patch(k8s): update deployment files and add a RBAC file

Author: calebevans

deploy/examples/sample-aiprovider-ollama.yaml

@@ -3,6 +3,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: podmortem-ai-interface-service
+  namespace: podmortem-system
 spec:
   replicas: 1
   selector:

deploy/examples/sample-patternlibrary.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: podmortem-ai-interface-service
+  namespace: podmortem-system
 spec:
   selector:
     app: podmortem-ai-interface-service

deploy/examples/sample-podmortem.yaml

@@ -3,6 +3,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: podmortem-log-parser-service
+  namespace: podmortem-system
 spec:
   replicas: 1
   selector:
@@ -13,6 +14,14 @@ spec:
       labels:
         app: podmortem-log-parser-service
     spec:
+      # Ensure this pod runs on the same node as the operator for ReadWriteOnce volume sharing
+      affinity:
+        podAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchLabels:
+                app: podmortem-operator
+            topologyKey: kubernetes.io/hostname
       containers:
       - name: log-parser
         image: ghcr.io/podmortem/podmortem-log-parser:latest

src/main/kubernetes/ai-interface-deployment.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: podmortem-log-parser-service
+  namespace: podmortem-system
 spec:
   selector:
     app: podmortem-log-parser-service

src/main/kubernetes/ai-interface-service.yaml

@@ -47,6 +47,10 @@ spec:
               fieldPath: metadata.name
         - name: OPERATOR_NAME
           value: "podmortem-operator"
+        - name: QUARKUS_REST_CLIENT_LOG_PARSER_URL
+          value: "http://podmortem-log-parser-service.podmortem-system.svc.cluster.local:8080"
+        - name: QUARKUS_REST_CLIENT_AI_INTERFACE_URL
+          value: "http://podmortem-ai-interface-service.podmortem-system.svc.cluster.local:8080"
         resources:
           limits:
             memory: "512Mi"

src/main/kubernetes/log-parser-deployment.yaml

@@ -0,0 +1,28 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: podmortem-operator
+rules:
+  - apiGroups: ["podmortem.redhat.com"]
+    resources: ["aiproviders", "podmortems", "patternlibraries"]
+    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+  - apiGroups: [""]
+    resources: ["pods", "configmaps", "secrets", "events"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["podmortem.redhat.com"]
+    resources: ["*"]
+    verbs: ["patch"]
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: podmortem-operator
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: podmortem-operator
+subjects:
+  - kind: ServiceAccount
+    name: podmortem-operator
+    namespace: podmortem-system

src/main/kubernetes/log-parser-service.yaml

@@ -6,7 +6,7 @@ metadata:
   namespace: podmortem-system
 spec:
   accessModes:
-    - ReadWriteMany
+    - ReadWriteOnce
   resources:
     requests:
       storage: 5Gi