CAPM3, BMO and Ironic manifests
The below PS has manifests files related to capm3, bmo and ironic for v0.5.0 versions. Relates-To: #518 #558 #560 Change-Id: Id9240320bc8dec32d5e5384c39e26ba04f55f9bd
This commit is contained in:
SirishaGopigiri
Ruslan Aliev
parent
136aa06117
commit
c7e5c76642
@ -0,0 +1,12 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: metal3
|
||||
resources:
|
||||
- upstream/default
|
||||
|
||||
patchesStrategicMerge:
|
||||
- operator_nodeselector_patch.yaml
|
||||
- operator_tolerations_patch.yaml
|
||||
- label_baremetalhosts_crd_patch.yaml
|
||||
- label_firmwareschemas_crd_patch.yaml
|
||||
- label_hostfirmwaresettings_crd_patch.yaml
|
||||
@ -0,0 +1,9 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
clusterctl.cluster.x-k8s.io: ""
|
||||
cluster.x-k8s.io/provider: "metal3"
|
||||
name: baremetalhosts.metal3.io
|
||||
@ -0,0 +1,9 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
clusterctl.cluster.x-k8s.io: ""
|
||||
cluster.x-k8s.io/provider: "metal3"
|
||||
name: firmwareschemas.metal3.io
|
||||
@ -0,0 +1,9 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
labels:
|
||||
clusterctl.cluster.x-k8s.io: ""
|
||||
cluster.x-k8s.io/provider: "metal3"
|
||||
name: hostfirmwaresettings.metal3.io
|
||||
@ -0,0 +1,10 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
nodeSelector:
|
||||
kubernetes.io/os: linux
|
||||
@ -0,0 +1,14 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
tolerations:
|
||||
# Mark the pod as a critical add-on for rescheduling.
|
||||
- key: CriticalAddonsOnly
|
||||
operator: Exists
|
||||
- key: node-role.kubernetes.io/master
|
||||
effect: NoSchedule
|
||||
@ -0,0 +1,65 @@
|
||||
# These rules inject env vars into the baremetal-operator function.
|
||||
apiVersion: airshipit.org/v1alpha1
|
||||
kind: ReplacementTransformer
|
||||
metadata:
|
||||
name: baremetal-operator-env-vars-replacements
|
||||
annotations:
|
||||
config.kubernetes.io/function: |-
|
||||
container:
|
||||
image: localhost/replacement-transformer
|
||||
replacements:
|
||||
# Replace the proxy vars
|
||||
- source:
|
||||
objref:
|
||||
name: env-vars-catalogue
|
||||
fieldref: env.HTTP_PROXY
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.HTTP_PROXY"]
|
||||
- source:
|
||||
objref:
|
||||
name: env-vars-catalogue
|
||||
fieldref: env.HTTPS_PROXY
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.HTTPS_PROXY"]
|
||||
- source:
|
||||
objref:
|
||||
name: env-vars-catalogue
|
||||
fieldref: env.http_proxy
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.http_proxy"]
|
||||
- source:
|
||||
objref:
|
||||
name: env-vars-catalogue
|
||||
fieldref: env.https_proxy
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.https_proxy"]
|
||||
- source:
|
||||
objref:
|
||||
name: env-vars-catalogue
|
||||
fieldref: env.NO_PROXY
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.NO_PROXY"]
|
||||
- source:
|
||||
objref:
|
||||
name: env-vars-catalogue
|
||||
fieldref: env.no_proxy
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.no_proxy"]
|
||||
@ -0,0 +1,6 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- versions.yaml
|
||||
- ironic-env-vars.yaml
|
||||
- networking.yaml
|
||||
@ -0,0 +1,112 @@
|
||||
# These rules inject networking info into the baremetal-operator function.
|
||||
apiVersion: airshipit.org/v1alpha1
|
||||
kind: ReplacementTransformer
|
||||
metadata:
|
||||
name: baremetal-operator-networking-replacements
|
||||
annotations:
|
||||
config.kubernetes.io/function: |-
|
||||
container:
|
||||
image: localhost/replacement-transformer
|
||||
replacements:
|
||||
# Replace the pod & service networks
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.provisioningInterface
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.PROVISIONING_INTERFACE"]
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.provisioningIp
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.PROVISIONING_IP"]
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.httpPort
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.HTTP_PORT"]
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.provisioningIp
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.DEPLOY_KERNEL_URL%PROVISIONING_IP%"]
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.httpPort
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.DEPLOY_KERNEL_URL%HTTP_PORT%"]
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.provisioningIp
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.DEPLOY_RAMDISK_URL%PROVISIONING_IP%"]
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.httpPort
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.DEPLOY_RAMDISK_URL%HTTP_PORT%"]
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.provisioningIp
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.IRONIC_ENDPOINT%PROVISIONING_IP%"]
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.provisioningIp
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.IRONIC_INSPECTOR_ENDPOINT%PROVISIONING_IP%"]
|
||||
- source:
|
||||
objref:
|
||||
kind: NetworkCatalogue
|
||||
name: networking
|
||||
fieldref: spec.ironic.ironicFastTrack
|
||||
target:
|
||||
objref:
|
||||
kind: ConfigMap
|
||||
name: baremetal-operator-ironic
|
||||
fieldrefs: ["data.IRONIC_FAST_TRACK"]
|
||||
|
||||
@ -0,0 +1,30 @@
|
||||
apiVersion: airshipit.org/v1alpha1
|
||||
kind: ReplacementTransformer
|
||||
metadata:
|
||||
name: baremetal-operator-versions-replacements
|
||||
annotations:
|
||||
config.kubernetes.io/function: |-
|
||||
container:
|
||||
image: localhost/replacement-transformer
|
||||
replacements:
|
||||
# Container versions for the ironic Deployment
|
||||
- source:
|
||||
objref:
|
||||
kind: VersionsCatalogue
|
||||
name: versions-airshipctl
|
||||
fieldref: "{.spec.images.baremetal_operator.metal3_baremetal_operator.baremetal_operator.image}"
|
||||
target:
|
||||
objref:
|
||||
kind: Deployment
|
||||
name: baremetal-operator-controller-manager
|
||||
fieldrefs: ["{.spec.template.spec.containers[?(.name == 'manager')].image}"]
|
||||
- source:
|
||||
objref:
|
||||
kind: VersionsCatalogue
|
||||
name: versions-airshipctl
|
||||
fieldref: "{.spec.images.baremetal_operator.metal3_baremetal_operator.kube_rbac_proxy.image}"
|
||||
target:
|
||||
objref:
|
||||
kind: Deployment
|
||||
name: baremetal-operator-controller-manager
|
||||
fieldrefs: ["{.spec.template.spec.containers[?(.name == 'kube-rbac-proxy')].image}"]
|
||||
@ -0,0 +1,24 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
volumeMounts:
|
||||
- name: ironic-credentials
|
||||
mountPath: "/opt/metal3/auth/ironic"
|
||||
readOnly: true
|
||||
- name: ironic-inspector-credentials
|
||||
mountPath: "/opt/metal3/auth/ironic-inspector"
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: ironic-credentials
|
||||
secret:
|
||||
secretName: ironic-credentials
|
||||
- name: ironic-inspector-credentials
|
||||
secret:
|
||||
secretName: ironic-inspector-credentials
|
||||
@ -0,0 +1,19 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: baremetal-operator-system
|
||||
resources:
|
||||
- ../../default
|
||||
- ../../namespace
|
||||
|
||||
secretGenerator:
|
||||
- name: ironic-credentials
|
||||
files:
|
||||
- username=ironic-username
|
||||
- password=ironic-password
|
||||
- name: ironic-inspector-credentials
|
||||
files:
|
||||
- username=ironic-inspector-username
|
||||
- password=ironic-inspector-password
|
||||
|
||||
patchesStrategicMerge:
|
||||
- credentials_patch.yaml
|
||||
@ -0,0 +1,24 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
volumeMounts:
|
||||
- name: ironic-credentials
|
||||
mountPath: "/opt/metal3/auth/ironic"
|
||||
readOnly: true
|
||||
- name: ironic-inspector-credentials
|
||||
mountPath: "/opt/metal3/auth/ironic-inspector"
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: ironic-credentials
|
||||
secret:
|
||||
secretName: ironic-credentials
|
||||
- name: ironic-inspector-credentials
|
||||
secret:
|
||||
secretName: ironic-inspector-credentials
|
||||
@ -0,0 +1,18 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: baremetal-operator-system
|
||||
resources:
|
||||
- ../../tls
|
||||
|
||||
secretGenerator:
|
||||
- name: ironic-credentials
|
||||
files:
|
||||
- username=ironic-username
|
||||
- password=ironic-password
|
||||
- name: ironic-inspector-credentials
|
||||
files:
|
||||
- username=ironic-inspector-username
|
||||
- password=ironic-inspector-password
|
||||
|
||||
patchesStrategicMerge:
|
||||
- credentials_patch.yaml
|
||||
@ -0,0 +1,26 @@
|
||||
# The following manifests contain a self-signed issuer CR and a certificate CR.
|
||||
# More document can be found at https://docs.cert-manager.io
|
||||
# WARNING: Targets CertManager 0.11 check https://docs.cert-manager.io/en/latest/tasks/upgrading/index.html for
|
||||
# breaking changes
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: selfsigned-issuer
|
||||
namespace: system
|
||||
spec:
|
||||
selfSigned: {}
|
||||
---
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Certificate
|
||||
metadata:
|
||||
name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml
|
||||
namespace: system
|
||||
spec:
|
||||
# $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize
|
||||
dnsNames:
|
||||
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc
|
||||
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc.cluster.local
|
||||
issuerRef:
|
||||
kind: Issuer
|
||||
name: selfsigned-issuer
|
||||
secretName: webhook-server-cert # this secret will not be prefixed, since it's not managed by kustomize
|
||||
@ -0,0 +1,5 @@
|
||||
resources:
|
||||
- certificate.yaml
|
||||
|
||||
configurations:
|
||||
- kustomizeconfig.yaml
|
||||
@ -0,0 +1,16 @@
|
||||
# This configuration is for teaching kustomize how to update name ref and var substitution
|
||||
nameReference:
|
||||
- kind: Issuer
|
||||
group: cert-manager.io
|
||||
fieldSpecs:
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/issuerRef/name
|
||||
|
||||
varReference:
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/commonName
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/dnsNames
|
||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,100 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.0
|
||||
creationTimestamp: null
|
||||
name: firmwareschemas.metal3.io
|
||||
spec:
|
||||
group: metal3.io
|
||||
names:
|
||||
kind: FirmwareSchema
|
||||
listKind: FirmwareSchemaList
|
||||
plural: firmwareschemas
|
||||
singular: firmwareschema
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1alpha1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: FirmwareSchema is the Schema for the firmwareschemas API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: FirmwareSchemaSpec defines the desired state of FirmwareSchema
|
||||
properties:
|
||||
hardwareModel:
|
||||
description: The hardware model associated with this schema
|
||||
type: string
|
||||
hardwareVendor:
|
||||
description: The hardware vendor associated with this schema
|
||||
type: string
|
||||
schema:
|
||||
additionalProperties:
|
||||
description: Additional data describing the firmware setting
|
||||
properties:
|
||||
allowable_values:
|
||||
description: The allowable value for an Enumeration type setting.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
attribute_type:
|
||||
description: The type of setting.
|
||||
enum:
|
||||
- Enumeration
|
||||
- String
|
||||
- Integer
|
||||
- Boolean
|
||||
- Password
|
||||
type: string
|
||||
lower_bound:
|
||||
description: The lowest value for an Integer type setting.
|
||||
type: integer
|
||||
max_length:
|
||||
description: Maximum length for a String type setting.
|
||||
type: integer
|
||||
min_length:
|
||||
description: Minimum length for a String type setting.
|
||||
type: integer
|
||||
read_only:
|
||||
description: Whether or not this setting is read only.
|
||||
type: boolean
|
||||
reset_required:
|
||||
description: Whether or not a reset is required after changing
|
||||
this setting.
|
||||
type: boolean
|
||||
unique:
|
||||
description: Whether or not this setting's value is unique to
|
||||
this node, e.g. a serial number.
|
||||
type: boolean
|
||||
upper_bound:
|
||||
description: The highest value for an Integer type setting.
|
||||
type: integer
|
||||
type: object
|
||||
description: Map of firmware name to schema
|
||||
type: object
|
||||
required:
|
||||
- schema
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
@ -0,0 +1,93 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.0
|
||||
creationTimestamp: null
|
||||
name: hostfirmwaresettings.metal3.io
|
||||
spec:
|
||||
group: metal3.io
|
||||
names:
|
||||
kind: HostFirmwareSettings
|
||||
listKind: HostFirmwareSettingsList
|
||||
plural: hostfirmwaresettings
|
||||
singular: hostfirmwaresettings
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1alpha1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: HostFirmwareSettings is the Schema for the hostfirmwaresettings
|
||||
API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: HostFirmwareSettingsSpec defines the desired state of HostFirmwareSettings
|
||||
properties:
|
||||
settings:
|
||||
additionalProperties:
|
||||
anyOf:
|
||||
- type: integer
|
||||
- type: string
|
||||
x-kubernetes-int-or-string: true
|
||||
description: Settings are the desired firmware settings stored as
|
||||
name/value pairs. This will be populated with the actual firmware
|
||||
settings and only contain the settings that can be modified (i.e.
|
||||
not ReadOnly), to facilitate making changes.
|
||||
type: object
|
||||
required:
|
||||
- settings
|
||||
type: object
|
||||
status:
|
||||
description: HostFirmwareSettingsStatus defines the observed state of
|
||||
HostFirmwareSettings
|
||||
properties:
|
||||
schema:
|
||||
description: FirmwareSchema is a reference to the Schema used to describe
|
||||
each FirmwareSetting. By default, this will be a Schema in the same
|
||||
Namespace as the settings but it can be overwritten in the Spec
|
||||
properties:
|
||||
name:
|
||||
description: '`name` is the reference to the schema.'
|
||||
type: string
|
||||
namespace:
|
||||
description: '`namespace` is the namespace of the where the schema
|
||||
is stored.'
|
||||
type: string
|
||||
required:
|
||||
- name
|
||||
- namespace
|
||||
type: object
|
||||
settings:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Settings are the actual firmware settings stored as name/value
|
||||
pairs
|
||||
type: object
|
||||
required:
|
||||
- settings
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
@ -0,0 +1,27 @@
|
||||
# This kustomization.yaml is not intended to be run by itself,
|
||||
# since it depends on service name and namespace that are out of this kustomize package.
|
||||
# It should be run by config/default
|
||||
resources:
|
||||
- bases/metal3.io_baremetalhosts.yaml
|
||||
- bases/metal3.io_hostfirmwaresettings.yaml
|
||||
- bases/metal3.io_firmwareschemas.yaml
|
||||
# +kubebuilder:scaffold:crdkustomizeresource
|
||||
|
||||
patchesStrategicMerge:
|
||||
# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix.
|
||||
# patches here are for enabling the conversion webhook for each CRD
|
||||
#- patches/webhook_in_baremetalhosts.yaml
|
||||
#- patches/webhook_in_hostfirmwaresettings.yaml
|
||||
#- patches/webhook_in_firmwareschemas.yaml
|
||||
# +kubebuilder:scaffold:crdkustomizewebhookpatch
|
||||
|
||||
# [CERTMANAGER] To enable webhook, uncomment all the sections with [CERTMANAGER] prefix.
|
||||
# patches here are for enabling the CA injection for each CRD
|
||||
#- patches/cainjection_in_baremetalhosts.yaml
|
||||
#- patches/cainjection_in_hostfirmwaresettings.yaml
|
||||
#- patches/cainjection_in_firmwareschemas.yaml
|
||||
# +kubebuilder:scaffold:crdkustomizecainjectionpatch
|
||||
|
||||
# the following config is for teaching kustomize how to do kustomization for CRDs.
|
||||
configurations:
|
||||
- kustomizeconfig.yaml
|
||||
@ -0,0 +1,17 @@
|
||||
# This file is for teaching kustomize how to substitute name and namespace reference in CRD
|
||||
nameReference:
|
||||
- kind: Service
|
||||
version: v1
|
||||
fieldSpecs:
|
||||
- kind: CustomResourceDefinition
|
||||
group: apiextensions.k8s.io
|
||||
path: spec/conversion/webhookClientConfig/service/name
|
||||
|
||||
namespace:
|
||||
- kind: CustomResourceDefinition
|
||||
group: apiextensions.k8s.io
|
||||
path: spec/conversion/webhookClientConfig/service/namespace
|
||||
create: false
|
||||
|
||||
varReference:
|
||||
- path: metadata/annotations
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: baremetalhosts.metal3.io
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: firmwareschemas.metal3.io
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: hostfirmwaresettings.metal3.io
|
||||
@ -0,0 +1,17 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: baremetalhosts.metal3.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhookClientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,17 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: firmwareschemas.metal3.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhookClientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,17 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: hostfirmwaresettings.metal3.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhookClientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,22 @@
|
||||
# Overrideable via the `replacements` entrypoint and networking catalogue
|
||||
HTTP_PROXY=""
|
||||
HTTPS_PROXY=""
|
||||
http_proxy=""
|
||||
https_proxy=""
|
||||
NO_PROXY=""
|
||||
no_proxy=""
|
||||
|
||||
# Overrideable via the `replacements` entrypoint and networking catalogue
|
||||
PROVISIONING_INTERFACE=pxe
|
||||
PROVISIONING_IP=192.168.10.100
|
||||
HTTP_PORT=80
|
||||
DHCP_RANGE=10.23.24.200,10.23.24.250
|
||||
|
||||
# Additional Baremetal Operator values overridable via the `replacements` entrypoint
|
||||
# and networking catalogue
|
||||
DEPLOY_KERNEL_URL=http://PROVISIONING_IP:HTTP_PORT/images/ipa-ubuntu-master.kernel
|
||||
DEPLOY_RAMDISK_URL=http://PROVISIONING_IP:HTTP_PORT/images/ipa-ubuntu-master.initramfs
|
||||
IRONIC_ENDPOINT=http://PROVISIONING_IP:6385/v1/
|
||||
IRONIC_INSPECTOR_ENDPOINT=http://PROVISIONING_IP:5050/v1/
|
||||
# CACHEURL=http://172.22.0.1/images
|
||||
IRONIC_FAST_TRACK=true
|
||||
@ -0,0 +1,66 @@
|
||||
# Adds namespace to all resources.
|
||||
namespace: baremetal-operator-system
|
||||
|
||||
# Value of this field is prepended to the
|
||||
# names of all resources, e.g. a deployment named
|
||||
# "wordpress" becomes "alices-wordpress".
|
||||
# Note that it should also match with the prefix (text before '-') of the namespace
|
||||
# field above.
|
||||
namePrefix: baremetal-operator-
|
||||
|
||||
# Labels to add to all resources and selectors.
|
||||
#commonLabels:
|
||||
# someName: someValue
|
||||
|
||||
bases:
|
||||
- ../crd
|
||||
- ../rbac
|
||||
- ../manager
|
||||
# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
|
||||
# crd/kustomization.yaml
|
||||
- ../webhook
|
||||
# [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'. 'WEBHOOK' components are required.
|
||||
- ../certmanager
|
||||
# [PROMETHEUS] To enable prometheus monitor, uncomment all sections with 'PROMETHEUS'.
|
||||
#- ../prometheus
|
||||
|
||||
patchesStrategicMerge:
|
||||
# Protect the /metrics endpoint by putting it behind auth.
|
||||
# If you want your controller-manager to expose the /metrics
|
||||
# endpoint w/o any authn/z, please comment the following line.
|
||||
- manager_auth_proxy_patch.yaml
|
||||
|
||||
# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
|
||||
# crd/kustomization.yaml
|
||||
- manager_webhook_patch.yaml
|
||||
|
||||
# [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'.
|
||||
# Uncomment 'CERTMANAGER' sections in crd/kustomization.yaml to enable the CA injection in the admission webhooks.
|
||||
# 'CERTMANAGER' needs to be enabled to use ca injection
|
||||
- webhookcainjection_patch.yaml
|
||||
|
||||
# the following config is for teaching kustomize how to do var substitution
|
||||
vars:
|
||||
# [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER' prefix.
|
||||
- name: SERVICE_NAMESPACE # namespace of the service
|
||||
objref:
|
||||
kind: Service
|
||||
version: v1
|
||||
name: webhook-service
|
||||
fieldref:
|
||||
fieldpath: metadata.namespace
|
||||
- name: SERVICE_NAME
|
||||
objref:
|
||||
kind: Service
|
||||
version: v1
|
||||
name: webhook-service
|
||||
|
||||
# Add ironic configmap-generator
|
||||
generatorOptions:
|
||||
disableNameSuffixHash: true
|
||||
|
||||
configMapGenerator:
|
||||
- behavior: create
|
||||
envs:
|
||||
- ironic.env
|
||||
name: ironic
|
||||
@ -0,0 +1,25 @@
|
||||
# This patch inject a sidecar container which is a HTTP proxy for the
|
||||
# controller manager, it performs RBAC authorization against the Kubernetes API using SubjectAccessReviews.
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: kube-rbac-proxy
|
||||
image: gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
|
||||
args:
|
||||
- "--secure-listen-address=0.0.0.0:8443"
|
||||
- "--upstream=http://127.0.0.1:8085/"
|
||||
- "--logtostderr=true"
|
||||
- "--v=10"
|
||||
ports:
|
||||
- containerPort: 8443
|
||||
name: https
|
||||
- name: manager
|
||||
args:
|
||||
- "--metrics-addr=127.0.0.1:8085"
|
||||
- "--enable-leader-election"
|
||||
@ -0,0 +1,23 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
ports:
|
||||
- containerPort: 9443
|
||||
name: webhook-server
|
||||
protocol: TCP
|
||||
volumeMounts:
|
||||
- mountPath: /tmp/k8s-webhook-server/serving-certs
|
||||
name: cert
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: cert
|
||||
secret:
|
||||
defaultMode: 420
|
||||
secretName: webhook-server-cert
|
||||
@ -0,0 +1,15 @@
|
||||
# This patch add annotation to admission webhook config and
|
||||
# the variables $(CERTIFICATE_NAMESPACE) and $(CERTIFICATE_NAME) will be substituted by kustomize.
|
||||
#apiVersion: admissionregistration.k8s.io/v1
|
||||
#kind: MutatingWebhookConfiguration
|
||||
#metadata:
|
||||
#name: mutating-webhook-configuration
|
||||
#annotations:
|
||||
#cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
#---
|
||||
#apiVersion: admissionregistration.k8s.io/v1
|
||||
#kind: ValidatingWebhookConfiguration
|
||||
#metadata:
|
||||
#name: validating-webhook-configuration
|
||||
#annotations:
|
||||
#cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
@ -0,0 +1,2 @@
|
||||
resources:
|
||||
- manager.yaml
|
||||
@ -0,0 +1,44 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
labels:
|
||||
control-plane: controller-manager
|
||||
spec:
|
||||
selector:
|
||||
matchLabels:
|
||||
control-plane: controller-manager
|
||||
replicas: 1
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
control-plane: controller-manager
|
||||
spec:
|
||||
containers:
|
||||
- command:
|
||||
- /baremetal-operator
|
||||
args:
|
||||
- --enable-leader-election
|
||||
image: quay.io/metal3-io/baremetal-operator
|
||||
imagePullPolicy: Always
|
||||
env:
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_NAMESPACE
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.namespace
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: ironic
|
||||
name: manager
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthz
|
||||
port: 9440
|
||||
initialDelaySeconds: 3
|
||||
periodSeconds: 3
|
||||
terminationGracePeriodSeconds: 10
|
||||
@ -0,0 +1,5 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
|
||||
resources:
|
||||
- namespace.yaml
|
||||
@ -0,0 +1,6 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
labels:
|
||||
control-plane: controller-manager
|
||||
name: baremetal-operator-system
|
||||
@ -0,0 +1,2 @@
|
||||
resources:
|
||||
- monitor.yaml
|
||||
@ -0,0 +1,16 @@
|
||||
|
||||
# Prometheus Monitor Service (Metrics)
|
||||
apiVersion: monitoring.coreos.com/v1
|
||||
kind: ServiceMonitor
|
||||
metadata:
|
||||
labels:
|
||||
control-plane: controller-manager
|
||||
name: controller-manager-metrics-monitor
|
||||
namespace: system
|
||||
spec:
|
||||
endpoints:
|
||||
- path: /metrics
|
||||
port: https
|
||||
selector:
|
||||
matchLabels:
|
||||
control-plane: controller-manager
|
||||
@ -0,0 +1,7 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: metrics-reader
|
||||
rules:
|
||||
- nonResourceURLs: ["/metrics"]
|
||||
verbs: ["get"]
|
||||
@ -0,0 +1,13 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: proxy-role
|
||||
rules:
|
||||
- apiGroups: ["authentication.k8s.io"]
|
||||
resources:
|
||||
- tokenreviews
|
||||
verbs: ["create"]
|
||||
- apiGroups: ["authorization.k8s.io"]
|
||||
resources:
|
||||
- subjectaccessreviews
|
||||
verbs: ["create"]
|
||||
@ -0,0 +1,12 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: proxy-rolebinding
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: proxy-role
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: default
|
||||
namespace: system
|
||||
@ -0,0 +1,14 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
control-plane: controller-manager
|
||||
name: controller-manager-metrics-service
|
||||
namespace: system
|
||||
spec:
|
||||
ports:
|
||||
- name: https
|
||||
port: 8443
|
||||
targetPort: https
|
||||
selector:
|
||||
control-plane: controller-manager
|
||||
@ -0,0 +1,24 @@
|
||||
# permissions for end users to edit baremetalhosts.
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: baremetalhost-editor-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- baremetalhosts
|
||||
verbs:
|
||||
- create
|
||||
- delete
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- baremetalhosts/status
|
||||
verbs:
|
||||
- get
|
||||
@ -0,0 +1,20 @@
|
||||
# permissions for end users to view baremetalhosts.
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: baremetalhost-viewer-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- baremetalhosts
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- baremetalhosts/status
|
||||
verbs:
|
||||
- get
|
||||
@ -0,0 +1,24 @@
|
||||
# permissions for end users to edit firmwareschemas.
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: firmwareschema-editor-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- firmwareschemas
|
||||
verbs:
|
||||
- create
|
||||
- delete
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- firmwareschemas/status
|
||||
verbs:
|
||||
- get
|
||||
@ -0,0 +1,20 @@
|
||||
# permissions for end users to view firmwareschemas.
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: firmwareschema-viewer-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- firmwareschemas
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- firmwareschemas/status
|
||||
verbs:
|
||||
- get
|
||||
@ -0,0 +1,24 @@
|
||||
# permissions for end users to edit hostfirmwaresettings.
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: hostfirmwaresettings-editor-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- hostfirmwaresettings
|
||||
verbs:
|
||||
- create
|
||||
- delete
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- hostfirmwaresettings/status
|
||||
verbs:
|
||||
- get
|
||||
@ -0,0 +1,20 @@
|
||||
# permissions for end users to view hostfirmwaresettings.
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: hostfirmwaresettings-viewer-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- hostfirmwaresettings
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- hostfirmwaresettings/status
|
||||
verbs:
|
||||
- get
|
||||
@ -0,0 +1,12 @@
|
||||
resources:
|
||||
- role.yaml
|
||||
- role_binding.yaml
|
||||
- leader_election_role.yaml
|
||||
- leader_election_role_binding.yaml
|
||||
# Comment the following 4 lines if you want to disable
|
||||
# the auth proxy (https://github.com/brancz/kube-rbac-proxy)
|
||||
# which protects your /metrics endpoint.
|
||||
- auth_proxy_service.yaml
|
||||
- auth_proxy_role.yaml
|
||||
- auth_proxy_role_binding.yaml
|
||||
- auth_proxy_client_clusterrole.yaml
|
||||
@ -0,0 +1,44 @@
|
||||
# permissions to do leader election.
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
metadata:
|
||||
name: leader-election-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- configmaps
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- create
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- configmaps/status
|
||||
verbs:
|
||||
- get
|
||||
- update
|
||||
- patch
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- events
|
||||
verbs:
|
||||
- create
|
||||
- apiGroups:
|
||||
- coordination.k8s.io
|
||||
resources:
|
||||
- leases
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- create
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
@ -0,0 +1,12 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
name: leader-election-rolebinding
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
name: leader-election-role
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: default
|
||||
namespace: system
|
||||
@ -0,0 +1,48 @@
|
||||
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
creationTimestamp: null
|
||||
name: manager-role
|
||||
rules:
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- events
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- secrets
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- baremetalhosts
|
||||
verbs:
|
||||
- create
|
||||
- delete
|
||||
- get
|
||||
- list
|
||||
- patch
|
||||
- update
|
||||
- watch
|
||||
- apiGroups:
|
||||
- metal3.io
|
||||
resources:
|
||||
- baremetalhosts/status
|
||||
verbs:
|
||||
- get
|
||||
- patch
|
||||
- update
|
||||
@ -0,0 +1,12 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: manager-rolebinding
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: manager-role
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: default
|
||||
namespace: system
|
||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,7 @@
|
||||
apiVersion: metal3.io/v1alpha1
|
||||
kind: BareMetalHost
|
||||
metadata:
|
||||
name: baremetalhost-sample
|
||||
spec:
|
||||
# Add fields here
|
||||
foo: bar
|
||||
@ -0,0 +1,34 @@
|
||||
apiVersion: metal3.io/v1alpha1
|
||||
kind: FirmwareSchema
|
||||
metadata:
|
||||
name: firmwareschema-sample
|
||||
spec:
|
||||
status:
|
||||
referenceCount: 2
|
||||
hardwareVendor: "VendorA"
|
||||
hardwareModel: "ModelT"
|
||||
schema:
|
||||
- "ProcVirtualization":
|
||||
attribute_type: "Enumeration"
|
||||
allowable_values:
|
||||
- "Enabled"
|
||||
- "Disabled"
|
||||
read_only: false
|
||||
- "ProcCPUCores":
|
||||
attribute_type: "Integer"
|
||||
lower_bound: 1
|
||||
read_only: true
|
||||
upper_bound: 100
|
||||
- "SRIOV":
|
||||
allowable_values:
|
||||
- "Enabled"
|
||||
- "Disabled"
|
||||
- "SystemModelName":
|
||||
attribute_type: "String"
|
||||
max_length: 40
|
||||
min_length: 0
|
||||
read_only: true
|
||||
- "SerialNumber":
|
||||
attribute_type: "String"
|
||||
max_length: 16
|
||||
min_length: 0
|
||||
@ -0,0 +1,17 @@
|
||||
apiVersion: metal3.io/v1alpha1
|
||||
kind: HostFirmwareSettings
|
||||
metadata:
|
||||
name: hostfirmwaresettings-sample
|
||||
spec:
|
||||
settings:
|
||||
- "ProcVirtualization": "Enabled"
|
||||
- "SRIOV": "Enabled"
|
||||
- "NetworkBootRetryCount": "20"
|
||||
status:
|
||||
settings:
|
||||
- "ProcVirtualization": "Enabled"
|
||||
- "ProcCPUCores": "100"
|
||||
- "SRIOV": "Enabled"
|
||||
- "SystemModelName": "QYZ12345"
|
||||
- "SerialNumber": "22654891"
|
||||
- "NetworkBootRetryCount": "10"
|
||||
@ -0,0 +1,9 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: baremetal-operator-system
|
||||
resources:
|
||||
- ../default
|
||||
- ../namespace
|
||||
|
||||
patchesStrategicMerge:
|
||||
- tls_ca_patch.yaml
|
||||
@ -0,0 +1,18 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
volumeMounts:
|
||||
- name: cacert
|
||||
mountPath: "/opt/metal3/certs/ca"
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: cacert
|
||||
secret:
|
||||
secretName: ironic-cacert
|
||||
@ -0,0 +1,5 @@
|
||||
resources:
|
||||
- service_patch.yaml
|
||||
|
||||
configurations:
|
||||
- kustomizeconfig.yaml
|
||||
@ -0,0 +1,25 @@
|
||||
# the following config is for teaching kustomize where to look at when substituting vars.
|
||||
# It requires kustomize v2.1.0 or newer to work properly.
|
||||
nameReference:
|
||||
- kind: Service
|
||||
version: v1
|
||||
fieldSpecs:
|
||||
- kind: MutatingWebhookConfiguration
|
||||
group: admissionregistration.k8s.io
|
||||
path: webhooks/clientConfig/service/name
|
||||
- kind: ValidatingWebhookConfiguration
|
||||
group: admissionregistration.k8s.io
|
||||
path: webhooks/clientConfig/service/name
|
||||
|
||||
namespace:
|
||||
- kind: MutatingWebhookConfiguration
|
||||
group: admissionregistration.k8s.io
|
||||
path: webhooks/clientConfig/service/namespace
|
||||
create: true
|
||||
- kind: ValidatingWebhookConfiguration
|
||||
group: admissionregistration.k8s.io
|
||||
path: webhooks/clientConfig/service/namespace
|
||||
create: true
|
||||
|
||||
varReference:
|
||||
- path: metadata/annotations
|
||||
@ -0,0 +1,12 @@
|
||||
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: webhook-service
|
||||
namespace: system
|
||||
spec:
|
||||
ports:
|
||||
- port: 443
|
||||
targetPort: 9443
|
||||
selector:
|
||||
control-plane: controller-manager
|
||||
24
manifests/function/capm3/v0.5.0/certmanager/certificate.yaml
Normal file
24
manifests/function/capm3/v0.5.0/certmanager/certificate.yaml
Normal file
@ -0,0 +1,24 @@
|
||||
# The following manifests contain a self-signed issuer CR and a certificate CR.
|
||||
# More document can be found at https://docs.cert-manager.io
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: selfsigned-issuer
|
||||
namespace: system
|
||||
spec:
|
||||
selfSigned: {}
|
||||
---
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Certificate
|
||||
metadata:
|
||||
name: serving-cert # this name should match the one appeared in kustomizeconfig.yaml
|
||||
namespace: system
|
||||
spec:
|
||||
# $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize
|
||||
dnsNames:
|
||||
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc
|
||||
- $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc.cluster.local
|
||||
issuerRef:
|
||||
kind: Issuer
|
||||
name: selfsigned-issuer
|
||||
secretName: $(SERVICE_NAME)-cert # this secret will not be prefixed, since it's not managed by kustomize
|
||||
@ -0,0 +1,7 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- certificate.yaml
|
||||
|
||||
configurations:
|
||||
- kustomizeconfig.yaml
|
||||
@ -0,0 +1,19 @@
|
||||
# This configuration is for teaching kustomize how to update name ref and var substitution
|
||||
nameReference:
|
||||
- kind: Issuer
|
||||
group: cert-manager.io
|
||||
fieldSpecs:
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/issuerRef/name
|
||||
|
||||
varReference:
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/commonName
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/dnsNames
|
||||
- kind: Certificate
|
||||
group: cert-manager.io
|
||||
path: spec/secretName
|
||||
@ -0,0 +1,204 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.0
|
||||
creationTimestamp: null
|
||||
name: metal3clusters.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
names:
|
||||
categories:
|
||||
- cluster-api
|
||||
kind: Metal3Cluster
|
||||
listKind: Metal3ClusterList
|
||||
plural: metal3clusters
|
||||
shortNames:
|
||||
- m3c
|
||||
- m3cluster
|
||||
- m3clusters
|
||||
- metal3c
|
||||
- metal3cluster
|
||||
singular: metal3cluster
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- additionalPrinterColumns:
|
||||
- description: metal3Cluster is Ready
|
||||
jsonPath: .status.ready
|
||||
name: Ready
|
||||
type: string
|
||||
- description: Most recent error
|
||||
jsonPath: .status.failureReason
|
||||
name: Error
|
||||
type: string
|
||||
- description: Cluster to which this BMCluster belongs
|
||||
jsonPath: .metadata.labels.cluster\.x-k8s\.io/cluster-name
|
||||
name: Cluster
|
||||
type: string
|
||||
- description: Control plane endpoint
|
||||
jsonPath: .spec.controlPlaneEndpoint
|
||||
name: Endpoint
|
||||
type: string
|
||||
name: v1alpha4
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3Cluster is the Schema for the metal3clusters API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3ClusterSpec defines the desired state of Metal3Cluster.
|
||||
properties:
|
||||
controlPlaneEndpoint:
|
||||
description: ControlPlaneEndpoint represents the endpoint used to
|
||||
communicate with the control plane.
|
||||
properties:
|
||||
host:
|
||||
description: Host is the hostname on which the API server is serving.
|
||||
type: string
|
||||
port:
|
||||
description: Port is the port on which the API server is serving.
|
||||
type: integer
|
||||
required:
|
||||
- host
|
||||
- port
|
||||
type: object
|
||||
noCloudProvider:
|
||||
type: boolean
|
||||
required:
|
||||
- controlPlaneEndpoint
|
||||
type: object
|
||||
status:
|
||||
description: Metal3ClusterStatus defines the observed state of Metal3Cluster.
|
||||
properties:
|
||||
failureMessage:
|
||||
description: FailureMessage indicates that there is a fatal problem
|
||||
reconciling the state, and will be set to a descriptive error message.
|
||||
type: string
|
||||
failureReason:
|
||||
description: FailureReason indicates that there is a fatal problem
|
||||
reconciling the state, and will be set to a token value suitable
|
||||
for programmatic interpretation.
|
||||
type: string
|
||||
lastUpdated:
|
||||
description: LastUpdated identifies when this status was last observed.
|
||||
format: date-time
|
||||
type: string
|
||||
ready:
|
||||
description: Ready denotes that the Metal3 cluster (infrastructure)
|
||||
is ready. In Baremetal case, it does not mean anything for now as
|
||||
no infrastructure steps need to be performed. Required by Cluster
|
||||
API. Set to True by the metal3Cluster controller after creation.
|
||||
type: boolean
|
||||
required:
|
||||
- ready
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: false
|
||||
subresources:
|
||||
status: {}
|
||||
- additionalPrinterColumns:
|
||||
- description: metal3Cluster is Ready
|
||||
jsonPath: .status.ready
|
||||
name: Ready
|
||||
type: string
|
||||
- description: Most recent error
|
||||
jsonPath: .status.failureReason
|
||||
name: Error
|
||||
type: string
|
||||
- description: Cluster to which this BMCluster belongs
|
||||
jsonPath: .metadata.labels.cluster\.x-k8s\.io/cluster-name
|
||||
name: Cluster
|
||||
type: string
|
||||
- description: Control plane endpoint
|
||||
jsonPath: .spec.controlPlaneEndpoint
|
||||
name: Endpoint
|
||||
type: string
|
||||
name: v1alpha5
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3Cluster is the Schema for the metal3clusters API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3ClusterSpec defines the desired state of Metal3Cluster.
|
||||
properties:
|
||||
controlPlaneEndpoint:
|
||||
description: ControlPlaneEndpoint represents the endpoint used to
|
||||
communicate with the control plane.
|
||||
properties:
|
||||
host:
|
||||
description: Host is the hostname on which the API server is serving.
|
||||
type: string
|
||||
port:
|
||||
description: Port is the port on which the API server is serving.
|
||||
type: integer
|
||||
required:
|
||||
- host
|
||||
- port
|
||||
type: object
|
||||
noCloudProvider:
|
||||
type: boolean
|
||||
required:
|
||||
- controlPlaneEndpoint
|
||||
type: object
|
||||
status:
|
||||
description: Metal3ClusterStatus defines the observed state of Metal3Cluster.
|
||||
properties:
|
||||
failureMessage:
|
||||
description: FailureMessage indicates that there is a fatal problem
|
||||
reconciling the state, and will be set to a descriptive error message.
|
||||
type: string
|
||||
failureReason:
|
||||
description: FailureReason indicates that there is a fatal problem
|
||||
reconciling the state, and will be set to a token value suitable
|
||||
for programmatic interpretation.
|
||||
type: string
|
||||
lastUpdated:
|
||||
description: LastUpdated identifies when this status was last observed.
|
||||
format: date-time
|
||||
type: string
|
||||
ready:
|
||||
description: Ready denotes that the Metal3 cluster (infrastructure)
|
||||
is ready. In Baremetal case, it does not mean anything for now as
|
||||
no infrastructure steps need to be performed. Required by Cluster
|
||||
API. Set to True by the metal3Cluster controller after creation.
|
||||
type: boolean
|
||||
required:
|
||||
- ready
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
@ -0,0 +1,248 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.0
|
||||
creationTimestamp: null
|
||||
name: metal3dataclaims.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
names:
|
||||
categories:
|
||||
- cluster-api
|
||||
kind: Metal3DataClaim
|
||||
listKind: Metal3DataClaimList
|
||||
plural: metal3dataclaims
|
||||
shortNames:
|
||||
- m3dc
|
||||
- m3dataclaim
|
||||
- m3dataclaims
|
||||
- metal3dc
|
||||
- metal3dataclaim
|
||||
singular: metal3dataclaim
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1alpha4
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3DataClaim is the Schema for the metal3datas API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3DataClaimSpec defines the desired state of Metal3DataClaim.
|
||||
properties:
|
||||
template:
|
||||
description: Template is the Metal3DataTemplate this was generated
|
||||
for.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
required:
|
||||
- template
|
||||
type: object
|
||||
status:
|
||||
description: Metal3DataClaimStatus defines the observed state of Metal3DataClaim.
|
||||
properties:
|
||||
errorMessage:
|
||||
description: ErrorMessage contains the error message
|
||||
type: string
|
||||
renderedData:
|
||||
description: RenderedData references the Metal3Data when ready
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: false
|
||||
subresources:
|
||||
status: {}
|
||||
- name: v1alpha5
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3DataClaim is the Schema for the metal3datas API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3DataClaimSpec defines the desired state of Metal3DataClaim.
|
||||
properties:
|
||||
template:
|
||||
description: Template is the Metal3DataTemplate this was generated
|
||||
for.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
required:
|
||||
- template
|
||||
type: object
|
||||
status:
|
||||
description: Metal3DataClaimStatus defines the observed state of Metal3DataClaim.
|
||||
properties:
|
||||
errorMessage:
|
||||
description: ErrorMessage contains the error message
|
||||
type: string
|
||||
renderedData:
|
||||
description: RenderedData references the Metal3Data when ready
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
@ -0,0 +1,326 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.0
|
||||
creationTimestamp: null
|
||||
name: metal3datas.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
names:
|
||||
categories:
|
||||
- cluster-api
|
||||
kind: Metal3Data
|
||||
listKind: Metal3DataList
|
||||
plural: metal3datas
|
||||
shortNames:
|
||||
- m3d
|
||||
- m3data
|
||||
- m3datas
|
||||
- metal3d
|
||||
- metal3data
|
||||
singular: metal3data
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1alpha4
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3Data is the Schema for the metal3datas API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3DataSpec defines the desired state of Metal3Data.
|
||||
properties:
|
||||
claim:
|
||||
description: DataClaim points to the Metal3DataClaim the Metal3Data
|
||||
was created for.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
index:
|
||||
description: Index stores the index value of this instance in the
|
||||
Metal3DataTemplate.
|
||||
type: integer
|
||||
metaData:
|
||||
description: MetaData points to the rendered MetaData secret.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
networkData:
|
||||
description: NetworkData points to the rendered NetworkData secret.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
template:
|
||||
description: DataTemplate is the Metal3DataTemplate this was generated
|
||||
from.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
templateReference:
|
||||
description: TemplateReference refers to the Template the Metal3MachineTemplate
|
||||
refers to. It can be matched against the key or it may also point
|
||||
to the name of the template Metal3Data refers to
|
||||
type: string
|
||||
required:
|
||||
- claim
|
||||
- template
|
||||
type: object
|
||||
status:
|
||||
description: Metal3DataStatus defines the observed state of Metal3Data.
|
||||
properties:
|
||||
errorMessage:
|
||||
description: ErrorMessage contains the error message
|
||||
type: string
|
||||
ready:
|
||||
description: Ready is a flag set to True if the secrets were rendered
|
||||
properly
|
||||
type: boolean
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: false
|
||||
subresources:
|
||||
status: {}
|
||||
- name: v1alpha5
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3Data is the Schema for the metal3datas API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3DataSpec defines the desired state of Metal3Data.
|
||||
properties:
|
||||
claim:
|
||||
description: DataClaim points to the Metal3DataClaim the Metal3Data
|
||||
was created for.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
index:
|
||||
description: Index stores the index value of this instance in the
|
||||
Metal3DataTemplate.
|
||||
type: integer
|
||||
metaData:
|
||||
description: MetaData points to the rendered MetaData secret.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
networkData:
|
||||
description: NetworkData points to the rendered NetworkData secret.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
template:
|
||||
description: DataTemplate is the Metal3DataTemplate this was generated
|
||||
from.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
templateReference:
|
||||
description: TemplateReference refers to the Template the Metal3MachineTemplate
|
||||
refers to. It can be matched against the key or it may also point
|
||||
to the name of the template Metal3Data refers to
|
||||
type: string
|
||||
required:
|
||||
- claim
|
||||
- template
|
||||
type: object
|
||||
status:
|
||||
description: Metal3DataStatus defines the observed state of Metal3Data.
|
||||
properties:
|
||||
errorMessage:
|
||||
description: ErrorMessage contains the error message
|
||||
type: string
|
||||
ready:
|
||||
description: Ready is a flag set to True if the secrets were rendered
|
||||
properly
|
||||
type: boolean
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,723 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.0
|
||||
creationTimestamp: null
|
||||
name: metal3machines.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
names:
|
||||
categories:
|
||||
- cluster-api
|
||||
kind: Metal3Machine
|
||||
listKind: Metal3MachineList
|
||||
plural: metal3machines
|
||||
shortNames:
|
||||
- m3m
|
||||
- m3machine
|
||||
- m3machines
|
||||
- metal3m
|
||||
- metal3machine
|
||||
singular: metal3machine
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- additionalPrinterColumns:
|
||||
- description: Provider ID
|
||||
jsonPath: .spec.providerID
|
||||
name: ProviderID
|
||||
type: string
|
||||
- description: metal3machine is Ready
|
||||
jsonPath: .status.ready
|
||||
name: Ready
|
||||
type: string
|
||||
- description: Cluster to which this M3Machine belongs
|
||||
jsonPath: .metadata.labels.cluster\.x-k8s\.io/cluster-name
|
||||
name: Cluster
|
||||
type: string
|
||||
- description: metal3machine current phase
|
||||
jsonPath: .status.phase
|
||||
name: Phase
|
||||
type: string
|
||||
name: v1alpha4
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3Machine is the Schema for the metal3machines API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3MachineSpec defines the desired state of Metal3Machine
|
||||
properties:
|
||||
automatedCleaningMode:
|
||||
default: metadata
|
||||
description: When set to disabled, automated cleaning of host disks
|
||||
will be skipped during provisioning and deprovisioning.
|
||||
enum:
|
||||
- metadata
|
||||
- disabled
|
||||
type: string
|
||||
dataTemplate:
|
||||
description: MetadataTemplate is a reference to a Metal3DataTemplate
|
||||
object containing a template of metadata to be rendered. Metadata
|
||||
keys defined in the metadataTemplate take precedence over keys defined
|
||||
in metadata field.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
hostSelector:
|
||||
description: HostSelector specifies matching criteria for labels on
|
||||
BareMetalHosts. This is used to limit the set of BareMetalHost objects
|
||||
considered for claiming for a metal3machine.
|
||||
properties:
|
||||
matchExpressions:
|
||||
description: Label match expressions that must be true on a chosen
|
||||
BareMetalHost
|
||||
items:
|
||||
properties:
|
||||
key:
|
||||
type: string
|
||||
operator:
|
||||
description: Operator represents a key/field's relationship
|
||||
to value(s). See labels.Requirement and fields.Requirement
|
||||
for more details.
|
||||
type: string
|
||||
values:
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
required:
|
||||
- key
|
||||
- operator
|
||||
- values
|
||||
type: object
|
||||
type: array
|
||||
matchLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Key/value pairs of labels that must exist on a chosen
|
||||
BareMetalHost
|
||||
type: object
|
||||
type: object
|
||||
image:
|
||||
description: Image is the image to be provisioned.
|
||||
properties:
|
||||
checksum:
|
||||
description: Checksum is a md5sum value or a URL to retrieve one.
|
||||
Not required for live-iso.
|
||||
type: string
|
||||
checksumType:
|
||||
description: ChecksumType is the checksum algorithm for the image.
|
||||
e.g md5, sha256, sha512
|
||||
enum:
|
||||
- md5
|
||||
- sha256
|
||||
- sha512
|
||||
type: string
|
||||
format:
|
||||
description: DiskFormat contains the image disk format.
|
||||
enum:
|
||||
- raw
|
||||
- qcow2
|
||||
- vdi
|
||||
- vmdk
|
||||
- live-iso
|
||||
type: string
|
||||
url:
|
||||
description: URL is a location of an image to deploy.
|
||||
type: string
|
||||
required:
|
||||
- url
|
||||
type: object
|
||||
metaData:
|
||||
description: MetaData is an object storing the reference to the secret
|
||||
containing the Metadata given by the user.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
networkData:
|
||||
description: NetworkData is an object storing the reference to the
|
||||
secret containing the network data given by the user.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
providerID:
|
||||
description: ProviderID will be the Metal3 machine in ProviderID format
|
||||
(metal3://<bmh-uuid>)
|
||||
type: string
|
||||
userData:
|
||||
description: UserData references the Secret that holds user data needed
|
||||
by the bare metal operator. The Namespace is optional; it will default
|
||||
to the metal3machine's namespace if not specified.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
required:
|
||||
- image
|
||||
type: object
|
||||
status:
|
||||
description: Metal3MachineStatus defines the observed state of Metal3Machine
|
||||
properties:
|
||||
addresses:
|
||||
description: Addresses is a list of addresses assigned to the machine.
|
||||
This field is copied from the infrastructure provider reference.
|
||||
items:
|
||||
description: MachineAddress contains information for the node's
|
||||
address.
|
||||
properties:
|
||||
address:
|
||||
description: The machine address.
|
||||
type: string
|
||||
type:
|
||||
description: Machine address type, one of Hostname, ExternalIP
|
||||
or InternalIP.
|
||||
type: string
|
||||
required:
|
||||
- address
|
||||
- type
|
||||
type: object
|
||||
type: array
|
||||
failureMessage:
|
||||
description: "FailureMessage will be set in the event that there is
|
||||
a terminal problem reconciling the metal3machine and will contain
|
||||
a more verbose string suitable for logging and human consumption.
|
||||
\n This field should not be set for transitive errors that a controller
|
||||
faces that are expected to be fixed automatically over time (like
|
||||
service outages), but instead indicate that something is fundamentally
|
||||
wrong with the metal3machine's spec or the configuration of the
|
||||
controller, and that manual intervention is required. Examples of
|
||||
terminal errors would be invalid combinations of settings in the
|
||||
spec, values that are unsupported by the controller, or the responsible
|
||||
controller itself being critically misconfigured. \n Any transient
|
||||
errors that occur during the reconciliation of metal3machines can
|
||||
be added as events to the metal3machine object and/or logged in
|
||||
the controller's output."
|
||||
type: string
|
||||
failureReason:
|
||||
description: "FailureReason will be set in the event that there is
|
||||
a terminal problem reconciling the metal3machine and will contain
|
||||
a succinct value suitable for machine interpretation. \n This field
|
||||
should not be set for transitive errors that a controller faces
|
||||
that are expected to be fixed automatically over time (like service
|
||||
outages), but instead indicate that something is fundamentally wrong
|
||||
with the metal3machine's spec or the configuration of the controller,
|
||||
and that manual intervention is required. Examples of terminal errors
|
||||
would be invalid combinations of settings in the spec, values that
|
||||
are unsupported by the controller, or the responsible controller
|
||||
itself being critically misconfigured. \n Any transient errors that
|
||||
occur during the reconciliation of metal3machines can be added as
|
||||
events to the metal3machine object and/or logged in the controller's
|
||||
output."
|
||||
type: string
|
||||
lastUpdated:
|
||||
description: LastUpdated identifies when this status was last observed.
|
||||
format: date-time
|
||||
type: string
|
||||
metaData:
|
||||
description: MetaData is an object storing the reference to the secret
|
||||
containing the Metadata used to deploy the BareMetalHost.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
networkData:
|
||||
description: NetworkData is an object storing the reference to the
|
||||
secret containing the network data used to deploy the BareMetalHost.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
phase:
|
||||
description: Phase represents the current phase of machine actuation.
|
||||
E.g. Pending, Running, Terminating, Failed etc.
|
||||
type: string
|
||||
ready:
|
||||
description: 'Ready is the state of the metal3. TODO : Document the
|
||||
variable : mhrivnak: " it would be good to document what this means,
|
||||
how to interpret it, under what circumstances the value changes,
|
||||
etc."'
|
||||
type: boolean
|
||||
renderedData:
|
||||
description: RenderedData is a reference to a rendered Metal3Data
|
||||
object containing the references to metaData and networkData secrets.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
userData:
|
||||
description: UserData references the Secret that holds user data needed
|
||||
by the bare metal operator. The Namespace is optional; it will default
|
||||
to the metal3machine's namespace if not specified.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: false
|
||||
subresources:
|
||||
status: {}
|
||||
- additionalPrinterColumns:
|
||||
- description: Provider ID
|
||||
jsonPath: .spec.providerID
|
||||
name: ProviderID
|
||||
type: string
|
||||
- description: metal3machine is Ready
|
||||
jsonPath: .status.ready
|
||||
name: Ready
|
||||
type: string
|
||||
- description: Cluster to which this M3Machine belongs
|
||||
jsonPath: .metadata.labels.cluster\.x-k8s\.io/cluster-name
|
||||
name: Cluster
|
||||
type: string
|
||||
- description: metal3machine current phase
|
||||
jsonPath: .status.phase
|
||||
name: Phase
|
||||
type: string
|
||||
name: v1alpha5
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3Machine is the Schema for the metal3machines API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3MachineSpec defines the desired state of Metal3Machine
|
||||
properties:
|
||||
automatedCleaningMode:
|
||||
default: metadata
|
||||
description: When set to disabled, automated cleaning of host disks
|
||||
will be skipped during provisioning and deprovisioning.
|
||||
enum:
|
||||
- metadata
|
||||
- disabled
|
||||
type: string
|
||||
dataTemplate:
|
||||
description: MetadataTemplate is a reference to a Metal3DataTemplate
|
||||
object containing a template of metadata to be rendered. Metadata
|
||||
keys defined in the metadataTemplate take precedence over keys defined
|
||||
in metadata field.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
hostSelector:
|
||||
description: HostSelector specifies matching criteria for labels on
|
||||
BareMetalHosts. This is used to limit the set of BareMetalHost objects
|
||||
considered for claiming for a metal3machine.
|
||||
properties:
|
||||
matchExpressions:
|
||||
description: Label match expressions that must be true on a chosen
|
||||
BareMetalHost
|
||||
items:
|
||||
properties:
|
||||
key:
|
||||
type: string
|
||||
operator:
|
||||
description: Operator represents a key/field's relationship
|
||||
to value(s). See labels.Requirement and fields.Requirement
|
||||
for more details.
|
||||
type: string
|
||||
values:
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
required:
|
||||
- key
|
||||
- operator
|
||||
- values
|
||||
type: object
|
||||
type: array
|
||||
matchLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Key/value pairs of labels that must exist on a chosen
|
||||
BareMetalHost
|
||||
type: object
|
||||
type: object
|
||||
image:
|
||||
description: Image is the image to be provisioned.
|
||||
properties:
|
||||
checksum:
|
||||
description: Checksum is a md5sum value or a URL to retrieve one.
|
||||
type: string
|
||||
checksumType:
|
||||
description: ChecksumType is the checksum algorithm for the image.
|
||||
e.g md5, sha256, sha512
|
||||
enum:
|
||||
- md5
|
||||
- sha256
|
||||
- sha512
|
||||
type: string
|
||||
format:
|
||||
description: DiskFormat contains the image disk format
|
||||
enum:
|
||||
- raw
|
||||
- qcow2
|
||||
- vdi
|
||||
- vmdk
|
||||
type: string
|
||||
url:
|
||||
description: URL is a location of an image to deploy.
|
||||
type: string
|
||||
required:
|
||||
- checksum
|
||||
- url
|
||||
type: object
|
||||
metaData:
|
||||
description: MetaData is an object storing the reference to the secret
|
||||
containing the Metadata given by the user.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
networkData:
|
||||
description: NetworkData is an object storing the reference to the
|
||||
secret containing the network data given by the user.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
providerID:
|
||||
description: ProviderID will be the Metal3 machine in ProviderID format
|
||||
(metal3://<bmh-uuid>)
|
||||
type: string
|
||||
userData:
|
||||
description: UserData references the Secret that holds user data needed
|
||||
by the bare metal operator. The Namespace is optional; it will default
|
||||
to the metal3machine's namespace if not specified.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
required:
|
||||
- image
|
||||
type: object
|
||||
status:
|
||||
description: Metal3MachineStatus defines the observed state of Metal3Machine
|
||||
properties:
|
||||
addresses:
|
||||
description: Addresses is a list of addresses assigned to the machine.
|
||||
This field is copied from the infrastructure provider reference.
|
||||
items:
|
||||
description: MachineAddress contains information for the node's
|
||||
address.
|
||||
properties:
|
||||
address:
|
||||
description: The machine address.
|
||||
type: string
|
||||
type:
|
||||
description: Machine address type, one of Hostname, ExternalIP
|
||||
or InternalIP.
|
||||
type: string
|
||||
required:
|
||||
- address
|
||||
- type
|
||||
type: object
|
||||
type: array
|
||||
failureMessage:
|
||||
description: "FailureMessage will be set in the event that there is
|
||||
a terminal problem reconciling the metal3machine and will contain
|
||||
a more verbose string suitable for logging and human consumption.
|
||||
\n This field should not be set for transitive errors that a controller
|
||||
faces that are expected to be fixed automatically over time (like
|
||||
service outages), but instead indicate that something is fundamentally
|
||||
wrong with the metal3machine's spec or the configuration of the
|
||||
controller, and that manual intervention is required. Examples of
|
||||
terminal errors would be invalid combinations of settings in the
|
||||
spec, values that are unsupported by the controller, or the responsible
|
||||
controller itself being critically misconfigured. \n Any transient
|
||||
errors that occur during the reconciliation of metal3machines can
|
||||
be added as events to the metal3machine object and/or logged in
|
||||
the controller's output."
|
||||
type: string
|
||||
failureReason:
|
||||
description: "FailureReason will be set in the event that there is
|
||||
a terminal problem reconciling the metal3machine and will contain
|
||||
a succinct value suitable for machine interpretation. \n This field
|
||||
should not be set for transitive errors that a controller faces
|
||||
that are expected to be fixed automatically over time (like service
|
||||
outages), but instead indicate that something is fundamentally wrong
|
||||
with the metal3machine's spec or the configuration of the controller,
|
||||
and that manual intervention is required. Examples of terminal errors
|
||||
would be invalid combinations of settings in the spec, values that
|
||||
are unsupported by the controller, or the responsible controller
|
||||
itself being critically misconfigured. \n Any transient errors that
|
||||
occur during the reconciliation of metal3machines can be added as
|
||||
events to the metal3machine object and/or logged in the controller's
|
||||
output."
|
||||
type: string
|
||||
lastUpdated:
|
||||
description: LastUpdated identifies when this status was last observed.
|
||||
format: date-time
|
||||
type: string
|
||||
metaData:
|
||||
description: MetaData is an object storing the reference to the secret
|
||||
containing the Metadata used to deploy the BareMetalHost.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
networkData:
|
||||
description: NetworkData is an object storing the reference to the
|
||||
secret containing the network data used to deploy the BareMetalHost.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
phase:
|
||||
description: Phase represents the current phase of machine actuation.
|
||||
E.g. Pending, Running, Terminating, Failed etc.
|
||||
type: string
|
||||
ready:
|
||||
description: 'Ready is the state of the metal3. TODO : Document the
|
||||
variable : mhrivnak: " it would be good to document what this means,
|
||||
how to interpret it, under what circumstances the value changes,
|
||||
etc."'
|
||||
type: boolean
|
||||
renderedData:
|
||||
description: RenderedData is a reference to a rendered Metal3Data
|
||||
object containing the references to metaData and networkData secrets.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead of
|
||||
an entire object, this string should contain a valid JSON/Go
|
||||
field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container within
|
||||
a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that triggered
|
||||
the event) or if no container name is specified "spec.containers[2]"
|
||||
(container with index 2 in this pod). This syntax is chosen
|
||||
only to have some well-defined way of referencing a part of
|
||||
an object. TODO: this design is not final and this field is
|
||||
subject to change in the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
userData:
|
||||
description: UserData references the Secret that holds user data needed
|
||||
by the bare metal operator. The Namespace is optional; it will default
|
||||
to the metal3machine's namespace if not specified.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference a
|
||||
secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which the secret
|
||||
name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
@ -0,0 +1,438 @@
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.0
|
||||
creationTimestamp: null
|
||||
name: metal3machinetemplates.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
group: infrastructure.cluster.x-k8s.io
|
||||
names:
|
||||
categories:
|
||||
- cluster-api
|
||||
kind: Metal3MachineTemplate
|
||||
listKind: Metal3MachineTemplateList
|
||||
plural: metal3machinetemplates
|
||||
shortNames:
|
||||
- m3mt
|
||||
- m3machinetemplate
|
||||
- m3machinetemplates
|
||||
- metal3mt
|
||||
- metal3machinetemplate
|
||||
singular: metal3machinetemplate
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1alpha4
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3MachineTemplate is the Schema for the metal3machinetemplates
|
||||
API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3MachineTemplateSpec defines the desired state of Metal3MachineTemplate
|
||||
properties:
|
||||
nodeReuse:
|
||||
default: false
|
||||
description: When set to True, CAPM3 Machine controller will pick
|
||||
the same pool of BMHs' that were released during the upgrade operation.
|
||||
type: boolean
|
||||
template:
|
||||
description: Metal3MachineTemplateResource describes the data needed
|
||||
to create a Metal3Machine from a template
|
||||
properties:
|
||||
spec:
|
||||
description: Spec is the specification of the desired behavior
|
||||
of the machine.
|
||||
properties:
|
||||
automatedCleaningMode:
|
||||
default: metadata
|
||||
description: When set to disabled, automated cleaning of host
|
||||
disks will be skipped during provisioning and deprovisioning.
|
||||
enum:
|
||||
- metadata
|
||||
- disabled
|
||||
type: string
|
||||
dataTemplate:
|
||||
description: MetadataTemplate is a reference to a Metal3DataTemplate
|
||||
object containing a template of metadata to be rendered.
|
||||
Metadata keys defined in the metadataTemplate take precedence
|
||||
over keys defined in metadata field.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead
|
||||
of an entire object, this string should contain a valid
|
||||
JSON/Go field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container
|
||||
within a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that
|
||||
triggered the event) or if no container name is specified
|
||||
"spec.containers[2]" (container with index 2 in this
|
||||
pod). This syntax is chosen only to have some well-defined
|
||||
way of referencing a part of an object. TODO: this design
|
||||
is not final and this field is subject to change in
|
||||
the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
hostSelector:
|
||||
description: HostSelector specifies matching criteria for
|
||||
labels on BareMetalHosts. This is used to limit the set
|
||||
of BareMetalHost objects considered for claiming for a metal3machine.
|
||||
properties:
|
||||
matchExpressions:
|
||||
description: Label match expressions that must be true
|
||||
on a chosen BareMetalHost
|
||||
items:
|
||||
properties:
|
||||
key:
|
||||
type: string
|
||||
operator:
|
||||
description: Operator represents a key/field's relationship
|
||||
to value(s). See labels.Requirement and fields.Requirement
|
||||
for more details.
|
||||
type: string
|
||||
values:
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
required:
|
||||
- key
|
||||
- operator
|
||||
- values
|
||||
type: object
|
||||
type: array
|
||||
matchLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Key/value pairs of labels that must exist
|
||||
on a chosen BareMetalHost
|
||||
type: object
|
||||
type: object
|
||||
image:
|
||||
description: Image is the image to be provisioned.
|
||||
properties:
|
||||
checksum:
|
||||
description: Checksum is a md5sum value or a URL to retrieve
|
||||
one. Not required for live-iso.
|
||||
type: string
|
||||
checksumType:
|
||||
description: ChecksumType is the checksum algorithm for
|
||||
the image. e.g md5, sha256, sha512
|
||||
enum:
|
||||
- md5
|
||||
- sha256
|
||||
- sha512
|
||||
type: string
|
||||
format:
|
||||
description: DiskFormat contains the image disk format.
|
||||
enum:
|
||||
- raw
|
||||
- qcow2
|
||||
- vdi
|
||||
- vmdk
|
||||
- live-iso
|
||||
type: string
|
||||
url:
|
||||
description: URL is a location of an image to deploy.
|
||||
type: string
|
||||
required:
|
||||
- url
|
||||
type: object
|
||||
metaData:
|
||||
description: MetaData is an object storing the reference to
|
||||
the secret containing the Metadata given by the user.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference
|
||||
a secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which
|
||||
the secret name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
networkData:
|
||||
description: NetworkData is an object storing the reference
|
||||
to the secret containing the network data given by the user.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference
|
||||
a secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which
|
||||
the secret name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
providerID:
|
||||
description: ProviderID will be the Metal3 machine in ProviderID
|
||||
format (metal3://<bmh-uuid>)
|
||||
type: string
|
||||
userData:
|
||||
description: UserData references the Secret that holds user
|
||||
data needed by the bare metal operator. The Namespace is
|
||||
optional; it will default to the metal3machine's namespace
|
||||
if not specified.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference
|
||||
a secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which
|
||||
the secret name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
required:
|
||||
- image
|
||||
type: object
|
||||
required:
|
||||
- spec
|
||||
type: object
|
||||
required:
|
||||
- template
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: false
|
||||
- name: v1alpha5
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Metal3MachineTemplate is the Schema for the metal3machinetemplates
|
||||
API
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Metal3MachineTemplateSpec defines the desired state of Metal3MachineTemplate
|
||||
properties:
|
||||
nodeReuse:
|
||||
default: false
|
||||
description: When set to True, CAPM3 Machine controller will pick
|
||||
the same pool of BMHs' that were released during the upgrade operation.
|
||||
type: boolean
|
||||
template:
|
||||
description: Metal3MachineTemplateResource describes the data needed
|
||||
to create a Metal3Machine from a template
|
||||
properties:
|
||||
spec:
|
||||
description: Spec is the specification of the desired behavior
|
||||
of the machine.
|
||||
properties:
|
||||
automatedCleaningMode:
|
||||
default: metadata
|
||||
description: When set to disabled, automated cleaning of host
|
||||
disks will be skipped during provisioning and deprovisioning.
|
||||
enum:
|
||||
- metadata
|
||||
- disabled
|
||||
type: string
|
||||
dataTemplate:
|
||||
description: MetadataTemplate is a reference to a Metal3DataTemplate
|
||||
object containing a template of metadata to be rendered.
|
||||
Metadata keys defined in the metadataTemplate take precedence
|
||||
over keys defined in metadata field.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: API version of the referent.
|
||||
type: string
|
||||
fieldPath:
|
||||
description: 'If referring to a piece of an object instead
|
||||
of an entire object, this string should contain a valid
|
||||
JSON/Go field access statement, such as desiredState.manifest.containers[2].
|
||||
For example, if the object reference is to a container
|
||||
within a pod, this would take on a value like: "spec.containers{name}"
|
||||
(where "name" refers to the name of the container that
|
||||
triggered the event) or if no container name is specified
|
||||
"spec.containers[2]" (container with index 2 in this
|
||||
pod). This syntax is chosen only to have some well-defined
|
||||
way of referencing a part of an object. TODO: this design
|
||||
is not final and this field is subject to change in
|
||||
the future.'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
|
||||
type: string
|
||||
namespace:
|
||||
description: 'Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/'
|
||||
type: string
|
||||
resourceVersion:
|
||||
description: 'Specific resourceVersion to which this reference
|
||||
is made, if any. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency'
|
||||
type: string
|
||||
uid:
|
||||
description: 'UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids'
|
||||
type: string
|
||||
type: object
|
||||
hostSelector:
|
||||
description: HostSelector specifies matching criteria for
|
||||
labels on BareMetalHosts. This is used to limit the set
|
||||
of BareMetalHost objects considered for claiming for a metal3machine.
|
||||
properties:
|
||||
matchExpressions:
|
||||
description: Label match expressions that must be true
|
||||
on a chosen BareMetalHost
|
||||
items:
|
||||
properties:
|
||||
key:
|
||||
type: string
|
||||
operator:
|
||||
description: Operator represents a key/field's relationship
|
||||
to value(s). See labels.Requirement and fields.Requirement
|
||||
for more details.
|
||||
type: string
|
||||
values:
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
required:
|
||||
- key
|
||||
- operator
|
||||
- values
|
||||
type: object
|
||||
type: array
|
||||
matchLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Key/value pairs of labels that must exist
|
||||
on a chosen BareMetalHost
|
||||
type: object
|
||||
type: object
|
||||
image:
|
||||
description: Image is the image to be provisioned.
|
||||
properties:
|
||||
checksum:
|
||||
description: Checksum is a md5sum value or a URL to retrieve
|
||||
one.
|
||||
type: string
|
||||
checksumType:
|
||||
description: ChecksumType is the checksum algorithm for
|
||||
the image. e.g md5, sha256, sha512
|
||||
enum:
|
||||
- md5
|
||||
- sha256
|
||||
- sha512
|
||||
type: string
|
||||
format:
|
||||
description: DiskFormat contains the image disk format
|
||||
enum:
|
||||
- raw
|
||||
- qcow2
|
||||
- vdi
|
||||
- vmdk
|
||||
type: string
|
||||
url:
|
||||
description: URL is a location of an image to deploy.
|
||||
type: string
|
||||
required:
|
||||
- checksum
|
||||
- url
|
||||
type: object
|
||||
metaData:
|
||||
description: MetaData is an object storing the reference to
|
||||
the secret containing the Metadata given by the user.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference
|
||||
a secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which
|
||||
the secret name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
networkData:
|
||||
description: NetworkData is an object storing the reference
|
||||
to the secret containing the network data given by the user.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference
|
||||
a secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which
|
||||
the secret name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
providerID:
|
||||
description: ProviderID will be the Metal3 machine in ProviderID
|
||||
format (metal3://<bmh-uuid>)
|
||||
type: string
|
||||
userData:
|
||||
description: UserData references the Secret that holds user
|
||||
data needed by the bare metal operator. The Namespace is
|
||||
optional; it will default to the metal3machine's namespace
|
||||
if not specified.
|
||||
properties:
|
||||
name:
|
||||
description: Name is unique within a namespace to reference
|
||||
a secret resource.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace defines the space within which
|
||||
the secret name must be unique.
|
||||
type: string
|
||||
type: object
|
||||
required:
|
||||
- image
|
||||
type: object
|
||||
required:
|
||||
- spec
|
||||
type: object
|
||||
required:
|
||||
- template
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
43
manifests/function/capm3/v0.5.0/crd/kustomization.yaml
Normal file
43
manifests/function/capm3/v0.5.0/crd/kustomization.yaml
Normal file
@ -0,0 +1,43 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
# This kustomization.yaml is not intended to be run by itself,
|
||||
# since it depends on service name and namespace that are out of this kustomize package.
|
||||
# It should be run by config/default
|
||||
|
||||
commonLabels:
|
||||
cluster.x-k8s.io/v1alpha3: v1alpha4
|
||||
cluster.x-k8s.io/v1alpha4: v1alpha5
|
||||
|
||||
resources:
|
||||
- bases/infrastructure.cluster.x-k8s.io_metal3clusters.yaml
|
||||
- bases/infrastructure.cluster.x-k8s.io_metal3machines.yaml
|
||||
- bases/infrastructure.cluster.x-k8s.io_metal3machinetemplates.yaml
|
||||
- bases/infrastructure.cluster.x-k8s.io_metal3datatemplates.yaml
|
||||
- bases/infrastructure.cluster.x-k8s.io_metal3datas.yaml
|
||||
- bases/infrastructure.cluster.x-k8s.io_metal3dataclaims.yaml
|
||||
# +kubebuilder:scaffold:crdkustomizeresource
|
||||
|
||||
patchesStrategicMerge:
|
||||
# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix.
|
||||
# patches here are for enabling the conversion webhook for each CRD
|
||||
- patches/webhook_in_metal3machines.yaml
|
||||
- patches/webhook_in_metal3clusters.yaml
|
||||
- patches/webhook_in_metal3machinetemplates.yaml
|
||||
- patches/webhook_in_metal3datatemplates.yaml
|
||||
- patches/webhook_in_metal3datas.yaml
|
||||
- patches/webhook_in_metal3dataclaims.yaml
|
||||
# +kubebuilder:scaffold:crdkustomizewebhookpatch
|
||||
|
||||
# [CERTMANAGER] To enable webhook, uncomment all the sections with [CERTMANAGER] prefix.
|
||||
# patches here are for enabling the CA injection for each CRD
|
||||
- patches/cainjection_in_metal3machines.yaml
|
||||
- patches/cainjection_in_metal3clusters.yaml
|
||||
- patches/cainjection_in_metal3machinetemplates.yaml
|
||||
- patches/cainjection_in_metal3datatemplates.yaml
|
||||
- patches/cainjection_in_metal3datas.yaml
|
||||
- patches/cainjection_in_metal3dataclaims.yaml
|
||||
# +kubebuilder:scaffold:crdkustomizecainjectionpatch
|
||||
|
||||
# the following config is for teaching kustomize how to do kustomization for CRDs.
|
||||
configurations:
|
||||
- kustomizeconfig.yaml
|
||||
17
manifests/function/capm3/v0.5.0/crd/kustomizeconfig.yaml
Normal file
17
manifests/function/capm3/v0.5.0/crd/kustomizeconfig.yaml
Normal file
@ -0,0 +1,17 @@
|
||||
# This file is for teaching kustomize how to substitute name and namespace reference in CRD
|
||||
nameReference:
|
||||
- kind: Service
|
||||
version: v1
|
||||
fieldSpecs:
|
||||
- kind: CustomResourceDefinition
|
||||
group: apiextensions.k8s.io
|
||||
path: spec/conversion/webhook/clientConfig/service/name
|
||||
|
||||
namespace:
|
||||
- kind: CustomResourceDefinition
|
||||
group: apiextensions.k8s.io
|
||||
path: spec/conversion/webhook/clientConfig/service/namespace
|
||||
create: false
|
||||
|
||||
varReference:
|
||||
- path: metadata/annotations
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: metal3clusters.infrastructure.cluster.x-k8s.io
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: metal3dataclaims.infrastructure.cluster.x-k8s.io
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: metal3datas.infrastructure.cluster.x-k8s.io
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: metal3datatemplates.infrastructure.cluster.x-k8s.io
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: metal3machines.infrastructure.cluster.x-k8s.io
|
||||
@ -0,0 +1,8 @@
|
||||
# The following patch adds a directive for certmanager to inject CA into the CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
name: metal3machinetemplates.infrastructure.cluster.x-k8s.io
|
||||
@ -0,0 +1,19 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: metal3clusters.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhook:
|
||||
conversionReviewVersions: ["v1", "v1beta1"]
|
||||
clientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,19 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: metal3dataclaims.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhook:
|
||||
conversionReviewVersions: ["v1", "v1beta1"]
|
||||
clientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,19 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: metal3datas.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhook:
|
||||
conversionReviewVersions: ["v1", "v1beta1"]
|
||||
clientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,19 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: metal3datatemplates.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhook:
|
||||
conversionReviewVersions: ["v1", "v1beta1"]
|
||||
clientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,19 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: metal3machines.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhook:
|
||||
conversionReviewVersions: ["v1", "v1beta1"]
|
||||
clientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
@ -0,0 +1,19 @@
|
||||
# The following patch enables conversion webhook for CRD
|
||||
# CRD conversion requires k8s 1.13 or later.
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
name: metal3machinetemplates.infrastructure.cluster.x-k8s.io
|
||||
spec:
|
||||
conversion:
|
||||
strategy: Webhook
|
||||
webhook:
|
||||
conversionReviewVersions: ["v1", "v1beta1"]
|
||||
clientConfig:
|
||||
# this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank,
|
||||
# but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager)
|
||||
caBundle: Cg==
|
||||
service:
|
||||
namespace: system
|
||||
name: webhook-service
|
||||
path: /convert
|
||||
2
manifests/function/capm3/v0.5.0/data/kustomization.yaml
Normal file
2
manifests/function/capm3/v0.5.0/data/kustomization.yaml
Normal file
@ -0,0 +1,2 @@
|
||||
resources:
|
||||
- metadata.yaml
|
||||
11
manifests/function/capm3/v0.5.0/data/metadata.yaml
Normal file
11
manifests/function/capm3/v0.5.0/data/metadata.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: clusterctl.cluster.x-k8s.io/v1alpha3
|
||||
kind: Metadata
|
||||
metadata:
|
||||
name: repository-metadata
|
||||
labels:
|
||||
airshipit.org/deploy-k8s: "false"
|
||||
releaseSeries:
|
||||
- major: 0
|
||||
minor: 5
|
||||
contract: v1alpha4
|
||||
@ -0,0 +1,49 @@
|
||||
# Adds namespace to all resources.
|
||||
namespace: capm3-system
|
||||
|
||||
resources:
|
||||
- namespace.yaml
|
||||
|
||||
bases:
|
||||
- ../../crd
|
||||
- ../../rbac
|
||||
- ../../manager
|
||||
- ../../webhook
|
||||
- ../../certmanager
|
||||
|
||||
patchesStrategicMerge:
|
||||
- manager_image_patch.yaml
|
||||
- manager_pull_policy_patch.yaml
|
||||
- manager_webhook_patch.yaml
|
||||
- webhookcainjection_patch.yaml
|
||||
|
||||
vars:
|
||||
- name: CERTIFICATE_NAMESPACE # namespace of the certificate CR
|
||||
objref:
|
||||
kind: Certificate
|
||||
group: cert-manager.io
|
||||
version: v1
|
||||
name: serving-cert # this name should match the one in certificate.yaml
|
||||
fieldref:
|
||||
fieldpath: metadata.namespace
|
||||
- name: CERTIFICATE_NAME
|
||||
objref:
|
||||
kind: Certificate
|
||||
group: cert-manager.io
|
||||
version: v1
|
||||
name: serving-cert # this name should match the one in certificate.yaml
|
||||
- name: SERVICE_NAMESPACE # namespace of the service
|
||||
objref:
|
||||
kind: Service
|
||||
version: v1
|
||||
name: webhook-service
|
||||
fieldref:
|
||||
fieldpath: metadata.namespace
|
||||
- name: SERVICE_NAME
|
||||
objref:
|
||||
kind: Service
|
||||
version: v1
|
||||
name: webhook-service
|
||||
|
||||
configurations:
|
||||
- kustomizeconfig.yaml
|
||||
@ -0,0 +1,4 @@
|
||||
# This configuration is for teaching kustomize how to update name ref and var substitution
|
||||
varReference:
|
||||
- kind: Deployment
|
||||
path: spec/template/spec/volumes/secret/secretName
|
||||
@ -0,0 +1,12 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
# Change the value of image field below to your controller image URL
|
||||
- image: quay.io/metal3-io/cluster-api-provider-metal3:master
|
||||
name: manager
|
||||
@ -0,0 +1,11 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
imagePullPolicy: IfNotPresent
|
||||
@ -0,0 +1,23 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: controller-manager
|
||||
namespace: system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
ports:
|
||||
- containerPort: 9443
|
||||
name: webhook-server
|
||||
protocol: TCP
|
||||
volumeMounts:
|
||||
- mountPath: /tmp/k8s-webhook-server/serving-certs
|
||||
name: cert
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: cert
|
||||
secret:
|
||||
defaultMode: 420
|
||||
secretName: $(SERVICE_NAME)-cert
|
||||
@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: capm3-system
|
||||
@ -0,0 +1,15 @@
|
||||
# This patch add annotation to admission webhook config and
|
||||
# the variables $(CERTIFICATE_NAMESPACE) and $(CERTIFICATE_NAME) will be substituted by kustomize.
|
||||
apiVersion: admissionregistration.k8s.io/v1
|
||||
kind: MutatingWebhookConfiguration
|
||||
metadata:
|
||||
name: mutating-webhook-configuration
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
---
|
||||
apiVersion: admissionregistration.k8s.io/v1
|
||||
kind: ValidatingWebhookConfiguration
|
||||
metadata:
|
||||
name: validating-webhook-configuration
|
||||
annotations:
|
||||
cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
|
||||
@ -0,0 +1,8 @@
|
||||
namePrefix: capm3-
|
||||
|
||||
commonLabels:
|
||||
cluster.x-k8s.io/provider: "infrastructure-metal3"
|
||||
|
||||
bases:
|
||||
- capm3
|
||||
- ../ipam
|
||||
12
manifests/function/capm3/v0.5.0/ipam/image_patch.yaml
Normal file
12
manifests/function/capm3/v0.5.0/ipam/image_patch.yaml
Normal file
@ -0,0 +1,12 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: ipam-controller-manager
|
||||
namespace: capm3-system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
# Change the value of image field below to your controller image URL
|
||||
- image: quay.io/metal3-io/ip-address-manager:v0.1.0
|
||||
name: manager
|
||||
10
manifests/function/capm3/v0.5.0/ipam/kustomization.yaml
Normal file
10
manifests/function/capm3/v0.5.0/ipam/kustomization.yaml
Normal file
@ -0,0 +1,10 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
|
||||
# When updating the release, update also the image tag in image_patch.yaml
|
||||
resources:
|
||||
- https://github.com/metal3-io/ip-address-manager/releases/download/v0.1.0/ipam-components.yaml
|
||||
|
||||
patchesStrategicMerge:
|
||||
- image_patch.yaml
|
||||
- pull_policy_patch.yaml
|
||||
11
manifests/function/capm3/v0.5.0/ipam/pull_policy_patch.yaml
Normal file
11
manifests/function/capm3/v0.5.0/ipam/pull_policy_patch.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: ipam-controller-manager
|
||||
namespace: capm3-system
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: manager
|
||||
imagePullPolicy: IfNotPresent
|
||||
3
manifests/function/capm3/v0.5.0/kustomization.yaml
Normal file
3
manifests/function/capm3/v0.5.0/kustomization.yaml
Normal file
@ -0,0 +1,3 @@
|
||||
bases:
|
||||
- default
|
||||
- data
|
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue
Block a user