apiVersion: v1 kind: ServiceAccount metadata: name: pgo-deployer-sa namespace: pgo --- kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: name: pgo-deployer-cr rules: - apiGroups: - '' resources: - namespaces verbs: - get - list - create - patch - delete - apiGroups: - '' resources: - pods verbs: - list - apiGroups: - '' resources: - secrets verbs: - get - create - delete - apiGroups: - '' resources: - configmaps - services - persistentvolumeclaims verbs: - get - create - delete - apiGroups: - '' resources: - serviceaccounts verbs: - get - create - delete - patch - apiGroups: - apps - extensions resources: - deployments verbs: - get - list - create - delete - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - get - create - delete - apiGroups: - rbac.authorization.k8s.io resources: - clusterroles - clusterrolebindings - roles - rolebindings verbs: - get - create - delete - bind - escalate - apiGroups: - rbac.authorization.k8s.io resources: - roles verbs: - create - delete - apiGroups: - batch resources: - jobs verbs: - delete - apiGroups: - crunchydata.com resources: - pgclusters - pgreplicas - pgpolicies - pgtasks verbs: - delete --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: pgo-deployer-crb roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: pgo-deployer-cr subjects: - kind: ServiceAccount name: pgo-deployer-sa namespace: pgo --- apiVersion: batch/v1 kind: Job metadata: name: pgo-deploy namespace: pgo spec: backoffLimit: 0 template: metadata: name: pgo-deploy spec: serviceAccountName: pgo-deployer-sa restartPolicy: Never containers: - name: pgo-deploy image: registry.developers.crunchydata.com/crunchydata/pgo-deployer:centos7-4.3.2 imagePullPolicy: IfNotPresent env: - name: ARCHIVE_MODE value: "true" - name: ARCHIVE_TIMEOUT value: "60" - name: BACKREST value: "true" - name: BADGER value: "false" - name: CRUNCHY_DEBUG value: "false" - name: CREATE_RBAC value: "true" - name: CCP_IMAGE_PREFIX value: "registry.developers.crunchydata.com/crunchydata" - name: CCP_IMAGE_TAG value: "centos7-12.3-4.3.2" - name: DB_PASSWORD_LENGTH value: "24" - name: DB_PORT value: "5432" - name: DB_REPLICAS value: "0" - name: DB_USER value: "testuser" - name: DEFAULT_INSTANCE_MEMORY value: "128Mi" - name: DEFAULT_PGBACKREST_MEMORY value: "" - name: DEFAULT_PGBOUNCER_MEMORY value: "" - name: DEPLOY_ACTION value: "install" - name: DISABLE_AUTO_FAILOVER value: "false" - name: DISABLE_FSGROUP value: "false" - name: DYNAMIC_RBAC value: "false" - name: EXPORTERPORT value: "9187" - name: METRICS value: "false" - name: NAMESPACE value: "pgo" - name: NAMESPACE_MODE value: "dynamic" - name: PGBADGERPORT value: "10000" - name: PGO_ADMIN_PASSWORD value: "password" - name: PGO_ADMIN_PERMS value: "*" - name: PGO_ADMIN_ROLE_NAME value: "pgoadmin" - name: PGO_ADMIN_USERNAME value: "admin" - name: PGO_CLIENT_VERSION value: "v4.3.2" - name: PGO_IMAGE_PREFIX value: "registry.developers.crunchydata.com/crunchydata" - name: PGO_IMAGE_TAG value: "centos7-4.3.2" - name: PGO_INSTALLATION_NAME value: "devtest" - name: PGO_OPERATOR_NAMESPACE value: "pgo" - name: SCHEDULER_TIMEOUT value: "3600" - name: BACKREST_STORAGE value: "hostpathstorage" - name: BACKUP_STORAGE value: "hostpathstorage" - name: PRIMARY_STORAGE value: "hostpathstorage" - name: REPLICA_STORAGE value: "hostpathstorage" - name: WAL_STORAGE value: "" - name: STORAGE1_NAME value: "hostpathstorage" - name: STORAGE1_ACCESS_MODE value: "ReadWriteMany" - name: STORAGE1_SIZE value: "1G" - name: STORAGE1_TYPE value: "create" - name: STORAGE2_NAME value: "replicastorage" - name: STORAGE2_ACCESS_MODE value: "ReadWriteMany" - name: STORAGE2_SIZE value: "700M" - name: STORAGE2_TYPE value: "create" - name: STORAGE3_NAME value: "nfsstorage" - name: STORAGE3_ACCESS_MODE value: "ReadWriteMany" - name: STORAGE3_SIZE value: "1G" - name: STORAGE3_TYPE value: "create" - name: STORAGE3_SUPPLEMENTAL_GROUPS value: "65534" - name: STORAGE4_NAME value: "nfsstoragered" - name: STORAGE4_ACCESS_MODE value: "ReadWriteMany" - name: STORAGE4_SIZE value: "1G" - name: STORAGE4_MATCH_LABEL value: "crunchyzone=red" - name: STORAGE4_TYPE value: "create" - name: STORAGE4_SUPPLEMENTAL_GROUPS value: "65534" - name: STORAGE5_NAME value: "storageos" - name: STORAGE5_ACCESS_MODE value: "ReadWriteOnce" - name: STORAGE5_SIZE value: "5Gi" - name: STORAGE5_TYPE value: "dynamic" - name: STORAGE5_CLASS value: "fast" - name: STORAGE6_NAME value: "primarysite" - name: STORAGE6_ACCESS_MODE value: "ReadWriteOnce" - name: STORAGE6_SIZE value: "4G" - name: STORAGE6_TYPE value: "dynamic" - name: STORAGE6_CLASS value: "primarysite" - name: STORAGE7_NAME value: "alternatesite" - name: STORAGE7_ACCESS_MODE value: "ReadWriteOnce" - name: STORAGE7_SIZE value: "4G" - name: STORAGE7_TYPE value: "dynamic" - name: STORAGE7_CLASS value: "alternatesite" - name: STORAGE8_NAME value: "gce" - name: STORAGE8_ACCESS_MODE value: "ReadWriteOnce" - name: STORAGE8_SIZE value: "300M" - name: STORAGE8_TYPE value: "dynamic" - name: STORAGE8_CLASS value: "standard" - name: STORAGE9_NAME value: "rook" - name: STORAGE9_ACCESS_MODE value: "ReadWriteOnce" - name: STORAGE9_SIZE value: "1Gi" - name: STORAGE9_TYPE value: "dynamic" - name: STORAGE9_CLASS value: "rook-ceph-block"