forked from onedr0p/cluster-template
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
24 changed files
with
18,925 additions
and
0 deletions.
There are no files selected for viewing
1,206 changes: 1,206 additions & 0 deletions
1,206
...es-operator/postgres-operator/crd/bases/postgres-operator.crunchydata.com_pgupgrades.yaml
Large diffs are not rendered by default.
Oops, something went wrong.
17,066 changes: 17,066 additions & 0 deletions
17,066
...rator/postgres-operator/crd/bases/postgres-operator.crunchydata.com_postgresclusters.yaml
Large diffs are not rendered by default.
Oops, something went wrong.
4 changes: 4 additions & 0 deletions
4
kubernetes/apps/postgres-operator/postgres-operator/crd/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,4 @@ | ||
--- | ||
resources: | ||
- bases/postgres-operator.crunchydata.com_postgresclusters.yaml | ||
- bases/postgres-operator.crunchydata.com_pgupgrades.yaml |
4 changes: 4 additions & 0 deletions
4
kubernetes/apps/postgres-operator/postgres-operator/manager/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,4 @@ | ||
--- | ||
resources: | ||
- manager.yaml | ||
- manager-upgrade.yaml |
36 changes: 36 additions & 0 deletions
36
kubernetes/apps/postgres-operator/postgres-operator/manager/manager-upgrade.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,36 @@ | ||
--- | ||
apiVersion: apps/v1 | ||
kind: Deployment | ||
metadata: | ||
name: pgo-upgrade | ||
labels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator-upgrade | ||
spec: | ||
replicas: 1 | ||
strategy: { type: Recreate } | ||
selector: | ||
matchLabels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator-upgrade | ||
template: | ||
metadata: | ||
labels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator-upgrade | ||
spec: | ||
containers: | ||
- name: operator | ||
image: postgres-operator-upgrade | ||
env: | ||
- name: PGO_NAMESPACE | ||
valueFrom: | ||
fieldRef: | ||
fieldPath: metadata.namespace | ||
- name: CRUNCHY_DEBUG | ||
value: "true" | ||
- name: RELATED_IMAGE_PGUPGRADE | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-upgrade:ubi8-5.3.1-0" | ||
securityContext: | ||
allowPrivilegeEscalation: false | ||
capabilities: { drop: [ALL] } | ||
readOnlyRootFilesystem: true | ||
runAsNonRoot: true | ||
serviceAccountName: postgres-operator-upgrade |
54 changes: 54 additions & 0 deletions
54
kubernetes/apps/postgres-operator/postgres-operator/manager/manager.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,54 @@ | ||
--- | ||
apiVersion: apps/v1 | ||
kind: Deployment | ||
metadata: | ||
name: pgo | ||
labels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator | ||
spec: | ||
replicas: 1 | ||
strategy: { type: Recreate } | ||
selector: | ||
matchLabels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator | ||
template: | ||
metadata: | ||
labels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator | ||
spec: | ||
containers: | ||
- name: operator | ||
image: postgres-operator | ||
env: | ||
- name: PGO_NAMESPACE | ||
valueFrom: | ||
fieldRef: | ||
fieldPath: metadata.namespace | ||
- name: CRUNCHY_DEBUG | ||
value: "true" | ||
- name: RELATED_IMAGE_POSTGRES_14 | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-postgres:ubi8-14.7-0" | ||
- name: RELATED_IMAGE_POSTGRES_14_GIS_3.1 | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-postgres-gis:ubi8-14.7-3.1-0" | ||
- name: RELATED_IMAGE_POSTGRES_14_GIS_3.2 | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-postgres-gis:ubi8-14.7-3.2-0" | ||
- name: RELATED_IMAGE_POSTGRES_14_GIS_3.3 | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-postgres-gis:ubi8-14.7-3.3-0" | ||
- name: RELATED_IMAGE_POSTGRES_15 | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-postgres:ubi8-15.2-0" | ||
- name: RELATED_IMAGE_POSTGRES_15_GIS_3.3 | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-postgres-gis:ubi8-15.2-3.3-0" | ||
- name: RELATED_IMAGE_PGADMIN | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-pgadmin4:ubi8-4.30-10" | ||
- name: RELATED_IMAGE_PGBACKREST | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-pgbackrest:ubi8-2.41-4" | ||
- name: RELATED_IMAGE_PGBOUNCER | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-pgbouncer:ubi8-1.18-0" | ||
- name: RELATED_IMAGE_PGEXPORTER | ||
value: "registry.developers.crunchydata.com/crunchydata/crunchy-postgres-exporter:ubi8-5.3.1-0" | ||
securityContext: | ||
allowPrivilegeEscalation: false | ||
capabilities: { drop: [ALL] } | ||
readOnlyRootFilesystem: true | ||
runAsNonRoot: true | ||
serviceAccountName: pgo |
3 changes: 3 additions & 0 deletions
3
kubernetes/apps/postgres-operator/postgres-operator/namespace/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,3 @@ | ||
--- | ||
resources: | ||
- namespace.yaml |
5 changes: 5 additions & 0 deletions
5
kubernetes/apps/postgres-operator/postgres-operator/namespace/namespace.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,5 @@ | ||
--- | ||
apiVersion: v1 | ||
kind: Namespace | ||
metadata: | ||
name: postgres-operator |
26 changes: 26 additions & 0 deletions
26
kubernetes/apps/postgres-operator/postgres-operator/operator/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,26 @@ | ||
--- | ||
namespace: postgres-operator | ||
|
||
commonLabels: | ||
app.kubernetes.io/name: pgo | ||
# The version below should match the version on the PostgresCluster CRD | ||
app.kubernetes.io/version: 5.3.1 | ||
|
||
bases: | ||
- ../crd | ||
- ../rbac/cluster | ||
- ../manager | ||
|
||
images: | ||
- name: postgres-operator | ||
newName: registry.developers.crunchydata.com/crunchydata/postgres-operator | ||
newTag: ubi8-5.3.1-0 | ||
- name: postgres-operator-upgrade | ||
newName: registry.developers.crunchydata.com/crunchydata/postgres-operator-upgrade | ||
newTag: ubi8-5.3.1-0 | ||
|
||
patchesJson6902: | ||
- target: { group: apps, version: v1, kind: Deployment, name: pgo } | ||
path: selectors.yaml | ||
- target: { group: apps, version: v1, kind: Deployment, name: pgo-upgrade } | ||
path: selectors.yaml |
9 changes: 9 additions & 0 deletions
9
kubernetes/apps/postgres-operator/postgres-operator/operator/selectors.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,9 @@ | ||
--- | ||
# We add the app version as a "commonLabel" and change it with each release. | ||
# Remove it from selectors until we use "labels" of Kustomize v4.1. | ||
# See: https://kubectl.docs.kubernetes.io/references/kustomize/kustomization/commonlabels/ | ||
# See: https://github.com/kubernetes-sigs/kustomize/releases/tag/kustomize%2Fv4.1.0 | ||
- op: remove | ||
path: /spec/selector/matchLabels/app.kubernetes.io~1name | ||
- op: remove | ||
path: /spec/selector/matchLabels/app.kubernetes.io~1version |
8 changes: 8 additions & 0 deletions
8
kubernetes/apps/postgres-operator/postgres-operator/rbac/cluster/kustomization.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,8 @@ | ||
--- | ||
resources: | ||
- service_account.yaml | ||
- role.yaml | ||
- role_binding.yaml | ||
- service_account-upgrade.yaml | ||
- role-upgrade.yaml | ||
- role_binding-upgrade.yaml |
71 changes: 71 additions & 0 deletions
71
kubernetes/apps/postgres-operator/postgres-operator/rbac/cluster/role-upgrade.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,71 @@ | ||
--- | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: ClusterRole | ||
metadata: | ||
creationTimestamp: null | ||
name: postgres-operator-upgrade | ||
labels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator-upgrade | ||
rules: | ||
- apiGroups: | ||
- "" | ||
resources: | ||
- endpoints | ||
verbs: | ||
- delete | ||
- get | ||
- list | ||
- watch | ||
- apiGroups: | ||
- apps | ||
resources: | ||
- statefulsets | ||
verbs: | ||
- list | ||
- watch | ||
- apiGroups: | ||
- batch | ||
resources: | ||
- jobs | ||
verbs: | ||
- create | ||
- delete | ||
- list | ||
- patch | ||
- watch | ||
- apiGroups: | ||
- postgres-operator.crunchydata.com | ||
resources: | ||
- pgupgrades | ||
verbs: | ||
- get | ||
- list | ||
- watch | ||
- apiGroups: | ||
- postgres-operator.crunchydata.com | ||
resources: | ||
- pgupgrades/finalizers | ||
verbs: | ||
- patch | ||
- update | ||
- apiGroups: | ||
- postgres-operator.crunchydata.com | ||
resources: | ||
- pgupgrades/status | ||
verbs: | ||
- get | ||
- patch | ||
- apiGroups: | ||
- postgres-operator.crunchydata.com | ||
resources: | ||
- postgresclusters | ||
verbs: | ||
- get | ||
- list | ||
- watch | ||
- apiGroups: | ||
- postgres-operator.crunchydata.com | ||
resources: | ||
- postgresclusters/status | ||
verbs: | ||
- patch |
135 changes: 135 additions & 0 deletions
135
kubernetes/apps/postgres-operator/postgres-operator/rbac/cluster/role.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,135 @@ | ||
--- | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: ClusterRole | ||
metadata: | ||
name: postgres-operator | ||
labels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator | ||
rules: | ||
- apiGroups: | ||
- "" | ||
resources: | ||
- configmaps | ||
- persistentvolumeclaims | ||
- secrets | ||
- services | ||
verbs: | ||
- create | ||
- delete | ||
- get | ||
- list | ||
- patch | ||
- watch | ||
- apiGroups: | ||
- "" | ||
resources: | ||
- endpoints | ||
verbs: | ||
- create | ||
- delete | ||
- deletecollection | ||
- get | ||
- list | ||
- patch | ||
- watch | ||
- apiGroups: | ||
- "" | ||
resources: | ||
- endpoints/restricted | ||
- pods/exec | ||
verbs: | ||
- create | ||
- apiGroups: | ||
- "" | ||
resources: | ||
- events | ||
verbs: | ||
- create | ||
- patch | ||
- apiGroups: | ||
- "" | ||
resources: | ||
- pods | ||
verbs: | ||
- delete | ||
- get | ||
- list | ||
- patch | ||
- watch | ||
- apiGroups: | ||
- "" | ||
resources: | ||
- serviceaccounts | ||
verbs: | ||
- create | ||
- get | ||
- list | ||
- patch | ||
- watch | ||
- apiGroups: | ||
- apps | ||
resources: | ||
- deployments | ||
- statefulsets | ||
verbs: | ||
- create | ||
- delete | ||
- get | ||
- list | ||
- patch | ||
- watch | ||
- apiGroups: | ||
- batch | ||
resources: | ||
- cronjobs | ||
- jobs | ||
verbs: | ||
- create | ||
- delete | ||
- get | ||
- list | ||
- patch | ||
- watch | ||
- apiGroups: | ||
- policy | ||
resources: | ||
- poddisruptionbudgets | ||
verbs: | ||
- create | ||
- delete | ||
- get | ||
- list | ||
- patch | ||
- watch | ||
- apiGroups: | ||
- postgres-operator.crunchydata.com | ||
resources: | ||
- postgresclusters | ||
verbs: | ||
- get | ||
- list | ||
- patch | ||
- watch | ||
- apiGroups: | ||
- postgres-operator.crunchydata.com | ||
resources: | ||
- postgresclusters/finalizers | ||
verbs: | ||
- update | ||
- apiGroups: | ||
- postgres-operator.crunchydata.com | ||
resources: | ||
- postgresclusters/status | ||
verbs: | ||
- patch | ||
- apiGroups: | ||
- rbac.authorization.k8s.io | ||
resources: | ||
- rolebindings | ||
- roles | ||
verbs: | ||
- create | ||
- get | ||
- list | ||
- patch | ||
- watch |
14 changes: 14 additions & 0 deletions
14
kubernetes/apps/postgres-operator/postgres-operator/rbac/cluster/role_binding-upgrade.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,14 @@ | ||
--- | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: ClusterRoleBinding | ||
metadata: | ||
name: postgres-operator-upgrade | ||
labels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator-upgrade | ||
roleRef: | ||
apiGroup: rbac.authorization.k8s.io | ||
kind: ClusterRole | ||
name: postgres-operator-upgrade | ||
subjects: | ||
- kind: ServiceAccount | ||
name: postgres-operator-upgrade |
14 changes: 14 additions & 0 deletions
14
kubernetes/apps/postgres-operator/postgres-operator/rbac/cluster/role_binding.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,14 @@ | ||
--- | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: ClusterRoleBinding | ||
metadata: | ||
name: postgres-operator | ||
labels: | ||
postgres-operator.crunchydata.com/control-plane: postgres-operator | ||
roleRef: | ||
apiGroup: rbac.authorization.k8s.io | ||
kind: ClusterRole | ||
name: postgres-operator | ||
subjects: | ||
- kind: ServiceAccount | ||
name: pgo |
Oops, something went wrong.