github.com/replicatedhq/ship@v0.55.0/integration/init/cockroach/expected/rendered.yaml (about) 1 apiVersion: v1 2 kind: ServiceAccount 3 metadata: 4 labels: 5 app: cockroachdb 6 name: cockroachdb 7 --- 8 apiVersion: rbac.authorization.k8s.io/v1beta1 9 kind: Role 10 metadata: 11 labels: 12 app: cockroachdb 13 name: cockroachdb 14 rules: 15 - apiGroups: 16 - "" 17 resources: 18 - secrets 19 verbs: 20 - create 21 - get 22 --- 23 apiVersion: rbac.authorization.k8s.io/v1beta1 24 kind: ClusterRole 25 metadata: 26 labels: 27 app: cockroachdb 28 name: cockroachdb 29 rules: 30 - apiGroups: 31 - certificates.k8s.io 32 resources: 33 - certificatesigningrequests 34 verbs: 35 - create 36 - get 37 - watch 38 --- 39 apiVersion: rbac.authorization.k8s.io/v1beta1 40 kind: RoleBinding 41 metadata: 42 labels: 43 app: cockroachdb 44 name: cockroachdb 45 roleRef: 46 apiGroup: rbac.authorization.k8s.io 47 kind: Role 48 name: cockroachdb 49 subjects: 50 - kind: ServiceAccount 51 name: cockroachdb 52 namespace: default 53 --- 54 apiVersion: rbac.authorization.k8s.io/v1beta1 55 kind: ClusterRoleBinding 56 metadata: 57 labels: 58 app: cockroachdb 59 name: cockroachdb 60 roleRef: 61 apiGroup: rbac.authorization.k8s.io 62 kind: ClusterRole 63 name: cockroachdb 64 subjects: 65 - kind: ServiceAccount 66 name: cockroachdb 67 namespace: default 68 --- 69 apiVersion: v1 70 kind: Service 71 metadata: 72 labels: 73 app: cockroachdb 74 name: cockroachdb-public 75 spec: 76 ports: 77 - name: grpc 78 port: 26257 79 targetPort: 26257 80 - name: http 81 port: 8080 82 targetPort: 8080 83 selector: 84 app: cockroachdb 85 --- 86 apiVersion: v1 87 kind: Service 88 metadata: 89 annotations: 90 prometheus.io/path: _status/vars 91 prometheus.io/port: "8080" 92 prometheus.io/scrape: "true" 93 service.alpha.kubernetes.io/tolerate-unready-endpoints: "true" 94 labels: 95 app: cockroachdb 96 name: cockroachdb 97 spec: 98 clusterIP: None 99 ports: 100 - name: grpc 101 port: 26257 102 targetPort: 26257 103 - name: http 104 port: 8080 105 targetPort: 8080 106 selector: 107 app: cockroachdb 108 --- 109 apiVersion: apps/v1beta1 110 kind: StatefulSet 111 metadata: 112 name: cockroachdb 113 spec: 114 replicas: 3 115 serviceName: cockroachdb 116 template: 117 metadata: 118 labels: 119 app: cockroachdb 120 spec: 121 affinity: 122 podAntiAffinity: 123 preferredDuringSchedulingIgnoredDuringExecution: 124 - podAffinityTerm: 125 labelSelector: 126 matchExpressions: 127 - key: app 128 operator: In 129 values: 130 - cockroachdb 131 topologyKey: kubernetes.io/hostname 132 weight: 100 133 containers: 134 - command: 135 - /bin/bash 136 - -ecx 137 - exec /cockroach/cockroach start --logtostderr --certs-dir /cockroach/cockroach-certs --host $(hostname -f) --http-host 0.0.0.0 --join cockroachdb-0.cockroachdb,cockroachdb-1.cockroachdb,cockroachdb-2.cockroachdb --cache 25% --max-sql-memory 25% 138 image: cockroachdb/cockroach:v1.1.5 139 imagePullPolicy: IfNotPresent 140 name: cockroachdb 141 ports: 142 - containerPort: 26257 143 name: grpc 144 - containerPort: 8080 145 name: http 146 volumeMounts: 147 - mountPath: /cockroach/cockroach-data 148 name: datadir 149 - mountPath: /cockroach/cockroach-certs 150 name: certs 151 initContainers: 152 - command: 153 - /bin/ash 154 - -ecx 155 - /request-cert -namespace=${POD_NAMESPACE} -certs-dir=/cockroach-certs -type=node -addresses=localhost,127.0.0.1,${POD_IP},$(hostname -f),$(hostname -f|cut -f 1-2 -d '.'),cockroachdb-public -symlink-ca-from=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt 156 env: 157 - name: POD_IP 158 valueFrom: 159 fieldRef: 160 fieldPath: status.podIP 161 - name: POD_NAMESPACE 162 valueFrom: 163 fieldRef: 164 fieldPath: metadata.namespace 165 image: cockroachdb/cockroach-k8s-request-cert:0.2 166 imagePullPolicy: IfNotPresent 167 name: init-certs 168 volumeMounts: 169 - mountPath: /cockroach-certs 170 name: certs 171 serviceAccountName: cockroachdb 172 terminationGracePeriodSeconds: 60 173 volumes: 174 - name: datadir 175 persistentVolumeClaim: 176 claimName: datadir 177 - emptyDir: {} 178 name: certs 179 updateStrategy: 180 type: RollingUpdate 181 volumeClaimTemplates: 182 - metadata: 183 name: datadir 184 spec: 185 accessModes: 186 - ReadWriteOnce 187 resources: 188 requests: 189 storage: 1Gi 190 --- 191 apiVersion: policy/v1beta1 192 kind: PodDisruptionBudget 193 metadata: 194 labels: 195 app: cockroachdb 196 name: cockroachdb-budget 197 spec: 198 maxUnavailable: 1 199 selector: 200 matchLabels: 201 app: cockroachdb