1489 lines
77 KiB
YAML
1489 lines
77 KiB
YAML
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: manager
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: system
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: namespace
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
control-plane: controller-manager
|
||
|
|
name: dragonfly-operator-system
|
||
|
|
---
|
||
|
|
apiVersion: apiextensions.k8s.io/v1
|
||
|
|
kind: CustomResourceDefinition
|
||
|
|
metadata:
|
||
|
|
annotations:
|
||
|
|
controller-gen.kubebuilder.io/version: v0.11.1
|
||
|
|
creationTimestamp: null
|
||
|
|
name: dragonflies.dragonflydb.io
|
||
|
|
spec:
|
||
|
|
group: dragonflydb.io
|
||
|
|
names:
|
||
|
|
kind: Dragonfly
|
||
|
|
listKind: DragonflyList
|
||
|
|
plural: dragonflies
|
||
|
|
singular: dragonfly
|
||
|
|
scope: Namespaced
|
||
|
|
versions:
|
||
|
|
- name: v1alpha1
|
||
|
|
schema:
|
||
|
|
openAPIV3Schema:
|
||
|
|
description: Dragonfly is the Schema for the dragonflies API
|
||
|
|
properties:
|
||
|
|
apiVersion:
|
||
|
|
description:
|
||
|
|
"APIVersion defines the versioned schema of this representation
|
||
|
|
of an object. Servers should convert recognized schemas to the latest
|
||
|
|
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources"
|
||
|
|
type: string
|
||
|
|
kind:
|
||
|
|
description:
|
||
|
|
"Kind is a string value representing the REST resource this
|
||
|
|
object represents. Servers may infer this from the endpoint the client
|
||
|
|
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
|
||
|
|
type: string
|
||
|
|
metadata:
|
||
|
|
type: object
|
||
|
|
spec:
|
||
|
|
description: DragonflySpec defines the desired state of Dragonfly
|
||
|
|
properties:
|
||
|
|
affinity:
|
||
|
|
description: (Optional) Dragonfly pod affinity
|
||
|
|
properties:
|
||
|
|
nodeAffinity:
|
||
|
|
description:
|
||
|
|
Describes node affinity scheduling rules for the
|
||
|
|
pod.
|
||
|
|
properties:
|
||
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
||
|
|
description:
|
||
|
|
The scheduler will prefer to schedule pods to
|
||
|
|
nodes that satisfy the affinity expressions specified by
|
||
|
|
this field, but it may choose a node that violates one or
|
||
|
|
more of the expressions. The node that is most preferred
|
||
|
|
is the one with the greatest sum of weights, i.e. for each
|
||
|
|
node that meets all of the scheduling requirements (resource
|
||
|
|
request, requiredDuringScheduling affinity expressions,
|
||
|
|
etc.), compute a sum by iterating through the elements of
|
||
|
|
this field and adding "weight" to the sum if the node matches
|
||
|
|
the corresponding matchExpressions; the node(s) with the
|
||
|
|
highest sum are the most preferred.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
An empty preferred scheduling term matches
|
||
|
|
all objects with implicit weight 0 (i.e. it's a no-op).
|
||
|
|
A null preferred scheduling term matches no objects (i.e.
|
||
|
|
is also a no-op).
|
||
|
|
properties:
|
||
|
|
preference:
|
||
|
|
description:
|
||
|
|
A node selector term, associated with the
|
||
|
|
corresponding weight.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
A list of node selector requirements
|
||
|
|
by node's labels.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A node selector requirement is a
|
||
|
|
selector that contains values, a key, and an
|
||
|
|
operator that relates the key and values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
The label key that the selector
|
||
|
|
applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
Represents a key's relationship
|
||
|
|
to a set of values. Valid operators are
|
||
|
|
In, NotIn, Exists, DoesNotExist. Gt, and
|
||
|
|
Lt.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
An array of string values. If
|
||
|
|
the operator is In or NotIn, the values
|
||
|
|
array must be non-empty. If the operator
|
||
|
|
is Exists or DoesNotExist, the values array
|
||
|
|
must be empty. If the operator is Gt or
|
||
|
|
Lt, the values array must have a single
|
||
|
|
element, which will be interpreted as an
|
||
|
|
integer. This array is replaced during a
|
||
|
|
strategic merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchFields:
|
||
|
|
description:
|
||
|
|
A list of node selector requirements
|
||
|
|
by node's fields.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A node selector requirement is a
|
||
|
|
selector that contains values, a key, and an
|
||
|
|
operator that relates the key and values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
The label key that the selector
|
||
|
|
applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
Represents a key's relationship
|
||
|
|
to a set of values. Valid operators are
|
||
|
|
In, NotIn, Exists, DoesNotExist. Gt, and
|
||
|
|
Lt.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
An array of string values. If
|
||
|
|
the operator is In or NotIn, the values
|
||
|
|
array must be non-empty. If the operator
|
||
|
|
is Exists or DoesNotExist, the values array
|
||
|
|
must be empty. If the operator is Gt or
|
||
|
|
Lt, the values array must have a single
|
||
|
|
element, which will be interpreted as an
|
||
|
|
integer. This array is replaced during a
|
||
|
|
strategic merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
weight:
|
||
|
|
description:
|
||
|
|
Weight associated with matching the corresponding
|
||
|
|
nodeSelectorTerm, in the range 1-100.
|
||
|
|
format: int32
|
||
|
|
type: integer
|
||
|
|
required:
|
||
|
|
- preference
|
||
|
|
- weight
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||
|
|
description:
|
||
|
|
If the affinity requirements specified by this
|
||
|
|
field are not met at scheduling time, the pod will not be
|
||
|
|
scheduled onto the node. If the affinity requirements specified
|
||
|
|
by this field cease to be met at some point during pod execution
|
||
|
|
(e.g. due to an update), the system may or may not try to
|
||
|
|
eventually evict the pod from its node.
|
||
|
|
properties:
|
||
|
|
nodeSelectorTerms:
|
||
|
|
description:
|
||
|
|
Required. A list of node selector terms.
|
||
|
|
The terms are ORed.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A null or empty node selector term matches
|
||
|
|
no objects. The requirements of them are ANDed. The
|
||
|
|
TopologySelectorTerm type implements a subset of the
|
||
|
|
NodeSelectorTerm.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
A list of node selector requirements
|
||
|
|
by node's labels.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A node selector requirement is a
|
||
|
|
selector that contains values, a key, and an
|
||
|
|
operator that relates the key and values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
The label key that the selector
|
||
|
|
applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
Represents a key's relationship
|
||
|
|
to a set of values. Valid operators are
|
||
|
|
In, NotIn, Exists, DoesNotExist. Gt, and
|
||
|
|
Lt.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
An array of string values. If
|
||
|
|
the operator is In or NotIn, the values
|
||
|
|
array must be non-empty. If the operator
|
||
|
|
is Exists or DoesNotExist, the values array
|
||
|
|
must be empty. If the operator is Gt or
|
||
|
|
Lt, the values array must have a single
|
||
|
|
element, which will be interpreted as an
|
||
|
|
integer. This array is replaced during a
|
||
|
|
strategic merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchFields:
|
||
|
|
description:
|
||
|
|
A list of node selector requirements
|
||
|
|
by node's fields.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A node selector requirement is a
|
||
|
|
selector that contains values, a key, and an
|
||
|
|
operator that relates the key and values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
The label key that the selector
|
||
|
|
applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
Represents a key's relationship
|
||
|
|
to a set of values. Valid operators are
|
||
|
|
In, NotIn, Exists, DoesNotExist. Gt, and
|
||
|
|
Lt.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
An array of string values. If
|
||
|
|
the operator is In or NotIn, the values
|
||
|
|
array must be non-empty. If the operator
|
||
|
|
is Exists or DoesNotExist, the values array
|
||
|
|
must be empty. If the operator is Gt or
|
||
|
|
Lt, the values array must have a single
|
||
|
|
element, which will be interpreted as an
|
||
|
|
integer. This array is replaced during a
|
||
|
|
strategic merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- nodeSelectorTerms
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
type: object
|
||
|
|
podAffinity:
|
||
|
|
description:
|
||
|
|
Describes pod affinity scheduling rules (e.g. co-locate
|
||
|
|
this pod in the same node, zone, etc. as some other pod(s)).
|
||
|
|
properties:
|
||
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
||
|
|
description:
|
||
|
|
The scheduler will prefer to schedule pods to
|
||
|
|
nodes that satisfy the affinity expressions specified by
|
||
|
|
this field, but it may choose a node that violates one or
|
||
|
|
more of the expressions. The node that is most preferred
|
||
|
|
is the one with the greatest sum of weights, i.e. for each
|
||
|
|
node that meets all of the scheduling requirements (resource
|
||
|
|
request, requiredDuringScheduling affinity expressions,
|
||
|
|
etc.), compute a sum by iterating through the elements of
|
||
|
|
this field and adding "weight" to the sum if the node has
|
||
|
|
pods which matches the corresponding podAffinityTerm; the
|
||
|
|
node(s) with the highest sum are the most preferred.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
The weights of all of the matched WeightedPodAffinityTerm
|
||
|
|
fields are added per-node to find the most preferred node(s)
|
||
|
|
properties:
|
||
|
|
podAffinityTerm:
|
||
|
|
description:
|
||
|
|
Required. A pod affinity term, associated
|
||
|
|
with the corresponding weight.
|
||
|
|
properties:
|
||
|
|
labelSelector:
|
||
|
|
description:
|
||
|
|
A label query over a set of resources,
|
||
|
|
in this case pods.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
matchExpressions is a list of label
|
||
|
|
selector requirements. The requirements are
|
||
|
|
ANDed.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A label selector requirement
|
||
|
|
is a selector that contains values, a key,
|
||
|
|
and an operator that relates the key and
|
||
|
|
values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
key is the label key that
|
||
|
|
the selector applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
operator represents a key's
|
||
|
|
relationship to a set of values. Valid
|
||
|
|
operators are In, NotIn, Exists and
|
||
|
|
DoesNotExist.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
values is an array of string
|
||
|
|
values. If the operator is In or NotIn,
|
||
|
|
the values array must be non-empty.
|
||
|
|
If the operator is Exists or DoesNotExist,
|
||
|
|
the values array must be empty. This
|
||
|
|
array is replaced during a strategic
|
||
|
|
merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchLabels:
|
||
|
|
additionalProperties:
|
||
|
|
type: string
|
||
|
|
description:
|
||
|
|
matchLabels is a map of {key,value}
|
||
|
|
pairs. A single {key,value} in the matchLabels
|
||
|
|
map is equivalent to an element of matchExpressions,
|
||
|
|
whose key field is "key", the operator is
|
||
|
|
"In", and the values array contains only "value".
|
||
|
|
The requirements are ANDed.
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
namespaceSelector:
|
||
|
|
description:
|
||
|
|
A label query over the set of namespaces
|
||
|
|
that the term applies to. The term is applied
|
||
|
|
to the union of the namespaces selected by this
|
||
|
|
field and the ones listed in the namespaces field.
|
||
|
|
null selector and null or empty namespaces list
|
||
|
|
means "this pod's namespace". An empty selector
|
||
|
|
({}) matches all namespaces.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
matchExpressions is a list of label
|
||
|
|
selector requirements. The requirements are
|
||
|
|
ANDed.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A label selector requirement
|
||
|
|
is a selector that contains values, a key,
|
||
|
|
and an operator that relates the key and
|
||
|
|
values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
key is the label key that
|
||
|
|
the selector applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
operator represents a key's
|
||
|
|
relationship to a set of values. Valid
|
||
|
|
operators are In, NotIn, Exists and
|
||
|
|
DoesNotExist.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
values is an array of string
|
||
|
|
values. If the operator is In or NotIn,
|
||
|
|
the values array must be non-empty.
|
||
|
|
If the operator is Exists or DoesNotExist,
|
||
|
|
the values array must be empty. This
|
||
|
|
array is replaced during a strategic
|
||
|
|
merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchLabels:
|
||
|
|
additionalProperties:
|
||
|
|
type: string
|
||
|
|
description:
|
||
|
|
matchLabels is a map of {key,value}
|
||
|
|
pairs. A single {key,value} in the matchLabels
|
||
|
|
map is equivalent to an element of matchExpressions,
|
||
|
|
whose key field is "key", the operator is
|
||
|
|
"In", and the values array contains only "value".
|
||
|
|
The requirements are ANDed.
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
namespaces:
|
||
|
|
description:
|
||
|
|
namespaces specifies a static list
|
||
|
|
of namespace names that the term applies to. The
|
||
|
|
term is applied to the union of the namespaces
|
||
|
|
listed in this field and the ones selected by
|
||
|
|
namespaceSelector. null or empty namespaces list
|
||
|
|
and null namespaceSelector means "this pod's namespace".
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
topologyKey:
|
||
|
|
description:
|
||
|
|
This pod should be co-located (affinity)
|
||
|
|
or not co-located (anti-affinity) with the pods
|
||
|
|
matching the labelSelector in the specified namespaces,
|
||
|
|
where co-located is defined as running on a node
|
||
|
|
whose value of the label with key topologyKey
|
||
|
|
matches that of any node on which any of the selected
|
||
|
|
pods is running. Empty topologyKey is not allowed.
|
||
|
|
type: string
|
||
|
|
required:
|
||
|
|
- topologyKey
|
||
|
|
type: object
|
||
|
|
weight:
|
||
|
|
description:
|
||
|
|
weight associated with matching the corresponding
|
||
|
|
podAffinityTerm, in the range 1-100.
|
||
|
|
format: int32
|
||
|
|
type: integer
|
||
|
|
required:
|
||
|
|
- podAffinityTerm
|
||
|
|
- weight
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||
|
|
description:
|
||
|
|
If the affinity requirements specified by this
|
||
|
|
field are not met at scheduling time, the pod will not be
|
||
|
|
scheduled onto the node. If the affinity requirements specified
|
||
|
|
by this field cease to be met at some point during pod execution
|
||
|
|
(e.g. due to a pod label update), the system may or may
|
||
|
|
not try to eventually evict the pod from its node. When
|
||
|
|
there are multiple elements, the lists of nodes corresponding
|
||
|
|
to each podAffinityTerm are intersected, i.e. all terms
|
||
|
|
must be satisfied.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
Defines a set of pods (namely those matching
|
||
|
|
the labelSelector relative to the given namespace(s))
|
||
|
|
that this pod should be co-located (affinity) or not co-located
|
||
|
|
(anti-affinity) with, where co-located is defined as running
|
||
|
|
on a node whose value of the label with key <topologyKey>
|
||
|
|
matches that of any node on which a pod of the set of
|
||
|
|
pods is running
|
||
|
|
properties:
|
||
|
|
labelSelector:
|
||
|
|
description:
|
||
|
|
A label query over a set of resources,
|
||
|
|
in this case pods.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
matchExpressions is a list of label
|
||
|
|
selector requirements. The requirements are ANDed.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A label selector requirement is a
|
||
|
|
selector that contains values, a key, and an
|
||
|
|
operator that relates the key and values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
key is the label key that the
|
||
|
|
selector applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
operator represents a key's relationship
|
||
|
|
to a set of values. Valid operators are
|
||
|
|
In, NotIn, Exists and DoesNotExist.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
values is an array of string
|
||
|
|
values. If the operator is In or NotIn,
|
||
|
|
the values array must be non-empty. If the
|
||
|
|
operator is Exists or DoesNotExist, the
|
||
|
|
values array must be empty. This array is
|
||
|
|
replaced during a strategic merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchLabels:
|
||
|
|
additionalProperties:
|
||
|
|
type: string
|
||
|
|
description:
|
||
|
|
matchLabels is a map of {key,value}
|
||
|
|
pairs. A single {key,value} in the matchLabels
|
||
|
|
map is equivalent to an element of matchExpressions,
|
||
|
|
whose key field is "key", the operator is "In",
|
||
|
|
and the values array contains only "value". The
|
||
|
|
requirements are ANDed.
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
namespaceSelector:
|
||
|
|
description:
|
||
|
|
A label query over the set of namespaces
|
||
|
|
that the term applies to. The term is applied to the
|
||
|
|
union of the namespaces selected by this field and
|
||
|
|
the ones listed in the namespaces field. null selector
|
||
|
|
and null or empty namespaces list means "this pod's
|
||
|
|
namespace". An empty selector ({}) matches all namespaces.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
matchExpressions is a list of label
|
||
|
|
selector requirements. The requirements are ANDed.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A label selector requirement is a
|
||
|
|
selector that contains values, a key, and an
|
||
|
|
operator that relates the key and values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
key is the label key that the
|
||
|
|
selector applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
operator represents a key's relationship
|
||
|
|
to a set of values. Valid operators are
|
||
|
|
In, NotIn, Exists and DoesNotExist.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
values is an array of string
|
||
|
|
values. If the operator is In or NotIn,
|
||
|
|
the values array must be non-empty. If the
|
||
|
|
operator is Exists or DoesNotExist, the
|
||
|
|
values array must be empty. This array is
|
||
|
|
replaced during a strategic merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchLabels:
|
||
|
|
additionalProperties:
|
||
|
|
type: string
|
||
|
|
description:
|
||
|
|
matchLabels is a map of {key,value}
|
||
|
|
pairs. A single {key,value} in the matchLabels
|
||
|
|
map is equivalent to an element of matchExpressions,
|
||
|
|
whose key field is "key", the operator is "In",
|
||
|
|
and the values array contains only "value". The
|
||
|
|
requirements are ANDed.
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
namespaces:
|
||
|
|
description:
|
||
|
|
namespaces specifies a static list of namespace
|
||
|
|
names that the term applies to. The term is applied
|
||
|
|
to the union of the namespaces listed in this field
|
||
|
|
and the ones selected by namespaceSelector. null or
|
||
|
|
empty namespaces list and null namespaceSelector means
|
||
|
|
"this pod's namespace".
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
topologyKey:
|
||
|
|
description:
|
||
|
|
This pod should be co-located (affinity)
|
||
|
|
or not co-located (anti-affinity) with the pods matching
|
||
|
|
the labelSelector in the specified namespaces, where
|
||
|
|
co-located is defined as running on a node whose value
|
||
|
|
of the label with key topologyKey matches that of
|
||
|
|
any node on which any of the selected pods is running.
|
||
|
|
Empty topologyKey is not allowed.
|
||
|
|
type: string
|
||
|
|
required:
|
||
|
|
- topologyKey
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
type: object
|
||
|
|
podAntiAffinity:
|
||
|
|
description:
|
||
|
|
Describes pod anti-affinity scheduling rules (e.g.
|
||
|
|
avoid putting this pod in the same node, zone, etc. as some
|
||
|
|
other pod(s)).
|
||
|
|
properties:
|
||
|
|
preferredDuringSchedulingIgnoredDuringExecution:
|
||
|
|
description:
|
||
|
|
The scheduler will prefer to schedule pods to
|
||
|
|
nodes that satisfy the anti-affinity expressions specified
|
||
|
|
by this field, but it may choose a node that violates one
|
||
|
|
or more of the expressions. The node that is most preferred
|
||
|
|
is the one with the greatest sum of weights, i.e. for each
|
||
|
|
node that meets all of the scheduling requirements (resource
|
||
|
|
request, requiredDuringScheduling anti-affinity expressions,
|
||
|
|
etc.), compute a sum by iterating through the elements of
|
||
|
|
this field and adding "weight" to the sum if the node has
|
||
|
|
pods which matches the corresponding podAffinityTerm; the
|
||
|
|
node(s) with the highest sum are the most preferred.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
The weights of all of the matched WeightedPodAffinityTerm
|
||
|
|
fields are added per-node to find the most preferred node(s)
|
||
|
|
properties:
|
||
|
|
podAffinityTerm:
|
||
|
|
description:
|
||
|
|
Required. A pod affinity term, associated
|
||
|
|
with the corresponding weight.
|
||
|
|
properties:
|
||
|
|
labelSelector:
|
||
|
|
description:
|
||
|
|
A label query over a set of resources,
|
||
|
|
in this case pods.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
matchExpressions is a list of label
|
||
|
|
selector requirements. The requirements are
|
||
|
|
ANDed.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A label selector requirement
|
||
|
|
is a selector that contains values, a key,
|
||
|
|
and an operator that relates the key and
|
||
|
|
values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
key is the label key that
|
||
|
|
the selector applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
operator represents a key's
|
||
|
|
relationship to a set of values. Valid
|
||
|
|
operators are In, NotIn, Exists and
|
||
|
|
DoesNotExist.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
values is an array of string
|
||
|
|
values. If the operator is In or NotIn,
|
||
|
|
the values array must be non-empty.
|
||
|
|
If the operator is Exists or DoesNotExist,
|
||
|
|
the values array must be empty. This
|
||
|
|
array is replaced during a strategic
|
||
|
|
merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchLabels:
|
||
|
|
additionalProperties:
|
||
|
|
type: string
|
||
|
|
description:
|
||
|
|
matchLabels is a map of {key,value}
|
||
|
|
pairs. A single {key,value} in the matchLabels
|
||
|
|
map is equivalent to an element of matchExpressions,
|
||
|
|
whose key field is "key", the operator is
|
||
|
|
"In", and the values array contains only "value".
|
||
|
|
The requirements are ANDed.
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
namespaceSelector:
|
||
|
|
description:
|
||
|
|
A label query over the set of namespaces
|
||
|
|
that the term applies to. The term is applied
|
||
|
|
to the union of the namespaces selected by this
|
||
|
|
field and the ones listed in the namespaces field.
|
||
|
|
null selector and null or empty namespaces list
|
||
|
|
means "this pod's namespace". An empty selector
|
||
|
|
({}) matches all namespaces.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
matchExpressions is a list of label
|
||
|
|
selector requirements. The requirements are
|
||
|
|
ANDed.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A label selector requirement
|
||
|
|
is a selector that contains values, a key,
|
||
|
|
and an operator that relates the key and
|
||
|
|
values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
key is the label key that
|
||
|
|
the selector applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
operator represents a key's
|
||
|
|
relationship to a set of values. Valid
|
||
|
|
operators are In, NotIn, Exists and
|
||
|
|
DoesNotExist.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
values is an array of string
|
||
|
|
values. If the operator is In or NotIn,
|
||
|
|
the values array must be non-empty.
|
||
|
|
If the operator is Exists or DoesNotExist,
|
||
|
|
the values array must be empty. This
|
||
|
|
array is replaced during a strategic
|
||
|
|
merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchLabels:
|
||
|
|
additionalProperties:
|
||
|
|
type: string
|
||
|
|
description:
|
||
|
|
matchLabels is a map of {key,value}
|
||
|
|
pairs. A single {key,value} in the matchLabels
|
||
|
|
map is equivalent to an element of matchExpressions,
|
||
|
|
whose key field is "key", the operator is
|
||
|
|
"In", and the values array contains only "value".
|
||
|
|
The requirements are ANDed.
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
namespaces:
|
||
|
|
description:
|
||
|
|
namespaces specifies a static list
|
||
|
|
of namespace names that the term applies to. The
|
||
|
|
term is applied to the union of the namespaces
|
||
|
|
listed in this field and the ones selected by
|
||
|
|
namespaceSelector. null or empty namespaces list
|
||
|
|
and null namespaceSelector means "this pod's namespace".
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
topologyKey:
|
||
|
|
description:
|
||
|
|
This pod should be co-located (affinity)
|
||
|
|
or not co-located (anti-affinity) with the pods
|
||
|
|
matching the labelSelector in the specified namespaces,
|
||
|
|
where co-located is defined as running on a node
|
||
|
|
whose value of the label with key topologyKey
|
||
|
|
matches that of any node on which any of the selected
|
||
|
|
pods is running. Empty topologyKey is not allowed.
|
||
|
|
type: string
|
||
|
|
required:
|
||
|
|
- topologyKey
|
||
|
|
type: object
|
||
|
|
weight:
|
||
|
|
description:
|
||
|
|
weight associated with matching the corresponding
|
||
|
|
podAffinityTerm, in the range 1-100.
|
||
|
|
format: int32
|
||
|
|
type: integer
|
||
|
|
required:
|
||
|
|
- podAffinityTerm
|
||
|
|
- weight
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||
|
|
description:
|
||
|
|
If the anti-affinity requirements specified by
|
||
|
|
this field are not met at scheduling time, the pod will
|
||
|
|
not be scheduled onto the node. If the anti-affinity requirements
|
||
|
|
specified by this field cease to be met at some point during
|
||
|
|
pod execution (e.g. due to a pod label update), the system
|
||
|
|
may or may not try to eventually evict the pod from its
|
||
|
|
node. When there are multiple elements, the lists of nodes
|
||
|
|
corresponding to each podAffinityTerm are intersected, i.e.
|
||
|
|
all terms must be satisfied.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
Defines a set of pods (namely those matching
|
||
|
|
the labelSelector relative to the given namespace(s))
|
||
|
|
that this pod should be co-located (affinity) or not co-located
|
||
|
|
(anti-affinity) with, where co-located is defined as running
|
||
|
|
on a node whose value of the label with key <topologyKey>
|
||
|
|
matches that of any node on which a pod of the set of
|
||
|
|
pods is running
|
||
|
|
properties:
|
||
|
|
labelSelector:
|
||
|
|
description:
|
||
|
|
A label query over a set of resources,
|
||
|
|
in this case pods.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
matchExpressions is a list of label
|
||
|
|
selector requirements. The requirements are ANDed.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A label selector requirement is a
|
||
|
|
selector that contains values, a key, and an
|
||
|
|
operator that relates the key and values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
key is the label key that the
|
||
|
|
selector applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
operator represents a key's relationship
|
||
|
|
to a set of values. Valid operators are
|
||
|
|
In, NotIn, Exists and DoesNotExist.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
values is an array of string
|
||
|
|
values. If the operator is In or NotIn,
|
||
|
|
the values array must be non-empty. If the
|
||
|
|
operator is Exists or DoesNotExist, the
|
||
|
|
values array must be empty. This array is
|
||
|
|
replaced during a strategic merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchLabels:
|
||
|
|
additionalProperties:
|
||
|
|
type: string
|
||
|
|
description:
|
||
|
|
matchLabels is a map of {key,value}
|
||
|
|
pairs. A single {key,value} in the matchLabels
|
||
|
|
map is equivalent to an element of matchExpressions,
|
||
|
|
whose key field is "key", the operator is "In",
|
||
|
|
and the values array contains only "value". The
|
||
|
|
requirements are ANDed.
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
namespaceSelector:
|
||
|
|
description:
|
||
|
|
A label query over the set of namespaces
|
||
|
|
that the term applies to. The term is applied to the
|
||
|
|
union of the namespaces selected by this field and
|
||
|
|
the ones listed in the namespaces field. null selector
|
||
|
|
and null or empty namespaces list means "this pod's
|
||
|
|
namespace". An empty selector ({}) matches all namespaces.
|
||
|
|
properties:
|
||
|
|
matchExpressions:
|
||
|
|
description:
|
||
|
|
matchExpressions is a list of label
|
||
|
|
selector requirements. The requirements are ANDed.
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
A label selector requirement is a
|
||
|
|
selector that contains values, a key, and an
|
||
|
|
operator that relates the key and values.
|
||
|
|
properties:
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
key is the label key that the
|
||
|
|
selector applies to.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
operator represents a key's relationship
|
||
|
|
to a set of values. Valid operators are
|
||
|
|
In, NotIn, Exists and DoesNotExist.
|
||
|
|
type: string
|
||
|
|
values:
|
||
|
|
description:
|
||
|
|
values is an array of string
|
||
|
|
values. If the operator is In or NotIn,
|
||
|
|
the values array must be non-empty. If the
|
||
|
|
operator is Exists or DoesNotExist, the
|
||
|
|
values array must be empty. This array is
|
||
|
|
replaced during a strategic merge patch.
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
required:
|
||
|
|
- key
|
||
|
|
- operator
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
matchLabels:
|
||
|
|
additionalProperties:
|
||
|
|
type: string
|
||
|
|
description:
|
||
|
|
matchLabels is a map of {key,value}
|
||
|
|
pairs. A single {key,value} in the matchLabels
|
||
|
|
map is equivalent to an element of matchExpressions,
|
||
|
|
whose key field is "key", the operator is "In",
|
||
|
|
and the values array contains only "value". The
|
||
|
|
requirements are ANDed.
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
x-kubernetes-map-type: atomic
|
||
|
|
namespaces:
|
||
|
|
description:
|
||
|
|
namespaces specifies a static list of namespace
|
||
|
|
names that the term applies to. The term is applied
|
||
|
|
to the union of the namespaces listed in this field
|
||
|
|
and the ones selected by namespaceSelector. null or
|
||
|
|
empty namespaces list and null namespaceSelector means
|
||
|
|
"this pod's namespace".
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
topologyKey:
|
||
|
|
description:
|
||
|
|
This pod should be co-located (affinity)
|
||
|
|
or not co-located (anti-affinity) with the pods matching
|
||
|
|
the labelSelector in the specified namespaces, where
|
||
|
|
co-located is defined as running on a node whose value
|
||
|
|
of the label with key topologyKey matches that of
|
||
|
|
any node on which any of the selected pods is running.
|
||
|
|
Empty topologyKey is not allowed.
|
||
|
|
type: string
|
||
|
|
required:
|
||
|
|
- topologyKey
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
annotations:
|
||
|
|
additionalProperties:
|
||
|
|
type: string
|
||
|
|
description: (Optional) Annotations to add to the Dragonfly pods.
|
||
|
|
type: object
|
||
|
|
args:
|
||
|
|
description:
|
||
|
|
(Optional) Dragonfly container args to pass to the container
|
||
|
|
Refer to the Dragonfly documentation for the list of supported args
|
||
|
|
items:
|
||
|
|
type: string
|
||
|
|
type: array
|
||
|
|
image:
|
||
|
|
description: Image is the Dragonfly image to use
|
||
|
|
type: string
|
||
|
|
replicas:
|
||
|
|
description:
|
||
|
|
Replicas is the total number of Dragonfly instances including
|
||
|
|
the master
|
||
|
|
format: int32
|
||
|
|
type: integer
|
||
|
|
resources:
|
||
|
|
description:
|
||
|
|
(Optional) Dragonfly container resource limits. Any container
|
||
|
|
limits can be specified.
|
||
|
|
properties:
|
||
|
|
claims:
|
||
|
|
description:
|
||
|
|
"Claims lists the names of resources, defined in
|
||
|
|
spec.resourceClaims, that are used by this container. \n This
|
||
|
|
is an alpha field and requires enabling the DynamicResourceAllocation
|
||
|
|
feature gate. \n This field is immutable."
|
||
|
|
items:
|
||
|
|
description: ResourceClaim references one entry in PodSpec.ResourceClaims.
|
||
|
|
properties:
|
||
|
|
name:
|
||
|
|
description:
|
||
|
|
Name must match the name of one entry in pod.spec.resourceClaims
|
||
|
|
of the Pod where this field is used. It makes that resource
|
||
|
|
available inside a container.
|
||
|
|
type: string
|
||
|
|
required:
|
||
|
|
- name
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
x-kubernetes-list-map-keys:
|
||
|
|
- name
|
||
|
|
x-kubernetes-list-type: map
|
||
|
|
limits:
|
||
|
|
additionalProperties:
|
||
|
|
anyOf:
|
||
|
|
- type: integer
|
||
|
|
- type: string
|
||
|
|
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
||
|
|
x-kubernetes-int-or-string: true
|
||
|
|
description:
|
||
|
|
"Limits describes the maximum amount of compute resources
|
||
|
|
allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
|
||
|
|
type: object
|
||
|
|
requests:
|
||
|
|
additionalProperties:
|
||
|
|
anyOf:
|
||
|
|
- type: integer
|
||
|
|
- type: string
|
||
|
|
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
||
|
|
x-kubernetes-int-or-string: true
|
||
|
|
description:
|
||
|
|
"Requests describes the minimum amount of compute
|
||
|
|
resources required. If Requests is omitted for a container,
|
||
|
|
it defaults to Limits if that is explicitly specified, otherwise
|
||
|
|
to an implementation-defined value. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/"
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
tolerations:
|
||
|
|
description: (Optional) Dragonfly pod tolerations
|
||
|
|
items:
|
||
|
|
description:
|
||
|
|
The pod this Toleration is attached to tolerates any
|
||
|
|
taint that matches the triple <key,value,effect> using the matching
|
||
|
|
operator <operator>.
|
||
|
|
properties:
|
||
|
|
effect:
|
||
|
|
description:
|
||
|
|
Effect indicates the taint effect to match. Empty
|
||
|
|
means match all taint effects. When specified, allowed values
|
||
|
|
are NoSchedule, PreferNoSchedule and NoExecute.
|
||
|
|
type: string
|
||
|
|
key:
|
||
|
|
description:
|
||
|
|
Key is the taint key that the toleration applies
|
||
|
|
to. Empty means match all taint keys. If the key is empty,
|
||
|
|
operator must be Exists; this combination means to match all
|
||
|
|
values and all keys.
|
||
|
|
type: string
|
||
|
|
operator:
|
||
|
|
description:
|
||
|
|
Operator represents a key's relationship to the
|
||
|
|
value. Valid operators are Exists and Equal. Defaults to Equal.
|
||
|
|
Exists is equivalent to wildcard for value, so that a pod
|
||
|
|
can tolerate all taints of a particular category.
|
||
|
|
type: string
|
||
|
|
tolerationSeconds:
|
||
|
|
description:
|
||
|
|
TolerationSeconds represents the period of time
|
||
|
|
the toleration (which must be of effect NoExecute, otherwise
|
||
|
|
this field is ignored) tolerates the taint. By default, it
|
||
|
|
is not set, which means tolerate the taint forever (do not
|
||
|
|
evict). Zero and negative values will be treated as 0 (evict
|
||
|
|
immediately) by the system.
|
||
|
|
format: int64
|
||
|
|
type: integer
|
||
|
|
value:
|
||
|
|
description:
|
||
|
|
Value is the taint value the toleration matches
|
||
|
|
to. If the operator is Exists, the value should be empty,
|
||
|
|
otherwise just a regular string.
|
||
|
|
type: string
|
||
|
|
type: object
|
||
|
|
type: array
|
||
|
|
type: object
|
||
|
|
status:
|
||
|
|
description: DragonflyStatus defines the observed state of Dragonfly
|
||
|
|
properties:
|
||
|
|
isRollingUpdate:
|
||
|
|
description:
|
||
|
|
IsRollingUpdate is true if the Dragonfly instance is
|
||
|
|
being updated
|
||
|
|
type: boolean
|
||
|
|
phase:
|
||
|
|
description:
|
||
|
|
'Status of the Dragonfly Instance It can be one of the
|
||
|
|
following: - "ready": The Dragonfly instance is ready to serve requests
|
||
|
|
- "configuring-replication": The controller is updating the master
|
||
|
|
of the Dragonfly instance - "resources-created": The Dragonfly instance
|
||
|
|
resources were created but not yet configured'
|
||
|
|
type: string
|
||
|
|
type: object
|
||
|
|
type: object
|
||
|
|
served: true
|
||
|
|
storage: true
|
||
|
|
subresources:
|
||
|
|
status: {}
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: ServiceAccount
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: rbac
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: controller-manager-sa
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: serviceaccount
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
name: dragonfly-operator-controller-manager
|
||
|
|
namespace: dragonfly-operator-system
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: Role
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: rbac
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: leader-election-role
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: role
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
name: dragonfly-operator-leader-election-role
|
||
|
|
namespace: dragonfly-operator-system
|
||
|
|
rules:
|
||
|
|
- apiGroups:
|
||
|
|
- ""
|
||
|
|
resources:
|
||
|
|
- configmaps
|
||
|
|
verbs:
|
||
|
|
- get
|
||
|
|
- list
|
||
|
|
- watch
|
||
|
|
- create
|
||
|
|
- update
|
||
|
|
- patch
|
||
|
|
- delete
|
||
|
|
- apiGroups:
|
||
|
|
- coordination.k8s.io
|
||
|
|
resources:
|
||
|
|
- leases
|
||
|
|
verbs:
|
||
|
|
- get
|
||
|
|
- list
|
||
|
|
- watch
|
||
|
|
- create
|
||
|
|
- update
|
||
|
|
- patch
|
||
|
|
- delete
|
||
|
|
- apiGroups:
|
||
|
|
- ""
|
||
|
|
resources:
|
||
|
|
- events
|
||
|
|
verbs:
|
||
|
|
- create
|
||
|
|
- patch
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
creationTimestamp: null
|
||
|
|
name: dragonfly-operator-manager-role
|
||
|
|
rules:
|
||
|
|
- apiGroups:
|
||
|
|
- ""
|
||
|
|
resources:
|
||
|
|
- events
|
||
|
|
verbs:
|
||
|
|
- create
|
||
|
|
- patch
|
||
|
|
- apiGroups:
|
||
|
|
- ""
|
||
|
|
resources:
|
||
|
|
- pods
|
||
|
|
verbs:
|
||
|
|
- create
|
||
|
|
- delete
|
||
|
|
- get
|
||
|
|
- list
|
||
|
|
- patch
|
||
|
|
- update
|
||
|
|
- watch
|
||
|
|
- apiGroups:
|
||
|
|
- ""
|
||
|
|
resources:
|
||
|
|
- services
|
||
|
|
verbs:
|
||
|
|
- create
|
||
|
|
- delete
|
||
|
|
- get
|
||
|
|
- list
|
||
|
|
- patch
|
||
|
|
- update
|
||
|
|
- watch
|
||
|
|
- apiGroups:
|
||
|
|
- apps
|
||
|
|
resources:
|
||
|
|
- statefulsets
|
||
|
|
verbs:
|
||
|
|
- create
|
||
|
|
- delete
|
||
|
|
- get
|
||
|
|
- list
|
||
|
|
- patch
|
||
|
|
- update
|
||
|
|
- watch
|
||
|
|
- apiGroups:
|
||
|
|
- dragonflydb.io
|
||
|
|
resources:
|
||
|
|
- dragonflies
|
||
|
|
verbs:
|
||
|
|
- create
|
||
|
|
- delete
|
||
|
|
- get
|
||
|
|
- list
|
||
|
|
- patch
|
||
|
|
- update
|
||
|
|
- watch
|
||
|
|
- apiGroups:
|
||
|
|
- dragonflydb.io
|
||
|
|
resources:
|
||
|
|
- dragonflies/finalizers
|
||
|
|
verbs:
|
||
|
|
- update
|
||
|
|
- apiGroups:
|
||
|
|
- dragonflydb.io
|
||
|
|
resources:
|
||
|
|
- dragonflies/status
|
||
|
|
verbs:
|
||
|
|
- get
|
||
|
|
- patch
|
||
|
|
- update
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: kube-rbac-proxy
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: metrics-reader
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: clusterrole
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
name: dragonfly-operator-metrics-reader
|
||
|
|
rules:
|
||
|
|
- nonResourceURLs:
|
||
|
|
- /metrics
|
||
|
|
verbs:
|
||
|
|
- get
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: kube-rbac-proxy
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: proxy-role
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: clusterrole
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
name: dragonfly-operator-proxy-role
|
||
|
|
rules:
|
||
|
|
- apiGroups:
|
||
|
|
- authentication.k8s.io
|
||
|
|
resources:
|
||
|
|
- tokenreviews
|
||
|
|
verbs:
|
||
|
|
- create
|
||
|
|
- apiGroups:
|
||
|
|
- authorization.k8s.io
|
||
|
|
resources:
|
||
|
|
- subjectaccessreviews
|
||
|
|
verbs:
|
||
|
|
- create
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: RoleBinding
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: rbac
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: leader-election-rolebinding
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: rolebinding
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
name: dragonfly-operator-leader-election-rolebinding
|
||
|
|
namespace: dragonfly-operator-system
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: Role
|
||
|
|
name: dragonfly-operator-leader-election-role
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: dragonfly-operator-controller-manager
|
||
|
|
namespace: dragonfly-operator-system
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: rbac
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: manager-rolebinding
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: clusterrolebinding
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
name: dragonfly-operator-manager-rolebinding
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: dragonfly-operator-manager-role
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: dragonfly-operator-controller-manager
|
||
|
|
namespace: dragonfly-operator-system
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: kube-rbac-proxy
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: proxy-rolebinding
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: clusterrolebinding
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
name: dragonfly-operator-proxy-rolebinding
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: dragonfly-operator-proxy-role
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: dragonfly-operator-controller-manager
|
||
|
|
namespace: dragonfly-operator-system
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Service
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: kube-rbac-proxy
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: controller-manager-metrics-service
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: service
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
control-plane: controller-manager
|
||
|
|
name: dragonfly-operator-controller-manager-metrics-service
|
||
|
|
namespace: dragonfly-operator-system
|
||
|
|
spec:
|
||
|
|
ports:
|
||
|
|
- name: https
|
||
|
|
port: 8443
|
||
|
|
protocol: TCP
|
||
|
|
targetPort: https
|
||
|
|
selector:
|
||
|
|
control-plane: controller-manager
|
||
|
|
---
|
||
|
|
apiVersion: apps/v1
|
||
|
|
kind: Deployment
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/component: manager
|
||
|
|
app.kubernetes.io/created-by: dragonfly-operator
|
||
|
|
app.kubernetes.io/instance: controller-manager
|
||
|
|
app.kubernetes.io/managed-by: kustomize
|
||
|
|
app.kubernetes.io/name: deployment
|
||
|
|
app.kubernetes.io/part-of: dragonfly-operator
|
||
|
|
control-plane: controller-manager
|
||
|
|
name: dragonfly-operator-controller-manager
|
||
|
|
namespace: dragonfly-operator-system
|
||
|
|
spec:
|
||
|
|
replicas: 1
|
||
|
|
selector:
|
||
|
|
matchLabels:
|
||
|
|
control-plane: controller-manager
|
||
|
|
template:
|
||
|
|
metadata:
|
||
|
|
annotations:
|
||
|
|
kubectl.kubernetes.io/default-container: manager
|
||
|
|
labels:
|
||
|
|
control-plane: controller-manager
|
||
|
|
spec:
|
||
|
|
affinity:
|
||
|
|
nodeAffinity:
|
||
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
||
|
|
nodeSelectorTerms:
|
||
|
|
- matchExpressions:
|
||
|
|
- key: kubernetes.io/arch
|
||
|
|
operator: In
|
||
|
|
values:
|
||
|
|
- amd64
|
||
|
|
- arm64
|
||
|
|
- ppc64le
|
||
|
|
- s390x
|
||
|
|
- key: kubernetes.io/os
|
||
|
|
operator: In
|
||
|
|
values:
|
||
|
|
- linux
|
||
|
|
containers:
|
||
|
|
- args:
|
||
|
|
- --secure-listen-address=0.0.0.0:8443
|
||
|
|
- --upstream=http://127.0.0.1:8080/
|
||
|
|
- --logtostderr=true
|
||
|
|
- --v=0
|
||
|
|
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1
|
||
|
|
name: kube-rbac-proxy
|
||
|
|
ports:
|
||
|
|
- containerPort: 8443
|
||
|
|
name: https
|
||
|
|
protocol: TCP
|
||
|
|
resources:
|
||
|
|
limits:
|
||
|
|
cpu: 500m
|
||
|
|
memory: 128Mi
|
||
|
|
requests:
|
||
|
|
cpu: 5m
|
||
|
|
memory: 64Mi
|
||
|
|
securityContext:
|
||
|
|
allowPrivilegeEscalation: false
|
||
|
|
capabilities:
|
||
|
|
drop:
|
||
|
|
- ALL
|
||
|
|
- args:
|
||
|
|
- --health-probe-bind-address=:8081
|
||
|
|
- --metrics-bind-address=127.0.0.1:8080
|
||
|
|
- --leader-elect
|
||
|
|
command:
|
||
|
|
- /manager
|
||
|
|
image: docker.dragonflydb.io/dragonflydb/operator:v0.0.6
|
||
|
|
livenessProbe:
|
||
|
|
httpGet:
|
||
|
|
path: /healthz
|
||
|
|
port: 8081
|
||
|
|
initialDelaySeconds: 15
|
||
|
|
periodSeconds: 20
|
||
|
|
name: manager
|
||
|
|
readinessProbe:
|
||
|
|
httpGet:
|
||
|
|
path: /readyz
|
||
|
|
port: 8081
|
||
|
|
initialDelaySeconds: 5
|
||
|
|
periodSeconds: 10
|
||
|
|
resources:
|
||
|
|
limits:
|
||
|
|
cpu: 500m
|
||
|
|
memory: 128Mi
|
||
|
|
requests:
|
||
|
|
cpu: 10m
|
||
|
|
memory: 64Mi
|
||
|
|
securityContext:
|
||
|
|
allowPrivilegeEscalation: false
|
||
|
|
capabilities:
|
||
|
|
drop:
|
||
|
|
- ALL
|
||
|
|
securityContext:
|
||
|
|
runAsNonRoot: true
|
||
|
|
serviceAccountName: dragonfly-operator-controller-manager
|
||
|
|
terminationGracePeriodSeconds: 10
|