|  | 
|  | 1 | +apiVersion: v1 | 
|  | 2 | +kind: ServiceAccount | 
|  | 3 | +metadata: | 
|  | 4 | +  labels: | 
|  | 5 | +    app.kubernetes.io/instance: websphere-liberty-operator | 
|  | 6 | +    app.kubernetes.io/name: websphere-liberty-operator | 
|  | 7 | +  name: wlo-controller-manager | 
|  | 8 | +--- | 
|  | 9 | +apiVersion: rbac.authorization.k8s.io/v1 | 
|  | 10 | +kind: Role | 
|  | 11 | +metadata: | 
|  | 12 | +  labels: | 
|  | 13 | +    app.kubernetes.io/instance: websphere-liberty-operator | 
|  | 14 | +    app.kubernetes.io/name: websphere-liberty-operator | 
|  | 15 | +  name: wlo-leader-election-role | 
|  | 16 | +rules: | 
|  | 17 | +- apiGroups: | 
|  | 18 | +  - "" | 
|  | 19 | +  - coordination.k8s.io | 
|  | 20 | +  resources: | 
|  | 21 | +  - configmaps | 
|  | 22 | +  - leases | 
|  | 23 | +  verbs: | 
|  | 24 | +  - get | 
|  | 25 | +  - list | 
|  | 26 | +  - watch | 
|  | 27 | +  - create | 
|  | 28 | +  - update | 
|  | 29 | +  - patch | 
|  | 30 | +  - delete | 
|  | 31 | +- apiGroups: | 
|  | 32 | +  - "" | 
|  | 33 | +  resources: | 
|  | 34 | +  - events | 
|  | 35 | +  verbs: | 
|  | 36 | +  - create | 
|  | 37 | +  - patch | 
|  | 38 | +--- | 
|  | 39 | +apiVersion: rbac.authorization.k8s.io/v1 | 
|  | 40 | +kind: Role | 
|  | 41 | +metadata: | 
|  | 42 | +  labels: | 
|  | 43 | +    app.kubernetes.io/instance: websphere-liberty-operator | 
|  | 44 | +    app.kubernetes.io/name: websphere-liberty-operator | 
|  | 45 | +  name: wlo-manager-role | 
|  | 46 | +rules: | 
|  | 47 | +- apiGroups: | 
|  | 48 | +  - apps | 
|  | 49 | +  resources: | 
|  | 50 | +  - deployments | 
|  | 51 | +  - statefulsets | 
|  | 52 | +  verbs: | 
|  | 53 | +  - create | 
|  | 54 | +  - delete | 
|  | 55 | +  - get | 
|  | 56 | +  - list | 
|  | 57 | +  - update | 
|  | 58 | +  - watch | 
|  | 59 | +- apiGroups: | 
|  | 60 | +  - apps | 
|  | 61 | +  resources: | 
|  | 62 | +  - deployments/finalizers | 
|  | 63 | +  - statefulsets | 
|  | 64 | +  verbs: | 
|  | 65 | +  - update | 
|  | 66 | +- apiGroups: | 
|  | 67 | +  - autoscaling | 
|  | 68 | +  resources: | 
|  | 69 | +  - horizontalpodautoscalers | 
|  | 70 | +  verbs: | 
|  | 71 | +  - create | 
|  | 72 | +  - delete | 
|  | 73 | +  - get | 
|  | 74 | +  - list | 
|  | 75 | +  - update | 
|  | 76 | +  - watch | 
|  | 77 | +- apiGroups: | 
|  | 78 | +  - batch | 
|  | 79 | +  resources: | 
|  | 80 | +  - jobs | 
|  | 81 | +  verbs: | 
|  | 82 | +  - create | 
|  | 83 | +  - delete | 
|  | 84 | +  - get | 
|  | 85 | +  - list | 
|  | 86 | +  - update | 
|  | 87 | +  - watch | 
|  | 88 | +- apiGroups: | 
|  | 89 | +  - cert-manager.io | 
|  | 90 | +  resources: | 
|  | 91 | +  - certificates | 
|  | 92 | +  - issuers | 
|  | 93 | +  verbs: | 
|  | 94 | +  - create | 
|  | 95 | +  - delete | 
|  | 96 | +  - get | 
|  | 97 | +  - list | 
|  | 98 | +  - update | 
|  | 99 | +  - watch | 
|  | 100 | +- apiGroups: | 
|  | 101 | +  - "" | 
|  | 102 | +  resources: | 
|  | 103 | +  - configmaps | 
|  | 104 | +  - persistentvolumeclaims | 
|  | 105 | +  - secrets | 
|  | 106 | +  - serviceaccounts | 
|  | 107 | +  - services | 
|  | 108 | +  verbs: | 
|  | 109 | +  - create | 
|  | 110 | +  - delete | 
|  | 111 | +  - get | 
|  | 112 | +  - list | 
|  | 113 | +  - update | 
|  | 114 | +  - watch | 
|  | 115 | +- apiGroups: | 
|  | 116 | +  - "" | 
|  | 117 | +  resources: | 
|  | 118 | +  - pods | 
|  | 119 | +  - pods/exec | 
|  | 120 | +  verbs: | 
|  | 121 | +  - create | 
|  | 122 | +  - delete | 
|  | 123 | +  - get | 
|  | 124 | +  - list | 
|  | 125 | +  - patch | 
|  | 126 | +  - update | 
|  | 127 | +  - watch | 
|  | 128 | +- apiGroups: | 
|  | 129 | +  - image.openshift.io | 
|  | 130 | +  resources: | 
|  | 131 | +  - imagestreams | 
|  | 132 | +  - imagestreamtags | 
|  | 133 | +  verbs: | 
|  | 134 | +  - get | 
|  | 135 | +  - list | 
|  | 136 | +  - watch | 
|  | 137 | +- apiGroups: | 
|  | 138 | +  - liberty.websphere.ibm.com | 
|  | 139 | +  resources: | 
|  | 140 | +  - webspherelibertyapplications | 
|  | 141 | +  - webspherelibertyapplications/finalizers | 
|  | 142 | +  - webspherelibertyapplications/status | 
|  | 143 | +  verbs: | 
|  | 144 | +  - create | 
|  | 145 | +  - delete | 
|  | 146 | +  - get | 
|  | 147 | +  - list | 
|  | 148 | +  - patch | 
|  | 149 | +  - update | 
|  | 150 | +  - watch | 
|  | 151 | +- apiGroups: | 
|  | 152 | +  - liberty.websphere.ibm.com | 
|  | 153 | +  resources: | 
|  | 154 | +  - webspherelibertydumps | 
|  | 155 | +  - webspherelibertydumps/finalizers | 
|  | 156 | +  - webspherelibertydumps/status | 
|  | 157 | +  verbs: | 
|  | 158 | +  - create | 
|  | 159 | +  - delete | 
|  | 160 | +  - get | 
|  | 161 | +  - list | 
|  | 162 | +  - patch | 
|  | 163 | +  - update | 
|  | 164 | +  - watch | 
|  | 165 | +- apiGroups: | 
|  | 166 | +  - liberty.websphere.ibm.com | 
|  | 167 | +  resources: | 
|  | 168 | +  - webspherelibertytraces | 
|  | 169 | +  - webspherelibertytraces/finalizers | 
|  | 170 | +  - webspherelibertytraces/status | 
|  | 171 | +  verbs: | 
|  | 172 | +  - create | 
|  | 173 | +  - delete | 
|  | 174 | +  - get | 
|  | 175 | +  - list | 
|  | 176 | +  - patch | 
|  | 177 | +  - update | 
|  | 178 | +  - watch | 
|  | 179 | +- apiGroups: | 
|  | 180 | +  - monitoring.coreos.com | 
|  | 181 | +  resources: | 
|  | 182 | +  - servicemonitors | 
|  | 183 | +  verbs: | 
|  | 184 | +  - create | 
|  | 185 | +  - delete | 
|  | 186 | +  - get | 
|  | 187 | +  - list | 
|  | 188 | +  - update | 
|  | 189 | +  - watch | 
|  | 190 | +- apiGroups: | 
|  | 191 | +  - networking.k8s.io | 
|  | 192 | +  resources: | 
|  | 193 | +  - ingresses | 
|  | 194 | +  - networkpolicies | 
|  | 195 | +  verbs: | 
|  | 196 | +  - create | 
|  | 197 | +  - delete | 
|  | 198 | +  - get | 
|  | 199 | +  - list | 
|  | 200 | +  - update | 
|  | 201 | +  - watch | 
|  | 202 | +- apiGroups: | 
|  | 203 | +  - rbac.authorization.k8s.io | 
|  | 204 | +  resources: | 
|  | 205 | +  - rolebindings | 
|  | 206 | +  - roles | 
|  | 207 | +  verbs: | 
|  | 208 | +  - create | 
|  | 209 | +  - delete | 
|  | 210 | +  - get | 
|  | 211 | +  - list | 
|  | 212 | +  - update | 
|  | 213 | +  - watch | 
|  | 214 | +- apiGroups: | 
|  | 215 | +  - route.openshift.io | 
|  | 216 | +  resources: | 
|  | 217 | +  - routes | 
|  | 218 | +  - routes/custom-host | 
|  | 219 | +  verbs: | 
|  | 220 | +  - create | 
|  | 221 | +  - delete | 
|  | 222 | +  - get | 
|  | 223 | +  - list | 
|  | 224 | +  - update | 
|  | 225 | +  - watch | 
|  | 226 | +- apiGroups: | 
|  | 227 | +  - security.openshift.io | 
|  | 228 | +  resourceNames: | 
|  | 229 | +  - restricted | 
|  | 230 | +  resources: | 
|  | 231 | +  - securitycontextconstraints | 
|  | 232 | +  verbs: | 
|  | 233 | +  - use | 
|  | 234 | +- apiGroups: | 
|  | 235 | +  - serving.knative.dev | 
|  | 236 | +  resources: | 
|  | 237 | +  - services | 
|  | 238 | +  verbs: | 
|  | 239 | +  - create | 
|  | 240 | +  - delete | 
|  | 241 | +  - get | 
|  | 242 | +  - list | 
|  | 243 | +  - update | 
|  | 244 | +  - watch | 
|  | 245 | +--- | 
|  | 246 | +apiVersion: rbac.authorization.k8s.io/v1 | 
|  | 247 | +kind: RoleBinding | 
|  | 248 | +metadata: | 
|  | 249 | +  labels: | 
|  | 250 | +    app.kubernetes.io/instance: websphere-liberty-operator | 
|  | 251 | +    app.kubernetes.io/name: websphere-liberty-operator | 
|  | 252 | +  name: wlo-leader-election-rolebinding | 
|  | 253 | +roleRef: | 
|  | 254 | +  apiGroup: rbac.authorization.k8s.io | 
|  | 255 | +  kind: Role | 
|  | 256 | +  name: wlo-leader-election-role | 
|  | 257 | +subjects: | 
|  | 258 | +- kind: ServiceAccount | 
|  | 259 | +  name: wlo-controller-manager | 
|  | 260 | +--- | 
|  | 261 | +apiVersion: rbac.authorization.k8s.io/v1 | 
|  | 262 | +kind: RoleBinding | 
|  | 263 | +metadata: | 
|  | 264 | +  labels: | 
|  | 265 | +    app.kubernetes.io/instance: websphere-liberty-operator | 
|  | 266 | +    app.kubernetes.io/name: websphere-liberty-operator | 
|  | 267 | +  name: wlo-manager-rolebinding | 
|  | 268 | +roleRef: | 
|  | 269 | +  apiGroup: rbac.authorization.k8s.io | 
|  | 270 | +  kind: Role | 
|  | 271 | +  name: wlo-manager-role | 
|  | 272 | +subjects: | 
|  | 273 | +- kind: ServiceAccount | 
|  | 274 | +  name: wlo-controller-manager | 
|  | 275 | +--- | 
|  | 276 | +apiVersion: apps/v1 | 
|  | 277 | +kind: Deployment | 
|  | 278 | +metadata: | 
|  | 279 | +  labels: | 
|  | 280 | +    app.kubernetes.io/instance: websphere-liberty-operator | 
|  | 281 | +    app.kubernetes.io/name: websphere-liberty-operator | 
|  | 282 | +    control-plane: controller-manager | 
|  | 283 | +  name: wlo-controller-manager | 
|  | 284 | +spec: | 
|  | 285 | +  replicas: 1 | 
|  | 286 | +  selector: | 
|  | 287 | +    matchLabels: | 
|  | 288 | +      app.kubernetes.io/instance: websphere-liberty-operator | 
|  | 289 | +      app.kubernetes.io/name: websphere-liberty-operator | 
|  | 290 | +      control-plane: controller-manager | 
|  | 291 | +  template: | 
|  | 292 | +    metadata: | 
|  | 293 | +      annotations: | 
|  | 294 | +        kubectl.kubernetes.io/default-container: manager | 
|  | 295 | +        productChargedContainers: ALL | 
|  | 296 | +        productID: cb1747ecb831410f88006195f024183f | 
|  | 297 | +        productMetric: FREE | 
|  | 298 | +        productName: WebSphere Liberty Operator | 
|  | 299 | +      labels: | 
|  | 300 | +        app.kubernetes.io/instance: websphere-liberty-operator | 
|  | 301 | +        app.kubernetes.io/name: websphere-liberty-operator | 
|  | 302 | +        control-plane: controller-manager | 
|  | 303 | +    spec: | 
|  | 304 | +      affinity: | 
|  | 305 | +        nodeAffinity: | 
|  | 306 | +          requiredDuringSchedulingIgnoredDuringExecution: | 
|  | 307 | +            nodeSelectorTerms: | 
|  | 308 | +            - matchExpressions: | 
|  | 309 | +              - key: kubernetes.io/arch | 
|  | 310 | +                operator: In | 
|  | 311 | +                values: | 
|  | 312 | +                - amd64 | 
|  | 313 | +                - ppc64le | 
|  | 314 | +                - s390x | 
|  | 315 | +      containers: | 
|  | 316 | +      - args: | 
|  | 317 | +        - --health-probe-bind-address=:8081 | 
|  | 318 | +        - --metrics-bind-address=127.0.0.1:8080 | 
|  | 319 | +        - --enable-leader-election | 
|  | 320 | +        command: | 
|  | 321 | +        - /manager | 
|  | 322 | +        env: | 
|  | 323 | +        - name: OPERATOR_NAMESPACE | 
|  | 324 | +          valueFrom: | 
|  | 325 | +            fieldRef: | 
|  | 326 | +              fieldPath: metadata.namespace | 
|  | 327 | +        - name: WATCH_NAMESPACE | 
|  | 328 | +          value: WEBSPHERE_LIBERTY_WATCH_NAMESPACE | 
|  | 329 | +        - name: RELATED_IMAGE_LIBERTY_SAMPLE_APP | 
|  | 330 | +          value: icr.io/appcafe/open-liberty/samples/getting-started@sha256:4d527962b6866e27f47f8f3f31f2a4c0fd7c657e9baa91126466387ad56fe923 | 
|  | 331 | +        - name: RELATED_IMAGE_WEBSPHERE_LIBERTY_OPERATOR | 
|  | 332 | +          value: icr.io/cpopen/websphere-liberty-operator@sha256:0f1e734401429a3f02055fa88a6847720296db8aa29df578cfb713680f9b883a | 
|  | 333 | +        image: icr.io/cpopen/websphere-liberty-operator@sha256:0f1e734401429a3f02055fa88a6847720296db8aa29df578cfb713680f9b883a | 
|  | 334 | +        livenessProbe: | 
|  | 335 | +          failureThreshold: 3 | 
|  | 336 | +          httpGet: | 
|  | 337 | +            path: /healthz | 
|  | 338 | +            port: 8081 | 
|  | 339 | +            scheme: HTTP | 
|  | 340 | +          initialDelaySeconds: 90 | 
|  | 341 | +          periodSeconds: 30 | 
|  | 342 | +          successThreshold: 1 | 
|  | 343 | +          timeoutSeconds: 10 | 
|  | 344 | +        name: manager | 
|  | 345 | +        readinessProbe: | 
|  | 346 | +          failureThreshold: 3 | 
|  | 347 | +          httpGet: | 
|  | 348 | +            path: /readyz | 
|  | 349 | +            port: 8081 | 
|  | 350 | +            scheme: HTTP | 
|  | 351 | +          initialDelaySeconds: 20 | 
|  | 352 | +          periodSeconds: 30 | 
|  | 353 | +          successThreshold: 1 | 
|  | 354 | +          timeoutSeconds: 10 | 
|  | 355 | +        resources: | 
|  | 356 | +          limits: | 
|  | 357 | +            cpu: 400m | 
|  | 358 | +            memory: 1Gi | 
|  | 359 | +          requests: | 
|  | 360 | +            cpu: 200m | 
|  | 361 | +            memory: 128Mi | 
|  | 362 | +        securityContext: | 
|  | 363 | +          allowPrivilegeEscalation: false | 
|  | 364 | +          capabilities: | 
|  | 365 | +            drop: | 
|  | 366 | +            - ALL | 
|  | 367 | +          privileged: false | 
|  | 368 | +          readOnlyRootFilesystem: true | 
|  | 369 | +          runAsNonRoot: true | 
|  | 370 | +          seccompProfile: | 
|  | 371 | +            type: RuntimeDefault | 
|  | 372 | +        volumeMounts: | 
|  | 373 | +        - mountPath: /liberty/output | 
|  | 374 | +          name: scratch | 
|  | 375 | +          subPath: create-ltpa-keys | 
|  | 376 | +      hostIPC: false | 
|  | 377 | +      hostNetwork: false | 
|  | 378 | +      hostPID: false | 
|  | 379 | +      securityContext: | 
|  | 380 | +        runAsNonRoot: true | 
|  | 381 | +        seccompProfile: | 
|  | 382 | +          type: RuntimeDefault | 
|  | 383 | +      serviceAccountName: wlo-controller-manager | 
|  | 384 | +      terminationGracePeriodSeconds: 10 | 
|  | 385 | +      volumes: | 
|  | 386 | +      - emptyDir: {} | 
|  | 387 | +        name: scratch | 
0 commit comments