apiVersion: v1 kind: Namespace metadata: name: bsl-cdm-edge-client labels: workload.edge.ncr.com: platform platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a --- apiVersion: v1 kind: ServiceAccount metadata: name: bsl-cdm-edge-client namespace: bsl-cdm-edge-client labels: platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: datasyncinit namespace: bsl-cdm-edge-client labels: platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a rules: - resources: - secrets apiGroups: - "" verbs: - get - resources: - pods apiGroups: - "" verbs: - get - list - watch - resources: - replicasets apiGroups: - apps verbs: - get - list - watch - resources: - couchdbusers apiGroups: - datasync.edge.ncr.com verbs: - create - get - list - patch - update - watch - resources: - couchdbusers/status apiGroups: - datasync.edge.ncr.com verbs: - get - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: bsl-cdm-edge-client-datasyncinit labels: platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a rules: - resources: - nodes apiGroups: - "" verbs: - get - list - watch - resources: - couchdbservers apiGroups: - datasync.edge.ncr.com verbs: - get - list - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: datasyncinit namespace: bsl-cdm-edge-client labels: platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a roleRef: name: datasyncinit kind: Role apiGroup: rbac.authorization.k8s.io subjects: - name: bsl-cdm-edge-client namespace: bsl-cdm-edge-client kind: ServiceAccount --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: bsl-cdm-edge-client-datasyncinit labels: platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a roleRef: name: bsl-cdm-edge-client-datasyncinit kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: bsl-cdm-edge-client namespace: bsl-cdm-edge-client kind: ServiceAccount --- apiVersion: v1 kind: ConfigMap metadata: name: bsl-cdm-edge-client-config-map namespace: bsl-cdm-edge-client labels: platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a data: DATA_SOURCE: cdm DB_EDGE_CREDENTIAL_SECRET: couchdb-local-creds DB_NAMESPACE: data-sync-couchdb DB_SCHEME: http LOG_LEVEL: info --- apiVersion: v1 kind: Service metadata: labels: platform.edge.ncr.com/component: bsl-cdm-edge-client name: bsl-cdm-edge-client-service namespace: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: internalTrafficPolicy: Local ports: - name: http port: 8080 protocol: TCP targetPort: http selector: platform.edge.ncr.com/component: bsl-cdm-edge-client type: ClusterIP --- apiVersion: apps/v1 kind: DaemonSet metadata: name: bsl-cdm-edge-client-deployment labels: platform.edge.ncr.com/component: bsl-cdm-edge-client namespace: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: selector: matchLabels: platform.edge.ncr.com/component: bsl-cdm-edge-client template: metadata: labels: platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: restartPolicy: Always terminationGracePeriodSeconds: 20 serviceAccountName: bsl-cdm-edge-client initContainers: - name: datasyncinit image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/datasyncinit@sha256:033b2015d9233cd29617d1b4a76ac10da9454408cd9228f8c28f97aab4ca6a3a env: # https://kubernetes.io/docs/concepts/workloads/pods/downward-api/ - name: POD_NAME valueFrom: fieldRef: fieldPath: metadata.name - name: POD_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace - name: POD_NODE_NAME valueFrom: fieldRef: fieldPath: spec.nodeName - name: POD_SECRET_PATH # optional, default to `/edge/datasync/c2e/secret`, parent directory must the same as initContainer's `mountPath` value: /edge/datasync/c2e/secret - name: SECRET_ROLE # optional, default to `read-only-user`, can also be `create-view-user` value: create-view-user volumeMounts: - name: datasyncinit mountPath: edge/datasync/c2e - name: init-edge-client image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/cdm-edge-client-init-container@sha256:06861d7f39801ffc47631b6e4ebe2dfc7d69236021ae4f14eb501ac4cdc377a1 envFrom: - configMapRef: name: bsl-cdm-edge-client-config-map env: - name: VIEW_CREATOR_SECRET_PATH value: /edge/datasync/c2e/secret - name: POD_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace volumeMounts: - name: workdir mountPath: '/working' - name: datasyncinit mountPath: edge/datasync/c2e imagePullPolicy: IfNotPresent containers: - name: cdm-edge-client image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/cdm-edge-client@sha256:c955b4a48fbe552eb7700f8eb6b53967594f9842ea8adb1051d0c3db8d5aa13a ports: - name: http protocol: TCP containerPort: 8080 envFrom: - configMapRef: name: bsl-cdm-edge-client-config-map resources: limits: cpu: "200m" memory: '128Mi' requests: cpu: '100m' memory: '64Mi' volumeMounts: - name: workdir mountPath: '/app/env' livenessProbe: failureThreshold: 6 httpGet: port: 8080 path: /liveness initialDelaySeconds: 10 periodSeconds: 10 timeoutSeconds: 10 readinessProbe: failureThreshold: 3 httpGet: port: 8080 path: /readiness initialDelaySeconds: 10 periodSeconds: 10 timeoutSeconds: 10 imagePullPolicy: IfNotPresent volumes: - name: datasyncinit emptyDir: {} - name: workdir emptyDir: {} imagePullSecrets: - name: edge-docker-pull-secret --- apiVersion: policy.linkerd.io/v1beta1 kind: Server metadata: name: bsl-cdm-edge-client-server namespace: bsl-cdm-edge-client labels: platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: port: http podSelector: matchLabels: {} # every pod proxyProtocol: HTTP/1 --- apiVersion: policy.linkerd.io/v1beta1 kind: ServerAuthorization metadata: name: bsl-cdm-edge-client-server-auth namespace: bsl-cdm-edge-client labels: platform.edge.ncr.com/component: bsl-cdm-edge-client annotations: pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z" pallet.edge.ncr.com/name: bsl-cdm pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev' pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a spec: client: unauthenticated: true server: name: bsl-cdm-edge-client-server