Skip to content

Commit 819fd1c

Browse files
duanmengkkduanmengkk
authored
Merge pull request kosmos-io#717 from yuleichun-striving/main
add some codes for kosmos helm
2 parents d2c16e1 + 9b09586 commit 819fd1c

11 files changed

+1206
-0
lines changed

‎charts/kosmos/Chart.yaml

+29
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
apiVersion: v2
2+
name: kosmos-charts
3+
description: A Helm chart for Kosmos
4+
5+
# A chart can be either an 'application' or a 'library' chart.
6+
#
7+
# Application charts are a collection of templates that can be packaged into versioned archives
8+
# to be deployed.
9+
#
10+
# Library charts provide useful utilities or functions for the chart developer. They're included as
11+
# a dependency of application charts to inject those utilities and functions into the rendering
12+
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
13+
type: application
14+
15+
# The optional kubeVersion field can define semver constraints on supported Kubernetes versions.
16+
# Helm will validate the version constraints when installing the chart and fail if the cluster
17+
# runs an unsupported Kubernetes version.
18+
kubeVersion: ">= 1.16.0-0"
19+
20+
# This is the chart version. This version number should be incremented each time you make changes
21+
# to the chart and its templates, including the app version.
22+
# Versions are expected to follow Semantic Versioning (https://semver.org/)
23+
version: 0.0.0
24+
25+
# This is the version number of the application being deployed. This version number should be
26+
# incremented each time you make changes to the application. Versions are not expected to
27+
# follow Semantic Versioning. They should reflect the version the application is using.
28+
# It is recommended to use it with quotes.
29+
appVersion: latest

‎charts/kosmos/templates/01-serviceaccount.yaml

+35
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
apiVersion: v1
2+
kind: ServiceAccount
3+
metadata:
4+
name: clustertree
5+
namespace: {{ .Values.global.namespace }}
6+
---
7+
apiVersion: v1
8+
kind: ServiceAccount
9+
metadata:
10+
name: kosmos-operator
11+
namespace: {{ .Values.global.namespace }}
12+
---
13+
apiVersion: v1
14+
kind: ServiceAccount
15+
metadata:
16+
name: kosmos-scheduler
17+
namespace: {{ .Values.global.namespace }}
18+
---
19+
apiVersion: v1
20+
kind: ServiceAccount
21+
metadata:
22+
name: clusterlink-controller-manager
23+
namespace: {{ .Values.global.namespace }}
24+
---
25+
apiVersion: v1
26+
kind: ServiceAccount
27+
metadata:
28+
name: clusterlink-elector
29+
namespace: {{ .Values.global.namespace }}
30+
---
31+
apiVersion: v1
32+
kind: ServiceAccount
33+
metadata:
34+
name: clusterlink-network-manager
35+
namespace: {{ .Values.global.namespace }}

‎charts/kosmos/templates/02-clusterrole.yaml

+234
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,234 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
name: clustertree
5+
rules:
6+
- apiGroups:
7+
- '*'
8+
resources:
9+
- '*'
10+
verbs:
11+
- '*'
12+
- nonResourceURLs:
13+
- '*'
14+
verbs:
15+
- get
16+
---
17+
apiVersion: rbac.authorization.k8s.io/v1
18+
kind: ClusterRole
19+
metadata:
20+
name: kosmos-scheduler
21+
rules:
22+
- verbs:
23+
- get
24+
- list
25+
- watch
26+
apiGroups:
27+
- kosmos.io
28+
resources:
29+
- '*'
30+
- verbs:
31+
- create
32+
- patch
33+
- update
34+
apiGroups:
35+
- ''
36+
- events.k8s.io
37+
resources:
38+
- events
39+
- verbs:
40+
- create
41+
apiGroups:
42+
- coordination.k8s.io
43+
resources:
44+
- leases
45+
- verbs:
46+
- get
47+
- update
48+
apiGroups:
49+
- coordination.k8s.io
50+
resources:
51+
- leases
52+
resourceNames:
53+
- kosmos-scheduler
54+
- verbs:
55+
- create
56+
apiGroups:
57+
- ''
58+
resources:
59+
- endpoints
60+
- verbs:
61+
- get
62+
- update
63+
apiGroups:
64+
- ''
65+
resources:
66+
- endpoints
67+
- verbs:
68+
- get
69+
- list
70+
- watch
71+
apiGroups:
72+
- ''
73+
resources:
74+
- nodes
75+
- verbs:
76+
- delete
77+
- get
78+
- list
79+
- watch
80+
apiGroups:
81+
- ''
82+
resources:
83+
- pods
84+
- verbs:
85+
- create
86+
apiGroups:
87+
- ''
88+
resources:
89+
- bindings
90+
- pods/binding
91+
- verbs:
92+
- patch
93+
- update
94+
apiGroups:
95+
- ''
96+
resources:
97+
- pods/status
98+
- verbs:
99+
- get
100+
- list
101+
- watch
102+
apiGroups:
103+
- ''
104+
resources:
105+
- replicationcontrollers
106+
- services
107+
- verbs:
108+
- get
109+
- list
110+
- watch
111+
apiGroups:
112+
- apps
113+
- extensions
114+
resources:
115+
- replicasets
116+
- verbs:
117+
- get
118+
- list
119+
- watch
120+
apiGroups:
121+
- apps
122+
resources:
123+
- statefulsets
124+
- verbs:
125+
- get
126+
- list
127+
- watch
128+
apiGroups:
129+
- policy
130+
resources:
131+
- poddisruptionbudgets
132+
- verbs:
133+
- get
134+
- list
135+
- watch
136+
- update
137+
apiGroups:
138+
- ''
139+
resources:
140+
- persistentvolumeclaims
141+
- persistentvolumes
142+
- verbs:
143+
- create
144+
apiGroups:
145+
- authentication.k8s.io
146+
resources:
147+
- tokenreviews
148+
- verbs:
149+
- create
150+
apiGroups:
151+
- authorization.k8s.io
152+
resources:
153+
- subjectaccessreviews
154+
- verbs:
155+
- get
156+
- list
157+
- watch
158+
apiGroups:
159+
- storage.k8s.io
160+
resources:
161+
- '*'
162+
- verbs:
163+
- get
164+
- list
165+
- watch
166+
apiGroups:
167+
- ''
168+
resources:
169+
- configmaps
170+
- namespaces
171+
---
172+
apiVersion: rbac.authorization.k8s.io/v1
173+
kind: ClusterRole
174+
metadata:
175+
name: kosmos
176+
rules:
177+
- apiGroups:
178+
- '*'
179+
resources:
180+
- '*'
181+
verbs:
182+
- '*'
183+
- nonResourceURLs:
184+
- '*'
185+
verbs:
186+
- '*'
187+
---
188+
apiVersion: rbac.authorization.k8s.io/v1
189+
kind: ClusterRole
190+
metadata:
191+
name: clusterlink-controller-manager
192+
rules:
193+
- apiGroups:
194+
- '*'
195+
resources:
196+
- '*'
197+
verbs:
198+
- '*'
199+
- nonResourceURLs:
200+
- '*'
201+
verbs:
202+
- get
203+
---
204+
apiVersion: rbac.authorization.k8s.io/v1
205+
kind: ClusterRole
206+
metadata:
207+
name: clusterlink-elector
208+
rules:
209+
- apiGroups:
210+
- '*'
211+
resources:
212+
- '*'
213+
verbs:
214+
- '*'
215+
- nonResourceURLs:
216+
- '*'
217+
verbs:
218+
- get
219+
---
220+
apiVersion: rbac.authorization.k8s.io/v1
221+
kind: ClusterRole
222+
metadata:
223+
name: clusterlink-network-manager
224+
rules:
225+
- apiGroups:
226+
- '*'
227+
resources:
228+
- '*'
229+
verbs:
230+
- '*'
231+
- nonResourceURLs:
232+
- '*'
233+
verbs:
234+
- get

‎charts/kosmos/templates/03-clusterrolebinding.yaml

+83
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,83 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRoleBinding
3+
metadata:
4+
name: clustertree
5+
roleRef:
6+
apiGroup: rbac.authorization.k8s.io
7+
kind: ClusterRole
8+
name: clustertree
9+
subjects:
10+
- kind: ServiceAccount
11+
name: clustertree
12+
namespace: {{ .Values.global.namespace }}
13+
---
14+
apiVersion: rbac.authorization.k8s.io/v1
15+
kind: ClusterRoleBinding
16+
metadata:
17+
name: kosmos-scheduler
18+
roleRef:
19+
apiGroup: rbac.authorization.k8s.io
20+
kind: ClusterRole
21+
name: kosmos-scheduler
22+
subjects:
23+
- kind: ServiceAccount
24+
name: kosmos-scheduler
25+
namespace: {{ .Values.global.namespace }}
26+
---
27+
apiVersion: rbac.authorization.k8s.io/v1
28+
kind: ClusterRoleBinding
29+
metadata:
30+
name: kosmos
31+
roleRef:
32+
apiGroup: rbac.authorization.k8s.io
33+
kind: ClusterRole
34+
name: kosmos
35+
subjects:
36+
- kind: ServiceAccount
37+
name: kosmos-control
38+
namespace: {{ .Values.global.namespace }}
39+
- kind: ServiceAccount
40+
name: clusterlink-controller-manager
41+
namespace: kosmos-system
42+
- kind: ServiceAccount
43+
name: kosmos-operator
44+
namespace: {{ .Values.global.namespace }}
45+
---
46+
apiVersion: rbac.authorization.k8s.io/v1
47+
kind: ClusterRoleBinding
48+
metadata:
49+
name: clusterlink-controller-manager
50+
roleRef:
51+
apiGroup: rbac.authorization.k8s.io
52+
kind: ClusterRole
53+
name: clusterlink-controller-manager
54+
subjects:
55+
- kind: ServiceAccount
56+
name: clusterlink-controller-manager
57+
namespace: {{ .Values.global.namespace }}
58+
---
59+
apiVersion: rbac.authorization.k8s.io/v1
60+
kind: ClusterRoleBinding
61+
metadata:
62+
name: clusterlink-elector
63+
roleRef:
64+
apiGroup: rbac.authorization.k8s.io
65+
kind: ClusterRole
66+
name: clusterlink-elector
67+
subjects:
68+
- kind: ServiceAccount
69+
name: clusterlink-elector
70+
namespace: {{ .Values.global.namespace }}
71+
---
72+
apiVersion: rbac.authorization.k8s.io/v1
73+
kind: ClusterRoleBinding
74+
metadata:
75+
name: clusterlink-network-manager
76+
roleRef:
77+
apiGroup: rbac.authorization.k8s.io
78+
kind: ClusterRole
79+
name: clusterlink-network-manager
80+
subjects:
81+
- kind: ServiceAccount
82+
name: clusterlink-network-manager
83+
namespace: {{ .Values.global.namespace }}

0 commit comments

Comments
 (0)