Merge pull request #130 from linkernetworks/johnlin/vortex-namespace

rbac and namespace

config/k8s.json

@@ -14,7 +14,7 @@
         }
     },
     "mongo": {
-        "url": "mongodb://mongo-0.mongo:27017/vortex",
+        "url": "mongodb://mongo-0.vortex:27017/vortex",
         "public": {
             "url": "mongodb://35.189.177.37:31717/votex"
         }
@@ -40,4 +40,4 @@
         "version": "<GIT_COMMIT>",
         "logFileName": "access_log"
     }
-}
+}

deploy/helm/apps/vortex/Chart.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+appVersion: "1.0"
+description: A Helm chart for Kubernetes
+name: vortex
+version: 0.1.0

deploy/helm/apps/network-controller/templates/tcp-daemonset.yaml → deploy/helm/apps/vortex/charts/network-controller/templates/tcp-daemonset.yaml

@@ -17,7 +17,7 @@ spec:
         effect: NoSchedule
       containers:
       - name: network-controller-server-tcp
-        image: sdnvortex/network-controller:{{ .Values.global.tag }}
+        image: sdnvortex/network-controller:{{ .Values.image.tag }}
         securityContext:
           privileged: true
         command: ["/go/bin/server"]

deploy/helm/apps/network-controller/templates/unix-daemonset.yaml → deploy/helm/apps/vortex/charts/network-controller/templates/unix-daemonset.yaml

@@ -17,7 +17,7 @@ spec:
         effect: NoSchedule
       containers:
       - name: network-controller-server-unix
-        image: sdnvortex/network-controller:{{ .Values.global.tag }}
+        image: sdnvortex/network-controller:{{ .Values.image.tag }}
         securityContext:
           privileged: true
         command: ["/go/bin/server"]

deploy/helm/apps/vortex/charts/vortex-server/.helmignore

@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj

deploy/helm/apps/vortex-server/templates/deployment.yaml → deploy/helm/apps/vortex/charts/vortex-server/templates/deployment.yaml

@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ template "vortex-server.fullname" . }}
+  namespace: vortex
   labels:
     app: {{ template "vortex-server.name" . }}
     chart: {{ template "vortex-server.chart" . }}

deploy/helm/apps/vortex-server/templates/service.yaml → deploy/helm/apps/vortex/charts/vortex-server/templates/service.yaml

@@ -2,6 +2,7 @@ kind: Service
 apiVersion: v1
 metadata:
   name: {{ template "vortex-server.fullname" . }}
+  namespace: vortex
   labels:
     app: {{ template "vortex-server.name" . }}
     chart: {{ template "vortex-server.chart" . }}

deploy/helm/apps/vortex/templates/rbac.yaml

@@ -0,0 +1,29 @@
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: cluster-admin
+rules:
+  - apiGroups:
+    - '*'
+    resources:
+    - '*'
+    verbs:
+    - '*'
+  - nonResourceURLs:
+    - '*'
+    verbs:
+    - '*'
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: default-cluster-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: vortex
+  namespace: vortex

deploy/helm/foundation/mongodb/values.yaml

@@ -2,6 +2,8 @@ global:
   environment: develop
   storage: 1Gi
 
+replicaCount: 1
+
 hostpath:
   enabled: false
 

deploy/kubernetes/apps/monitoring/kube-state-metrics/kube-state-metrics-cluster-role-binding.yaml

@@ -1,4 +1,4 @@
-apiVersion: rbac.authorization.k8s.io/v1 
+apiVersion: rbac.authorization.k8s.io/v1
 # kubernetes versions before 1.8.0 should use rbac.authorization.k8s.io/v1beta1
 kind: ClusterRoleBinding
 metadata:

deploy/kubernetes/apps/vortex/01-rbac.yaml

@@ -0,0 +1,29 @@
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: cluster-admin
+rules:
+  - apiGroups:
+    - '*'
+    resources:
+    - '*'
+    verbs:
+    - '*'
+  - nonResourceURLs:
+    - '*'
+    verbs:
+    - '*'
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: default-cluster-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: vortex
+  namespace: vortex

deploy/kubernetes/apps/vortex/deployment.yaml → deploy/kubernetes/apps/vortex/vortex-server/deployment.yaml

@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: vortex-server
+  namespace: vortex
   labels:
     app: vortex-server
 spec:

deploy/kubernetes/apps/vortex/service.yaml → deploy/kubernetes/apps/vortex/vortex-server/service.yaml

@@ -2,6 +2,7 @@ kind: Service
 apiVersion: v1
 metadata:
   name: vortex-server
+  namespace: vortex
   labels:
     app: vortex-server
 spec:
@@ -13,4 +14,4 @@ spec:
       targetPort: 7890
       nodePort: 32326
       name: vortex-server
-  type: NodePort
+  type: NodePort

deploy/kubernetes/service/mongodb/service-external.yaml

@@ -5,6 +5,7 @@ metadata:
   labels:
     environment: testing
   name: mongo-external
+  namespace: vortex
 spec:
   externalTrafficPolicy: Cluster
   ports:

deploy/kubernetes/service/mongodb/service.yaml

@@ -6,6 +6,7 @@ metadata:
   labels:
     name: mongo
     service: mongo
+  namespace: vortex
 spec:
   ports:
   - port: 27017

deploy/kubernetes/service/mongodb/statefulset-dev.yaml

@@ -2,6 +2,7 @@ apiVersion: apps/v1beta1
 kind: StatefulSet
 metadata:
   name: mongo
+  namespace: vortex
 spec:
   serviceName: "mongo"
   replicas: 1

deploy/kubernetes/service/mongodb/statefulset.yaml

@@ -2,6 +2,7 @@ apiVersion: apps/v1beta1
 kind: StatefulSet
 metadata:
   name: mongo
+  namespace: vortex
 spec:
   serviceName: "mongo"
   replicas: 1