Pulse Operator CRD and RBAC

apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: controller-gen.kubebuilder.io/version: v0.14.0 name: pulseoperators.pulse.acceldata.com spec: group: pulse.acceldata.com names: kind: PulseOperator listKind: PulseOperatorList plural: pulseoperators singular: pulseoperator scope: Namespaced versions: - name: v1 schema: openAPIV3Schema: description: PulseOperator is the Schema for the pulseoperators API properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' type: string kind: description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' type: string metadata: type: object spec: description: PulseOperatorSpec defines the desired state of PulseOperator properties: addons: items: type: string type: array emissary_https_node_port: format: int32 type: integer emissary_logstash_node_port: format: int32 type: integer emissary_nats_node_port: format: int32 type: integer emissary_new_ui_node_port: format: int32 type: integer emissary_node_port: format: int32 type: integer enable_pulse_monitoring: type: boolean environment: type: string host_aliases: items: description: 'HostAlias holds the mapping between IP and hostnames that will be injected as an entry in the pod''s hosts file.' properties: hostnames: description: Hostnames for the above IP address. items: type: string type: array ip: description: IP address of the host file entry. type: string type: object type: array install_emissary: type: boolean microservices: items: properties: command: items: type: string type: array enableHPA: type: boolean environment_variables: additionalProperties: type: string type: object image: type: string kind: type: string labels: additionalProperties: type: string type: object livenessProbe: properties: failureThreshold: type: integer initialDelaySeconds: type: integer path: type: string periodSeconds: type: integer port: type: integer successThreshold: type: integer timeoutSeconds: type: integer required: - failureThreshold - initialDelaySeconds - path - periodSeconds - port - successThreshold - timeoutSeconds type: object max_replicas: format: int32 type: integer name: type: string ports: additionalProperties: type: string type: object pulse_cluster: type: string readinessProbe: properties: failureThreshold: type: integer initialDelaySeconds: type: integer path: type: string periodSeconds: type: integer port: type: integer successThreshold: type: integer timeoutSeconds: type: integer required: - failureThreshold - initialDelaySeconds - path - periodSeconds - port - successThreshold - timeoutSeconds type: object replicas: format: int32 type: integer resources: properties: limits: properties: cpu: type: string memory: type: string required: - cpu - memory type: object requests: properties: cpu: type: string memory: type: string required: - cpu - memory type: object required: - limits - requests type: object volumes: items: description: 'only one of the config map or host path entry would be valid, the volume would be prepared by using configmap or through host path on node where deployment exist' properties: configmap_name: type: string container_path: type: string host_path: type: string is_directory: type: boolean name: type: string pvc_name: type: string read_only: type: boolean sub_path: type: string required: - name type: object type: array required: - environment_variables - image - name - replicas - resources type: object type: array multi_kdc: type: boolean pulse_agent: items: properties: environment_variables: additionalProperties: type: string type: object image: type: string labels: additionalProperties: type: string type: object name: type: string ports: additionalProperties: type: string type: object resources: properties: limits: properties: cpu: type: string memory: type: string required: - cpu - memory type: object requests: properties: cpu: type: string memory: type: string required: - cpu - memory type: object required: - limits - requests type: object terminateGracePeriodSeconds: format: int32 type: integer volumes: items: properties: configmap_name: type: string mountPath: type: string name: type: string subPath: type: string type: object type: array required: - image - name - resources type: object type: array registry_prefix: type: string registry_secret: type: string version: type: string required: - registry_prefix - registry_secret - version type: object status: description: 'PulseOperatorStatus defines the observed state of PulseOperator Important: Run "make" to regenerate code after modifying this file' type: object type: object served: true storage: true subresources: status: {}

apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/component: rbac app.kubernetes.io/created-by: installer app.kubernetes.io/instance: controller-manager app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: serviceaccount app.kubernetes.io/part-of: installer name: controller-manager namespace: PULSE_NAMESPACE --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: labels: app.kubernetes.io/component: rbac app.kubernetes.io/created-by: installer app.kubernetes.io/instance: leader-election-role app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: role app.kubernetes.io/part-of: installer name: leader-election-role namespace: PULSE_NAMESPACE rules: - apiGroups: - batch resources: - jobs verbs: - get - list - watch - create - update - patch - delete - apiGroups: - '*' resources: - pods - pods/log verbs: - '*' - apiGroups: - '*' resources: - pods/exec verbs: - '*' - apiGroups: - apps resources: - deployments - daemonsets verbs: - get - list - watch - create - update - patch - delete - apiGroups: - '' resources: - configmaps verbs: - get - list - watch - create - update - patch - delete - apiGroups: - coordination.k8s.io resources: - leases verbs: - get - list - watch - create - update - patch - delete - apiGroups: - '' resources: - events verbs: - create - patch - apiGroups: - batch resources: - jobs - jobs/batch verbs: - get - list - watch - create - update - patch - delete - apiGroups: - '' resources: - services - configmaps - persistentvolumeclaims - secrets - daemonsets verbs: - create - delete - patch - get - list - watch - update - apiGroups: - pulse.acceldata.com resources: - pulseoperators verbs: - create - delete - get - list - patch - update - watch - apiGroups: - pulse.acceldata.com resources: - pulseoperators/finalizers verbs: - update - apiGroups: - pulse.acceldata.com resources: - pulseoperators/status verbs: - get - patch - update --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/component: rbac app.kubernetes.io/created-by: installer app.kubernetes.io/instance: leader-election-rolebinding app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: rolebinding app.kubernetes.io/part-of: installer name: leader-election-rolebinding namespace: PULSE_NAMESPACE roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: leader-election-role subjects: - kind: ServiceAccount name: controller-manager namespace: PULSE_NAMESPACE --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: creationTimestamp: null name: manager-role namespace: PULSE_NAMESPACE rules: - apiGroups: - pulse.acceldata.com - policy - apps resources: - pulseoperators - poddisruptionbudgets - statefulsets - daemonsets - modules - tcpmappings - hosts - tlscontexts verbs: - create - delete - get - list - patch - update - watch - apiGroups: - pulse.acceldata.com resources: - pulseoperators/finalizers verbs: - update - apiGroups: - pulse.acceldata.com resources: - pulseoperators/status verbs: - get - patch - update - apiGroups: - apps resources: - deployments verbs: - get - list - delete - apiGroups: - '' resources: - services - endpoints - secrets verbs: - get - list - delete --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: labels: app.kubernetes.io/component: rbac app.kubernetes.io/created-by: installer app.kubernetes.io/instance: manager-rolebinding app.kubernetes.io/managed-by: kustomize app.kubernetes.io/name: rolebinding app.kubernetes.io/part-of: installer name: manager-rolebinding namespace: PULSE_NAMESPACE roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: manager-role subjects: - kind: ServiceAccount name: controller-manager namespace: PULSE_NAMESPACE --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: pod-watcher rules: - apiGroups: - '' resources: - pods - configmaps verbs: - list - watch - get --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: pod-watcher roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: pod-watcher subjects: - kind: ServiceAccount name: controller-manager namespace: PULSE_NAMESPACE --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: rbacscalability namespace: PULSE_NAMESPACE rules: - apiGroups: - '' resources: - pods verbs: - get - watch - list --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: rbindingscalability namespace: PULSE_NAMESPACE roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: rbacscalability subjects: - kind: User name: system:serviceaccount:PULSE_NAMESPACE:default