91 lines
1.7 KiB
YAML
91 lines
1.7 KiB
YAML
|
---
|
||
|
apiVersion: v1
|
||
|
kind: ServiceAccount
|
||
|
metadata:
|
||
|
name: kubernetes-replicator
|
||
|
namespace: kube-system
|
||
|
---
|
||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
kind: ClusterRole
|
||
|
metadata:
|
||
|
name: kubernetes-replicator
|
||
|
rules:
|
||
|
- apiGroups: ["", "apps", "extensions"]
|
||
|
resources:
|
||
|
- secrets
|
||
|
- configmaps
|
||
|
- roles
|
||
|
- rolebindings
|
||
|
- cronjobs
|
||
|
- deployments
|
||
|
- events
|
||
|
- ingresses
|
||
|
- jobs
|
||
|
- pods
|
||
|
- pods/attach
|
||
|
- pods/exec
|
||
|
- pods/log
|
||
|
- pods/portforward
|
||
|
- services
|
||
|
verbs: ["*"]
|
||
|
- apiGroups: ["batch"]
|
||
|
resources:
|
||
|
- configmaps
|
||
|
- cronjobs
|
||
|
- deployments
|
||
|
- events
|
||
|
- ingresses
|
||
|
- jobs
|
||
|
- pods
|
||
|
- pods/attach
|
||
|
- pods/exec
|
||
|
- pods/log
|
||
|
- pods/portforward
|
||
|
- services
|
||
|
verbs: ["*"]
|
||
|
---
|
||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
kind: ClusterRoleBinding
|
||
|
metadata:
|
||
|
name: kubernetes-replicator
|
||
|
roleRef:
|
||
|
apiGroup: rbac.authorization.k8s.io
|
||
|
kind: ClusterRole
|
||
|
name: kubernetes-replicator
|
||
|
subjects:
|
||
|
- kind: ServiceAccount
|
||
|
name: kubernetes-replicator
|
||
|
namespace: kube-system
|
||
|
---
|
||
|
apiVersion: source.toolkit.fluxcd.io/v1beta2
|
||
|
kind: HelmRepository
|
||
|
metadata:
|
||
|
name: mittwald
|
||
|
namespace: flux-system
|
||
|
spec:
|
||
|
url: https://helm.mittwald.de
|
||
|
interval: 1h
|
||
|
---
|
||
|
apiVersion: helm.toolkit.fluxcd.io/v2beta1
|
||
|
kind: HelmRelease
|
||
|
metadata:
|
||
|
name: kubernetes-replicator
|
||
|
namespace: kube-system
|
||
|
spec:
|
||
|
interval: 5m
|
||
|
chart:
|
||
|
spec:
|
||
|
chart: kubernetes-replicator
|
||
|
sourceRef:
|
||
|
kind: HelmRepository
|
||
|
name: mittwald
|
||
|
namespace: flux-system
|
||
|
install:
|
||
|
createNamespace: false
|
||
|
upgrade:
|
||
|
disableWait: false
|
||
|
values:
|
||
|
serviceAccount:
|
||
|
create: false
|
||
|
name: kubernetes-replicator
|