github.com/alibaba/sealer@v0.8.6-0.20220430115802-37a2bdaa8173/applications/redis-operator/all-redis-operator-resources.yaml (about) 1 apiVersion: apps/v1 2 kind: Deployment 3 metadata: 4 labels: 5 app: redisoperator 6 name: redisoperator 7 spec: 8 replicas: 1 9 selector: 10 matchLabels: 11 app: redisoperator 12 strategy: 13 type: RollingUpdate 14 template: 15 metadata: 16 labels: 17 app: redisoperator 18 spec: 19 serviceAccountName: redisoperator 20 containers: 21 - image: quay.io/spotahome/redis-operator:v1.1.0 22 imagePullPolicy: IfNotPresent 23 name: app 24 securityContext: 25 readOnlyRootFilesystem: true 26 runAsNonRoot: true 27 runAsUser: 1000 28 resources: 29 limits: 30 cpu: 100m 31 memory: 50Mi 32 requests: 33 cpu: 10m 34 memory: 50Mi 35 restartPolicy: Always 36 --- 37 apiVersion: rbac.authorization.k8s.io/v1 38 kind: ClusterRoleBinding 39 metadata: 40 name: redisoperator 41 roleRef: 42 apiGroup: rbac.authorization.k8s.io 43 kind: ClusterRole 44 name: redisoperator 45 subjects: 46 - kind: ServiceAccount 47 name: redisoperator 48 namespace: default 49 --- 50 apiVersion: rbac.authorization.k8s.io/v1 51 kind: ClusterRole 52 metadata: 53 name: redisoperator 54 rules: 55 - apiGroups: 56 - databases.spotahome.com 57 resources: 58 - redisfailovers 59 - redisfailovers/finalizers 60 verbs: 61 - "*" 62 - apiGroups: 63 - apiextensions.k8s.io 64 resources: 65 - customresourcedefinitions 66 verbs: 67 - "*" 68 - apiGroups: 69 - "" 70 resources: 71 - pods 72 - services 73 - endpoints 74 - events 75 - configmaps 76 - persistentvolumeclaims 77 - persistentvolumeclaims/finalizers 78 verbs: 79 - "*" 80 - apiGroups: 81 - "" 82 resources: 83 - secrets 84 verbs: 85 - "get" 86 - apiGroups: 87 - apps 88 resources: 89 - deployments 90 - statefulsets 91 verbs: 92 - "*" 93 - apiGroups: 94 - policy 95 resources: 96 - poddisruptionbudgets 97 verbs: 98 - "*" 99 --- 100 apiVersion: v1 101 kind: ServiceAccount 102 metadata: 103 name: redisoperator