Skip to content

Commit 33144aa

Browse files
lmillerilmilleri
authored
operator [N] [CI] trustee-operator (0.1.0)
1 parent 72759ed commit 33144aa

9 files changed

+593
-0
lines changed

‎operators/trustee-operator/0.1.0/manifests/confidentialcontainers.org_kbsconfigs.yaml

+104
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,104 @@
1+
apiVersion: apiextensions.k8s.io/v1
2+
kind: CustomResourceDefinition
3+
metadata:
4+
annotations:
5+
controller-gen.kubebuilder.io/version: v0.14.0
6+
creationTimestamp: null
7+
name: kbsconfigs.confidentialcontainers.org
8+
spec:
9+
group: confidentialcontainers.org
10+
names:
11+
kind: KbsConfig
12+
listKind: KbsConfigList
13+
plural: kbsconfigs
14+
singular: kbsconfig
15+
scope: Namespaced
16+
versions:
17+
- name: v1alpha1
18+
schema:
19+
openAPIV3Schema:
20+
description: KbsConfig is the Schema for the kbsconfigs API
21+
properties:
22+
apiVersion:
23+
description: |-
24+
APIVersion defines the versioned schema of this representation of an object.
25+
Servers should convert recognized schemas to the latest internal value, and
26+
may reject unrecognized values.
27+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
28+
type: string
29+
kind:
30+
description: |-
31+
Kind is a string value representing the REST resource this object represents.
32+
Servers may infer this from the endpoint the client submits requests to.
33+
Cannot be updated.
34+
In CamelCase.
35+
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
36+
type: string
37+
metadata:
38+
type: object
39+
spec:
40+
description: KbsConfigSpec defines the desired state of KbsConfig
41+
properties:
42+
kbsAsConfigMapName:
43+
description: KbsAsConfigMapName is the name of the configmap that
44+
contains the KBS AS configuration
45+
type: string
46+
kbsAuthSecretName:
47+
description: KbsAuthSecretName is the name of the secret that contains
48+
the KBS auth secret
49+
type: string
50+
kbsConfigMapName:
51+
description: KbsConfigMapName is the name of the configmap that contains
52+
the KBS configuration
53+
type: string
54+
kbsDeploymentType:
55+
description: |-
56+
KbsDeploymentType is the type of KBS deployment
57+
It can assume one of the following values:
58+
AllInOneDeployment: all the KBS components will be deployed in the same container
59+
MicroservicesDeployment: all the KBS components will be deployed in separate containers
60+
type: string
61+
kbsHttpsCertSecretName:
62+
description: KbsHttpsCertSecretName is the name of the secret that
63+
contains the KBS https certificate
64+
type: string
65+
kbsHttpsKeySecretName:
66+
description: KbsHttpsKeySecretName is the name of the secret that
67+
contains the KBS https private key
68+
type: string
69+
kbsRvpsConfigMapName:
70+
description: KbsRvpsConfigMapName is the name of the configmap that
71+
contains the KBS RVPS configuration
72+
type: string
73+
kbsRvpsRefValuesConfigMapName:
74+
description: kbsRvpsRefValuesConfigMapName is the name of the configmap
75+
that contains the RVPS reference values
76+
type: string
77+
kbsSecretResources:
78+
description: KbsSecretResources is an array of secret names that contain
79+
the keys required by clients
80+
items:
81+
type: string
82+
type: array
83+
kbsServiceType:
84+
description: KbsServiceType is the type of service to create for KBS
85+
type: string
86+
type: object
87+
status:
88+
description: KbsConfigStatus defines the observed state of KbsConfig
89+
properties:
90+
isReady:
91+
description: IsReady is true when the KBS configuration is ready
92+
type: boolean
93+
type: object
94+
type: object
95+
served: true
96+
storage: true
97+
subresources:
98+
status: {}
99+
status:
100+
acceptedNames:
101+
kind: ""
102+
plural: ""
103+
conditions: null
104+
storedVersions: null

‎operators/trustee-operator/0.1.0/manifests/kbs-config-sample_v1_configmap.yaml

+35
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
apiVersion: v1
2+
data:
3+
kbs-config.json: |
4+
{
5+
"insecure_http" : true,
6+
"sockets": ["0.0.0.0:8080"],
7+
"auth_public_key": "/etc/auth-secret/kbs.pem",
8+
"attestation_token_config": {
9+
"attestation_token_type": "CoCo"
10+
},
11+
"repository_config": {
12+
"type": "LocalFs",
13+
"dir_path": "/opt/confidential-containers/kbs/repository"
14+
},
15+
"as_config": {
16+
"work_dir": "/opt/confidential-containers/attestation-service",
17+
"policy_engine": "opa",
18+
"attestation_token_broker": "Simple",
19+
"attestation_token_config": {
20+
"duration_min": 5
21+
},
22+
"rvps_config": {
23+
"store_type": "LocalJson",
24+
"store_config": {
25+
"file_path": "/opt/confidential-containers/rvps/reference-values/reference-values.json"
26+
}
27+
}
28+
},
29+
"policy_engine_config": {
30+
"policy_path": "/opt/confidential-containers/opa/policy.rego"
31+
}
32+
}
33+
kind: ConfigMap
34+
metadata:
35+
name: kbs-config-sample

‎operators/trustee-operator/0.1.0/manifests/rvps-reference-values-sample_v1_configmap.yaml

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
apiVersion: v1
2+
data:
3+
reference-values.json: |
4+
[
5+
]
6+
kind: ConfigMap
7+
metadata:
8+
name: rvps-reference-values-sample

‎operators/trustee-operator/0.1.0/manifests/trustee-operator-controller-manager-metrics-service_v1_service.yaml

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
creationTimestamp: null
5+
labels:
6+
app.kubernetes.io/component: kube-rbac-proxy
7+
app.kubernetes.io/created-by: trustee-operator
8+
app.kubernetes.io/instance: controller-manager-metrics-service
9+
app.kubernetes.io/managed-by: kustomize
10+
app.kubernetes.io/name: service
11+
app.kubernetes.io/part-of: trustee-operator
12+
control-plane: controller-manager
13+
name: trustee-operator-controller-manager-metrics-service
14+
spec:
15+
ports:
16+
- name: https
17+
port: 8443
18+
protocol: TCP
19+
targetPort: https
20+
selector:
21+
control-plane: controller-manager
22+
status:
23+
loadBalancer: {}

‎operators/trustee-operator/0.1.0/manifests/trustee-operator-metrics-reader_rbac.authorization.k8s.io_v1_clusterrole.yaml

+17
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
creationTimestamp: null
5+
labels:
6+
app.kubernetes.io/component: kube-rbac-proxy
7+
app.kubernetes.io/created-by: trustee-operator
8+
app.kubernetes.io/instance: metrics-reader
9+
app.kubernetes.io/managed-by: kustomize
10+
app.kubernetes.io/name: clusterrole
11+
app.kubernetes.io/part-of: trustee-operator
12+
name: trustee-operator-metrics-reader
13+
rules:
14+
- nonResourceURLs:
15+
- /metrics
16+
verbs:
17+
- get

0 commit comments

Comments
 (0)