apiVersion: v1
kind: Namespace
metadata:
  name: bsl-cdm-edge-client
  labels:
    workload.edge.ncr.com: platform
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: bsl-cdm-edge-client
  namespace: bsl-cdm-edge-client
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: datasyncinit
  namespace: bsl-cdm-edge-client
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
rules:
- resources:
  - secrets
  apiGroups:
  - ""
  verbs:
  - get
- resources:
  - pods
  apiGroups:
  - ""
  verbs:
  - get
  - list
  - watch
- resources:
  - replicasets
  apiGroups:
  - apps
  verbs:
  - get
  - list
  - watch
- resources:
  - couchdbusers
  apiGroups:
  - datasync.edge.ncr.com
  verbs:
  - create
  - get
  - list
  - patch
  - update
  - watch
- resources:
  - couchdbusers/status
  apiGroups:
  - datasync.edge.ncr.com
  verbs:
  - get
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: bsl-cdm-edge-client-datasyncinit
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
rules:
- resources:
  - nodes
  apiGroups:
  - ""
  verbs:
  - get
  - list
  - watch
- resources:
  - couchdbservers
  apiGroups:
  - datasync.edge.ncr.com
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: datasyncinit
  namespace: bsl-cdm-edge-client
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
roleRef:
  name: datasyncinit
  kind: Role
  apiGroup: rbac.authorization.k8s.io
subjects:
- name: bsl-cdm-edge-client
  namespace: bsl-cdm-edge-client
  kind: ServiceAccount
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: bsl-cdm-edge-client-datasyncinit
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
roleRef:
  name: bsl-cdm-edge-client-datasyncinit
  kind: ClusterRole
  apiGroup: rbac.authorization.k8s.io
subjects:
- name: bsl-cdm-edge-client
  namespace: bsl-cdm-edge-client
  kind: ServiceAccount
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: bsl-cdm-edge-client-config-map
  namespace: bsl-cdm-edge-client
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
data:
  DATA_SOURCE: cdm
  DB_EDGE_CREDENTIAL_SECRET: couchdb-local-creds
  DB_NAMESPACE: data-sync-couchdb
  DB_SCHEME: http
  LOG_LEVEL: info
---
apiVersion: v1
kind: Service
metadata:
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  name: bsl-cdm-edge-client-service
  namespace: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  internalTrafficPolicy: Local
  ports:
  - name: http
    port: 8080
    protocol: TCP
    targetPort: http
  selector:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  type: ClusterIP
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: bsl-cdm-edge-client-deployment
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  namespace: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  selector:
    matchLabels:
      platform.edge.ncr.com/component: bsl-cdm-edge-client
  template:
    metadata:
      labels:
        platform.edge.ncr.com/component: bsl-cdm-edge-client
      annotations:
        pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
        pallet.edge.ncr.com/name: bsl-cdm
        pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
        pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
        pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
        pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
    spec:
      restartPolicy: Always
      terminationGracePeriodSeconds: 20
      serviceAccountName: bsl-cdm-edge-client
      initContainers:
      - name: datasyncinit
        image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/datasyncinit@sha256:033b2015d9233cd29617d1b4a76ac10da9454408cd9228f8c28f97aab4ca6a3a
        env: # https://kubernetes.io/docs/concepts/workloads/pods/downward-api/
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: POD_NODE_NAME
          valueFrom:
            fieldRef:
              fieldPath: spec.nodeName
        - name: POD_SECRET_PATH # optional, default to `/edge/datasync/c2e/secret`, parent directory must the same as initContainer's `mountPath`
          value: /edge/datasync/c2e/secret
        - name: SECRET_ROLE # optional, default to `read-only-user`, can also be `create-view-user`
          value: create-view-user
        volumeMounts:
        - name: datasyncinit
          mountPath: edge/datasync/c2e
      - name: init-edge-client
        image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/cdm-edge-client-init-container@sha256:06861d7f39801ffc47631b6e4ebe2dfc7d69236021ae4f14eb501ac4cdc377a1
        envFrom:
        - configMapRef:
            name: bsl-cdm-edge-client-config-map
        env:
        - name: VIEW_CREATOR_SECRET_PATH
          value: /edge/datasync/c2e/secret
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: workdir
          mountPath: '/working'
        - name: datasyncinit
          mountPath: edge/datasync/c2e
        imagePullPolicy: IfNotPresent
      containers:
      - name: cdm-edge-client
        image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/cdm-edge-client@sha256:c955b4a48fbe552eb7700f8eb6b53967594f9842ea8adb1051d0c3db8d5aa13a
        ports:
        - name: http
          protocol: TCP
          containerPort: 8080
        envFrom:
        - configMapRef:
            name: bsl-cdm-edge-client-config-map
        resources:
          limits:
            cpu: "200m"
            memory: '128Mi'
          requests:
            cpu: '100m'
            memory: '64Mi'
        volumeMounts:
        - name: workdir
          mountPath: '/app/env'
        livenessProbe:
          failureThreshold: 6
          httpGet:
            port: 8080
            path: /liveness
          initialDelaySeconds: 10
          periodSeconds: 10
          timeoutSeconds: 10
        readinessProbe:
          failureThreshold: 3
          httpGet:
            port: 8080
            path: /readiness
          initialDelaySeconds: 10
          periodSeconds: 10
          timeoutSeconds: 10
        imagePullPolicy: IfNotPresent
      volumes:
      - name: datasyncinit
        emptyDir: {}
      - name: workdir
        emptyDir: {}
      imagePullSecrets:
      - name: edge-docker-pull-secret
---
apiVersion: policy.linkerd.io/v1beta1
kind: Server
metadata:
  name: bsl-cdm-edge-client-server
  namespace: bsl-cdm-edge-client
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  port: http
  podSelector:
    matchLabels: {} # every pod
  proxyProtocol: HTTP/1
---
apiVersion: policy.linkerd.io/v1beta1
kind: ServerAuthorization
metadata:
  name: bsl-cdm-edge-client-server-auth
  namespace: bsl-cdm-edge-client
  labels:
    platform.edge.ncr.com/component: bsl-cdm-edge-client
  annotations:
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: bsl-cdm
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-dev'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  client:
    unauthenticated: true
  server:
    name: bsl-cdm-edge-client-server