1apiVersion: v1
2kind: Namespace
3metadata:
4 name: bsl-segment-edge-client
5 labels:
6 workload.edge.ncr.com: platform
7 platform.edge.ncr.com/component: bsl-segment-edge-client
8 annotations:
9 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
10 pallet.edge.ncr.com/name: bsl-segment
11 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
12 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
13 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
14 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
15---
16apiVersion: v1
17kind: ServiceAccount
18metadata:
19 name: bsl-segment-edge-client
20 namespace: bsl-segment-edge-client
21 labels:
22 platform.edge.ncr.com/component: bsl-segment-edge-client
23 annotations:
24 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
25 pallet.edge.ncr.com/name: bsl-segment
26 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
27 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
28 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
29 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
30---
31apiVersion: rbac.authorization.k8s.io/v1
32kind: Role
33metadata:
34 name: datasyncinit
35 namespace: bsl-segment-edge-client
36 labels:
37 platform.edge.ncr.com/component: bsl-segment-edge-client
38 annotations:
39 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
40 pallet.edge.ncr.com/name: bsl-segment
41 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
42 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
43 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
44 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
45rules:
46- resources:
47 - secrets
48 apiGroups:
49 - ""
50 verbs:
51 - get
52- resources:
53 - pods
54 apiGroups:
55 - ""
56 verbs:
57 - get
58 - list
59 - watch
60- resources:
61 - replicasets
62 apiGroups:
63 - apps
64 verbs:
65 - get
66 - list
67 - watch
68- resources:
69 - couchdbusers
70 apiGroups:
71 - datasync.edge.ncr.com
72 verbs:
73 - create
74 - get
75 - list
76 - patch
77 - update
78 - watch
79- resources:
80 - couchdbusers/status
81 apiGroups:
82 - datasync.edge.ncr.com
83 verbs:
84 - get
85 - watch
86---
87apiVersion: rbac.authorization.k8s.io/v1
88kind: ClusterRole
89metadata:
90 name: bsl-segment-edge-client-datasyncinit
91 labels:
92 platform.edge.ncr.com/component: bsl-segment-edge-client
93 annotations:
94 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
95 pallet.edge.ncr.com/name: bsl-segment
96 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
97 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
98 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
99 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
100rules:
101- resources:
102 - nodes
103 apiGroups:
104 - ""
105 verbs:
106 - get
107 - list
108 - watch
109- resources:
110 - couchdbservers
111 apiGroups:
112 - datasync.edge.ncr.com
113 verbs:
114 - get
115 - list
116 - watch
117---
118apiVersion: rbac.authorization.k8s.io/v1
119kind: RoleBinding
120metadata:
121 name: datasyncinit
122 namespace: bsl-segment-edge-client
123 labels:
124 platform.edge.ncr.com/component: bsl-segment-edge-client
125 annotations:
126 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
127 pallet.edge.ncr.com/name: bsl-segment
128 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
129 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
130 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
131 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
132roleRef:
133 name: datasyncinit
134 kind: Role
135 apiGroup: rbac.authorization.k8s.io
136subjects:
137- name: bsl-segment-edge-client
138 namespace: bsl-segment-edge-client
139 kind: ServiceAccount
140---
141apiVersion: rbac.authorization.k8s.io/v1
142kind: ClusterRoleBinding
143metadata:
144 name: bsl-segment-edge-client-datasyncinit
145 labels:
146 platform.edge.ncr.com/component: bsl-segment-edge-client
147 annotations:
148 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
149 pallet.edge.ncr.com/name: bsl-segment
150 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
151 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
152 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
153 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
154roleRef:
155 name: bsl-segment-edge-client-datasyncinit
156 kind: ClusterRole
157 apiGroup: rbac.authorization.k8s.io
158subjects:
159- name: bsl-segment-edge-client
160 namespace: bsl-segment-edge-client
161 kind: ServiceAccount
162---
163apiVersion: v1
164kind: ConfigMap
165metadata:
166 name: bsl-segment-edge-client-config-map
167 namespace: bsl-segment-edge-client
168 labels:
169 platform.edge.ncr.com/component: bsl-segment-edge-client
170 annotations:
171 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
172 pallet.edge.ncr.com/name: bsl-segment
173 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
174 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
175 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
176 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
177data:
178 DATA_SOURCE: segment
179 DB_EDGE_CREDENTIAL_SECRET: couchdb-local-creds
180 DB_NAMESPACE: data-sync-couchdb
181 DB_SCHEME: http
182 LOG_LEVEL: info
183---
184apiVersion: v1
185kind: Service
186metadata:
187 labels:
188 platform.edge.ncr.com/component: bsl-segment-edge-client
189 name: bsl-segment-edge-client-service
190 namespace: bsl-segment-edge-client
191 annotations:
192 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
193 pallet.edge.ncr.com/name: bsl-segment
194 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
195 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
196 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
197 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
198spec:
199 internalTrafficPolicy: Local
200 ports:
201 - name: http
202 port: 8080
203 protocol: TCP
204 targetPort: http
205 selector:
206 platform.edge.ncr.com/component: bsl-segment-edge-client
207 type: ClusterIP
208---
209apiVersion: apps/v1
210kind: DaemonSet
211metadata:
212 name: bsl-segment-edge-client-deployment
213 labels:
214 platform.edge.ncr.com/component: bsl-segment-edge-client
215 namespace: bsl-segment-edge-client
216 annotations:
217 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
218 pallet.edge.ncr.com/name: bsl-segment
219 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
220 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
221 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
222 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
223spec:
224 selector:
225 matchLabels:
226 platform.edge.ncr.com/component: bsl-segment-edge-client
227 template:
228 metadata:
229 labels:
230 platform.edge.ncr.com/component: bsl-segment-edge-client
231 annotations:
232 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
233 pallet.edge.ncr.com/name: bsl-segment
234 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
235 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
236 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
237 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
238 spec:
239 restartPolicy: Always
240 terminationGracePeriodSeconds: 20
241 serviceAccountName: bsl-segment-edge-client
242 initContainers:
243 - name: datasyncinit
244 image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/datasyncinit@sha256:033b2015d9233cd29617d1b4a76ac10da9454408cd9228f8c28f97aab4ca6a3a
245 env: # https://kubernetes.io/docs/concepts/workloads/pods/downward-api/
246 - name: POD_NAME
247 valueFrom:
248 fieldRef:
249 fieldPath: metadata.name
250 - name: POD_NAMESPACE
251 valueFrom:
252 fieldRef:
253 fieldPath: metadata.namespace
254 - name: POD_NODE_NAME
255 valueFrom:
256 fieldRef:
257 fieldPath: spec.nodeName
258 - name: POD_SECRET_PATH # optional, default to `/edge/datasync/c2e/secret`, parent directory must the same as initContainer's `mountPath`
259 value: /edge/datasync/c2e/secret
260 - name: SECRET_ROLE # optional, default to `read-only-user`, can also be `create-view-user`
261 value: create-view-user
262 volumeMounts:
263 - name: datasyncinit
264 mountPath: edge/datasync/c2e
265 - name: init-edge-client
266 image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/segment-edge-client-init-container@sha256:7c00eae170494728ee9cfb61e0113bd86a84cc5f82df702c860a2bc02421cb05
267 envFrom:
268 - configMapRef:
269 name: bsl-segment-edge-client-config-map
270 env:
271 - name: VIEW_CREATOR_SECRET_PATH
272 value: /edge/datasync/c2e/secret
273 - name: POD_NAMESPACE
274 valueFrom:
275 fieldRef:
276 fieldPath: metadata.namespace
277 volumeMounts:
278 - name: workdir
279 mountPath: '/working'
280 - name: datasyncinit
281 mountPath: edge/datasync/c2e
282 imagePullPolicy: IfNotPresent
283 containers:
284 - name: segment-edge-client
285 image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/segment-edge-client@sha256:abb734855eaf71d2323792fe2c841cee206f5e58781024f86a44159af22bccf5
286 ports:
287 - name: http
288 protocol: TCP
289 containerPort: 8080
290 envFrom:
291 - configMapRef:
292 name: bsl-segment-edge-client-config-map
293 resources:
294 limits:
295 cpu: "200m"
296 memory: '128Mi'
297 requests:
298 cpu: '100m'
299 memory: '64Mi'
300 volumeMounts:
301 - name: workdir
302 mountPath: '/app/env'
303 livenessProbe:
304 failureThreshold: 6
305 httpGet:
306 port: 8080
307 path: /liveness
308 initialDelaySeconds: 10
309 periodSeconds: 10
310 timeoutSeconds: 10
311 readinessProbe:
312 failureThreshold: 3
313 httpGet:
314 port: 8080
315 path: /readiness
316 initialDelaySeconds: 10
317 periodSeconds: 10
318 timeoutSeconds: 10
319 imagePullPolicy: IfNotPresent
320 volumes:
321 - name: datasyncinit
322 emptyDir: {}
323 - name: workdir
324 emptyDir: {}
325 imagePullSecrets:
326 - name: edge-docker-pull-secret
327---
328apiVersion: policy.linkerd.io/v1beta1
329kind: Server
330metadata:
331 name: bsl-segment-edge-client-server
332 namespace: bsl-segment-edge-client
333 labels:
334 platform.edge.ncr.com/component: bsl-segment-edge-client
335 annotations:
336 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
337 pallet.edge.ncr.com/name: bsl-segment
338 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
339 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
340 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
341 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
342spec:
343 port: http
344 podSelector:
345 matchLabels: {} # every pod
346 proxyProtocol: HTTP/1
347---
348apiVersion: policy.linkerd.io/v1beta1
349kind: ServerAuthorization
350metadata:
351 name: bsl-segment-edge-client-server-auth
352 namespace: bsl-segment-edge-client
353 labels:
354 platform.edge.ncr.com/component: bsl-segment-edge-client
355 annotations:
356 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
357 pallet.edge.ncr.com/name: bsl-segment
358 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
359 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
360 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
361 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
362spec:
363 client:
364 unauthenticated: true
365 server:
366 name: bsl-segment-edge-client-server
View as plain text