apiVersion: v1 kind: Namespace metadata: name: couchctl labels: workload.edge.ncr.com: platform annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: couchctl pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a --- apiVersion: v1 kind: ServiceAccount metadata: name: couchctl namespace: couchctl annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: couchctl pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: couchctl annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: couchctl pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} rules: - resources: - configmaps - namespaces - secrets - serviceaccounts - services apiGroups: - "" verbs: - create - delete - get - list - patch - update - watch - resources: - namespaces apiGroups: - "" verbs: - create - get - list - watch - resources: - namespaces/status - services/status apiGroups: - "" verbs: - get - resources: - pods apiGroups: - "" verbs: - get - list - watch - resources: - pods/status apiGroups: - "" verbs: - get - watch - resources: - statefulsets apiGroups: - apps verbs: - create - delete - get - list - patch - update - watch - resources: - statefulsets/status apiGroups: - apps verbs: - get - watch - resources: - backendconfigs apiGroups: - cloud.google.com verbs: - create - get - list - patch - update - watch - resources: - '*' apiGroups: - datasync.edge.ncr.com verbs: - create - get - list - patch - update - watch - resources: - couchdbdatabases/status - couchdbreplicationsets/status - couchdbservers/status - couchdbusers/status apiGroups: - datasync.edge.ncr.com verbs: - get - patch - update - watch - resources: - couchdbusers/finalizers apiGroups: - datasync.edge.ncr.com verbs: - create - delete - get - patch - update - resources: - ienodes apiGroups: - dsds.edge.ncr.com verbs: - get - list - watch - resources: - persistence apiGroups: - edge.ncr.com verbs: - create - delete - get - list - patch - update - watch - resources: - persistence/status apiGroups: - edge.ncr.com verbs: - get - watch - resources: - externalsecrets apiGroups: - external-secrets.io verbs: - create - get - patch - update - watch - resources: - servicemonitors apiGroups: - monitoring.coreos.com verbs: - create - delete - get - list - patch - update - watch - resources: - frontendconfigs apiGroups: - networking.gke.io verbs: - create - get - list - patch - update - watch - resources: - managedcertificates apiGroups: - networking.gke.io verbs: - create - get - list - patch - update - watch - resources: - managedcertificates/status apiGroups: - networking.gke.io verbs: - get - watch - resources: - ingresses apiGroups: - networking.k8s.io verbs: - create - get - list - patch - update - watch - resources: - ingresses/status apiGroups: - networking.k8s.io verbs: - get - watch - resources: - serverauthorizations - servers apiGroups: - policy.linkerd.io verbs: - create - delete - get - list - patch - update - watch - resources: - clusterrolebindings - clusterroles - rolebindings - roles apiGroups: - rbac.authorization.k8s.io verbs: - create - get - list - patch - update - watch - resources: - clusterroles - roles apiGroups: - rbac.authorization.k8s.io verbs: - bind - escalate --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: couchctl annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: couchctl pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} roleRef: name: couchctl kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: couchctl namespace: couchctl kind: ServiceAccount --- apiVersion: apps/v1 kind: Deployment metadata: name: couchctl namespace: couchctl annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: couchctl pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} spec: replicas: 1 selector: matchLabels: platform.edge.ncr.com/component: couchctl template: metadata: labels: platform.edge.ncr.com/component: couchctl annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: couchctl pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: serviceAccountName: couchctl containers: - name: couchctl image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/couchctl@sha256:8e386b6bc07104db5f9de8cd1cacc19e4903cee8f4a3c244734a058ba6a43bec ports: - name: metrics protocol: TCP containerPort: 8080 envFrom: - secretRef: name: ldkey - configMapRef: name: dns optional: true resources: limits: cpu: "100m" imagePullPolicy: IfNotPresent imagePullSecrets: - name: edge-docker-pull-secret affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - weight: 100 preference: matchExpressions: - key: node.ncr.com/class operator: In values: - server --- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: gcp-api-key namespace: couchctl annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: couchctl pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a labels: {} spec: data: - remoteRef: key: ${pallet_name}-${cluster_uuid}-gcp-api-key secretKey: key.json refreshInterval: 1m secretStoreRef: name: gcp-provider kind: ClusterSecretStore target: name: gcp-api-key creationPolicy: Owner --- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: ldkey namespace: couchctl labels: platform.edge.ncr.com/component: couchctl annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: couchctl pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: data: - remoteRef: key: edge-backend-launch-darkly-sdk-key secretKey: LD_KEY refreshInterval: 1m secretStoreRef: name: gcp-provider kind: ClusterSecretStore target: name: ldkey creationPolicy: Owner