forked from k-space/kube
wildduck: Add operator
This commit is contained in:
parent
2500342e47
commit
b98f173441
40
wildduck/wildduck-operator-rbac.yaml
Normal file
40
wildduck/wildduck-operator-rbac.yaml
Normal file
@ -0,0 +1,40 @@
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: codemowers-io-wildduck-operator
|
||||
rules:
|
||||
- apiGroups:
|
||||
- codemowers.io
|
||||
resources:
|
||||
- oidcgatewayusers
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- codemowers.io
|
||||
resources:
|
||||
- oidcgatewayusers/status
|
||||
verbs:
|
||||
- patch
|
||||
- update
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: codemowers-io-wildduck-operator
|
||||
namespace: wildduck
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: codemowers-io-wildduck-operator
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: codemowers-io-wildduck-operator
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: codemowers-io-wildduck-operator
|
||||
namespace: wildduck
|
64
wildduck/wildduck-operator.yaml
Normal file
64
wildduck/wildduck-operator.yaml
Normal file
@ -0,0 +1,64 @@
|
||||
---
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: wildduck-operator
|
||||
namespace: wildduck
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: wildduck-operator
|
||||
serviceName: wildduck-operator
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: wildduck-operator
|
||||
spec:
|
||||
containers:
|
||||
- image: docker.io/codemowers/wildduck-operator:latest
|
||||
name: wildduck-operator
|
||||
env:
|
||||
- name: MANAGED_DOMAIN
|
||||
value: k-space.ee
|
||||
- name: ALLOWED_GROUPS
|
||||
value: k-space:friends,k-space:floor
|
||||
- name: WILDDUCK_API_URL
|
||||
value: http://mail2.k-space.ee:8080
|
||||
- name: WILDDUCK_API_TOKEN
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: wildduck
|
||||
key: WILDDUCK_API_TOKEN
|
||||
ports:
|
||||
- containerPort: 8000
|
||||
name: metrics
|
||||
enableServiceLinks: false
|
||||
serviceAccountName: codemowers-io-wildduck-operator
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
app: wildduck-operator
|
||||
name: wildduck-operator
|
||||
namespace: wildduck
|
||||
spec:
|
||||
ports:
|
||||
- name: metrics
|
||||
port: 8000
|
||||
protocol: TCP
|
||||
selector:
|
||||
app: wildduck-operator
|
||||
---
|
||||
apiVersion: monitoring.coreos.com/v1
|
||||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: wildduck-operator
|
||||
namespace: wildduck
|
||||
spec:
|
||||
endpoints:
|
||||
- port: metrics
|
||||
selector:
|
||||
matchLabels:
|
||||
app: wildduck-operator
|
Loading…
Reference in New Issue
Block a user