github.com/operator-framework/operator-lifecycle-manager@v0.30.0/deploy/upstream/manifests/0.7.2/0000_30_13-packageserver.yaml (about) 1 ##--- 2 # Source: olm/templates/0000_30_13-packageserver.yaml 3 apiVersion: apiregistration.k8s.io/v1beta1 4 kind: APIService 5 metadata: 6 name: v1alpha1.packages.apps.redhat.com 7 spec: 8 caBundle: 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 9 group: packages.apps.redhat.com 10 groupPriorityMinimum: 2000 11 versionPriority: 15 12 service: 13 name: package-server 14 namespace: olm 15 version: v1alpha1 16 --- 17 apiVersion: rbac.authorization.k8s.io/v1 18 kind: ClusterRoleBinding 19 metadata: 20 name: packagemanifest:system:auth-delegator 21 roleRef: 22 apiGroup: rbac.authorization.k8s.io 23 kind: ClusterRole 24 name: system:auth-delegator 25 subjects: 26 - kind: ServiceAccount 27 name: olm-operator-serviceaccount 28 namespace: olm 29 --- 30 apiVersion: rbac.authorization.k8s.io/v1 31 kind: RoleBinding 32 metadata: 33 name: packagemanifest-auth-reader 34 namespace: kube-system 35 roleRef: 36 apiGroup: rbac.authorization.k8s.io 37 kind: Role 38 name: extension-apiserver-authentication-reader 39 subjects: 40 - kind: ServiceAccount 41 name: olm-operator-serviceaccount 42 namespace: olm 43 --- 44 apiVersion: rbac.authorization.k8s.io/v1 45 kind: ClusterRoleBinding 46 metadata: 47 name: packagemanifest-view 48 roleRef: 49 apiGroup: rbac.authorization.k8s.io 50 kind: ClusterRole 51 name: admin 52 subjects: 53 - kind: ServiceAccount 54 name: olm-operator-serviceaccount 55 namespace: olm 56 --- 57 apiVersion: rbac.authorization.k8s.io/v1 58 kind: ClusterRoleBinding 59 metadata: 60 name: package-apiserver-clusterrolebinding 61 roleRef: 62 apiGroup: rbac.authorization.k8s.io 63 kind: ClusterRole 64 name: aggregated-apiserver-clusterrole 65 subjects: 66 - kind: ServiceAccount 67 name: olm-operator-serviceaccount 68 namespace: olm 69 --- 70 apiVersion: v1 71 kind: Secret 72 type: kubernetes.io/tls 73 metadata: 74 name: package-server-certs 75 namespace: olm 76 labels: 77 app: package-server 78 data: 79 tls.crt: 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 80 tls.key: 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 81 --- 82 apiVersion: apps/v1beta1 83 kind: Deployment 84 metadata: 85 name: package-server 86 namespace: olm 87 labels: 88 app: package-server 89 spec: 90 strategy: 91 type: RollingUpdate 92 replicas: 1 93 selector: 94 matchLabels: 95 app: package-server 96 template: 97 metadata: 98 labels: 99 app: package-server 100 spec: 101 serviceAccountName: olm-operator-serviceaccount 102 containers: 103 - name: package-server 104 command: 105 - /bin/package-server 106 - -v=4 107 - --global-namespace 108 - olm 109 - --debug 110 image: quay.io/coreos/olm@sha256:f3b170c8c1cd29c5452afd961e73bada7402623310290926c649cce0b4310470 111 imagePullPolicy: Always 112 ports: 113 - containerPort: 443 114 volumeMounts: 115 - name: certs 116 mountPath: /apiserver.local.config/certificates 117 readOnly: true 118 livenessProbe: 119 httpGet: 120 scheme: HTTPS 121 path: /healthz 122 port: 443 123 readinessProbe: 124 httpGet: 125 scheme: HTTPS 126 path: /healthz 127 port: 443 128 volumes: 129 - name: certs 130 secret: 131 secretName: package-server-certs 132 items: 133 - key: tls.crt 134 path: apiserver.crt 135 - key: tls.key 136 path: apiserver.key 137 imagePullSecrets: 138 - name: coreos-pull-secret 139 --- 140 apiVersion: v1 141 kind: Service 142 metadata: 143 name: package-server 144 namespace: olm 145 spec: 146 ports: 147 - port: 443 148 protocol: TCP 149 targetPort: 443 150 selector: 151 app: package-server