-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathcmcc-crd.yaml
835 lines (835 loc) · 34.3 KB
/
cmcc-crd.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
# Generated by Fabric8 CRDGenerator, manual edits might get overwritten!
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
name: coremediacontentclouds.cmcc.tsystemsmms.com
spec:
group: cmcc.tsystemsmms.com
names:
kind: CoreMediaContentCloud
plural: coremediacontentclouds
shortNames:
- cmcc
- coremedia
singular: coremediacontentcloud
scope: Namespaced
versions:
- additionalPrinterColumns:
- jsonPath: .status.error
name: ERROR
priority: 0
type: string
- jsonPath: .status.milestone
name: MILESTONE
priority: 0
type: string
name: v1
schema:
openAPIV3Schema:
properties:
spec:
properties:
clientSecretRefs:
additionalProperties:
additionalProperties:
properties:
driverKey:
description: entry in the secret for the driver class or name
type: string
hostnameKey:
description: entry in the secret for hostname of the server
type: string
passwordKey:
description: entry in the secret for the password to authenticate
with
type: string
schemaKey:
description: "entry in the secret for the schema, database\
\ or service to use"
type: string
secretName:
description: resource name of the secret
type: string
urlKey:
description: entry in the secret for the url to connect to
type: string
usernameKey:
description: entry in the secret for the username to authenticate
with
type: string
type: object
type: object
description: References to existing secrets for components connecting
as clients to services
type: object
comment:
description: An arbitrary comment; can be used to force an update
to the object
type: string
components:
description: "List of components (CMS, Solr, CAE, etc.)"
items:
properties:
annotations:
additionalProperties:
type: string
description: Additional annotations
type: object
args:
description: Args for the main pod container
items:
type: string
type: array
env:
description: Additional environment variables
items:
properties:
name:
type: string
value:
type: string
valueFrom:
properties:
configMapKeyRef:
properties:
key:
type: string
name:
type: string
optional:
type: boolean
type: object
fieldRef:
properties:
apiVersion:
type: string
fieldPath:
type: string
type: object
resourceFieldRef:
properties:
containerName:
type: string
divisor:
anyOf:
- type: integer
- type: string
x-kubernetes-int-or-string: true
resource:
type: string
type: object
secretKeyRef:
properties:
key:
type: string
name:
type: string
optional:
type: boolean
type: object
type: object
type: object
type: array
extra:
additionalProperties:
type: string
description: Extra parameters (depends on component)
type: object
image:
description: Image for main pod' main container
properties:
pullPolicy:
description: Image pull policy (default 'IfNotPresent')
type: string
registry:
description: Image registry (default 'coremedia')
type: string
repository:
description: Image repository (default differs between components)
type: string
tag:
description: Image tag (default 'latest')
type: string
type: object
kind:
description: "Sub-type ('cms' or 'mls', or 'master' and 'replica',\
\ or 'preview' and 'live')"
type: string
milestone:
description: Make available with this milestone
enum:
- ContentServerInitialized
- ContentServerReady
- Created
- DatabasesReady
- Healing
- ManagementReady
- Never
- Ready
- RunJob
type: string
name:
description: Name to be used for k8s objects
type: string
podSecurityContext:
description: Security context for a pod
properties:
appArmorProfile:
properties:
localhostProfile:
type: string
type:
type: string
type: object
fsGroup:
type: integer
fsGroupChangePolicy:
type: string
runAsGroup:
type: integer
runAsNonRoot:
type: boolean
runAsUser:
type: integer
seLinuxOptions:
properties:
level:
type: string
role:
type: string
type:
type: string
user:
type: string
type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
type: object
supplementalGroups:
items:
type: integer
type: array
sysctls:
items:
properties:
name:
type: string
value:
type: string
type: object
type: array
windowsOptions:
properties:
gmsaCredentialSpec:
type: string
gmsaCredentialSpecName:
type: string
hostProcess:
type: boolean
runAsUserName:
type: string
type: object
type: object
resources:
description: "Resource management (limits, requests)"
properties:
limits:
additionalProperties:
type: string
description: Limits to resources for this components pods
type: object
requests:
additionalProperties:
type: string
description: Requests for resources for this components
pods
type: object
type: object
schemas:
additionalProperties:
type: string
description: "Schema names for JDBC, MongoDB, and/or UAPI"
type: object
securityContext:
description: Security context for containers in a pod
properties:
allowPrivilegeEscalation:
type: boolean
appArmorProfile:
properties:
localhostProfile:
type: string
type:
type: string
type: object
capabilities:
properties:
add:
items:
type: string
type: array
drop:
items:
type: string
type: array
type: object
privileged:
type: boolean
procMount:
type: string
readOnlyRootFilesystem:
type: boolean
runAsGroup:
type: integer
runAsNonRoot:
type: boolean
runAsUser:
type: integer
seLinuxOptions:
properties:
level:
type: string
role:
type: string
type:
type: string
user:
type: string
type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
type: object
windowsOptions:
properties:
gmsaCredentialSpec:
type: string
gmsaCredentialSpecName:
type: string
hostProcess:
type: boolean
runAsUserName:
type: string
type: object
type: object
type:
description: Type of the component
type: string
volumeSize:
description: Size of persistent data/cache volumes
properties:
data:
description: "Size of data volume, in k8s quantity"
type: string
mongoDbData:
description: "DEPRECATED. Size of MongoDb data volume, in\
\ k8s quantity"
type: string
mysqlData:
description: "DEPRECATED. Size of MySQL data volume, in\
\ k8s quantity"
type: string
solrData:
description: "DEPRECATED. Size of Solr data volume, in k8s\
\ quantity"
type: string
transformedBlobCache:
description: "Size of transformed BLOB cache, in k8s quantity"
type: string
uapiBlobCache:
description: "Size of UAPI BLOB cache, in k8s quantity"
type: string
type: object
type: object
type: array
defaultIngressTls:
description: Ingress TLS defaults
properties:
enabled:
description: Enable TLS for this ingress
type: boolean
secretName:
description: Name of secret with the TLS certificate
type: string
type: object
defaults:
description: Default values for components
properties:
annotations:
additionalProperties:
type: string
description: Additional annotations for all component pods
type: object
curlImage:
description: Docker image with curl available
type: string
image:
description: Defaults for the image specification
properties:
pullPolicy:
description: Image pull policy (default 'IfNotPresent')
type: string
registry:
description: Image registry (default 'coremedia')
type: string
repository:
description: Image repository (default differs between components)
type: string
tag:
description: Image tag (default 'latest')
type: string
type: object
ingressDomain:
description: Default domain name for Ingresses
type: string
insecureDatabasePassword:
description: "Use this password for all database accounts, instead\
\ of a random one."
type: string
javaOpts:
description: "For Java components, use these JAVA_OPTS."
type: string
liveUrlMapper:
description: Name of the URL Mapper to use by default for live
URL mappings
type: string
managementUrlMapper:
description: Name of the URL Mapper to use to create preview and
studio URL mappings
type: string
namePrefix:
description: Prefix resources with this name plus '-'. Empty string
means no prefix
type: string
podSecurityContext:
description: Default security context for a pod
properties:
appArmorProfile:
properties:
localhostProfile:
type: string
type:
type: string
type: object
fsGroup:
type: integer
fsGroupChangePolicy:
type: string
runAsGroup:
type: integer
runAsNonRoot:
type: boolean
runAsUser:
type: integer
seLinuxOptions:
properties:
level:
type: string
role:
type: string
type:
type: string
user:
type: string
type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
type: object
supplementalGroups:
items:
type: integer
type: array
sysctls:
items:
properties:
name:
type: string
value:
type: string
type: object
type: array
windowsOptions:
properties:
gmsaCredentialSpec:
type: string
gmsaCredentialSpecName:
type: string
hostProcess:
type: boolean
runAsUserName:
type: string
type: object
type: object
previewHostname:
description: "Hostname of the preview CAE. If short, will be prefixed\
\ with the prefix and the ingressDomain appended"
type: string
resources:
description: "Default resource management (limits, requests)"
properties:
limits:
additionalProperties:
type: string
description: Limits to resources for this components pods
type: object
requests:
additionalProperties:
type: string
description: Requests for resources for this components pods
type: object
type: object
securityContext:
description: Default security context for containers in a pod
properties:
allowPrivilegeEscalation:
type: boolean
appArmorProfile:
properties:
localhostProfile:
type: string
type:
type: string
type: object
capabilities:
properties:
add:
items:
type: string
type: array
drop:
items:
type: string
type: array
type: object
privileged:
type: boolean
procMount:
type: string
readOnlyRootFilesystem:
type: boolean
runAsGroup:
type: integer
runAsNonRoot:
type: boolean
runAsUser:
type: integer
seLinuxOptions:
properties:
level:
type: string
role:
type: string
type:
type: string
user:
type: string
type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
type: object
windowsOptions:
properties:
gmsaCredentialSpec:
type: string
gmsaCredentialSpecName:
type: string
hostProcess:
type: boolean
runAsUserName:
type: string
type: object
type: object
servletNames:
description: List of servlets the CAE serves
items:
type: string
type: array
siteMappingProtocol:
description: Default protocol for all site mapping entries
type: string
storageClass:
description: Name of StorageClass to be used for PersistentVolumeClaims
type: string
studioHostname:
description: "Hostname of the Studio. If short, will be prefixed\
\ with the prefix and the ingressDomain appended"
type: string
volumeSize:
description: Size of persistent data/cache volumes
properties:
data:
description: "Size of data volume, in k8s quantity"
type: string
mongoDbData:
description: "DEPRECATED. Size of MongoDb data volume, in\
\ k8s quantity"
type: string
mysqlData:
description: "DEPRECATED. Size of MySQL data volume, in k8s\
\ quantity"
type: string
solrData:
description: "DEPRECATED. Size of Solr data volume, in k8s\
\ quantity"
type: string
transformedBlobCache:
description: "Size of transformed BLOB cache, in k8s quantity"
type: string
uapiBlobCache:
description: "Size of UAPI BLOB cache, in k8s quantity"
type: string
type: object
type: object
job:
description: Run this job component once from Ready
type: string
licenseSecrets:
description: Names of the secrets containing the license
properties:
CMSLicense:
description: Name of the secret that has the license.zip for the
Content Management Server
type: string
MLSLicense:
description: Name of the secret that has the license.zip for the
Master Live Server
type: string
RLSLicense:
description: Name of the secret that has the license.zip for the
Replication Live Server
type: string
type: object
siteMappings:
description: Site mappings
items:
properties:
additionalSegments:
description: Additional segments that are available through
this hostname
items:
type: string
type: array
fqdn:
description: Fully-qualified hostname of the site; defaults
to the simple hostname
type: string
fqdnAliases:
description: Optional additional FQDNs to create ingress resources
for
items:
type: string
type: array
hostname:
description: Simple hostname of the site; used as the key for
site mappings
type: string
primarySegment:
description: The site segment the root maps to
type: string
protocol:
description: Protocol for this entry
type: string
tls:
description: TLS settings for this mapping
properties:
enabled:
description: Enable TLS for this ingress
type: boolean
secretName:
description: Name of secret with the TLS certificate
type: string
type: object
urlMapper:
description: URL mapper to use for this site
type: string
type: object
type: array
with:
description: Optional special components and configurations
properties:
cachesAsPvc:
description: Create cache directories as Persistent Volume Claims
type: boolean
contentImport:
description: "Import content, users, themes and workflows"
type: boolean
databases:
description: Create databases and secrets for CoreMedia
type: boolean
databasesOverride:
additionalProperties:
type: boolean
description: "Create databases and secrets, except for these"
type: object
delivery:
description: Create default components for the delivery stage
properties:
maxCae:
anyOf:
- type: integer
- type: string
description: Maximum number of CAEs per RLS
x-kubernetes-int-or-string: true
minCae:
anyOf:
- type: integer
- type: string
description: Minimum number of CAEs per RLS
x-kubernetes-int-or-string: true
rls:
anyOf:
- type: integer
- type: string
description: Number of RLS to create
x-kubernetes-int-or-string: true
type: object
handlerPrefixes:
description: Set of URI prefixes that should be passed through
to /blueprint/servlet unchanged
items:
type: string
type: array
ingressAnnotations:
additionalProperties:
type: string
description: Add these annotations to the managed Ingress resources
type: object
ingressSeoHandler:
description: Path to handler for robots.txt and sitemap.xml
type: string
management:
description: Create default components for the management stage
type: boolean
resources:
description: Enable setting resource limits and requests on all
components
type: boolean
responseTimeout:
description: Response timeouts for different Ingress objects
properties:
live:
anyOf:
- type: integer
- type: string
description: Response timeout in the ingress controller for
the live CAEs
x-kubernetes-int-or-string: true
preview:
anyOf:
- type: integer
- type: string
description: Response timeout in the ingress controller for
the preview CAE
x-kubernetes-int-or-string: true
studio:
anyOf:
- type: integer
- type: string
description: Response timeout in the ingress controller for
the Studio
x-kubernetes-int-or-string: true
type: object
uploadSize:
description: Size of POST/PUT body in MB
properties:
live:
anyOf:
- type: integer
- type: string
description: Size of POST/PUT body in MB for the live CAEs
x-kubernetes-int-or-string: true
preview:
anyOf:
- type: integer
- type: string
description: Size of POST/PUT body in MB for the preview CAE
x-kubernetes-int-or-string: true
studio:
anyOf:
- type: integer
- type: string
description: Size of POST/PUT body in MB for the Studio
x-kubernetes-int-or-string: true
type: object
volumeSize:
description: "DEPRECATED: Size of persistent data/cache volumes"
properties:
data:
description: "Size of data volume, in k8s quantity"
type: string
mongoDbData:
description: "DEPRECATED. Size of MongoDb data volume, in\
\ k8s quantity"
type: string
mysqlData:
description: "DEPRECATED. Size of MySQL data volume, in k8s\
\ quantity"
type: string
solrData:
description: "DEPRECATED. Size of Solr data volume, in k8s\
\ quantity"
type: string
transformedBlobCache:
description: "Size of transformed BLOB cache, in k8s quantity"
type: string
uapiBlobCache:
description: "Size of UAPI BLOB cache, in k8s quantity"
type: string
type: object
type: object
type: object
status:
properties:
error:
description: "Error indication, or empty string"
type: string
errorMessage:
description: Error message if state is error
type: string
flags:
additionalProperties:
type: string
description: Additional state flags
type: object
job:
description: Currently executing job
type: string
milestone:
description: Which milestone has been reached in configuring all components
enum:
- ContentServerInitialized
- ContentServerReady
- Created
- DatabasesReady
- Healing
- ManagementReady
- Never
- Ready
- RunJob
type: string
observedGeneration:
type: integer
ownedResourceRefs:
description: Unused
type: string
type: object
type: object
served: true
storage: true
subresources:
status: {}