├── .ci-orchestrator └── runtime-component-operator-build.yml ├── .github ├── ISSUE_TEMPLATE │ ├── bug_report.md │ ├── feature_request.md │ └── support-question.md └── PULL_REQUEST_TEMPLATE.md ├── .gitignore ├── .one-pipeline-archive.yaml ├── .one-pipeline-cd.yaml ├── .one-pipeline.yaml ├── .whitesource ├── CHANGELOG.md ├── CONTRIBUTING.md ├── Dockerfile ├── LICENSE ├── Makefile ├── PROJECT ├── README.adoc ├── api ├── v1 │ ├── groupversion_info.go │ ├── operations.go │ ├── runtimecomponent_types.go │ ├── runtimeoperation_types.go │ └── zz_generated.deepcopy.go └── v1beta2 │ ├── groupversion_info.go │ ├── operations.go │ ├── runtimecomponent_types.go │ ├── runtimeoperation_types.go │ └── zz_generated.deepcopy.go ├── bundle.Dockerfile ├── bundle ├── manifests │ ├── rc.app.stacks_runtimecomponents.yaml │ ├── rc.app.stacks_runtimeoperations.yaml │ └── runtime-component.clusterserviceversion.yaml └── metadata │ └── annotations.yaml ├── catalog.Dockerfile ├── cmd └── main.go ├── common ├── common.go ├── config.go └── types.go ├── config ├── certmanager │ ├── certificate.yaml │ ├── kustomization.yaml │ └── kustomizeconfig.yaml ├── crd │ ├── bases │ │ ├── rc.app.stacks_runtimecomponents.yaml │ │ └── rc.app.stacks_runtimeoperations.yaml │ ├── kustomization.yaml │ ├── kustomizeconfig.yaml │ └── patches │ │ ├── cainjection_in_runtimecomponents.yaml │ │ ├── cainjection_in_runtimeoperations.yaml │ │ ├── preserveUnknownFields_runtimecomponents.yaml │ │ ├── preserveUnknownFields_runtimeoperations.yaml │ │ ├── webhook_in_runtimecomponents.yaml │ │ └── webhook_in_runtimeoperations.yaml ├── default │ ├── kustomization.yaml │ ├── manager_auth_proxy_patch.yaml │ ├── manager_webhook_patch.yaml │ └── webhookcainjection_patch.yaml ├── kubectl │ ├── crd │ │ └── kustomization.yaml │ ├── operator │ │ ├── kustomization.yaml │ │ └── patches │ │ │ └── delete-namespace.yaml │ ├── rbac-watch-all │ │ ├── kustomization.yaml │ │ └── patches │ │ │ └── delete-service-account.yaml │ └── rbac-watch-another │ │ ├── kustomization.yaml │ │ └── patches │ │ └── delete-service-account.yaml ├── kustomize │ ├── crd │ │ └── kustomization.yaml │ ├── operator │ │ ├── kustomization.yaml │ │ └── patches │ │ │ ├── delete-namespace.yaml │ │ │ └── watch-namespace.yaml │ ├── roles │ │ └── kustomization.yaml │ ├── watch-all │ │ ├── kustomization.yaml │ │ └── patches │ │ │ └── delete-service-account.yaml │ └── watch-another │ │ ├── kustomization.yaml │ │ └── patches │ │ └── delete-service-account.yaml ├── manager │ ├── kustomization.yaml │ └── manager.yaml ├── manifests │ ├── bases │ │ └── runtime-component.clusterserviceversion.yaml │ ├── description.md │ ├── kustomization.yaml │ ├── patches │ │ └── csvAnnotations.yaml │ ├── probesPatch.yaml │ ├── securityContextPatch.yaml │ └── serviceBindingPatch.yaml ├── prometheus │ ├── kustomization.yaml │ └── monitor.yaml ├── rbac │ ├── auth_proxy_client_clusterrole.yaml │ ├── auth_proxy_role.yaml │ ├── auth_proxy_role_binding.yaml │ ├── auth_proxy_service.yaml │ ├── kind-kuttl-rbac.yaml │ ├── kustomization.yaml │ ├── kuttl-rbac.yaml │ ├── leader_election_role.yaml │ ├── leader_election_role_binding.yaml │ ├── minikube-kuttl-rbac.yaml │ ├── role.yaml │ ├── role_binding.yaml │ ├── runtimecomponent_editor_role.yaml │ ├── runtimecomponent_viewer_role.yaml │ ├── runtimeoperation_editor_role.yaml │ ├── runtimeoperation_viewer_role.yaml │ └── service_account.yaml ├── samples │ ├── kustomization.yaml │ ├── rc.app.stacks_v1_runtimecomponent.yaml │ ├── rc.app.stacks_v1_runtimeoperation.yaml │ ├── rc.app.stacks_v1beta2_runtimecomponent.yaml │ └── rc.app.stacks_v1beta2_runtimeoperation.yaml ├── scorecard │ ├── bases │ │ └── config.yaml │ ├── kustomization.yaml │ └── patches │ │ ├── basic.config.yaml │ │ └── olm.config.yaml └── webhook │ ├── kustomization.yaml │ ├── kustomizeconfig.yaml │ └── service.yaml ├── deploy ├── olm-catalog │ ├── runtime-component-operator-certified │ │ ├── runtime-component-operator.package.yaml │ │ ├── runtime-component-operator.v0.4.1.clusterserviceversion.yaml │ │ ├── runtime-component-operator.v0.5.0.clusterserviceversion.yaml │ │ ├── runtime-component-operator.v0.5.1.clusterserviceversion.yaml │ │ ├── runtime-component-operator.v0.6.0.clusterserviceversion.yaml │ │ ├── runtime-component-operator.v0.6.1.clusterserviceversion.yaml │ │ ├── runtime-component-operator.v0.7.0.clusterserviceversion.yaml │ │ └── runtimecomponents.app.stacks.crd.yaml │ └── runtime-component-operator-community │ │ ├── 0.4.0 │ │ ├── runtime-component-operator.v0.4.0.clusterserviceversion.yaml │ │ └── runtimecomponents.app.stacks.crd.yaml │ │ ├── 0.5.0 │ │ ├── runtime-component-operator.v0.5.0.clusterserviceversion.yaml │ │ └── runtimecomponents.app.stacks.crd.yaml │ │ ├── 0.5.1 │ │ ├── runtime-component-operator.v0.5.1.clusterserviceversion.yaml │ │ └── runtimecomponents.app.stacks.crd.yaml │ │ ├── 0.6.0 │ │ ├── runtime-component-operator.v0.6.0.clusterserviceversion.yaml │ │ └── runtimecomponents.app.stacks.crd.yaml │ │ ├── 0.7.0 │ │ ├── runtime-component-operator.v0.7.0.clusterserviceversion.yaml │ │ └── runtimecomponents.app.stacks.crd.yaml │ │ └── runtime-component-operator.package.yaml └── releases │ ├── 0.4.0 │ ├── readme.adoc │ ├── runtime-component-cluster-rbac.yaml │ ├── runtime-component-crd.yaml │ └── runtime-component-operator.yaml │ ├── 0.4.1 │ ├── readme.adoc │ ├── runtime-component-cluster-rbac.yaml │ ├── runtime-component-crd.yaml │ └── runtime-component-operator.yaml │ ├── 0.4.2 │ ├── readme.adoc │ ├── runtime-component-cluster-rbac.yaml │ ├── runtime-component-crd.yaml │ └── runtime-component-operator.yaml │ ├── 0.5.0 │ ├── readme.adoc │ ├── runtime-component-cluster-rbac.yaml │ ├── runtime-component-crd.yaml │ └── runtime-component-operator.yaml │ ├── 0.5.1 │ ├── readme.adoc │ ├── runtime-component-cluster-rbac.yaml │ ├── runtime-component-crd.yaml │ └── runtime-component-operator.yaml │ ├── 0.6.0 │ ├── readme.adoc │ ├── runtime-component-cluster-rbac.yaml │ ├── runtime-component-crd.yaml │ └── runtime-component-operator.yaml │ ├── 0.7.0 │ ├── readme.adoc │ ├── runtime-component-cluster-rbac.yaml │ ├── runtime-component-crd.yaml │ └── runtime-component-operator.yaml │ ├── 0.7.1 │ ├── readme.adoc │ ├── runtime-component-cluster-rbac.yaml │ ├── runtime-component-crd.yaml │ └── runtime-component-operator.yaml │ ├── 0.8.0 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ └── runtime-component-operator.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ └── rco-ns.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-deployment.yaml │ │ │ │ ├── rco-roles.yaml │ │ │ │ ├── rco-sa.yaml │ │ │ │ └── watched-roles.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-roles.yaml │ │ │ ├── rco-sa.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 0.8.1 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ └── runtime-component-operator.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ └── rco-ns.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-deployment.yaml │ │ │ │ ├── rco-roles.yaml │ │ │ │ ├── rco-sa.yaml │ │ │ │ └── watched-roles.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-roles.yaml │ │ │ ├── rco-sa.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 0.8.2 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ └── runtime-component-operator.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ └── rco-ns.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-deployment.yaml │ │ │ │ ├── rco-roles.yaml │ │ │ │ ├── rco-sa.yaml │ │ │ │ └── watched-roles.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-roles.yaml │ │ │ ├── rco-sa.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.2.0 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ └── rco-ns.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-roles.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ └── watched-roles.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-roles.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.2.1 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ └── rco-ns.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-roles.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ └── watched-roles.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-roles.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.2.2 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ └── rco-ns.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-roles.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ └── watched-roles.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-roles.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.3.0 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-leader-election-cluster-rolebinding.yaml │ │ │ │ └── rco-manager-cluster-rolebinding.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-leader-election-role.yaml │ │ │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ │ │ ├── rco-manager-role.yaml │ │ │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-leader-election-watched-role.yaml │ │ │ │ │ ├── rco-leader-election-watched-rolebinding.yaml │ │ │ │ │ ├── rco-watched-role.yaml │ │ │ │ │ └── rco-watched-rolebinding.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-leader-election-role.yaml │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ ├── rco-manager-role.yaml │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.3.1 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-leader-election-cluster-rolebinding.yaml │ │ │ │ └── rco-manager-cluster-rolebinding.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-leader-election-role.yaml │ │ │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ │ │ ├── rco-manager-role.yaml │ │ │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-leader-election-watched-role.yaml │ │ │ │ │ ├── rco-leader-election-watched-rolebinding.yaml │ │ │ │ │ ├── rco-watched-role.yaml │ │ │ │ │ └── rco-watched-rolebinding.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-leader-election-role.yaml │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ ├── rco-manager-role.yaml │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.3.2 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-leader-election-cluster-rolebinding.yaml │ │ │ │ └── rco-manager-cluster-rolebinding.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-leader-election-role.yaml │ │ │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ │ │ ├── rco-manager-role.yaml │ │ │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-leader-election-watched-role.yaml │ │ │ │ │ ├── rco-leader-election-watched-rolebinding.yaml │ │ │ │ │ ├── rco-watched-role.yaml │ │ │ │ │ └── rco-watched-rolebinding.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-leader-election-role.yaml │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ ├── rco-manager-role.yaml │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.3.3 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-leader-election-cluster-rolebinding.yaml │ │ │ │ └── rco-manager-cluster-rolebinding.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-leader-election-role.yaml │ │ │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ │ │ ├── rco-manager-role.yaml │ │ │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-leader-election-watched-role.yaml │ │ │ │ │ ├── rco-leader-election-watched-rolebinding.yaml │ │ │ │ │ ├── rco-watched-role.yaml │ │ │ │ │ └── rco-watched-rolebinding.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-leader-election-role.yaml │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ ├── rco-manager-role.yaml │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.4.0 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-leader-election-cluster-rolebinding.yaml │ │ │ │ └── rco-manager-cluster-rolebinding.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-leader-election-role.yaml │ │ │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ │ │ ├── rco-manager-role.yaml │ │ │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-leader-election-watched-role.yaml │ │ │ │ │ ├── rco-leader-election-watched-rolebinding.yaml │ │ │ │ │ ├── rco-watched-role.yaml │ │ │ │ │ └── rco-watched-rolebinding.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-leader-election-role.yaml │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ ├── rco-manager-role.yaml │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.4.1 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-leader-election-cluster-rolebinding.yaml │ │ │ │ └── rco-manager-cluster-rolebinding.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-leader-election-role.yaml │ │ │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ │ │ ├── rco-manager-role.yaml │ │ │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-leader-election-watched-role.yaml │ │ │ │ │ ├── rco-leader-election-watched-rolebinding.yaml │ │ │ │ │ ├── rco-watched-role.yaml │ │ │ │ │ └── rco-watched-rolebinding.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-leader-election-role.yaml │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ ├── rco-manager-role.yaml │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ ├── 1.4.2 │ ├── kubectl │ │ ├── readme.adoc │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ ├── runtime-component-rbac-watch-all.yaml │ │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ │ ├── README.adoc │ │ ├── base │ │ │ ├── kustomization.yaml │ │ │ ├── runtime-component-crd.yaml │ │ │ ├── runtime-component-operator.yaml │ │ │ └── runtime-component-roles.yaml │ │ ├── examples │ │ │ ├── watch-all-namespaces │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-leader-election-cluster-rolebinding.yaml │ │ │ │ └── rco-manager-cluster-rolebinding.yaml │ │ │ ├── watch-another-namespace │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-deployment.yaml │ │ │ │ │ ├── rco-leader-election-role.yaml │ │ │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ │ │ ├── rco-manager-role.yaml │ │ │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ │ │ └── rco-sa.yaml │ │ │ │ └── rco-watched-ns2 │ │ │ │ │ ├── kustomization.yaml │ │ │ │ │ ├── rco-leader-election-watched-role.yaml │ │ │ │ │ ├── rco-leader-election-watched-rolebinding.yaml │ │ │ │ │ ├── rco-watched-role.yaml │ │ │ │ │ └── rco-watched-rolebinding.yaml │ │ │ └── watch-own-namespace │ │ │ │ └── kustomization.yaml │ │ └── overlays │ │ │ ├── watch-all-namespaces │ │ │ ├── cluster-roles.yaml │ │ │ ├── kustomization.yaml │ │ │ └── rco-all-namespaces.yaml │ │ │ └── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-leader-election-role.yaml │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ ├── rco-manager-role.yaml │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns │ │ │ ├── kustomization.yaml │ │ │ └── watched-roles.yaml │ └── readme.adoc │ └── 1.4.3 │ ├── kubectl │ ├── readme.adoc │ ├── runtime-component-crd.yaml │ ├── runtime-component-operator.yaml │ ├── runtime-component-rbac-watch-all.yaml │ └── runtime-component-rbac-watch-another.yaml │ ├── kustomize │ ├── README.adoc │ ├── base │ │ ├── kustomization.yaml │ │ ├── runtime-component-crd.yaml │ │ ├── runtime-component-operator.yaml │ │ └── runtime-component-roles.yaml │ ├── examples │ │ ├── watch-all-namespaces │ │ │ ├── kustomization.yaml │ │ │ ├── rco-leader-election-cluster-rolebinding.yaml │ │ │ └── rco-manager-cluster-rolebinding.yaml │ │ ├── watch-another-namespace │ │ │ ├── kustomization.yaml │ │ │ ├── rco-ns2 │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-deployment.yaml │ │ │ │ ├── rco-leader-election-role.yaml │ │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ │ ├── rco-manager-role.yaml │ │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ │ └── rco-sa.yaml │ │ │ └── rco-watched-ns2 │ │ │ │ ├── kustomization.yaml │ │ │ │ ├── rco-leader-election-watched-role.yaml │ │ │ │ ├── rco-leader-election-watched-rolebinding.yaml │ │ │ │ ├── rco-watched-role.yaml │ │ │ │ └── rco-watched-rolebinding.yaml │ │ └── watch-own-namespace │ │ │ └── kustomization.yaml │ └── overlays │ │ ├── watch-all-namespaces │ │ ├── cluster-roles.yaml │ │ ├── kustomization.yaml │ │ └── rco-all-namespaces.yaml │ │ └── watch-another-namespace │ │ ├── kustomization.yaml │ │ ├── rco-ns │ │ ├── kustomization.yaml │ │ ├── rco-deployment.yaml │ │ ├── rco-leader-election-role.yaml │ │ ├── rco-leader-election-rolebinding.yaml │ │ ├── rco-manager-role.yaml │ │ ├── rco-manager-rolebinding.yaml │ │ └── rco-sa.yaml │ │ └── rco-watched-ns │ │ ├── kustomization.yaml │ │ └── watched-roles.yaml │ └── readme.adoc ├── doc ├── archive │ └── troubleshooting.adoc ├── images │ └── operator_overview.png ├── readme.adoc ├── troubleshooting.adoc ├── user-guide-v1.adoc ├── user-guide-v1beta1.adoc └── user-guide-v1beta2.adoc ├── ebcDockerBuilderRCO.jenkinsfile ├── examples └── affinity │ ├── 01-coffeeshop-backend.yaml │ ├── 02-coffeeshop-ui.yaml │ └── README.adoc ├── go.mod ├── go.sum ├── hack └── boilerplate.go.txt ├── internal ├── controller │ ├── enqueue_with_matcher.go │ ├── runtimecomponent_controller.go │ └── runtimeoperation_controller.go └── deploy │ ├── kubectl │ ├── readme.adoc │ ├── runtime-component-crd.yaml │ ├── runtime-component-operator.yaml │ ├── runtime-component-rbac-watch-all.yaml │ └── runtime-component-rbac-watch-another.yaml │ └── kustomize │ └── daily │ ├── README.adoc │ ├── base │ ├── kustomization.yaml │ ├── runtime-component-crd.yaml │ ├── runtime-component-operator.yaml │ └── runtime-component-roles.yaml │ ├── examples │ ├── watch-all-namespaces │ │ ├── kustomization.yaml │ │ ├── rco-leader-election-cluster-rolebinding.yaml │ │ └── rco-manager-cluster-rolebinding.yaml │ ├── watch-another-namespace │ │ ├── kustomization.yaml │ │ ├── rco-ns2 │ │ │ ├── kustomization.yaml │ │ │ ├── rco-deployment.yaml │ │ │ ├── rco-leader-election-role.yaml │ │ │ ├── rco-leader-election-rolebinding.yaml │ │ │ ├── rco-manager-role.yaml │ │ │ ├── rco-manager-rolebinding.yaml │ │ │ └── rco-sa.yaml │ │ └── rco-watched-ns2 │ │ │ ├── kustomization.yaml │ │ │ ├── rco-leader-election-watched-role.yaml │ │ │ ├── rco-leader-election-watched-rolebinding.yaml │ │ │ ├── rco-watched-role.yaml │ │ │ └── rco-watched-rolebinding.yaml │ └── watch-own-namespace │ │ └── kustomization.yaml │ └── overlays │ ├── watch-all-namespaces │ ├── cluster-roles.yaml │ ├── kustomization.yaml │ └── rco-all-namespaces.yaml │ └── watch-another-namespace │ ├── kustomization.yaml │ ├── rco-ns │ ├── kustomization.yaml │ ├── rco-deployment.yaml │ ├── rco-leader-election-role.yaml │ ├── rco-leader-election-rolebinding.yaml │ ├── rco-manager-role.yaml │ ├── rco-manager-rolebinding.yaml │ └── rco-sa.yaml │ └── rco-watched-ns │ ├── kustomization.yaml │ └── watched-roles.yaml ├── lintOverrides.yaml ├── scripts ├── csv_description_update.sh ├── dev.sh ├── pipeline │ └── cd_finish ├── servicemonitor.crd.yaml └── update-sample.sh └── utils ├── reconciler.go ├── reconciler_test.go ├── service_binding_reconciler.go ├── status.go ├── status_test.go ├── utils.go └── utils_test.go /.ci-orchestrator/runtime-component-operator-build.yml: -------------------------------------------------------------------------------- 1 | type: pipeline_definition 2 | product: Liberty 3 | name: Runtime Componet Operator Docker Build 4 | description: A build to run the runtime-component operator docker container build 5 | triggers: 6 | - type: manual 7 | triggerName: "rcodocker" 8 | propertyDefinitions: 9 | - name: RELEASE_TARGET 10 | defaultValue: "main" 11 | - name: command 12 | defaultValue: "make build-operator-pipeline REGISTRY=cp.stg.icr.io" 13 | 14 | steps: 15 | - stepName: Z Build 16 | workType: Jenkins 17 | projectName: ebcDockerBuilderRCO 18 | timeoutInMinutes: 1440 19 | # Need properties for Makefile or build script for RCO 20 | properties: 21 | ebcPlan: svl-dockerJenkins-ubuntu22_z_fyrev3.yml 22 | 23 | 24 | - stepName: P Build 25 | workType: Jenkins 26 | projectName: ebcDockerBuilderRCO 27 | timeoutInMinutes: 1440 28 | # Need properties for Makefile or build script for RCO 29 | properties: 30 | ebcPlan: svl-dockerJenkins-ubuntu22_p9_fyrev3.yml 31 | 32 | #- stepName: ARM Build 33 | # workType: Jenkins 34 | # projectName: ebcDockerBuilderRCO 35 | # timeoutInMinutes: 1440 36 | # Need properties for Makefile or build script for RCO 37 | # properties: 38 | # ebcPlan: managed-pool-jenkins-macosx_arm.yml 39 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/bug_report.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: Bug report 3 | about: Create a report to help us improve 4 | title: '' 5 | labels: '' 6 | assignees: '' 7 | 8 | --- 9 | 10 | ## Bug Report 11 | 12 | ### What did you do? 13 | 14 | A clear and concise description of the steps you took (or insert a code snippet). 15 | 16 | ### What did you expect to see? 17 | 18 | A clear and concise description of what you expected to happen (or insert a code snippet). If possible, add `RuntimeComponent` CR. 19 | 20 | ### What did you see instead? 21 | 22 | A clear and concise description of what you expected to happen (or insert a code snippet). 23 | 24 | ### Environment 25 | 26 | Describe the environment (e.g OpenShift/Kubernetes version information). 27 | 28 | ### Possible solution 29 | 30 | 31 | 32 | ### Additional context 33 | 34 | Add any other context about the problem here. 35 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/feature_request.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: Feature request 3 | about: Suggest an idea for this project 4 | title: '' 5 | labels: '' 6 | assignees: '' 7 | 8 | --- 9 | 10 | ## Feature Request 11 | 12 | ### Is your feature request related to a problem? 13 | 14 | A clear and concise description of what the problem is. Example: "I have an issue when (...)" 15 | 16 | ### Describe the solution you'd like 17 | 18 | A clear and concise description of what you want to happen. Add any considered drawbacks. 19 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/support-question.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: Support Question 3 | about: Ask a question or start a discussion 4 | title: '' 5 | labels: '' 6 | assignees: '' 7 | 8 | --- 9 | 10 | ## Type of question 11 | 12 | Are you asking about best practices, how to configure the Runtime Component Operator, or about general context and help around the operator? 13 | 14 | ## Question 15 | 16 | ### What did you do? 17 | 18 | A clear and concise description of the steps you took (or insert a code snippet). If possible, add `RuntimeComponent` CR. 19 | 20 | ### What did you expect to see? 21 | 22 | A clear and concise description of what you expected to happen (or insert a code snippet). 23 | 24 | ### What did you see instead? Under which circumstances? 25 | 26 | A clear and concise description of what you expected to happen (or insert a code snippet). 27 | 28 | ### Environment 29 | 30 | Describe the environment (e.g OpenShift/Kubernetes version information). 31 | 32 | ### Additional context 33 | 34 | Add any other context about the problem here. 35 | -------------------------------------------------------------------------------- /.github/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- 1 | **What this PR does / why we need it?**: 2 | 3 | - 4 | - 5 | 6 | **Does this PR introduce a user-facing change?** 7 | 10 | - [ ] User guide 11 | - [ ] `CHANGELOG.md` 12 | 13 | **Which issue(s) this PR fixes**: 14 | 21 | Fixes # 22 | -------------------------------------------------------------------------------- /.whitesource: -------------------------------------------------------------------------------- 1 | { 2 | "settingsInheritedFrom": "whitesource-config/whitesource-config@master" 3 | } 4 | -------------------------------------------------------------------------------- /PROJECT: -------------------------------------------------------------------------------- 1 | layout: 2 | - go.kubebuilder.io/v4 3 | projectName: runtime-component 4 | repo: github.com/application-stacks/runtime-component-operator 5 | resources: 6 | - group: rc.app.stacks 7 | kind: RuntimeComponent 8 | version: v1 9 | - group: rc.app.stacks 10 | kind: RuntimeOperation 11 | version: v1 12 | - group: rc.app.stacks 13 | kind: RuntimeComponent 14 | version: v1beta2 15 | - group: rc.app.stacks 16 | kind: RuntimeOperation 17 | version: v1beta2 18 | version: "3" -------------------------------------------------------------------------------- /api/v1/groupversion_info.go: -------------------------------------------------------------------------------- 1 | /* 2 | 3 | 4 | Licensed under the Apache License, Version 2.0 (the "License"); 5 | you may not use this file except in compliance with the License. 6 | You may obtain a copy of the License at 7 | 8 | http://www.apache.org/licenses/LICENSE-2.0 9 | 10 | Unless required by applicable law or agreed to in writing, software 11 | distributed under the License is distributed on an "AS IS" BASIS, 12 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 | See the License for the specific language governing permissions and 14 | limitations under the License. 15 | */ 16 | 17 | // Package v1 contains API Schema definitions for the rc.app.stacks v1beta2 API group 18 | // +kubebuilder:object:generate=true 19 | // +groupName=rc.app.stacks 20 | package v1 21 | 22 | import ( 23 | "k8s.io/apimachinery/pkg/runtime/schema" 24 | "sigs.k8s.io/controller-runtime/pkg/scheme" 25 | ) 26 | 27 | var ( 28 | // GroupVersion is group version used to register these objects 29 | GroupVersion = schema.GroupVersion{Group: "rc.app.stacks", Version: "v1"} 30 | 31 | // SchemeBuilder is used to add go types to the GroupVersionKind scheme 32 | SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion} 33 | 34 | // AddToScheme adds the types in this group-version to the given scheme. 35 | AddToScheme = SchemeBuilder.AddToScheme 36 | ) 37 | -------------------------------------------------------------------------------- /api/v1beta2/groupversion_info.go: -------------------------------------------------------------------------------- 1 | /* 2 | 3 | 4 | Licensed under the Apache License, Version 2.0 (the "License"); 5 | you may not use this file except in compliance with the License. 6 | You may obtain a copy of the License at 7 | 8 | http://www.apache.org/licenses/LICENSE-2.0 9 | 10 | Unless required by applicable law or agreed to in writing, software 11 | distributed under the License is distributed on an "AS IS" BASIS, 12 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 | See the License for the specific language governing permissions and 14 | limitations under the License. 15 | */ 16 | 17 | // Package v1beta2 contains API Schema definitions for the rc.app.stacks v1beta2 API group 18 | // +kubebuilder:object:generate=true 19 | // +groupName=rc.app.stacks 20 | package v1beta2 21 | 22 | import ( 23 | "k8s.io/apimachinery/pkg/runtime/schema" 24 | "sigs.k8s.io/controller-runtime/pkg/scheme" 25 | ) 26 | 27 | var ( 28 | // GroupVersion is group version used to register these objects 29 | GroupVersion = schema.GroupVersion{Group: "rc.app.stacks", Version: "v1beta2"} 30 | 31 | // SchemeBuilder is used to add go types to the GroupVersionKind scheme 32 | SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion} 33 | 34 | // AddToScheme adds the types in this group-version to the given scheme. 35 | AddToScheme = SchemeBuilder.AddToScheme 36 | ) 37 | -------------------------------------------------------------------------------- /bundle.Dockerfile: -------------------------------------------------------------------------------- 1 | FROM scratch 2 | 3 | # Core bundle labels. 4 | LABEL operators.operatorframework.io.bundle.mediatype.v1=registry+v1 5 | LABEL operators.operatorframework.io.bundle.manifests.v1=manifests/ 6 | LABEL operators.operatorframework.io.bundle.metadata.v1=metadata/ 7 | LABEL operators.operatorframework.io.bundle.package.v1=runtime-component 8 | LABEL operators.operatorframework.io.bundle.channels.v1=v1.4 9 | LABEL operators.operatorframework.io.bundle.channel.default.v1=v1.4 10 | LABEL operators.operatorframework.io.metrics.builder=operator-sdk-v1.37.0 11 | LABEL operators.operatorframework.io.metrics.mediatype.v1=metrics+v1 12 | LABEL operators.operatorframework.io.metrics.project_layout=go.kubebuilder.io/v4 13 | 14 | # Labels for testing. 15 | LABEL operators.operatorframework.io.test.mediatype.v1=scorecard+v1 16 | LABEL operators.operatorframework.io.test.config.v1=tests/scorecard/ 17 | 18 | # Copy files to locations specified by labels. 19 | COPY bundle/manifests /manifests/ 20 | COPY bundle/metadata /metadata/ 21 | COPY bundle/tests/scorecard /tests/scorecard/ 22 | -------------------------------------------------------------------------------- /bundle/metadata/annotations.yaml: -------------------------------------------------------------------------------- 1 | annotations: 2 | # Core bundle annotations. 3 | operators.operatorframework.io.bundle.mediatype.v1: registry+v1 4 | operators.operatorframework.io.bundle.manifests.v1: manifests/ 5 | operators.operatorframework.io.bundle.metadata.v1: metadata/ 6 | operators.operatorframework.io.bundle.package.v1: runtime-component 7 | operators.operatorframework.io.bundle.channels.v1: v1.4 8 | operators.operatorframework.io.bundle.channel.default.v1: v1.4 9 | operators.operatorframework.io.metrics.builder: operator-sdk-v1.37.0 10 | operators.operatorframework.io.metrics.mediatype.v1: metrics+v1 11 | operators.operatorframework.io.metrics.project_layout: go.kubebuilder.io/v4 12 | 13 | # Annotations for testing. 14 | operators.operatorframework.io.test.mediatype.v1: scorecard+v1 15 | operators.operatorframework.io.test.config.v1: tests/scorecard/ 16 | -------------------------------------------------------------------------------- /config/certmanager/certificate.yaml: -------------------------------------------------------------------------------- 1 | # The following manifests contain a self-signed issuer CR and a certificate CR. 2 | # More document can be found at https://docs.cert-manager.io 3 | # WARNING: Targets CertManager 0.11 check https://docs.cert-manager.io/en/latest/tasks/upgrading/index.html for 4 | # breaking changes 5 | apiVersion: cert-manager.io/v1alpha2 6 | kind: Issuer 7 | metadata: 8 | name: selfsigned-issuer 9 | namespace: system 10 | spec: 11 | selfSigned: {} 12 | --- 13 | apiVersion: cert-manager.io/v1alpha2 14 | kind: Certificate 15 | metadata: 16 | name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml 17 | namespace: system 18 | spec: 19 | # $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize 20 | dnsNames: 21 | - $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc 22 | issuerRef: 23 | kind: Issuer 24 | name: selfsigned-issuer 25 | secretName: webhook-server-cert # this secret will not be prefixed, since it's not managed by kustomize 26 | -------------------------------------------------------------------------------- /config/certmanager/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - certificate.yaml 3 | 4 | configurations: 5 | - kustomizeconfig.yaml 6 | -------------------------------------------------------------------------------- /config/certmanager/kustomizeconfig.yaml: -------------------------------------------------------------------------------- 1 | # This configuration is for teaching kustomize how to update name ref and var substitution 2 | nameReference: 3 | - kind: Issuer 4 | group: cert-manager.io 5 | fieldSpecs: 6 | - kind: Certificate 7 | group: cert-manager.io 8 | path: spec/issuerRef/name 9 | 10 | varReference: 11 | - kind: Certificate 12 | group: cert-manager.io 13 | path: spec/commonName 14 | - kind: Certificate 15 | group: cert-manager.io 16 | path: spec/dnsNames 17 | -------------------------------------------------------------------------------- /config/crd/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # This kustomization.yaml is not intended to be run by itself, 2 | # since it depends on service name and namespace that are out of this kustomize package. 3 | # It should be run by config/default 4 | resources: 5 | - bases/rc.app.stacks_runtimecomponents.yaml 6 | - bases/rc.app.stacks_runtimeoperations.yaml 7 | # +kubebuilder:scaffold:crdkustomizeresource 8 | 9 | patches: 10 | # [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix. 11 | # patches here are for enabling the conversion webhook for each CRD 12 | #- patches/webhook_in_runtimecomponents.yaml 13 | #- patches/webhook_in_runtimeoperations.yaml 14 | # +kubebuilder:scaffold:crdkustomizewebhookpatch 15 | 16 | # [CERTMANAGER] To enable webhook, uncomment all the sections with [CERTMANAGER] prefix. 17 | # patches here are for enabling the CA injection for each CRD 18 | #- patches/cainjection_in_runtimecomponents.yaml 19 | #- patches/cainjection_in_runtimeoperations.yaml 20 | # +kubebuilder:scaffold:crdkustomizecainjectionpatch 21 | 22 | - path: patches/preserveUnknownFields_runtimecomponents.yaml 23 | - path: patches/preserveUnknownFields_runtimeoperations.yaml 24 | # +kubebuilder:scaffold:preserveunknownfieldspatch 25 | 26 | # the following config is for teaching kustomize how to do kustomization for CRDs. 27 | configurations: 28 | - kustomizeconfig.yaml 29 | -------------------------------------------------------------------------------- /config/crd/kustomizeconfig.yaml: -------------------------------------------------------------------------------- 1 | # This file is for teaching kustomize how to substitute name and namespace reference in CRD 2 | nameReference: 3 | - kind: Service 4 | version: v1 5 | fieldSpecs: 6 | - kind: CustomResourceDefinition 7 | group: apiextensions.k8s.io 8 | path: spec/conversion/webhookClientConfig/service/name 9 | 10 | namespace: 11 | - kind: CustomResourceDefinition 12 | group: apiextensions.k8s.io 13 | path: spec/conversion/webhookClientConfig/service/namespace 14 | create: false 15 | 16 | varReference: 17 | - path: metadata/annotations 18 | -------------------------------------------------------------------------------- /config/crd/patches/cainjection_in_runtimecomponents.yaml: -------------------------------------------------------------------------------- 1 | # The following patch adds a directive for certmanager to inject CA into the CRD 2 | # CRD conversion requires k8s 1.13 or later. 3 | apiVersion: apiextensions.k8s.io/v1beta1 4 | kind: CustomResourceDefinition 5 | metadata: 6 | annotations: 7 | cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME) 8 | name: runtimecomponents.rc.app.stacks 9 | -------------------------------------------------------------------------------- /config/crd/patches/cainjection_in_runtimeoperations.yaml: -------------------------------------------------------------------------------- 1 | # The following patch adds a directive for certmanager to inject CA into the CRD 2 | # CRD conversion requires k8s 1.13 or later. 3 | apiVersion: apiextensions.k8s.io/v1beta1 4 | kind: CustomResourceDefinition 5 | metadata: 6 | annotations: 7 | cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME) 8 | name: runtimeoperations.rc.app.stacks 9 | -------------------------------------------------------------------------------- /config/crd/patches/preserveUnknownFields_runtimecomponents.yaml: -------------------------------------------------------------------------------- 1 | 2 | apiVersion: apiextensions.k8s.io/v1 3 | kind: CustomResourceDefinition 4 | metadata: 5 | name: runtimecomponents.rc.app.stacks 6 | spec: 7 | preserveUnknownFields: false -------------------------------------------------------------------------------- /config/crd/patches/preserveUnknownFields_runtimeoperations.yaml: -------------------------------------------------------------------------------- 1 | 2 | apiVersion: apiextensions.k8s.io/v1 3 | kind: CustomResourceDefinition 4 | metadata: 5 | name: runtimeoperations.rc.app.stacks 6 | spec: 7 | preserveUnknownFields: false -------------------------------------------------------------------------------- /config/crd/patches/webhook_in_runtimecomponents.yaml: -------------------------------------------------------------------------------- 1 | # The following patch enables conversion webhook for CRD 2 | # CRD conversion requires k8s 1.13 or later. 3 | apiVersion: apiextensions.k8s.io/v1beta1 4 | kind: CustomResourceDefinition 5 | metadata: 6 | name: runtimecomponents.rc.app.stacks 7 | spec: 8 | conversion: 9 | strategy: Webhook 10 | webhookClientConfig: 11 | # this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank, 12 | # but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager) 13 | caBundle: Cg== 14 | service: 15 | namespace: system 16 | name: webhook-service 17 | path: /convert 18 | -------------------------------------------------------------------------------- /config/crd/patches/webhook_in_runtimeoperations.yaml: -------------------------------------------------------------------------------- 1 | # The following patch enables conversion webhook for CRD 2 | # CRD conversion requires k8s 1.13 or later. 3 | apiVersion: apiextensions.k8s.io/v1beta1 4 | kind: CustomResourceDefinition 5 | metadata: 6 | name: runtimeoperations.rc.app.stacks 7 | spec: 8 | conversion: 9 | strategy: Webhook 10 | webhookClientConfig: 11 | # this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank, 12 | # but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager) 13 | caBundle: Cg== 14 | service: 15 | namespace: system 16 | name: webhook-service 17 | path: /convert 18 | -------------------------------------------------------------------------------- /config/default/manager_auth_proxy_patch.yaml: -------------------------------------------------------------------------------- 1 | # This patch inject a sidecar container which is a HTTP proxy for the 2 | # controller manager, it performs RBAC authorization against the Kubernetes API using SubjectAccessReviews. 3 | apiVersion: apps/v1 4 | kind: Deployment 5 | metadata: 6 | name: controller-manager 7 | namespace: system 8 | spec: 9 | template: 10 | spec: 11 | containers: 12 | - name: kube-rbac-proxy 13 | image: gcr.io/kubebuilder/kube-rbac-proxy:v0.16.0 14 | args: 15 | - "--secure-listen-address=0.0.0.0:8443" 16 | - "--upstream=http://127.0.0.1:8080/" 17 | - "--logtostderr=true" 18 | - "--v=0" 19 | ports: 20 | - containerPort: 8443 21 | protocol: TCP 22 | name: https 23 | - name: manager 24 | args: 25 | - "--metrics-addr=127.0.0.1:8080" 26 | - "--enable-leader-election" 27 | -------------------------------------------------------------------------------- /config/default/manager_webhook_patch.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: controller-manager 5 | namespace: system 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | ports: 12 | - containerPort: 9443 13 | name: webhook-server 14 | protocol: TCP 15 | volumeMounts: 16 | - mountPath: /tmp/k8s-webhook-server/serving-certs 17 | name: cert 18 | readOnly: true 19 | volumes: 20 | - name: cert 21 | secret: 22 | defaultMode: 420 23 | secretName: webhook-server-cert 24 | -------------------------------------------------------------------------------- /config/default/webhookcainjection_patch.yaml: -------------------------------------------------------------------------------- 1 | # This patch add annotation to admission webhook config and 2 | # the variables $(CERTIFICATE_NAMESPACE) and $(CERTIFICATE_NAME) will be substituted by kustomize. 3 | apiVersion: admissionregistration.k8s.io/v1beta1 4 | kind: MutatingWebhookConfiguration 5 | metadata: 6 | name: mutating-webhook-configuration 7 | annotations: 8 | cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME) 9 | --- 10 | apiVersion: admissionregistration.k8s.io/v1beta1 11 | kind: ValidatingWebhookConfiguration 12 | metadata: 13 | name: validating-webhook-configuration 14 | annotations: 15 | cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME) 16 | -------------------------------------------------------------------------------- /config/kubectl/crd/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../crd 5 | 6 | # Adds namespace to all resources. 7 | namePrefix: rco- 8 | 9 | # Labels to add to all resources and selectors. 10 | labels: 11 | - includeSelectors: true 12 | pairs: 13 | app.kubernetes.io/instance: runtime-component-operator 14 | app.kubernetes.io/name: runtime-component-operator 15 | -------------------------------------------------------------------------------- /config/kubectl/operator/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../rbac 5 | - ../../manager 6 | 7 | namePrefix: rco- 8 | 9 | # Labels to add to all resources and selectors. 10 | labels: 11 | - includeSelectors: true 12 | pairs: 13 | app.kubernetes.io/instance: runtime-component-operator 14 | app.kubernetes.io/name: runtime-component-operator 15 | 16 | patches: 17 | - path: patches/delete-namespace.yaml 18 | target: 19 | kind: Namespace 20 | - target: 21 | namespace: system 22 | name: .* 23 | patch: |- 24 | - op: remove 25 | path: /metadata/namespace 26 | - target: 27 | namespace: runtime-component-operator 28 | name: .* 29 | patch: |- 30 | - op: remove 31 | path: /metadata/namespace 32 | - target: 33 | kind: RoleBinding 34 | name: .* 35 | patch: |- 36 | - op: remove 37 | path: /subjects/0/namespace 38 | - target: 39 | kind: Deployment 40 | name: controller-manager 41 | patch: |- 42 | - op: remove 43 | path: /spec/template/spec/containers/0/env/1/valueFrom 44 | - op: add 45 | path: /spec/template/spec/containers/0/env/1/value 46 | value: RUNTIME_COMPONENT_WATCH_NAMESPACE -------------------------------------------------------------------------------- /config/kubectl/operator/patches/delete-namespace.yaml: -------------------------------------------------------------------------------- 1 | $patch: delete 2 | apiVersion: v1 3 | kind: Namespace 4 | metadata: 5 | name: system -------------------------------------------------------------------------------- /config/kubectl/rbac-watch-all/patches/delete-service-account.yaml: -------------------------------------------------------------------------------- 1 | $patch: delete 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: rco-controller-manager 6 | -------------------------------------------------------------------------------- /config/kubectl/rbac-watch-another/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../rbac 5 | 6 | namePrefix: rco-watched- 7 | 8 | # Labels to add to all resources and selectors. 9 | labels: 10 | - includeSelectors: true 11 | pairs: 12 | app.kubernetes.io/instance: runtime-component-operator 13 | app.kubernetes.io/name: runtime-component-operator 14 | 15 | patches: 16 | - path: patches/delete-service-account.yaml 17 | target: 18 | kind: ServiceAccount 19 | - target: 20 | name: .* 21 | patch: |- 22 | - op: replace 23 | path: /metadata/namespace 24 | value: RUNTIME_COMPONENT_WATCH_NAMESPACE 25 | - target: 26 | kind: RoleBinding 27 | name: .* 28 | patch: |- 29 | - op: replace 30 | path: /subjects/0/namespace 31 | value: RUNTIME_COMPONENT_OPERATOR_NAMESPACE 32 | - op: replace 33 | path: /subjects/0/name 34 | value: rco-controller-manager 35 | - target: 36 | kind: RoleBinding 37 | name: rco-watched-leader-election-rolebinding 38 | patch: |- 39 | - op: replace 40 | path: /roleRef/name 41 | value: rco-watched-leader-election-role 42 | - target: 43 | kind: RoleBinding 44 | name: rco-watched-manager-rolebinding 45 | patch: |- 46 | - op: replace 47 | path: /roleRef/name 48 | value: rco-watched-manager-role 49 | -------------------------------------------------------------------------------- /config/kubectl/rbac-watch-another/patches/delete-service-account.yaml: -------------------------------------------------------------------------------- 1 | $patch: delete 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: rco-controller-manager 6 | -------------------------------------------------------------------------------- /config/kustomize/crd/kustomization.yaml: -------------------------------------------------------------------------------- 1 | # Labels to add to all resources and selectors. 2 | labels: 3 | - includeSelectors: true 4 | pairs: 5 | app.kubernetes.io/instance: runtime-component-operator 6 | app.kubernetes.io/name: runtime-component-operator 7 | 8 | resources: 9 | - ../../crd -------------------------------------------------------------------------------- /config/kustomize/operator/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../manager 5 | 6 | # Adds namespace to all resources. 7 | namespace: runtime-component 8 | namePrefix: rco- 9 | 10 | # Labels to add to all resources and selectors. 11 | labels: 12 | - includeSelectors: true 13 | pairs: 14 | app.kubernetes.io/instance: runtime-component-operator 15 | app.kubernetes.io/name: runtime-component-operator 16 | 17 | patches: 18 | - path: patches/delete-namespace.yaml 19 | - path: patches/watch-namespace.yaml 20 | -------------------------------------------------------------------------------- /config/kustomize/operator/patches/delete-namespace.yaml: -------------------------------------------------------------------------------- 1 | $patch: delete 2 | apiVersion: v1 3 | kind: Namespace 4 | metadata: 5 | name: system -------------------------------------------------------------------------------- /config/kustomize/operator/patches/watch-namespace.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: controller-manager 5 | namespace: system 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | valueFrom: 14 | fieldRef: 15 | fieldPath: metadata.namespace -------------------------------------------------------------------------------- /config/kustomize/roles/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | resources: 4 | - ../../rbac 5 | 6 | # Adds namespace to all resources. 7 | namespace: runtime-component 8 | namePrefix: rco- 9 | 10 | # Labels to add to all resources and selectors. 11 | labels: 12 | - includeSelectors: true 13 | pairs: 14 | app.kubernetes.io/instance: runtime-component-operator 15 | app.kubernetes.io/name: runtime-component-operator -------------------------------------------------------------------------------- /config/kustomize/watch-all/patches/delete-service-account.yaml: -------------------------------------------------------------------------------- 1 | $patch: delete 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: wlo-controller-manager 6 | -------------------------------------------------------------------------------- /config/kustomize/watch-another/patches/delete-service-account.yaml: -------------------------------------------------------------------------------- 1 | $patch: delete 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: wlo-controller-manager 6 | -------------------------------------------------------------------------------- /config/manager/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - manager.yaml 3 | apiVersion: kustomize.config.k8s.io/v1beta1 4 | kind: Kustomization 5 | images: 6 | - name: controller 7 | newName: icr.io/appcafe/runtime-component-operator 8 | newTag: daily 9 | -------------------------------------------------------------------------------- /config/manifests/patches/csvAnnotations.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: operators.coreos.com/v1alpha1 2 | kind: ClusterServiceVersion 3 | metadata: 4 | name: runtime-component.v0.0.0 5 | namespace: placeholder 6 | annotations: 7 | containerImage: IMAGE 8 | createdAt: CREATEDAT -------------------------------------------------------------------------------- /config/manifests/serviceBindingPatch.yaml: -------------------------------------------------------------------------------- 1 | - op: add 2 | # the '-' means add a new entry at the end of the list 3 | path: /spec/customresourcedefinitions/owned/0/statusDescriptors/- 4 | value: 5 | description: Service Binding Secret 6 | displayName: Secret 7 | path: binding.name 8 | x-descriptors: 9 | - urn:alm:descriptor:io.kubernetes:Secret 10 | 11 | -------------------------------------------------------------------------------- /config/prometheus/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - monitor.yaml 3 | -------------------------------------------------------------------------------- /config/prometheus/monitor.yaml: -------------------------------------------------------------------------------- 1 | 2 | # Prometheus Monitor Service (Metrics) 3 | apiVersion: monitoring.coreos.com/v1 4 | kind: ServiceMonitor 5 | metadata: 6 | labels: 7 | control-plane: controller-manager 8 | name: controller-manager-metrics-monitor 9 | namespace: system 10 | spec: 11 | endpoints: 12 | - path: /metrics 13 | port: https 14 | selector: 15 | matchLabels: 16 | control-plane: controller-manager 17 | -------------------------------------------------------------------------------- /config/rbac/auth_proxy_client_clusterrole.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1beta1 2 | kind: ClusterRole 3 | metadata: 4 | name: metrics-reader 5 | rules: 6 | - nonResourceURLs: ["/metrics"] 7 | verbs: ["get"] 8 | -------------------------------------------------------------------------------- /config/rbac/auth_proxy_role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRole 3 | metadata: 4 | name: proxy-role 5 | rules: 6 | - apiGroups: ["authentication.k8s.io"] 7 | resources: 8 | - tokenreviews 9 | verbs: ["create"] 10 | - apiGroups: ["authorization.k8s.io"] 11 | resources: 12 | - subjectaccessreviews 13 | verbs: ["create"] 14 | -------------------------------------------------------------------------------- /config/rbac/auth_proxy_role_binding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: proxy-rolebinding 5 | roleRef: 6 | apiGroup: rbac.authorization.k8s.io 7 | kind: ClusterRole 8 | name: proxy-role 9 | subjects: 10 | - kind: ServiceAccount 11 | name: controller-manager 12 | namespace: system 13 | -------------------------------------------------------------------------------- /config/rbac/auth_proxy_service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | labels: 5 | control-plane: controller-manager 6 | name: controller-manager-metrics-service 7 | namespace: system 8 | spec: 9 | ports: 10 | - name: https 11 | port: 8443 12 | protocol: TCP 13 | targetPort: https 14 | selector: 15 | control-plane: controller-manager 16 | -------------------------------------------------------------------------------- /config/rbac/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - service_account.yaml 3 | - role.yaml 4 | - role_binding.yaml 5 | - leader_election_role.yaml 6 | - leader_election_role_binding.yaml 7 | # Comment the following 4 lines if you want to disable 8 | # the auth proxy (https://github.com/brancz/kube-rbac-proxy) 9 | # which protects your /metrics endpoint. 10 | #- auth_proxy_service.yaml 11 | #- auth_proxy_role.yaml 12 | #- auth_proxy_role_binding.yaml 13 | # auth_proxy_client_clusterrole.yaml 14 | -------------------------------------------------------------------------------- /config/rbac/leader_election_role.yaml: -------------------------------------------------------------------------------- 1 | # permissions to do leader election. 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: Role 4 | metadata: 5 | name: leader-election-role 6 | rules: 7 | - apiGroups: 8 | - "" 9 | resources: 10 | - configmaps 11 | verbs: 12 | - get 13 | - list 14 | - watch 15 | - create 16 | - update 17 | - patch 18 | - delete 19 | - apiGroups: 20 | - "" 21 | resources: 22 | - configmaps/status 23 | verbs: 24 | - get 25 | - update 26 | - patch 27 | - apiGroups: 28 | - "" 29 | resources: 30 | - events 31 | verbs: 32 | - create 33 | - patch 34 | - apiGroups: 35 | - coordination.k8s.io 36 | resources: 37 | - leases 38 | verbs: 39 | - get 40 | - list 41 | - watch 42 | - create 43 | - update 44 | - patch 45 | - delete -------------------------------------------------------------------------------- /config/rbac/leader_election_role_binding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: leader-election-rolebinding 5 | roleRef: 6 | apiGroup: rbac.authorization.k8s.io 7 | kind: Role 8 | name: leader-election-role 9 | subjects: 10 | - kind: ServiceAccount 11 | name: controller-manager 12 | namespace: system 13 | -------------------------------------------------------------------------------- /config/rbac/role_binding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: manager-rolebinding 5 | roleRef: 6 | apiGroup: rbac.authorization.k8s.io 7 | kind: Role 8 | name: manager-role 9 | subjects: 10 | - kind: ServiceAccount 11 | name: controller-manager 12 | namespace: system 13 | -------------------------------------------------------------------------------- /config/rbac/runtimecomponent_editor_role.yaml: -------------------------------------------------------------------------------- 1 | # permissions for end users to edit runtimecomponents. 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: runtimecomponent-editor-role 6 | rules: 7 | - apiGroups: 8 | - rc.app.stacks 9 | resources: 10 | - runtimecomponents 11 | verbs: 12 | - create 13 | - delete 14 | - get 15 | - list 16 | - patch 17 | - update 18 | - watch 19 | - apiGroups: 20 | - rc.app.stacks 21 | resources: 22 | - runtimecomponents/status 23 | verbs: 24 | - get 25 | -------------------------------------------------------------------------------- /config/rbac/runtimecomponent_viewer_role.yaml: -------------------------------------------------------------------------------- 1 | # permissions for end users to view runtimecomponents. 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: runtimecomponent-viewer-role 6 | rules: 7 | - apiGroups: 8 | - rc.app.stacks 9 | resources: 10 | - runtimecomponents 11 | verbs: 12 | - get 13 | - list 14 | - watch 15 | - apiGroups: 16 | - rc.app.stacks 17 | resources: 18 | - runtimecomponents/status 19 | verbs: 20 | - get 21 | -------------------------------------------------------------------------------- /config/rbac/runtimeoperation_editor_role.yaml: -------------------------------------------------------------------------------- 1 | # permissions for end users to edit runtimeoperations. 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: runtimeoperation-editor-role 6 | rules: 7 | - apiGroups: 8 | - rc.app.stacks 9 | resources: 10 | - runtimeoperations 11 | verbs: 12 | - create 13 | - delete 14 | - get 15 | - list 16 | - patch 17 | - update 18 | - watch 19 | - apiGroups: 20 | - rc.app.stacks 21 | resources: 22 | - runtimeoperations/status 23 | verbs: 24 | - get 25 | -------------------------------------------------------------------------------- /config/rbac/runtimeoperation_viewer_role.yaml: -------------------------------------------------------------------------------- 1 | # permissions for end users to view runtimeoperations. 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: runtimeoperation-viewer-role 6 | rules: 7 | - apiGroups: 8 | - rc.app.stacks 9 | resources: 10 | - runtimeoperations 11 | verbs: 12 | - get 13 | - list 14 | - watch 15 | - apiGroups: 16 | - rc.app.stacks 17 | resources: 18 | - runtimeoperations/status 19 | verbs: 20 | - get 21 | -------------------------------------------------------------------------------- /config/rbac/service_account.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: controller-manager 5 | namespace: system 6 | -------------------------------------------------------------------------------- /config/samples/kustomization.yaml: -------------------------------------------------------------------------------- 1 | ## Append samples you want in your CSV to this file as resources ## 2 | resources: 3 | - rc.app.stacks_v1_runtimecomponent.yaml 4 | - rc.app.stacks_v1_runtimeoperation.yaml 5 | - rc.app.stacks_v1beta2_runtimecomponent.yaml 6 | - rc.app.stacks_v1beta2_runtimeoperation.yaml 7 | # +kubebuilder:scaffold:manifestskustomizesamples 8 | -------------------------------------------------------------------------------- /config/samples/rc.app.stacks_v1_runtimecomponent.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rc.app.stacks/v1 2 | kind: RuntimeComponent 3 | metadata: 4 | name: runtimecomponent-sample 5 | spec: 6 | applicationImage: icr.io/appcafe/open-liberty/samples/getting-started@sha256:f55b852d939f7ac3234c08e23c0d1ab183b68079d5b93b87b0945c937043f523 7 | expose: true 8 | manageTLS: true 9 | replicas: 1 10 | service: 11 | port: 9443 12 | serviceAccount: 13 | mountToken: true 14 | -------------------------------------------------------------------------------- /config/samples/rc.app.stacks_v1_runtimeoperation.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rc.app.stacks/v1 2 | kind: RuntimeOperation 3 | metadata: 4 | name: runtimeoperation-sample 5 | spec: 6 | podName: Specify_Pod_Name_Here 7 | containerName: app 8 | command: 9 | - ./your_script.sh -------------------------------------------------------------------------------- /config/samples/rc.app.stacks_v1beta2_runtimecomponent.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rc.app.stacks/v1beta2 2 | kind: RuntimeComponent 3 | metadata: 4 | name: runtimecomponent-sample 5 | spec: 6 | # Add fields here 7 | applicationImage: icr.io/appcafe/open-liberty/samples/getting-started@sha256:f55b852d939f7ac3234c08e23c0d1ab183b68079d5b93b87b0945c937043f523 8 | expose: true 9 | replicas: 1 10 | service: 11 | port: 9080 12 | -------------------------------------------------------------------------------- /config/samples/rc.app.stacks_v1beta2_runtimeoperation.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rc.app.stacks/v1beta2 2 | kind: RuntimeOperation 3 | metadata: 4 | name: runtimeoperation-sample 5 | spec: 6 | podName: Specify_Pod_Name_Here 7 | containerName: app 8 | command: 9 | - ./your_script.sh -------------------------------------------------------------------------------- /config/scorecard/bases/config.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: scorecard.operatorframework.io/v1alpha3 2 | kind: Configuration 3 | metadata: 4 | name: config 5 | stages: 6 | - parallel: true 7 | tests: [] 8 | -------------------------------------------------------------------------------- /config/scorecard/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - bases/config.yaml 3 | patches: 4 | - path: patches/basic.config.yaml 5 | target: 6 | group: scorecard.operatorframework.io 7 | version: v1alpha3 8 | kind: Configuration 9 | name: config 10 | - path: patches/olm.config.yaml 11 | target: 12 | group: scorecard.operatorframework.io 13 | version: v1alpha3 14 | kind: Configuration 15 | name: config 16 | -------------------------------------------------------------------------------- /config/scorecard/patches/basic.config.yaml: -------------------------------------------------------------------------------- 1 | - op: add 2 | path: /stages/0/tests/- 3 | value: 4 | entrypoint: 5 | - scorecard-test 6 | - basic-check-spec 7 | image: quay.io/operator-framework/scorecard-test:v1.1.0 8 | labels: 9 | suite: basic 10 | test: basic-check-spec-test 11 | -------------------------------------------------------------------------------- /config/webhook/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - manifests.yaml 3 | - service.yaml 4 | 5 | configurations: 6 | - kustomizeconfig.yaml 7 | -------------------------------------------------------------------------------- /config/webhook/kustomizeconfig.yaml: -------------------------------------------------------------------------------- 1 | # the following config is for teaching kustomize where to look at when substituting vars. 2 | # It requires kustomize v2.1.0 or newer to work properly. 3 | nameReference: 4 | - kind: Service 5 | version: v1 6 | fieldSpecs: 7 | - kind: MutatingWebhookConfiguration 8 | group: admissionregistration.k8s.io 9 | path: webhooks/clientConfig/service/name 10 | - kind: ValidatingWebhookConfiguration 11 | group: admissionregistration.k8s.io 12 | path: webhooks/clientConfig/service/name 13 | 14 | namespace: 15 | - kind: MutatingWebhookConfiguration 16 | group: admissionregistration.k8s.io 17 | path: webhooks/clientConfig/service/namespace 18 | create: true 19 | - kind: ValidatingWebhookConfiguration 20 | group: admissionregistration.k8s.io 21 | path: webhooks/clientConfig/service/namespace 22 | create: true 23 | 24 | varReference: 25 | - path: metadata/annotations 26 | -------------------------------------------------------------------------------- /config/webhook/service.yaml: -------------------------------------------------------------------------------- 1 | 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: webhook-service 6 | namespace: system 7 | spec: 8 | ports: 9 | - port: 443 10 | protocol: TCP 11 | targetPort: 9443 12 | selector: 13 | control-plane: controller-manager 14 | -------------------------------------------------------------------------------- /deploy/olm-catalog/runtime-component-operator-certified/runtime-component-operator.package.yaml: -------------------------------------------------------------------------------- 1 | channels: 2 | - currentCSV: runtime-component-operator.v0.7.0 3 | name: beta 4 | defaultChannel: beta 5 | packageName: runtime-component-operator-certified 6 | -------------------------------------------------------------------------------- /deploy/olm-catalog/runtime-component-operator-community/runtime-component-operator.package.yaml: -------------------------------------------------------------------------------- 1 | channels: 2 | - currentCSV: runtime-component-operator.v0.7.0 3 | name: beta 4 | defaultChannel: beta 5 | packageName: runtime-component-operator 6 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: default 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | 10 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../overlays/watch-all-namespaces 8 | 9 | patchesStrategicMerge: 10 | - rco-ns.yaml 11 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/examples/watch-all-namespaces/rco-ns.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: rco-leader-election-cluster-rolebinding 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns 10 | --- 11 | apiVersion: rbac.authorization.k8s.io/v1 12 | kind: ClusterRoleBinding 13 | metadata: 14 | name: rco-manager-cluster-rolebinding 15 | subjects: 16 | - kind: ServiceAccount 17 | name: rco-controller-manager 18 | namespace: rco-ns 19 | --- 20 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | 5 | bases: 6 | - ../../overlays/watch-another-namespace 7 | 8 | patchesStrategicMerge: 9 | - rco-deployment.yaml 10 | - rco-roles.yaml 11 | - rco-sa.yaml 12 | - watched-roles.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/examples/watch-another-namespace/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns2 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/examples/watch-another-namespace/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns2 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: rco-ns2 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: rco-ns2 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | namespace: rco-ns2 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-manager-rolebinding 27 | namespace: rco-ns2 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns2 32 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/examples/watch-another-namespace/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns2 6 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/examples/watch-another-namespace/watched-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns2 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: RoleBinding 9 | metadata: 10 | name: rco-watched-rolebinding 11 | namespace: rco-watched-ns2 12 | subjects: 13 | - kind: ServiceAccount 14 | name: rco-controller-manager 15 | namespace: rco-ns2 16 | --- 17 | apiVersion: rbac.authorization.k8s.io/v1 18 | kind: Role 19 | metadata: 20 | name: rco-leader-election-watched-role 21 | namespace: rco-watched-ns2 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-leader-election-watched-rolebinding 27 | namespace: rco-watched-ns2 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns2 32 | --- 33 | 34 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../base 8 | 9 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: default 5 | 6 | bases: 7 | - ../../base 8 | 9 | resources: 10 | - cluster-roles.yaml 11 | 12 | patchesStrategicMerge: 13 | - rco-all-namespaces.yaml 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | spec: 6 | template: 7 | spec: 8 | containers: 9 | - name: manager 10 | env: 11 | - name: WATCH_NAMESPACE 12 | value: "" 13 | valueFrom: 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | bases: 5 | - ../../base 6 | 7 | patchesStrategicMerge: 8 | - rco-deployment.yaml 9 | - rco-roles.yaml 10 | - rco-sa.yaml 11 | 12 | resources: 13 | - watched-roles.yaml 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/overlays/watch-another-namespace/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/overlays/watch-another-namespace/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: rco-ns 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: rco-ns 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | namespace: rco-ns 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-manager-rolebinding 27 | namespace: rco-ns 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns 32 | -------------------------------------------------------------------------------- /deploy/releases/0.8.0/kustomize/overlays/watch-another-namespace/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: default 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | 10 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../overlays/watch-all-namespaces 8 | 9 | patchesStrategicMerge: 10 | - rco-ns.yaml 11 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/examples/watch-all-namespaces/rco-ns.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: rco-leader-election-cluster-rolebinding 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns 10 | --- 11 | apiVersion: rbac.authorization.k8s.io/v1 12 | kind: ClusterRoleBinding 13 | metadata: 14 | name: rco-manager-cluster-rolebinding 15 | subjects: 16 | - kind: ServiceAccount 17 | name: rco-controller-manager 18 | namespace: rco-ns 19 | --- 20 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | 5 | bases: 6 | - ../../overlays/watch-another-namespace 7 | 8 | patchesStrategicMerge: 9 | - rco-deployment.yaml 10 | - rco-roles.yaml 11 | - rco-sa.yaml 12 | - watched-roles.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/examples/watch-another-namespace/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns2 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/examples/watch-another-namespace/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns2 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: rco-ns2 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: rco-ns2 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | namespace: rco-ns2 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-manager-rolebinding 27 | namespace: rco-ns2 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns2 32 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/examples/watch-another-namespace/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns2 6 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/examples/watch-another-namespace/watched-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns2 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: RoleBinding 9 | metadata: 10 | name: rco-watched-rolebinding 11 | namespace: rco-watched-ns2 12 | subjects: 13 | - kind: ServiceAccount 14 | name: rco-controller-manager 15 | namespace: rco-ns2 16 | --- 17 | apiVersion: rbac.authorization.k8s.io/v1 18 | kind: Role 19 | metadata: 20 | name: rco-leader-election-watched-role 21 | namespace: rco-watched-ns2 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-leader-election-watched-rolebinding 27 | namespace: rco-watched-ns2 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns2 32 | --- 33 | 34 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../base 8 | 9 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: default 5 | 6 | bases: 7 | - ../../base 8 | 9 | resources: 10 | - cluster-roles.yaml 11 | 12 | patchesStrategicMerge: 13 | - rco-all-namespaces.yaml 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | spec: 6 | template: 7 | spec: 8 | containers: 9 | - name: manager 10 | env: 11 | - name: WATCH_NAMESPACE 12 | value: "" 13 | valueFrom: 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | bases: 5 | - ../../base 6 | 7 | patchesStrategicMerge: 8 | - rco-deployment.yaml 9 | - rco-roles.yaml 10 | - rco-sa.yaml 11 | 12 | resources: 13 | - watched-roles.yaml 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/overlays/watch-another-namespace/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/overlays/watch-another-namespace/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: rco-ns 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: rco-ns 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | namespace: rco-ns 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-manager-rolebinding 27 | namespace: rco-ns 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns 32 | -------------------------------------------------------------------------------- /deploy/releases/0.8.1/kustomize/overlays/watch-another-namespace/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: default 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | 10 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../overlays/watch-all-namespaces 8 | 9 | patchesStrategicMerge: 10 | - rco-ns.yaml 11 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/examples/watch-all-namespaces/rco-ns.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: rco-leader-election-cluster-rolebinding 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns 10 | --- 11 | apiVersion: rbac.authorization.k8s.io/v1 12 | kind: ClusterRoleBinding 13 | metadata: 14 | name: rco-manager-cluster-rolebinding 15 | subjects: 16 | - kind: ServiceAccount 17 | name: rco-controller-manager 18 | namespace: rco-ns 19 | --- 20 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | 5 | bases: 6 | - ../../overlays/watch-another-namespace 7 | 8 | patchesStrategicMerge: 9 | - rco-deployment.yaml 10 | - rco-roles.yaml 11 | - rco-sa.yaml 12 | - watched-roles.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/examples/watch-another-namespace/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns2 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/examples/watch-another-namespace/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns2 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: rco-ns2 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: rco-ns2 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | namespace: rco-ns2 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-manager-rolebinding 27 | namespace: rco-ns2 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns2 32 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/examples/watch-another-namespace/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns2 6 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/examples/watch-another-namespace/watched-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns2 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: RoleBinding 9 | metadata: 10 | name: rco-watched-rolebinding 11 | namespace: rco-watched-ns2 12 | subjects: 13 | - kind: ServiceAccount 14 | name: rco-controller-manager 15 | namespace: rco-ns2 16 | --- 17 | apiVersion: rbac.authorization.k8s.io/v1 18 | kind: Role 19 | metadata: 20 | name: rco-leader-election-watched-role 21 | namespace: rco-watched-ns2 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-leader-election-watched-rolebinding 27 | namespace: rco-watched-ns2 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns2 32 | --- 33 | 34 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../base 8 | 9 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: default 5 | 6 | bases: 7 | - ../../base 8 | 9 | resources: 10 | - cluster-roles.yaml 11 | 12 | patchesStrategicMerge: 13 | - rco-all-namespaces.yaml 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | spec: 6 | template: 7 | spec: 8 | containers: 9 | - name: manager 10 | env: 11 | - name: WATCH_NAMESPACE 12 | value: "" 13 | valueFrom: 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | bases: 5 | - ../../base 6 | 7 | patchesStrategicMerge: 8 | - rco-deployment.yaml 9 | - rco-roles.yaml 10 | - rco-sa.yaml 11 | 12 | resources: 13 | - watched-roles.yaml 14 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/overlays/watch-another-namespace/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/overlays/watch-another-namespace/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: rco-ns 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: rco-ns 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | namespace: rco-ns 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-manager-rolebinding 27 | namespace: rco-ns 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns 32 | -------------------------------------------------------------------------------- /deploy/releases/0.8.2/kustomize/overlays/watch-another-namespace/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | 11 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../overlays/watch-all-namespaces 8 | 9 | patchesStrategicMerge: 10 | - rco-ns.yaml 11 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-all-namespaces/rco-ns.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: rco-leader-election-cluster-rolebinding 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns 10 | --- 11 | apiVersion: rbac.authorization.k8s.io/v1 12 | kind: ClusterRoleBinding 13 | metadata: 14 | name: rco-manager-cluster-rolebinding 15 | subjects: 16 | - kind: ServiceAccount 17 | name: rco-controller-manager 18 | namespace: rco-ns 19 | --- 20 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | bases: 6 | - ../../../overlays/watch-another-namespace/rco-ns 7 | 8 | patchesStrategicMerge: 9 | - rco-deployment.yaml 10 | - rco-roles.yaml 11 | - rco-sa.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: rco-ns 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: rco-ns 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | --- 22 | apiVersion: rbac.authorization.k8s.io/v1 23 | kind: RoleBinding 24 | metadata: 25 | name: rco-manager-rolebinding 26 | namespace: rco-ns 27 | subjects: 28 | - kind: ServiceAccount 29 | name: rco-controller-manager 30 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | bases: 6 | - ../../../overlays/watch-another-namespace/rco-watched-ns 7 | 8 | patchesStrategicMerge: 9 | - watched-roles.yaml -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/watched-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: RoleBinding 9 | metadata: 10 | name: rco-watched-rolebinding 11 | namespace: rco-watched-ns 12 | subjects: 13 | - kind: ServiceAccount 14 | name: rco-controller-manager 15 | namespace: rco-ns2 16 | --- 17 | apiVersion: rbac.authorization.k8s.io/v1 18 | kind: Role 19 | metadata: 20 | name: rco-leader-election-watched-role 21 | namespace: rco-watched-ns 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-leader-election-watched-rolebinding 27 | namespace: rco-watched-ns 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns2 32 | --- 33 | 34 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../base 8 | 9 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | bases: 7 | - ../../base 8 | 9 | resources: 10 | - cluster-roles.yaml 11 | 12 | patchesStrategicMerge: 13 | - rco-all-namespaces.yaml 14 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | bases: 6 | - ../../../base 7 | 8 | patchesStrategicMerge: 9 | - rco-deployment.yaml 10 | - rco-roles.yaml 11 | - rco-sa.yaml -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: runtime-component 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: runtime-component 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | namespace: runtime-component 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-manager-rolebinding 27 | namespace: runtime-component 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: runtime-component 32 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.2.0/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | 11 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../overlays/watch-all-namespaces 8 | 9 | patchesStrategicMerge: 10 | - rco-ns.yaml 11 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-all-namespaces/rco-ns.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: rco-leader-election-cluster-rolebinding 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns 10 | --- 11 | apiVersion: rbac.authorization.k8s.io/v1 12 | kind: ClusterRoleBinding 13 | metadata: 14 | name: rco-manager-cluster-rolebinding 15 | subjects: 16 | - kind: ServiceAccount 17 | name: rco-controller-manager 18 | namespace: rco-ns 19 | --- 20 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | bases: 6 | - ../../../overlays/watch-another-namespace/rco-ns 7 | 8 | patchesStrategicMerge: 9 | - rco-deployment.yaml 10 | - rco-roles.yaml 11 | - rco-sa.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: rco-ns 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: rco-ns 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | --- 22 | apiVersion: rbac.authorization.k8s.io/v1 23 | kind: RoleBinding 24 | metadata: 25 | name: rco-manager-rolebinding 26 | namespace: rco-ns 27 | subjects: 28 | - kind: ServiceAccount 29 | name: rco-controller-manager 30 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | bases: 6 | - ../../../overlays/watch-another-namespace/rco-watched-ns 7 | 8 | patchesStrategicMerge: 9 | - watched-roles.yaml -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/watched-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: RoleBinding 9 | metadata: 10 | name: rco-watched-rolebinding 11 | namespace: rco-watched-ns 12 | subjects: 13 | - kind: ServiceAccount 14 | name: rco-controller-manager 15 | namespace: rco-ns2 16 | --- 17 | apiVersion: rbac.authorization.k8s.io/v1 18 | kind: Role 19 | metadata: 20 | name: rco-leader-election-watched-role 21 | namespace: rco-watched-ns 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-leader-election-watched-rolebinding 27 | namespace: rco-watched-ns 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns2 32 | --- 33 | 34 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../base 8 | 9 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | bases: 7 | - ../../base 8 | 9 | resources: 10 | - cluster-roles.yaml 11 | 12 | patchesStrategicMerge: 13 | - rco-all-namespaces.yaml 14 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | bases: 6 | - ../../../base 7 | 8 | patchesStrategicMerge: 9 | - rco-deployment.yaml 10 | - rco-roles.yaml 11 | - rco-sa.yaml -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: runtime-component 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: runtime-component 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | namespace: runtime-component 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-manager-rolebinding 27 | namespace: runtime-component 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: runtime-component 32 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.2.1/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | 11 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../overlays/watch-all-namespaces 8 | 9 | patchesStrategicMerge: 10 | - rco-ns.yaml 11 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-all-namespaces/rco-ns.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: rco-leader-election-cluster-rolebinding 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns 10 | --- 11 | apiVersion: rbac.authorization.k8s.io/v1 12 | kind: ClusterRoleBinding 13 | metadata: 14 | name: rco-manager-cluster-rolebinding 15 | subjects: 16 | - kind: ServiceAccount 17 | name: rco-controller-manager 18 | namespace: rco-ns 19 | --- 20 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | bases: 6 | - ../../../overlays/watch-another-namespace/rco-ns 7 | 8 | patchesStrategicMerge: 9 | - rco-deployment.yaml 10 | - rco-roles.yaml 11 | - rco-sa.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: rco-ns 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: rco-ns 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | --- 22 | apiVersion: rbac.authorization.k8s.io/v1 23 | kind: RoleBinding 24 | metadata: 25 | name: rco-manager-rolebinding 26 | namespace: rco-ns 27 | subjects: 28 | - kind: ServiceAccount 29 | name: rco-controller-manager 30 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | bases: 6 | - ../../../overlays/watch-another-namespace/rco-watched-ns 7 | 8 | patchesStrategicMerge: 9 | - watched-roles.yaml -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/watched-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: RoleBinding 9 | metadata: 10 | name: rco-watched-rolebinding 11 | namespace: rco-watched-ns 12 | subjects: 13 | - kind: ServiceAccount 14 | name: rco-controller-manager 15 | namespace: rco-ns2 16 | --- 17 | apiVersion: rbac.authorization.k8s.io/v1 18 | kind: Role 19 | metadata: 20 | name: rco-leader-election-watched-role 21 | namespace: rco-watched-ns 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-leader-election-watched-rolebinding 27 | namespace: rco-watched-ns 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: rco-ns2 32 | --- 33 | 34 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | bases: 7 | - ../../base 8 | 9 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | bases: 7 | - ../../base 8 | 9 | resources: 10 | - cluster-roles.yaml 11 | 12 | patchesStrategicMerge: 13 | - rco-all-namespaces.yaml 14 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | bases: 6 | - ../../../base 7 | 8 | patchesStrategicMerge: 9 | - rco-deployment.yaml 10 | - rco-roles.yaml 11 | - rco-sa.yaml -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-roles.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | --- 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: Role 9 | metadata: 10 | name: rco-manager-role 11 | namespace: runtime-component 12 | --- 13 | apiVersion: rbac.authorization.k8s.io/v1 14 | kind: RoleBinding 15 | metadata: 16 | name: rco-leader-election-rolebinding 17 | namespace: runtime-component 18 | subjects: 19 | - kind: ServiceAccount 20 | name: rco-controller-manager 21 | namespace: runtime-component 22 | --- 23 | apiVersion: rbac.authorization.k8s.io/v1 24 | kind: RoleBinding 25 | metadata: 26 | name: rco-manager-rolebinding 27 | namespace: runtime-component 28 | subjects: 29 | - kind: ServiceAccount 30 | name: rco-controller-manager 31 | namespace: runtime-component 32 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.2.2/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | 11 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | 7 | resources: 8 | - ../../overlays/watch-all-namespaces 9 | patches: 10 | - path: rco-leader-election-cluster-rolebinding.yaml 11 | - path: rco-manager-cluster-rolebinding.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-all-namespaces/rco-leader-election-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-leader-election-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-all-namespaces/rco-manager-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-manager-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-ns 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-watched-ns 8 | patches: 9 | - path: rco-watched-role.yaml 10 | - path: rco-watched-rolebinding.yaml 11 | - path: rco-leader-election-watched-role.yaml 12 | - path: rco-leader-election-watched-rolebinding.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | resources: 7 | - ../../base 8 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | 7 | resources: 8 | - cluster-roles.yaml 9 | - ../../base 10 | 11 | patches: 12 | - path: rco-all-namespaces.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | 6 | resources: 7 | - ../../../base 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.0/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | 11 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | 7 | resources: 8 | - ../../overlays/watch-all-namespaces 9 | patches: 10 | - path: rco-leader-election-cluster-rolebinding.yaml 11 | - path: rco-manager-cluster-rolebinding.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-all-namespaces/rco-leader-election-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-leader-election-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-all-namespaces/rco-manager-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-manager-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-ns 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-watched-ns 8 | patches: 9 | - path: rco-watched-role.yaml 10 | - path: rco-watched-rolebinding.yaml 11 | - path: rco-leader-election-watched-role.yaml 12 | - path: rco-leader-election-watched-rolebinding.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | resources: 7 | - ../../base 8 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | 7 | resources: 8 | - cluster-roles.yaml 9 | - ../../base 10 | 11 | patches: 12 | - path: rco-all-namespaces.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | 6 | resources: 7 | - ../../../base 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.1/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | 11 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | 7 | resources: 8 | - ../../overlays/watch-all-namespaces 9 | patches: 10 | - path: rco-leader-election-cluster-rolebinding.yaml 11 | - path: rco-manager-cluster-rolebinding.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-all-namespaces/rco-leader-election-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-leader-election-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-all-namespaces/rco-manager-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-manager-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-ns 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-watched-ns 8 | patches: 9 | - path: rco-watched-role.yaml 10 | - path: rco-watched-rolebinding.yaml 11 | - path: rco-leader-election-watched-role.yaml 12 | - path: rco-leader-election-watched-rolebinding.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | resources: 7 | - ../../base 8 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | 7 | resources: 8 | - cluster-roles.yaml 9 | - ../../base 10 | 11 | patches: 12 | - path: rco-all-namespaces.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | 6 | resources: 7 | - ../../../base 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.2/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | 11 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | 7 | resources: 8 | - ../../overlays/watch-all-namespaces 9 | patches: 10 | - path: rco-leader-election-cluster-rolebinding.yaml 11 | - path: rco-manager-cluster-rolebinding.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-all-namespaces/rco-leader-election-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-leader-election-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-all-namespaces/rco-manager-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-manager-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-ns 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-watched-ns 8 | patches: 9 | - path: rco-watched-role.yaml 10 | - path: rco-watched-rolebinding.yaml 11 | - path: rco-leader-election-watched-role.yaml 12 | - path: rco-leader-election-watched-rolebinding.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | resources: 7 | - ../../base 8 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | 7 | resources: 8 | - cluster-roles.yaml 9 | - ../../base 10 | 11 | patches: 12 | - path: rco-all-namespaces.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | 6 | resources: 7 | - ../../../base 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.3.3/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | 11 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | 7 | resources: 8 | - ../../overlays/watch-all-namespaces 9 | patches: 10 | - path: rco-leader-election-cluster-rolebinding.yaml 11 | - path: rco-manager-cluster-rolebinding.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-all-namespaces/rco-leader-election-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-leader-election-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-all-namespaces/rco-manager-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-manager-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-ns 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-watched-ns 8 | patches: 9 | - path: rco-watched-role.yaml 10 | - path: rco-watched-rolebinding.yaml 11 | - path: rco-leader-election-watched-role.yaml 12 | - path: rco-leader-election-watched-rolebinding.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | resources: 7 | - ../../base 8 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | 7 | resources: 8 | - cluster-roles.yaml 9 | - ../../base 10 | 11 | patches: 12 | - path: rco-all-namespaces.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | 6 | resources: 7 | - ../../../base 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.0/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | 7 | resources: 8 | - ../../overlays/watch-all-namespaces 9 | patches: 10 | - path: rco-leader-election-cluster-rolebinding.yaml 11 | - path: rco-manager-cluster-rolebinding.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-all-namespaces/rco-leader-election-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-leader-election-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-all-namespaces/rco-manager-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-manager-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-ns 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-watched-ns 8 | patches: 9 | - path: rco-watched-role.yaml 10 | - path: rco-watched-rolebinding.yaml 11 | - path: rco-leader-election-watched-role.yaml 12 | - path: rco-leader-election-watched-rolebinding.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | resources: 7 | - ../../base 8 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | 7 | resources: 8 | - cluster-roles.yaml 9 | - ../../base 10 | 11 | patches: 12 | - path: rco-all-namespaces.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | 6 | resources: 7 | - ../../../base 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.1/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | 7 | resources: 8 | - ../../overlays/watch-all-namespaces 9 | patches: 10 | - path: rco-leader-election-cluster-rolebinding.yaml 11 | - path: rco-manager-cluster-rolebinding.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-all-namespaces/rco-leader-election-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-leader-election-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-all-namespaces/rco-manager-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-manager-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-ns 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-watched-ns 8 | patches: 9 | - path: rco-watched-role.yaml 10 | - path: rco-watched-rolebinding.yaml 11 | - path: rco-leader-election-watched-role.yaml 12 | - path: rco-leader-election-watched-rolebinding.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | resources: 7 | - ../../base 8 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | 7 | resources: 8 | - cluster-roles.yaml 9 | - ../../base 10 | 11 | patches: 12 | - path: rco-all-namespaces.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | 6 | resources: 7 | - ../../../base 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.2/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | 7 | resources: 8 | - ../../overlays/watch-all-namespaces 9 | patches: 10 | - path: rco-leader-election-cluster-rolebinding.yaml 11 | - path: rco-manager-cluster-rolebinding.yaml 12 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-all-namespaces/rco-leader-election-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-leader-election-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-all-namespaces/rco-manager-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-manager-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-ns 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-watched-ns 8 | patches: 9 | - path: rco-watched-role.yaml 10 | - path: rco-watched-rolebinding.yaml 11 | - path: rco-leader-election-watched-role.yaml 12 | - path: rco-leader-election-watched-rolebinding.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-another-namespace/rco-watched-ns2/rco-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | resources: 7 | - ../../base 8 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | 7 | resources: 8 | - cluster-roles.yaml 9 | - ../../base 10 | 11 | patches: 12 | - path: rco-all-namespaces.yaml 13 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | 6 | resources: 7 | - ../../../base 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /deploy/releases/1.4.3/kustomize/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /doc/images/operator_overview.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/application-stacks/runtime-component-operator/fca0e8b82b187daa85571d6add8feec8e69b9dfd/doc/images/operator_overview.png -------------------------------------------------------------------------------- /doc/readme.adoc: -------------------------------------------------------------------------------- 1 | = Documentation 2 | 3 | * See the user guides below for information on how to install and use the Runtime Component Operator: 4 | ** For operator versions **1.2.0 and above**, refer to this link:++user-guide-v1.adoc++[user guide]. 5 | ** For operator versions **0.8.x**, refer to this link:++user-guide-v1beta2.adoc++[user guide]. Note that these versions **will not be supported in the near future**. You should plan to migrate to 1.2.0 or above. 6 | ** For operator versions **0.7.1 and below**, refer to this link:++user-guide-v1beta2.adoc++[user guide]. Note that these versions are **no longer supported**. You should migrate to 1.2.0 or above. 7 | * See the link:++troubleshooting.adoc++[troubleshooting guide] for information on how to investigate and resolve deployment problems. 8 | -------------------------------------------------------------------------------- /examples/affinity/01-coffeeshop-backend.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: app.stacks/v1beta1 2 | kind: RuntimeComponent 3 | metadata: 4 | name: coffeeshop-backend 5 | spec: 6 | applicationImage: 'registry.k8s.io/pause:3.2' 7 | replicas: 2 8 | affinity: 9 | nodeAffinityLabels: 10 | disktype: ssd 11 | podAntiAffinity: 12 | requiredDuringSchedulingIgnoredDuringExecution: 13 | - labelSelector: 14 | matchExpressions: 15 | - key: app.kubernetes.io/instance 16 | operator: In 17 | values: 18 | - coffeeshop-backend 19 | topologyKey: kubernetes.io/hostname -------------------------------------------------------------------------------- /examples/affinity/02-coffeeshop-ui.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: app.stacks/v1beta1 2 | kind: RuntimeComponent 3 | metadata: 4 | name: coffeeshop-frontend 5 | spec: 6 | applicationImage: 'registry.k8s.io/pause:3.2' 7 | replicas: 2 8 | affinity: 9 | nodeAffinityLabels: 10 | disktype: ssd 11 | podAntiAffinity: 12 | requiredDuringSchedulingIgnoredDuringExecution: 13 | - labelSelector: 14 | matchExpressions: 15 | - key: app.kubernetes.io/instance 16 | operator: In 17 | values: 18 | - coffeeshop-frontend 19 | topologyKey: kubernetes.io/hostname 20 | podAffinity: 21 | requiredDuringSchedulingIgnoredDuringExecution: 22 | - labelSelector: 23 | matchExpressions: 24 | - key: app.kubernetes.io/instance 25 | operator: In 26 | values: 27 | - coffeeshop-backend 28 | topologyKey: kubernetes.io/hostname -------------------------------------------------------------------------------- /hack/boilerplate.go.txt: -------------------------------------------------------------------------------- 1 | /* 2 | 3 | 4 | Licensed under the Apache License, Version 2.0 (the "License"); 5 | you may not use this file except in compliance with the License. 6 | You may obtain a copy of the License at 7 | 8 | http://www.apache.org/licenses/LICENSE-2.0 9 | 10 | Unless required by applicable law or agreed to in writing, software 11 | distributed under the License is distributed on an "AS IS" BASIS, 12 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 | See the License for the specific language governing permissions and 14 | limitations under the License. 15 | */ -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/base/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | resources: 7 | - runtime-component-crd.yaml 8 | - runtime-component-operator.yaml 9 | - runtime-component-roles.yaml 10 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | 7 | resources: 8 | - ../../overlays/watch-all-namespaces 9 | patches: 10 | - path: rco-leader-election-cluster-rolebinding.yaml 11 | - path: rco-manager-cluster-rolebinding.yaml 12 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-all-namespaces/rco-leader-election-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-leader-election-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-all-namespaces/rco-manager-cluster-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: ClusterRoleBinding 3 | metadata: 4 | name: rco-manager-cluster-rolebinding 5 | subjects: 6 | - kind: ServiceAccount 7 | name: rco-controller-manager 8 | namespace: rco-ns 9 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-ns2 6 | - rco-watched-ns2 7 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-ns 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-ns2/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns2 14 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-ns2/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-ns2/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-ns2/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-ns2/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: rco-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-ns2/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: rco-ns 6 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-watched-ns2/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-watched-ns2 4 | 5 | 6 | resources: 7 | - ../../../overlays/watch-another-namespace/rco-watched-ns 8 | patches: 9 | - path: rco-watched-role.yaml 10 | - path: rco-watched-rolebinding.yaml 11 | - path: rco-leader-election-watched-role.yaml 12 | - path: rco-leader-election-watched-rolebinding.yaml 13 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-watched-ns2/rco-leader-election-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-watched-ns2/rco-watched-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-watched-role 5 | namespace: rco-watched-ns 6 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-another-namespace/rco-watched-ns2/rco-watched-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-watched-rolebinding 5 | namespace: rco-watched-ns 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: rco-ns2 10 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/examples/watch-own-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: rco-ns 5 | 6 | resources: 7 | - ../../base 8 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-all-namespaces/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | namespace: runtime-component 5 | 6 | 7 | resources: 8 | - cluster-roles.yaml 9 | - ../../base 10 | 11 | patches: 12 | - path: rco-all-namespaces.yaml 13 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-all-namespaces/rco-all-namespaces.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: "" 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-another-namespace/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - rco-watched-ns 6 | - rco-ns 7 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-another-namespace/rco-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | namespace: rco-ns 4 | 5 | 6 | resources: 7 | - ../../../base 8 | patches: 9 | - path: rco-deployment.yaml 10 | - path: rco-leader-election-role.yaml 11 | - path: rco-manager-role.yaml 12 | - path: rco-leader-election-rolebinding.yaml 13 | - path: rco-manager-rolebinding.yaml 14 | - path: rco-sa.yaml 15 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-another-namespace/rco-ns/rco-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | spec: 7 | template: 8 | spec: 9 | containers: 10 | - name: manager 11 | env: 12 | - name: WATCH_NAMESPACE 13 | value: rco-watched-ns 14 | valueFrom: 15 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-another-namespace/rco-ns/rco-leader-election-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-leader-election-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-another-namespace/rco-ns/rco-leader-election-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-leader-election-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-another-namespace/rco-ns/rco-manager-role.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: Role 3 | metadata: 4 | name: rco-manager-role 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-another-namespace/rco-ns/rco-manager-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: rbac.authorization.k8s.io/v1 2 | kind: RoleBinding 3 | metadata: 4 | name: rco-manager-rolebinding 5 | namespace: runtime-component 6 | subjects: 7 | - kind: ServiceAccount 8 | name: rco-controller-manager 9 | namespace: runtime-component 10 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-another-namespace/rco-ns/rco-sa.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ServiceAccount 3 | metadata: 4 | name: rco-controller-manager 5 | namespace: runtime-component 6 | -------------------------------------------------------------------------------- /internal/deploy/kustomize/daily/overlays/watch-another-namespace/rco-watched-ns/kustomization.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: kustomize.config.k8s.io/v1beta1 2 | kind: Kustomization 3 | 4 | resources: 5 | - watched-roles.yaml 6 | -------------------------------------------------------------------------------- /lintOverrides.yaml: -------------------------------------------------------------------------------- 1 | overrides: 2 | - reason: "No sensitive information. Fields features.operators.openshift.io/token-auth.* are set to false" 3 | rule: OLMOperatorBundleNoSensitiveInfo 4 | message: metadata.annotations.features.operators.openshift.io/token-auth 5 | severity: REVIEW 6 | - reason: "No sensitive information. Auth fields under Monitoring properties are descriptions" 7 | rule: OLMOperatorBundleNoSensitiveInfo 8 | message: '(monitoring.properties.endpoints.items.properties.authorization|monitoring.properties.endpoints.items.properties.basicAuth|monitoring.properties.endpoints.items.properties.oauth2)' 9 | severity: REVIEW 10 | filenames: 11 | - runtimecomponents.rc.app.stacks.CustomResourceDefinition.yaml 12 | - reason: "No sensitive information. Certificate fields under Route and Service properties are descriptions" 13 | rule: OLMOperatorBundleNoSensitiveInfo 14 | message: '(service.properties.certificate|route.properties.certificate)' 15 | severity: REVIEW 16 | filenames: 17 | - runtimecomponents.rc.app.stacks.CustomResourceDefinition.yaml 18 | - reason: "HorizontalPodAutoscaler is enabled through instances' CustomResource" 19 | severity: INFO 20 | rule: UsesHorizontalPodAutoscaler -------------------------------------------------------------------------------- /scripts/csv_description_update.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash -e 2 | 3 | BASE_DIR="$(cd $(dirname $0) && pwd)" 4 | 5 | function update_csv() { 6 | local FILE="$BASE_DIR/../bundle/manifests/runtime-component.clusterserviceversion.yaml" 7 | 8 | DESCRIPTION_FILE=/tmp/description.md 9 | echo " description: |" > $DESCRIPTION_FILE 10 | cat "$BASE_DIR/../config/manifests/description.md" | sed 's/^/ /' >> $DESCRIPTION_FILE 11 | sed -i.bak '/^ displayName: Runtime Component/r /tmp/description.md' $FILE 12 | rm -f "${FILE}.bak" 13 | rm -f $DESCRIPTION_FILE 14 | } 15 | 16 | if [ "$1" == "update_csv" ]; then 17 | update_csv 18 | else 19 | echo "Usage: $0 update_csv" 20 | exit 1 21 | fi 22 | -------------------------------------------------------------------------------- /scripts/update-sample.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | # This script fetches the sha256 for the latest version of the open liberty getting started container 4 | # image, and then edits the sample deployment and the csv for the operator, and inserts the tag 5 | 6 | if ! skopeo -v ; then 7 | echo "Skopeo is not installed. Sample sha will not be updated" 8 | exit 9 | fi 10 | 11 | echo "Editing sample tag" 12 | SHA=$(skopeo inspect docker://icr.io/appcafe/open-liberty/samples/getting-started:latest | jq '.Digest'| sed -e 's/"//g') 13 | if [ -z $SHA ] 14 | then 15 | echo "Couldn't find latest SHA for sample image" 16 | exit 17 | fi 18 | 19 | echo "sha is $SHA" 20 | 21 | files=" 22 | config/samples/rc.app.stacks_v1_runtimecomponent.yaml 23 | config/samples/rc.app.stacks_v1beta2_runtimecomponent.yaml 24 | config/manager/manager.yaml 25 | internal/deploy/kustomize/daily/base/runtime-component-operator.yaml 26 | " 27 | 28 | for file in $files 29 | do 30 | sed -i.bak "s,getting-started@sha256:[a-zA-Z0-9]*,getting-started@$SHA," $file 31 | rm $file.bak 32 | done 33 | 34 | --------------------------------------------------------------------------------