11---
22# Source: mongodb-enterprise-operator/templates/operator-roles.yaml
3+ ---
34apiVersion : v1
45kind : ServiceAccount
56metadata :
67 name : enterprise-operator
78 namespace : mongodb
9+
10+
811---
9- # Source: mongodb-enterprise-operator/templates/operator-roles.yaml
10- kind : ClusterRole
11- apiVersion : rbac.authorization.k8s.io/v1
12- metadata :
13- name : enterprise-operator-mongodb-certs
14- rules :
15- - apiGroups :
16- - certificates.k8s.io
17- resources :
18- - certificatesigningrequests
19- verbs :
20- - get
21- - create
22- - list
23- - watch
24- ---
25- # Source: mongodb-enterprise-operator/templates/operator-roles.yaml
26- kind : ClusterRoleBinding
27- apiVersion : rbac.authorization.k8s.io/v1
28- metadata :
29- name : enterprise-operator-mongodb-webhook-binding
30- namespace : mongodb
31- roleRef :
32- apiGroup : rbac.authorization.k8s.io
33- kind : ClusterRole
34- name : mongodb-enterprise-operator-mongodb-webhook
35- subjects :
36- - kind : ServiceAccount
37- name : enterprise-operator
38- namespace : mongodb
39- ---
40- # Source: mongodb-enterprise-operator/templates/operator-roles.yaml
41- kind : ClusterRoleBinding
42- apiVersion : rbac.authorization.k8s.io/v1
43- metadata :
44- name : enterprise-operator-mongodb-certs-binding
45- namespace : mongodb
46- roleRef :
47- apiGroup : rbac.authorization.k8s.io
48- kind : ClusterRole
49- name : enterprise-operator-mongodb-certs
50- subjects :
51- - kind : ServiceAccount
52- name : enterprise-operator
53- namespace : mongodb
54- ---
55- # Source: mongodb-enterprise-operator/templates/operator-roles.yaml
5612kind : Role
5713apiVersion : rbac.authorization.k8s.io/v1
5814metadata :
@@ -102,7 +58,21 @@ rules:
10258# definitions. The validating webhooks are optional so this can be removed if
10359# necessary.
10460---
105- # Source: mongodb-enterprise-operator/templates/operator-roles.yaml
61+ kind : ClusterRoleBinding
62+ apiVersion : rbac.authorization.k8s.io/v1
63+ metadata :
64+ name : enterprise-operator-mongodb-webhook-binding
65+ namespace : mongodb
66+ roleRef :
67+ apiGroup : rbac.authorization.k8s.io
68+ kind : ClusterRole
69+ name : mongodb-enterprise-operator-mongodb-webhook
70+ subjects :
71+ - kind : ServiceAccount
72+ name : enterprise-operator
73+ namespace : mongodb
74+
75+ ---
10676kind : RoleBinding
10777apiVersion : rbac.authorization.k8s.io/v1
10878metadata :
@@ -119,22 +89,55 @@ subjects:
11989
12090# This ClusterRole is needed if the user wants to use the Kubernetes CA
12191# infrastructure to generate certificates.
92+ ---
93+ kind : ClusterRole
94+ apiVersion : rbac.authorization.k8s.io/v1
95+ metadata :
96+ name : enterprise-operator-mongodb-certs
97+ rules :
98+ - apiGroups :
99+ - certificates.k8s.io
100+ resources :
101+ - certificatesigningrequests
102+ verbs :
103+ - get
104+ - create
105+ - list
106+ - watch
107+
108+ ---
109+ kind : ClusterRoleBinding
110+ apiVersion : rbac.authorization.k8s.io/v1
111+ metadata :
112+ name : enterprise-operator-mongodb-certs-binding
113+ namespace : mongodb
114+ roleRef :
115+ apiGroup : rbac.authorization.k8s.io
116+ kind : ClusterRole
117+ name : enterprise-operator-mongodb-certs
118+ subjects :
119+ - kind : ServiceAccount
120+ name : enterprise-operator
121+ namespace : mongodb
122+
123+
122124---
123125# Source: mongodb-enterprise-operator/templates/database-roles.yaml
126+ ---
124127apiVersion : v1
125128kind : ServiceAccount
126129metadata :
127130 name : mongodb-enterprise-appdb
128131 namespace : mongodb
132+
129133---
130- # Source: mongodb-enterprise-operator/templates/database-roles.yaml
131134apiVersion : v1
132135kind : ServiceAccount
133136metadata :
134137 name : mongodb-enterprise-database-pods
135138 namespace : mongodb
139+
136140---
137- # Source: mongodb-enterprise-operator/templates/database-roles.yaml
138141kind : Role
139142apiVersion : rbac.authorization.k8s.io/v1
140143metadata :
@@ -147,8 +150,8 @@ rules:
147150 - configmaps
148151 verbs :
149152 - get
153+
150154---
151- # Source: mongodb-enterprise-operator/templates/database-roles.yaml
152155kind : RoleBinding
153156apiVersion : rbac.authorization.k8s.io/v1
154157metadata :
@@ -162,8 +165,10 @@ subjects:
162165 - kind : ServiceAccount
163166 name : mongodb-enterprise-appdb
164167 namespace : mongodb
168+
165169---
166170# Source: mongodb-enterprise-operator/templates/operator.yaml
171+ ---
167172apiVersion : apps/v1
168173kind : Deployment
169174metadata :
@@ -209,7 +214,7 @@ spec:
209214 - name : IMAGE_PULL_POLICY
210215 value : Always
211216 - name : OPS_MANAGER_IMAGE_REPOSITORY
212- value : registry.connect.redhat.com/mongodb
217+ value : registry.connect.redhat.com/mongodb/mongodb-enterprise-ops-manager
213218 - name : INIT_OPS_MANAGER_IMAGE_REPOSITORY
214219 value : registry.connect.redhat.com/mongodb/mongodb-enterprise-init-ops-manager
215220 - name : INIT_OPS_MANAGER_VERSION
@@ -221,4 +226,4 @@ spec:
221226 - name : OPS_MANAGER_IMAGE_PULL_POLICY
222227 value : Always
223228 - name : APPDB_IMAGE_REPOSITORY
224- value : registry.connect.redhat.com/mongodb
229+ value : registry.connect.redhat.com/mongodb/mongodb-enterprise-appdb
0 commit comments