Merge pull request #162 from aandryashin/master

Implemented license secrets.
aerokube · Jul 5, 2022 · cc74a7f · cc74a7f
2 parents f06a1dc + 0198b11
commit cc74a7f
Show file tree

Hide file tree

Showing 11 changed files with 120 additions and 0 deletions.
diff --git a/README-license-ops.md b/README-license-ops.md
@@ -0,0 +1,9 @@
+Installation from chart:
+```
+helm upgrade --install -n moon license-ops aerokube/license-ops
+```
+
+Installation from sources:
+```
+helm upgrade --install -n moon license-ops license-ops
+```
diff --git a/ci/build.sh b/ci/build.sh
@@ -15,6 +15,7 @@ mkdir -p "$output_dir"
 helm package moon --destination "$output_dir"
 helm package moon2 --destination "$output_dir" --version "$version"
 helm package browser-ops --destination "$output_dir" --version "$version"
+helm package license-ops --destination "$output_dir" --version "$version"
 cd "$output_dir"
 wget "$CHARTS_REPO/index.yaml" || true
 helm repo index . --url "$CHARTS_REPO" --merge index.yaml
diff --git a/ci/test.sh b/ci/test.sh
@@ -3,3 +3,4 @@
 helm lint moon
 helm lint moon2
 helm lint browser-ops
+helm lint license-ops
diff --git a/license-ops/Chart.yaml b/license-ops/Chart.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+name: license-ops
+version: 1.0.0
+appVersion: 1.0.0
+description: License Operations chart
+icon: https://aerokube.com/img/aerokube_logo.svg
diff --git a/license-ops/templates/cluster-role-binding.yaml b/license-ops/templates/cluster-role-binding.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Release.Name }}
+  apiGroup: rbac.authorization.k8s.io
+subjects:
+- kind: ServiceAccount
+  name: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
diff --git a/license-ops/templates/cluster-role.yaml b/license-ops/templates/cluster-role.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+rules:
+- apiGroups:
+  - moon.aerokube.com
+  resources:
+  - licenses
+  verbs:
+  - get
+  - patch
diff --git a/license-ops/templates/cron-job.yaml b/license-ops/templates/cron-job.yaml
@@ -0,0 +1,21 @@
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  schedule: {{ .Values.schedule | quote }}
+  concurrencyPolicy: Forbid
+  jobTemplate:
+    spec:
+      ttlSecondsAfterFinished: 0
+      template:
+        spec:
+          serviceAccountName: {{ .Release.Name }}
+          containers:
+          - name: license-ops
+            image: bitnami/kubectl:{{ .Values.version }}
+            command: ["/bin/bash", "-c"]
+            args: ["kubectl patch license {{ .Values.licenseName }} --type='json' -p=\"[{\\\"op\\\": \\\"replace\\\", \\\"path\\\": \\\"/spec/data\\\", \\\"value\\\":\\\"$(kubectl get secret {{ .Values.secretName }} -n {{ .Release.Namespace }} -o yaml -o=jsonpath='{.data.license\\.key}' | base64 -d)\\\"}]\""]
+          restartPolicy: Never
diff --git a/license-ops/templates/role-binding.yaml b/license-ops/templates/role-binding.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: Role
+  name: {{ .Release.Name }}
+  apiGroup: rbac.authorization.k8s.io
+subjects:
+- kind: ServiceAccount
+  name: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
diff --git a/license-ops/templates/role.yaml b/license-ops/templates/role.yaml
@@ -0,0 +1,13 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
diff --git a/license-ops/templates/service-account.yaml b/license-ops/templates/service-account.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+
diff --git a/license-ops/values.yaml b/license-ops/values.yaml
@@ -0,0 +1,20 @@
+##
+## License name.
+##
+licenseName: moon
+
+##
+## Secret name.
+##
+secretName: licensekey
+
+##
+## Schedule
+##
+schedule: "* * * * *"
+
+##
+## Kubernetes version
+##
+version: 1.23
+