Skip to content

Commit a445545

Browse files
yuvallevy2yuvallevy2
authored
Merge pull request #1 from RedisLabs/master
aaa
2 parents 3838255 + 142e72d commit a445545

28 files changed

+1311
-296
lines changed

‎README.md

+245-213
Large diffs are not rendered by default.

‎admission.bundle.yaml

+157
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,157 @@
1+
---
2+
apiVersion: v1
3+
kind: ServiceAccount
4+
metadata:
5+
name: redis-enterprise-admission
6+
---
7+
kind: ClusterRole
8+
apiVersion: rbac.authorization.k8s.io/v1
9+
metadata:
10+
name: redis-enterprise-admission
11+
rules:
12+
- apiGroups: ["certificates.k8s.io"]
13+
resources: ["certificatesigningrequests"]
14+
verbs: ["create", "watch"]
15+
---
16+
kind: Role
17+
apiVersion: rbac.authorization.k8s.io/v1
18+
metadata:
19+
name: redis-enterprise-admission
20+
rules:
21+
- apiGroups: [""]
22+
resources: ["secrets"]
23+
verbs: ["*"]
24+
---
25+
kind: RoleBinding
26+
apiVersion: rbac.authorization.k8s.io/v1
27+
metadata:
28+
name: redis-enterprise-admission
29+
subjects:
30+
- kind: ServiceAccount
31+
name: redis-enterprise-admission
32+
roleRef:
33+
kind: Role
34+
name: redis-enterprise-admission
35+
apiGroup: rbac.authorization.k8s.io
36+
---
37+
kind: ClusterRoleBinding
38+
apiVersion: rbac.authorization.k8s.io/v1
39+
metadata:
40+
name: redis-enterprise-admission
41+
subjects:
42+
- kind: ServiceAccount
43+
namespace: NAMESPACE_OF_SERVICE_ACCOUNT
44+
name: redis-enterprise-admission
45+
roleRef:
46+
kind: ClusterRole
47+
name: redis-enterprise-admission
48+
apiGroup: rbac.authorization.k8s.io
49+
---
50+
apiVersion: v1
51+
kind: Service
52+
metadata:
53+
name: admission
54+
spec:
55+
ports:
56+
- port: 443
57+
protocol: TCP
58+
targetPort: 8443
59+
selector:
60+
app: redb-admission
61+
---
62+
apiVersion: apps/v1
63+
kind: Deployment
64+
metadata:
65+
name: admission-deploy
66+
spec:
67+
selector:
68+
matchLabels:
69+
app: redb-admission
70+
template:
71+
metadata:
72+
labels:
73+
app: redb-admission
74+
spec:
75+
serviceAccountName: redis-enterprise-admission
76+
containers:
77+
- name: admin
78+
image: redislabs/operator:6.0.6-11
79+
command:
80+
- /usr/local/bin/admission
81+
args:
82+
- '-v=0'
83+
imagePullPolicy: Always
84+
ports:
85+
- containerPort: 443
86+
env:
87+
- name: POD_NAMESPACE
88+
valueFrom:
89+
fieldRef:
90+
fieldPath: metadata.namespace
91+
resources:
92+
limits:
93+
cpu: 100m
94+
memory: 512Mi
95+
requests:
96+
cpu: 25m
97+
memory: 256Mi
98+
readinessProbe:
99+
failureThreshold: 3
100+
successThreshold: 1
101+
periodSeconds: 30
102+
timeoutSeconds: 10
103+
httpGet:
104+
path: /healthz
105+
port: 8443
106+
scheme: HTTPS
107+
initContainers:
108+
- name: admin-init
109+
image: redislabs/operator:6.0.6-11
110+
command:
111+
- /usr/local/bin/admission
112+
args:
113+
- '-generate-tls'
114+
- '-v=1'
115+
imagePullPolicy: Always
116+
env:
117+
- name: POD_NAME
118+
valueFrom:
119+
fieldRef:
120+
fieldPath: metadata.name
121+
- name: POD_NAMESPACE
122+
valueFrom:
123+
fieldRef:
124+
fieldPath: metadata.namespace
125+
- name: POD_IP
126+
valueFrom:
127+
fieldRef:
128+
fieldPath: status.podIP
129+
resources:
130+
limits:
131+
cpu: 2000m
132+
memory: 256Mi
133+
requests:
134+
cpu: 100m
135+
memory: 256Mi
136+
137+
---
138+
apiVersion: admissionregistration.k8s.io/v1beta1
139+
kind: ValidatingWebhookConfiguration
140+
metadata:
141+
name: redb-admission
142+
webhooks:
143+
- name: redb.admission.redislabs
144+
failurePolicy: Fail
145+
rules:
146+
- apiGroups: ["app.redislabs.com"]
147+
apiVersions: ["v1alpha1"]
148+
operations: ["*"]
149+
resources: ["redisenterprisedatabases"]
150+
clientConfig:
151+
service:
152+
namespace: NAMESPACE_OF_SERVICE_ACCOUNT
153+
name: admission
154+
path: /admission
155+
caBundle: "" # Fill in with BASE64 encoded signed cert
156+
admissionReviewVersions: ["v1beta1"]
157+
---

‎admission.openshift.bundle.yaml

+157
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,157 @@
1+
---
2+
apiVersion: v1
3+
kind: ServiceAccount
4+
metadata:
5+
name: redis-enterprise-admission
6+
---
7+
kind: ClusterRole
8+
apiVersion: rbac.authorization.k8s.io/v1
9+
metadata:
10+
name: redis-enterprise-admission
11+
rules:
12+
- apiGroups: ["certificates.k8s.io"]
13+
resources: ["certificatesigningrequests"]
14+
verbs: ["create", "watch"]
15+
---
16+
kind: Role
17+
apiVersion: rbac.authorization.k8s.io/v1
18+
metadata:
19+
name: redis-enterprise-admission
20+
rules:
21+
- apiGroups: [""]
22+
resources: ["secrets"]
23+
verbs: ["*"]
24+
---
25+
kind: RoleBinding
26+
apiVersion: rbac.authorization.k8s.io/v1
27+
metadata:
28+
name: redis-enterprise-admission
29+
subjects:
30+
- kind: ServiceAccount
31+
name: redis-enterprise-admission
32+
roleRef:
33+
kind: Role
34+
name: redis-enterprise-admission
35+
apiGroup: rbac.authorization.k8s.io
36+
---
37+
kind: ClusterRoleBinding
38+
apiVersion: rbac.authorization.k8s.io/v1
39+
metadata:
40+
name: redis-enterprise-admission
41+
subjects:
42+
- kind: ServiceAccount
43+
namespace: NAMESPACE_OF_SERVICE_ACCOUNT
44+
name: redis-enterprise-admission
45+
roleRef:
46+
kind: ClusterRole
47+
name: redis-enterprise-admission
48+
apiGroup: rbac.authorization.k8s.io
49+
---
50+
apiVersion: v1
51+
kind: Service
52+
metadata:
53+
name: admission
54+
spec:
55+
ports:
56+
- port: 443
57+
protocol: TCP
58+
targetPort: 8443
59+
selector:
60+
app: redb-admission
61+
---
62+
apiVersion: apps/v1
63+
kind: Deployment
64+
metadata:
65+
name: admission-deploy
66+
spec:
67+
selector:
68+
matchLabels:
69+
app: redb-admission
70+
template:
71+
metadata:
72+
labels:
73+
app: redb-admission
74+
spec:
75+
serviceAccountName: redis-enterprise-admission
76+
containers:
77+
- name: admin
78+
image: redislabs/operator:6.0.6-11.rhel7
79+
command:
80+
- /usr/local/bin/admission
81+
args:
82+
- '-v=0'
83+
imagePullPolicy: Always
84+
ports:
85+
- containerPort: 443
86+
env:
87+
- name: POD_NAMESPACE
88+
valueFrom:
89+
fieldRef:
90+
fieldPath: metadata.namespace
91+
resources:
92+
limits:
93+
cpu: 100m
94+
memory: 512Mi
95+
requests:
96+
cpu: 25m
97+
memory: 256Mi
98+
readinessProbe:
99+
failureThreshold: 3
100+
successThreshold: 1
101+
periodSeconds: 30
102+
timeoutSeconds: 10
103+
httpGet:
104+
path: /healthz
105+
port: 8443
106+
scheme: HTTPS
107+
initContainers:
108+
- name: admin-init
109+
image: redislabs/operator:6.0.6-11.rhel7
110+
command:
111+
- /usr/local/bin/admission
112+
args:
113+
- '-generate-tls'
114+
- '-v=1'
115+
imagePullPolicy: Always
116+
env:
117+
- name: POD_NAME
118+
valueFrom:
119+
fieldRef:
120+
fieldPath: metadata.name
121+
- name: POD_NAMESPACE
122+
valueFrom:
123+
fieldRef:
124+
fieldPath: metadata.namespace
125+
- name: POD_IP
126+
valueFrom:
127+
fieldRef:
128+
fieldPath: status.podIP
129+
resources:
130+
limits:
131+
cpu: 2000m
132+
memory: 256Mi
133+
requests:
134+
cpu: 100m
135+
memory: 256Mi
136+
137+
---
138+
apiVersion: admissionregistration.k8s.io/v1beta1
139+
kind: ValidatingWebhookConfiguration
140+
metadata:
141+
name: redb-admission
142+
webhooks:
143+
- name: redb.admission.redislabs
144+
failurePolicy: Fail
145+
rules:
146+
- apiGroups: ["app.redislabs.com"]
147+
apiVersions: ["v1alpha1"]
148+
operations: ["*"]
149+
resources: ["redisenterprisedatabases"]
150+
clientConfig:
151+
service:
152+
namespace: NAMESPACE_OF_SERVICE_ACCOUNT
153+
name: admission
154+
path: /admission
155+
caBundle: "" # Fill in with BASE64 encoded signed cert
156+
admissionReviewVersions: ["v1beta1"]
157+
---

0 commit comments

Comments
 (0)