/kube-arangodb/crds/database-task.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangoclustersynchronizations.database.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangotasks.database.arangodb.com spec: group: database.arangodb.com names: - kind: ArangoClusterSynchronization - listKind: ArangoClusterSynchronizationList - plural: arangoclustersynchronizations - singular: arangoclustersynchronization + kind: ArangoTask + listKind: ArangoTaskList + plural: arangotasks shortNames: - - arangoclustersync + - arangodb + - arango + singular: arangotask scope: Namespaced versions: - name: v1 @@ -338,8 +346,13 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: true - subresources: - status: {} + - name: v1alpha + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: false - name: v2alpha1 schema: openAPIV3Schema: @@ -349,27 +362,23 @@ spec: storage: false subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/member.yaml +# File: chart/kube-arangodb/crds/replication-deploymentreplication.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangomembers.database.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangodeploymentreplications.replication.database.arangodb.com spec: - group: database.arangodb.com + group: replication.database.arangodb.com names: - kind: ArangoMember - listKind: ArangoMemberList - plural: arangomembers + kind: ArangoDeploymentReplication + listKind: ArangoDeploymentReplicationList + plural: arangodeploymentreplications shortNames: - - arangomembers - singular: arangomember + - arangorepl + singular: arangodeploymentreplication scope: Namespaced versions: - name: v1 @@ -379,8 +388,13 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: true - subresources: - status: {} + - name: v1alpha + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: false - name: v2alpha1 schema: openAPIV3Schema: @@ -390,3 +404,5 @@ spec: storage: false subresources: status: {} + + diff --git a/manifests/arango-deployment-replication.yaml b/manifests/arango-deployment-replication.yaml index bd66e152c..ed46e5f09 100644 --- a/manifests/arango-deployment-replication.yaml +++ b/manifests/arango-deployment-replication.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,143 +6,143 @@ metadata: name: arango-deployment-replication-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-deployment-replication-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-deployment-replication-operator-rbac-deployment-replication - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-deployment-replication + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes"] - verbs: ["get", "list"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes"] + verbs: ["get", "list"] --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-deployment-replication-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-deployment-replication-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-deployment-replication-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-deployment-replication-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-replication-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-deployment-replication-operator-rbac-deployment-replication - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-deployment-replication + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-deployment-replication-operator-rbac-deployment-replication + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-deployment-replication-operator-rbac-deployment-replication subjects: - - kind: ServiceAccount - name: arango-deployment-replication-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-replication-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-replications-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-deployment-replication-operator-rbac-deployment-replication - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-deployment-replication + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication rules: - - apiGroups: ["replication.database.arangodb.com"] - resources: ["arangodeploymentreplications", "arangodeploymentreplications/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get"] - - apiGroups: [""] - resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] + - apiGroups: ["replication.database.arangodb.com"] + resources: ["arangodeploymentreplications", "arangodeploymentreplications/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] --- # Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-deployment-replication-operator-rbac-deployment-replication - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-deployment-replication + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-deployment-replication-operator-rbac-deployment-replication + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-deployment-replication-operator-rbac-deployment-replication subjects: - - kind: ServiceAccount - name: arango-deployment-replication-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-replication-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -151,7 +152,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: deployment-replication release: deployment-replication @@ -182,217 +183,204 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-deployment-replication-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication - template: - metadata: - labels: + name: arango-deployment-replication-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: deployment-replication release: deployment-replication - spec: - serviceAccountName: arango-deployment-replication-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - deployment-replication - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.deployment-replication - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication + spec: + serviceAccountName: arango-deployment-replication-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - deployment-replication + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + - --operator.deployment-replication + + - --mode.single + + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/arango-deployment.yaml b/manifests/arango-deployment.yaml index 9550091a0..63403f7af 100644 --- a/manifests/arango-deployment.yaml +++ b/manifests/arango-deployment.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,193 +6,193 @@ metadata: name: arango-deployment-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-deployment-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-deployment-operator-rbac-deployment - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-deployment + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes", "persistentvolumes"] - verbs: ["get", "list"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes", "persistentvolumes"] + verbs: ["get", "list"] --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-deployment-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-deployment-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-deployment-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-deployment-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-deployment-operator-rbac-deployment - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-deployment + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-deployment-operator-rbac-deployment + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-deployment-operator-rbac-deployment subjects: - - kind: ServiceAccount - name: arango-deployment-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/default-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-deployment-operator-rbac-default - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-default + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment rules: - - apiGroups: [""] - resources: ["pods"] - verbs: ["get"] + - apiGroups: [""] + resources: ["pods"] + verbs: ["get"] --- # Source: kube-arangodb/templates/deployment-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-deployment-operator-rbac-deployment - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-deployment + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment rules: - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments", "arangodeployments/status", "arangomembers", "arangomembers/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangoclustersynchronizations", "arangoclustersynchronizations/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangotasks", "arangotasks/status"] - verbs: ["*"] - - apiGroups: [""] - resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts", "configmaps"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["policy"] - resources: ["poddisruptionbudgets"] - verbs: ["*"] - - apiGroups: ["backup.arangodb.com"] - resources: ["arangobackuppolicies", "arangobackups"] - verbs: ["get", "list", "watch"] - - apiGroups: ["monitoring.coreos.com"] - resources: ["servicemonitors"] - verbs: ["get", "create", "delete", "update", "list", "watch", "patch"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments", "arangodeployments/status","arangomembers", "arangomembers/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangoclustersynchronizations", "arangoclustersynchronizations/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangotasks", "arangotasks/status"] + verbs: ["*"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts", "configmaps"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["policy"] + resources: ["poddisruptionbudgets"] + verbs: ["*"] + - apiGroups: ["backup.arangodb.com"] + resources: ["arangobackuppolicies", "arangobackups"] + verbs: ["get", "list", "watch"] + - apiGroups: ["monitoring.coreos.com"] + resources: ["servicemonitors"] + verbs: ["get", "create", "delete", "update", "list", "watch", "patch"] --- # Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-deployment-operator-rbac-default - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-default + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-deployment-operator-rbac-default + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-deployment-operator-rbac-default subjects: - - kind: ServiceAccount - name: default - namespace: default + - kind: ServiceAccount + name: default + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-deployment-operator-rbac-deployment - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-deployment + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-deployment-operator-rbac-deployment + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-deployment-operator-rbac-deployment subjects: - - kind: ServiceAccount - name: arango-deployment-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -201,7 +202,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: deployment release: deployment @@ -232,209 +233,198 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-deployment-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment - template: - metadata: - labels: + name: arango-deployment-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: deployment release: deployment - spec: - serviceAccountName: arango-deployment-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - deployment - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.deployment - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment + spec: + serviceAccountName: arango-deployment-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - deployment + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + - --operator.deployment + + - --mode.single + + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/arango-k2kclustersync.yaml b/manifests/arango-k2kclustersync.yaml index d5445d528..beabc2a4f 100644 --- a/manifests/arango-k2kclustersync.yaml +++ b/manifests/arango-k2kclustersync.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,143 +6,147 @@ metadata: name: arango-k2kclustersync-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-k2kclustersync-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-k2kclustersync-operator-rbac-k2kclustersync - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-k2kclustersync + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-k2kclustersync-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-k2kclustersync-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-k2kclustersync-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-k2kclustersync-operator - namespace: default + - kind: ServiceAccount + name: arango-k2kclustersync-operator + namespace: default --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-k2kclustersync-operator-rbac-k2kclustersync - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-k2kclustersync + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-k2kclustersync-operator-rbac-k2kclustersync + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-k2kclustersync-operator-rbac-k2kclustersync subjects: - - kind: ServiceAccount - name: arango-k2kclustersync-operator - namespace: default + - kind: ServiceAccount + name: arango-k2kclustersync-operator + namespace: default + --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-k2kclustersync-operator-rbac-k2kclustersync - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-k2kclustersync + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments", "arangoclustersynchronizations"] - verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments", "arangoclustersynchronizations"] + verbs: ["get", "list", "watch"] + --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-k2kclustersync-operator-rbac-k2kclustersync - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-k2kclustersync + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-k2kclustersync-operator-rbac-k2kclustersync + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-k2kclustersync-operator-rbac-k2kclustersync subjects: - - kind: ServiceAccount - name: arango-k2kclustersync-operator - namespace: default + - kind: ServiceAccount + name: arango-k2kclustersync-operator + namespace: default + --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -151,7 +156,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: k2kclustersync release: k2kclustersync @@ -182,217 +187,200 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-k2kclustersync-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync - template: - metadata: - labels: + name: arango-k2kclustersync-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: k2kclustersync release: k2kclustersync - spec: - serviceAccountName: arango-k2kclustersync-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - k2kclustersync - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.k2k-cluster-sync - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync + spec: + serviceAccountName: arango-k2kclustersync-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - k2kclustersync + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + + - --mode.single + + + - --operator.k2k-cluster-sync + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/arango-storage.yaml b/manifests/arango-storage.yaml index 231384983..164157e26 100644 --- a/manifests/arango-storage.yaml +++ b/manifests/arango-storage.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,182 +6,182 @@ metadata: name: arango-storage-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage --- # Source: kube-arangodb/templates/storage-operator/crd.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangolocalstorages.storage.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arangolocalstorages.storage.arangodb.com + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage spec: - group: storage.arangodb.com - names: - kind: ArangoLocalStorage - listKind: ArangoLocalStorageList - plural: arangolocalstorages - shortNames: - - arangostorage - singular: arangolocalstorage - scope: Cluster - versions: - - name: v1alpha - served: true - storage: true - schema: - openAPIV3Schema: - type: object - x-kubernetes-preserve-unknown-fields: true + group: storage.arangodb.com + names: + kind: ArangoLocalStorage + listKind: ArangoLocalStorageList + plural: arangolocalstorages + shortNames: + - arangostorage + singular: arangolocalstorage + scope: Cluster + versions: + - name: v1alpha + served: true + storage: true + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-storage-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/storage-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-storage-operator-rbac-storage - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-storage + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage rules: - - apiGroups: [""] - resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"] - verbs: ["*"] - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes"] - verbs: ["get", "list", "watch"] - - apiGroups: ["storage.k8s.io"] - resources: ["storageclasses"] - verbs: ["*"] - - apiGroups: ["storage.arangodb.com"] - resources: ["arangolocalstorages"] - verbs: ["*"] + - apiGroups: [""] + resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"] + verbs: ["*"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes"] + verbs: ["get", "list", "watch"] + - apiGroups: ["storage.k8s.io"] + resources: ["storageclasses"] + verbs: ["*"] + - apiGroups: ["storage.arangodb.com"] + resources: ["arangolocalstorages"] + verbs: ["*"] --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-storage-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-storage-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-storage-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-storage-operator - namespace: default + - kind: ServiceAccount + name: arango-storage-operator + namespace: default --- # Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-storage-operator-rbac-storage - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-storage + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-storage-operator-rbac-storage + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-storage-operator-rbac-storage subjects: - - kind: ServiceAccount - name: arango-storage-operator - namespace: default + - kind: ServiceAccount + name: arango-storage-operator + namespace: default --- # Source: kube-arangodb/templates/storage-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-storage-operator-rbac-storage - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-storage + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage rules: - - apiGroups: [""] - resources: ["pods"] - verbs: ["get", "update", "watch", "list"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["daemonsets"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] + - apiGroups: [""] + resources: ["pods"] + verbs: ["get", "update", "watch", "list"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["daemonsets"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] --- # Source: kube-arangodb/templates/storage-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-storage-operator-rbac-storage - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-storage + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-storage-operator-rbac-storage + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-storage-operator-rbac-storage subjects: - - kind: ServiceAccount - name: arango-storage-operator - namespace: default + - kind: ServiceAccount + name: arango-storage-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -190,7 +191,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: storage release: storage @@ -221,213 +222,201 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-storage-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage - template: - metadata: - labels: + name: arango-storage-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: storage release: storage - spec: - serviceAccountName: arango-storage-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - storage - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.storage - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage + spec: + serviceAccountName: arango-storage-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - storage + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + - --operator.storage + + - --mode.single + + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml + diff --git a/manifests/kustomize/all/arango-all.yaml b/manifests/kustomize/all/arango-all.yaml index 27f8e8028..d9fe84251 100644 --- a/manifests/kustomize/all/arango-all.yaml +++ b/manifests/kustomize/all/arango-all.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/apps-operator/service-account-job.yaml apiVersion: v1 kind: ServiceAccount @@ -5,11 +6,12 @@ metadata: name: arango-all-operator-job namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all + --- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 @@ -18,356 +20,358 @@ metadata: name: arango-all-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all --- # Source: kube-arangodb/templates/storage-operator/crd.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangolocalstorages.storage.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arangolocalstorages.storage.arangodb.com + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all spec: - group: storage.arangodb.com - names: - kind: ArangoLocalStorage - listKind: ArangoLocalStorageList - plural: arangolocalstorages - shortNames: - - arangostorage - singular: arangolocalstorage - scope: Cluster - versions: - - name: v1alpha - served: true - storage: true - schema: - openAPIV3Schema: - type: object - x-kubernetes-preserve-unknown-fields: true + group: storage.arangodb.com + names: + kind: ArangoLocalStorage + listKind: ArangoLocalStorageList + plural: arangolocalstorages + shortNames: + - arangostorage + singular: arangolocalstorage + scope: Cluster + versions: + - name: v1alpha + served: true + storage: true + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true --- # Source: kube-arangodb/templates/apps-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-apps - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-apps + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/backup-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-backup - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-backup + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-deployment - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes", "persistentvolumes"] - verbs: ["get", "list"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes", "persistentvolumes"] + verbs: ["get", "list"] --- # Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-deployment-replication - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment-replication + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes"] - verbs: ["get", "list"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes"] + verbs: ["get", "list"] --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-k2kclustersync - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-k2kclustersync + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + --- # Source: kube-arangodb/templates/storage-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-all-operator-rbac-storage - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-storage + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"] - verbs: ["*"] - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes"] - verbs: ["get", "list", "watch"] - - apiGroups: ["storage.k8s.io"] - resources: ["storageclasses"] - verbs: ["*"] - - apiGroups: ["storage.arangodb.com"] - resources: ["arangolocalstorages"] - verbs: ["*"] + - apiGroups: [""] + resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"] + verbs: ["*"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes"] + verbs: ["get", "list", "watch"] + - apiGroups: ["storage.k8s.io"] + resources: ["storageclasses"] + verbs: ["*"] + - apiGroups: ["storage.arangodb.com"] + resources: ["arangolocalstorages"] + verbs: ["*"] --- # Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-apps - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-apps + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-apps + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-apps subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-backup - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-backup + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-backup + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-backup subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-deployment - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-deployment + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-deployment subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-deployment-replication - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment-replication + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-deployment-replication + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-deployment-replication subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-k2kclustersync - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-k2kclustersync + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-k2kclustersync + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-k2kclustersync subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default + --- # Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-all-operator-rbac-storage - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-storage + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-all-operator-rbac-storage + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-all-operator-rbac-storage subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/apps-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-apps - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-apps + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["batch"] - resources: ["jobs"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get", "list", "watch"] - - apiGroups: ["apps.arangodb.com"] - resources: ["arangojobs", "arangojobs/status"] - verbs: ["*"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["batch"] + resources: ["jobs"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get", "list", "watch"] + - apiGroups: ["apps.arangodb.com"] + resources: ["arangojobs","arangojobs/status"] + verbs: ["*"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role @@ -376,7 +380,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: all release: all @@ -389,191 +393,194 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-backup - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-backup + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["backup.arangodb.com"] - resources: ["arangobackuppolicies", "arangobackuppolicies/status", "arangobackups", "arangobackups/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["backup.arangodb.com"] + resources: ["arangobackuppolicies", "arangobackuppolicies/status", "arangobackups", "arangobackups/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/deployment-operator/default-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-default - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-default + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods"] - verbs: ["get"] + - apiGroups: [""] + resources: ["pods"] + verbs: ["get"] --- # Source: kube-arangodb/templates/deployment-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-deployment - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments", "arangodeployments/status", "arangomembers", "arangomembers/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangoclustersynchronizations", "arangoclustersynchronizations/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangotasks", "arangotasks/status"] - verbs: ["*"] - - apiGroups: [""] - resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts", "configmaps"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["policy"] - resources: ["poddisruptionbudgets"] - verbs: ["*"] - - apiGroups: ["backup.arangodb.com"] - resources: ["arangobackuppolicies", "arangobackups"] - verbs: ["get", "list", "watch"] - - apiGroups: ["monitoring.coreos.com"] - resources: ["servicemonitors"] - verbs: ["get", "create", "delete", "update", "list", "watch", "patch"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments", "arangodeployments/status","arangomembers", "arangomembers/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangoclustersynchronizations", "arangoclustersynchronizations/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangotasks", "arangotasks/status"] + verbs: ["*"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts", "configmaps"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["policy"] + resources: ["poddisruptionbudgets"] + verbs: ["*"] + - apiGroups: ["backup.arangodb.com"] + resources: ["arangobackuppolicies", "arangobackups"] + verbs: ["get", "list", "watch"] + - apiGroups: ["monitoring.coreos.com"] + resources: ["servicemonitors"] + verbs: ["get", "create", "delete", "update", "list", "watch", "patch"] --- # Source: kube-arangodb/templates/deployment-replications-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-deployment-replication - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment-replication + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: ["replication.database.arangodb.com"] - resources: ["arangodeploymentreplications", "arangodeploymentreplications/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get"] - - apiGroups: [""] - resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] + - apiGroups: ["replication.database.arangodb.com"] + resources: ["arangodeploymentreplications", "arangodeploymentreplications/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-k2kclustersync - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-k2kclustersync + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments", "arangoclustersynchronizations"] - verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments", "arangoclustersynchronizations"] + verbs: ["get", "list", "watch"] + --- # Source: kube-arangodb/templates/storage-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-all-operator-rbac-storage - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-storage + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all rules: - - apiGroups: [""] - resources: ["pods"] - verbs: ["get", "update", "watch", "list"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["daemonsets"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] + - apiGroups: [""] + resources: ["pods"] + verbs: ["get", "update", "watch", "list"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["daemonsets"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] --- # Source: kube-arangodb/templates/apps-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-apps - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-apps + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-apps + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-apps subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default + --- + apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: @@ -581,7 +588,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: all release: all @@ -598,127 +605,128 @@ subjects: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-backup - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-backup + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-backup + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-backup subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-default - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-default + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-default + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-default subjects: - - kind: ServiceAccount - name: default - namespace: default + - kind: ServiceAccount + name: default + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-deployment - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-deployment + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-deployment subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-deployment-replication - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-deployment-replication + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-deployment-replication + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-deployment-replication subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-k2kclustersync - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-k2kclustersync + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-k2kclustersync + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-k2kclustersync subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default + --- # Source: kube-arangodb/templates/storage-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-all-operator-rbac-storage - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all + name: arango-all-operator-rbac-storage + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-all-operator-rbac-storage + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-all-operator-rbac-storage subjects: - - kind: ServiceAccount - name: arango-all-operator - namespace: default + - kind: ServiceAccount + name: arango-all-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -728,7 +736,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: all release: all @@ -759,128 +767,134 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-all-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: all - release: all - template: - metadata: - labels: + name: arango-all-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: all release: all - spec: - serviceAccountName: arango-all-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - all - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.deployment - - --operator.deployment-replication - - --operator.storage - - --operator.backup - - --operator.apps - - --operator.k2k-cluster-sync - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - - name: ARANGOJOB_SA_NAME - value: "arango-all-operator-job" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: all + release: all + spec: + serviceAccountName: arango-all-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - all + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + - --operator.deployment + - --operator.deployment-replication + - --operator.storage + + - --operator.backup + - --mode.single + + - --operator.apps + + - --operator.k2k-cluster-sync + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + - name: ARANGOJOB_SA_NAME + value: "arango-all-operator-job" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + diff --git a/manifests/kustomize/apps/arango-apps.yaml b/manifests/kustomize/apps/arango-apps.yaml index 3bf8d3bca..899fa3b42 100644 --- a/manifests/kustomize/apps/arango-apps.yaml +++ b/manifests/kustomize/apps/arango-apps.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/apps-operator/service-account-job.yaml apiVersion: v1 kind: ServiceAccount @@ -5,11 +6,12 @@ metadata: name: arango-apps-operator-job namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps + --- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 @@ -18,128 +20,128 @@ metadata: name: arango-apps-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps --- # Source: kube-arangodb/templates/apps-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-apps-operator-rbac-apps - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-apps + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-apps-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-apps-operator-rbac-apps - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-apps + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-apps-operator-rbac-apps + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-apps-operator-rbac-apps subjects: - - kind: ServiceAccount - name: arango-apps-operator - namespace: default + - kind: ServiceAccount + name: arango-apps-operator + namespace: default --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-apps-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-apps-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-apps-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-apps-operator - namespace: default + - kind: ServiceAccount + name: arango-apps-operator + namespace: default --- # Source: kube-arangodb/templates/apps-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-apps-operator-rbac-apps - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-apps + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["batch"] - resources: ["jobs"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get", "list", "watch"] - - apiGroups: ["apps.arangodb.com"] - resources: ["arangojobs", "arangojobs/status"] - verbs: ["*"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["batch"] + resources: ["jobs"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get", "list", "watch"] + - apiGroups: ["apps.arangodb.com"] + resources: ["arangojobs","arangojobs/status"] + verbs: ["*"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role @@ -148,7 +150,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: apps release: apps @@ -161,23 +163,25 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-apps-operator-rbac-apps - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps + name: arango-apps-operator-rbac-apps + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-apps-operator-rbac-apps + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-apps-operator-rbac-apps subjects: - - kind: ServiceAccount - name: arango-apps-operator - namespace: default + - kind: ServiceAccount + name: arango-apps-operator + namespace: default + --- + apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: @@ -185,7 +189,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: apps release: apps @@ -206,7 +210,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: apps release: apps @@ -237,215 +241,202 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-apps-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: apps - release: apps - template: - metadata: - labels: + name: arango-apps-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: apps release: apps - spec: - serviceAccountName: arango-apps-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - apps - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.apps - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - - name: ARANGOJOB_SA_NAME - value: "arango-apps-operator-job" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: apps + release: apps + spec: + serviceAccountName: arango-apps-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - apps + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + + - --mode.single + + - --operator.apps + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + - name: ARANGOJOB_SA_NAME + value: "arango-apps-operator-job" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/kustomize/backup/arango-backup.yaml b/manifests/kustomize/backup/arango-backup.yaml index f990a3d60..ab56df5ca 100644 --- a/manifests/kustomize/backup/arango-backup.yaml +++ b/manifests/kustomize/backup/arango-backup.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,146 +6,146 @@ metadata: name: arango-backup-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup --- # Source: kube-arangodb/templates/backup-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-backup-operator-rbac-backup - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-backup + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-backup-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-backup-operator-rbac-backup - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-backup + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-backup-operator-rbac-backup + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-backup-operator-rbac-backup subjects: - - kind: ServiceAccount - name: arango-backup-operator - namespace: default + - kind: ServiceAccount + name: arango-backup-operator + namespace: default --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-backup-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-backup-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-backup-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-backup-operator - namespace: default + - kind: ServiceAccount + name: arango-backup-operator + namespace: default --- # Source: kube-arangodb/templates/backup-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-backup-operator-rbac-backup - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-backup + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["backup.arangodb.com"] - resources: ["arangobackuppolicies", "arangobackuppolicies/status", "arangobackups", "arangobackups/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["backup.arangodb.com"] + resources: ["arangobackuppolicies", "arangobackuppolicies/status", "arangobackups", "arangobackups/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get", "list", "watch"] --- # Source: kube-arangodb/templates/backup-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-backup-operator-rbac-backup - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup + name: arango-backup-operator-rbac-backup + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-backup-operator-rbac-backup + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-backup-operator-rbac-backup subjects: - - kind: ServiceAccount - name: arango-backup-operator - namespace: default + - kind: ServiceAccount + name: arango-backup-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -154,7 +155,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: backup release: backup @@ -185,217 +186,204 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-backup-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: backup - release: backup - template: - metadata: - labels: + name: arango-backup-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: backup release: backup - spec: - serviceAccountName: arango-backup-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - backup - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.backup - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: backup + release: backup + spec: + serviceAccountName: arango-backup-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - backup + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + + - --operator.backup + - --mode.single + + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/kustomize/crd/arango-crd.yaml b/manifests/kustomize/crd/arango-crd.yaml index c6f5c8ee9..5fc698c46 100644 --- a/manifests/kustomize/crd/arango-crd.yaml +++ b/manifests/kustomize/crd/arango-crd.yaml @@ -1,24 +1,18 @@ -# Source: kube-arangodb-crd/templates/backup-policy.yaml +--- +# File: chart/kube-arangodb/crds/apps-job.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangobackuppolicies.backup.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangojobs.apps.arangodb.com spec: - group: backup.arangodb.com + group: apps.arangodb.com names: - kind: ArangoBackupPolicy - listKind: ArangoBackupPolicyList - plural: arangobackuppolicies + kind: ArangoJob + listKind: ArangoJobList + plural: arangojobs + singular: arangojob shortNames: - - arangobackuppolicy - - arangobp - singular: arangobackuppolicy + - arangojob scope: Namespaced versions: - name: v1 @@ -29,56 +23,20 @@ spec: served: true storage: true additionalPrinterColumns: - - jsonPath: .spec.schedule - description: Schedule - name: Schedule - type: string - - jsonPath: .status.scheduled - description: Scheduled - name: Scheduled - type: string - - jsonPath: .status.message - priority: 1 - description: Message of the ArangoBackupPolicy object - name: Message - type: string - subresources: - status: {} - - name: v1alpha - schema: - openAPIV3Schema: - type: object - x-kubernetes-preserve-unknown-fields: true - served: true - storage: false - additionalPrinterColumns: - - jsonPath: .spec.schedule - description: Schedule - name: Schedule - type: string - - jsonPath: .status.scheduled - description: Scheduled - name: Scheduled - type: string - - jsonPath: .status.message - priority: 1 - description: Message of the ArangoBackupPolicy object - name: Message + - jsonPath: .spec.arangoDeploymentName + description: Deployment name + name: ArangoDeploymentName type: string subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/backup.yaml +# File: chart/kube-arangodb/crds/backups-backup.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: arangobackups.backup.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd spec: group: backup.arangodb.com names: @@ -178,27 +136,24 @@ spec: type: string subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/deployment-replications.yaml +# File: chart/kube-arangodb/crds/backups-backuppolicy.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangodeploymentreplications.replication.database.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangobackuppolicies.backup.arangodb.com spec: - group: replication.database.arangodb.com + group: backup.arangodb.com names: - kind: ArangoDeploymentReplication - listKind: ArangoDeploymentReplicationList - plural: arangodeploymentreplications + kind: ArangoBackupPolicy + listKind: ArangoBackupPolicyList + plural: arangobackuppolicies shortNames: - - arangorepl - singular: arangodeploymentreplication + - arangobackuppolicy + - arangobp + singular: arangobackuppolicy scope: Namespaced versions: - name: v1 @@ -208,6 +163,22 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: true + additionalPrinterColumns: + - jsonPath: .spec.schedule + description: Schedule + name: Schedule + type: string + - jsonPath: .status.scheduled + description: Scheduled + name: Scheduled + type: string + - jsonPath: .status.message + priority: 1 + description: Message of the ArangoBackupPolicy object + name: Message + type: string + subresources: + status: {} - name: v1alpha schema: openAPIV3Schema: @@ -215,6 +186,50 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: false + additionalPrinterColumns: + - jsonPath: .spec.schedule + description: Schedule + name: Schedule + type: string + - jsonPath: .status.scheduled + description: Scheduled + name: Scheduled + type: string + - jsonPath: .status.message + priority: 1 + description: Message of the ArangoBackupPolicy object + name: Message + type: string + subresources: + status: {} + + +--- +# File: chart/kube-arangodb/crds/database-clustersynchronization.yaml +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: arangoclustersynchronizations.database.arangodb.com +spec: + group: database.arangodb.com + names: + kind: ArangoClusterSynchronization + listKind: ArangoClusterSynchronizationList + plural: arangoclustersynchronizations + singular: arangoclustersynchronization + shortNames: + - arangoclustersync + scope: Namespaced + versions: + - name: v1 + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: true + subresources: + status: {} - name: v2alpha1 schema: openAPIV3Schema: @@ -224,18 +239,14 @@ spec: storage: false subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/deployment.yaml +# File: chart/kube-arangodb/crds/database-deployment.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: arangodeployments.database.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd spec: group: database.arangodb.com names: @@ -271,27 +282,23 @@ spec: storage: false subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/job.yaml +# File: chart/kube-arangodb/crds/database-member.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangojobs.apps.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangomembers.database.arangodb.com spec: - group: apps.arangodb.com + group: database.arangodb.com names: - kind: ArangoJob - listKind: ArangoJobList - plural: arangojobs - singular: arangojob + kind: ArangoMember + listKind: ArangoMemberList + plural: arangomembers shortNames: - - arangojob + - arangomembers + singular: arangomember scope: Namespaced versions: - name: v1 @@ -301,34 +308,35 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: true - additionalPrinterColumns: - - jsonPath: .spec.arangoDeploymentName - description: Deployment name - name: ArangoDeploymentName - type: string subresources: status: {} + - name: v2alpha1 + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: false + subresources: + status: {} + + --- -# Source: kube-arangodb-crd/templates/k2kclustersync.yaml +# File: chart/kube-arangodb/crds/database-task.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangoclustersynchronizations.database.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangotasks.database.arangodb.com spec: group: database.arangodb.com names: - kind: ArangoClusterSynchronization - listKind: ArangoClusterSynchronizationList - plural: arangoclustersynchronizations - singular: arangoclustersynchronization + kind: ArangoTask + listKind: ArangoTaskList + plural: arangotasks shortNames: - - arangoclustersync + - arangodb + - arango + singular: arangotask scope: Namespaced versions: - name: v1 @@ -338,8 +346,13 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: true - subresources: - status: {} + - name: v1alpha + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: false - name: v2alpha1 schema: openAPIV3Schema: @@ -349,27 +362,23 @@ spec: storage: false subresources: status: {} + + --- -# Source: kube-arangodb-crd/templates/member.yaml +# File: chart/kube-arangodb/crds/replication-deploymentreplication.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangomembers.database.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb-crd - helm.sh/chart: kube-arangodb-crd-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: crd - release: crd + name: arangodeploymentreplications.replication.database.arangodb.com spec: - group: database.arangodb.com + group: replication.database.arangodb.com names: - kind: ArangoMember - listKind: ArangoMemberList - plural: arangomembers + kind: ArangoDeploymentReplication + listKind: ArangoDeploymentReplicationList + plural: arangodeploymentreplications shortNames: - - arangomembers - singular: arangomember + - arangorepl + singular: arangodeploymentreplication scope: Namespaced versions: - name: v1 @@ -379,8 +388,13 @@ spec: x-kubernetes-preserve-unknown-fields: true served: true storage: true - subresources: - status: {} + - name: v1alpha + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true + served: true + storage: false - name: v2alpha1 schema: openAPIV3Schema: @@ -390,3 +404,5 @@ spec: storage: false subresources: status: {} + + diff --git a/manifests/kustomize/deployment-replication/arango-deployment-replication.yaml b/manifests/kustomize/deployment-replication/arango-deployment-replication.yaml index bd66e152c..ed46e5f09 100644 --- a/manifests/kustomize/deployment-replication/arango-deployment-replication.yaml +++ b/manifests/kustomize/deployment-replication/arango-deployment-replication.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,143 +6,143 @@ metadata: name: arango-deployment-replication-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-deployment-replication-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-deployment-replication-operator-rbac-deployment-replication - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-deployment-replication + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes"] - verbs: ["get", "list"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes"] + verbs: ["get", "list"] --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-deployment-replication-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-deployment-replication-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-deployment-replication-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-deployment-replication-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-replication-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-deployment-replication-operator-rbac-deployment-replication - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-deployment-replication + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-deployment-replication-operator-rbac-deployment-replication + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-deployment-replication-operator-rbac-deployment-replication subjects: - - kind: ServiceAccount - name: arango-deployment-replication-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-replication-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-replications-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-deployment-replication-operator-rbac-deployment-replication - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-deployment-replication + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication rules: - - apiGroups: ["replication.database.arangodb.com"] - resources: ["arangodeploymentreplications", "arangodeploymentreplications/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments"] - verbs: ["get"] - - apiGroups: [""] - resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] + - apiGroups: ["replication.database.arangodb.com"] + resources: ["arangodeploymentreplications", "arangodeploymentreplications/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments"] + verbs: ["get"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] --- # Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-deployment-replication-operator-rbac-deployment-replication - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication + name: arango-deployment-replication-operator-rbac-deployment-replication + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-deployment-replication-operator-rbac-deployment-replication + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-deployment-replication-operator-rbac-deployment-replication subjects: - - kind: ServiceAccount - name: arango-deployment-replication-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-replication-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -151,7 +152,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: deployment-replication release: deployment-replication @@ -182,217 +183,204 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-deployment-replication-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment-replication - release: deployment-replication - template: - metadata: - labels: + name: arango-deployment-replication-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: deployment-replication release: deployment-replication - spec: - serviceAccountName: arango-deployment-replication-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - deployment-replication - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.deployment-replication - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment-replication + release: deployment-replication + spec: + serviceAccountName: arango-deployment-replication-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - deployment-replication + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + - --operator.deployment-replication + + - --mode.single + + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/kustomize/deployment/arango-deployment.yaml b/manifests/kustomize/deployment/arango-deployment.yaml index 9550091a0..63403f7af 100644 --- a/manifests/kustomize/deployment/arango-deployment.yaml +++ b/manifests/kustomize/deployment/arango-deployment.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,193 +6,193 @@ metadata: name: arango-deployment-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-deployment-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-deployment-operator-rbac-deployment - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-deployment + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes", "persistentvolumes"] - verbs: ["get", "list"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes", "persistentvolumes"] + verbs: ["get", "list"] --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-deployment-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-deployment-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-deployment-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-deployment-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-deployment-operator-rbac-deployment - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-deployment + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-deployment-operator-rbac-deployment + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-deployment-operator-rbac-deployment subjects: - - kind: ServiceAccount - name: arango-deployment-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-operator + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/default-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-deployment-operator-rbac-default - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-default + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment rules: - - apiGroups: [""] - resources: ["pods"] - verbs: ["get"] + - apiGroups: [""] + resources: ["pods"] + verbs: ["get"] --- # Source: kube-arangodb/templates/deployment-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-deployment-operator-rbac-deployment - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-deployment + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment rules: - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments", "arangodeployments/status", "arangomembers", "arangomembers/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangoclustersynchronizations", "arangoclustersynchronizations/status"] - verbs: ["*"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangotasks", "arangotasks/status"] - verbs: ["*"] - - apiGroups: [""] - resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts", "configmaps"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["policy"] - resources: ["poddisruptionbudgets"] - verbs: ["*"] - - apiGroups: ["backup.arangodb.com"] - resources: ["arangobackuppolicies", "arangobackups"] - verbs: ["get", "list", "watch"] - - apiGroups: ["monitoring.coreos.com"] - resources: ["servicemonitors"] - verbs: ["get", "create", "delete", "update", "list", "watch", "patch"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments", "arangodeployments/status","arangomembers", "arangomembers/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangoclustersynchronizations", "arangoclustersynchronizations/status"] + verbs: ["*"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangotasks", "arangotasks/status"] + verbs: ["*"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints", "persistentvolumeclaims", "events", "secrets", "serviceaccounts", "configmaps"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["policy"] + resources: ["poddisruptionbudgets"] + verbs: ["*"] + - apiGroups: ["backup.arangodb.com"] + resources: ["arangobackuppolicies", "arangobackups"] + verbs: ["get", "list", "watch"] + - apiGroups: ["monitoring.coreos.com"] + resources: ["servicemonitors"] + verbs: ["get", "create", "delete", "update", "list", "watch", "patch"] --- # Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-deployment-operator-rbac-default - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-default + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-deployment-operator-rbac-default + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-deployment-operator-rbac-default subjects: - - kind: ServiceAccount - name: default - namespace: default + - kind: ServiceAccount + name: default + namespace: default --- # Source: kube-arangodb/templates/deployment-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-deployment-operator-rbac-deployment - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment + name: arango-deployment-operator-rbac-deployment + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-deployment-operator-rbac-deployment + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-deployment-operator-rbac-deployment subjects: - - kind: ServiceAccount - name: arango-deployment-operator - namespace: default + - kind: ServiceAccount + name: arango-deployment-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -201,7 +202,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: deployment release: deployment @@ -232,209 +233,198 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-deployment-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: deployment - release: deployment - template: - metadata: - labels: + name: arango-deployment-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: deployment release: deployment - spec: - serviceAccountName: arango-deployment-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - deployment - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.deployment - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: deployment + release: deployment + spec: + serviceAccountName: arango-deployment-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - deployment + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + - --operator.deployment + + - --mode.single + + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/kustomize/k2kclustersync/arango-k2kclustersync.yaml b/manifests/kustomize/k2kclustersync/arango-k2kclustersync.yaml index d5445d528..beabc2a4f 100644 --- a/manifests/kustomize/k2kclustersync/arango-k2kclustersync.yaml +++ b/manifests/kustomize/k2kclustersync/arango-k2kclustersync.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,143 +6,147 @@ metadata: name: arango-k2kclustersync-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-k2kclustersync-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-k2kclustersync-operator-rbac-k2kclustersync - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-k2kclustersync + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-k2kclustersync-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-k2kclustersync-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-k2kclustersync-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-k2kclustersync-operator - namespace: default + - kind: ServiceAccount + name: arango-k2kclustersync-operator + namespace: default --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-k2kclustersync-operator-rbac-k2kclustersync - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-k2kclustersync + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-k2kclustersync-operator-rbac-k2kclustersync + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-k2kclustersync-operator-rbac-k2kclustersync subjects: - - kind: ServiceAccount - name: arango-k2kclustersync-operator - namespace: default + - kind: ServiceAccount + name: arango-k2kclustersync-operator + namespace: default + --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-k2kclustersync-operator-rbac-k2kclustersync - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-k2kclustersync + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync rules: - - apiGroups: [""] - resources: ["pods", "services", "endpoints"] - verbs: ["get", "update"] - - apiGroups: [""] - resources: ["events"] - verbs: ["*"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] - - apiGroups: ["database.arangodb.com"] - resources: ["arangodeployments", "arangoclustersynchronizations"] - verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["pods", "services", "endpoints"] + verbs: ["get", "update"] + - apiGroups: [""] + resources: ["events"] + verbs: ["*"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] + - apiGroups: ["database.arangodb.com"] + resources: ["arangodeployments", "arangoclustersynchronizations"] + verbs: ["get", "list", "watch"] + --- # Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-k2kclustersync-operator-rbac-k2kclustersync - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync + name: arango-k2kclustersync-operator-rbac-k2kclustersync + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-k2kclustersync-operator-rbac-k2kclustersync + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-k2kclustersync-operator-rbac-k2kclustersync subjects: - - kind: ServiceAccount - name: arango-k2kclustersync-operator - namespace: default + - kind: ServiceAccount + name: arango-k2kclustersync-operator + namespace: default + --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -151,7 +156,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: k2kclustersync release: k2kclustersync @@ -182,217 +187,200 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-k2kclustersync-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: k2kclustersync - release: k2kclustersync - template: - metadata: - labels: + name: arango-k2kclustersync-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: k2kclustersync release: k2kclustersync - spec: - serviceAccountName: arango-k2kclustersync-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - k2kclustersync - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.k2k-cluster-sync - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: k2kclustersync + release: k2kclustersync + spec: + serviceAccountName: arango-k2kclustersync-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - k2kclustersync + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + + - --mode.single + + + - --operator.k2k-cluster-sync + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/storage-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/storage-operator/crd.yaml --- +# Source: kube-arangodb/templates/storage-operator/crd.yaml - -# Source: kube-arangodb/templates/storage-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/storage-operator/role-binding.yaml - -# Source: kube-arangodb/templates/storage-operator/role.yaml --- +# Source: kube-arangodb/templates/storage-operator/role.yaml diff --git a/manifests/kustomize/storage/arango-storage.yaml b/manifests/kustomize/storage/arango-storage.yaml index 231384983..164157e26 100644 --- a/manifests/kustomize/storage/arango-storage.yaml +++ b/manifests/kustomize/storage/arango-storage.yaml @@ -1,3 +1,4 @@ +--- # Source: kube-arangodb/templates/service-account.yaml apiVersion: v1 kind: ServiceAccount @@ -5,182 +6,182 @@ metadata: name: arango-storage-operator namespace: default labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage --- # Source: kube-arangodb/templates/storage-operator/crd.yaml apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: - name: arangolocalstorages.storage.arangodb.com - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arangolocalstorages.storage.arangodb.com + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage spec: - group: storage.arangodb.com - names: - kind: ArangoLocalStorage - listKind: ArangoLocalStorageList - plural: arangolocalstorages - shortNames: - - arangostorage - singular: arangolocalstorage - scope: Cluster - versions: - - name: v1alpha - served: true - storage: true - schema: - openAPIV3Schema: - type: object - x-kubernetes-preserve-unknown-fields: true + group: storage.arangodb.com + names: + kind: ArangoLocalStorage + listKind: ArangoLocalStorageList + plural: arangolocalstorages + shortNames: + - arangostorage + singular: arangolocalstorage + scope: Cluster + versions: + - name: v1alpha + served: true + storage: true + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true --- # Source: kube-arangodb/templates/crd/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-storage-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage rules: - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch", "update", "delete"] - resourceNames: - - "arangodeployments.database.arangodb.com" - - "arangoclustersynchronizations.database.arangodb.com" - - "arangomembers.database.arangodb.com" - - "arangotasks.database.arangodb.com" - - "arangodeploymentreplications.replication.database.arangodb.com" - - "arangobackups.backup.arangodb.com" - - "arangobackuppolicies.backup.arangodb.com" - - "arangojobs.apps.arangodb.com" - - "arangolocalstorages.storage.arangodb.com" + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch", "update", "delete"] + resourceNames: + - "arangodeployments.database.arangodb.com" + - "arangoclustersynchronizations.database.arangodb.com" + - "arangomembers.database.arangodb.com" + - "arangotasks.database.arangodb.com" + - "arangodeploymentreplications.replication.database.arangodb.com" + - "arangobackups.backup.arangodb.com" + - "arangobackuppolicies.backup.arangodb.com" + - "arangojobs.apps.arangodb.com" + - "arangolocalstorages.storage.arangodb.com" --- # Source: kube-arangodb/templates/storage-operator/cluster-role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: arango-storage-operator-rbac-storage - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-storage + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage rules: - - apiGroups: [""] - resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"] - verbs: ["*"] - - apiGroups: ["apiextensions.k8s.io"] - resources: ["customresourcedefinitions"] - verbs: ["get", "list", "watch"] - - apiGroups: [""] - resources: ["namespaces", "nodes"] - verbs: ["get", "list", "watch"] - - apiGroups: ["storage.k8s.io"] - resources: ["storageclasses"] - verbs: ["*"] - - apiGroups: ["storage.arangodb.com"] - resources: ["arangolocalstorages"] - verbs: ["*"] + - apiGroups: [""] + resources: ["persistentvolumes", "persistentvolumeclaims", "endpoints", "events", "services"] + verbs: ["*"] + - apiGroups: ["apiextensions.k8s.io"] + resources: ["customresourcedefinitions"] + verbs: ["get", "list", "watch"] + - apiGroups: [""] + resources: ["namespaces", "nodes"] + verbs: ["get", "list", "watch"] + - apiGroups: ["storage.k8s.io"] + resources: ["storageclasses"] + verbs: ["*"] + - apiGroups: ["storage.arangodb.com"] + resources: ["arangolocalstorages"] + verbs: ["*"] --- # Source: kube-arangodb/templates/crd/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-storage-operator-rbac-crd - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-crd + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-storage-operator-rbac-crd + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-storage-operator-rbac-crd subjects: - - kind: ServiceAccount - name: arango-storage-operator - namespace: default + - kind: ServiceAccount + name: arango-storage-operator + namespace: default --- # Source: kube-arangodb/templates/storage-operator/cluster-role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: arango-storage-operator-rbac-storage - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-storage + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: arango-storage-operator-rbac-storage + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: arango-storage-operator-rbac-storage subjects: - - kind: ServiceAccount - name: arango-storage-operator - namespace: default + - kind: ServiceAccount + name: arango-storage-operator + namespace: default --- # Source: kube-arangodb/templates/storage-operator/role.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: arango-storage-operator-rbac-storage - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-storage + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage rules: - - apiGroups: [""] - resources: ["pods"] - verbs: ["get", "update", "watch", "list"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get"] - - apiGroups: ["apps"] - resources: ["daemonsets"] - verbs: ["*"] - - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] - verbs: ["get"] + - apiGroups: [""] + resources: ["pods"] + verbs: ["get", "update", "watch", "list"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get"] + - apiGroups: ["apps"] + resources: ["daemonsets"] + verbs: ["*"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets"] + verbs: ["get"] --- # Source: kube-arangodb/templates/storage-operator/role-binding.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: arango-storage-operator-rbac-storage - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage + name: arango-storage-operator-rbac-storage + namespace: default + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: arango-storage-operator-rbac-storage + apiGroup: rbac.authorization.k8s.io + kind: Role + name: arango-storage-operator-rbac-storage subjects: - - kind: ServiceAccount - name: arango-storage-operator - namespace: default + - kind: ServiceAccount + name: arango-storage-operator + namespace: default --- # Source: kube-arangodb/templates/service.yaml apiVersion: v1 @@ -190,7 +191,7 @@ metadata: namespace: default labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: storage release: storage @@ -221,213 +222,201 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: arango-storage-operator - namespace: default - labels: - app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage -spec: - replicas: 2 - strategy: - type: Recreate - selector: - matchLabels: - app.kubernetes.io/name: kube-arangodb - app.kubernetes.io/managed-by: Tiller - app.kubernetes.io/instance: storage - release: storage - template: - metadata: - labels: + name: arango-storage-operator + namespace: default + labels: app.kubernetes.io/name: kube-arangodb - helm.sh/chart: kube-arangodb-1.2.24 + helm.sh/chart: kube-arangodb-1.2.25 app.kubernetes.io/managed-by: Tiller app.kubernetes.io/instance: storage release: storage - spec: - serviceAccountName: arango-storage-operator - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: kubernetes.io/arch - operator: In - values: - - "amd64" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - weight: 100 - podAffinityTerm: - topologyKey: "kubernetes.io/hostname" - labelSelector: - matchExpressions: - - key: app.kubernetes.io/name - operator: In - values: - - kube-arangodb - - key: app.kubernetes.io/instance - operator: In - values: - - storage - hostNetwork: false - hostPID: false - hostIPC: false - securityContext: - runAsNonRoot: true - runAsUser: 1000 - containers: - - name: operator - imagePullPolicy: Always - image: arangodb/kube-arangodb:1.2.24 - args: - - --scope=legacy - - --operator.storage - - --chaos.allowed=false - env: - - name: MY_POD_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: MY_POD_NAME - valueFrom: - fieldRef: - fieldPath: metadata.name - - name: MY_POD_IP - valueFrom: - fieldRef: - fieldPath: status.podIP - - name: RELATED_IMAGE_UBI - value: "alpine:3.11" - - name: RELATED_IMAGE_METRICSEXPORTER - value: "arangodb/arangodb-exporter:0.1.7" - - name: RELATED_IMAGE_DATABASE - value: "arangodb/arangodb:latest" - ports: - - name: metrics - containerPort: 8528 - securityContext: - privileged: false - allowPrivilegeEscalation: false - readOnlyRootFilesystem: true - capabilities: - drop: - - 'ALL' - livenessProbe: - httpGet: - path: /health - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - readinessProbe: - httpGet: - path: /ready - port: 8528 - scheme: HTTPS - initialDelaySeconds: 5 - periodSeconds: 10 - tolerations: - - key: "node.kubernetes.io/unreachable" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 - - key: "node.kubernetes.io/not-ready" - operator: "Exists" - effect: "NoExecute" - tolerationSeconds: 5 +spec: + replicas: 1 + strategy: + type: Recreate + + selector: + matchLabels: + app.kubernetes.io/name: kube-arangodb + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage + template: + metadata: + labels: + app.kubernetes.io/name: kube-arangodb + helm.sh/chart: kube-arangodb-1.2.25 + app.kubernetes.io/managed-by: Tiller + app.kubernetes.io/instance: storage + release: storage + spec: + serviceAccountName: arango-storage-operator + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: kubernetes.io/arch + operator: In + values: + - "amd64" + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - weight: 100 + podAffinityTerm: + topologyKey: "kubernetes.io/hostname" + labelSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: In + values: + - kube-arangodb + - key: app.kubernetes.io/instance + operator: In + values: + - storage + hostNetwork: false + hostPID: false + hostIPC: false + securityContext: + runAsNonRoot: true + runAsUser: 1000 + containers: + - name: operator + imagePullPolicy: Always + image: arangodb/kube-arangodb:1.2.25 + args: + - --scope=legacy + - --operator.storage + + - --mode.single + + + - --chaos.allowed=false + env: + - name: MY_POD_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: MY_POD_NAME + valueFrom: + fieldRef: + fieldPath: metadata.name + - name: MY_POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: RELATED_IMAGE_UBI + value: "alpine:3.11" + - name: RELATED_IMAGE_METRICSEXPORTER + value: "arangodb/arangodb-exporter:0.1.7" + - name: RELATED_IMAGE_DATABASE + value: "arangodb/arangodb:latest" + ports: + - name: metrics + containerPort: 8528 + securityContext: + privileged: false + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: + drop: + - 'ALL' + livenessProbe: + httpGet: + path: /health + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + readinessProbe: + httpGet: + path: /ready + port: 8528 + scheme: HTTPS + initialDelaySeconds: 5 + periodSeconds: 10 + tolerations: + - key: "node.kubernetes.io/unreachable" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 + - key: "node.kubernetes.io/not-ready" + operator: "Exists" + effect: "NoExecute" + tolerationSeconds: 5 -# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/apps-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/apps-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/apps-operator/role-binding.yaml - -# Source: kube-arangodb/templates/apps-operator/role.yaml --- +# Source: kube-arangodb/templates/apps-operator/role.yaml - -# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml --- +# Source: kube-arangodb/templates/apps-operator/service-account-job.yaml -# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/backup-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/backup-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/backup-operator/role-binding.yaml - -# Source: kube-arangodb/templates/backup-operator/role.yaml --- +# Source: kube-arangodb/templates/backup-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/default-role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/default-role.yaml - -# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-operator/role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/cluster-role.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role-binding.yaml - -# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml --- +# Source: kube-arangodb/templates/deployment-replications-operator/role.yaml - -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/cluster-role.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role-binding.yaml -# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml --- +# Source: kube-arangodb/templates/k2k-cluster-sync-operator/role.yaml +