github.com/operator-framework/operator-lifecycle-manager@v0.30.0/deploy/upstream/manifests/0.7.4/0000_30_13-packageserver.yaml (about)

     1  ##---
     2  # Source: olm/templates/0000_30_13-packageserver.yaml
     3  apiVersion: apiregistration.k8s.io/v1beta1
     4  kind: APIService
     5  metadata:
     6    name: v1alpha1.packages.apps.redhat.com
     7  spec:
     8    caBundle: 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
     9    group: packages.apps.redhat.com
    10    groupPriorityMinimum: 2000
    11    versionPriority: 15
    12    service:
    13      name: package-server
    14      namespace: olm
    15    version: v1alpha1
    16  ---
    17  apiVersion: rbac.authorization.k8s.io/v1
    18  kind: ClusterRoleBinding
    19  metadata:
    20    name: packagemanifest:system:auth-delegator
    21  roleRef:
    22    apiGroup: rbac.authorization.k8s.io
    23    kind: ClusterRole
    24    name: system:auth-delegator
    25  subjects:
    26  - kind: ServiceAccount
    27    name: olm-operator-serviceaccount
    28    namespace: olm
    29  ---
    30  apiVersion: rbac.authorization.k8s.io/v1
    31  kind: RoleBinding
    32  metadata:
    33    name: packagemanifest-auth-reader
    34    namespace: kube-system
    35  roleRef:
    36    apiGroup: rbac.authorization.k8s.io
    37    kind: Role
    38    name: extension-apiserver-authentication-reader
    39  subjects:
    40  - kind: ServiceAccount
    41    name: olm-operator-serviceaccount
    42    namespace: olm
    43  ---
    44  apiVersion: rbac.authorization.k8s.io/v1
    45  kind: ClusterRoleBinding
    46  metadata:
    47    name: packagemanifest-view
    48  roleRef:
    49    apiGroup: rbac.authorization.k8s.io
    50    kind: ClusterRole
    51    name: admin
    52  subjects:
    53  - kind: ServiceAccount
    54    name: olm-operator-serviceaccount
    55    namespace: olm
    56  ---
    57  apiVersion: rbac.authorization.k8s.io/v1
    58  kind: ClusterRoleBinding
    59  metadata:
    60    name: package-apiserver-clusterrolebinding
    61  roleRef:
    62    apiGroup: rbac.authorization.k8s.io
    63    kind: ClusterRole
    64    name: aggregated-apiserver-clusterrole
    65  subjects:
    66  - kind: ServiceAccount
    67    name: olm-operator-serviceaccount
    68    namespace: olm
    69  ---
    70  apiVersion: v1
    71  kind: Secret
    72  type: kubernetes.io/tls
    73  metadata:
    74    name: package-server-certs
    75    namespace: olm
    76    labels:
    77      app: package-server
    78  data:
    79    tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURKakNDQWc2Z0F3SUJBZ0lCQVRBTkJna3Foa2lHOXcwQkFRc0ZBREFjTVJvd0dBWURWUVFERXhGd1lXTnIKWVdkbExYTmxjblpsY2kxallUQWVGdzB4T0RFd01Ua3hPRFEyTlRSYUZ3MHhPVEV3TVRreE9EUTJOVFJhTUJreApGekFWQmdOVkJBTVREbkJoWTJ0aFoyVXRjMlZ5ZG1WeU1JSUJJakFOQmdrcWhraUc5dzBCQVFFRkFBT0NBUThBCk1JSUJDZ0tDQVFFQW5Ndk52MjZTcTlqeHJPNytOKzY1eDhoSFhFM0h2NnlERUlUYmo4ejFZRHVrL1FKc0VNOHYKOHp1ZThPYWtMT0hvek9qTk85T2RuZWVWNW9pUnl5K0I5ZmRDUWQ5WU9SeUpZZkw1ZFMrUS9UVXNDVFQ3RTFYUApQYnErcmkxTERLUjZWcEFpZGpDV01wbjl4UVNyM1ppN1FuK3NGUUxHS3pkZkhiTmlmYmlXcHlqc3JoM2N0NEVUCjNPSDJRZHRDZitJQVd0N0FrRDZQOWNLMTE2Rlc0RkJsTVdLTFZNd3l3Q3VER0FBV0NCUG5nLzlKbStLNkorR0gKWnk3dnMxRkFpamU3Vjdsa25GM1M4aUJNL09lTVVlVk53Tmx4YzJzYVh6ZlVxUlZySlJFMkFudWJHanA5QndnawpvdXNKY0RYYkRpUFQxNHNKNkVqN2htRTVPbWVxUjA1bm53SURBUUFCbzNZd2REQU9CZ05WSFE4QkFmOEVCQU1DCkJhQXdIUVlEVlIwbEJCWXdGQVlJS3dZQkJRVUhBd0VHQ0NzR0FRVUZCd01DTUF3R0ExVWRFd0VCL3dRQ01BQXcKTlFZRFZSMFJCQzR3TElJU2NHRmphMkZuWlMxelpYSjJaWEl1YjJ4dGdoWndZV05yWVdkbExYTmxjblpsY2k1dgpiRzB1YzNaak1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQkFRQUREN2YzU3lJOXc4REZ3dUdUU0RJWE1ldDBVTzVMCjBYU0czcEZzbW9jVHNrSDdJUGc3ZXFIanI4cmNjajVZUGUvVENBL2hDcjY4N21KM3dQcVpnYklmZnA1cUMzQVQKVGtHNmlWNU1OZVdUNUlLYWF1cE1GVkNTWkNzZ3hHWlhNNzJWOU9lNFJWcUl0SCtlajNOOHI1U1ZRVmI4OUExdQpTaTRKeS9qeVpJaDY2b1k1RCtwQmFYTlhLbkRCWmlaQ0NINjNHc1hUblk4Z0dGVE1lYkIvbXNFTTl2WnNrZTNMCmsvVW9FUHdLWmVqQmNVd1E3ZjRJdEVaZyt6M2FabU1OUkxnc3QwTlJyNHpLbkNzMzVpUEl1UURHVFhrZ1puMWQKMWhvcnZJcyt0NjIvalpmYms5c1VvZk91YjAyL3dIcXFwcDN4MEtkcHp5S05KbmNpTVh3Y0V0aFUKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
    80    tls.key: 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
    81  ---
    82  apiVersion: apps/v1beta1
    83  kind: Deployment
    84  metadata:
    85    name: package-server
    86    namespace: olm
    87    labels:
    88      app: package-server
    89  spec:
    90    strategy:
    91      type: RollingUpdate
    92    replicas: 1
    93    selector:
    94      matchLabels:
    95        app: package-server
    96    template:
    97      metadata:
    98        labels:
    99          app: package-server
   100      spec:
   101        serviceAccountName: olm-operator-serviceaccount
   102        containers:
   103        - name: package-server
   104          command:
   105          - /bin/package-server
   106          - -v=4
   107          - --secure-port=5443
   108          - --global-namespace
   109          - olm
   110          image: quay.io/coreos/olm@sha256:3f3909a6bdf6f4bf429e114832c8cfc03c731f9403b91417d5dc246ad0448772
   111          imagePullPolicy: Always
   112          ports:
   113          - containerPort: 5443
   114          volumeMounts:
   115          - name: certs
   116            mountPath: /apiserver.local.config/certificates
   117            readOnly: true
   118          livenessProbe:
   119              httpGet:
   120                scheme: HTTPS
   121                path: /healthz
   122                port: 5443
   123          readinessProbe:
   124              httpGet:
   125                scheme: HTTPS
   126                path: /healthz
   127                port: 5443
   128        volumes:
   129        - name: certs
   130          secret:
   131            secretName: package-server-certs
   132            items:
   133            - key: tls.crt
   134              path: apiserver.crt
   135            - key: tls.key
   136              path: apiserver.key
   137        imagePullSecrets:
   138          - name: coreos-pull-secret
   139  ---
   140  apiVersion: v1
   141  kind: Service
   142  metadata:
   143    name: package-server
   144    namespace: olm
   145  spec:
   146    ports:
   147    - port: 443
   148      protocol: TCP
   149      targetPort: 5443
   150    selector:
   151      app: package-server