alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

chore: Update manifests after change

Browse Source
This commit is contained in:
gitea-bot
2025-12-04 04:54:08 +00:00
parent dad1b4623c
commit bfe0e18539
2066 changed files with 378996 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

304
clusters/cl01tl/manifests/volsync/ClusterRole-volsync-manager.yml Normal file
View File

@@ -0,0 +1,304 @@
---
# Source: volsync/charts/volsync/templates/clusterrole-manager.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: volsync-manager
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
- apps
resources:
- deployments
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- batch
resources:
- jobs
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- update
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- persistentvolumeclaims
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- persistentvolumeclaims/finalizers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- persistentvolumes
verbs:
- get
- list
- patch
- watch
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods/log
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- secrets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- serviceaccounts
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- events.k8s.io
resources:
- events
verbs:
- create
- patch
- update
- apiGroups:
- populator.storage.k8s.io
resources:
- volumepopulators
verbs:
- create
- get
- list
- patch
- update
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- rolebindings
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- roles
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- security.openshift.io
resources:
- securitycontextconstraints
verbs:
- create
- get
- list
- patch
- update
- watch
- apiGroups:
- security.openshift.io
resourceNames:
- volsync-privileged-mover
resources:
- securitycontextconstraints
verbs:
- use
- apiGroups:
- snapshot.storage.k8s.io
resources:
- volumesnapshots
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
- apiGroups:
- storage.k8s.io
resources:
- storageclasses
verbs:
- get
- list
- watch
- apiGroups:
- volsync.backube
resources:
- replicationdestinations
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- volsync.backube
resources:
- replicationdestinations/finalizers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- volsync.backube
resources:
- replicationdestinations/status
verbs:
- get
- patch
- update
- apiGroups:
- volsync.backube
resources:
- replicationsources
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- volsync.backube
resources:
- replicationsources/finalizers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- volsync.backube
resources:
- replicationsources/status
verbs:
- get
- patch
- update

20
clusters/cl01tl/manifests/volsync/ClusterRoleBinding-volsync-manager.yml Normal file
View File

@@ -0,0 +1,20 @@
---
# Source: volsync/charts/volsync/templates/clusterrolebinding-manager.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: volsync-manager
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: volsync-manager
subjects:
- kind: ServiceAccount
name: volsync
namespace: volsync

4573
clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationdestinations.volsync.backube Normal file
View File

File diff suppressed because it is too large Load Diff

5859
clusters/cl01tl/manifests/volsync/CustomResourceDefinition-replicationsources.volsync.backube Normal file
View File

File diff suppressed because it is too large Load Diff

119
clusters/cl01tl/manifests/volsync/Deployment-volsync.yml Normal file
View File

@@ -0,0 +1,119 @@
---
# Source: volsync/charts/volsync/templates/deployment-controller.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: volsync
labels:
control-plane: volsync-controller
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
spec:
replicas: 3
selector:
matchLabels:
control-plane: volsync-controller
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
template:
metadata:
annotations:
kubectl.kubernetes.io/default-container: manager
labels:
control-plane: volsync-controller
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
spec:
serviceAccountName: volsync
# The default for podSecurityContext is moved here so that we can probe
# the cluster and and adjust the template
securityContext:
runAsNonRoot: true
# When not OpenShift, we need to set the UID
runAsUser: 65534
runAsGroup: 65534
seccompProfile:
type: RuntimeDefault
containers:
- name: kube-rbac-proxy
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- "ALL"
readOnlyRootFilesystem: true
image: "quay.io/brancz/kube-rbac-proxy:v0.19.0"
args:
- --secure-listen-address=0.0.0.0:8443
- --upstream=http://127.0.0.1:8080/
- --logtostderr=true
- "--tls-min-version=VersionTLS12"
- --v=0
- --ignore-paths=/metrics
ports:
- containerPort: 8443
protocol: TCP
name: https
resources:
limits:
cpu: 500m
memory: 128Mi
requests:
cpu: 5m
memory: 64Mi
- name: manager
args:
- --health-probe-bind-address=:8081
- --metrics-bind-address=127.0.0.1:8080
- --leader-elect
- --rclone-container-image=quay.io/backube/volsync:0.14.0
- --restic-container-image=quay.io/backube/volsync:0.14.0
- --rsync-container-image=quay.io/backube/volsync:0.14.0
- --rsync-tls-container-image=quay.io/backube/volsync:0.14.0
- --syncthing-container-image=quay.io/backube/volsync:0.14.0
- --scc-name=volsync-privileged-mover
command:
- /manager
image: "quay.io/backube/volsync:0.14.0"
imagePullPolicy: IfNotPresent
env:
- name: VOLSYNC_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
livenessProbe:
httpGet:
path: /healthz
port: 8081
initialDelaySeconds: 15
periodSeconds: 20
readinessProbe:
httpGet:
path: /readyz
port: 8081
initialDelaySeconds: 5
periodSeconds: 10
resources:
limits:
cpu: 1000m
memory: 1Gi
requests:
cpu: 10m
memory: 128Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
volumeMounts:
- name: tempdir
mountPath: /tmp
terminationGracePeriodSeconds: 10
volumes:
- name: tempdir
emptyDir:
medium: "Memory"

44
clusters/cl01tl/manifests/volsync/Role-volsync-leader-election.yml Normal file
View File

@@ -0,0 +1,44 @@
---
# Source: volsync/charts/volsync/templates/role-leader-election.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: volsync-leader-election
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch

20
clusters/cl01tl/manifests/volsync/RoleBinding-volsync-leader-election.yml Normal file
View File

@@ -0,0 +1,20 @@
---
# Source: volsync/charts/volsync/templates/rolebinding-leader-election.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: volsync-leader-election
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: volsync-leader-election
subjects:
- kind: ServiceAccount
name: volsync
namespace: volsync

20
clusters/cl01tl/manifests/volsync/Service-volsync-metrics.yml Normal file
View File

@@ -0,0 +1,20 @@
---
# Source: volsync/charts/volsync/templates/service-metrics.yaml
apiVersion: v1
kind: Service
metadata:
name: volsync-metrics
labels:
control-plane: volsync-controller
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm
spec:
ports:
- name: https
port: 8443
targetPort: https
selector:
control-plane: volsync-controller

12
clusters/cl01tl/manifests/volsync/ServiceAccount-volsync.yml Normal file
View File

@@ -0,0 +1,12 @@
---
# Source: volsync/charts/volsync/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: volsync
labels:
helm.sh/chart: volsync-0.14.0
app.kubernetes.io/name: volsync
app.kubernetes.io/instance: volsync
app.kubernetes.io/version: "0.14.0"
app.kubernetes.io/managed-by: Helm