unkinben
3b4620ade4
v0.2.0 adds the BindTSIGAPI CRD and companion API that vault-plugin-secrets-bind-tsig calls to create, rotate and delete TSIG keys. This rolls the operator forward and deploys an API instance. - Bump the operator image and the pulled CRD bundle to v0.2.0. - Broaden the operator ClusterRole with deployments, serviceaccounts and roles/rolebindings so the BindTSIGAPI reconciler can deploy the API and its namespaced RBAC. - Add a BindTSIGAPI (bind-tsig-api) in bind-internal; the operator reconciles it into a Deployment, Service, ConfigMap, master-token Secret and RBAC. Keys are created in bind-internal alongside the authoritative cluster. - Add the generated kubeconform schema for BindTSIGAPI.
12 lines
356 B
YAML
12 lines
356 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
# CRDs are pulled from the bind-operator repo at the matching tag rather than
|
|
# vendored here, so they never drift from the operator.
|
|
- https://git.unkin.net/unkin/bind-operator/raw/tag/v0.2.0/config/crd/install.yaml
|
|
- rbac.yaml
|
|
- deployment.yaml
|