204 lines
4.8 KiB
YAML
204 lines
4.8 KiB
YAML
apiVersion: apiextensions.k8s.io/v1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
name: minioinstances.operator.min.io
|
|
spec:
|
|
group: operator.min.io
|
|
scope: Namespaced
|
|
names:
|
|
kind: MinIOInstance
|
|
singular: minioinstance
|
|
plural: minioinstances
|
|
versions:
|
|
- name: v1
|
|
served: true
|
|
storage: true
|
|
schema:
|
|
# openAPIV3Schema is the schema for validating custom objects.
|
|
# Refer https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#specifying-a-structural-schema
|
|
# for more details
|
|
openAPIV3Schema:
|
|
type: object
|
|
properties:
|
|
spec:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
properties:
|
|
replicas:
|
|
type: integer
|
|
minimum: 1
|
|
maximum: 32
|
|
image:
|
|
type: string
|
|
serviceName:
|
|
type: string
|
|
volumesPerServer:
|
|
type: integer
|
|
mountPath:
|
|
type: string
|
|
podManagementPolicy:
|
|
type: string
|
|
enum: [Parallel, OrderedReady]
|
|
default: Parallel
|
|
requestAutoCert:
|
|
type: boolean
|
|
default: false
|
|
version:
|
|
type: string
|
|
mountpath:
|
|
type: string
|
|
subpath:
|
|
type: string
|
|
mcs:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
properties:
|
|
image:
|
|
type: string
|
|
replicas:
|
|
type: integer
|
|
default: 2
|
|
mcsSecret:
|
|
type: object
|
|
properties:
|
|
name:
|
|
type: string
|
|
kes:
|
|
type: object
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
properties:
|
|
image:
|
|
type: string
|
|
replicas:
|
|
type: integer
|
|
default: 2
|
|
kesSecret:
|
|
type: object
|
|
properties:
|
|
name:
|
|
type: string
|
|
status:
|
|
type: object
|
|
properties:
|
|
currentState:
|
|
type: string
|
|
subresources:
|
|
# status enables the status subresource.
|
|
status: {}
|
|
additionalPrinterColumns:
|
|
- name: Current State
|
|
type: string
|
|
jsonPath: ".status.currentState"
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: minio-operator-role
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- namespaces
|
|
- secrets
|
|
- pods
|
|
- services
|
|
- events
|
|
verbs:
|
|
- get
|
|
- watch
|
|
- create
|
|
- list
|
|
- delete
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- statefulsets
|
|
- deployments
|
|
verbs:
|
|
- get
|
|
- create
|
|
- list
|
|
- patch
|
|
- watch
|
|
- update
|
|
- delete
|
|
- apiGroups:
|
|
- batch
|
|
resources:
|
|
- jobs
|
|
verbs:
|
|
- get
|
|
- create
|
|
- list
|
|
- patch
|
|
- watch
|
|
- update
|
|
- delete
|
|
- apiGroups:
|
|
- "certificates.k8s.io"
|
|
resources:
|
|
- "certificatesigningrequests"
|
|
- "certificatesigningrequests/approval"
|
|
- "certificatesigningrequests/status"
|
|
verbs:
|
|
- update
|
|
- create
|
|
- get
|
|
- delete
|
|
- apiGroups:
|
|
- operator.min.io
|
|
resources:
|
|
- "*"
|
|
verbs:
|
|
- "*"
|
|
- apiGroups:
|
|
- min.io
|
|
resources:
|
|
- "*"
|
|
verbs:
|
|
- "*"
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: minio-operator
|
|
namespace: default
|
|
---
|
|
kind: ClusterRoleBinding
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
metadata:
|
|
name: minio-operator-binding
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: minio-operator-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: minio-operator
|
|
namespace: default
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: minio-operator
|
|
namespace: default
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
name: minio-operator
|
|
template:
|
|
metadata:
|
|
labels:
|
|
name: minio-operator
|
|
spec:
|
|
serviceAccountName: minio-operator
|
|
containers:
|
|
- name: minio-operator
|
|
image: minio/k8s-operator:2.0.9
|
|
imagePullPolicy: IfNotPresent
|
|
# To specify cluster domain, un comment the following:
|
|
# env:
|
|
# - name: CLUSTER_DOMAIN
|
|
# value: mycluster.mydomain
|