alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

Automated Manifest Update (#2259)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2259
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #2259.
This commit is contained in:
gitea-bot
2025-12-04 21:47:46 +00:00
committed by Alex Lebens
parent d008c08479
commit 7a96d06727
2100 changed files with 365994 additions and 380674 deletions
Download Patch File Download Diff File Expand all files Collapse all files

304
clusters/cl01tl/manifests/volsync/ClusterRole-volsync-manager.yaml Normal file
View File

@@ -0,0 +1,304 @@
---
# Source: volsync/charts/volsync/templates/clusterrole-manager.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: volsync-manager
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
- apps
resources:
- deployments
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- batch
resources:
- jobs
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- update
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- persistentvolumeclaims
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- persistentvolumeclaims/finalizers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- persistentvolumes
verbs:
- get
- list
- patch
- watch
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods/log
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- secrets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- serviceaccounts
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- events.k8s.io
resources:
- events
verbs:
- create
- patch
- update
- apiGroups:
- populator.storage.k8s.io
resources:
- volumepopulators
verbs:
- create
- get
- list
- patch
- update
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- rolebindings
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- roles
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- security.openshift.io
resources:
- securitycontextconstraints
verbs:
- create
- get
- list
- patch
- update
- watch
- apiGroups:
- security.openshift.io
resourceNames:
- volsync-privileged-mover
resources:
- securitycontextconstraints
verbs:
- use
- apiGroups:
- snapshot.storage.k8s.io
resources:
- volumesnapshots
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- storage.k8s.io
resources:
- storageclasses
verbs:
- get
- list
- watch
- apiGroups:
- volsync.backube
resources:
- replicationdestinations
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- volsync.backube
resources:
- replicationdestinations/finalizers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- volsync.backube
resources:
- replicationdestinations/status
verbs:
- get
- patch
- update
- apiGroups:
- volsync.backube
resources:
- replicationsources
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- volsync.backube
resources:
- replicationsources/finalizers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- volsync.backube
resources:
- replicationsources/status
verbs:
- get
- patch
- update

20
clusters/cl01tl/manifests/volsync/ClusterRoleBinding-volsync-manager.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
# Source: volsync/charts/volsync/templates/clusterrolebinding-manager.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: volsync-manager
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: volsync-manager
subjects:
- kind: ServiceAccount
name: volsync
namespace: volsync

4573
clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationdestinations.volsync.backube.yaml Normal file
View File

File diff suppressed because it is too large Load Diff

5112
clusters/cl01tl/manifests/volsync/volsync.yaml → clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationsources.volsync.backube.yaml
View File

File diff suppressed because it is too large Load Diff

119
clusters/cl01tl/manifests/volsync/Deployment-volsync.yaml Normal file
View File

@@ -0,0 +1,119 @@
---
# Source: volsync/charts/volsync/templates/deployment-controller.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: volsync
labels:
control-plane: volsync-controller
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
spec:
replicas: 3
selector:
matchLabels:
control-plane: volsync-controller
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
template:
metadata:
annotations:
kubectl.kubernetes.io/default-container: manager
labels:
control-plane: volsync-controller
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
spec:
serviceAccountName: volsync
# The default for podSecurityContext is moved here so that we can probe
# the cluster and and adjust the template
securityContext:
runAsNonRoot: true
# When not OpenShift, we need to set the UID
runAsUser: 65534
runAsGroup: 65534
seccompProfile:
type: RuntimeDefault
containers:
- name: kube-rbac-proxy
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- "ALL"
readOnlyRootFilesystem: true
image: "quay.io/brancz/kube-rbac-proxy:v0.19.0"
args:
- --secure-listen-address=0.0.0.0:8443
- --upstream=http://127.0.0.1:8080/
- --logtostderr=true
- "--tls-min-version=VersionTLS12"
- --v=0
- --ignore-paths=/metrics
ports:
- containerPort: 8443
protocol: TCP
name: https
resources:
limits:
cpu: 500m
memory: 128Mi
requests:
cpu: 5m
memory: 64Mi
- name: manager
args:
- --health-probe-bind-address=:8081
- --metrics-bind-address=127.0.0.1:8080
- --leader-elect
- --rclone-container-image=quay.io/backube/volsync:0.14.0
- --restic-container-image=quay.io/backube/volsync:0.14.0
- --rsync-container-image=quay.io/backube/volsync:0.14.0
- --rsync-tls-container-image=quay.io/backube/volsync:0.14.0
- --syncthing-container-image=quay.io/backube/volsync:0.14.0
- --scc-name=volsync-privileged-mover
command:
- /manager
image: "quay.io/backube/volsync:0.14.0"
imagePullPolicy: IfNotPresent
env:
- name: VOLSYNC_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
livenessProbe:
httpGet:
path: /healthz
port: 8081
initialDelaySeconds: 15
periodSeconds: 20
readinessProbe:
httpGet:
path: /readyz
port: 8081
initialDelaySeconds: 5
periodSeconds: 10
resources:
limits:
cpu: 1000m
memory: 1Gi
requests:
cpu: 10m
memory: 128Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
volumeMounts:
- name: tempdir
mountPath: /tmp
terminationGracePeriodSeconds: 10
volumes:
- name: tempdir
emptyDir:
medium: "Memory"

44
clusters/cl01tl/manifests/volsync/Role-volsync-leader-election.yaml Normal file
View File

@@ -0,0 +1,44 @@
---
# Source: volsync/charts/volsync/templates/role-leader-election.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: volsync-leader-election
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch

20
clusters/cl01tl/manifests/volsync/RoleBinding-volsync-leader-election.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
# Source: volsync/charts/volsync/templates/rolebinding-leader-election.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: volsync-leader-election
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: volsync-leader-election
subjects:
- kind: ServiceAccount
name: volsync
namespace: volsync

20
clusters/cl01tl/manifests/volsync/Service-volsync-metrics.yaml Normal file
View File

@@ -0,0 +1,20 @@
---
# Source: volsync/charts/volsync/templates/service-metrics.yaml
apiVersion: v1
kind: Service
metadata:
name: volsync-metrics
labels:
control-plane: volsync-controller
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
spec:
ports:
- name: https
port: 8443
targetPort: https
selector:
control-plane: volsync-controller

12
clusters/cl01tl/manifests/volsync/ServiceAccount-volsync.yaml Normal file
View File

@@ -0,0 +1,12 @@
---
# Source: volsync/charts/volsync/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: volsync
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm