1apiVersion: v1
2kind: Namespace
3metadata:
4 name: couchctl
5 labels:
6 workload.edge.ncr.com: platform
7 annotations:
8 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
9 pallet.edge.ncr.com/name: couchctl
10 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
11 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
12 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
13 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
14---
15apiVersion: v1
16kind: ServiceAccount
17metadata:
18 name: couchctl
19 namespace: couchctl
20 annotations:
21 iam.gke.io/gcp-service-account: couchctl-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
22 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
23 pallet.edge.ncr.com/name: couchctl
24 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
25 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
26 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
27 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
28 labels: {}
29---
30apiVersion: rbac.authorization.k8s.io/v1
31kind: ClusterRole
32metadata:
33 name: couchctl
34 annotations:
35 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
36 pallet.edge.ncr.com/name: couchctl
37 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
38 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
39 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
40 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
41 labels: {}
42rules:
43- resources:
44 - configmaps
45 - namespaces
46 - secrets
47 - serviceaccounts
48 - services
49 apiGroups:
50 - ""
51 verbs:
52 - create
53 - delete
54 - get
55 - list
56 - patch
57 - update
58 - watch
59- resources:
60 - namespaces
61 apiGroups:
62 - ""
63 verbs:
64 - create
65 - get
66 - list
67 - watch
68- resources:
69 - namespaces/status
70 - services/status
71 apiGroups:
72 - ""
73 verbs:
74 - get
75- resources:
76 - pods
77 apiGroups:
78 - ""
79 verbs:
80 - get
81 - list
82 - watch
83- resources:
84 - pods/status
85 apiGroups:
86 - ""
87 verbs:
88 - get
89 - watch
90- resources:
91 - statefulsets
92 apiGroups:
93 - apps
94 verbs:
95 - create
96 - delete
97 - get
98 - list
99 - patch
100 - update
101 - watch
102- resources:
103 - statefulsets/status
104 apiGroups:
105 - apps
106 verbs:
107 - get
108 - watch
109- resources:
110 - backendconfigs
111 apiGroups:
112 - cloud.google.com
113 verbs:
114 - create
115 - get
116 - list
117 - patch
118 - update
119 - watch
120- resources:
121 - '*'
122 apiGroups:
123 - datasync.edge.ncr.com
124 verbs:
125 - create
126 - get
127 - list
128 - patch
129 - update
130 - watch
131- resources:
132 - couchdbdatabases/status
133 - couchdbreplicationsets/status
134 - couchdbservers/status
135 - couchdbusers/status
136 apiGroups:
137 - datasync.edge.ncr.com
138 verbs:
139 - get
140 - patch
141 - update
142 - watch
143- resources:
144 - couchdbusers/finalizers
145 apiGroups:
146 - datasync.edge.ncr.com
147 verbs:
148 - create
149 - delete
150 - get
151 - patch
152 - update
153- resources:
154 - ienodes
155 apiGroups:
156 - dsds.edge.ncr.com
157 verbs:
158 - get
159 - list
160 - watch
161- resources:
162 - persistence
163 apiGroups:
164 - edge.ncr.com
165 verbs:
166 - create
167 - delete
168 - get
169 - list
170 - patch
171 - update
172 - watch
173- resources:
174 - persistence/status
175 apiGroups:
176 - edge.ncr.com
177 verbs:
178 - get
179 - watch
180- resources:
181 - externalsecrets
182 apiGroups:
183 - external-secrets.io
184 verbs:
185 - create
186 - get
187 - patch
188 - update
189 - watch
190- resources:
191 - servicemonitors
192 apiGroups:
193 - monitoring.coreos.com
194 verbs:
195 - create
196 - delete
197 - get
198 - list
199 - patch
200 - update
201 - watch
202- resources:
203 - frontendconfigs
204 apiGroups:
205 - networking.gke.io
206 verbs:
207 - create
208 - get
209 - list
210 - patch
211 - update
212 - watch
213- resources:
214 - managedcertificates
215 apiGroups:
216 - networking.gke.io
217 verbs:
218 - create
219 - get
220 - list
221 - patch
222 - update
223 - watch
224- resources:
225 - managedcertificates/status
226 apiGroups:
227 - networking.gke.io
228 verbs:
229 - get
230 - watch
231- resources:
232 - ingresses
233 apiGroups:
234 - networking.k8s.io
235 verbs:
236 - create
237 - get
238 - list
239 - patch
240 - update
241 - watch
242- resources:
243 - ingresses/status
244 apiGroups:
245 - networking.k8s.io
246 verbs:
247 - get
248 - watch
249- resources:
250 - serverauthorizations
251 - servers
252 apiGroups:
253 - policy.linkerd.io
254 verbs:
255 - create
256 - delete
257 - get
258 - list
259 - patch
260 - update
261 - watch
262- resources:
263 - clusterrolebindings
264 - clusterroles
265 - rolebindings
266 - roles
267 apiGroups:
268 - rbac.authorization.k8s.io
269 verbs:
270 - create
271 - get
272 - list
273 - patch
274 - update
275 - watch
276- resources:
277 - clusterroles
278 - roles
279 apiGroups:
280 - rbac.authorization.k8s.io
281 verbs:
282 - bind
283 - escalate
284---
285apiVersion: rbac.authorization.k8s.io/v1
286kind: ClusterRoleBinding
287metadata:
288 name: couchctl
289 annotations:
290 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
291 pallet.edge.ncr.com/name: couchctl
292 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
293 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
294 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
295 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
296 labels: {}
297roleRef:
298 name: couchctl
299 kind: ClusterRole
300 apiGroup: rbac.authorization.k8s.io
301subjects:
302- name: couchctl
303 namespace: couchctl
304 kind: ServiceAccount
305---
306apiVersion: v1
307kind: ConfigMap
308metadata:
309 name: dns
310 namespace: couchctl
311 annotations:
312 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
313 pallet.edge.ncr.com/name: couchctl
314 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
315 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
316 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
317 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
318 labels: {}
319data:
320 DATASYNC_DNS_NAME: "${datasync_dns_name}"
321 DATASYNC_DNS_ZONE: "${datasync_dns_zone}"
322---
323apiVersion: apps/v1
324kind: Deployment
325metadata:
326 name: couchctl
327 namespace: couchctl
328 annotations:
329 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
330 pallet.edge.ncr.com/name: couchctl
331 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
332 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
333 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
334 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
335 labels: {}
336spec:
337 replicas: 1
338 selector:
339 matchLabels:
340 platform.edge.ncr.com/component: couchctl
341 template:
342 metadata:
343 labels:
344 platform.edge.ncr.com/component: couchctl
345 annotations:
346 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
347 pallet.edge.ncr.com/name: couchctl
348 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
349 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
350 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
351 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
352 spec:
353 serviceAccountName: couchctl
354 containers:
355 - name: couchctl
356 image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/couchctl@sha256:8e386b6bc07104db5f9de8cd1cacc19e4903cee8f4a3c244734a058ba6a43bec
357 ports:
358 - name: metrics
359 protocol: TCP
360 containerPort: 8080
361 envFrom:
362 - secretRef:
363 name: ldkey
364 - configMapRef:
365 name: dns
366 optional: true
367 resources:
368 limits:
369 cpu: "100m"
370 imagePullPolicy: IfNotPresent
371 imagePullSecrets:
372 - name: edge-docker-pull-secret
373---
374apiVersion: external-secrets.io/v1beta1
375kind: ExternalSecret
376metadata:
377 name: ldkey
378 namespace: couchctl
379 labels:
380 platform.edge.ncr.com/component: couchctl
381 annotations:
382 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
383 pallet.edge.ncr.com/name: couchctl
384 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
385 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
386 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
387 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
388spec:
389 data:
390 - remoteRef:
391 key: edge-backend-launch-darkly-sdk-key
392 secretKey: LD_KEY
393 refreshInterval: 1m
394 secretStoreRef:
395 name: gcp-provider
396 kind: ClusterSecretStore
397 target:
398 name: ldkey
399 creationPolicy: Owner
View as plain text