Erste Implementierung

flux/base/clusterroles/fluxcd-user.yaml

@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: fluxcd-edit
+  labels:
+    # Add these permissions to "edit" default role.
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+- apiGroups: ["helm.toolkit.fluxcd.io","kustomize.toolkit.fluxcd.io","notification.toolkit.fluxcd.io","source.toolkit.fluxcd.io"]
+  resources: ["*"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]

flux/base/clusterroles/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- fluxcd-user.yaml

flux/base/namespace/default-kustomization.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: kustomization
+  namespace: default
+spec:
+  decryption:
+    provider: sops
+  interval: 5m0s
+  path: ./flux/clusters/eks-cluster-name
+  prune: true
+  serviceAccountName: deploy
+  sourceRef:
+    kind: GitRepository
+    name: source
+  validation: client

flux/base/namespace/default-memory-limit.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: v1
+kind: LimitRange
+metadata:
+  name: default-memory-limit
+spec:
+  limits:
+  - default:
+      memory: 256Mi
+    defaultRequest:
+      memory: 256Mi
+    type: Container

flux/base/namespace/default-source.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+  name: source
+  namespace: default
+spec:
+  interval: 1m0s
+  ref:
+    branch: main
+  url: ssh://git@github.com/sueddeutsche/demo-flux-echoserver.git
+  secretRef:
+    name: GITHUB-SSH-TOKEN

flux/base/namespace/deploy-rolebinding.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: deploy-rolebinding
+  namespace: default
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: edit
+subjects:
+- kind: ServiceAccount
+  name: deploy
+  namespace: default 

flux/base/namespace/deploy-serviceaccount.yaml

@@ -0,0 +1,6 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: deploy 
+  namespace: default

flux/base/namespace/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - default-kustomization.yaml
+  - default-memory-limit.yaml
+  - default-source.yaml
+  - deploy-serviceaccount.yaml
+  - deploy-rolebinding.yaml
+  - namespace.yaml

flux/base/namespace/namespace.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: default