Skip to content

Commit

Permalink
Add kubectl and kustomize install artifacts for 1.4.1 (#715)
Browse files Browse the repository at this point in the history
Signed-off-by: Leo Christy Jesuraj <leojc@ca.ibm.com>
  • Loading branch information
leochr authored Dec 9, 2024
1 parent a5ac092 commit f0c79c3
Show file tree
Hide file tree
Showing 40 changed files with 19,105 additions and 0 deletions.
10 changes: 10 additions & 0 deletions deploy/releases/1.4.1/kubectl/readme.adoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@

== Installing WebSphere Liberty Operator with kubectl

The WebSphere Liberty Operator can be installed using Kubernetes command-line interface (CLI) (kubectl) to:

* watch own namespace
* watch another namespace
* watch all namespaces in the cluster

Follow the instructions in the link:++https://ibm.biz/wlo-install-kubectl++[documentation].
8,487 changes: 8,487 additions & 0 deletions deploy/releases/1.4.1/kubectl/websphereliberty-app-crd.yaml

Large diffs are not rendered by default.

380 changes: 380 additions & 0 deletions deploy/releases/1.4.1/kubectl/websphereliberty-app-operator.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,380 @@
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/instance: websphere-liberty-operator
app.kubernetes.io/name: websphere-liberty-operator
name: wlo-controller-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/instance: websphere-liberty-operator
app.kubernetes.io/name: websphere-liberty-operator
name: wlo-leader-election-role
rules:
- apiGroups:
- ""
- coordination.k8s.io
resources:
- configmaps
- leases
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/instance: websphere-liberty-operator
app.kubernetes.io/name: websphere-liberty-operator
name: wlo-manager-role
rules:
- apiGroups:
- apps
resources:
- deployments
- statefulsets
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- apps
resources:
- deployments/finalizers
- statefulsets
verbs:
- update
- apiGroups:
- autoscaling
resources:
- horizontalpodautoscalers
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- batch
resources:
- jobs
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- cert-manager.io
resources:
- certificates
- issuers
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- ""
resources:
- configmaps
- persistentvolumeclaims
- secrets
- serviceaccounts
- services
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- ""
resources:
- pods
- pods/exec
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- image.openshift.io
resources:
- imagestreams
- imagestreamtags
verbs:
- get
- list
- watch
- apiGroups:
- liberty.websphere.ibm.com
resources:
- webspherelibertyapplications
- webspherelibertyapplications/finalizers
- webspherelibertyapplications/status
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- liberty.websphere.ibm.com
resources:
- webspherelibertydumps
- webspherelibertydumps/finalizers
- webspherelibertydumps/status
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- liberty.websphere.ibm.com
resources:
- webspherelibertytraces
- webspherelibertytraces/finalizers
- webspherelibertytraces/status
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- monitoring.coreos.com
resources:
- servicemonitors
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
- networkpolicies
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- rolebindings
- roles
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- route.openshift.io
resources:
- routes
- routes/custom-host
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
- security.openshift.io
resourceNames:
- restricted
resources:
- securitycontextconstraints
verbs:
- use
- apiGroups:
- serving.knative.dev
resources:
- services
verbs:
- create
- delete
- get
- list
- update
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/instance: websphere-liberty-operator
app.kubernetes.io/name: websphere-liberty-operator
name: wlo-leader-election-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: wlo-leader-election-role
subjects:
- kind: ServiceAccount
name: wlo-controller-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/instance: websphere-liberty-operator
app.kubernetes.io/name: websphere-liberty-operator
name: wlo-manager-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: wlo-manager-role
subjects:
- kind: ServiceAccount
name: wlo-controller-manager
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app.kubernetes.io/instance: websphere-liberty-operator
app.kubernetes.io/name: websphere-liberty-operator
control-plane: controller-manager
name: wlo-controller-manager
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/instance: websphere-liberty-operator
app.kubernetes.io/name: websphere-liberty-operator
control-plane: controller-manager
template:
metadata:
annotations:
kubectl.kubernetes.io/default-container: manager
productChargedContainers: ALL
productID: cb1747ecb831410f88006195f024183f
productMetric: FREE
productName: WebSphere Liberty Operator
labels:
app.kubernetes.io/instance: websphere-liberty-operator
app.kubernetes.io/name: websphere-liberty-operator
control-plane: controller-manager
spec:
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: kubernetes.io/arch
operator: In
values:
- amd64
- ppc64le
- s390x
containers:
- args:
- --health-probe-bind-address=:8081
- --metrics-bind-address=127.0.0.1:8080
- --enable-leader-election
command:
- /manager
env:
- name: OPERATOR_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: WATCH_NAMESPACE
value: WEBSPHERE_LIBERTY_WATCH_NAMESPACE
- name: RELATED_IMAGE_LIBERTY_SAMPLE_APP
value: icr.io/appcafe/open-liberty/samples/getting-started@sha256:1ac4699f934128ed62da43b3720120d469e930458355152e547a574bb7b70c07
- name: RELATED_IMAGE_WEBSPHERE_LIBERTY_OPERATOR
value: icr.io/cpopen/websphere-liberty-operator@sha256:9b8bc5304e34218669734628ae59fbef2af5adfa412e2b9849c454df2bd89089
image: icr.io/cpopen/websphere-liberty-operator@sha256:9b8bc5304e34218669734628ae59fbef2af5adfa412e2b9849c454df2bd89089
livenessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 8081
scheme: HTTP
initialDelaySeconds: 90
periodSeconds: 30
successThreshold: 1
timeoutSeconds: 10
name: manager
readinessProbe:
failureThreshold: 3
httpGet:
path: /readyz
port: 8081
scheme: HTTP
initialDelaySeconds: 20
periodSeconds: 30
successThreshold: 1
timeoutSeconds: 10
resources:
limits:
cpu: 400m
memory: 1Gi
requests:
cpu: 200m
memory: 128Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
readOnlyRootFilesystem: true
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
hostIPC: false
hostNetwork: false
hostPID: false
securityContext:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
serviceAccountName: wlo-controller-manager
terminationGracePeriodSeconds: 10
Loading

0 comments on commit f0c79c3

Please sign in to comment.