1apiVersion: v1
2kind: Namespace
3metadata:
4 name: couchctl
5 labels:
6 workload.edge.ncr.com: platform
7 annotations:
8 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
9 pallet.edge.ncr.com/name: couchctl
10 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
11 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
12 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
13 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
14---
15apiVersion: v1
16kind: ServiceAccount
17metadata:
18 name: couchctl
19 namespace: couchctl
20 annotations:
21 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
22 pallet.edge.ncr.com/name: couchctl
23 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
24 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
25 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
26 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
27 labels: {}
28---
29apiVersion: rbac.authorization.k8s.io/v1
30kind: ClusterRole
31metadata:
32 name: couchctl
33 annotations:
34 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
35 pallet.edge.ncr.com/name: couchctl
36 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
37 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
38 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
39 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
40 labels: {}
41rules:
42- resources:
43 - configmaps
44 - namespaces
45 - secrets
46 - serviceaccounts
47 - services
48 apiGroups:
49 - ""
50 verbs:
51 - create
52 - delete
53 - get
54 - list
55 - patch
56 - update
57 - watch
58- resources:
59 - namespaces
60 apiGroups:
61 - ""
62 verbs:
63 - create
64 - get
65 - list
66 - watch
67- resources:
68 - namespaces/status
69 - services/status
70 apiGroups:
71 - ""
72 verbs:
73 - get
74- resources:
75 - pods
76 apiGroups:
77 - ""
78 verbs:
79 - get
80 - list
81 - watch
82- resources:
83 - pods/status
84 apiGroups:
85 - ""
86 verbs:
87 - get
88 - watch
89- resources:
90 - statefulsets
91 apiGroups:
92 - apps
93 verbs:
94 - create
95 - delete
96 - get
97 - list
98 - patch
99 - update
100 - watch
101- resources:
102 - statefulsets/status
103 apiGroups:
104 - apps
105 verbs:
106 - get
107 - watch
108- resources:
109 - backendconfigs
110 apiGroups:
111 - cloud.google.com
112 verbs:
113 - create
114 - get
115 - list
116 - patch
117 - update
118 - watch
119- resources:
120 - '*'
121 apiGroups:
122 - datasync.edge.ncr.com
123 verbs:
124 - create
125 - get
126 - list
127 - patch
128 - update
129 - watch
130- resources:
131 - couchdbdatabases/status
132 - couchdbreplicationsets/status
133 - couchdbservers/status
134 - couchdbusers/status
135 apiGroups:
136 - datasync.edge.ncr.com
137 verbs:
138 - get
139 - patch
140 - update
141 - watch
142- resources:
143 - couchdbusers/finalizers
144 apiGroups:
145 - datasync.edge.ncr.com
146 verbs:
147 - create
148 - delete
149 - get
150 - patch
151 - update
152- resources:
153 - ienodes
154 apiGroups:
155 - dsds.edge.ncr.com
156 verbs:
157 - get
158 - list
159 - watch
160- resources:
161 - persistence
162 apiGroups:
163 - edge.ncr.com
164 verbs:
165 - create
166 - delete
167 - get
168 - list
169 - patch
170 - update
171 - watch
172- resources:
173 - persistence/status
174 apiGroups:
175 - edge.ncr.com
176 verbs:
177 - get
178 - watch
179- resources:
180 - externalsecrets
181 apiGroups:
182 - external-secrets.io
183 verbs:
184 - create
185 - get
186 - patch
187 - update
188 - watch
189- resources:
190 - servicemonitors
191 apiGroups:
192 - monitoring.coreos.com
193 verbs:
194 - create
195 - delete
196 - get
197 - list
198 - patch
199 - update
200 - watch
201- resources:
202 - frontendconfigs
203 apiGroups:
204 - networking.gke.io
205 verbs:
206 - create
207 - get
208 - list
209 - patch
210 - update
211 - watch
212- resources:
213 - managedcertificates
214 apiGroups:
215 - networking.gke.io
216 verbs:
217 - create
218 - get
219 - list
220 - patch
221 - update
222 - watch
223- resources:
224 - managedcertificates/status
225 apiGroups:
226 - networking.gke.io
227 verbs:
228 - get
229 - watch
230- resources:
231 - ingresses
232 apiGroups:
233 - networking.k8s.io
234 verbs:
235 - create
236 - get
237 - list
238 - patch
239 - update
240 - watch
241- resources:
242 - ingresses/status
243 apiGroups:
244 - networking.k8s.io
245 verbs:
246 - get
247 - watch
248- resources:
249 - serverauthorizations
250 - servers
251 apiGroups:
252 - policy.linkerd.io
253 verbs:
254 - create
255 - delete
256 - get
257 - list
258 - patch
259 - update
260 - watch
261- resources:
262 - clusterrolebindings
263 - clusterroles
264 - rolebindings
265 - roles
266 apiGroups:
267 - rbac.authorization.k8s.io
268 verbs:
269 - create
270 - get
271 - list
272 - patch
273 - update
274 - watch
275- resources:
276 - clusterroles
277 - roles
278 apiGroups:
279 - rbac.authorization.k8s.io
280 verbs:
281 - bind
282 - escalate
283---
284apiVersion: rbac.authorization.k8s.io/v1
285kind: ClusterRoleBinding
286metadata:
287 name: couchctl
288 annotations:
289 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
290 pallet.edge.ncr.com/name: couchctl
291 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
292 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
293 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
294 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
295 labels: {}
296roleRef:
297 name: couchctl
298 kind: ClusterRole
299 apiGroup: rbac.authorization.k8s.io
300subjects:
301- name: couchctl
302 namespace: couchctl
303 kind: ServiceAccount
304---
305apiVersion: apps/v1
306kind: Deployment
307metadata:
308 name: couchctl
309 namespace: couchctl
310 annotations:
311 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
312 pallet.edge.ncr.com/name: couchctl
313 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
314 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
315 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
316 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
317 labels: {}
318spec:
319 replicas: 1
320 selector:
321 matchLabels:
322 platform.edge.ncr.com/component: couchctl
323 template:
324 metadata:
325 labels:
326 platform.edge.ncr.com/component: couchctl
327 annotations:
328 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
329 pallet.edge.ncr.com/name: couchctl
330 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
331 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
332 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
333 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
334 spec:
335 serviceAccountName: couchctl
336 containers:
337 - name: couchctl
338 image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/couchctl@sha256:8e386b6bc07104db5f9de8cd1cacc19e4903cee8f4a3c244734a058ba6a43bec
339 ports:
340 - name: metrics
341 protocol: TCP
342 containerPort: 8080
343 envFrom:
344 - secretRef:
345 name: ldkey
346 - configMapRef:
347 name: dns
348 optional: true
349 resources:
350 limits:
351 cpu: "100m"
352 imagePullPolicy: IfNotPresent
353 imagePullSecrets:
354 - name: edge-docker-pull-secret
355 affinity:
356 nodeAffinity:
357 preferredDuringSchedulingIgnoredDuringExecution:
358 - weight: 100
359 preference:
360 matchExpressions:
361 - key: node.ncr.com/class
362 operator: In
363 values:
364 - server
365---
366apiVersion: external-secrets.io/v1beta1
367kind: ExternalSecret
368metadata:
369 name: gcp-api-key
370 namespace: couchctl
371 annotations:
372 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
373 pallet.edge.ncr.com/name: couchctl
374 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
375 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
376 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
377 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
378 labels: {}
379spec:
380 data:
381 - remoteRef:
382 key: ${pallet_name}-${cluster_uuid}-gcp-api-key
383 secretKey: key.json
384 refreshInterval: 1m
385 secretStoreRef:
386 name: gcp-provider
387 kind: ClusterSecretStore
388 target:
389 name: gcp-api-key
390 creationPolicy: Owner
391---
392apiVersion: external-secrets.io/v1beta1
393kind: ExternalSecret
394metadata:
395 name: ldkey
396 namespace: couchctl
397 labels:
398 platform.edge.ncr.com/component: couchctl
399 annotations:
400 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
401 pallet.edge.ncr.com/name: couchctl
402 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
403 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
404 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
405 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
406spec:
407 data:
408 - remoteRef:
409 key: edge-backend-launch-darkly-sdk-key
410 secretKey: LD_KEY
411 refreshInterval: 1m
412 secretStoreRef:
413 name: gcp-provider
414 kind: ClusterSecretStore
415 target:
416 name: ldkey
417 creationPolicy: Owner
View as plain text