rblundon/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
c3248fde1f3eeb1ade518edd746e87e9da380c13
homelab/cluster/platform/tekton/operator-install.yaml
Hermes Agent service account 7dc1999928 feat(tekton): Day 2 - Deploy Tekton Operator and components 
- Downloaded Tekton Operator v0.79.1 release manifest
- Created TektonConfig CR enabling all components in innoventions namespace
  - Pipelines v1.13.0 with OCI bundles and custom tasks
  - Triggers v0.36.0 with stable API fields
  - Dashboard v0.69.0 with read-write access
  - Addon components (cluster tasks, templates)
  - Pruner configured (keep 100, daily at 2 AM)
- Created Dashboard HTTPRoute for mission-space.local.mk-labs.cloud
  - Certificate via letsencrypt-prod ClusterIssuer
  - Routes via fastpass-gateway (Cilium Gateway API)
  - Backend: tekton-dashboard service port 9097
- Created ArgoCD Application manifest (wave 8)
  - Automated sync with prune/selfHeal
  - ServerSideApply for CRD compatibility
  - Ignore differences for operator-managed resources

Directory: cluster/platform/tekton/ (functional naming)
Namespace: innoventions (thematic naming)
DNS: mission-space.local.mk-labs.cloud

Ready for deployment to fastpass cluster.
2026-06-05 21:54:02 -05:00

1538 lines
38 KiB
YAML
Raw Blame History

apiVersion: v1
kind: Namespace
metadata:
name: tekton-operator
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: manualapprovalgates.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: ManualApprovalGate
listKind: ManualApprovalGateList
plural: manualapprovalgates
shortNames:
- mag
singular: manualapprovalgate
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the ManualApprovalGate API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: syncerservices.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: SyncerService
listKind: SyncerServiceList
plural: syncerservices
singular: syncerservice
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the SyncerService API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektonchains.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonChain
listKind: TektonChainList
plural: tektonchains
singular: tektonchain
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the TektonChains API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektonconfigs.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonConfig
listKind: TektonConfigList
plural: tektonconfigs
singular: tektonconfig
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the tektonconfigs API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektondashboards.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonDashboard
listKind: TektonDashboardList
plural: tektondashboards
singular: tektondashboard
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the tektondashboards API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektonhubs.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonHub
listKind: TektonHubList
plural: tektonhubs
singular: tektonhub
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
- jsonPath: .status.apiUrl
name: ApiUrl
type: string
- jsonPath: .status.uiUrl
name: UiUrl
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the tektonhubs API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektoninstallersets.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonInstallerSet
listKind: TektonInstallerSetList
plural: tektoninstallersets
singular: tektoninstallerset
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the tektoninstallerset API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektonmulticlusterproxyaaes.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonMulticlusterProxyAAE
listKind: TektonMulticlusterProxyAAEList
plural: tektonmulticlusterproxyaaes
singular: tektonmulticlusterproxyaae
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: |
TektonMulticlusterProxyAAE configures the Proxy AAE (Aggregated API Extension) from
https://github.com/openshift-pipelines/multicluster-proxy-aae. It provides a unified
Kubernetes API for accessing Tekton resources (TaskRuns, Pods, logs) across multiple
worker clusters managed by MultiKueue.
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektonpipelines.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonPipeline
listKind: TektonPipelineList
plural: tektonpipelines
singular: tektonpipeline
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the tektonpipelines API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektonpruners.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonPruner
listKind: TektonPrunerList
plural: tektonpruners
singular: tektonpruner
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the tektonpruners API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektonresults.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonResult
listKind: TektonResultList
plural: tektonresults
singular: tektonresult
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the TektonResults API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektonschedulers.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonScheduler
listKind: TektonSchedulerList
plural: tektonschedulers
singular: tektonscheduler
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the tektonschedulers API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tektontriggers.operator.tekton.dev
spec:
group: operator.tekton.dev
names:
kind: TektonTrigger
listKind: TektonTriggerList
plural: tektontriggers
singular: tektontrigger
preserveUnknownFields: false
scope: Cluster
versions:
- additionalPrinterColumns:
- jsonPath: .status.version
name: Version
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].status
name: Ready
type: string
- jsonPath: .status.conditions[?(@.type=="Ready")].message
name: Reason
type: string
name: v1alpha1
schema:
openAPIV3Schema:
description: Schema for the tektontriggers API
type: object
x-kubernetes-preserve-unknown-fields: true
served: true
storage: true
subresources:
status: {}
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: tekton-operator
namespace: tekton-operator
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/instance: default
name: tekton-operator-info
namespace: tekton-operator
rules:
- apiGroups:
- ""
resourceNames:
- tekton-operator-info
resources:
- configmaps
verbs:
- get
- describe
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: tekton-config-read-role
rules:
- apiGroups:
- operator.tekton.dev
resources:
- tektonconfigs
verbs:
- get
- watch
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: tekton-multicluster-proxy-aae-role
rules:
- apiGroups:
- kueue.x-k8s.io
resources:
- workloads
- multikueueclusters
verbs:
- get
- list
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: tekton-operator
rules:
- apiGroups:
- ""
resources:
- nodes
verbs:
- list
- apiGroups:
- ""
resources:
- pods
- services
- endpoints
- persistentvolumeclaims
- events
- configmaps
- secrets
- pods/log
- limitranges
verbs:
- delete
- deletecollection
- create
- patch
- get
- list
- update
- watch
- describe
- apiGroups:
- extensions
- apps
- networking.k8s.io
resources:
- ingresses
- ingresses/status
verbs:
- delete
- create
- patch
- get
- list
- update
- watch
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- list
- create
- update
- delete
- patch
- watch
- apiGroups:
- ""
resources:
- namespaces/finalizers
verbs:
- update
- apiGroups:
- apps
resources:
- deployments
- daemonsets
- replicasets
- statefulsets
- deployments/finalizers
verbs:
- get
- list
- create
- update
- delete
- deletecollection
- patch
- watch
- apiGroups:
- monitoring.coreos.com
resources:
- servicemonitors
verbs:
- get
- create
- delete
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterroles
- roles
verbs:
- get
- create
- update
- delete
- list
- watch
- apiGroups:
- ""
resources:
- serviceaccounts
verbs:
- get
- list
- create
- update
- delete
- patch
- watch
- impersonate
- apiGroups:
- rbac.authorization.k8s.io
resources:
- clusterrolebindings
- rolebindings
verbs:
- get
- create
- update
- delete
- list
- watch
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions
- customresourcedefinitions/status
verbs:
- get
- create
- update
- delete
- list
- patch
- watch
- apiGroups:
- admissionregistration.k8s.io
resources:
- mutatingwebhookconfigurations
- validatingwebhookconfigurations
verbs:
- get
- list
- create
- update
- delete
- patch
- watch
- apiGroups:
- build.knative.dev
resources:
- builds
- buildtemplates
- clusterbuildtemplates
verbs:
- get
- list
- create
- update
- delete
- patch
- watch
- apiGroups:
- extensions
resources:
- deployments
verbs:
- get
- list
- create
- update
- delete
- patch
- watch
- apiGroups:
- extensions
resources:
- deployments/finalizers
verbs:
- get
- list
- create
- update
- delete
- patch
- watch
- apiGroups:
- operator.tekton.dev
resources:
- '*'
- tektonaddons
verbs:
- get
- list
- create
- update
- delete
- deletecollection
- patch
- watch
- apiGroups:
- tekton.dev
resources:
- tasks
- clustertasks
- taskruns
- pipelines
- pipelineruns
- pipelineresources
- conditions
- tasks/status
- clustertasks/status
- taskruns/status
- pipelines/status
- pipelineruns/status
- pipelineresources/status
- taskruns/finalizers
- pipelineruns/finalizers
- runs
- runs/status
- runs/finalizers
- customruns
- customruns/status
- customruns/finalizers
- verificationpolicies
- verificationpolicies/status
- stepactions
- stepactions/status
verbs:
- get
- list
- create
- update
- delete
- deletecollection
- patch
- watch
- apiGroups:
- triggers.tekton.dev
- operator.tekton.dev
resources:
- '*'
verbs:
- add
- get
- list
- create
- update
- delete
- deletecollection
- patch
- watch
- apiGroups:
- dashboard.tekton.dev
resources:
- '*'
- tektonaddons
- extensions
verbs:
- get
- list
- create
- update
- delete
- deletecollection
- patch
- watch
- apiGroups:
- security.openshift.io
resources:
- securitycontextconstraints
verbs:
- use
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- get
- list
- create
- update
- delete
- patch
- watch
- apiGroups:
- autoscaling
resources:
- horizontalpodautoscalers
verbs:
- delete
- deletecollection
- create
- patch
- get
- list
- update
- watch
- apiGroups:
- policy
resources:
- poddisruptionbudgets
verbs:
- delete
- deletecollection
- create
- patch
- get
- list
- update
- watch
- apiGroups:
- serving.knative.dev
resources:
- '*'
- '*/status'
- '*/finalizers'
verbs:
- get
- list
- create
- update
- delete
- deletecollection
- patch
- watch
- apiGroups:
- batch
resources:
- cronjobs
- jobs
verbs:
- delete
- create
- patch
- get
- list
- update
- watch
- apiGroups:
- admissionregistration.k8s.io
resources:
- mutatingwebhookconfigurations
- validatingwebhookconfigurations
verbs:
- delete
- create
- patch
- get
- list
- update
- watch
- apiGroups:
- authentication.k8s.io
resources:
- tokenreviews
verbs:
- create
- apiGroups:
- authorization.k8s.io
resources:
- subjectaccessreviews
verbs:
- create
- apiGroups:
- results.tekton.dev
resources:
- '*'
verbs:
- delete
- deletecollection
- create
- patch
- get
- list
- update
- watch
- apiGroups:
- resolution.tekton.dev
resources:
- resolutionrequests
- resolutionrequests/status
verbs:
- get
- list
- watch
- create
- delete
- update
- patch
- apiGroups:
- openshift-pipelines.org
resources:
- approvaltasks
- approvaltasks/status
verbs:
- add
- get
- list
- create
- update
- delete
- deletecollection
- patch
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: tekton-result-read-role
rules:
- apiGroups:
- operator.tekton.dev
resources:
- tektonresults
verbs:
- get
- watch
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: tekton-scheduler-role
rules:
- apiGroups:
- kueue.x-k8s.io
resources:
- resourceflavors
- workloads
- workloads/finalizers
- workloads/status
- workloadpriorityclasses
verbs:
- get
- list
- create
- update
- delete
- patch
- watch
- apiGroups:
- scheduling.k8s.io
resources:
- priorityclasses
verbs:
- get
- list
- watch
- apiGroups:
- cert-manager.io
resources:
- certificates
- issuers
verbs:
- get
- create
- update
- list
- nonResourceURLs:
- /metrics
verbs:
- get
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/instance: default
name: tekton-operator-info
namespace: tekton-operator
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: tekton-operator-info
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: system:authenticated
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: tekton-config-read-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: tekton-config-read-role
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: system:authenticated
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: tekton-multicluster-proxy-aae-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: tekton-multicluster-proxy-aae-role
subjects:
- kind: ServiceAccount
name: tekton-operator
namespace: tekton-operator
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: tekton-operator
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: tekton-operator
subjects:
- kind: ServiceAccount
name: tekton-operator
namespace: tekton-operator
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: tekton-result-read-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: tekton-result-read-role
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: system:authenticated
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: tekton-scheduler-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: tekton-scheduler-role
subjects:
- kind: ServiceAccount
name: tekton-operator
namespace: tekton-operator
---
apiVersion: v1
data:
_example: |
################################
# #
# EXAMPLE CONFIGURATION #
# #
################################
# This block is not actually functional configuration,
# but serves to illustrate the available configuration
# options and document them in a way that is accessible
# to users that `kubectl edit` this config map.
#
# These sample configuration options may be copied out of
# this example block and unindented to be in the data block
# to actually change the configuration.
# Common configuration for all Knative codebase
zap-logger-config: |
{
"level": "info",
"development": false,
"outputPaths": ["stdout"],
"errorOutputPaths": ["stderr"],
"encoding": "json",
"encoderConfig": {
"timeKey": "ts",
"levelKey": "level",
"nameKey": "logger",
"callerKey": "caller",
"messageKey": "msg",
"stacktraceKey": "stacktrace",
"lineEnding": "",
"levelEncoder": "",
"timeEncoder": "iso8601",
"durationEncoder": "",
"callerEncoder": ""
}
}
loglevel.tekton-operator-cluster-operations: info
loglevel.tekton-operator-lifecycle: info
loglevel.tekton-operator-webhook: info
zap-logger-config: |
{
"level": "info",
"development": false,
"sampling": {
"initial": 100,
"thereafter": 100
},
"outputPaths": ["stdout"],
"errorOutputPaths": ["stderr"],
"encoding": "json",
"encoderConfig": {
"timeKey": "timestamp",
"levelKey": "level",
"nameKey": "logger",
"callerKey": "caller",
"messageKey": "msg",
"stacktraceKey": "stacktrace",
"lineEnding": "",
"levelEncoder": "",
"timeEncoder": "iso8601",
"durationEncoder": "",
"callerEncoder": ""
}
}
kind: ConfigMap
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
name: config-logging
namespace: tekton-operator
---
apiVersion: v1
data:
AUTOINSTALL_COMPONENTS: "true"
DEFAULT_TARGET_NAMESPACE: tekton-pipelines
kind: ConfigMap
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
name: tekton-config-defaults
namespace: tekton-operator
---
apiVersion: v1
data:
_example: |
################################
# #
# EXAMPLE CONFIGURATION #
# #
################################
# This block is not actually functional configuration,
# but serves to illustrate the available configuration
# options and document them in a way that is accessible
# to users that `kubectl edit` this config map.
#
# These sample configuration options may be copied out of
# this example block and unindented to be in the data block
# to actually change the configuration.
# metrics.backend-destination field specifies the system metrics destination.
# It supports either prometheus (the default) or stackdriver.
# Note: Using Stackdriver will incur additional charges.
metrics.backend-destination: prometheus
# metrics.stackdriver-project-id field specifies the Stackdriver project ID. This
# field is optional. When running on GCE, application default credentials will be
# used and metrics will be sent to the cluster's project if this field is
# not provided.
metrics.stackdriver-project-id: "<your stackdriver project id>"
# metrics.allow-stackdriver-custom-metrics indicates whether it is allowed
# to send metrics to Stackdriver using "global" resource type and custom
# metric type. Setting this flag to "true" could cause extra Stackdriver
# charge. If metrics.backend-destination is not Stackdriver, this is
# ignored.
metrics.allow-stackdriver-custom-metrics: "false"
kind: ConfigMap
metadata:
labels:
app.kubernetes.io/instance: default
name: tekton-config-observability
namespace: tekton-operator
---
apiVersion: v1
data:
_example: |
################################
# #
# EXAMPLE CONFIGURATION #
# #
################################
# This block is not actually functional configuration,
# but serves to illustrate the available configuration
# options and document them in a way that is accessible
# to users that `kubectl edit` this config map.
#
# These sample configuration options may be copied out of
# this example block and unindented to be in the data block
# to actually change the configuration.
# lease-duration is how long non-leaders will wait to try to acquire the
# lock; 15 seconds is the value used by core kubernetes controllers.
lease-duration: "60s"
# renew-deadline is how long a leader will try to renew the lease before
# giving up; 10 seconds is the value used by core kubernetes controllers.
renew-deadline: "40s"
# retry-period is how long the leader election client waits between tries of
# actions; 2 seconds is the value used by core kubernetes controllers.
retry-period: "10s"
# buckets is the number of buckets used to partition key space of each
# Reconciler. If this number is M and the replica number of the controller
# is N, the N replicas will compete for the M buckets. The owner of a
# bucket will take care of the reconciling for the keys partitioned into
# that bucket.
buckets: "1"
kind: ConfigMap
metadata:
labels:
app.kubernetes.io/instance: default
operator.tekton.dev/release: "v0.79.1"
name: tekton-operator-controller-config-leader-election
namespace: tekton-operator
---
apiVersion: v1
data:
version: "v0.79.1"
kind: ConfigMap
metadata:
labels:
app.kubernetes.io/instance: default
name: tekton-operator-info
namespace: tekton-operator
---
apiVersion: v1
data:
_example: |
################################
# #
# EXAMPLE CONFIGURATION #
# #
################################
# This block is not actually functional configuration,
# but serves to illustrate the available configuration
# options and document them in a way that is accessible
# to users that `kubectl edit` this config map.
#
# These sample configuration options may be copied out of
# this example block and unindented to be in the data block
# to actually change the configuration.
# lease-duration is how long non-leaders will wait to try to acquire the
# lock; 15 seconds is the value used by core kubernetes controllers.
lease-duration: "60s"
# renew-deadline is how long a leader will try to renew the lease before
# giving up; 10 seconds is the value used by core kubernetes controllers.
renew-deadline: "40s"
# retry-period is how long the leader election client waits between tries of
# actions; 2 seconds is the value used by core kubernetes controllers.
retry-period: "10s"
# buckets is the number of buckets used to partition key space of each
# Reconciler. If this number is M and the replica number of the controller
# is N, the N replicas will compete for the M buckets. The owner of a
# bucket will take care of the reconciling for the keys partitioned into
# that bucket.
buckets: "1"
kind: ConfigMap
metadata:
labels:
app.kubernetes.io/instance: default
operator.tekton.dev/release: "v0.79.1"
name: tekton-operator-webhook-config-leader-election
namespace: tekton-operator
---
apiVersion: v1
kind: Secret
metadata:
labels:
app: tekton-operator
name: tekton-operator-webhook
name: tekton-operator-webhook-certs
namespace: tekton-operator
---
apiVersion: v1
kind: Service
metadata:
labels:
app: tekton-pipelines-controller
version: "v0.79.1"
name: tekton-operator
namespace: tekton-operator
spec:
ports:
- name: http-metrics
port: 9090
protocol: TCP
targetPort: 9090
selector:
app: tekton-operator
name: tekton-operator
---
apiVersion: v1
kind: Service
metadata:
labels:
app: tekton-operator
name: tekton-operator-webhook
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tekton-operator-webhook
namespace: tekton-operator
spec:
ports:
- name: https-webhook
port: 443
targetPort: 8443
selector:
app: tekton-operator
name: tekton-operator-webhook
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tekton-operator
namespace: tekton-operator
spec:
replicas: 1
selector:
matchLabels:
name: tekton-operator
template:
metadata:
labels:
app: tekton-operator
name: tekton-operator
spec:
containers:
- args:
- -controllers
- tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae
- -unique-process-name
- tekton-operator-lifecycle
env:
- name: KUBERNETES_MIN_VERSION
value: v1.0.0
- name: SYSTEM_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: OPERATOR_NAME
value: tekton-operator
- name: IMAGE_PIPELINES_PROXY
value: ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.79.1@sha256:2d5e2cb364a8e704640e1264dea83968f8811afe060ba1bc5f275aac1a8137dc
- name: IMAGE_JOB_PRUNER_TKN
value: ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed
- name: METRICS_DOMAIN
value: tekton.dev/operator
- name: VERSION
value: v0.79.1
- name: CONFIG_OBSERVABILITY_NAME
value: tekton-config-observability
- name: CONFIG_LEADERELECTION_NAME
value: tekton-operator-controller-config-leader-election
- name: AUTOINSTALL_COMPONENTS
valueFrom:
configMapKeyRef:
key: AUTOINSTALL_COMPONENTS
name: tekton-config-defaults
- name: DEFAULT_TARGET_NAMESPACE
valueFrom:
configMapKeyRef:
key: DEFAULT_TARGET_NAMESPACE
name: tekton-config-defaults
image: ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.79.1@sha256:0335d22cf1dc5f2e58eee92a3f239c6b95e1930422cd5bc4df577761a5e9161f
imagePullPolicy: IfNotPresent
name: tekton-operator-lifecycle
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
seccompProfile:
type: RuntimeDefault
- args:
- -controllers
- tektoninstallerset
- -unique-process-name
- tekton-operator-cluster-operations
env:
- name: KUBERNETES_MIN_VERSION
value: v1.0.0
- name: SYSTEM_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: OPERATOR_NAME
value: tekton-operator
- name: PROFILING_PORT
value: "9009"
- name: VERSION
value: v0.79.1
- name: METRICS_DOMAIN
value: tekton.dev/operator
- name: CONFIG_LEADERELECTION_NAME
value: tekton-operator-controller-config-leader-election
image: ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.79.1@sha256:0335d22cf1dc5f2e58eee92a3f239c6b95e1930422cd5bc4df577761a5e9161f
imagePullPolicy: IfNotPresent
name: tekton-operator-cluster-operations
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
seccompProfile:
type: RuntimeDefault
serviceAccountName: tekton-operator
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
operator.tekton.dev/release: "v0.79.1"
version: "v0.79.1"
name: tekton-operator-webhook
namespace: tekton-operator
spec:
replicas: 1
selector:
matchLabels:
name: tekton-operator-webhook
template:
metadata:
labels:
app: tekton-operator
name: tekton-operator-webhook
spec:
containers:
- env:
- name: KUBERNETES_MIN_VERSION
value: v1.0.0
- name: SYSTEM_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: WEBHOOK_POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: CONFIG_LOGGING_NAME
value: config-logging
- name: CONFIG_LEADERELECTION_NAME
value: tekton-operator-webhook-config-leader-election
- name: WEBHOOK_SERVICE_NAME
value: tekton-operator-webhook
- name: WEBHOOK_SECRET_NAME
value: tekton-operator-webhook-certs
- name: METRICS_DOMAIN
value: tekton.dev/operator
image: ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.79.1@sha256:058393f8296de0044dcfca262ee2c7595379253259e324e3dcdf473e46fbbb6a
name: tekton-operator-webhook
ports:
- containerPort: 8443
name: https-webhook
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
seccompProfile:
type: RuntimeDefault
serviceAccountName: tekton-operator
---
Reference in New Issue View Git Blame Copy Permalink