From 3455aed503c540e74af2f6d0832e97b6beeb34fe Mon Sep 17 00:00:00 2001 From: Dario Tranchitella Date: Sat, 17 Jul 2021 18:52:24 +0200 Subject: [PATCH] fix(samples): Tenant v1beta1 example --- config/samples/capsule_v1beta1_tenant.yaml | 132 ++++++++++++++++++++- 1 file changed, 129 insertions(+), 3 deletions(-) diff --git a/config/samples/capsule_v1beta1_tenant.yaml b/config/samples/capsule_v1beta1_tenant.yaml index eda5825c..36c3ce48 100644 --- a/config/samples/capsule_v1beta1_tenant.yaml +++ b/config/samples/capsule_v1beta1_tenant.yaml @@ -1,7 +1,133 @@ +--- apiVersion: capsule.clastix.io/v1beta1 kind: Tenant metadata: - name: tenant-sample + name: gas spec: - # Add fields here - foo: bar + additionalRoleBindings: + - + clusterRoleName: tenant-sample-viewer + subjects: + - + kind: User + name: bob + containerRegistries: + allowed: + - docker.io + - quay.io + allowedRegex: ^\w+.gcr.io$ + enableNodePorts: false + externalServiceIPs: + allowed: + - 10.20.0.0/16 + - "10.96.42.42" + imagePullPolicies: + - Always + ingressClasses: + allowed: + - default + allowedRegex: ^\w+-lb$ + ingressHostnames: + allowed: + - gas.acmecorp.com + allowedRegex: ^.*acmecorp.com$ + limitRanges: + items: + - + limits: + - + max: + cpu: "1" + memory: 1Gi + min: + cpu: 50m + memory: 5Mi + type: Pod + - + default: + cpu: 200m + memory: 100Mi + defaultRequest: + cpu: 100m + memory: 10Mi + max: + cpu: "1" + memory: 1Gi + min: + cpu: 50m + memory: 5Mi + type: Container + - + max: + storage: 10Gi + min: + storage: 1Gi + type: PersistentVolumeClaim + namespaceQuota: 3 + namespacesMetadata: + additionalAnnotations: + capsule.clastix.io/backup: "false" + additionalLabels: + capsule.clastix.io/tenant: gas + networkPolicies: + items: + - + egress: + - + to: + - + ipBlock: + cidr: 0.0.0.0/0 + except: + - 192.168.0.0/12 + ingress: + - + from: + - + namespaceSelector: + matchLabels: + capsule.clastix.io/tenant: gas + - + podSelector: {} + - + ipBlock: + cidr: 192.168.0.0/12 + podSelector: {} + policyTypes: + - Ingress + - Egress + nodeSelector: + kubernetes.io/os: linux + owners: + - + kind: User + name: bob + priorityClasses: + allowed: + - shared-nodes + allowedRegex: ^\w-gas$ + resourceQuotas: + items: + - + hard: + limits.cpu: "8" + limits.memory: 16Gi + requests.cpu: "8" + requests.memory: 16Gi + scopes: + - NotTerminating + - + hard: + pods: "10" + - + hard: + requests.storage: 100Gi + servicesMetadata: + additionalAnnotations: + capsule.clastix.io/bgp: "true" + additionalLabels: + capsule.clastix.io/pool: gas + storageClasses: + allowed: + - default + allowedRegex: ^\w+fs$