Openshift Xray Helm and relocated to helm or operator folder

This commit is contained in:
John Peterson
2020-10-01 17:20:12 -07:00
parent 36ab48f407
commit 2cc08a26b1
149 changed files with 133 additions and 101 deletions

View File

@@ -0,0 +1,23 @@
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: openshiftxrays.charts.helm.k8s.io
spec:
group: charts.helm.k8s.io
names:
kind: OpenshiftXray
listKind: OpenshiftXrayList
plural: openshiftxrays
singular: openshiftxray
scope: Namespaced
subresources:
status: {}
validation:
openAPIV3Schema:
type: object
x-kubernetes-preserve-unknown-fields: true
version: v1alpha1
versions:
- name: v1alpha1
served: true
storage: true

View File

@@ -0,0 +1,69 @@
apiVersion: charts.helm.k8s.io/v1alpha1
kind: OpenshiftXray
metadata:
name: openshiftxray
spec:
xray:
analysis:
image:
repository: registry.connect.redhat.com/jfrog/xray-analysis
version: 3.3.0
name: xray-analysis
podManagementPolicy: Parallel
preStartCommand: null
updateStrategy: RollingUpdate
database:
password: OVERRIDE
url: OVERRIDE
user: OVERRIDE
global:
postgresqlTlsSecret: null
indexer:
image:
repository: registry.connect.redhat.com/jfrog/xray-indexer
version: 3.3.0
name: xray-indexer
podManagementPolicy: Parallel
updateStrategy: RollingUpdate
persist:
image:
repository: registry.connect.redhat.com/jfrog/xray-persist
version: 3.3.0
name: xray-persist
persistence:
size: 10Gi
podManagementPolicy: Parallel
preStartCommand: null
updateStrategy: RollingUpdate
postgresql:
enabled: false
rabbitmq-ha:
enabled: true
image:
repository: registry.connect.redhat.com/jfrog/xray-rabbitmq
tag: 3.8.0
rabbitmqEpmdPort: 4369
rabbitmqManagerPort: 15672
rabbitmqNodePort: 5672
replicaCount: 1
replicaCount: 1
router:
image:
imagePullPolicy: IfNotPresent
repository: registry.connect.redhat.com/jfrog/xray-router
version: 1.2.1
name: router
server:
image:
repository: registry.connect.redhat.com/jfrog/xray-server
version: 3.3.0
name: xray-server
podManagementPolicy: Parallel
replicaCount: 1
updateStrategy: RollingUpdate
xray:
consoleLog: false
jfrogUrl: OVERRIDE
joinKey: EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE
masterKey: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

View File

@@ -0,0 +1,5 @@
channels:
- currentCSV: xray-operator.v1.0.0
name: alpha
defaultChannel: alpha
packageName: xray-operator

View File

@@ -0,0 +1,42 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: xray-operator
spec:
replicas: 1
selector:
matchLabels:
name: xray-operator
template:
metadata:
labels:
name: xray-operator
spec:
serviceAccountName: xray-operator
containers:
- name: xray-operator
image: registry.connect.redhat.com/jfrog/xray-operator
imagePullPolicy: Always
env:
- name: WATCH_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: OPERATOR_NAME
value: "xray-operator"
- name: RELATED_IMAGE_XRAY_SERVER_IMAGE_REPOSITORY
value: "registry.connect.redhat.com/jfrog/xray-server"
- name: RELATED_IMAGE_XRAY_ANALYSIS_IMAGE_REPOSITORY
value: "registry.connect.redhat.com/jfrog/xray-analysis"
- name: RELATED_IMAGE_XRAY_PERSIST_IMAGE_REPOSITORY
value: "registry.connect.redhat.com/jfrog/xray-persist"
- name: RELATED_IMAGE_XRAY_INDEXER_IMAGE_REPOSITORY
value: "registry.connect.redhat.com/jfrog/xray-indexer"
- name: RELATED_IMAGE_XRAY_ROUTER_IMAGE_REPOSITORY
value: "registry.connect.redhat.com/jfrog/xray-router"
- name: RELATED_IMAGE_XRAY_RABBITMQ_IMAGE_REPOSITORY
value: "registry.connect.redhat.com/jfrog/xray-rabbitmq"

View File

@@ -0,0 +1,119 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
creationTimestamp: null
name: xray-operator
rules:
- apiGroups:
- ""
resources:
- pods
- services
- services/finalizers
- endpoints
- persistentvolumeclaims
- events
- configmaps
- secrets
- serviceaccounts
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resources:
- deployments
- daemonsets
- replicasets
- statefulsets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- apiGroups:
- ""
resourceNames:
- xray-operator
resources:
- '*'
verbs:
- '*'
- apiGroups:
- ""
resources:
- events
verbs:
- create
- apiGroups:
- monitoring.coreos.com
resources:
- servicemonitors
verbs:
- get
- create
- apiGroups:
- apps
resourceNames:
- xray-operator
resources:
- deployments/finalizers
verbs:
- update
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- apiGroups:
- apps
resources:
- replicasets
- deployments
verbs:
- get
- apiGroups:
- charts.helm.k8s.io
resources:
- '*'
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- networking.k8s.io
resources:
- '*'
verbs:
- '*'
- apiGroups:
- policy
resources:
- '*'
verbs:
- '*'
- apiGroups:
- 'rbac.authorization.k8s.io'
resources:
- '*'
verbs:
- '*'

View File

@@ -0,0 +1,11 @@
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: xray-operator
subjects:
- kind: ServiceAccount
name: xray-operator
roleRef:
kind: Role
name: xray-operator
apiGroup: rbac.authorization.k8s.io

View File

@@ -0,0 +1,4 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: xray-operator

View File

@@ -0,0 +1,10 @@
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
name: xray-operator
namespace: jfrog-artifactory
spec:
channel: alpha
name: xray-operator
source: xray-operator-csc
sourceNamespace: openshift-operators