mvp

armory · Jun 18, 2020 · c6e4809 · c6e4809
1 parent 81b6a9f
commit c6e4809
Show file tree

Hide file tree

Showing 12 changed files with 1,523 additions and 0 deletions.
diff --git a/manifests/crds/spinnaker.armory.io_spinnakerservices_crd.yaml b/manifests/crds/spinnaker.armory.io_spinnakerservices_crd.yaml
diff --git a/manifests/crds/spinnaker.io_spinnakeraccounts_crd.yaml b/manifests/crds/spinnaker.io_spinnakeraccounts_crd.yaml
diff --git a/manifests/operator/ClusterRole.yaml b/manifests/operator/ClusterRole.yaml
@@ -0,0 +1,82 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: spinnaker-operator-role
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - ingresses/status
+  - endpoints
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - services
+  - events
+  - configmaps
+  - secrets
+  - namespaces
+  - ingresses
+  verbs:
+  - create
+  - get
+  - list
+  - update
+  - watch
+  - patch
+- apiGroups:
+  - apps
+  - extensions
+  resources:
+  - deployments
+  - daemonsets
+  - replicasets
+  - statefulsets
+  verbs:
+  - create
+  - get
+  - list
+  - update
+  - watch
+  - patch
+- apiGroups:
+  - monitoring.coreos.com
+  resources:
+  - servicemonitors
+  verbs:
+  - get
+  - create
+- apiGroups:
+  - spinnaker.armory.io
+  resources:
+  - '*'
+  - spinnakerservices
+  verbs:
+  - create
+  - get
+  - list
+  - update
+  - watch
+  - patch
+- apiGroups:
+  - spinnaker.io
+  resources:
+  - spinnakeraccounts
+  verbs:
+  - create
+  - get
+  - list
+  - update
+  - watch
+  - patch
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - validatingwebhookconfigurations
+  verbs:
+  - '*'
diff --git a/manifests/operator/ClusterRoleBinding.yaml b/manifests/operator/ClusterRoleBinding.yaml
@@ -0,0 +1,12 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: spinnaker-operator-binding
+subjects:
+- kind: ServiceAccount
+  name: spinnaker-operator
+  namespace: spinnaker-operator
+roleRef:
+  kind: ClusterRole
+  name: spinnaker-operator-role
+  apiGroup: rbac.authorization.k8s.io
diff --git a/manifests/operator/ConfigMap.yml b/manifests/operator/ConfigMap.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: halyard-custom-config
+  namespace: spinnaker-operator
+data:
+  halyard-local.yml: |
+    spinnaker:
+      config:
+        input:
+          bucket: halconfig-marketplace
diff --git a/manifests/operator/Deployment.yaml b/manifests/operator/Deployment.yaml
@@ -0,0 +1,69 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: spinnaker-operator
+  namespace: spinnaker-operator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      name: spinnaker-operator
+  template:
+    metadata:
+      labels:
+        name: spinnaker-operator
+    spec:
+      serviceAccountName: spinnaker-operator
+      initContainers:
+        - 
+          name: start-billing
+          args:
+          - meteringmarketplace
+          - register-usage
+          - --product-code
+          - 3g3248j9dxzytipo7aj4jlwiu
+          - --public-key-version
+          - "1"
+          # image: amazon/aws-cli
+          image: 117940112483.dkr.ecr.us-east-1.amazonaws.com/3a387dea-4960-43d1-8539-c26bbc74cae6/cg-3837021117/amazon/aws-cli:1.0.0-latest
+      containers:
+        - name: spinnaker-operator
+          # image: armory/armory-operator:1.0.0
+          image: 117940112483.dkr.ecr.us-east-1.amazonaws.com/3a387dea-4960-43d1-8539-c26bbc74cae6/cg-3837021117/armory/armory-operator:1.0.0-latest
+          command:
+            - spinnaker-operator
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
+            - name: OPERATOR_NAME
+              value: "spinnaker-operator"
+        - name: halyard
+          # image: armory/halyard-armory:operator-fa2cee7d1fe561cd709894198806f072e6eac1e1
+          image: 117940112483.dkr.ecr.us-east-1.amazonaws.com/3a387dea-4960-43d1-8539-c26bbc74cae6/cg-3837021117/armory/halyard-armory:1.0.0-latest
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 8064
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: 8064
+            failureThreshold: 20
+            periodSeconds: 5
+            initialDelaySeconds: 20
+          livenessProbe:
+            tcpSocket:
+              port: 8064
+            initialDelaySeconds: 30
+            periodSeconds: 20
+          volumeMounts:
+          - name: halyard-custom-config
+            mountPath: /opt/spinnaker/config/halyard-local.yml
+            subPath: halyard-local.yml
+      volumes:
+      - name: halyard-custom-config
+        configMap:
+          name: halyard-custom-config
diff --git a/manifests/operator/Namespace.yaml b/manifests/operator/Namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: spinnaker-operator
diff --git a/manifests/operator/ServiceAccount.yaml b/manifests/operator/ServiceAccount.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: spinnaker-operator
+  namespace: spinnaker-operator
diff --git a/manifests/spinnaker/ClusterRoleBinding.yaml b/manifests/spinnaker/ClusterRoleBinding.yaml
@@ -0,0 +1,13 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  name: spinnaker-default-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: clouddriver
+  namespace: spinnaker
diff --git a/manifests/spinnaker/Namespace.yaml b/manifests/spinnaker/Namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: spinnaker
diff --git a/manifests/spinnaker/ServiceAccount-clouddriver.yaml b/manifests/spinnaker/ServiceAccount-clouddriver.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  namespace: spinnaker
+  name: clouddriver
diff --git a/manifests/spinnaker/SpinnakerService.yaml b/manifests/spinnaker/SpinnakerService.yaml
@@ -0,0 +1,70 @@
+
+apiVersion: spinnaker.armory.io/v1alpha2
+kind: SpinnakerService
+metadata:
+  name: spinnaker
+  namespace: spinnaker
+spec:
+  spinnakerConfig:
+    config:
+      artifacts:
+        http:
+          accounts: []
+          enabled: true
+      features:
+        artifacts: true
+      persistentStorage:
+        persistentStoreType: s3
+        s3:
+          bucket: BUCKETNAME
+      providers:
+        kubernetes:
+          accounts:
+          - name: spinnaker
+            onlySpinnakerManaged: true
+            providerVersion: V2
+            serviceAccount: true
+          enabled: true
+          primaryAccount: spinnaker
+      # security:
+      #   apiSecurity:
+      #     overrideBaseUrl: https://ENDPOINT/api/v1
+      #   uiSecurity:
+      #     overrideBaseUrl: https://ENDPOINT
+      version: 2.19.9
+    profiles:
+      clouddriver: {}
+      deck:
+        settings-local.js: |
+          window.spinnakerSettings.feature.kustomizeEnabled = true;
+      echo: {}
+      fiat: {}
+      front50:
+        spinnaker.s3.versioning: false
+      gate:
+        server:
+          servlet:
+            context-path: /api/v1
+          tomcat:
+            httpsServerPort: X-Forwarded-Port
+            internalProxies: .*
+            protocolHeader: X-Forwarded-Proto
+            remoteIpHeader: X-Forwarded-For
+      igor: {}
+      kayenta: {}
+      orca: {}
+      rosco: {}
+    service-settings:
+      clouddriver:
+        kubernetes:
+          serviceAccountName: clouddriver
+      deck: {}
+      echo: {}
+      fiat: {}
+      front50: {}
+      gate:
+        healthEndpoint: /api/v1/health
+      igor: {}
+      kayenta: {}
+      orca: {}
+      rosco: {}