apiVersion: v1
kind: Namespace
metadata:
  name: couchctl
  labels:
    workload.edge.ncr.com: platform
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: couchctl
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: couchctl
  namespace: couchctl
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: couchctl
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
  labels: {}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: couchctl
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: couchctl
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
  labels: {}
rules:
- resources:
  - configmaps
  - namespaces
  - secrets
  - serviceaccounts
  - services
  apiGroups:
  - ""
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - namespaces
  apiGroups:
  - ""
  verbs:
  - create
  - get
  - list
  - watch
- resources:
  - namespaces/status
  - services/status
  apiGroups:
  - ""
  verbs:
  - get
- resources:
  - pods
  apiGroups:
  - ""
  verbs:
  - get
  - list
  - watch
- resources:
  - pods/status
  apiGroups:
  - ""
  verbs:
  - get
  - watch
- resources:
  - statefulsets
  apiGroups:
  - apps
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - statefulsets/status
  apiGroups:
  - apps
  verbs:
  - get
  - watch
- resources:
  - backendconfigs
  apiGroups:
  - cloud.google.com
  verbs:
  - create
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - '*'
  apiGroups:
  - datasync.edge.ncr.com
  verbs:
  - create
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - couchdbdatabases/status
  - couchdbreplicationsets/status
  - couchdbservers/status
  - couchdbusers/status
  apiGroups:
  - datasync.edge.ncr.com
  verbs:
  - get
  - patch
  - update
  - watch
- resources:
  - couchdbusers/finalizers
  apiGroups:
  - datasync.edge.ncr.com
  verbs:
  - create
  - delete
  - get
  - patch
  - update
- resources:
  - ienodes
  apiGroups:
  - dsds.edge.ncr.com
  verbs:
  - get
  - list
  - watch
- resources:
  - persistence
  apiGroups:
  - edge.ncr.com
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - persistence/status
  apiGroups:
  - edge.ncr.com
  verbs:
  - get
  - watch
- resources:
  - externalsecrets
  apiGroups:
  - external-secrets.io
  verbs:
  - create
  - get
  - patch
  - update
  - watch
- resources:
  - servicemonitors
  apiGroups:
  - monitoring.coreos.com
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - frontendconfigs
  apiGroups:
  - networking.gke.io
  verbs:
  - create
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - managedcertificates
  apiGroups:
  - networking.gke.io
  verbs:
  - create
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - managedcertificates/status
  apiGroups:
  - networking.gke.io
  verbs:
  - get
  - watch
- resources:
  - ingresses
  apiGroups:
  - networking.k8s.io
  verbs:
  - create
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - ingresses/status
  apiGroups:
  - networking.k8s.io
  verbs:
  - get
  - watch
- resources:
  - serverauthorizations
  - servers
  apiGroups:
  - policy.linkerd.io
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - clusterrolebindings
  - clusterroles
  - rolebindings
  - roles
  apiGroups:
  - rbac.authorization.k8s.io
  verbs:
  - create
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - clusterroles
  - roles
  apiGroups:
  - rbac.authorization.k8s.io
  verbs:
  - bind
  - escalate
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: couchctl
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: couchctl
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
  labels: {}
roleRef:
  name: couchctl
  kind: ClusterRole
  apiGroup: rbac.authorization.k8s.io
subjects:
- name: couchctl
  namespace: couchctl
  kind: ServiceAccount
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: couchctl
  namespace: couchctl
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: couchctl
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
  labels: {}
spec:
  replicas: 1
  selector:
    matchLabels:
      platform.edge.ncr.com/component: couchctl
  template:
    metadata:
      labels:
        platform.edge.ncr.com/component: couchctl
      annotations:
        pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
        pallet.edge.ncr.com/name: couchctl
        pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
        pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
        pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
        pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
    spec:
      serviceAccountName: couchctl
      containers:
      - name: couchctl
        image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/couchctl@sha256:8e386b6bc07104db5f9de8cd1cacc19e4903cee8f4a3c244734a058ba6a43bec
        ports:
        - name: metrics
          protocol: TCP
          containerPort: 8080
        envFrom:
        - secretRef:
            name: ldkey
        - configMapRef:
            name: dns
            optional: true
        resources:
          limits:
            cpu: "100m"
        imagePullPolicy: IfNotPresent
      imagePullSecrets:
      - name: edge-docker-pull-secret
      affinity:
        nodeAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - weight: 100
            preference:
              matchExpressions:
              - key: node.ncr.com/class
                operator: In
                values:
                - server
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: gcp-api-key
  namespace: couchctl
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: couchctl
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
  labels: {}
spec:
  data:
  - remoteRef:
      key: ${pallet_name}-${cluster_uuid}-gcp-api-key
    secretKey: key.json
  refreshInterval: 1m
  secretStoreRef:
    name: gcp-provider
    kind: ClusterSecretStore
  target:
    name: gcp-api-key
    creationPolicy: Owner
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: ldkey
  namespace: couchctl
  labels:
    platform.edge.ncr.com/component: couchctl
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: couchctl
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  data:
  - remoteRef:
      key: edge-backend-launch-darkly-sdk-key
    secretKey: LD_KEY
  refreshInterval: 1m
  secretStoreRef:
    name: gcp-provider
    kind: ClusterSecretStore
  target:
    name: ldkey
    creationPolicy: Owner