github.com/myhau/pulumi/pkg/v3@v3.70.2-0.20221116134521-f2775972e587/codegen/testing/test/testdata/kubernetes-operator-pp/kubernetes-operator.pp (about) 1 resource pulumi_kubernetes_operatorDeployment "kubernetes:apps/v1:Deployment" { 2 apiVersion = "apps/v1" 3 kind = "Deployment" 4 metadata = { 5 name = "pulumi-kubernetes-operator" 6 } 7 spec = { 8 # Currently only 1 replica supported, until leader election: https://github.com/pulumi/pulumi-kubernetes-operator/issues/33 9 replicas = 1 10 selector = { 11 matchLabels = { 12 name = "pulumi-kubernetes-operator" 13 } 14 } 15 template = { 16 metadata = { 17 labels = { 18 name = "pulumi-kubernetes-operator" 19 } 20 } 21 spec = { 22 serviceAccountName = "pulumi-kubernetes-operator" 23 imagePullSecrets = [ 24 { 25 name = "pulumi-kubernetes-operator" 26 } 27 ] 28 containers = [ 29 { 30 name = "pulumi-kubernetes-operator" 31 image = "pulumi/pulumi-kubernetes-operator:v0.0.2" 32 command = [ 33 "pulumi-kubernetes-operator" 34 ] 35 args = [ 36 "--zap-level=debug" 37 ] 38 imagePullPolicy = "Always" 39 env = [ 40 { 41 name = "WATCH_NAMESPACE" 42 valueFrom = { 43 fieldRef = { 44 fieldPath = "metadata.namespace" 45 } 46 } 47 }, 48 { 49 name = "POD_NAME" 50 valueFrom = { 51 fieldRef = { 52 fieldPath = "metadata.name" 53 } 54 } 55 }, 56 { 57 name = "OPERATOR_NAME" 58 value = "pulumi-kubernetes-operator" 59 } 60 ] 61 } 62 ] 63 } 64 } 65 } 66 } 67 68 resource pulumi_kubernetes_operatorRole "kubernetes:rbac.authorization.k8s.io/v1:Role" { 69 apiVersion = "rbac.authorization.k8s.io/v1" 70 kind = "Role" 71 metadata = { 72 creationTimestamp = null 73 name = "pulumi-kubernetes-operator" 74 } 75 rules = [ 76 { 77 apiGroups = [ 78 "" 79 ] 80 resources = [ 81 "pods", 82 "services", 83 "services/finalizers", 84 "endpoints", 85 "persistentvolumeclaims", 86 "events", 87 "configmaps", 88 "secrets" 89 ] 90 verbs = [ 91 "create", 92 "delete", 93 "get", 94 "list", 95 "patch", 96 "update", 97 "watch" 98 ] 99 }, 100 { 101 apiGroups = [ 102 "apps" 103 ] 104 resources = [ 105 "deployments", 106 "daemonsets", 107 "replicasets", 108 "statefulsets" 109 ] 110 verbs = [ 111 "create", 112 "delete", 113 "get", 114 "list", 115 "patch", 116 "update", 117 "watch" 118 ] 119 }, 120 { 121 apiGroups = [ 122 "monitoring.coreos.com" 123 ] 124 resources = [ 125 "servicemonitors" 126 ] 127 verbs = [ 128 "get", 129 "create" 130 ] 131 }, 132 { 133 apiGroups = [ 134 "apps" 135 ] 136 resourceNames = [ 137 "pulumi-kubernetes-operator" 138 ] 139 resources = [ 140 "deployments/finalizers" 141 ] 142 verbs = [ 143 "update" 144 ] 145 }, 146 { 147 apiGroups = [ 148 "" 149 ] 150 resources = [ 151 "pods" 152 ] 153 verbs = [ 154 "get" 155 ] 156 }, 157 { 158 apiGroups = [ 159 "apps" 160 ] 161 resources = [ 162 "replicasets", 163 "deployments" 164 ] 165 verbs = [ 166 "get" 167 ] 168 }, 169 { 170 apiGroups = [ 171 "pulumi.com" 172 ] 173 resources = [ 174 "*" 175 ] 176 verbs = [ 177 "create", 178 "delete", 179 "get", 180 "list", 181 "patch", 182 "update", 183 "watch" 184 ] 185 } 186 ] 187 } 188 189 resource pulumi_kubernetes_operatorRoleBinding "kubernetes:rbac.authorization.k8s.io/v1:RoleBinding" { 190 kind = "RoleBinding" 191 apiVersion = "rbac.authorization.k8s.io/v1" 192 metadata = { 193 name = "pulumi-kubernetes-operator" 194 } 195 subjects = [ 196 { 197 kind = "ServiceAccount" 198 name = "pulumi-kubernetes-operator" 199 } 200 ] 201 roleRef = { 202 kind = "Role" 203 name = "pulumi-kubernetes-operator" 204 apiGroup = "rbac.authorization.k8s.io" 205 } 206 } 207 208 resource pulumi_kubernetes_operatorServiceAccount "kubernetes:core/v1:ServiceAccount" { 209 apiVersion = "v1" 210 kind = "ServiceAccount" 211 metadata = { 212 name = "pulumi-kubernetes-operator" 213 } 214 }