blob: 61f8d80a23d213c7dc1cc924573f054285651d8e [file] [log] [blame]
# TODO(giolekva): finish
apiVersion: v1
kind: Namespace
metadata:
name: pcloud
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: pcloud-bootstrap
namespace: pcloud
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: pcloud-bootstrap
namespace: pcloud
rules:
- apiGroups:
- *
resources:
- *
verbs:
- *
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: pcloud:pcloud-bootstrap
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: pcloud:pcloud-bootstrap
subjects:
- kind: ServiceAccount
name: pcloud-bootstrap
namespace: pcloud
---
apiVersion: v1
kind: ConfigMap
metadata:
name: admin-pub-key
namespace: pcloud
data: # TODO(giolekva): can it work without ssh-ed25519 prefix
key.pub: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOa7FUrmXzdY3no8qNGUk7OPaRcIUi8G7MVbLlff9eB/
---
apiVersion: batch/v1
kind: Job
metadata:
name: pcloud-bootstrap
namespace: pcloud
spec:
template:
spec:
serviceAccountName: pcloud-bootstrap
volumes:
- name: admin-pub-key
configMap:
name: admin-pub-key
containers:
- name: pcloud-bootstrap
image: giolekva/pcloud-installer:latest
imagePullPolicy: Always
volumeMounts:
- name: admin-pub-key
mountPath: /admin-pub-key
command:
- pcloud-installer
- bootstrap
- --pcloud-env-name=pcloud
- --admin-pub-key=/admin-pub-key/key.pub
- --soft-serve-ip=192.168.0.211
- --charts-dir=/charts
- --storage-dir=/pcloud-storage/longhorn
restartPolicy: Never