Merge pull request #164 from paralus/rename-to-paralus

Rename code to paralus
This commit is contained in:
Nirav Parikh
2022-06-10 13:36:06 +05:30
committed by GitHub
351 changed files with 8228 additions and 8162 deletions
+4 -4
View File
@@ -62,7 +62,7 @@ jobs:
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
- name: Extract metadata (tags, labels) for Docker (rcloud-base-init)
- name: Extract metadata (tags, labels) for Docker (paralus-init)
id: meta-init
uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
with:
@@ -73,7 +73,7 @@ jobs:
type=ref,event=pr
type=sha
- name: Build and push Docker image (rcloud-base-init)
- name: Build and push Docker image (paralus-init)
uses: docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc
with:
context: .
@@ -82,7 +82,7 @@ jobs:
tags: ${{ steps.meta-init.outputs.tags }}
labels: ${{ steps.meta-init.outputs.labels }}
- name: Extract metadata (tags, labels) for Docker (rcloud-base-sync)
- name: Extract metadata (tags, labels) for Docker (kratos-sync)
id: meta-sync
uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
with:
@@ -93,7 +93,7 @@ jobs:
type=ref,event=pr
type=sha
- name: Build and push Docker image (rcloud-base-sync)
- name: Build and push Docker image (kratos-sync)
uses: docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc
with:
context: .
+3 -3
View File
@@ -8,15 +8,15 @@ COPY go.sum .
RUN go mod download
COPY . .
RUN go build github.com/RafayLabs/rcloud-base
RUN go build github.com/paralus/paralus
FROM alpine:latest as runtime
LABEL description="Run container"
COPY --from=build /build/rcloud-base /usr/bin/rcloud-base
COPY --from=build /build/paralus /usr/bin/paralus
WORKDIR /usr/bin
# Copying data for running migrations
# TODO: Support rcloud-base binary to run migrations
# TODO: Support paralus binary to run migrations
COPY ./persistence/migrations/admindb /data/migrations/admindb
EXPOSE 10000
+3 -3
View File
@@ -4,12 +4,12 @@ LABEL description="Build container"
ENV CGO_ENABLED 0
COPY . /build
WORKDIR /build
RUN go build -o rcloud-init scripts/initialize/main.go
RUN go build -o paralus-init scripts/initialize/main.go
FROM alpine:latest as runtime
LABEL description="Run container"
WORKDIR /usr/bin
COPY --from=build /build/rcloud-init /usr/bin/rcloud-init
COPY --from=build /build/paralus-init /usr/bin/paralus-init
COPY --from=build /build/scripts/initialize/ /usr/bin/scripts/initialize/
ENTRYPOINT ["./rcloud-init"]
ENTRYPOINT ["./paralus-init"]
+4 -4
View File
@@ -1,6 +1,6 @@
.PHONY: tidy
tidy:
GOPRIVATE=github.com/RafayLabs/* go mod tidy
GOPRIVATE=github.com/paralus/* go mod tidy
.PHONY: vendor
vendor:
go mod vendor
@@ -16,13 +16,13 @@ gen-proto:
.PHONY: test
test:
go test ./...
.PHONY: check
check:
go fmt ./...
go vet ./...
.PHONY: clean
clean:
rm -rf ./**/gen
+2 -2
View File
@@ -1,6 +1,6 @@
# Ory Kratos
This directory holds Ory Kratos configurations and scripts required for rcloud-base.
This directory holds Ory Kratos configurations and scripts required for paralus.
## Get Session token for development
@@ -19,7 +19,7 @@ go run development/session_main.go
How to use token for authentication?
Start rcloud-base server with `DEV=false` and add token to
Start paralus server with `DEV=false` and add token to
`X-Session-Token` header while making request to access resources, for example:
```
+1 -1
View File
@@ -3,7 +3,7 @@ package main
import (
"time"
"github.com/RafayLabs/rcloud-base/_kratos/development/pkg"
"github.com/paralus/paralus/_kratos/development/pkg"
ory "github.com/ory/kratos-client-go"
)
+1 -1
View File
@@ -5,7 +5,7 @@ local claims = {
email_verified: false
} + std.extVar('claims');
local fName = if "name" in claims && claims.name!=null && std.length(std.findSubstr(" ", claims.name)) > 0 then std.splitLimit(claims.name, " ", 1)[0] else "Rafay";
local fName = if "name" in claims && claims.name!=null && std.length(std.findSubstr(" ", claims.name)) > 0 then std.splitLimit(claims.name, " ", 1)[0] else "Paralus";
local lName = if "name" in claims && claims.name!=null && std.length(std.findSubstr(" ", claims.name)) > 0 then std.splitLimit(claims.name, " ", 1)[1] else "User";
{
+1 -1
View File
@@ -5,7 +5,7 @@ local claims = {
email_verified: false
} + std.extVar('claims');
local fName = if "name" in claims && claims.name!=null && std.length(std.findSubstr(" ", claims.name)) > 0 then std.splitLimit(claims.name, " ", 1)[0] else "Rafay";
local fName = if "name" in claims && claims.name!=null && std.length(std.findSubstr(" ", claims.name)) > 0 then std.splitLimit(claims.name, " ", 1)[0] else "Paralus";
local lName = if "name" in claims && claims.name!=null && std.length(std.findSubstr(" ", claims.name)) > 0 then std.splitLimit(claims.name, " ", 1)[1] else "User";
{
+1 -1
View File
@@ -5,7 +5,7 @@ local claims = {
email_verified: true
} + std.extVar('claims');
local fName = if "name" in claims && claims.name!=null && std.length(std.findSubstr(" ", claims.name)) > 0 then std.splitLimit(claims.name, " ", 1)[0] else "Rafay";
local fName = if "name" in claims && claims.name!=null && std.length(std.findSubstr(" ", claims.name)) > 0 then std.splitLimit(claims.name, " ", 1)[0] else "Paralus";
local lName = if "name" in claims && claims.name!=null && std.length(std.findSubstr(" ", claims.name)) > 0 then std.splitLimit(claims.name, " ", 1)[1] else "User";
{
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// AuditInformationLookupClusterReader is a Reader for the AuditInformationLookupCluster structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// AuditInformationLookupUserReader is a Reader for the AuditInformationLookupUser structure.
@@ -15,7 +15,7 @@ import (
cr "github.com/go-openapi/runtime/client"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// NewBootstrapCreateBootstrapAgentParams creates a new BootstrapCreateBootstrapAgentParams object,
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapCreateBootstrapAgentReader is a Reader for the BootstrapCreateBootstrapAgent structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapDeleteBootstrapAgentReader is a Reader for the BootstrapDeleteBootstrapAgent structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapGetBootstrapAgentConfigReader is a Reader for the BootstrapGetBootstrapAgentConfig structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapGetBootstrapAgentReader is a Reader for the BootstrapGetBootstrapAgent structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapGetBootstrapAgentTemplateReader is a Reader for the BootstrapGetBootstrapAgentTemplate structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapGetBootstrapAgentTemplatesReader is a Reader for the BootstrapGetBootstrapAgentTemplates structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapGetBootstrapAgentsReader is a Reader for the BootstrapGetBootstrapAgents structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapGetBootstrapInfraReader is a Reader for the BootstrapGetBootstrapInfra structure.
@@ -15,7 +15,7 @@ import (
cr "github.com/go-openapi/runtime/client"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// NewBootstrapPatchBootstrapAgentTemplateParams creates a new BootstrapPatchBootstrapAgentTemplateParams object,
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapPatchBootstrapAgentTemplateReader is a Reader for the BootstrapPatchBootstrapAgentTemplate structure.
@@ -15,7 +15,7 @@ import (
cr "github.com/go-openapi/runtime/client"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// NewBootstrapPatchBootstrapInfraParams creates a new BootstrapPatchBootstrapInfraParams object,
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapPatchBootstrapInfraReader is a Reader for the BootstrapPatchBootstrapInfra structure.
@@ -14,7 +14,7 @@ import (
"github.com/go-openapi/strfmt"
"github.com/go-openapi/swag"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapRegisterBootstrapAgentReader is a Reader for the BootstrapRegisterBootstrapAgent structure.
@@ -15,7 +15,7 @@ import (
cr "github.com/go-openapi/runtime/client"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// NewBootstrapUpdateBootstrapAgentParams creates a new BootstrapUpdateBootstrapAgentParams object,
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// BootstrapUpdateBootstrapAgentReader is a Reader for the BootstrapUpdateBootstrapAgent structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// ClusterAuthorizationGetUserAuthorizationReader is a Reader for the ClusterAuthorizationGetUserAuthorization structure.
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// KubectlClusterSettingsGetKubectlClusterSettingsReader is a Reader for the KubectlClusterSettingsGetKubectlClusterSettings structure.
@@ -15,7 +15,7 @@ import (
cr "github.com/go-openapi/runtime/client"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// NewKubectlClusterSettingsUpdateKubectlClusterSettingsParams creates a new KubectlClusterSettingsUpdateKubectlClusterSettingsParams object,
@@ -12,7 +12,7 @@ import (
"github.com/go-openapi/runtime"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/models"
"github.com/paralus/paralus/api/def/clients/sentry/models"
)
// KubectlClusterSettingsUpdateKubectlClusterSettingsReader is a Reader for the KubectlClusterSettingsUpdateKubectlClusterSettings structure.
@@ -10,7 +10,7 @@ import (
httptransport "github.com/go-openapi/runtime/client"
"github.com/go-openapi/strfmt"
"github.com/RafayLabs/rcloud-base/api/def/clients/sentry/client/bootstrap"
"github.com/paralus/paralus/api/def/clients/sentry/client/bootstrap"
)
// Default sentry bootstrap service HTTP client.
+2 -2
View File
@@ -2,12 +2,12 @@ version: v1
managed:
enabled: true
go_package_prefix:
default: github.com/RafayLabs/rcloud-base
default: github.com/paralus/paralus
except:
- buf.build/googleapis/googleapis
- buf.build/grpc-ecosystem/grpc-gateway
- buf.build/gogo/protobuf
- buf.build/rafay/k8s
- buf.build/paralus/k8s
plugins:
- name: go
out: .
+9 -9
View File
@@ -5,20 +5,20 @@ deps:
owner: googleapis
repository: googleapis
branch: main
commit: bcdcd1dee95c4277b2edbae6c21332a2
digest: b1-QAdxfRqCgCBZPaGaRiY8Ms_jKvwZrONQXfaOSvL2lB8=
create_time: 2022-02-26T15:04:31.725057Z
commit: c8fa45ea6c1248769dbbcb53e49d8ee4
digest: b1-_uLy2wpZAWZAxd2_vn_b7Mnf6hg1G7ib5M1flA-oLs4=
create_time: 2022-06-07T15:06:56.944952Z
- remote: buf.build
owner: grpc-ecosystem
repository: grpc-gateway
branch: main
commit: ff83506eb9cc4cf8972f49ce87e6ed3e
digest: b1-iLPHgLaoeWWinMiXXqPnxqE4BThtY3eSbswVGh9GOGI=
create_time: 2021-10-23T16:26:52.283938Z
commit: 00116f302b12478b85deb33b734e026c
digest: b1-iUfkmqGjUB1hlbTkiPKUUeVcFd9pAJ_qRn2oJ4nYpls=
create_time: 2022-05-23T22:50:17.0393Z
- remote: buf.build
owner: rafay
owner: paralus
repository: k8s
branch: main
commit: b96f66eb56bc4f279431f4b2187a2fee
commit: 6d45aa151ee44c47933787fb5fdebc71
digest: b1-U7KVig2Fgpf6eRczjqxrYFa3p6HLqgtEy5QJAOVB8BI=
create_time: 2022-02-09T08:44:35.431677Z
create_time: 2022-06-07T13:30:44.2613Z
+2 -2
View File
@@ -1,9 +1,9 @@
version: v1
name: buf.build/rafay/common
name: buf.build/paralus/paralus
deps:
- buf.build/googleapis/googleapis
- buf.build/grpc-ecosystem/grpc-gateway
- buf.build/rafay/k8s
- buf.build/paralus/k8s
breaking:
use:
- FILE
+6 -6
View File
@@ -3,11 +3,11 @@ version: '3.7'
services:
postgresd:
image: postgres:13.4
container_name: rcloud_postgres_13
container_name: paralus_postgres_13
ports:
- "$DB_PORT:$DB_PORT"
volumes:
- rcloud_db_data:/var/lib/postgresql/data
- paralus_db_data:/var/lib/postgresql/data
environment:
POSTGRES_USER: $DB_USER
POSTGRES_DB: $DB_NAME
@@ -15,11 +15,11 @@ services:
elasticsearch:
image: docker.elastic.co/elasticsearch/elasticsearch:8.0.0
container_name: rcloud_elasticsearch_8
container_name: paralus_elasticsearch_8
ports:
- '${ES_PORT:-9200}:9200'
volumes:
- rcloud_es_data:/usr/share/elasticsearch/data
- paralus_es_data:/usr/share/elasticsearch/data
environment:
- discovery.type=single-node
- xpack.security.enabled=false # disable auth for local dev
@@ -70,5 +70,5 @@ services:
- '4437:4437'
volumes:
rcloud_db_data:
rcloud_es_data:
paralus_db_data:
paralus_es_data:
+9 -9
View File
@@ -12,12 +12,12 @@ DB_PASSWORD=admindbpassword
DB_PORT=5432 # used in docker-compose
# relay
SENTRY_PEERING_HOST='peering.sentry.rafay.local:10001'
CORE_RELAY_CONNECTOR_HOST='*.core-connector.relay.rafay.local:10002'
CORE_RELAY_USER_HOST='*.user.relay.rafay.local:10002'
SENTRY_BOOTSTRAP_ADDR='console.rafay.dev:80'
BOOTSTRAP_KEK='rafay'
RELAY_IMAGE='registry.rafay-edge.net/rafay/rafay-relay-agent:r1.10.0-24'
SENTRY_PEERING_HOST='peering.sentry.paralus.local:10001'
CORE_RELAY_CONNECTOR_HOST='*.core-connector.relay.paralus.local:10002'
CORE_RELAY_USER_HOST='*.user.relay.paralus.local:10002'
SENTRY_BOOTSTRAP_ADDR='console.paralus.dev:80'
BOOTSTRAP_KEK='paralus'
RELAY_IMAGE='paralus/paralus-relay-agent:r1.10.0-24'
# audit
ES_END_POINT='http://127.0.0.1:9200'
@@ -26,10 +26,10 @@ RELAY_AUDITS_ES_INDEX_PREFIX='auditlog-relay'
RELAY_COMMANDS_ES_INDEX_PREFIX='auditlog-commands'
# cd relay
CORE_CD_RELAY_USER_HOST='*.user.cdrelay.rafay.local:10012'
CORE_CD_RELAY_CONNECTOR_HOST='*.core-connector.cdrelay.rafay.local:10012'
CORE_CD_RELAY_USER_HOST='*.user.cdrelay.paralus.local:10012'
CORE_CD_RELAY_CONNECTOR_HOST='*.core-connector.cdrelay.paralus.local:10012'
SCHEDULER_NAMESPACE='rafay-system'
SCHEDULER_NAMESPACE='paralus-system'
# Kratos
KRATOS_ADDR='http://localhost:4433'
@@ -4,7 +4,7 @@
"title": "AuditLog Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -555,7 +555,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Relay Audit Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -987,7 +987,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Override Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -4624,7 +4624,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
+2 -2
View File
@@ -4,7 +4,7 @@
"title": "Role management Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -995,7 +995,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Rolepermission management Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -510,7 +510,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Cluster Service",
"version": "3.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -1922,7 +1922,7 @@
"title": "Cluster Information"
},
"status": {
"$ref": "#/definitions/v3RafayConditionStatus",
"$ref": "#/definitions/v3ParalusConditionStatus",
"description": "Current status of the cluster",
"title": "Cluster Condition Status"
},
@@ -2435,6 +2435,24 @@
}
}
},
"v3ParalusConditionStatus": {
"type": "string",
"enum": [
"NotSet",
"Pending",
"InProgress",
"Success",
"Failed",
"Retry",
"Skipped",
"Stopped",
"Expired",
"Stopping",
"Submitted"
],
"default": "NotSet",
"title": "ParalusConditionStatus is the status of the status condition"
},
"v3ProjectCluster": {
"type": "object",
"properties": {
@@ -2525,24 +2543,6 @@
}
}
},
"v3RafayConditionStatus": {
"type": "string",
"enum": [
"NotSet",
"Pending",
"InProgress",
"Success",
"Failed",
"Retry",
"Skipped",
"Stopped",
"Expired",
"Stopping",
"Submitted"
],
"default": "NotSet",
"title": "RafayConditionStatus is the status of the status condition"
},
"v3Resources": {
"type": "object",
"properties": {
@@ -2572,7 +2572,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Sentry Audit Information Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -173,7 +173,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Sentry Bootstrap Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -2149,7 +2149,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Sentry Cluster Authorization Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -383,7 +383,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Sentry KubeConfig Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -2062,7 +2062,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Sentry KubectlClusterSettings Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -471,7 +471,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Identity Provider (IdP) Service",
"version": "3.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -920,7 +920,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Location Service",
"version": "3.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -1128,7 +1128,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "OIdC Provider Service",
"version": "3.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -914,7 +914,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Organization Service",
"version": "3.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -1362,7 +1362,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Partner Service",
"version": "3.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -896,7 +896,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Project Service",
"version": "3.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -966,7 +966,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
@@ -4,7 +4,7 @@
"title": "Group management Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -1024,7 +1024,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
+2 -2
View File
@@ -4,7 +4,7 @@
"title": "User management Service",
"version": "2.0",
"contact": {
"name": "Rafay Dev"
"name": "Paralus Dev"
}
},
"tags": [
@@ -1729,7 +1729,7 @@
"securityDefinitions": {
"ApiKeyAuth": {
"type": "apiKey",
"name": "X-RAFAY-API-KEYID",
"name": "X-PARALUS-API-KEYID",
"in": "header"
},
"BasicAuth": {
+1 -1
View File
@@ -1,4 +1,4 @@
module github.com/RafayLabs/rcloud-base
module github.com/paralus/paralus
go 1.17
+7 -7
View File
@@ -8,12 +8,12 @@ import (
"regexp"
"strings"
"github.com/RafayLabs/rcloud-base/internal/cluster/constants"
"github.com/RafayLabs/rcloud-base/internal/cluster/fixtures"
"github.com/RafayLabs/rcloud-base/internal/cluster/util"
"github.com/RafayLabs/rcloud-base/pkg/common"
"github.com/RafayLabs/rcloud-base/pkg/log"
infrav3 "github.com/RafayLabs/rcloud-base/proto/types/infrapb/v3"
"github.com/paralus/paralus/internal/cluster/constants"
"github.com/paralus/paralus/internal/cluster/fixtures"
"github.com/paralus/paralus/internal/cluster/util"
"github.com/paralus/paralus/pkg/common"
"github.com/paralus/paralus/pkg/log"
infrav3 "github.com/paralus/paralus/proto/types/infrapb/v3"
)
var _log = log.GetLogger()
@@ -65,7 +65,7 @@ func ExtractV2ClusterLabels(edgeDataLabels, clusterV2Labels map[string]string, e
}
// Copy over the labels inserted by platform
for key, value := range clusterV2Labels {
if strings.HasPrefix(key, constants.RafayDomainLabel+"/") {
if strings.HasPrefix(key, constants.ParalusDomainLabel+"/") {
switch key {
case constants.ClusterGPU, constants.ClusterGPUVendor, constants.ClusterLabelKey, constants.ClusterTypeKey, constants.ClusterLocationKey:
// Ignore the labels that infra adds so that we don't overwrite newer values
+7 -7
View File
@@ -5,21 +5,21 @@ import (
"fmt"
"strings"
infrav3 "github.com/RafayLabs/rcloud-base/proto/types/infrapb/v3"
infrav3 "github.com/paralus/paralus/proto/types/infrapb/v3"
)
const (
BEGIN_PROXY_DATA = "-----BEGIN PROXY DATA-----"
END_PROXY_DATA = "-----END PROXY DATA-----"
NO_PROXY_RAFAY_DATA = "localhost,127.0.0.1,127.0.0.2,k8master.service.consul,ingress-nginx-controller-admission.rafay-system.svc,rafay-drift.rafay-system.svc,secretstore-webhook.rafay-system.svc"
BEGIN_PROXY_DATA = "-----BEGIN PROXY DATA-----"
END_PROXY_DATA = "-----END PROXY DATA-----"
NO_PROXY_PARALUS_DATA = "localhost,127.0.0.1,127.0.0.2,k8master.service.consul,ingress-nginx-controller-admission.paralus-system.svc,paralus-drift.paralus-system.svc,secretstore-webhook.paralus-system.svc"
)
func UpdateProxyData(cert string, proxyConfig infrav3.ProxyConfig, clusterCidr map[string]string) string {
b := new(bytes.Buffer)
fmt.Fprintf(b, "\n")
fmt.Fprintf(b, BEGIN_PROXY_DATA+"\n")
fmt.Fprintf(b, "export %s=%s\n", "no_proxy", NO_PROXY_RAFAY_DATA+","+clusterCidr["PodNetworkCidr"]+","+clusterCidr["ServiceCidr"]+","+proxyConfig.NoProxy)
fmt.Fprintf(b, "export %s=%s\n", "NO_PROXY", NO_PROXY_RAFAY_DATA+","+clusterCidr["PodNetworkCidr"]+","+clusterCidr["ServiceCidr"]+","+proxyConfig.NoProxy)
fmt.Fprintf(b, "export %s=%s\n", "no_proxy", NO_PROXY_PARALUS_DATA+","+clusterCidr["PodNetworkCidr"]+","+clusterCidr["ServiceCidr"]+","+proxyConfig.NoProxy)
fmt.Fprintf(b, "export %s=%s\n", "NO_PROXY", NO_PROXY_PARALUS_DATA+","+clusterCidr["PodNetworkCidr"]+","+clusterCidr["ServiceCidr"]+","+proxyConfig.NoProxy)
if proxyConfig.HttpProxy != "" {
fmt.Fprintf(b, "export %s=%s\n", "http_proxy", proxyConfig.HttpProxy)
fmt.Fprintf(b, "export %s=%s\n", "HTTP_PROXY", proxyConfig.HttpProxy)
@@ -37,5 +37,5 @@ func UpdateProxyData(cert string, proxyConfig infrav3.ProxyConfig, clusterCidr m
}
func GetNoProxyDataString(noProxyConfig string, clusterCidr map[string]string) string {
return NO_PROXY_RAFAY_DATA + "," + clusterCidr["PodNetworkCidr"] + "," + clusterCidr["ServiceCidr"] + "," + noProxyConfig
return NO_PROXY_PARALUS_DATA + "," + clusterCidr["PodNetworkCidr"] + "," + clusterCidr["ServiceCidr"] + "," + noProxyConfig
}
+14 -14
View File
@@ -3,21 +3,21 @@ package cluster
import (
"time"
"github.com/RafayLabs/rcloud-base/internal/cluster/constants"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
infrav3 "github.com/RafayLabs/rcloud-base/proto/types/infrapb/v3"
"github.com/RafayLabs/rcloud-base/proto/types/scheduler"
"github.com/paralus/paralus/internal/cluster/constants"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
infrav3 "github.com/paralus/paralus/proto/types/infrapb/v3"
"github.com/paralus/paralus/proto/types/scheduler"
"google.golang.org/protobuf/types/known/timestamppb"
)
// ClusterConditionFunc is the function signature for creating new cluster condition
type ClusterConditionFunc func(status commonv3.RafayConditionStatus, reason string) *infrav3.ClusterCondition
type ClusterConditionFunc func(status commonv3.ParalusConditionStatus, reason string) *infrav3.ClusterCondition
// ClusterConditionReadyFunc checks if condition type is ready
type ClusterConditionReadyFunc func(c *infrav3.Cluster) bool
// NamespaceConditionFunc is the function signature for creating new cluster namespace condition
type NamespaceConditionFunc func(status commonv3.RafayConditionStatus, reason string) *scheduler.ClusterNamespaceCondition
type NamespaceConditionFunc func(status commonv3.ParalusConditionStatus, reason string) *scheduler.ClusterNamespaceCondition
// NamespaceConditionReadyFunc checks if condition type is ready
type NamespaceConditionReadyFunc func(n *scheduler.ClusterNamespace) bool
@@ -81,7 +81,7 @@ var DefaultClusterConditions = func() []*infrav3.ClusterCondition {
if _, ok := infrav3.ClusterConditionType_name[i]; !ok {
break
}
clstrCnd := newClusterCondition(infrav3.ClusterConditionType(i))(commonv3.RafayConditionStatus_NotSet, "pending")
clstrCnd := newClusterCondition(infrav3.ClusterConditionType(i))(commonv3.ParalusConditionStatus_NotSet, "pending")
conditions = append(conditions, clstrCnd)
i++
}
@@ -89,8 +89,8 @@ var DefaultClusterConditions = func() []*infrav3.ClusterCondition {
return conditions
}()
func newClusterCondition(conditionType infrav3.ClusterConditionType) func(status commonv3.RafayConditionStatus, reason string) *infrav3.ClusterCondition {
return func(status commonv3.RafayConditionStatus, reason string) *infrav3.ClusterCondition {
func newClusterCondition(conditionType infrav3.ClusterConditionType) func(status commonv3.ParalusConditionStatus, reason string) *infrav3.ClusterCondition {
return func(status commonv3.ParalusConditionStatus, reason string) *infrav3.ClusterCondition {
return &infrav3.ClusterCondition{
Type: conditionType,
Status: status,
@@ -111,7 +111,7 @@ var SetClusterCondition = func(c *infrav3.Cluster, condtition *infrav3.ClusterCo
}
func isClusterCondition(conditionStatus commonv3.RafayConditionStatus, conditionTypes ...infrav3.ClusterConditionType) func(c *infrav3.Cluster) bool {
func isClusterCondition(conditionStatus commonv3.ParalusConditionStatus, conditionTypes ...infrav3.ClusterConditionType) func(c *infrav3.Cluster) bool {
return func(c *infrav3.Cluster) bool {
for _, condition := range c.Spec.ClusterData.ClusterStatus.Conditions {
for _, conditionType := range conditionTypes {
@@ -139,8 +139,8 @@ func isClusterConditionSuccess(conditionType infrav3.ClusterConditionType) func(
}
}
func newNamespaceCondition(conditionType scheduler.ClusterNamespaceConditionType) func(status commonv3.RafayConditionStatus, reason string) *scheduler.ClusterNamespaceCondition {
return func(status commonv3.RafayConditionStatus, reason string) *scheduler.ClusterNamespaceCondition {
func newNamespaceCondition(conditionType scheduler.ClusterNamespaceConditionType) func(status commonv3.ParalusConditionStatus, reason string) *scheduler.ClusterNamespaceCondition {
return func(status commonv3.ParalusConditionStatus, reason string) *scheduler.ClusterNamespaceCondition {
return &scheduler.ClusterNamespaceCondition{
Type: conditionType,
Status: status,
@@ -150,7 +150,7 @@ func newNamespaceCondition(conditionType scheduler.ClusterNamespaceConditionType
}
}
func isNamespaceCondition(conditionType scheduler.ClusterNamespaceConditionType, conditionStatus commonv3.RafayConditionStatus) func(n *scheduler.ClusterNamespace) bool {
func isNamespaceCondition(conditionType scheduler.ClusterNamespaceConditionType, conditionStatus commonv3.ParalusConditionStatus) func(n *scheduler.ClusterNamespace) bool {
return func(n *scheduler.ClusterNamespace) bool {
for _, condition := range n.Status.Conditions {
if condition.Type == conditionType {
@@ -163,7 +163,7 @@ func isNamespaceCondition(conditionType scheduler.ClusterNamespaceConditionType,
}
}
func namespaceConditionReason(conditionType scheduler.ClusterNamespaceConditionType, conditionStatus commonv3.RafayConditionStatus) func(n *scheduler.ClusterNamespace) string {
func namespaceConditionReason(conditionType scheduler.ClusterNamespaceConditionType, conditionStatus commonv3.ParalusConditionStatus) func(n *scheduler.ClusterNamespace) string {
return func(n *scheduler.ClusterNamespace) string {
for _, condition := range n.Status.Conditions {
if condition.Type == conditionType {
+24 -24
View File
@@ -3,7 +3,7 @@ package constants
import (
"regexp"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
)
type ClusterGeneration int
@@ -17,21 +17,21 @@ const (
var KubernetesLabelNameRegex = regexp.MustCompile(`^[A-Za-z0-9]([\.A-Za-z0-9_-]*[A-Za-z0-9])?$`)
const (
RafayDomainLabel = "rafay.dev"
ClusterLabelKey = "rafay.dev/clusterName"
ClusterLocationKey = "rafay.dev/clusterLocation"
ClusterTypeKey = "rafay.dev/clusterType"
KubernetesVersionKey = "rafay.dev/k8sVersion"
ClusterGPU = "rafay.dev/clusterGPU"
ClusterGPUVendor = "rafay.dev/clusterGPUVendor"
ClusterUpgradeProtection = "rafay.dev/clusterUpgradeProtection"
ParalusDomainLabel = "paralus.dev"
ClusterLabelKey = "paralus.dev/clusterName"
ClusterLocationKey = "paralus.dev/clusterLocation"
ClusterTypeKey = "paralus.dev/clusterType"
KubernetesVersionKey = "paralus.dev/k8sVersion"
ClusterGPU = "paralus.dev/clusterGPU"
ClusterGPUVendor = "paralus.dev/clusterGPUVendor"
ClusterUpgradeProtection = "paralus.dev/clusterUpgradeProtection"
EdgeSuffix = "EDGE_SUFFIX"
EdgeCnameSuffix = "EDGE_CNAME_SUFFIX"
DefaultBlueprint = "default"
OverrideCluster = "rafay.dev/overrideCluster"
ClusterID = "rafay.dev/clusterID"
Public = "rafay.dev/public"
ClusterName = "rafay.dev/clusterName"
OverrideCluster = "paralus.dev/overrideCluster"
ClusterID = "paralus.dev/clusterID"
Public = "paralus.dev/public"
ClusterName = "paralus.dev/clusterName"
)
const (
@@ -41,15 +41,15 @@ const (
)
const (
NotSet = commonv3.RafayConditionStatus_NotSet
Pending = commonv3.RafayConditionStatus_Pending
InProgress = commonv3.RafayConditionStatus_InProgress
Success = commonv3.RafayConditionStatus_Success
Failed = commonv3.RafayConditionStatus_Failed
Retry = commonv3.RafayConditionStatus_Retry
Skipped = commonv3.RafayConditionStatus_Skipped
Stopped = commonv3.RafayConditionStatus_Stopped
Expired = commonv3.RafayConditionStatus_Expired
Stopping = commonv3.RafayConditionStatus_Stopping
Submitted = commonv3.RafayConditionStatus_Submitted
NotSet = commonv3.ParalusConditionStatus_NotSet
Pending = commonv3.ParalusConditionStatus_Pending
InProgress = commonv3.ParalusConditionStatus_InProgress
Success = commonv3.ParalusConditionStatus_Success
Failed = commonv3.ParalusConditionStatus_Failed
Retry = commonv3.ParalusConditionStatus_Retry
Skipped = commonv3.ParalusConditionStatus_Skipped
Stopped = commonv3.ParalusConditionStatus_Stopped
Expired = commonv3.ParalusConditionStatus_Expired
Stopping = commonv3.ParalusConditionStatus_Stopping
Submitted = commonv3.ParalusConditionStatus_Submitted
)
+4 -4
View File
@@ -5,11 +5,11 @@ import (
"strings"
"time"
"github.com/RafayLabs/rcloud-base/internal/cluster/constants"
"github.com/RafayLabs/rcloud-base/internal/dao"
"github.com/RafayLabs/rcloud-base/internal/models"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/cluster/constants"
"github.com/paralus/paralus/internal/dao"
"github.com/paralus/paralus/internal/models"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
"github.com/uptrace/bun"
)
@@ -3,9 +3,9 @@ package dao
import (
"context"
"github.com/RafayLabs/rcloud-base/internal/dao"
"github.com/RafayLabs/rcloud-base/internal/models"
"github.com/RafayLabs/rcloud-base/pkg/log"
"github.com/paralus/paralus/internal/dao"
"github.com/paralus/paralus/internal/models"
"github.com/paralus/paralus/pkg/log"
"github.com/uptrace/bun"
)
+3 -3
View File
@@ -4,9 +4,9 @@ import (
"context"
"errors"
"github.com/RafayLabs/rcloud-base/internal/dao"
"github.com/RafayLabs/rcloud-base/internal/models"
infrav3 "github.com/RafayLabs/rcloud-base/proto/types/infrapb/v3"
"github.com/paralus/paralus/internal/dao"
"github.com/paralus/paralus/internal/models"
infrav3 "github.com/paralus/paralus/proto/types/infrapb/v3"
"github.com/rs/xid"
"github.com/uptrace/bun"
)
+4 -4
View File
@@ -3,11 +3,11 @@ package dao
import (
"context"
"github.com/RafayLabs/rcloud-base/internal/dao"
"github.com/RafayLabs/rcloud-base/internal/models"
"github.com/RafayLabs/rcloud-base/pkg/query"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/dao"
"github.com/paralus/paralus/internal/models"
"github.com/paralus/paralus/pkg/query"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
"github.com/uptrace/bun"
)
+47 -47
View File
@@ -4,19 +4,19 @@ kind: Namespace
metadata:
labels:
control-plane: controller-manager
name: rafay-system
name: paralus-system
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: system-sa
namespace: rafay-system
namespace: paralus-system
---
{{- if and .Cluster.Metadata.Labels (eq (index .Cluster.Metadata.Labels "rafay.dev/kubernetesProvider") "OPENSHIFT") }}
{{- if and .Cluster.Metadata.Labels (eq (index .Cluster.Metadata.Labels "paralus.dev/kubernetesProvider") "OPENSHIFT") }}
apiVersion: security.openshift.io/v1
kind: SecurityContextConstraints
metadata:
name: rafay-privileged-scc
name: paralus-privileged-scc
annotations:
include.release.openshift.io/ibm-cloud-managed: "true"
include.release.openshift.io/self-managed-high-availability: "true"
@@ -27,7 +27,7 @@ metadata:
only for cluster administration. Grant with caution.'
release.openshift.io/create-only: "true"
labels:
rep-workload: "rafay-privileged-scc"
rep-workload: "paralus-privileged-scc"
allowHostDirVolumePlugin: true
allowHostIPC: true
allowHostNetwork: true
@@ -58,12 +58,12 @@ seccompProfiles:
supplementalGroups:
type: RunAsAny
users:
- system:serviceaccount:rafay-system:default
- system:serviceaccount:rafay-system:system-sa
- system:serviceaccount:rafay-system:ingress-nginx
- system:serviceaccount:rafay-system:ingress-nginx-admission
- system:serviceaccount:rafay-system:gatekeeper-admin
- system:serviceaccount:rafay-system:gatekeeper-update-namespace-label
- system:serviceaccount:paralus-system:default
- system:serviceaccount:paralus-system:system-sa
- system:serviceaccount:paralus-system:ingress-nginx
- system:serviceaccount:paralus-system:ingress-nginx-admission
- system:serviceaccount:paralus-system:gatekeeper-admin
- system:serviceaccount:paralus-system:gatekeeper-update-namespace-label
volumes:
- '*'
---
@@ -71,7 +71,7 @@ volumes:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: rafay:manager
name: paralus:manager
rules:
- apiGroups:
- '*'
@@ -84,7 +84,7 @@ rules:
verbs:
- '*'
- apiGroups:
- cluster.rafay.dev
- cluster.paralus.dev
resources:
- namespaces
verbs:
@@ -96,7 +96,7 @@ rules:
- update
- watch
- apiGroups:
- cluster.rafay.dev
- cluster.paralus.dev
resources:
- namespaces/status
verbs:
@@ -104,7 +104,7 @@ rules:
- patch
- update
- apiGroups:
- cluster.rafay.dev
- cluster.paralus.dev
resources:
- tasklets
verbs:
@@ -116,7 +116,7 @@ rules:
- update
- watch
- apiGroups:
- cluster.rafay.dev
- cluster.paralus.dev
resources:
- tasklets/status
verbs:
@@ -124,7 +124,7 @@ rules:
- patch
- update
- apiGroups:
- cluster.rafay.dev
- cluster.paralus.dev
resources:
- tasks
verbs:
@@ -136,7 +136,7 @@ rules:
- update
- watch
- apiGroups:
- cluster.rafay.dev
- cluster.paralus.dev
resources:
- tasks/status
verbs:
@@ -147,23 +147,23 @@ rules:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: rafay:rafay-system:manager-rolebinding
name: paralus:paralus-system:manager-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: rafay:manager
name: paralus:manager
subjects:
- kind: ServiceAccount
name: system-sa
namespace: rafay-system
namespace: paralus-system
- kind: ServiceAccount
name: default
namespace: rafay-system
namespace: paralus-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: rafay:proxy-role
name: paralus:proxy-role
rules:
- apiGroups:
- authentication.k8s.io
@@ -181,32 +181,32 @@ rules:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: rafay:rafay-system:proxy-rolebinding
namespace: rafay-system
name: paralus:paralus-system:proxy-rolebinding
namespace: paralus-system
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: rafay:proxy-role
name: paralus:proxy-role
subjects:
- kind: ServiceAccount
name: system-sa
namespace: rafay-system
namespace: paralus-system
- kind: ServiceAccount
name: default
namespace: rafay-system
namespace: paralus-system
---
apiVersion: scheduling.k8s.io/v1
description: This priority class should be used for rafay service pods only.
description: This priority class should be used for paralus service pods only.
kind: PriorityClass
metadata:
name: rafay-cluster-critical
name: paralus-cluster-critical
value: 1000000000
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: rafay:leader-election-role
namespace: rafay-system
name: paralus:leader-election-role
namespace: paralus-system
rules:
- apiGroups:
- ""
@@ -238,30 +238,30 @@ rules:
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: rafay:leader-election-rolebinding
namespace: rafay-system
name: paralus:leader-election-rolebinding
namespace: paralus-system
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: rafay:leader-election-role
name: paralus:leader-election-role
subjects:
- kind: ServiceAccount
name: system-sa
namespace: rafay-system
namespace: paralus-system
- kind: ServiceAccount
name: default
namespace: rafay-system
namespace: paralus-system
---
apiVersion: v1
kind: ConfigMap
metadata:
name: proxy-config
namespace: rafay-system
namespace: paralus-system
labels:
app.kubernetes.io/managed-by: Helm
annotations:
meta.helm.sh/release-name: v2-infra
meta.helm.sh/release-namespace: rafay-system
meta.helm.sh/release-namespace: paralus-system
data:
httpProxy: "{{if .Cluster.Spec.ProxyConfig}}{{ if .Cluster.Spec.ProxyConfig.Enabled }}{{- .Cluster.Spec.ProxyConfig.HttpProxy -}}{{end}}{{end}}"
httpsProxy: "{{if .Cluster.Spec.ProxyConfig}}{{ if .Cluster.Spec.ProxyConfig.Enabled }}{{- .Cluster.Spec.ProxyConfig.HttpsProxy -}}{{end}}{{end}}"
@@ -274,26 +274,26 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: relay-agent-config
namespace: rafay-system
namespace: paralus-system
labels:
app.kubernetes.io/managed-by: Helm
annotations:
meta.helm.sh/release-name: v2-infra
meta.helm.sh/release-namespace: rafay-system
meta.helm.sh/release-namespace: paralus-system
data:
clusterID: {{if .Cluster.Metadata.Labels}}{{ index .Cluster.Metadata.Labels "rafay.dev/clusterID" }}{{end}}
clusterID: {{if .Cluster.Metadata.Labels}}{{ index .Cluster.Metadata.Labels "paralus.dev/clusterID" }}{{end}}
relays: '{{if .Cluster.Metadata.Annotations}}{{- index .Cluster.Metadata.Annotations "relays" -}}{{end}}'
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: relay-agent
namespace: rafay-system
namespace: paralus-system
labels:
app.kubernetes.io/managed-by: Helm
annotations:
meta.helm.sh/release-name: v2-infra
meta.helm.sh/release-namespace: rafay-system
meta.helm.sh/release-namespace: paralus-system
spec:
selector:
matchLabels:
@@ -319,11 +319,11 @@ spec:
values:
- amd64
terminationGracePeriodSeconds: 10
priorityClassName: rafay-cluster-critical
priorityClassName: paralus-cluster-critical
serviceAccountName: system-sa
initContainers:
- name: set-limits
image: "registry.rafay-edge.net/rafay/busybox:1.33"
image: "registry.paralus-edge.net/paralus/busybox:1.33"
command: ["sh", "-c", "ulimit -n 65536"]
securityContext:
privileged: true
@@ -401,4 +401,4 @@ spec:
volumes:
- name: relay-agent-config
configMap:
name: relay-agent-config
name: relay-agent-config
+5 -5
View File
@@ -5,7 +5,7 @@ import (
"regexp"
"strings"
"github.com/RafayLabs/rcloud-base/internal/cluster/constants"
"github.com/paralus/paralus/internal/cluster/constants"
)
func IsValidKubernetesLabelNameValueRegex(input string) bool {
@@ -42,8 +42,8 @@ func validateCustomLabelKeyPrefix(prefix string) error {
if len(prefix) > 253 {
return fmt.Errorf("invalid custom label key; label key prefix should be less than or equal to 253 characters (%s)", prefix)
}
if prefix == constants.RafayDomainLabel {
return fmt.Errorf("invalid custom label key; rafay.dev is a reserved domain for Rafay and custom labels shouldn't use this domain: %s", prefix)
if prefix == constants.ParalusDomainLabel {
return fmt.Errorf("invalid custom label key; paralus.dev is a reserved domain for Paralus and custom labels shouldn't use this domain: %s", prefix)
}
if !IsValidKubernetesLabelNameValueRegex(prefix) {
return fmt.Errorf("invalid custom label key prefix (%s); prefix should start and end with alpha numerical value and can have dashes (-), underscores (_) and dots (.)", prefix)
@@ -146,8 +146,8 @@ func ValidatePrefix(prefix string) error {
if len(prefix) > 253 {
return fmt.Errorf("invalid custom label key; label key prefix should be less than or equal to 253 characters (%s)", prefix)
}
if prefix == constants.RafayDomainLabel {
return fmt.Errorf("invalid custom label key; rafay.dev is a reserved domain for Rafay and custom labels shouldn't use this domain: %s", prefix)
if prefix == constants.ParalusDomainLabel {
return fmt.Errorf("invalid custom label key; paralus.dev is a reserved domain for Paralus and custom labels shouldn't use this domain: %s", prefix)
}
if !IsValidKubernetesLabelNameValueRegex(prefix) {
return fmt.Errorf("invalid custom label key prefix (%s); prefix should start and end with alpha numerical value and can have dashes (-), underscores (_) and dots (.)", prefix)
+5 -5
View File
@@ -6,12 +6,12 @@ import (
"fmt"
"time"
"github.com/RafayLabs/rcloud-base/internal/models"
"github.com/RafayLabs/rcloud-base/internal/random"
"github.com/RafayLabs/rcloud-base/pkg/query"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
"github.com/RafayLabs/rcloud-base/proto/types/sentry"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/models"
"github.com/paralus/paralus/internal/random"
"github.com/paralus/paralus/pkg/query"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
"github.com/paralus/paralus/proto/types/sentry"
"github.com/uptrace/bun"
)
+2 -2
View File
@@ -3,9 +3,9 @@ package dao
import (
"context"
"github.com/RafayLabs/rcloud-base/internal/models"
userv3 "github.com/RafayLabs/rcloud-base/proto/types/userpb/v3"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/models"
userv3 "github.com/paralus/paralus/proto/types/userpb/v3"
"github.com/uptrace/bun"
)
+2 -2
View File
@@ -4,9 +4,9 @@ import (
"context"
"time"
"github.com/RafayLabs/rcloud-base/internal/models"
"github.com/RafayLabs/rcloud-base/proto/types/sentry"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/models"
"github.com/paralus/paralus/proto/types/sentry"
"github.com/uptrace/bun"
)
+1 -1
View File
@@ -4,8 +4,8 @@ import (
"context"
"fmt"
"github.com/RafayLabs/rcloud-base/internal/models"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/models"
"github.com/uptrace/bun"
)
+1 -1
View File
@@ -4,8 +4,8 @@ import (
"context"
"database/sql"
"github.com/RafayLabs/rcloud-base/internal/models"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/models"
"github.com/uptrace/bun"
)
+1 -1
View File
@@ -3,8 +3,8 @@ package dao
import (
"context"
"github.com/RafayLabs/rcloud-base/internal/models"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/models"
"github.com/uptrace/bun"
)
+2 -2
View File
@@ -3,9 +3,9 @@ package dao
import (
"context"
"github.com/RafayLabs/rcloud-base/internal/models"
userv3 "github.com/RafayLabs/rcloud-base/proto/types/userpb/v3"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/models"
userv3 "github.com/paralus/paralus/proto/types/userpb/v3"
"github.com/uptrace/bun"
)
+1 -1
View File
@@ -4,8 +4,8 @@ import (
"context"
"strings"
"github.com/RafayLabs/rcloud-base/internal/models"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/models"
"github.com/uptrace/bun"
)
+2 -2
View File
@@ -4,9 +4,9 @@ import (
"context"
"database/sql"
"github.com/RafayLabs/rcloud-base/internal/models"
userv3 "github.com/RafayLabs/rcloud-base/proto/types/userpb/v3"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/models"
userv3 "github.com/paralus/paralus/proto/types/userpb/v3"
"github.com/uptrace/bun"
)
+38 -38
View File
@@ -1,9 +1,9 @@
items:
- metadata:
name: rafay-sentry-peering-server
displayName: "Rafay Sentry Peering Server"
name: paralus-sentry-peering-server
displayName: "Paralus Sentry Peering Server"
spec:
infraRef: rafay-sentry-peering
infraRef: paralus-sentry-peering
autoRegister: true
autoApprove: true
ignoreMultipleRegister: true
@@ -11,18 +11,18 @@ items:
hosts:
- host: "{{ .sentryPeeringHost }}"
type: "HostTypeExternal"
- host: "rafay-sentry:7001"
- host: "paralus-sentry:7001"
type: "HostTypeInternal"
- host: "rafay-sentry.rafay-system:7001 "
- host: "paralus-sentry.paralus-system:7001 "
type: "HostTypeInternal"
- host: "rafay-sentry.rafay-system.svc.cluster.local:7001"
- host: "paralus-sentry.paralus-system.svc.cluster.local:7001"
type: "HostTypeInternal"
inClusterTemplate: ""
outOfClusterTemplate: ""
- metadata:
name: rafay-sentry-peering-client
name: paralus-sentry-peering-client
spec:
infraRef: rafay-sentry-peering
infraRef: paralus-sentry-peering
autoRegister: true
autoApprove: true
ignoreMultipleRegister: true
@@ -30,12 +30,12 @@ items:
inClusterTemplate: ""
outOfClusterTemplate: ""
- metadata:
name: rafay-core-relay-server
displayName: "Rafay Core Relay Server"
name: paralus-core-relay-server
displayName: "Paralus Core Relay Server"
labels:
rafay.dev/connectorTemplate: "true"
paralus.dev/connectorTemplate: "true"
spec:
infraRef: rafay-core-relay
infraRef: paralus-core-relay
autoRegister: true
autoApprove: true
ignoreMultipleRegister: true
@@ -46,11 +46,11 @@ items:
inClusterTemplate: ""
outOfClusterTemplate: ""
- metadata:
name: rafay-core-relay-agent
name: paralus-core-relay-agent
labels:
rafay.dev/defaultRelay: "true"
paralus.dev/defaultRelay: "true"
spec:
infraRef: rafay-core-relay
infraRef: paralus-core-relay
autoRegister: false
autoApprove: true
ignoreMultipleRegister: true
@@ -61,14 +61,14 @@ items:
inClusterTemplate: ""
outOfClusterTemplate: ""
- metadata:
name: rafay-core-relay-user
displayName: "Rafay Core User Server"
name: paralus-core-relay-user
displayName: "Paralus Core User Server"
labels:
rafay.dev/defaultUser: "true"
rafay.dev/userTemplate: "true"
rafay.dev/connectorAgentTemplate: "rafay-core-relay-agent"
paralus.dev/defaultUser: "true"
paralus.dev/userTemplate: "true"
paralus.dev/connectorAgentTemplate: "paralus-core-relay-agent"
spec:
infraRef: rafay-core-relay-user
infraRef: paralus-core-relay-user
autoRegister: true
autoApprove: true
ignoreMultipleRegister: true
@@ -79,12 +79,12 @@ items:
inClusterTemplate: ""
outOfClusterTemplate: ""
- metadata:
name: rafay-core-cd-relay-user
displayName: "Rafay Core CD Relay User"
name: paralus-core-cd-relay-user
displayName: "Paralus Core CD Relay User"
labels:
rafay.dev/defaultCDUser: "true"
paralus.dev/defaultCDUser: "true"
spec:
infraRef: rafay-core-cd-relay-user
infraRef: paralus-core-cd-relay-user
autoRegister: true
autoApprove: true
ignoreMultipleRegister: true
@@ -92,19 +92,19 @@ items:
hosts:
- host: "{{ .coreCDRelayUserHost }}"
type: "HostTypeExternal"
- host: "rafay-cd-agent:7000"
- host: "paralus-cd-agent:7000"
type: "HostTypeInternal"
- host: "rafay-cd-agent.rafay-system:7000 "
- host: "paralus-cd-agent.paralus-system:7000 "
type: "HostTypeInternal"
- host: "rafay-cd-agent.rafay-system.svc.cluster.local:7000"
- host: "paralus-cd-agent.paralus-system.svc.cluster.local:7000"
type: "HostTypeInternal"
inClusterTemplate: ""
outOfClusterTemplate: ""
- metadata:
name: rafay-core-cd-relay-server
displayName: "Rafay Core CD Relay Server"
name: paralus-core-cd-relay-server
displayName: "Paralus Core CD Relay Server"
spec:
infraRef: rafay-core-cd-relay
infraRef: paralus-core-cd-relay
autoRegister: true
autoApprove: true
ignoreMultipleRegister: true
@@ -115,12 +115,12 @@ items:
inClusterTemplate: ""
outOfClusterTemplate: ""
- metadata:
name: rafay-core-cd-relay-agent
displayName: "Rafay Core CD Relay Agent"
name: paralus-core-cd-relay-agent
displayName: "Paralus Core CD Relay Agent"
labels:
rafay.dev/defaultCDRelay: "true"
paralus.dev/defaultCDRelay: "true"
spec:
infraRef: rafay-core-cd-relay
infraRef: paralus-core-cd-relay
autoRegister: false
autoApprove: true
ignoreMultipleRegister: true
@@ -131,12 +131,12 @@ items:
inClusterTemplate: ""
outOfClusterTemplate: ""
- metadata:
name: rafay-sentry-cd-peering-client
name: paralus-sentry-cd-peering-client
spec:
infraRef: rafay-sentry-peering
infraRef: paralus-sentry-peering
autoRegister: true
autoApprove: true
ignoreMultipleRegister: true
templateType: "Client"
inClusterTemplate: ""
outOfClusterTemplate: ""
outOfClusterTemplate: ""
@@ -5,7 +5,7 @@ metadata:
rep-addon: v2-relay-agent
rep-cluster: "{{ .DownloadData.ClusterID }}"
name: "kube-proxy-agent-{{ .DownloadData.ClusterID }}"
namespace: rafay-system
namespace: paralus-system
spec:
progressDeadlineSeconds: 1800
replicas: 1
@@ -98,7 +98,7 @@ spec:
privileged: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
priorityClassName: rafay-cluster-critical
priorityClassName: paralus-cluster-critical
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
@@ -121,4 +121,4 @@ metadata:
rep-addon: v2-relay-agent
rep-cluster: "{{ .DownloadData.ClusterID }}"
name: "kube-proxy-agent-config-{{ .DownloadData.ClusterID }}"
namespace: rafay-system
namespace: paralus-system
+42 -42
View File
@@ -4,15 +4,15 @@ kind: Namespace
metadata:
labels:
control-plane: controller-manager
name: rafay-system
name: paralus-system
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: rafay-kube-proxy-audit
namespace: rafay-system
name: paralus-kube-proxy-audit
namespace: paralus-system
spec:
accessModes:
- ReadWriteOnce
@@ -26,19 +26,19 @@ apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: rafay-kube-proxy
name: rafay-kube-proxy
namespace: rafay-system
app: paralus-kube-proxy
name: paralus-kube-proxy
namespace: paralus-system
spec:
replicas: 1
progressDeadlineSeconds: 1800
selector:
matchLabels:
app: rafay-kube-proxy
app: paralus-kube-proxy
template:
metadata:
labels:
app: rafay-kube-proxy
app: paralus-kube-proxy
spec:
containers:
- args:
@@ -55,64 +55,64 @@ spec:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
- name: RAFAY_RELAY_PEERSERVICE
- name: PARALUS_RELAY_PEERSERVICE
valueFrom:
configMapKeyRef:
key: sentry.peering.host
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: SENTRY_ADDR
valueFrom:
configMapKeyRef:
key: sentry.addr
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: BOOTSTRAP_ADDR
valueFrom:
configMapKeyRef:
key: sentry.addr
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: RELAY_PEERING_TOKEN
valueFrom:
configMapKeyRef:
key: peer.token
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: RELAY_USER_TOKEN
valueFrom:
configMapKeyRef:
key: user.token
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: RELAY_USER_HOST_PORT
valueFrom:
configMapKeyRef:
key: user.host.port
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: RELAY_CONNECTOR_TOKEN
valueFrom:
configMapKeyRef:
key: connector.token
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: RELAY_CONNECTOR_HOST_PORT
valueFrom:
configMapKeyRef:
key: connector.host.port
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: RELAY_NETWORK_ID
valueFrom:
configMapKeyRef:
key: relaynetwork.id
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: AUDIT_PATH
valueFrom:
configMapKeyRef:
key: audit.path
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
image: "{{ .DownloadData.RelayImage }}"
imagePullPolicy: IfNotPresent
name: rafay-kube-proxy
name: paralus-kube-proxy
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /opt/rafay/audit
- mountPath: /opt/paralus/audit
name: audit
dnsPolicy: ClusterFirst
restartPolicy: Always
@@ -120,16 +120,16 @@ spec:
volumes:
- name: audit
persistentVolumeClaim:
claimName: rafay-kube-proxy-audit
claimName: paralus-kube-proxy-audit
---
apiVersion: v1
kind: ConfigMap
metadata:
name: rafay-kube-proxy-config
namespace: rafay-system
name: paralus-kube-proxy-config
namespace: paralus-system
data:
audit.path: "/opt/rafay/audit"
audit.path: "/opt/paralus/audit"
sentry.addr: "{{ .DownloadData.SentryAddr }}"
sentry.peering.host: "{{ .DownloadData.PeerHost }}"
peer.token: "{{ .DownloadData.PeerToken }}"
@@ -143,8 +143,8 @@ data:
apiVersion: v1
kind: Service
metadata:
name: rafay-kube-proxy
namespace: rafay-system
name: paralus-kube-proxy
namespace: paralus-system
spec:
ports:
- name: tcp-relay
@@ -156,7 +156,7 @@ spec:
protocol: TCP
targetPort: 8003
selector:
app: rafay-kube-proxy
app: paralus-kube-proxy
---
apiVersion: apps/v1
@@ -164,19 +164,19 @@ kind: Deployment
metadata:
annotations:
labels:
app: rafay-kube-proxy-tail
name: rafay-kube-proxy-tail
namespace: rafay-system
app: paralus-kube-proxy-tail
name: paralus-kube-proxy-tail
namespace: paralus-system
spec:
progressDeadlineSeconds: 600
replicas: 1
selector:
matchLabels:
app: rafay-kube-proxy-tail
app: paralus-kube-proxy-tail
template:
metadata:
labels:
app: rafay-kube-proxy-tail
app: paralus-kube-proxy-tail
spec:
containers:
- args:
@@ -192,40 +192,40 @@ spec:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
- name: RAFAY_RELAY_PEERSERVICE
- name: PARALUS_RELAY_PEERSERVICE
valueFrom:
configMapKeyRef:
key: sentry.peering.host
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: SENTRY_ADDR
valueFrom:
configMapKeyRef:
key: sentry.addr
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: BOOTSTRAP_ADDR
valueFrom:
configMapKeyRef:
key: sentry.addr
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: RELAY_PEERING_TOKEN
valueFrom:
configMapKeyRef:
key: peer.token
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
- name: AUDIT_PATH
valueFrom:
configMapKeyRef:
key: audit.path
name: rafay-kube-proxy-config
name: paralus-kube-proxy-config
image: "{{ .DownloadData.RelayImage }}"
imagePullPolicy: IfNotPresent
name: rafay-kube-proxy-tail
name: paralus-kube-proxy-tail
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /opt/rafay/audit
- mountPath: /opt/paralus/audit
name: audit
volumes:
- name: audit
persistentVolumeClaim:
claimName: rafay-kube-proxy-audit
claimName: paralus-kube-proxy-audit
+10 -10
View File
@@ -19,28 +19,28 @@ var Fixtures = func() http.FileSystem {
fs := vfsgen۰FS{
"/": &vfsgen۰DirInfo{
name: "/",
modTime: time.Date(2021, 11, 29, 20, 16, 39, 198479970, time.UTC),
modTime: time.Date(2022, 6, 9, 10, 25, 17, 658768698, time.UTC),
},
"/agent_templates.yaml": &vfsgen۰CompressedFileInfo{
name: "agent_templates.yaml",
modTime: time.Date(2021, 11, 29, 20, 16, 39, 198236468, time.UTC),
uncompressedSize: 4282,
modTime: time.Date(2022, 6, 9, 10, 25, 17, 658768698, time.UTC),
uncompressedSize: 4367,
compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x02\xff\xe4\x57\x4d\x8f\x9b\x30\x10\xbd\xf7\x57\x8c\xb8\x43\xe9\xa9\x12\xb7\x88\x54\x6a\x0f\xdb\x56\xd9\xed\x0f\x70\xcd\x40\x2d\x19\x1b\xd9\x26\x5a\xb4\xda\xff\x5e\xd9\x98\x14\x04\x49\xa0\x9b\x0f\xaa\xe6\x06\x9e\x19\x66\xfc\xde\x73\x9e\x99\xc1\x52\x27\xef\x00\x42\x28\xd1\x90\x8c\x18\x62\x9f\xec\x4f\x90\x12\x13\x50\x24\x27\x4d\xa8\x51\x18\xd5\x84\x15\xa2\x62\xa2\x08\x35\xaa\x3d\x2a\x1f\x97\x31\x5d\x71\xd2\x7c\x75\xe1\xc1\xce\xc6\xc3\xa3\x8b\x87\xef\x6d\x3c\x3c\xba\xf8\xc0\x25\xe8\x0a\x69\xf7\x09\x26\x72\x45\x76\x98\x4f\x7f\xc6\x07\x91\xda\xc8\x1d\x16\x4c\x1b\x54\x09\x18\x55\x63\x6f\x61\x53\x55\x4a\xee\x71\xf0\x9e\x15\x42\x2a\x7c\xa8\xb9\x61\x15\xc7\xc9\x54\x83\x65\xc5\x89\xc1\xa7\xa6\xb2\x4d\xf7\xfb\x03\xf8\x25\xb5\xd1\x09\xf8\x27\xbb\x35\xf6\x4d\x02\xc1\xcb\x0b\x44\x6d\x8b\x7e\xb0\xcf\x52\x1b\x78\x7d\x0d\x0e\xa1\x00\xa6\xad\x68\x57\x6c\xf1\x4f\xcf\x06\x95\x20\x3c\x18\x57\xeb\x8f\x9c\x7c\x8c\xe3\x0f\x27\xca\x7c\x11\xb3\xca\x44\xfe\xa1\xd1\x06\x4b\x57\x13\x2e\x5c\x34\xd2\x7b\x1a\x51\x5e\xdb\x1d\x8d\xb8\xa4\x84\x2f\x6d\x9d\x89\xb4\x4d\x7f\xf2\x18\x24\x10\x74\x6b\xb2\x36\xdf\xf2\xe9\xe5\x45\xfc\xa4\x9c\xa1\x30\xab\xa5\x5b\xea\xda\xbb\xea\x86\x50\xa9\x30\x54\xc8\xdd\x94\x67\xc4\x9a\x4a\x85\xb0\xb3\xb1\x30\x14\x02\x27\x3f\x91\xeb\xe4\x80\xad\x2b\x1d\x65\xb8\x7f\x4f\xa5\x10\x48\x8d\xec\x37\x65\xe7\x3d\x2f\xf1\x3f\x8d\xdd\x57\xde\xd3\xea\xb6\xdd\xb9\x9d\x68\x53\x96\xeb\xfb\xda\x60\x92\xa2\x23\xf6\x29\x78\x32\xcc\x49\xcd\x8d\x9b\xe4\x52\xc8\xe4\x84\xeb\x6b\x4b\xe1\xe4\xc9\xbb\x7a\x6c\x6a\x7d\x5e\x66\x3f\x34\xaa\xd9\x2a\xf3\x30\xda\x9c\x01\x8a\xc3\x28\xfb\xd9\x49\x19\x1e\x91\xec\xc6\x52\xa8\x97\x30\xcd\xb1\x25\x7c\xe9\x4f\x7e\x03\x39\x3f\xb0\x67\xcc\x96\x51\xc6\x6e\xe1\x9a\x08\x43\xb3\x05\x9c\x49\xb7\xfe\x74\xb6\x53\xcc\x66\x4d\xba\x1d\xf1\xc6\xa1\x09\xa7\xe0\x9c\xea\xeb\x3e\x88\x1e\x07\x34\xdd\xbe\x01\xd2\x91\xc7\xa1\x59\xcb\x77\x6b\x63\xe2\xb7\x98\xa5\xae\xd0\xc8\x83\xc5\x70\xf1\xb2\xd3\x2e\x2c\xbe\xb7\x0b\x1b\x52\x68\x9e\xef\x38\x90\x7b\x74\x47\x98\x45\xd4\xb5\x9a\x08\x4f\xd2\xb4\x3b\x74\x57\x79\xf8\xf4\xcd\xc4\x79\x80\x36\x45\xef\x9f\x7a\xc6\xf1\x73\xc4\x7d\xfc\x3d\xac\xb7\x73\x20\xff\x1c\xae\xfe\x26\x43\xb3\xff\xe7\x0a\xf4\x3b\x00\x00\xff\xff\xcf\x9c\x3f\x88\xba\x10\x00\x00"),
compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x02\xff\xe4\x57\xc1\x8e\x9b\x30\x10\xbd\xf7\x2b\x46\xdc\x43\xe9\xa9\x12\xb7\x88\x54\x6a\x0f\xdb\xae\xb2\xdb\x0f\x70\xcd\x40\x2d\x19\x1b\xd9\x43\xb4\x68\xb5\xff\x5e\x19\x4c\x0a\x0d\x44\xa0\x94\x4d\x56\x9b\x1b\xd8\x33\xcc\xcc\x7b\xcf\x79\x16\x84\x85\x8d\x3f\x00\x6c\xa0\x40\x62\x29\x23\xe6\x9e\xdc\x4f\xb1\x02\x63\x28\x99\x61\xb2\xb2\x1b\x8b\x8a\x4c\xbd\x29\x11\x8d\x50\xf9\xc6\xa2\x39\xa0\xf1\x3b\x53\x61\x4b\xc9\xea\xef\x4d\x40\x70\xdf\x46\xc0\x43\x13\x01\xf7\x6d\x04\x3c\x34\x11\x41\x13\x62\x4b\xe4\xdd\x67\x84\xca\x0c\xdb\x63\x36\xf5\x29\xbf\x8d\x55\xa4\xf7\x98\x0b\x4b\x68\x62\x20\x53\x61\x6f\x61\x5b\x96\x46\x1f\x70\xf0\x5e\xe4\x4a\x1b\xbc\xab\x24\x89\x52\xe2\x68\x28\x61\x51\x4a\x46\xf8\x58\x97\xae\xf0\x7e\x85\x00\xbf\xb5\x25\x1b\x83\x7f\x72\x03\x72\x6f\x62\x08\x9e\x9f\x21\x6c\x4b\xf4\xad\x7d\xd5\x96\xe0\xe5\x25\x38\x6e\x05\xa0\x36\xa3\x5b\x71\xc9\xbf\x3c\x11\x1a\xc5\x64\x70\x9a\x6d\xd8\x74\xfc\x39\x8a\x3e\x9d\x49\xf4\x4d\xcd\x4c\x14\x1e\x1f\x6b\x4b\x58\x34\x79\x61\x85\xc4\xa1\x3d\xf0\x90\xcb\xca\xcd\x36\x94\x9a\x33\xb9\xb4\x05\xa1\x92\x36\xfc\xd1\xa3\x11\x43\xd0\xad\xe9\x8a\x7e\x64\xe3\xcb\x0b\xf9\xca\xa5\x40\x45\x37\x4c\xbe\xa4\x29\x70\xe5\xa1\x70\x6d\x70\x63\x50\xb2\x7a\x8e\x80\x13\x6d\x10\xf6\x6e\x37\x0c\xa5\x21\xd9\x2f\x94\x36\x3e\x62\xec\xd3\x87\x29\x1e\x3e\x72\xad\x14\x72\xd2\xfd\xd2\x5c\xd7\x73\x84\xff\xb7\xbc\xeb\x8a\x7e\x5c\xf3\xae\xba\x66\x1a\x6d\xc8\x72\xd5\xaf\x0f\x2a\xcb\x3b\x92\x9f\x07\x29\xc5\x8c\x55\x92\x9a\x6e\xfe\x1f\x3e\x19\x93\x76\x6d\x61\x9c\x3d\x95\xdf\x00\x42\x95\x9d\x23\xba\x9f\x16\xcd\x02\xcd\x79\x38\x5d\xd4\x00\xcd\x7f\xf7\xb9\x8f\x8f\xca\x72\x52\xc4\x5b\x47\xa8\x5e\xc8\x14\xe7\x96\xb1\xa7\x3f\x85\x57\x90\xf8\x9d\x78\xc2\x74\x19\x81\xdc\x28\x6f\x8b\x3e\x3c\x5d\xc4\xa0\x64\xe7\x4f\x6e\xd7\xc9\x02\x0e\x25\xbb\x13\x16\x35\xa8\xc2\x79\x58\xc7\xaa\xbb\x0e\xb2\xd3\xc0\x26\xbb\x0b\xa0\x1d\xf1\x43\x3c\x6d\xb9\xef\x0c\x4f\x74\x99\xb5\xea\x52\x8d\xb8\xb6\x08\x56\x49\x3d\xee\xdb\xa2\xeb\xfb\xb6\x21\x9d\xe6\xba\x94\x23\xdd\x4f\x6e\x19\x33\x89\x7b\xab\x86\xc3\x93\x36\xe9\x0e\xe4\x1b\x3d\x94\xfa\xc6\x63\x0e\x4c\xdb\xbc\xf7\x9f\x3e\xeb\x58\x9a\xf0\x2a\x97\xc0\xfb\x7a\x7e\xe5\x0d\xe2\xeb\xef\x41\x3c\x7d\x57\x57\xa8\x3f\x01\x00\x00\xff\xff\x2f\xb6\x4c\xa4\x0f\x11\x00\x00"),
},
"/relay_agent_template.yaml": &vfsgen۰CompressedFileInfo{
name: "relay_agent_template.yaml",
modTime: time.Date(2021, 11, 29, 20, 16, 39, 198406454, time.UTC),
uncompressedSize: 3897,
modTime: time.Date(2022, 6, 9, 10, 25, 17, 658768698, time.UTC),
uncompressedSize: 3904,
compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x02\xff\xd4\x57\x5f\x6f\xdb\x36\x10\x7f\xd7\xa7\x20\xfc\xd2\x97\xc9\x4e\x9a\xb5\x28\x04\xf4\x41\xb5\x93\xc6\x98\xff\x08\xb6\xb3\xb5\x18\x06\xe3\x42\x9e\x6d\x22\x14\x29\x90\x27\x27\x42\x90\xef\x3e\x50\xb2\x6c\x39\x71\xb6\x2c\x75\x36\x8c\x4f\xd1\xfd\xfd\xdd\x8f\x17\xf3\x0e\x32\xf9\x2b\x5a\x27\x8d\x8e\x18\x64\x99\xeb\xac\x4f\x83\x1b\xa9\x45\xc4\x7a\x98\x29\x53\xa4\xa8\x29\x48\x91\x40\x00\x41\x14\x30\xa6\xe0\x1a\x95\xf3\x7f\x31\x66\x31\x0b\x41\x08\xef\xbb\x7e\x1f\x5a\x54\x50\x84\xb0\xf4\x1e\xb5\x96\xab\xdc\x11\xda\x88\xb5\xee\xef\x59\xbb\x67\x6e\xb5\x32\x20\x7a\x40\xd0\xee\x56\xaa\x7e\x8f\x3d\x3c\xb4\x02\xc6\x34\xa4\x18\xb1\xd6\x4d\x7e\x8d\x61\x66\xcd\xdd\x26\x54\xf8\x22\x47\x97\x01\xc7\x88\x59\x58\x40\x11\xba\xc2\x11\xa6\x81\xcb\x90\x7b\x9c\x99\x35\x4b\x8b\xce\xf5\x10\x84\x92\x1a\xa7\xc8\x8d\x16\x2e\x62\xa7\x9f\x4e\x4e\x82\x12\xa7\x92\x1c\xbc\xa0\xfc\x5a\x4b\x4f\xc7\xa5\x74\x64\x6c\x31\x90\xa9\xa4\x88\x9d\x7a\x43\x87\x0a\x39\x19\x5b\x15\x9f\x02\xf1\xd5\xa0\xc1\x06\xf3\x04\xbe\xaa\x02\xc2\x34\x53\x40\xb8\x09\xdc\x60\xdb\x1f\xb5\x97\xe3\xf5\x59\x18\xab\x19\xf1\x87\x1b\x4d\x20\x35\xda\x6d\xe4\x90\x81\x5d\x36\xf2\x84\x2c\x0c\x53\x23\xf0\x33\x57\xb2\xbe\xd3\x5a\xae\xcc\x32\x54\xb8\x46\xf5\xf9\x6c\x2b\x47\xbd\x6e\x3a\x57\xf7\x99\x8c\x7b\xf3\x51\x3c\x3c\xdf\x2a\x18\x5b\x83\xca\xf1\xc2\x9a\x34\x6a\x08\x19\x5b\x48\x54\x62\x82\x8b\x7d\xa9\x2f\x77\xd7\xa1\xeb\xd3\x47\xca\xd2\x29\x01\x5a\x45\x5b\xda\xda\x3e\xf1\xb3\x38\xa6\x49\xdc\xfd\xb7\xc1\x94\xcd\xf9\x04\xd1\x30\xfe\x36\xef\xf5\xe3\xc1\xf4\xef\xd1\x70\xa3\x17\x72\x39\x84\xec\x17\x2c\x0e\x80\xba\xc1\x22\x62\x29\xdc\xf5\x24\x28\xf7\x48\xf7\xdc\x7f\x55\x15\xf2\x25\x4d\xb3\x3b\x26\x23\x69\x34\xa8\x88\x91\xcd\x9f\x16\x34\x39\x1f\xc4\xdf\xe7\xdd\xf1\xe8\xa2\xff\x75\x18\x27\x07\xaf\xfd\xc7\xa1\xd4\xd9\x3c\x75\xe3\xab\xd9\x3c\x99\x8c\xbf\x7d\x3f\x0e\x85\x2b\xa2\xcc\x25\x1e\xd9\x41\x12\x2b\xcc\x55\xa0\x7f\xc6\xcc\x1e\xd6\x79\x7c\x35\xbb\x3c\x1f\xcd\xfa\xdd\x78\xd6\x1f\x8f\x8e\x03\xbd\xc4\x16\xe7\xb4\x3a\x32\xf2\xcb\xd9\x2c\x39\x36\xc5\x6f\xc1\xb0\xc7\x39\xfd\x5f\xf4\xc2\x68\x7c\x4c\x98\xda\xbc\x05\xc6\x78\x30\x18\xff\x36\xef\x8f\xa6\xe7\xdd\xab\xc9\xf9\xfc\xcb\x78\x3c\x9b\xce\x26\x71\x72\x1c\xcc\xa0\x94\xb9\xed\x6b\x87\x3c\xb7\xf8\xc5\x18\x72\x64\x21\x3b\x52\x09\x32\x85\x25\x1e\x1a\x37\x26\x7e\x3a\xe9\x7b\xed\xde\xcf\x49\x69\x9f\xe4\x4a\x25\x46\x49\x5e\x44\xac\xbf\x18\x19\x4a\x2c\xba\xe6\x93\xf7\xea\xd9\xa4\x3a\x84\x36\x95\x1a\x3c\xe0\x21\x3a\xe7\x33\x96\xaf\x44\x47\xe0\xba\xd3\x50\xfa\x67\xf5\xaf\x9c\x36\x10\x2f\xa4\xda\x15\xbc\x36\x2a\x4f\x71\x68\x72\x4d\x7b\x6f\x77\xea\x25\x9b\x34\x48\xbc\xf3\x84\xc4\x63\xbc\x0c\x52\x4b\xea\x1e\x18\x24\xb8\x49\x53\xd0\xa2\x89\xc7\xad\x9a\x03\x04\x6f\x7c\xe4\xca\xcf\x58\x2c\xd4\xec\xe3\x87\x0f\x67\x1f\x1f\x5f\xa5\xc5\xa5\x74\x64\x8b\x76\x35\xdc\xa1\x58\x62\x5b\x23\x75\xca\xcf\xce\x75\xee\x8a\x6b\x73\x17\x9d\xb6\xcf\xce\x5e\x75\xa9\x0e\x29\x2c\x01\xec\x5e\x4e\x8b\xce\xe4\x96\xa3\x8b\xd8\xfd\xc3\x56\x5a\xf6\xab\xa4\xc2\xd7\x8b\x77\xd4\x6c\xed\xcc\xca\xb5\x54\xb8\x44\xf1\xa8\x1b\xdf\xee\xe2\x33\x2b\x4d\x89\x46\x81\x73\xa3\xb2\x92\x8a\x9f\xcd\xc4\x1d\x72\x2b\x49\x72\x50\xc1\xb6\x26\x02\x4b\x75\xa4\x58\xdd\x42\x51\x57\xec\xf8\x0a\x45\xae\xd0\x56\x71\x04\x2e\x20\x57\x14\x6e\xc5\xc1\x61\x02\x76\xe4\x34\x10\x7f\xb5\xc0\x31\x41\x2b\x8d\xd8\xcd\xd9\x27\x41\xb3\x57\xf7\xfa\x64\xf3\x73\xd1\x64\x73\x93\x7f\x68\x04\x46\xec\xe7\xf7\x27\xc1\xb1\xa7\x99\x1f\x8b\x12\x84\x61\x18\x3c\x9a\x03\xab\x8d\xa9\x5b\x57\x13\xd4\xe3\x3b\xaf\x3d\x5f\xb2\x00\xd5\x13\x5c\xc4\x5a\x9f\x5a\xe5\x26\xa2\xa0\x70\x11\x7b\xf7\xfb\x7d\x8b\xcc\x0d\xea\x56\xf4\x34\xc8\xcc\x2b\x7c\x80\x9f\x5a\x20\x84\x3d\x64\x32\x45\x4d\xb6\x88\x85\xb0\x95\x1d\x6a\x91\x19\xa9\xe9\x90\xed\xa5\x71\xe4\xbb\xa0\xb2\xf4\x44\x1d\x4c\xba\xd9\x57\x76\x96\xf5\x06\x33\x7b\x16\x67\xd3\xc0\xfb\x3c\xfc\xf1\xee\xbf\xdd\x2b\x5f\xda\x33\xcf\xac\x97\x7f\x06\x00\x00\xff\xff\xb7\xd7\x69\x49\x39\x0f\x00\x00"),
compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x02\xff\xd4\x57\x5f\x6f\xe2\x46\x10\x7f\xf7\xa7\x58\xf1\x72\x2f\x35\x24\x97\xde\xe9\x64\xe9\x1e\x7c\x90\x5c\x50\xf9\x63\x01\x69\xef\x54\x55\x68\xb2\x3b\xc0\x2a\xeb\x5d\x6b\x77\x4c\x62\x45\xf9\xee\xd5\xda\x18\x4c\x42\xda\x34\x47\x5a\xd5\x4f\x78\xfe\xfe\xe6\xb7\x83\x77\x06\x32\xf9\x2b\x5a\x27\x8d\x8e\x18\x64\x99\xeb\xac\x4f\x83\x1b\xa9\x45\xc4\x7a\x98\x29\x53\xa4\xa8\x29\x48\x91\x40\x00\x41\x14\x30\xa6\xe0\x1a\x95\xf3\xbf\x18\xb3\x98\x85\x20\x84\xf7\x5d\xbf\x0f\x2d\x2a\x28\x42\x58\x7a\x8f\x5a\xcb\x55\xee\x08\x6d\xc4\x5a\xf7\xf7\xac\xdd\x33\xb7\x5a\x19\x10\x3d\x20\x68\x77\x2b\x55\xbf\xc7\x1e\x1e\x5a\x01\x63\x1a\x52\x8c\x58\xeb\x26\xbf\xc6\x30\xb3\xe6\x6e\x13\x2a\x7c\x91\xa3\xcb\x80\x63\xc4\x32\xb0\xa0\x72\x17\xba\xc2\x11\xa6\x81\xcb\x90\x7b\xa4\x99\x35\x4b\x8b\xce\xf5\x10\x84\x92\x1a\xa7\xc8\x8d\x16\x2e\x62\xa7\x9f\x4e\x4e\x82\x12\xa9\x92\x1c\xbc\xa0\x7c\x5b\x4b\x4f\xc8\xa5\x74\x64\x6c\x31\x90\xa9\xa4\x88\x9d\x7a\x43\x87\x0a\x39\x19\x5b\x95\x9f\x02\xf1\xd5\xa0\xc1\x07\xf3\x14\xbe\xaa\x06\xc2\x34\x53\x40\xb8\x09\xdc\xe0\xdb\x3f\x6a\x2f\xc7\xeb\xb3\x30\x56\x33\xe2\x1f\x6e\x34\x81\xd4\x68\xb7\x91\x43\x06\x76\xd9\xc8\x13\xb2\x30\x4c\x8d\xc0\xcf\x5c\xc9\xfa\x54\x6b\xb9\x32\xcb\x50\xe1\x1a\xd5\xe7\xb3\xad\x1c\xf5\xba\xe9\x5c\x9d\x68\x32\xee\xcd\x47\xf1\xf0\x7c\xab\x60\x6c\x0d\x2a\xc7\x0b\x6b\xd2\xa8\x21\x64\x6c\x21\x51\x89\x09\x2e\xf6\xa5\xbe\xdc\x5d\x8f\xae\x4f\x1f\x29\x4b\xa7\x04\x68\x15\x6d\x69\x6b\xfb\xc4\xcf\xe2\x98\x26\x71\xf7\xdf\x06\x53\xb6\xe7\x13\x44\xc3\xf8\xdb\xbc\xd7\x8f\x07\xd3\xbf\x47\xc3\x8d\x5e\xc8\xe5\x10\xb2\x5f\xb0\x38\x00\xea\x06\x8b\x88\xa5\x70\xd7\x93\xa0\xdc\x23\xdd\x73\xff\xab\x2a\xe4\x4b\x9a\x66\xf7\x98\x8c\xa4\xd1\xa0\x22\x46\x36\x7f\x5a\xd0\xe4\x7c\x10\x7f\x9f\x77\xc7\xa3\x8b\xfe\xd7\x61\x9c\x1c\x3c\xf6\x1f\x87\x52\x67\xf3\xd4\x8d\xaf\x66\xf3\x64\x32\xfe\xf6\xfd\x38\x14\xae\x88\x32\x97\x78\x64\x07\x49\xac\x30\x57\x81\xfe\x19\x33\x7b\x58\xe7\xf1\xd5\xec\xf2\x7c\x34\xeb\x77\xe3\x59\x7f\x3c\x3a\x0e\xf4\x12\x5b\x9c\xd3\xea\xc8\xc8\x2f\x67\xb3\xe4\xd8\x14\xbf\x05\xc3\x1e\xe7\xf4\x7f\xd1\x0b\xa3\xf1\x31\x61\x6a\xf3\x16\x18\xe3\xc1\x60\xfc\xdb\xbc\x3f\x9a\x9e\x77\xaf\x26\xe7\xf3\x2f\xe3\xf1\x6c\x3a\x9b\xc4\xc9\x71\x30\x83\x52\xe6\xb6\xaf\x1d\xf2\xdc\xe2\x17\x63\xc8\x91\x85\xec\x48\x25\xc8\x14\x96\x78\x68\xe0\x98\xf8\xf9\xa4\xef\xb5\x7b\x9f\x93\xd2\x3e\xc9\x95\x4a\x8c\x92\xbc\x88\x58\x7f\x31\x32\x94\x58\x74\xcd\x2b\xef\xd5\xd3\x49\xf5\x10\xda\x54\x6a\xf0\x80\x87\xe8\x9c\xcf\x58\xde\x12\x1d\x81\xeb\x4e\x43\xe9\xaf\xd5\xbf\x72\xda\x40\xbc\x90\x6a\x57\xf0\xda\xa8\x3c\xc5\xa1\xc9\x35\xed\xdd\xdd\xa9\x97\x6c\xd2\x20\xf1\xce\x13\x12\x8f\x71\x33\x48\x2d\xa9\x7b\x60\x90\xe0\x26\x4d\x41\x8b\x26\x1e\xb7\x6a\x0e\x10\xbc\xf1\x92\x2b\x3f\x63\xb1\x50\xb3\x8f\x1f\x3e\x9c\x7d\x7c\x7c\x94\x16\x97\xd2\x91\x2d\xda\x16\x16\x50\x84\x28\x96\xd8\xd6\x48\x9d\xf2\xb5\x73\x9d\xbb\xe2\xda\xdc\x45\xa7\xed\xb3\xb3\x57\x1d\xaa\x43\x0a\x4b\x00\xbb\x9b\xd3\xa2\x33\xb9\xe5\xe8\x22\x76\xff\xb0\x95\x96\xfd\x2a\xa9\xf0\xf5\xe2\x1d\x35\x5b\x3b\xb3\x72\x2d\x15\x2e\x51\x3c\xea\xc6\xb7\x3b\xf8\xcc\x4a\x53\xa2\x51\xe0\xdc\xa8\xfa\xb3\x6c\xc6\xdf\xcd\xd4\x1d\x72\x2b\x49\x72\x50\xc1\xb6\x2a\x02\x4b\x75\xac\x58\xdd\x42\x51\xd7\xec\xf8\x0a\x45\xae\xd0\x56\x91\x04\x2e\x20\x57\x14\x6e\xc5\xc1\x61\x0a\x76\xf4\x34\x30\x7f\xb5\xc0\x31\x41\x2b\x8d\xd8\x4d\xda\x27\x41\xb3\x5b\xf7\x3a\x65\xf3\xc1\x68\xf2\xb9\xc9\x3f\x34\x02\x23\xf6\xf3\xfb\x93\xe0\xd8\xf3\xcc\x8f\x45\x09\xc2\x30\x0c\x1e\x4d\x82\xd5\xd6\xd4\xad\xab\x09\xea\x01\x9e\xd7\x9e\x2f\x59\x82\xea\x19\x2e\x62\xad\x4f\xad\x72\x17\x51\x50\xb8\x88\xbd\xfb\xfd\xbe\x45\xe6\x06\x75\x2b\x7a\x1a\x64\xe6\x15\x3e\xc0\x4f\x2d\x10\xc2\x1e\x32\x99\xa2\x26\x5b\xc4\x42\xd8\xca\x0e\xb5\xc8\x8c\xd4\x74\xc8\xf6\xd2\x38\xf2\x5d\x50\x59\x7a\xa2\x0e\x26\xdd\x6c\x2c\x3b\xcb\x7a\x87\x99\x3d\x8b\xb3\x69\xe0\x7d\x1e\xfe\x78\xf7\xdf\xee\x96\x2f\xed\x99\xe7\x57\xcc\x3f\x03\x00\x00\xff\xff\x98\x7c\x0c\x06\x40\x0f\x00\x00"),
},
"/relay_template.yaml": &vfsgen۰CompressedFileInfo{
name: "relay_template.yaml",
modTime: time.Date(2021, 11, 29, 20, 16, 39, 198578457, time.UTC),
uncompressedSize: 5954,
modTime: time.Date(2022, 6, 9, 10, 25, 17, 658768698, time.UTC),
uncompressedSize: 6038,
compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x02\xff\xec\x97\x5f\x6f\xa3\x38\x10\xc0\xdf\xf9\x14\x56\xdf\x49\xbb\xda\xd5\x69\x85\xb4\x0f\x5c\x92\xb6\x51\xb7\x04\x11\xda\x55\x9f\x22\x2f\x4c\x53\xab\xc6\xf6\xd9\x43\x7a\x68\xb5\xdf\xfd\x64\x02\x04\x52\xa8\xa2\x1c\x5a\xdd\xea\x9a\xa7\xc4\x9e\x3f\xbf\x99\x8c\xed\x19\xd7\x75\x1d\xaa\xd8\x3d\x68\xc3\xa4\xf0\xc8\xf6\x83\xf3\xcc\x44\xea\x91\x80\x66\x60\x14\x4d\xc0\xc9\x00\x69\x4a\x91\x7a\x0e\x21\x9c\x7e\x07\x6e\xec\x37\x42\x12\x29\x50\x4b\xee\x2a\x4e\x05\x78\xf5\x4f\x0e\xda\xcd\xa8\xa0\x1b\xd0\x0e\x21\x82\x66\xe0\x11\x4d\x1f\x69\xe1\x9a\xc2\x20\x64\x8e\x63\x5d\xf6\xfb\x0c\xed\x8a\x41\x10\x78\x2f\x79\x9e\xc1\x94\x53\x96\x75\xfc\xb7\xed\x3d\xe7\xdf\xc1\x55\x5a\xfe\x5d\xb8\x34\x4f\x19\x56\xdb\x25\xf4\x81\x4f\xa3\x20\xb1\xea\x34\x49\xc0\x98\x5b\x99\x42\x19\x83\x4b\x22\xa0\xe9\x37\xcd\x10\x96\x22\x01\x87\x10\x0d\x46\xe6\x3a\x81\x2a\x44\x0d\x7f\xe5\x60\xb0\xfa\x45\x88\x41\xa9\xe9\x06\x3c\xf2\xe1\x8a\x39\x84\x6c\x4b\x4a\x6b\xce\x23\x97\x8c\x43\xe5\x8d\x38\x87\x59\xa5\x4a\x99\xf3\x26\xcc\x19\x28\x2e\x8b\x0c\x04\x0e\xe6\x96\x2a\xf5\x3a\xcc\xc1\xf8\x8f\x88\x5c\x83\xe2\x2c\xa1\xc6\x23\x1f\x1c\x42\x94\x96\x1b\x0d\xc6\xcc\x80\xa6\x9c\x09\x58\x41\x22\x45\x6a\x37\x3f\x5f\x5c\x38\x84\x18\xe0\x90\xa0\xd4\x3b\x98\x8c\x62\xf2\xf4\xb5\x45\x37\xcc\x87\x90\x29\x4e\x11\x2a\xc5\x56\x74\xf6\xc3\x3b\x36\x86\xad\x10\x52\x63\xd7\x75\x46\x99\x00\xdd\x68\xba\x84\xea\x4d\xcb\x8e\x4b\x5c\x37\x93\x29\x7c\x31\xa0\xb7\x65\xdd\xed\xd7\xb9\xdc\xb8\x1c\xb6\xc0\xbf\x7c\x6c\xd6\x41\x6c\xdb\xca\xbb\xa4\x86\xcb\xd9\x3a\xf0\x6f\xe7\xcd\x06\x21\x5b\xca\x73\xb8\xd4\x32\xf3\x5a\x8b\x84\x3c\x32\xe0\x69\x04\x8f\xdd\x55\x1b\x4e\xa7\xa6\xbb\x9b\xa5\x52\x48\xf1\xc9\x6b\xd2\x32\xb1\x8e\x07\x39\x56\xa1\x3f\xfd\xd5\x30\xbb\x03\x7f\x48\x14\xf9\x97\xfe\xc3\x3a\x9a\x7f\xf5\x1f\xd6\xe1\x7c\x1e\xad\xe6\xd1\xfd\xe2\x18\xb6\x44\x8a\x47\xb6\xb9\xa5\xea\x06\x8a\x1e\xc4\x67\x28\x3c\x62\x40\xa0\x2e\x26\x0a\x40\x33\xb1\x99\x3c\x49\x83\x07\x62\x03\x67\x7e\x67\xfc\x15\xec\x6a\x1e\xc4\xd1\xc3\xda\x9f\xcd\xa2\x51\x01\x69\x9a\xea\x7f\x05\xf6\xe7\x72\x19\xaf\xe2\xc8\x0f\xff\x83\x6c\xfb\xff\x76\x11\x5c\xad\xe3\xe5\xcd\x3c\x18\x07\xd0\xfe\xad\x13\x94\xcf\x20\x46\xe0\xbb\x5b\xcd\xa3\x31\xe1\x72\x33\x36\xdc\xf5\x72\x15\xaf\xc3\x65\x14\x8f\x08\x68\x4f\xc4\x44\x49\x8d\x23\x40\x4e\x97\x41\x30\x9f\xc6\xcb\x51\xd3\x98\x48\x21\xca\xd7\x62\xb4\x5c\xee\x31\x47\x4e\xe8\x1e\x75\xcc\xac\x06\xf3\xf8\xdb\x32\xba\x59\x2f\x66\xe3\x50\x6a\xe0\xb4\x10\x80\x2f\x52\x3f\x4f\x58\x7a\x12\xe1\xee\xf3\x0a\xd8\xbf\x9b\x2d\xe2\x75\xe8\xc7\xd7\xe3\xa0\x96\x8d\xd7\x44\x51\x7c\x3a\x89\x92\x65\x65\x37\x75\xf6\xe3\x07\x99\xcc\xe4\x8b\xe0\x92\xa6\x33\xfb\x18\x45\x36\x05\x0b\xbb\x4b\x7e\xfe\x3c\xeb\xca\x87\x39\xe7\xa1\xe4\x2c\x29\x3c\xb2\x78\x0c\x24\x86\x1a\xec\x45\xe8\xbc\xed\xbb\xd9\x46\xd0\x19\x13\x14\x99\x14\xb7\x60\x8c\xb5\x58\xbe\x84\xe7\x29\x6c\xcf\x5b\x9b\xb6\x75\x78\x4b\xa9\x42\xb0\x8d\x5f\x23\x56\x77\x84\xb9\xc0\x4e\x7f\x92\xd9\x95\xca\x8d\x54\x78\x5e\xc2\x9d\xd7\x6d\x6b\x17\xbc\xbd\x9a\x0a\x53\xfb\x99\xf2\xdc\x20\xe8\x4b\xa6\x9b\x17\x52\x83\x41\xaa\xb1\x96\xf0\xf9\x0b\x2d\x8c\xf3\x0a\xf8\x4a\xd3\x04\x42\xd0\x4c\xa6\x4d\xa3\xf7\xf1\xc2\x69\x13\xb7\x5a\xab\xd7\x10\x84\xa8\xbe\xc6\xbc\x5d\x10\x89\x5d\x08\xde\x6a\xce\x9d\xc1\x49\x63\x5a\xd7\xd9\x31\x9d\x7e\x53\x40\x43\x0d\x6f\xad\xbf\xaf\x4c\x8f\x9c\x1d\xe6\xfc\xac\xec\x71\x9b\xb7\xb3\xaf\x02\x57\xe5\xb6\x9f\xa6\xba\xaa\xc0\x9e\x46\xa5\x4f\x2f\x04\xd0\xd7\xd2\x60\xa5\xb5\x7f\x00\x87\x84\x63\xbb\x59\x49\xef\x5f\xa4\x3e\xe9\x3b\xd3\x95\x3e\xb8\x78\xfb\x54\xa6\xb5\x48\xbf\x5e\x73\x0b\x0e\x9e\x41\x1b\x4a\x28\x35\xb6\x01\xdf\xd4\xb2\x90\x07\x4a\x07\xf7\xd9\xa0\xaf\x60\x27\xb2\x98\x95\x7a\xc3\x05\xb3\x02\xbd\x65\x07\x83\xe9\xc9\x83\x91\x8d\xa3\x1a\x06\x77\x36\x30\x51\x6e\x49\x5c\x96\xf7\x2e\xcc\x4f\x9f\x76\xc3\x83\xd2\x12\x65\x22\xb9\x47\xe2\x69\x58\xae\x20\xd5\x1b\x28\x83\xad\xa5\x6a\x3b\x4f\x88\x95\x21\x37\x93\x82\xa1\xb4\x65\xd3\xb2\xf9\xf9\xe2\xe2\x18\xa3\x95\x58\x77\x22\xeb\x1f\x9c\x4e\x1b\x3b\xa9\x10\x12\xcb\x7b\xc2\x1c\x35\x85\xba\x48\x19\x1f\x3e\xa0\xad\xdd\x37\xd3\x3e\x34\x81\xfe\x51\x0e\xa0\xdd\x71\xf5\xb4\x71\xb4\x46\x19\x61\x26\xad\x4d\x9d\x3c\x98\x36\xfa\xef\xe3\xe7\xfb\xf8\xf9\x3e\x7e\xfe\x66\xe3\xe7\xff\xb8\x6b\x76\x3b\x37\xd7\xef\xd4\x3a\xff\xaa\xc6\xf6\x9f\x00\x00\x00\xff\xff\xe2\x5d\x18\x2b\x42\x17\x00\x00"),
compressedContent: []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x02\xff\xec\x97\xc1\x6e\xdb\x38\x13\xc7\xef\x7a\x0a\x22\x77\x39\x09\x5a\x7c\x28\x04\xf4\xa0\xcf\x76\x12\x23\x89\x2c\xc8\x4a\x8a\x9e\x0c\x56\x9a\x38\x44\x28\x92\x4b\x8e\x9c\x35\x8a\xbe\xfb\x82\xb2\x24\x4b\xb6\xe4\x06\xae\x50\x6c\xb1\xc9\x29\x26\x67\x86\xbf\x19\x8f\xc9\xf9\xbb\xae\xeb\x50\xc5\x1e\x41\x1b\x26\x85\x47\xd6\x97\xce\x0b\x13\xa9\x47\x02\x9a\x81\x51\x34\x01\x27\x03\xa4\x29\x45\xea\x39\x84\x70\xfa\x0d\xb8\xb1\xff\x11\x92\x48\x81\x5a\x72\x57\x71\x2a\xc0\xab\x3e\x72\xd0\x6e\x46\x05\x5d\x81\x76\x08\x11\x34\x03\x8f\x28\xaa\x29\xcf\x8d\x6b\x36\x06\x21\x73\x1c\x7b\x68\xf7\xa9\xa1\x5d\x31\x08\x02\x1f\x25\xcf\x33\x18\x73\xca\xb2\x16\x41\x3b\xe2\x4b\xfe\x0d\x5c\xa5\xe5\xdf\x1b\x97\xe6\x29\xc3\xd2\xa0\x00\x3f\x38\xd7\x28\x48\x6c\x08\x9a\x24\x60\xcc\xbd\x4c\xa1\xc8\xc4\x25\x11\xd0\xf4\x8b\x66\x08\x73\x91\x80\x43\x88\x06\x23\x73\x9d\x40\x99\xa8\x86\xbf\x72\x30\x58\x7e\x22\xc4\xa0\xd4\x74\x05\x1e\xb9\xbc\x66\x0e\x21\xeb\x82\xd4\x86\xf3\xc8\x15\xe3\x50\x9e\x46\x9c\xfd\xda\x52\xa5\xcc\x79\x9d\xea\x04\x14\x97\x9b\x0c\x04\xf6\x56\x98\x2a\xd5\x95\xea\x91\x2a\xbc\x29\x7f\x0d\x8a\xb3\x84\x1a\x8f\x5c\x3a\x84\x28\x2d\x57\x1a\x8c\x99\x00\x4d\x39\x13\xb0\x80\x44\x8a\xd4\x6e\x7e\xba\xb8\x70\x08\x31\xc0\x21\x41\xa9\xb7\x48\x19\xc5\xe4\xf9\xae\xc1\x78\x8c\x12\x21\x53\x9c\x22\x94\xae\x8d\x2c\xed\x1f\x6f\x45\x39\x16\x87\x90\x0a\xbd\xea\x3b\xca\x04\xe8\xda\xd7\x25\x54\xaf\x1a\x91\x5c\xe2\xba\x99\x4c\xe1\xb3\x01\xbd\x2e\xfa\x70\xb7\xce\xe5\xca\xe5\xb0\x06\xfe\xf9\x43\xbd\x0e\x62\xdd\x74\xde\x16\x37\x9c\x4f\x96\x81\x7f\x3f\xad\x37\x08\x59\x53\x9e\xc3\x95\x96\x99\xd7\x58\x24\xe4\x89\x01\x4f\x23\x78\x6a\xaf\xda\x84\x5a\x1d\xde\xde\x2c\x9c\x42\x8a\xcf\x5e\x5d\x98\x91\x3d\xb8\x97\x63\x11\xfa\xe3\xdf\x0d\xb3\xbd\x00\x0e\x88\xfc\xc8\xbf\x7b\x58\x2c\xa3\xe9\x9d\xff\x75\x19\x4e\xa7\xd1\x62\x1a\x3d\xce\xde\x42\x97\x48\xf1\xc4\x56\xf7\x54\xdd\xc2\xa6\x03\xf2\x05\x36\x1e\x31\x20\x50\x6f\x46\x0a\x40\x33\xb1\x1a\x3d\x4b\x83\x7b\x66\xbd\x77\xc0\x36\xfc\x01\xf0\x62\x1a\xc4\xd1\xd7\xa5\x3f\x99\x44\x83\x22\xd2\x34\xd5\xbf\x88\xf6\xff\xf9\x3c\x5e\xc4\x91\x1f\xfe\x2b\xe9\x76\xdf\xf0\x2c\xb8\x5e\xc6\xf3\xdb\x69\x30\x0c\xa2\xfd\x72\x47\x28\x5f\x40\x0c\x42\xf8\xb0\x98\x46\x43\xe2\xe5\x66\x78\xbc\x9b\xf9\x22\x5e\x86\xf3\x28\x1e\x10\xd1\xfe\x36\x46\x4a\x6a\x1c\x04\x73\x3c\x0f\x82\xe9\x38\x9e\x0f\x5a\xca\x44\x0a\x51\xbc\x1f\x03\xd6\x73\x07\x3a\x70\x51\x77\xb0\xc3\x56\x36\x98\xc6\x5f\xe6\xd1\xed\x72\x36\x19\x86\x53\x03\xa7\x1b\x01\xf8\x2a\xf5\xcb\x88\xa5\x27\x32\x6e\xff\x0e\x90\xfd\x87\xc9\x2c\x5e\x86\x7e\x7c\x33\x0c\x6c\x31\x98\x8d\x14\xc5\xe7\x13\x39\x59\x56\x4c\x5b\x67\xdf\xbf\x93\xd1\x44\xbe\x0a\x2e\x69\x3a\xb1\x4f\x54\x64\xcb\x30\xb3\xbb\xe4\xc7\x8f\xb3\xb6\x7d\x98\x73\x1e\x4a\xce\x92\x8d\x47\x66\x4f\x81\xc4\x50\x83\xbd\x18\x9d\x9f\x9d\x5e\x1b\x20\xe8\x8c\x09\x8a\x4c\x8a\x7b\x30\xc6\xc6\x2c\x5e\xc8\xf3\x14\xd6\xe7\x8d\x4d\x3b\x52\x1c\x73\x2a\x21\xec\x68\x58\x9b\x55\x33\x63\x2e\xb0\x35\xb7\x64\x76\xa5\x3c\x46\x2a\x3c\x2f\xf1\xce\xab\xe1\xb6\x0d\xdf\x5c\x4d\x85\xa9\x4e\x1a\xf3\xdc\x20\xe8\x2b\xa6\xeb\x97\x53\x83\x41\xaa\xb1\xb2\xf0\xf9\x2b\xdd\x18\xe7\x00\xf9\x5a\xd3\x04\x42\xd0\x4c\xa6\xf5\x18\xf8\xe1\xc2\x69\x32\x37\x86\xae\x43\x08\x42\x54\xd7\x00\xdf\x6c\x8b\xc4\x2e\x04\xc7\x87\x78\xa7\x57\x95\x8c\xab\x7e\x7b\x9b\x26\xa8\x1b\xa9\x7f\x28\xae\x62\xec\xba\xd4\x23\x67\x87\xb5\x3f\x2b\x26\xe1\xfa\x5d\xed\xea\xc6\x45\xb1\xed\xa7\xa9\x2e\xbb\xb1\x63\x90\xe9\xf2\x0b\x01\xf4\x8d\x34\x58\x7a\xed\x9e\xc6\x3e\xe3\xd8\x6e\x96\xd6\xbb\x97\xaa\xcb\xfa\xc1\xb4\xad\xf7\x2e\xe3\x2e\x97\x71\x65\xd2\xed\x57\xdf\x8b\xbd\xbf\x47\x9b\x4a\x28\x35\x36\x01\x8f\x7a\x59\xc8\x3d\xa7\xbd\xfb\xad\xf7\xac\x60\x6b\x32\x9b\x14\x7e\xfd\x6d\xb3\x00\xbd\x66\x7b\x52\xf6\x97\x24\x94\xcd\xa5\x14\x8f\xdb\x38\x98\x28\xb7\xa0\x2e\x5a\x7d\x9b\xea\xc7\x8f\x5b\x89\xa1\xb4\x44\x99\x48\xee\x91\x78\x1c\x16\x2b\x48\xf5\x0a\x8a\x84\x2b\xab\x2a\xce\x33\x62\x19\xc8\xcd\xa4\x60\x28\x6d\xeb\x34\x62\x7e\xba\xb8\x78\x4b\xd0\xd2\xac\xad\xdd\xfa\x04\xd6\x69\x42\x95\x0a\x21\xb1\xb8\x35\xcc\x1b\x75\xab\x8b\x94\xf1\x63\x3f\xd7\xc6\xfe\x4f\xca\xdf\xa7\x59\xff\x57\x48\xd6\xb6\xc0\x3d\x55\xc0\x56\x38\x83\xa8\xd8\x2a\xd8\xc9\x52\xb6\xf6\x7f\x17\xac\xef\x82\xf5\x5d\xb0\xfe\xb1\x82\xf5\x3f\x3e\x5d\xbb\xad\x7b\xec\xcf\x1a\xb1\x7f\xdf\x00\xfc\x4f\x00\x00\x00\xff\xff\xda\x9c\xd6\x9a\x96\x17\x00\x00"),
},
}
fs["/"].(*vfsgen۰DirInfo).entries = []os.FileInfo{
+7 -7
View File
@@ -9,14 +9,14 @@ import (
"crypto/x509/pkix"
"github.com/RafayLabs/rcloud-base/pkg/sentry/cryptoutil"
"github.com/RafayLabs/rcloud-base/pkg/service"
"github.com/paralus/paralus/pkg/sentry/cryptoutil"
"github.com/paralus/paralus/pkg/service"
"github.com/rs/xid"
"sigs.k8s.io/yaml"
"github.com/RafayLabs/rcloud-base/pkg/log"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
sentry "github.com/RafayLabs/rcloud-base/proto/types/sentry"
"github.com/paralus/paralus/pkg/log"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
sentry "github.com/paralus/paralus/proto/types/sentry"
"github.com/shurcooL/httpfs/vfsutil"
)
@@ -81,8 +81,8 @@ func loadAgentTemplates(ctx context.Context, bs service.BootstrapService, d map[
cert, key, err := cryptoutil.GenerateCA(pkix.Name{
CommonName: item.Spec.InfraRef,
Country: []string{"USA"},
Organization: []string{"Rafay Systems Inc"},
OrganizationalUnit: []string{"Rafay Sentry"},
Organization: []string{"Paralus"},
OrganizationalUnit: []string{"Paralus Sentry"},
Province: []string{"California"},
Locality: []string{"Sunnyvale"},
}, pf)
+35 -35
View File
@@ -12,29 +12,29 @@ import (
"sync"
"time"
"github.com/RafayLabs/rcloud-base/internal/fixtures"
providers "github.com/RafayLabs/rcloud-base/internal/provider/kratos"
"github.com/RafayLabs/rcloud-base/pkg/audit"
authv3 "github.com/RafayLabs/rcloud-base/pkg/auth/v3"
"github.com/RafayLabs/rcloud-base/pkg/common"
"github.com/RafayLabs/rcloud-base/pkg/enforcer"
"github.com/RafayLabs/rcloud-base/pkg/gateway"
"github.com/RafayLabs/rcloud-base/pkg/grpc"
"github.com/RafayLabs/rcloud-base/pkg/log"
"github.com/RafayLabs/rcloud-base/pkg/notify"
"github.com/RafayLabs/rcloud-base/pkg/reconcile"
"github.com/RafayLabs/rcloud-base/pkg/sentry/peering"
"github.com/RafayLabs/rcloud-base/pkg/service"
auditrpc "github.com/RafayLabs/rcloud-base/proto/rpc/audit"
rolerpc "github.com/RafayLabs/rcloud-base/proto/rpc/role"
schedulerrpc "github.com/RafayLabs/rcloud-base/proto/rpc/scheduler"
sentryrpc "github.com/RafayLabs/rcloud-base/proto/rpc/sentry"
systemrpc "github.com/RafayLabs/rcloud-base/proto/rpc/system"
userrpc "github.com/RafayLabs/rcloud-base/proto/rpc/user"
authrpc "github.com/RafayLabs/rcloud-base/proto/rpc/v3"
"github.com/RafayLabs/rcloud-base/server"
"github.com/grpc-ecosystem/grpc-gateway/v2/runtime"
kclient "github.com/ory/kratos-client-go"
"github.com/paralus/paralus/internal/fixtures"
providers "github.com/paralus/paralus/internal/provider/kratos"
"github.com/paralus/paralus/pkg/audit"
authv3 "github.com/paralus/paralus/pkg/auth/v3"
"github.com/paralus/paralus/pkg/common"
"github.com/paralus/paralus/pkg/enforcer"
"github.com/paralus/paralus/pkg/gateway"
"github.com/paralus/paralus/pkg/grpc"
"github.com/paralus/paralus/pkg/log"
"github.com/paralus/paralus/pkg/notify"
"github.com/paralus/paralus/pkg/reconcile"
"github.com/paralus/paralus/pkg/sentry/peering"
"github.com/paralus/paralus/pkg/service"
auditrpc "github.com/paralus/paralus/proto/rpc/audit"
rolerpc "github.com/paralus/paralus/proto/rpc/role"
schedulerrpc "github.com/paralus/paralus/proto/rpc/scheduler"
sentryrpc "github.com/paralus/paralus/proto/rpc/sentry"
systemrpc "github.com/paralus/paralus/proto/rpc/system"
userrpc "github.com/paralus/paralus/proto/rpc/user"
authrpc "github.com/paralus/paralus/proto/rpc/v3"
"github.com/paralus/paralus/server"
"github.com/spf13/viper"
"github.com/uptrace/bun"
"github.com/uptrace/bun/dialect/pgdialect"
@@ -184,12 +184,12 @@ func setup() {
viper.SetDefault(dbPasswordEnv, "admindbpassword")
// relay
viper.SetDefault(sentryPeeringHostEnv, "peering.sentry.rafay.local:10001")
viper.SetDefault(coreRelayConnectorHostEnv, "*.core-connector.relay.rafay.local:10002")
viper.SetDefault(coreRelayUserHostEnv, "*.user.relay.rafay.local:10002")
viper.SetDefault(sentryBootstrapEnv, "console.rafay.dev:443")
viper.SetDefault(bootstrapKEKEnv, "rafay")
viper.SetDefault(relayImageEnv, "registry.rafay-edge.net/rafay/rafay-relay-agent:r1.10.0-24")
viper.SetDefault(sentryPeeringHostEnv, "peering.sentry.paralus.local:10001")
viper.SetDefault(coreRelayConnectorHostEnv, "*.core-connector.relay.paralus.local:10002")
viper.SetDefault(coreRelayUserHostEnv, "*.user.relay.paralus.local:10002")
viper.SetDefault(sentryBootstrapEnv, "console.paralus.dev:443")
viper.SetDefault(bootstrapKEKEnv, "paralus")
viper.SetDefault(relayImageEnv, "paralus/paralus-relay-agent:r1.10.0-24")
// audit
viper.SetDefault(esEndPointEnv, "http://127.0.0.1:9200")
@@ -199,8 +199,8 @@ func setup() {
viper.SetDefault(auditFileEnv, "audit.log")
// cd relay
viper.SetDefault(coreCDRelayUserHostEnv, "*.user.cdrelay.rafay.local:10012")
viper.SetDefault(coreCDRelayConnectorHostEnv, "*.core-connector.cdrelay.rafay.local:10012")
viper.SetDefault(coreCDRelayUserHostEnv, "*.user.cdrelay.paralus.local:10012")
viper.SetDefault(coreCDRelayConnectorHostEnv, "*.core-connector.cdrelay.paralus.local:10012")
viper.SetDefault(schedulerNamespaceEnv, "default")
// kratos
@@ -358,7 +358,7 @@ func setup() {
// This is primarily from ES not being available. ES being
// pretty heavy, you might not always wanna have it
// running in the background. This way, you can continue
// working on rcloud-base with ES eating up all the cpu.
// working on paralus with ES eating up all the cpu.
_log.Warn("unable to create auditLog service: ", err)
} else {
_log.Fatalw("unable to create auditLog service", "error", err)
@@ -585,13 +585,13 @@ func runRPC(wg *sync.WaitGroup, ctx context.Context) {
asv := authv3.NewAuthService(ac)
o := authv3.Option{
ExcludeRPCMethods: []string{
"/rafay.dev.sentry.rpc.Bootstrap/GetBootstrapAgentTemplate",
"/rafay.dev.sentry.rpc.Bootstrap/RegisterBootstrapAgent",
"/rafay.dev.sentry.rpc.KubeConfig/GetForClusterWebSession", //TODO: enable auth from prompt
"/rafay.dev.rpc.v3.Auth/IsRequestAllowed",
"/paralus.dev.sentry.rpc.Bootstrap/GetBootstrapAgentTemplate",
"/paralus.dev.sentry.rpc.Bootstrap/RegisterBootstrapAgent",
"/paralus.dev.sentry.rpc.KubeConfig/GetForClusterWebSession", //TODO: enable auth from prompt
"/paralus.dev.rpc.v3.Auth/IsRequestAllowed",
},
ExcludeAuthzMethods: []string{
"/rafay.dev.rpc.v3.User/GetUserInfo",
"/paralus.dev.rpc.v3.User/GetUserInfo",
},
}
opts = append(opts, _grpc.UnaryInterceptor(
+4 -4
View File
@@ -228,9 +228,9 @@ metadata:
name: :cluster
description: this is a test cluster
labels:
rafay.dev/clusterLocation: coimbatore-hq
rafay.dev/clusterName: testcluster
rafay.dev/clusterType: imported
paralus.dev/clusterLocation: coimbatore-hq
paralus.dev/clusterName: testcluster
paralus.dev/clusterType: imported
project: myproject
organization: finmanorg
partner: finman
@@ -241,7 +241,7 @@ spec:
city: :city
state: :state
country: :country
overrideSelector: rafay.dev/overrideCluster=dummycluster
overrideSelector: paralus.dev/overrideCluster=dummycluster
proxyConfig:
httpProxy: http:localhost:8080/proxy
@@ -4,7 +4,7 @@ CREATE TABLE IF NOT EXISTS sentry_bootstrap_infra (
organization_id uuid,
partner_id uuid,
project_id uuid,
-- rafay meta fields
-- paralus meta fields
display_name character varying(256) NOT NULL,
created_at timestamp WITH time zone NOT NULL,
modified_at timestamp WITH time zone,
@@ -22,4 +22,4 @@ ALTER TABLE sentry_bootstrap_infra OWNER TO admindbuser;
ALTER TABLE ONLY sentry_bootstrap_infra ADD CONSTRAINT sentry_bootstrap_infra_pkey PRIMARY KEY (name);
ALTER TABLE ONLY sentry_bootstrap_infra
ADD CONSTRAINT sentry_bootstrap_infra_name_partner_id_organization_id_proj_key UNIQUE (name, partner_id, organization_id, project_id);
ADD CONSTRAINT sentry_bootstrap_infra_name_partner_id_organization_id_proj_key UNIQUE (name, partner_id, organization_id, project_id);
@@ -5,7 +5,7 @@ CREATE TABLE IF NOT EXISTS sentry_bootstrap_agent_template (
partner_id uuid,
project_id uuid,
infra_ref character varying(256) NOT NULL,
-- rafay meta fields
-- paralus meta fields
display_name character varying(256) NOT NULL,
created_at timestamp WITH time zone NOT NULL,
modified_at timestamp WITH time zone,
@@ -36,4 +36,4 @@ ALTER TABLE ONLY sentry_bootstrap_agent_template
ALTER TABLE ONLY sentry_bootstrap_agent_template
ADD CONSTRAINT sentry_bootstrap_agent_template_infra_ref_fkey FOREIGN KEY (infra_ref)
REFERENCES sentry_bootstrap_infra(name);
REFERENCES sentry_bootstrap_infra(name);
@@ -7,7 +7,7 @@ CREATE TABLE IF NOT EXISTS sentry_bootstrap_agent (
project_id uuid,
template_ref character varying(256) NOT NULL,
agent_mode character varying(512) NOT NULL,
-- rafay meta fields
-- paralus meta fields
display_name character varying(256) NOT NULL,
created_at timestamp WITH time zone NOT NULL,
modified_at timestamp WITH time zone,
@@ -35,4 +35,4 @@ ALTER TABLE ONLY sentry_bootstrap_agent
ALTER TABLE ONLY sentry_bootstrap_agent
ADD CONSTRAINT sentry_bootstrap_agent_template_ref_fkey FOREIGN KEY (template_ref)
REFERENCES sentry_bootstrap_agent_template(name);
REFERENCES sentry_bootstrap_agent_template(name);
+2 -2
View File
@@ -7,8 +7,8 @@ import (
"strings"
"time"
logv2 "github.com/RafayLabs/rcloud-base/pkg/log"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
logv2 "github.com/paralus/paralus/pkg/log"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
"go.uber.org/zap"
"google.golang.org/grpc/metadata"
)
+4 -4
View File
@@ -5,10 +5,10 @@ import (
"fmt"
"os"
"github.com/RafayLabs/rcloud-base/pkg/enforcer"
logv2 "github.com/RafayLabs/rcloud-base/pkg/log"
"github.com/RafayLabs/rcloud-base/pkg/service"
kclient "github.com/ory/kratos-client-go"
"github.com/paralus/paralus/pkg/enforcer"
logv2 "github.com/paralus/paralus/pkg/log"
"github.com/paralus/paralus/pkg/service"
"github.com/uptrace/bun"
"go.uber.org/zap"
@@ -23,7 +23,7 @@ var _log = logv2.GetLogger()
type Option struct {
// ExcludeRPCMethods is a list of full RPC method string in
// format /package.service/method (for example,
// /rafay.dev.rpc.v3.Idp/ListIdps). These RPC methods are to
// /paralus.dev.rpc.v3.Idp/ListIdps). These RPC methods are to
// be excluded from the auth interceptor.
ExcludeRPCMethods []string
+4 -4
View File
@@ -7,11 +7,11 @@ import (
"errors"
"strings"
"github.com/RafayLabs/rcloud-base/internal/dao"
rpcv3 "github.com/RafayLabs/rcloud-base/proto/rpc/user"
authzv1 "github.com/RafayLabs/rcloud-base/proto/types/authz"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
"github.com/google/uuid"
"github.com/paralus/paralus/internal/dao"
rpcv3 "github.com/paralus/paralus/proto/rpc/user"
authzv1 "github.com/paralus/paralus/proto/types/authz"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
)
var (
+6 -6
View File
@@ -4,10 +4,10 @@ import (
context "context"
"strings"
"github.com/RafayLabs/rcloud-base/pkg/common"
"github.com/RafayLabs/rcloud-base/pkg/gateway"
"github.com/RafayLabs/rcloud-base/pkg/utils"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
"github.com/paralus/paralus/pkg/common"
"github.com/paralus/paralus/pkg/gateway"
"github.com/paralus/paralus/pkg/utils"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
grpc "google.golang.org/grpc"
codes "google.golang.org/grpc/codes"
"google.golang.org/grpc/metadata"
@@ -46,9 +46,9 @@ func (ac authContext) NewAuthUnaryInterceptor(opt Option) grpc.UnaryServerInterc
// XXX: This requires any new items which does not follow
// metadata convention to be added here
switch strings.Split(info.FullMethod, "/")[1] {
case "rafay.dev.rpc.v3.Project":
case "paralus.dev.rpc.v3.Project":
project = meta.Name
case "rafay.dev.rpc.v3.Organization":
case "paralus.dev.rpc.v3.Organization":
org = meta.Name
}
}
+5 -5
View File
@@ -7,10 +7,10 @@ import (
"regexp"
"strings"
"github.com/RafayLabs/rcloud-base/internal/dao"
"github.com/RafayLabs/rcloud-base/pkg/common"
rpcv3 "github.com/RafayLabs/rcloud-base/proto/rpc/v3"
commonpbv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
"github.com/paralus/paralus/internal/dao"
"github.com/paralus/paralus/pkg/common"
rpcv3 "github.com/paralus/paralus/proto/rpc/v3"
commonpbv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
"github.com/uptrace/bun"
"github.com/uptrace/bun/dialect/pgdialect"
"github.com/uptrace/bun/driver/pgdriver"
@@ -44,7 +44,7 @@ type remoteAuthMiddleware struct {
// NewRemoteAuthMiddleware creates a middleware for the HTTP server
// which does auth and authz by talking to the auth service exposed by
// rcloud-base via grpc.
// paralus via grpc.
func NewRemoteAuthMiddleware(al *zap.Logger, as string, opt Option) negroni.Handler {
sqldb := sql.OpenDB(pgdriver.NewConnector(pgdriver.WithDSN(getDSN())))
conn, err := grpc.Dial(as, grpc.WithInsecure())
+2 -2
View File
@@ -1,8 +1,8 @@
package authv3
import (
"github.com/RafayLabs/rcloud-base/pkg/pool"
rpcv3 "github.com/RafayLabs/rcloud-base/proto/rpc/v3"
"github.com/paralus/paralus/pkg/pool"
rpcv3 "github.com/paralus/paralus/proto/rpc/v3"
"context"
+1 -1
View File
@@ -3,7 +3,7 @@ package authv3
import (
"context"
commonv3 "github.com/RafayLabs/rcloud-base/proto/types/commonpb/v3"
commonv3 "github.com/paralus/paralus/proto/types/commonpb/v3"
)
type authService struct {
+1 -1
View File
@@ -20,7 +20,7 @@ const (
NamespacePrefix = "ns"
)
// rcloud constant
// paralus constant
const (
HeartBeatInterval = time.Second * 30
SessionID = "sessionid"
+5 -5
View File
@@ -7,10 +7,10 @@ import (
"strings"
"time"
"github.com/RafayLabs/rcloud-base/pkg/controller/client"
scheme "github.com/RafayLabs/rcloud-base/pkg/controller/scheme"
"github.com/RafayLabs/rcloud-base/pkg/controller/util"
clusterv2 "github.com/RafayLabs/rcloud-base/proto/types/controller"
"github.com/paralus/paralus/pkg/controller/client"
scheme "github.com/paralus/paralus/pkg/controller/scheme"
"github.com/paralus/paralus/pkg/controller/util"
clusterv2 "github.com/paralus/paralus/proto/types/controller"
apixv1beta1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1"
apierrs "k8s.io/apimachinery/pkg/api/errors"
"k8s.io/apimachinery/pkg/api/meta"
@@ -72,7 +72,7 @@ func WithUseUpdate(o runtime.Object) Option {
}
// WithForceUseUpdate sets if update should be used instead of patch for apply
// operation, irrespective of whether the object is of rafay domain or not
// operation, irrespective of whether the object is of paralus domain or not
func WithForceUseUpdate() Option {
return func(opts *Options) {
opts.UseUpdate = true
+2 -2
View File
@@ -12,8 +12,8 @@ import (
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
ctrlclient "sigs.k8s.io/controller-runtime/pkg/client"
cruntime "github.com/RafayLabs/rcloud-base/pkg/controller/runtime"
clusterv2 "github.com/RafayLabs/rcloud-base/proto/types/controller"
cruntime "github.com/paralus/paralus/pkg/controller/runtime"
clusterv2 "github.com/paralus/paralus/proto/types/controller"
"sigs.k8s.io/yaml"
)
+2 -2
View File
@@ -4,8 +4,8 @@ import (
"bytes"
"fmt"
"github.com/RafayLabs/rcloud-base/pkg/controller/scheme"
"github.com/RafayLabs/rcloud-base/pkg/controller/util"
"github.com/paralus/paralus/pkg/controller/scheme"
"github.com/paralus/paralus/pkg/controller/util"
sp "k8s.io/apimachinery/pkg/util/strategicpatch"
"k8s.io/apimachinery/pkg/types"
+1 -1
View File
@@ -6,7 +6,7 @@ metadata:
labels:
app: nginx
annotations:
rafay.dev/original: '{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"namespace":"default","name":"nginx-deployment","labels":{"app":"nginx"}},"spec":{"replicas":1,"selector":{"matchLabels":{"app":"nginx"}},"template":{"metadata":{"labels":{"app":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx:1.7.9","ports":[{"containerPort":80}]}]}}}}'
paralus.dev/original: '{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"namespace":"default","name":"nginx-deployment","labels":{"app":"nginx"}},"spec":{"replicas":1,"selector":{"matchLabels":{"app":"nginx"}},"template":{"metadata":{"labels":{"app":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx:1.7.9","ports":[{"containerPort":80}]}]}}}}'
spec:
replicas: 1
selector:
+1 -1
View File
@@ -6,7 +6,7 @@ metadata:
labels:
app: nginx
annotations:
rafay.dev/original: '{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"namespace":"default","name":"nginx-deployment","labels":{"app":"nginx"}},"spec":{"replicas":1,"selector":{"matchLabels":{"app":"nginx"}},"template":{"metadata":{"labels":{"app":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx:1.7.9","ports":[{"containerPort":80}],"readinessProbe":{"httpGet":{"path":"/healthz","port":8080,"httpHeaders":[{"name":"X-Custom-Header","value":"Awesome"}]}}}]}}}}'
paralus.dev/original: '{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"namespace":"default","name":"nginx-deployment","labels":{"app":"nginx"}},"spec":{"replicas":1,"selector":{"matchLabels":{"app":"nginx"}},"template":{"metadata":{"labels":{"app":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx:1.7.9","ports":[{"containerPort":80}],"readinessProbe":{"httpGet":{"path":"/healthz","port":8080,"httpHeaders":[{"name":"X-Custom-Header","value":"Awesome"}]}}}]}}}}'
spec:
replicas: 1
selector:
+1 -1
View File
@@ -6,7 +6,7 @@ metadata:
labels:
app: nginx
annotations:
rafay.dev/original: '{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"namespace":"default","name":"nginx-deployment","labels":{"app":"nginx"}},"spec":{"replicas":1,"selector":{"matchLabels":{"app":"nginx"}},"template":{"metadata":{"labels":{"app":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx:1.7.9","ports":[{"containerPort":80}],"readinessProbe":{"httpGet":{"path":"/healthz","port":8080,"httpHeaders":[{"name":"X-Custom-Header","value":"Awesome"}]}}}]}}}}'
paralus.dev/original: '{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"namespace":"default","name":"nginx-deployment","labels":{"app":"nginx"}},"spec":{"replicas":1,"selector":{"matchLabels":{"app":"nginx"}},"template":{"metadata":{"labels":{"app":"nginx"}},"spec":{"containers":[{"name":"nginx","image":"nginx:1.7.9","ports":[{"containerPort":80}],"readinessProbe":{"httpGet":{"path":"/healthz","port":8080,"httpHeaders":[{"name":"X-Custom-Header","value":"Awesome"}]}}}]}}}}'
spec:
replicas: 1
selector:

Some files were not shown because too many files have changed in this diff Show More