diff --git a/.changes/unreleased/operator-Fixed-20260129-122815.yaml b/.changes/unreleased/operator-Fixed-20260129-122815.yaml new file mode 100644 index 000000000..2b7334bc8 --- /dev/null +++ b/.changes/unreleased/operator-Fixed-20260129-122815.yaml @@ -0,0 +1,4 @@ +project: operator +kind: Fixed +body: In previous versions of the operator a field manager was unknowingly changed for resources that were synchronized via server-side apply. This can cause problems with modifying fields such as Service and StatefulSet port definitions. A post-upgrade migration job was added to remove any unwanted field managers. +time: 2026-01-29T12:28:15.717527-05:00 diff --git a/acceptance/features/upgrade-regressions.feature b/acceptance/features/upgrade-regressions.feature new file mode 100644 index 000000000..34fc9fa4f --- /dev/null +++ b/acceptance/features/upgrade-regressions.feature @@ -0,0 +1,97 @@ +@operator:none @vcluster +# Note: use the same version of RP across upgrades to minimize +# issues not related to operator upgrade regressions. +Feature: Operator upgrade regressions + @skip:gke @skip:aks @skip:eks + Scenario: Regression - field managers + Given I helm install "redpanda-operator" "redpanda/operator" --version v25.1.3 with values: + """ + crds: + enabled: true + """ + And I apply Kubernetes manifest: + """ + --- + apiVersion: cluster.redpanda.com/v1alpha2 + kind: Redpanda + metadata: + name: operator-upgrade + spec: + clusterSpec: + image: + repository: redpandadata/redpanda + tag: v25.2.11 + console: + enabled: false + statefulset: + replicas: 1 + sideCars: + image: + tag: dev + repository: localhost/redpanda-operator + """ + And cluster "operator-upgrade" is available + And service "operator-upgrade" should have field managers: + """ + cluster.redpanda.com/operator + """ + And service "operator-upgrade" should not have field managers: + """ + *kube.Ctl + """ + Then I helm upgrade "redpanda-operator" "redpanda/operator" --version v25.3.1 with values: + """ + crds: + enabled: true + """ + And cluster "operator-upgrade" should be stable with 1 nodes + And service "operator-upgrade" should have field managers: + """ + cluster.redpanda.com/operator + *kube.Ctl + """ + And I apply Kubernetes manifest: + """ + --- + apiVersion: cluster.redpanda.com/v1alpha2 + kind: Redpanda + metadata: + name: operator-upgrade + spec: + clusterSpec: + image: + repository: redpandadata/redpanda + tag: v25.2.11 + listeners: + kafka: + port: 19093 + console: + enabled: false + statefulset: + replicas: 1 + sideCars: + image: + tag: dev + repository: localhost/redpanda-operator + """ + And cluster "operator-upgrade" should have sync error: + """ + Service "operator-upgrade" is invalid: spec.ports[3].name: Duplicate value: "kafka" + """ + Then I helm upgrade "redpanda-operator" "../operator/chart" with values: + """ + image: + tag: dev + repository: localhost/redpanda-operator + crds: + enabled: true + """ + And service "operator-upgrade" should have field managers: + """ + cluster.redpanda.com/operator + """ + And service "operator-upgrade" should not have field managers: + """ + *kube.Ctl + """ + And cluster "operator-upgrade" should be stable with 1 nodes diff --git a/acceptance/go.mod b/acceptance/go.mod index dfe3203bc..f8b67882b 100644 --- a/acceptance/go.mod +++ b/acceptance/go.mod @@ -5,8 +5,14 @@ go 1.24.3 require ( github.com/cockroachdb/errors v1.11.3 github.com/cucumber/godog v0.14.1 +<<<<<<< HEAD github.com/prometheus/common v0.64.0 github.com/redpanda-data/common-go/rpadmin v0.1.14 +======= + github.com/prometheus/common v0.66.1 + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d + github.com/redpanda-data/common-go/rpadmin v0.2.0 +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda-operator/harpoon v0.0.0-00010101000000-000000000000 github.com/redpanda-data/redpanda-operator/operator v0.0.0-20250528175436-e8cca0053dc6 github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250528175436-e8cca0053dc6 @@ -49,7 +55,12 @@ require ( github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/sprig/v3 v3.3.0 // indirect github.com/Masterminds/squirrel v1.5.4 // indirect +<<<<<<< HEAD github.com/antlr4-go/antlr/v4 v4.13.0 // indirect +======= + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect github.com/aws/aws-sdk-go-v2 v1.32.3 // indirect github.com/aws/aws-sdk-go-v2/config v1.28.1 // indirect @@ -82,6 +93,8 @@ require ( github.com/containerd/errdefs v1.0.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cucumber/gherkin/go/v26 v26.2.0 // indirect github.com/cucumber/messages/go/v21 v21.0.1 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect @@ -128,7 +141,12 @@ require ( github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect github.com/gosuri/uitable v0.0.4 // indirect github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 // indirect +======= + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-immutable-radix v1.3.1 // indirect github.com/hashicorp/go-memdb v1.3.4 // indirect @@ -227,7 +245,15 @@ require ( github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect github.com/x448/float16 v0.8.4 // indirect github.com/xlab/treeprint v1.2.0 // indirect +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 // indirect +======= + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.etcd.io/raft/v3 v3.6.0 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/collector/pdata v1.32.0 // indirect go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 // indirect go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 // indirect @@ -270,6 +296,7 @@ require ( google.golang.org/protobuf v1.36.6 // indirect gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect helm.sh/helm/v3 v3.18.5 // indirect @@ -278,9 +305,15 @@ require ( k8s.io/cli-runtime v0.33.3 // indirect k8s.io/component-base v0.33.3 // indirect k8s.io/klog/v2 v2.130.1 // indirect +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect +======= + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 // indirect oras.land/oras-go/v2 v2.6.0 // indirect + sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect sigs.k8s.io/gateway-api v1.1.0 // indirect sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/kustomize/api v0.19.0 // indirect diff --git a/acceptance/go.sum b/acceptance/go.sum index 9f9edc078..f987380e9 100644 --- a/acceptance/go.sum +++ b/acceptance/go.sum @@ -81,6 +81,8 @@ github.com/Masterminds/squirrel v1.5.4 h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8 github.com/Masterminds/squirrel v1.5.4/go.mod h1:NNaOrjSoIDfDA40n7sr2tPNZRfjzjA400rg+riTZj10= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2 h1:+vx7roKuyA63nhn5WAunQHLTznkw5W8b1Xc0dNjp83s= github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2/go.mod h1:HBCaDeC1lPdgDeDbhX8XFpy1jqjK0IBG8W5K+xYqA0w= github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc= @@ -185,8 +187,13 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +<<<<<<< HEAD github.com/coreos/go-semver v0.3.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk= github.com/coreos/go-systemd/v22 v22.3.2/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= +======= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= @@ -232,9 +239,16 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk= github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= @@ -398,12 +412,24 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY= github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= +<<<<<<< HEAD github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3/go.mod h1:ndYquD05frm2vACXE1nsccT4oJzjhw2arTS2cpUD1PI= github.com/hashicorp/consul/api v1.13.0/go.mod h1:ZlVrynguJKcYr54zGaDbaL3fOvKC9m72FhPvA8T35KQ= github.com/hashicorp/consul/sdk v0.8.0/go.mod h1:GBvyrGALthsZObzUGsfgHZQDXjg4lOjagTIwIR1vPms= +======= +github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= @@ -487,8 +513,13 @@ github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHW github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= github.com/jmoiron/sqlx v1.4.0 h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o= github.com/jmoiron/sqlx v1.4.0/go.mod h1:ZrZ7UsYB/weZdl2Bxg6jCRO9c3YHl8r3ahlKmRT4JLY= +<<<<<<< HEAD github.com/joho/godotenv v1.3.0 h1:Zjp+RcGpHhGlrMbJzXTrZZPrWj+1vfm90La1wgB6Bhc= github.com/joho/godotenv v1.3.0/go.mod h1:7hK45KPybAkOC6peb+G5yklZfMxEjkZhHbwpqxOKXbg= +======= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/jpillora/backoff v1.0.0/go.mod h1:J/6gKK9jxlEcS3zixgDgUAsiuZ7yrSoa/FX5e0EB2j4= @@ -718,6 +749,7 @@ github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ= github.com/redis/go-redis/v9 v9.7.3 h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM= github.com/redis/go-redis/v9 v9.7.3/go.mod h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA= +<<<<<<< HEAD github.com/redpanda-data/common-go/net v0.1.0 h1:JnJioRJuL961r1QXiJQ1tW9+yEaJfu8FpXnUmvQbwNM= github.com/redpanda-data/common-go/net v0.1.0/go.mod h1:iOdNkjxM7a1T8F3cYHTaKIPFCHzzp/ia6TN+Z+7Tt5w= github.com/redpanda-data/common-go/rpadmin v0.1.14 h1:G/rlh9cHsGhTsNpkwrISdpGA8fPZ7ul57rzxbPiJhs0= @@ -736,6 +768,24 @@ github.com/redpanda-data/redpanda-operator/charts/redpanda/v5 v5.10.5 h1:eEaymDE github.com/redpanda-data/redpanda-operator/charts/redpanda/v5 v5.10.5/go.mod h1:D8MfzGr+oPWOUNnDEezKSJyHRKvDpGb6NZS0bJdQnds= github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 h1:IV2Ic66JDKPtCnNU4Kn1naJlzZmhl0izRj17qgTCo20= github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0/go.mod h1:usCpPzzzhgtPrRTiUQOzFqGmukce8U0SrzEeX2ONDFE= +======= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 h1:wWHiS4LNYzl5HkUPG6dpGPPvFW3ze7ZnraYvyqZ/+8s= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:V3OBV2kcF/BDDytUZuKvIygbaXoGPT5VO3KmMAz+mBM= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7 h1:MXLdjFdFjOtyuUR4TdVVsqFP8xnru2YDwzH9bJTUr1M= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7/go.mod h1:UJIi/yUxGOBYXUrfUsOkxfYxcb/ll7mZrwae/i+U2kc= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1 h1:fLBU7IJZq8PR88AkEdI5G+yyBsftionGapvAOMPW9hg= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:LzztzYWpD+e+A6hV6+eQhYY60zHQR7ePxhLgyMmRn/Q= +github.com/redpanda-data/common-go/rp-controller-utils v0.0.0-20260109170727-1dd9f5d22ee1 h1:pGPp5rJjnFM2z3JhuHSq099tltYjSf7bZT44zWQfovY= +github.com/redpanda-data/common-go/rp-controller-utils v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:y+TN+dzE/I/CnBIQesZ51SlixR3shI6QNhdZ55E0Yu8= +github.com/redpanda-data/common-go/rpadmin v0.2.0 h1:s2MyyY+yq7B17mLjjW17RO81wFlzo856K9IuBpsmvv0= +github.com/redpanda-data/common-go/rpadmin v0.2.0/go.mod h1:qmu76v7RRKgEXLS3UXxZ8KDpObtSNq6RinOIejJNWzw= +github.com/redpanda-data/common-go/secrets v0.1.4 h1:CGp3KolGnjcJvIafTwf7Hlj5ztLOJCjgkegRu7IAkSw= +github.com/redpanda-data/common-go/secrets v0.1.4/go.mod h1:WjUU/5saSXwItZx6veFOGbQZUgPQz4MQ65z22y0Ky84= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 h1:kfhe8NbuBsXmBF68CnDaA0dDTWICNxwrC3rsO0h3WIg= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186/go.mod h1:a73cXlHClCE0iUOjSOKdaGAPcnwYDv+2WaT9NeLZvKc= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6 h1:SbcvWTYFEbH5+NQOl1To5jppEa8RCK1HAkRNfhdUGLg= github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6/go.mod h1:/8XZuwUVFOGUkn31kglW28Xie5TrM7COtzRMA3GixaA= github.com/rhnvrm/simples3 v0.6.1/go.mod h1:Y+3vYm2V7Y4VijFoJHHTrja6OgPrJ2cBti8dPGkC3sA= @@ -775,6 +825,8 @@ github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6Mwd github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/spf13/afero v1.12.0 h1:UcOPyRBYczmFn6yvphxkn9ZEOY65cpwGKb5mL36mrqs= github.com/spf13/afero v1.12.0/go.mod h1:ZTlWwG4/ahT8W7T0WQ5uYmjI9duaLQGy3Q2OAl4sk/4= github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= @@ -821,10 +873,19 @@ github.com/tidwall/match v1.1.1/go.mod h1:eRSPERbgtNPcGhD8UCthc6PmLEQXEWd3PRB5JT github.com/tidwall/pretty v1.2.0/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= github.com/tidwall/pretty v1.2.1 h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4= github.com/tidwall/pretty v1.2.1/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= github.com/tklauser/numcpus v0.9.0/go.mod h1:SN6Nq1O3VychhC1npsWostA+oW+VOQTxZrS604NSRyI= +======= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/twmb/franz-go v1.7.0/go.mod h1:PMze0jNfNghhih2XHbkmTFykbMF5sJqmNJB31DOOzro= github.com/twmb/franz-go v1.19.4 h1:0ktflzm5YU7+YYdie8RQWFcU9uDJ03xLefplO1iMwO4= github.com/twmb/franz-go v1.19.4/go.mod h1:4kFJ5tmbbl7asgwAGVuyG1ZMx0NNpYk7EqflvWfPCpM= @@ -845,6 +906,8 @@ github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/ github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= @@ -853,11 +916,30 @@ github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.etcd.io/etcd/api/v3 v3.5.4/go.mod h1:5GB2vv4A4AOn3yk7MftYGHkUfGtDHnEraIjym4dYz5A= go.etcd.io/etcd/client/pkg/v3 v3.5.4/go.mod h1:IJHfcCEKxYu1Os13ZdwCwIUTUVGYTSAM3YSwc9/Ac1g= go.etcd.io/etcd/client/v3 v3.5.4/go.mod h1:ZaRkVgBZC+L+dLCjTcF1hRXpgZXQPOvnA/Ak/gq3kiY= go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/collector/pdata v1.32.0 h1:hBzlJV1rujr1UdD2CBy2gmaIKtC15ysg/z+x8F3McQA= go.opentelemetry.io/collector/pdata v1.32.0/go.mod h1:m41io9nWpy7aCm/uD1L9QcKiZwOP0ldj83JEA34dmlk= go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 h1:RyrtJzu5MAmIcbRrwg75b+w3RlZCP0vJByDVzcpAe3M= @@ -1117,7 +1199,12 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +<<<<<<< HEAD gopkg.in/square/go-jose.v2 v2.3.1/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI= +======= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= @@ -1153,8 +1240,15 @@ k8s.io/component-base v0.33.3 h1:mlAuyJqyPlKZM7FyaoM/LcunZaaY353RXiOd2+B5tGA= k8s.io/component-base v0.33.3/go.mod h1:ktBVsBzkI3imDuxYXmVxZ2zxJnYTZ4HAsVj9iF09qp4= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUyGcf03XZEP0ZIKgKj35LS4= k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8= +======= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 h1:r/phHvH1iU7gO/l7tTjQk2K01ER7/OAJi8uFHHyWSac= k8s.io/kubectl v0.33.3/go.mod h1:euj2bG56L6kUGOE/ckZbCoudPwuj4Kud7BR0GzyNiT0= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg= diff --git a/acceptance/steps/register.go b/acceptance/steps/register.go index bce812142..85e30ed05 100644 --- a/acceptance/steps/register.go +++ b/acceptance/steps/register.go @@ -92,8 +92,25 @@ func init() { framework.RegisterStep(`I stop the Node running Pod "([^"]+)"`, shutdownNodeOfPod) framework.RegisterStep(`^cluster "([^"]*)" has only (\d+) remaining nodes$`, checkClusterNodeCount) +<<<<<<< HEAD // User CRDs with Redpanda 25.2 scenario steps framework.RegisterStep(`^I create a sasl cluster named "([^"]*)"$`, iCreateSASLCluster) framework.RegisterStep(`^I upgrade to "([^"]*)" cluster to 25.2.1$`, iUpgradeCluster) framework.RegisterStep(`^I should be able to modify CRD-based users for cluster "([^"]*)":$`, iUpdateCRDbasedUsers) +======= + // Operator upgrade scenario steps + framework.RegisterStep(`^I install local CRDs from "([^"]*)"`, iInstallLocalCRDs) + + // Console scenario steps + framework.RegisterStep(`^Console "([^"]+)" will be healthy`, consoleIsHealthy) + framework.RegisterStep(`^the migrated console cluster "([^"]+)" should have (\d+) warning(s)?$`, consoleHasWarnings) + + // Regression steps + framework.RegisterStep(`^service "([^"]*)" should have field managers:$`, checkResourceFieldManagers) + framework.RegisterStep(`^service "([^"]*)" should not have field managers:$`, checkResourceNoFieldManagers) + framework.RegisterStep(`^cluster "([^"]*)" should have sync error:$`, checkClusterHasSyncError) + + // Debug steps + framework.RegisterStep(`^I become debuggable$`, sleepALongTime) +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) } diff --git a/acceptance/steps/regression.go b/acceptance/steps/regression.go new file mode 100644 index 000000000..5b30c893d --- /dev/null +++ b/acceptance/steps/regression.go @@ -0,0 +1,109 @@ +// Copyright 2026 Redpanda Data, Inc. +// +// Use of this software is governed by the Business Source License +// included in the file licenses/BSL.md +// +// As of the Change Date specified in that file, in accordance with +// the Business Source License, use of this software will be governed +// by the Apache License, Version 2.0 + +package steps + +import ( + "context" + "fmt" + "slices" + "strings" + "time" + + "github.com/cucumber/godog" + "github.com/stretchr/testify/require" + corev1 "k8s.io/api/core/v1" + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" + + framework "github.com/redpanda-data/redpanda-operator/harpoon" + redpandav1alpha2 "github.com/redpanda-data/redpanda-operator/operator/api/redpanda/v1alpha2" +) + +func checkClusterHasSyncError(ctx context.Context, t framework.TestingT, clusterName string, errdoc *godog.DocString) { + errorString := strings.TrimSpace(errdoc.Content) + + var cluster redpandav1alpha2.Redpanda + + key := t.ResourceKey(clusterName) + + t.Logf("Checking cluster %q has sync error", clusterName) + require.Eventually(t, func() bool { + require.NoError(t, t.Get(ctx, key, &cluster)) + hasCondition := t.HasCondition(metav1.Condition{ + Type: "ResourcesSynced", + Status: metav1.ConditionFalse, + Reason: "Error", + }, cluster.Status.Conditions) + + t.Logf(`Checking cluster resource conditions contains an errored "ResourcesSynced"? %v`, hasCondition) + if !hasCondition { + return false + } + + for _, condition := range cluster.Status.Conditions { + if condition.Type == "ResourcesSynced" && condition.Status == metav1.ConditionFalse && condition.Reason == "Error" { + t.Logf("Found error message: %q", condition.Message) + return strings.Contains(condition.Message, errorString) + } + } + + return false + }, 5*time.Minute, 5*time.Second, "%s", delayLog(func() string { + return fmt.Sprintf(`Cluster %q never contained an error on the condition reason "ResourcesSynced" with a matching error string: %q, final Conditions: %+v`, key.String(), errorString, cluster.Status.Conditions) + })) +} + +func checkResourceNoFieldManagers(ctx context.Context, t framework.TestingT, clusterName string, list *godog.DocString) { + fieldManagerCheck(ctx, t, false, clusterName, list.Content) +} + +func checkResourceFieldManagers(ctx context.Context, t framework.TestingT, clusterName string, list *godog.DocString) { + fieldManagerCheck(ctx, t, true, clusterName, list.Content) +} + +func fieldManagerCheck(ctx context.Context, t framework.TestingT, presence bool, clusterName, managerList string) { + managers := []string{} + for _, line := range strings.Split(strings.TrimSpace(managerList), "\n") { + if manager := strings.TrimSpace(line); manager != "" { + managers = append(managers, manager) + } + } + + var cluster corev1.Service + + key := t.ResourceKey(clusterName) + + t.Logf("Checking resource %q field manager", clusterName) + require.Eventually(t, func() bool { + require.NoError(t, t.Get(ctx, key, &cluster)) + + fieldManagers := cluster.GetManagedFields() + for _, manager := range managers { + if !slices.ContainsFunc(fieldManagers, func(entry metav1.ManagedFieldsEntry) bool { + return entry.Manager == manager + }) { + t.Logf(`Resource %q does not contain the field manager %q`, key.String(), manager) + // negation because if we are checking for presence, then we want to return that the condition + // is not met + return !presence + } + t.Logf(`Found field manager %q in resource %q`, manager, key.String()) + } + return presence + }, 5*time.Minute, 5*time.Second, "%s", delayLog(func() string { + finalManagers := []string{} + for _, entry := range cluster.GetManagedFields() { + finalManagers = append(finalManagers, entry.Manager) + } + if presence { + return fmt.Sprintf(`Resource %q never contained all of the field managers: %+v, was: %+v`, key.String(), managers, finalManagers) + } + return fmt.Sprintf(`Resource %q never lacked all of the field managers: %+v, was: %+v`, key.String(), managers, finalManagers) + })) +} diff --git a/charts/connectors/go.mod b/charts/connectors/go.mod index 03e71a0c1..dfc5c0cb5 100644 --- a/charts/connectors/go.mod +++ b/charts/connectors/go.mod @@ -5,7 +5,12 @@ go 1.24.3 require ( github.com/google/gofuzz v1.2.0 github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.76.2 +<<<<<<< HEAD github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 +======= + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d + github.com/redpanda-data/redpanda-operator/gotohelm v0.0.0-20250327164623-c3883a149a17 +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 github.com/stretchr/testify v1.10.0 golang.org/x/tools v0.34.0 @@ -17,6 +22,7 @@ require ( ) require ( + cel.dev/expr v0.24.0 // indirect dario.cat/mergo v1.0.2 // indirect github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 // indirect github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect @@ -26,10 +32,15 @@ require ( github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/sprig/v3 v3.3.0 // indirect github.com/Masterminds/squirrel v1.5.4 // indirect + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect github.com/bahlo/generic-list-go v0.2.0 // indirect + github.com/beorn7/perks v1.0.1 // indirect github.com/blang/semver/v4 v4.0.0 // indirect github.com/buger/jsonparser v1.1.1 // indirect + github.com/cenkalti/backoff/v5 v5.0.3 // indirect + github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/chai2010/gettext-go v1.0.2 // indirect github.com/cockroachdb/errors v1.11.3 // indirect github.com/cockroachdb/logtags v0.0.0-20230118201751-21c54148d20b // indirect @@ -38,6 +49,8 @@ require ( github.com/containerd/errdefs v1.0.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/emicklei/go-restful/v3 v3.12.2 // indirect @@ -45,6 +58,7 @@ require ( github.com/evanphx/json-patch/v5 v5.9.11 // indirect github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect github.com/fatih/color v1.18.0 // indirect +<<<<<<< HEAD github.com/fsnotify/fsnotify v1.9.0 // indirect github.com/fxamacker/cbor/v2 v2.8.0 // indirect github.com/getsentry/sentry-go v0.27.0 // indirect @@ -52,11 +66,23 @@ require ( github.com/go-gorp/gorp/v3 v3.1.0 // indirect github.com/go-logr/logr v1.4.2 // indirect github.com/go-openapi/jsonpointer v0.21.1 // indirect +======= + github.com/felixge/httpsnoop v1.0.4 // indirect + github.com/fsnotify/fsnotify v1.9.0 // indirect + github.com/fxamacker/cbor/v2 v2.9.0 // indirect + github.com/getsentry/sentry-go v0.27.0 // indirect + github.com/go-errors/errors v1.5.1 // indirect + github.com/go-gorp/gorp/v3 v3.1.0 // indirect + github.com/go-logr/logr v1.4.3 // indirect + github.com/go-logr/stdr v1.2.2 // indirect + github.com/go-openapi/jsonpointer v0.22.3 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/go-openapi/jsonreference v0.21.0 // indirect github.com/go-openapi/swag v0.23.1 // indirect github.com/go-viper/mapstructure/v2 v2.4.0 // indirect github.com/gobwas/glob v0.2.3 // indirect github.com/gogo/protobuf v1.3.2 // indirect + github.com/golang/protobuf v1.5.4 // indirect github.com/gonvenience/bunt v1.3.5 // indirect github.com/gonvenience/neat v1.3.13 // indirect github.com/gonvenience/term v1.0.2 // indirect @@ -64,13 +90,20 @@ require ( github.com/gonvenience/wrap v1.2.0 // indirect github.com/gonvenience/ytbx v1.4.4 // indirect github.com/google/btree v1.1.3 // indirect +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 // indirect +======= + github.com/google/cel-go v0.26.1 // indirect + github.com/google/gnostic-models v0.7.0 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/go-cmp v0.7.0 // indirect github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect github.com/google/uuid v1.6.0 // indirect github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect github.com/gosuri/uitable v0.0.4 // indirect github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/homeport/dyff v1.7.1 // indirect @@ -84,6 +117,7 @@ require ( github.com/klauspost/compress v1.18.0 // indirect github.com/kr/pretty v0.3.1 // indirect github.com/kr/text v0.2.0 // indirect + github.com/kylelemons/godebug v1.1.0 // indirect github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect github.com/lib/pq v1.10.9 // indirect @@ -112,9 +146,17 @@ require ( github.com/peterbourgon/diskv v2.0.1+incompatible // indirect github.com/pkg/errors v0.9.1 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect +<<<<<<< HEAD github.com/prometheus/client_model v0.6.2 // indirect github.com/prometheus/common v0.64.0 // indirect github.com/prometheus/procfs v0.16.1 // indirect +======= + github.com/prometheus/client_golang v1.23.2 // indirect + github.com/prometheus/client_model v0.6.2 // indirect + github.com/prometheus/common v0.66.1 // indirect + github.com/prometheus/procfs v0.17.0 // indirect + github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/rivo/uniseg v0.4.7 // indirect github.com/rogpeppe/go-internal v1.13.1 // indirect github.com/rubenv/sql-migrate v1.8.0 // indirect @@ -127,13 +169,18 @@ require ( github.com/spf13/cast v1.7.0 // indirect github.com/spf13/cobra v1.9.1 // indirect github.com/spf13/pflag v1.0.7 // indirect +<<<<<<< HEAD github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0 // indirect +======= + github.com/stoewer/go-strcase v1.3.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/texttheater/golang-levenshtein v1.0.1 // indirect github.com/tklauser/numcpus v0.9.0 // indirect github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 // indirect github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect github.com/x448/float16 v0.8.4 // indirect github.com/xlab/treeprint v1.2.0 // indirect +<<<<<<< HEAD go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 // indirect go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect go.opentelemetry.io/otel v1.36.0 // indirect @@ -163,8 +210,43 @@ require ( google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237 // indirect google.golang.org/grpc v1.72.1 // indirect google.golang.org/protobuf v1.36.6 // indirect +======= + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect + go.opentelemetry.io/otel v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect + go.opentelemetry.io/otel/metric v1.38.0 // indirect + go.opentelemetry.io/otel/sdk v1.38.0 // indirect + go.opentelemetry.io/otel/trace v1.38.0 // indirect + go.opentelemetry.io/proto/otlp v1.7.1 // indirect + go.uber.org/multierr v1.11.0 // indirect + go.uber.org/zap v1.27.1 // indirect + go.yaml.in/yaml/v2 v2.4.3 // indirect + go.yaml.in/yaml/v3 v3.0.4 // indirect + golang.org/x/crypto v0.45.0 // indirect + golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6 // indirect + golang.org/x/mod v0.30.0 // indirect + golang.org/x/net v0.47.0 // indirect + golang.org/x/oauth2 v0.31.0 // indirect + golang.org/x/sync v0.18.0 // indirect + golang.org/x/sys v0.38.0 // indirect + golang.org/x/term v0.37.0 // indirect + golang.org/x/text v0.31.0 // indirect + golang.org/x/time v0.13.0 // indirect + gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/grpc v1.75.1 // indirect + google.golang.org/protobuf v1.36.11 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect helm.sh/helm/v3 v3.18.5 // indirect @@ -173,10 +255,19 @@ require ( k8s.io/cli-runtime v0.33.3 // indirect k8s.io/component-base v0.33.3 // indirect k8s.io/klog/v2 v2.130.1 // indirect +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect k8s.io/kubectl v0.33.3 // indirect oras.land/oras-go/v2 v2.6.0 // indirect sigs.k8s.io/controller-runtime v0.20.4 // indirect +======= + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect + k8s.io/kubectl v0.33.3 // indirect + oras.land/oras-go/v2 v2.6.0 // indirect + sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect + sigs.k8s.io/controller-runtime v0.22.4 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/kustomize/api v0.19.0 // indirect sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect diff --git a/charts/connectors/go.sum b/charts/connectors/go.sum index c70e48544..fe355759d 100644 --- a/charts/connectors/go.sum +++ b/charts/connectors/go.sum @@ -1,3 +1,5 @@ +cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY= +cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw= dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8= dario.cat/mergo v1.0.2/go.mod h1:E/hbnu0NxMFBjpMIE34DRGLWqDy0g5FuKDhCb31ngxA= filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= @@ -22,6 +24,10 @@ github.com/Masterminds/squirrel v1.5.4 h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8 github.com/Masterminds/squirrel v1.5.4/go.mod h1:NNaOrjSoIDfDA40n7sr2tPNZRfjzjA400rg+riTZj10= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= +github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ= +github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so= @@ -60,6 +66,8 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= @@ -94,8 +102,15 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/evanphx/json-patch v5.9.11+incompatible h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8= @@ -122,8 +137,14 @@ github.com/go-errors/errors v1.5.1 h1:ZwEMSLRCapFLflTpT7NKaAc7ukJ8ZPEjzlxt8rPN8b github.com/go-errors/errors v1.5.1/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og= github.com/go-gorp/gorp/v3 v3.1.0 h1:ItKF/Vbuj31dmV4jxA1qblpSwkl9g1typ24xoe70IGs= github.com/go-gorp/gorp/v3 v3.1.0/go.mod h1:dLEjIyyRNiXvNZ8PSmzpt1GsWAUK8kjVhEpjH8TixEw= +<<<<<<< HEAD github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY= github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= +======= +github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= +github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI= +github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= github.com/go-logr/zapr v1.3.0 h1:XGdV8XW8zdwFiwOA2Dryh1gj2KRQyOOoNmBy4EplIcQ= @@ -145,8 +166,11 @@ github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9L github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM= github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y= github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8= +github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= +github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo= +github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= github.com/gonvenience/bunt v1.3.5 h1:wSQquifvwEWtzn27k1ngLfeLaStyt0k1b/K6TrlCNAs= @@ -163,9 +187,16 @@ github.com/gonvenience/ytbx v1.4.4 h1:jQopwyaLsVGuwdxSiN4WkXjsEaFNPJ3V4lUj7eyEpz github.com/gonvenience/ytbx v1.4.4/go.mod h1:w37+MKCPcCMY/jpPNmEklD4xKqrOAVBO6kIWW2+uI6M= github.com/google/btree v1.1.3 h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg= github.com/google/btree v1.1.3/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4= +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 h1:MU/8wDLif2qCXZmzncUQ/BOfxWfthHi63KqpoNbWqVw= github.com/google/gnostic-models v0.6.9/go.mod h1:CiWsm0s6BSQd1hRn8/QmxqB6BesYcbSZxsz9b0KuDBw= github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= +======= +github.com/google/cel-go v0.26.1 h1:iPbVVEdkhTX++hpe3lzSk7D3G3QSYqLGoHOcEio+UXQ= +github.com/google/cel-go v0.26.1/go.mod h1:A9O8OU9rdvrK5MQyrqfIxo1a0u4g3sF8KB6PUIaryMM= +github.com/google/gnostic-models v0.7.0 h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo= +github.com/google/gnostic-models v0.7.0/go.mod h1:whL5G0m6dmc5cPxKc5bdKdEN3UjI7OUGxBlw57miDrQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= @@ -187,9 +218,21 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY= github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3/go.mod h1:ndYquD05frm2vACXE1nsccT4oJzjhw2arTS2cpUD1PI= +======= +github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= @@ -211,6 +254,8 @@ github.com/invopop/jsonschema v0.12.0 h1:6ovsNSuvn9wEQVOyc72aycBMVQFKz7cPdMJn10C github.com/invopop/jsonschema v0.12.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0= github.com/jmoiron/sqlx v1.4.0 h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o= github.com/jmoiron/sqlx v1.4.0/go.mod h1:ZrZ7UsYB/weZdl2Bxg6jCRO9c3YHl8r3ahlKmRT4JLY= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= @@ -226,6 +271,8 @@ github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= +github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc= +github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw= github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 h1:SOEGU9fKiNWd/HOJuq6+3iTQz8KNCLtVX6idSoTLdUw= github.com/lann/builder v0.0.0-20180802200727-47ae307949d0/go.mod h1:dXGbAdH5GtBTC4WfIxhKZfyBF/HBFgRZSWwZ9g/He9o= github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 h1:P6pPBnrTSX3DEVR4fDembhRWSsG5rVo6hYhAB/ADZrk= @@ -339,10 +386,17 @@ github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ= github.com/redis/go-redis/v9 v9.7.3 h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM= github.com/redis/go-redis/v9 v9.7.3/go.mod h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA= +<<<<<<< HEAD github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 h1:IV2Ic66JDKPtCnNU4Kn1naJlzZmhl0izRj17qgTCo20= github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0/go.mod h1:usCpPzzzhgtPrRTiUQOzFqGmukce8U0SrzEeX2ONDFE= github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 h1:rmgno9TNZCX2c81zJGrv2CZjiPURWevNeQ7Lo8fVszk= github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50/go.mod h1:b/GBKIBr3nLE+LAtb8P4b2KrOwL3SGXAF4l65UcF71c= +======= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 h1:wWHiS4LNYzl5HkUPG6dpGPPvFW3ze7ZnraYvyqZ/+8s= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:V3OBV2kcF/BDDytUZuKvIygbaXoGPT5VO3KmMAz+mBM= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ= github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88= @@ -365,6 +419,8 @@ github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= github.com/spf13/cast v1.7.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo= github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo= @@ -372,7 +428,11 @@ github.com/spf13/cobra v1.9.1/go.mod h1:nDyEzZ8ogv936Cinf6g1RU9MRY64Ir93oCnqb9wx github.com/spf13/pflag v1.0.6/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/pflag v1.0.7 h1:vN6T9TfwStFPFM5XzjsvmzZkLuaLX+HS+0SeFLRgU6M= github.com/spf13/pflag v1.0.7/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= +github.com/stoewer/go-strcase v1.3.1 h1:iS0MdW+kVTxgMoE1LAZyMiYJFKlOzLooE4MxjirtkAs= +github.com/stoewer/go-strcase v1.3.1/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= +github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= +github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY= github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA= github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs= @@ -380,40 +440,87 @@ github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UV github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +<<<<<<< HEAD github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA= github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= +======= +github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= +github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= +github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U= +github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/testcontainers/testcontainers-go v0.39.0 h1:uCUJ5tA+fcxbFAB0uP3pIK3EJ2IjjDUHFSZ1H1UxAts= github.com/testcontainers/testcontainers-go v0.39.0/go.mod h1:qmHpkG7H5uPf/EvOORKvS6EuDkBUPE3zpVGaH9NL7f8= github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0 h1:oZfauL/CPwI+HtFY7twNOmTj0r2laltqQ5o5EeplSOQ= github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0/go.mod h1:mlHF/P+wcE0+qeEsVYfifeXOOkAFhSmtpBJyDvbzhAc= github.com/texttheater/golang-levenshtein v1.0.1 h1:+cRNoVrfiwufQPhoMzB6N0Yf/Mqajr6t1lOv8GyGE2U= github.com/texttheater/golang-levenshtein v1.0.1/go.mod h1:PYAKrbF5sAiq9wd+H82hs7gNaen0CplQ9uvm6+enD/8= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= github.com/tklauser/numcpus v0.9.0/go.mod h1:SN6Nq1O3VychhC1npsWostA+oW+VOQTxZrS604NSRyI= +======= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 h1:JwtAtbp7r/7QSyGz8mKUbYJBg2+6Cd7OjM8o/GNOcVo= github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74/go.mod h1:RmMWU37GKR2s6pgrIEB4ixgpVCt/cf7dnJv3fuH1J1c= github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/fJgbpc= github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 h1:RyrtJzu5MAmIcbRrwg75b+w3RlZCP0vJByDVzcpAe3M= go.opentelemetry.io/contrib/bridges/prometheus v0.61.0/go.mod h1:tirr4p9NXbzjlbruiRGp53IzlYrDk5CO2fdHj0sSSaY= go.opentelemetry.io/contrib/exporters/autoexport v0.57.0 h1:jmTVJ86dP60C01K3slFQa2NQ/Aoi7zA+wy7vMOKD9H4= go.opentelemetry.io/contrib/exporters/autoexport v0.57.0/go.mod h1:EJBheUMttD/lABFyLXhce47Wr6DPWYReCzaZiXadH7g= +<<<<<<< HEAD go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 h1:CV7UdSGJt/Ao6Gp4CXckLxVRRsRgDHoI8XjbL3PDl8s= go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0/go.mod h1:FRmFuRJfag1IZ2dPkHnEoSFVgTVPUd2qf5Vi69hLb8I= go.opentelemetry.io/otel v1.36.0 h1:UumtzIklRBY6cI/lllNZlALOF5nNIzJVb16APdvgTXg= go.opentelemetry.io/otel v1.36.0/go.mod h1:/TcFMXYjyRNh8khOAO9ybYkqaDBb/70aVwkNML4pP8E= +======= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 h1:q4XOmH/0opmeuJtPsbFNivyl7bCt7yRBbeEm2sC/XtQ= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0/go.mod h1:snMWehoOh2wsEwnvvwtDyFCxVeDAODenXHtn5vzrKjo= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0/go.mod h1:h06DGIukJOevXaj/xrNjhi/2098RZzcLTbc0jDAUbsg= +go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8= +go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.11.0 h1:HMUytBT3uGhPKYY/u/G5MR9itrlSO2SMOsSD3Tk3k7A= go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.11.0/go.mod h1:hdDXsiNLmdW/9BF2jQpnHHlhFajpWCEYfM6e5m2OAZg= go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.11.0 h1:C/Wi2F8wEmbxJ9Kuzw/nhP+Z9XaHYMkyDmXy6yR2cjw= @@ -510,6 +617,7 @@ golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8T golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +<<<<<<< HEAD google.golang.org/genproto v0.0.0-20240123012728-ef4313101c80 h1:KAeGQVN3M9nD0/bQXnr/ClcEMJ968gUXJQ9pwfSynuQ= google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237 h1:Kog3KlB4xevJlAcbbbzPfRG0+X9fdoGM+UBRKVz6Wr0= google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237/go.mod h1:ezi0AVyMKDWy5xAncvjLWH7UcLBB5n7y2fQ8MzjJcto= @@ -519,6 +627,20 @@ google.golang.org/grpc v1.72.1 h1:HR03wO6eyZ7lknl75XlxABNVLLFc2PAb6mHlYh756mA= google.golang.org/grpc v1.72.1/go.mod h1:wH5Aktxcg25y1I3w7H69nHfXdOG3UiadoBtjh3izSDM= google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY= google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY= +======= +gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0= +gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY= +gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk= +gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba h1:B14OtaXuMaCQsl2deSvNkyPKIzq3BjfxQp8d00QyWx4= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:G5IanEx8/PgI9w6CFcYQf7jMtHQhZruvfM1i3qOqk5U= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba h1:UKgtfRM7Yh93Sya0Fo8ZzhDP4qBckrrxEr2oF5UIVb8= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk= +google.golang.org/grpc v1.75.1 h1:/ODCNEuf9VghjgO3rqLcfg8fiOP0nSluljWFlDxELLI= +google.golang.org/grpc v1.75.1/go.mod h1:JtPAzKiq4v1xcAB2hydNlWI2RnF85XXcV0mhKXr2ecQ= +google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= +google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= @@ -527,6 +649,8 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= @@ -553,8 +677,15 @@ k8s.io/component-base v0.33.3 h1:mlAuyJqyPlKZM7FyaoM/LcunZaaY353RXiOd2+B5tGA= k8s.io/component-base v0.33.3/go.mod h1:ktBVsBzkI3imDuxYXmVxZ2zxJnYTZ4HAsVj9iF09qp4= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUyGcf03XZEP0ZIKgKj35LS4= k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8= +======= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 h1:r/phHvH1iU7gO/l7tTjQk2K01ER7/OAJi8uFHHyWSac= k8s.io/kubectl v0.33.3/go.mod h1:euj2bG56L6kUGOE/ckZbCoudPwuj4Kud7BR0GzyNiT0= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg= @@ -563,8 +694,17 @@ oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc= oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o= pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw= pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04= +<<<<<<< HEAD sigs.k8s.io/controller-runtime v0.20.4 h1:X3c+Odnxz+iPTRobG4tp092+CvBU9UK0t/bRf+n0DGU= sigs.k8s.io/controller-runtime v0.20.4/go.mod h1:xg2XB0K5ShQzAgsoujxuKN4LNXR2LfwwHsPj7Iaw+XY= +======= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 h1:jpcvIRr3GLoUoEKRkHKSmGjxb6lWwrBlJsXc+eUYQHM= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw= +sigs.k8s.io/controller-runtime v0.22.4 h1:GEjV7KV3TY8e+tJ2LCTxUTanW4z/FmNB7l327UfMq9A= +sigs.k8s.io/controller-runtime v0.22.4/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8= +sigs.k8s.io/gateway-api v1.1.0 h1:DsLDXCi6jR+Xz8/xd0Z1PYl2Pn0TyaFMOPPZIj4inDM= +sigs.k8s.io/gateway-api v1.1.0/go.mod h1:ZH4lHrL2sDi0FHZ9jjneb8kKnGzFWyrTya35sWUTrRs= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE= sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg= sigs.k8s.io/kustomize/api v0.19.0 h1:F+2HB2mU1MSiR9Hp1NEgoU2q9ItNOaBJl0I4Dlus5SQ= diff --git a/charts/console/go.mod b/charts/console/go.mod index 9674cefc6..e975c84db 100644 --- a/charts/console/go.mod +++ b/charts/console/go.mod @@ -4,7 +4,14 @@ go 1.24.3 require ( github.com/google/gofuzz v1.2.0 +<<<<<<< HEAD github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 +======= + github.com/itchyny/gojq v0.12.17 + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d + github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 + github.com/redpanda-data/redpanda-operator/gotohelm v1.2.1-0.20250909192010-c59ff494d04a +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 github.com/stretchr/testify v1.10.0 @@ -18,6 +25,18 @@ require ( ) require ( +<<<<<<< HEAD +======= + buf.build/gen/go/redpandadata/core/connectrpc/go v1.19.1-20251111205446-9c61b5cb371f.2 // indirect + buf.build/gen/go/redpandadata/core/protocolbuffers/go v1.36.11-20260108182238-df92733e0119.1 // indirect + cel.dev/expr v0.24.0 // indirect + cloud.google.com/go/auth v0.16.5 // indirect + cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect + cloud.google.com/go/compute/metadata v0.8.4 // indirect + cloud.google.com/go/iam v1.5.3 // indirect + cloud.google.com/go/secretmanager v1.16.0 // indirect + connectrpc.com/connect v1.19.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) dario.cat/mergo v1.0.2 // indirect github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 // indirect github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect @@ -27,10 +46,15 @@ require ( github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/sprig/v3 v3.3.0 // indirect github.com/Masterminds/squirrel v1.5.4 // indirect + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect github.com/bahlo/generic-list-go v0.2.0 // indirect + github.com/beorn7/perks v1.0.1 // indirect github.com/blang/semver/v4 v4.0.0 // indirect github.com/buger/jsonparser v1.1.1 // indirect + github.com/cenkalti/backoff/v5 v5.0.3 // indirect + github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/chai2010/gettext-go v1.0.2 // indirect github.com/cockroachdb/errors v1.11.3 // indirect github.com/cockroachdb/logtags v0.0.0-20230118201751-21c54148d20b // indirect @@ -39,6 +63,8 @@ require ( github.com/containerd/errdefs v1.0.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/emicklei/go-restful/v3 v3.12.2 // indirect @@ -58,6 +84,11 @@ require ( github.com/go-viper/mapstructure/v2 v2.4.0 // indirect github.com/gobwas/glob v0.2.3 // indirect github.com/gogo/protobuf v1.3.2 // indirect +<<<<<<< HEAD +======= + github.com/golang-jwt/jwt/v5 v5.3.0 // indirect + github.com/golang/protobuf v1.5.4 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/gonvenience/bunt v1.3.5 // indirect github.com/gonvenience/neat v1.3.13 // indirect github.com/gonvenience/term v1.0.2 // indirect @@ -65,13 +96,20 @@ require ( github.com/gonvenience/wrap v1.2.0 // indirect github.com/gonvenience/ytbx v1.4.4 // indirect github.com/google/btree v1.1.3 // indirect +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 // indirect +======= + github.com/google/cel-go v0.26.1 // indirect + github.com/google/gnostic-models v0.7.0 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/go-cmp v0.7.0 // indirect github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect github.com/google/uuid v1.6.0 // indirect github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect github.com/gosuri/uitable v0.0.4 // indirect github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/homeport/dyff v1.7.1 // indirect @@ -113,9 +151,20 @@ require ( github.com/peterbourgon/diskv v2.0.1+incompatible // indirect github.com/pkg/errors v0.9.1 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect +<<<<<<< HEAD github.com/prometheus/client_model v0.6.2 // indirect github.com/prometheus/common v0.64.0 // indirect github.com/prometheus/procfs v0.16.1 // indirect +======= + github.com/prometheus/client_golang v1.23.2 // indirect + github.com/prometheus/client_model v0.6.2 // indirect + github.com/prometheus/common v0.66.1 // indirect + github.com/prometheus/procfs v0.17.0 // indirect + github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 // indirect + github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7 // indirect + github.com/redpanda-data/common-go/rpadmin v0.2.0 // indirect + github.com/redpanda-data/common-go/secrets v0.1.4 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/rivo/uniseg v0.4.7 // indirect github.com/rogpeppe/go-internal v1.13.1 // indirect github.com/rubenv/sql-migrate v1.8.0 // indirect @@ -127,13 +176,18 @@ require ( github.com/spf13/cast v1.7.0 // indirect github.com/spf13/cobra v1.9.1 // indirect github.com/spf13/pflag v1.0.7 // indirect +<<<<<<< HEAD github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0 // indirect +======= + github.com/stoewer/go-strcase v1.3.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/texttheater/golang-levenshtein v1.0.1 // indirect github.com/tklauser/numcpus v0.9.0 // indirect github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 // indirect github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect github.com/x448/float16 v0.8.4 // indirect github.com/xlab/treeprint v1.2.0 // indirect +<<<<<<< HEAD go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 // indirect go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect go.opentelemetry.io/otel v1.36.0 // indirect @@ -163,8 +217,45 @@ require ( google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237 // indirect google.golang.org/grpc v1.72.1 // indirect google.golang.org/protobuf v1.36.6 // indirect +======= + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect + go.opentelemetry.io/otel v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect + go.opentelemetry.io/otel/metric v1.38.0 // indirect + go.opentelemetry.io/otel/sdk v1.38.0 // indirect + go.opentelemetry.io/otel/trace v1.38.0 // indirect + go.opentelemetry.io/proto/otlp v1.7.1 // indirect + go.uber.org/multierr v1.11.0 // indirect + go.uber.org/zap v1.27.1 // indirect + go.yaml.in/yaml/v2 v2.4.3 // indirect + go.yaml.in/yaml/v3 v3.0.4 // indirect + golang.org/x/crypto v0.45.0 // indirect + golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6 // indirect + golang.org/x/mod v0.30.0 // indirect + golang.org/x/net v0.47.0 // indirect + golang.org/x/oauth2 v0.31.0 // indirect + golang.org/x/sync v0.18.0 // indirect + golang.org/x/sys v0.38.0 // indirect + golang.org/x/term v0.37.0 // indirect + golang.org/x/text v0.31.0 // indirect + golang.org/x/time v0.13.0 // indirect + gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect + google.golang.org/api v0.250.0 // indirect + google.golang.org/genproto v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/grpc v1.75.1 // indirect + google.golang.org/protobuf v1.36.11 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect helm.sh/helm/v3 v3.18.5 // indirect @@ -173,9 +264,15 @@ require ( k8s.io/cli-runtime v0.33.3 // indirect k8s.io/component-base v0.33.3 // indirect k8s.io/klog/v2 v2.130.1 // indirect +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect +======= + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 // indirect oras.land/oras-go/v2 v2.6.0 // indirect + sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/kustomize/api v0.19.0 // indirect sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect diff --git a/charts/console/go.sum b/charts/console/go.sum index 38b71e928..0e49d8e00 100644 --- a/charts/console/go.sum +++ b/charts/console/go.sum @@ -1,3 +1,26 @@ +<<<<<<< HEAD +======= +buf.build/gen/go/redpandadata/core/connectrpc/go v1.19.1-20251111205446-9c61b5cb371f.2 h1:85DyJp3AZBUpMzm8Lu85mb7ugx+PYhHqhEAjcqLdSAY= +buf.build/gen/go/redpandadata/core/connectrpc/go v1.19.1-20251111205446-9c61b5cb371f.2/go.mod h1:YPSni+Nscq5UQI8MCerb8+KW4oMyEjk/scg/we5fB30= +buf.build/gen/go/redpandadata/core/protocolbuffers/go v1.36.11-20260108182238-df92733e0119.1 h1:Hpbojb8tNZa89EzngrN24YIC1cAqV6cmHfRlbvOoOGo= +buf.build/gen/go/redpandadata/core/protocolbuffers/go v1.36.11-20260108182238-df92733e0119.1/go.mod h1:5sjUVquVwNxt3Q/EhE/UW0BBJ5sgPiaVTw8//wxRULI= +cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY= +cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw= +cloud.google.com/go v0.121.6 h1:waZiuajrI28iAf40cWgycWNgaXPO06dupuS+sgibK6c= +cloud.google.com/go v0.121.6/go.mod h1:coChdst4Ea5vUpiALcYKXEpR1S9ZgXbhEzzMcMR66vI= +cloud.google.com/go/auth v0.16.5 h1:mFWNQ2FEVWAliEQWpAdH80omXFokmrnbDhUS9cBywsI= +cloud.google.com/go/auth v0.16.5/go.mod h1:utzRfHMP+Vv0mpOkTRQoWD2q3BatTOoWbA7gCc2dUhQ= +cloud.google.com/go/auth/oauth2adapt v0.2.8 h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc= +cloud.google.com/go/auth/oauth2adapt v0.2.8/go.mod h1:XQ9y31RkqZCcwJWNSx2Xvric3RrU88hAYYbjDWYDL+c= +cloud.google.com/go/compute/metadata v0.8.4 h1:oXMa1VMQBVCyewMIOm3WQsnVd9FbKBtm8reqWRaXnHQ= +cloud.google.com/go/compute/metadata v0.8.4/go.mod h1:E0bWwX5wTnLPedCKqk3pJmVgCBSM6qQI1yTBdEb3C10= +cloud.google.com/go/iam v1.5.3 h1:+vMINPiDF2ognBJ97ABAYYwRgsaqxPbQDlMnbHMjolc= +cloud.google.com/go/iam v1.5.3/go.mod h1:MR3v9oLkZCTlaqljW6Eb2d3HGDGK5/bDv93jhfISFvU= +cloud.google.com/go/secretmanager v1.16.0 h1:19QT7ZsLJ8FSP1k+4esQvuCD7npMJml6hYzilxVyT+k= +cloud.google.com/go/secretmanager v1.16.0/go.mod h1://C/e4I8D26SDTz1f3TQcddhcmiC3rMEl0S1Cakvs3Q= +connectrpc.com/connect v1.19.1 h1:R5M57z05+90EfEvCY1b7hBxDVOUl45PrtXtAV2fOC14= +connectrpc.com/connect v1.19.1/go.mod h1:tN20fjdGlewnSFeZxLKb0xwIZ6ozc3OQs2hTXy4du9w= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8= dario.cat/mergo v1.0.2/go.mod h1:E/hbnu0NxMFBjpMIE34DRGLWqDy0g5FuKDhCb31ngxA= filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= @@ -22,6 +45,10 @@ github.com/Masterminds/squirrel v1.5.4 h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8 github.com/Masterminds/squirrel v1.5.4/go.mod h1:NNaOrjSoIDfDA40n7sr2tPNZRfjzjA400rg+riTZj10= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= +github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ= +github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so= @@ -60,6 +87,8 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= @@ -94,8 +123,15 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/evanphx/json-patch v5.9.11+incompatible h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8= @@ -145,6 +181,7 @@ github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9L github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM= github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y= github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8= +github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= @@ -163,9 +200,16 @@ github.com/gonvenience/ytbx v1.4.4 h1:jQopwyaLsVGuwdxSiN4WkXjsEaFNPJ3V4lUj7eyEpz github.com/gonvenience/ytbx v1.4.4/go.mod h1:w37+MKCPcCMY/jpPNmEklD4xKqrOAVBO6kIWW2+uI6M= github.com/google/btree v1.1.3 h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg= github.com/google/btree v1.1.3/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4= +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 h1:MU/8wDLif2qCXZmzncUQ/BOfxWfthHi63KqpoNbWqVw= github.com/google/gnostic-models v0.6.9/go.mod h1:CiWsm0s6BSQd1hRn8/QmxqB6BesYcbSZxsz9b0KuDBw= github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= +======= +github.com/google/cel-go v0.26.1 h1:iPbVVEdkhTX++hpe3lzSk7D3G3QSYqLGoHOcEio+UXQ= +github.com/google/cel-go v0.26.1/go.mod h1:A9O8OU9rdvrK5MQyrqfIxo1a0u4g3sF8KB6PUIaryMM= +github.com/google/gnostic-models v0.7.0 h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo= +github.com/google/gnostic-models v0.7.0/go.mod h1:whL5G0m6dmc5cPxKc5bdKdEN3UjI7OUGxBlw57miDrQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= @@ -187,9 +231,21 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY= github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3/go.mod h1:ndYquD05frm2vACXE1nsccT4oJzjhw2arTS2cpUD1PI= +======= +github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= @@ -211,6 +267,8 @@ github.com/invopop/jsonschema v0.12.0 h1:6ovsNSuvn9wEQVOyc72aycBMVQFKz7cPdMJn10C github.com/invopop/jsonschema v0.12.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0= github.com/jmoiron/sqlx v1.4.0 h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o= github.com/jmoiron/sqlx v1.4.0/go.mod h1:ZrZ7UsYB/weZdl2Bxg6jCRO9c3YHl8r3ahlKmRT4JLY= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= @@ -337,10 +395,25 @@ github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ= github.com/redis/go-redis/v9 v9.7.3 h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM= github.com/redis/go-redis/v9 v9.7.3/go.mod h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA= +<<<<<<< HEAD github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 h1:IV2Ic66JDKPtCnNU4Kn1naJlzZmhl0izRj17qgTCo20= github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0/go.mod h1:usCpPzzzhgtPrRTiUQOzFqGmukce8U0SrzEeX2ONDFE= github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 h1:rmgno9TNZCX2c81zJGrv2CZjiPURWevNeQ7Lo8fVszk= github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50/go.mod h1:b/GBKIBr3nLE+LAtb8P4b2KrOwL3SGXAF4l65UcF71c= +======= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 h1:wWHiS4LNYzl5HkUPG6dpGPPvFW3ze7ZnraYvyqZ/+8s= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:V3OBV2kcF/BDDytUZuKvIygbaXoGPT5VO3KmMAz+mBM= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7 h1:MXLdjFdFjOtyuUR4TdVVsqFP8xnru2YDwzH9bJTUr1M= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7/go.mod h1:UJIi/yUxGOBYXUrfUsOkxfYxcb/ll7mZrwae/i+U2kc= +github.com/redpanda-data/common-go/rpadmin v0.2.0 h1:s2MyyY+yq7B17mLjjW17RO81wFlzo856K9IuBpsmvv0= +github.com/redpanda-data/common-go/rpadmin v0.2.0/go.mod h1:qmu76v7RRKgEXLS3UXxZ8KDpObtSNq6RinOIejJNWzw= +github.com/redpanda-data/common-go/secrets v0.1.4 h1:CGp3KolGnjcJvIafTwf7Hlj5ztLOJCjgkegRu7IAkSw= +github.com/redpanda-data/common-go/secrets v0.1.4/go.mod h1:WjUU/5saSXwItZx6veFOGbQZUgPQz4MQ65z22y0Ky84= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 h1:kfhe8NbuBsXmBF68CnDaA0dDTWICNxwrC3rsO0h3WIg= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186/go.mod h1:a73cXlHClCE0iUOjSOKdaGAPcnwYDv+2WaT9NeLZvKc= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ= github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88= @@ -363,6 +436,8 @@ github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= github.com/spf13/cast v1.7.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo= github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo= @@ -370,6 +445,8 @@ github.com/spf13/cobra v1.9.1/go.mod h1:nDyEzZ8ogv936Cinf6g1RU9MRY64Ir93oCnqb9wx github.com/spf13/pflag v1.0.6/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/pflag v1.0.7 h1:vN6T9TfwStFPFM5XzjsvmzZkLuaLX+HS+0SeFLRgU6M= github.com/spf13/pflag v1.0.7/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= +github.com/stoewer/go-strcase v1.3.1 h1:iS0MdW+kVTxgMoE1LAZyMiYJFKlOzLooE4MxjirtkAs= +github.com/stoewer/go-strcase v1.3.1/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY= github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA= @@ -386,24 +463,73 @@ github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0 h1:oZfauL/CPwI+H github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0/go.mod h1:mlHF/P+wcE0+qeEsVYfifeXOOkAFhSmtpBJyDvbzhAc= github.com/texttheater/golang-levenshtein v1.0.1 h1:+cRNoVrfiwufQPhoMzB6N0Yf/Mqajr6t1lOv8GyGE2U= github.com/texttheater/golang-levenshtein v1.0.1/go.mod h1:PYAKrbF5sAiq9wd+H82hs7gNaen0CplQ9uvm6+enD/8= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= github.com/tklauser/numcpus v0.9.0/go.mod h1:SN6Nq1O3VychhC1npsWostA+oW+VOQTxZrS604NSRyI= +======= +github.com/tidwall/gjson v1.18.0 h1:FIDeeyB800efLX89e5a8Y0BNH+LOngJyGrIWxG2FKQY= +github.com/tidwall/gjson v1.18.0/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk= +github.com/tidwall/match v1.1.1 h1:+Ho715JplO36QYgwN9PGYNhgZvoUSc9X2c80KVTi+GA= +github.com/tidwall/match v1.1.1/go.mod h1:eRSPERbgtNPcGhD8UCthc6PmLEQXEWd3PRB5JTxsfmM= +github.com/tidwall/pretty v1.2.0/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= +github.com/tidwall/pretty v1.2.1 h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4= +github.com/tidwall/pretty v1.2.1/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +github.com/twmb/franz-go v1.7.0/go.mod h1:PMze0jNfNghhih2XHbkmTFykbMF5sJqmNJB31DOOzro= +github.com/twmb/franz-go v1.20.4 h1:1wTvyLTOxS0oJh5ro/DVt2JHVdx7/kGNtmtFhbcr0O0= +github.com/twmb/franz-go v1.20.4/go.mod h1:YCnepDd4gl6vdzG03I5Wa57RnCTIC6DVEyMpDX/J8UA= +github.com/twmb/franz-go/pkg/kmsg v1.2.0/go.mod h1:SxG/xJKhgPu25SamAq0rrucfp7lbzCpEXOC+vH/ELrY= +github.com/twmb/franz-go/pkg/kmsg v1.12.0 h1:CbatD7ers1KzDNgJqPbKOq0Bz/WLBdsTH75wgzeVaPc= +github.com/twmb/franz-go/pkg/kmsg v1.12.0/go.mod h1:+DPt4NC8RmI6hqb8G09+3giKObE6uD2Eya6CfqBpeJY= +github.com/twmb/franz-go/pkg/sasl/kerberos v1.1.0 h1:alKdbddkPw3rDh+AwmUEwh6HNYgTvDSFIe/GWYRR9RM= +github.com/twmb/franz-go/pkg/sasl/kerberos v1.1.0/go.mod h1:k8BoBjyUbFj34f0rRbn+Ky12sZFAPbmShrg0karAIMo= +github.com/twmb/franz-go/pkg/sr v1.5.0 h1:KQH8veHxKyAjT4U4/rziJnSEfafuluznLoxhrp0yJfo= +github.com/twmb/franz-go/pkg/sr v1.5.0/go.mod h1:O4o4mUMNfmyEt2HcuM+qZdc6KrcStvjgxWR6Cfvmukw= +github.com/twmb/tlscfg v1.2.1 h1:IU2efmP9utQEIV2fufpZjPq7xgcZK4qu25viD51BB44= +github.com/twmb/tlscfg v1.2.1/go.mod h1:GameEQddljI+8Es373JfQEBvtI4dCTLKWGJbqT2kErs= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 h1:JwtAtbp7r/7QSyGz8mKUbYJBg2+6Cd7OjM8o/GNOcVo= github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74/go.mod h1:RmMWU37GKR2s6pgrIEB4ixgpVCt/cf7dnJv3fuH1J1c= github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/fJgbpc= github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 h1:RyrtJzu5MAmIcbRrwg75b+w3RlZCP0vJByDVzcpAe3M= go.opentelemetry.io/contrib/bridges/prometheus v0.61.0/go.mod h1:tirr4p9NXbzjlbruiRGp53IzlYrDk5CO2fdHj0sSSaY= go.opentelemetry.io/contrib/exporters/autoexport v0.57.0 h1:jmTVJ86dP60C01K3slFQa2NQ/Aoi7zA+wy7vMOKD9H4= @@ -508,6 +634,7 @@ golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8T golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +<<<<<<< HEAD google.golang.org/genproto v0.0.0-20240123012728-ef4313101c80 h1:KAeGQVN3M9nD0/bQXnr/ClcEMJ968gUXJQ9pwfSynuQ= google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237 h1:Kog3KlB4xevJlAcbbbzPfRG0+X9fdoGM+UBRKVz6Wr0= google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237/go.mod h1:ezi0AVyMKDWy5xAncvjLWH7UcLBB5n7y2fQ8MzjJcto= @@ -517,6 +644,24 @@ google.golang.org/grpc v1.72.1 h1:HR03wO6eyZ7lknl75XlxABNVLLFc2PAb6mHlYh756mA= google.golang.org/grpc v1.72.1/go.mod h1:wH5Aktxcg25y1I3w7H69nHfXdOG3UiadoBtjh3izSDM= google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY= google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY= +======= +gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0= +gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY= +gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk= +gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E= +google.golang.org/api v0.250.0 h1:qvkwrf/raASj82UegU2RSDGWi/89WkLckn4LuO4lVXM= +google.golang.org/api v0.250.0/go.mod h1:Y9Uup8bDLJJtMzJyQnu+rLRJLA0wn+wTtc6vTlOvfXo= +google.golang.org/genproto v0.0.0-20251111163417-95abcf5c77ba h1:Ze6qXW0j37YCqZdCD2LkzVSxgEWez0cO4NUyd44DiDY= +google.golang.org/genproto v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:4FLPzLA8eGAktPOTemJGDgDYRpLYwrNu4u2JtWINhnI= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba h1:B14OtaXuMaCQsl2deSvNkyPKIzq3BjfxQp8d00QyWx4= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:G5IanEx8/PgI9w6CFcYQf7jMtHQhZruvfM1i3qOqk5U= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba h1:UKgtfRM7Yh93Sya0Fo8ZzhDP4qBckrrxEr2oF5UIVb8= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk= +google.golang.org/grpc v1.75.1 h1:/ODCNEuf9VghjgO3rqLcfg8fiOP0nSluljWFlDxELLI= +google.golang.org/grpc v1.75.1/go.mod h1:JtPAzKiq4v1xcAB2hydNlWI2RnF85XXcV0mhKXr2ecQ= +google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= +google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= @@ -525,6 +670,8 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= @@ -551,8 +698,15 @@ k8s.io/component-base v0.33.3 h1:mlAuyJqyPlKZM7FyaoM/LcunZaaY353RXiOd2+B5tGA= k8s.io/component-base v0.33.3/go.mod h1:ktBVsBzkI3imDuxYXmVxZ2zxJnYTZ4HAsVj9iF09qp4= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUyGcf03XZEP0ZIKgKj35LS4= k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8= +======= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 h1:r/phHvH1iU7gO/l7tTjQk2K01ER7/OAJi8uFHHyWSac= k8s.io/kubectl v0.33.3/go.mod h1:euj2bG56L6kUGOE/ckZbCoudPwuj4Kud7BR0GzyNiT0= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg= @@ -561,8 +715,17 @@ oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc= oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o= pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw= pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04= +<<<<<<< HEAD sigs.k8s.io/controller-runtime v0.20.4 h1:X3c+Odnxz+iPTRobG4tp092+CvBU9UK0t/bRf+n0DGU= sigs.k8s.io/controller-runtime v0.20.4/go.mod h1:xg2XB0K5ShQzAgsoujxuKN4LNXR2LfwwHsPj7Iaw+XY= +======= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 h1:jpcvIRr3GLoUoEKRkHKSmGjxb6lWwrBlJsXc+eUYQHM= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw= +sigs.k8s.io/controller-runtime v0.22.4 h1:GEjV7KV3TY8e+tJ2LCTxUTanW4z/FmNB7l327UfMq9A= +sigs.k8s.io/controller-runtime v0.22.4/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8= +sigs.k8s.io/gateway-api v1.1.0 h1:DsLDXCi6jR+Xz8/xd0Z1PYl2Pn0TyaFMOPPZIj4inDM= +sigs.k8s.io/gateway-api v1.1.0/go.mod h1:ZH4lHrL2sDi0FHZ9jjneb8kKnGzFWyrTya35sWUTrRs= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE= sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg= sigs.k8s.io/kustomize/api v0.19.0 h1:F+2HB2mU1MSiR9Hp1NEgoU2q9ItNOaBJl0I4Dlus5SQ= diff --git a/charts/redpanda/go.mod b/charts/redpanda/go.mod index 39f11b26a..30120dbe8 100644 --- a/charts/redpanda/go.mod +++ b/charts/redpanda/go.mod @@ -10,10 +10,17 @@ require ( github.com/json-iterator/go v1.1.12 github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.76.2 github.com/quasilyte/go-ruleguard/dsl v0.3.22 +<<<<<<< HEAD github.com/redpanda-data/common-go/rpadmin v0.1.14 github.com/redpanda-data/redpanda-operator/charts/console/v3 v3.1.0 github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 github.com/redpanda-data/redpanda-operator/operator v0.0.0-20250528175436-e8cca0053dc6 +======= + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d + github.com/redpanda-data/common-go/rpadmin v0.2.0 + github.com/redpanda-data/redpanda-operator/charts/console/v3 v3.3.0 + github.com/redpanda-data/redpanda-operator/gotohelm v1.2.1-0.20250909192010-c59ff494d04a +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250528175436-e8cca0053dc6 github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6 github.com/stretchr/testify v1.10.0 @@ -61,7 +68,12 @@ require ( github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/sprig/v3 v3.3.0 // indirect github.com/Masterminds/squirrel v1.5.4 // indirect +<<<<<<< HEAD github.com/antlr4-go/antlr/v4 v4.13.0 // indirect +======= + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect github.com/aws/aws-sdk-go-v2 v1.32.3 // indirect github.com/aws/aws-sdk-go-v2/config v1.28.1 // indirect @@ -81,6 +93,7 @@ require ( github.com/beorn7/perks v1.0.1 // indirect github.com/blang/semver/v4 v4.0.0 // indirect github.com/buger/jsonparser v1.1.1 // indirect + github.com/cenkalti/backoff/v5 v5.0.3 // indirect github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/chai2010/gettext-go v1.0.2 // indirect github.com/cisco-open/k8s-objectmatcher v1.9.0 // indirect @@ -90,6 +103,8 @@ require ( github.com/containerd/errdefs v1.0.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/emicklei/go-restful/v3 v3.12.2 // indirect @@ -111,7 +126,12 @@ require ( github.com/go-viper/mapstructure/v2 v2.4.0 // indirect github.com/gobwas/glob v0.2.3 // indirect github.com/gogo/protobuf v1.3.2 // indirect +<<<<<<< HEAD github.com/golang-jwt/jwt/v5 v5.2.2 // indirect +======= + github.com/golang-jwt/jwt/v5 v5.3.0 // indirect + github.com/golang/protobuf v1.5.4 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/gonvenience/bunt v1.3.5 // indirect github.com/gonvenience/neat v1.3.13 // indirect github.com/gonvenience/term v1.0.2 // indirect @@ -130,6 +150,8 @@ require ( github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect github.com/gosuri/uitable v0.0.4 // indirect github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/homeport/dyff v1.7.1 // indirect @@ -205,6 +227,7 @@ require ( github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 // indirect github.com/x448/float16 v0.8.4 // indirect github.com/xlab/treeprint v1.2.0 // indirect +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 // indirect go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 // indirect go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect @@ -229,8 +252,42 @@ require ( google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237 // indirect google.golang.org/grpc v1.72.1 // indirect google.golang.org/protobuf v1.36.6 // indirect +======= + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect + go.opentelemetry.io/otel v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect + go.opentelemetry.io/otel/metric v1.38.0 // indirect + go.opentelemetry.io/otel/sdk v1.38.0 // indirect + go.opentelemetry.io/otel/trace v1.38.0 // indirect + go.opentelemetry.io/proto/otlp v1.7.1 // indirect + go.uber.org/multierr v1.11.0 // indirect + go.yaml.in/yaml/v2 v2.4.3 // indirect + go.yaml.in/yaml/v3 v3.0.4 // indirect + golang.org/x/crypto v0.45.0 // indirect + golang.org/x/net v0.47.0 // indirect + golang.org/x/oauth2 v0.31.0 // indirect + golang.org/x/sync v0.18.0 // indirect + golang.org/x/sys v0.38.0 // indirect + golang.org/x/term v0.37.0 // indirect + golang.org/x/text v0.31.0 // indirect + golang.org/x/time v0.13.0 // indirect + gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect + google.golang.org/api v0.250.0 // indirect + google.golang.org/genproto v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/grpc v1.75.1 // indirect + google.golang.org/protobuf v1.36.11 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect helm.sh/helm/v3 v3.18.5 // indirect @@ -239,9 +296,15 @@ require ( k8s.io/cli-runtime v0.33.3 // indirect k8s.io/component-base v0.33.3 // indirect k8s.io/klog/v2 v2.130.1 // indirect +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect +======= + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 // indirect oras.land/oras-go/v2 v2.6.0 // indirect + sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect sigs.k8s.io/gateway-api v1.1.0 // indirect sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/kustomize/api v0.19.0 // indirect diff --git a/charts/redpanda/go.sum b/charts/redpanda/go.sum index a52a88074..8669cd38e 100644 --- a/charts/redpanda/go.sum +++ b/charts/redpanda/go.sum @@ -64,6 +64,8 @@ github.com/Masterminds/squirrel v1.5.4 h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8 github.com/Masterminds/squirrel v1.5.4/go.mod h1:NNaOrjSoIDfDA40n7sr2tPNZRfjzjA400rg+riTZj10= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2 h1:+vx7roKuyA63nhn5WAunQHLTznkw5W8b1Xc0dNjp83s= github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2/go.mod h1:HBCaDeC1lPdgDeDbhX8XFpy1jqjK0IBG8W5K+xYqA0w= github.com/antlr4-go/antlr/v4 v4.13.0 h1:lxCg3LAv+EUK6t1i0y1V6/SLeUi0eKEKdhQAlS8TVTI= @@ -140,6 +142,8 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= @@ -175,8 +179,15 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/evanphx/json-patch v5.9.11+incompatible h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8= @@ -227,6 +238,7 @@ github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9L github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM= github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y= github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8= +github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8= @@ -279,9 +291,21 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY= github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3/go.mod h1:ndYquD05frm2vACXE1nsccT4oJzjhw2arTS2cpUD1PI= +======= +github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= @@ -305,6 +329,8 @@ github.com/invopop/jsonschema v0.12.0 h1:6ovsNSuvn9wEQVOyc72aycBMVQFKz7cPdMJn10C github.com/invopop/jsonschema v0.12.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0= github.com/jmoiron/sqlx v1.4.0 h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o= github.com/jmoiron/sqlx v1.4.0/go.mod h1:ZrZ7UsYB/weZdl2Bxg6jCRO9c3YHl8r3ahlKmRT4JLY= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= @@ -450,6 +476,7 @@ github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ= github.com/redis/go-redis/v9 v9.7.3 h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM= github.com/redis/go-redis/v9 v9.7.3/go.mod h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA= +<<<<<<< HEAD github.com/redpanda-data/common-go/net v0.1.0 h1:JnJioRJuL961r1QXiJQ1tW9+yEaJfu8FpXnUmvQbwNM= github.com/redpanda-data/common-go/net v0.1.0/go.mod h1:iOdNkjxM7a1T8F3cYHTaKIPFCHzzp/ia6TN+Z+7Tt5w= github.com/redpanda-data/common-go/rpadmin v0.1.14 h1:G/rlh9cHsGhTsNpkwrISdpGA8fPZ7ul57rzxbPiJhs0= @@ -464,6 +491,20 @@ github.com/redpanda-data/redpanda-operator/operator v0.0.0-20250528175436-e8cca0 github.com/redpanda-data/redpanda-operator/operator v0.0.0-20250528175436-e8cca0053dc6/go.mod h1:C4oYf3EfNvIhrNnRqciGojBoeiBm06hO8QrquzYJFG4= github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250528175436-e8cca0053dc6 h1:3j3DgUcLJIDXnQYv+bOt2GShkTq0LZlFzFypSaZFUMc= github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250528175436-e8cca0053dc6/go.mod h1:YWnwTs6NZCiNQNTkQkJCC7Fdwbn5ur8hIcloWjuR+48= +======= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 h1:wWHiS4LNYzl5HkUPG6dpGPPvFW3ze7ZnraYvyqZ/+8s= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:V3OBV2kcF/BDDytUZuKvIygbaXoGPT5VO3KmMAz+mBM= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7 h1:MXLdjFdFjOtyuUR4TdVVsqFP8xnru2YDwzH9bJTUr1M= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7/go.mod h1:UJIi/yUxGOBYXUrfUsOkxfYxcb/ll7mZrwae/i+U2kc= +github.com/redpanda-data/common-go/rpadmin v0.2.0 h1:s2MyyY+yq7B17mLjjW17RO81wFlzo856K9IuBpsmvv0= +github.com/redpanda-data/common-go/rpadmin v0.2.0/go.mod h1:qmu76v7RRKgEXLS3UXxZ8KDpObtSNq6RinOIejJNWzw= +github.com/redpanda-data/common-go/secrets v0.1.4 h1:CGp3KolGnjcJvIafTwf7Hlj5ztLOJCjgkegRu7IAkSw= +github.com/redpanda-data/common-go/secrets v0.1.4/go.mod h1:WjUU/5saSXwItZx6veFOGbQZUgPQz4MQ65z22y0Ky84= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 h1:kfhe8NbuBsXmBF68CnDaA0dDTWICNxwrC3rsO0h3WIg= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186/go.mod h1:a73cXlHClCE0iUOjSOKdaGAPcnwYDv+2WaT9NeLZvKc= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6 h1:SbcvWTYFEbH5+NQOl1To5jppEa8RCK1HAkRNfhdUGLg= github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6/go.mod h1:/8XZuwUVFOGUkn31kglW28Xie5TrM7COtzRMA3GixaA= github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= @@ -490,6 +531,8 @@ github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/spf13/afero v1.12.0 h1:UcOPyRBYczmFn6yvphxkn9ZEOY65cpwGKb5mL36mrqs= github.com/spf13/afero v1.12.0/go.mod h1:ZTlWwG4/ahT8W7T0WQ5uYmjI9duaLQGy3Q2OAl4sk/4= github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= @@ -529,6 +572,7 @@ github.com/tidwall/match v1.1.1/go.mod h1:eRSPERbgtNPcGhD8UCthc6PmLEQXEWd3PRB5JT github.com/tidwall/pretty v1.2.0/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= github.com/tidwall/pretty v1.2.1 h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4= github.com/tidwall/pretty v1.2.1/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= @@ -541,6 +585,26 @@ github.com/twmb/franz-go/pkg/kmsg v1.11.2 h1:hIw75FpwcAjgeyfIGFqivAvwC5uNIOWRGvQ github.com/twmb/franz-go/pkg/kmsg v1.11.2/go.mod h1:CFfkkLysDNmukPYhGzuUcDtf46gQSqCZHMW1T4Z+wDE= github.com/twmb/franz-go/pkg/sr v1.4.1-0.20250620172413-c17130ef7765 h1:+l/P3ExNaY1T5Tft/+zK5r7hiEilgHWS5Cjjh2iZ4ME= github.com/twmb/franz-go/pkg/sr v1.4.1-0.20250620172413-c17130ef7765/go.mod h1:O4o4mUMNfmyEt2HcuM+qZdc6KrcStvjgxWR6Cfvmukw= +======= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +github.com/twmb/franz-go v1.7.0/go.mod h1:PMze0jNfNghhih2XHbkmTFykbMF5sJqmNJB31DOOzro= +github.com/twmb/franz-go v1.20.4 h1:1wTvyLTOxS0oJh5ro/DVt2JHVdx7/kGNtmtFhbcr0O0= +github.com/twmb/franz-go v1.20.4/go.mod h1:YCnepDd4gl6vdzG03I5Wa57RnCTIC6DVEyMpDX/J8UA= +github.com/twmb/franz-go/pkg/kadm v1.17.1 h1:Bt02Y/RLgnFO2NP2HVP1kd2TFtGRiJZx+fSArjZDtpw= +github.com/twmb/franz-go/pkg/kadm v1.17.1/go.mod h1:s4duQmrDbloVW9QTMXhs6mViTepze7JLG43xwPcAeTg= +github.com/twmb/franz-go/pkg/kmsg v1.2.0/go.mod h1:SxG/xJKhgPu25SamAq0rrucfp7lbzCpEXOC+vH/ELrY= +github.com/twmb/franz-go/pkg/kmsg v1.12.0 h1:CbatD7ers1KzDNgJqPbKOq0Bz/WLBdsTH75wgzeVaPc= +github.com/twmb/franz-go/pkg/kmsg v1.12.0/go.mod h1:+DPt4NC8RmI6hqb8G09+3giKObE6uD2Eya6CfqBpeJY= +github.com/twmb/franz-go/pkg/sasl/kerberos v1.1.0 h1:alKdbddkPw3rDh+AwmUEwh6HNYgTvDSFIe/GWYRR9RM= +github.com/twmb/franz-go/pkg/sasl/kerberos v1.1.0/go.mod h1:k8BoBjyUbFj34f0rRbn+Ky12sZFAPbmShrg0karAIMo= +github.com/twmb/franz-go/pkg/sr v1.5.0 h1:KQH8veHxKyAjT4U4/rziJnSEfafuluznLoxhrp0yJfo= +github.com/twmb/franz-go/pkg/sr v1.5.0/go.mod h1:O4o4mUMNfmyEt2HcuM+qZdc6KrcStvjgxWR6Cfvmukw= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/twmb/tlscfg v1.2.1 h1:IU2efmP9utQEIV2fufpZjPq7xgcZK4qu25viD51BB44= github.com/twmb/tlscfg v1.2.1/go.mod h1:GameEQddljI+8Es373JfQEBvtI4dCTLKWGJbqT2kErs= github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 h1:JwtAtbp7r/7QSyGz8mKUbYJBg2+6Cd7OjM8o/GNOcVo= @@ -549,6 +613,8 @@ github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/ github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= @@ -556,8 +622,27 @@ github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9dec github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 h1:RyrtJzu5MAmIcbRrwg75b+w3RlZCP0vJByDVzcpAe3M= go.opentelemetry.io/contrib/bridges/prometheus v0.61.0/go.mod h1:tirr4p9NXbzjlbruiRGp53IzlYrDk5CO2fdHj0sSSaY= go.opentelemetry.io/contrib/exporters/autoexport v0.57.0 h1:jmTVJ86dP60C01K3slFQa2NQ/Aoi7zA+wy7vMOKD9H4= @@ -704,6 +789,8 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= @@ -730,16 +817,30 @@ k8s.io/component-base v0.33.3 h1:mlAuyJqyPlKZM7FyaoM/LcunZaaY353RXiOd2+B5tGA= k8s.io/component-base v0.33.3/go.mod h1:ktBVsBzkI3imDuxYXmVxZ2zxJnYTZ4HAsVj9iF09qp4= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUyGcf03XZEP0ZIKgKj35LS4= k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8= +======= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 h1:r/phHvH1iU7gO/l7tTjQk2K01ER7/OAJi8uFHHyWSac= k8s.io/kubectl v0.33.3/go.mod h1:euj2bG56L6kUGOE/ckZbCoudPwuj4Kud7BR0GzyNiT0= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc= oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o= +<<<<<<< HEAD sigs.k8s.io/controller-runtime v0.20.4 h1:X3c+Odnxz+iPTRobG4tp092+CvBU9UK0t/bRf+n0DGU= sigs.k8s.io/controller-runtime v0.20.4/go.mod h1:xg2XB0K5ShQzAgsoujxuKN4LNXR2LfwwHsPj7Iaw+XY= +======= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 h1:jpcvIRr3GLoUoEKRkHKSmGjxb6lWwrBlJsXc+eUYQHM= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw= +sigs.k8s.io/controller-runtime v0.22.4 h1:GEjV7KV3TY8e+tJ2LCTxUTanW4z/FmNB7l327UfMq9A= +sigs.k8s.io/controller-runtime v0.22.4/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/gateway-api v1.1.0 h1:DsLDXCi6jR+Xz8/xd0Z1PYl2Pn0TyaFMOPPZIj4inDM= sigs.k8s.io/gateway-api v1.1.0/go.mod h1:ZH4lHrL2sDi0FHZ9jjneb8kKnGzFWyrTya35sWUTrRs= sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE= diff --git a/charts/redpanda/render_state_nogotohelm.go b/charts/redpanda/render_state_nogotohelm.go new file mode 100644 index 000000000..9947cfb3e --- /dev/null +++ b/charts/redpanda/render_state_nogotohelm.go @@ -0,0 +1,313 @@ +// Copyright 2026 Redpanda Data, Inc. +// +// Use of this software is governed by the Business Source License +// included in the file licenses/BSL.md +// +// As of the Change Date specified in that file, in accordance with +// the Business Source License, use of this software will be governed +// by the Apache License, Version 2.0 + +//go:build !gotohelm + +package redpanda + +import ( + "context" + "crypto/tls" + "crypto/x509" + "encoding/pem" + "fmt" + "reflect" + "slices" + "strings" + + "github.com/cockroachdb/errors" + "github.com/redpanda-data/common-go/kube" + appsv1 "k8s.io/api/apps/v1" + corev1 "k8s.io/api/core/v1" + k8sapierrors "k8s.io/apimachinery/pkg/api/errors" + "k8s.io/apimachinery/pkg/types" + "k8s.io/utils/ptr" + "sigs.k8s.io/controller-runtime/pkg/client" + + "github.com/redpanda-data/redpanda-operator/gotohelm/helmette" +) + +var ( + ErrServerCertificateNotFound = errors.New("server TLS certificate not found") + ErrServerCertificatePublicKeyNotFound = errors.New("server TLS certificate does not contain a public key") + + ErrClientCertificateNotFound = errors.New("client TLS certificate not found") + ErrClientCertificatePublicKeyNotFound = errors.New("client TLS certificate does not contain a public key") + ErrClientCertificatePrivateKeyNotFound = errors.New("client TLS certificate does not contain a private key") + + ErrSASLSecretNotFound = errors.New("users secret not found") + ErrSASLSecretKeyNotFound = errors.New("users secret key not found") + ErrSASLSecretSuperuserNotFound = errors.New("users secret has no users") + + supportedSASLMechanisms = []string{ + "SCRAM-SHA-256", "SCRAM-SHA-512", + } +) + +const DefaultFieldOwner = client.FieldOwner("cluster.redpanda.com/operator") + +// FetchSASLUsers attempts to locate an existing SASL users secret in the cluster. +// If found, it is used to populate the first user in the secret for use. +func (r *RenderState) FetchSASLUsers() (username, password, mechanism string, err error) { + ctl, ctlErr := r.KubeCTL() + if ctlErr != nil { + err = ctlErr + return + } + + saslUsers := SecretSASLUsers(r) + saslUsersError := func(err error) error { + return fmt.Errorf("error fetching SASL authentication for %s/%s: %w", saslUsers.Namespace, saslUsers.Name, err) + } + + if saslUsers != nil { + // read from the server since we're assuming all the resources + // have already been created + var users corev1.Secret + lookupErr := ctl.Get(context.TODO(), types.NamespacedName{Name: saslUsers.Name, Namespace: saslUsers.Namespace}, &users) + if lookupErr != nil { + if k8sapierrors.IsNotFound(lookupErr) { + err = saslUsersError(ErrSASLSecretNotFound) + return + } + err = saslUsersError(lookupErr) + return + } + + data, found := users.Data["users.txt"] + if !found { + err = saslUsersError(ErrSASLSecretKeyNotFound) + return + } + + username, password, mechanism = firstUser(data) + if username == "" { + err = saslUsersError(ErrSASLSecretSuperuserNotFound) + return + } + } + + return +} + +// RenderStateFromDot constructs a [RenderState] from the provided [helmette.Dot]. +func RenderStateFromDot(dot *helmette.Dot, migrateFNs ...func(state *RenderState) error) (*RenderState, error) { + state, err := renderStateFromDot(dot) + if err != nil { + return nil, err + } + + for _, fn := range migrateFNs { + if err := fn(state); err != nil { + return nil, err + } + } + + return state, nil +} + +// renderStateFromDot constructs a [RenderState] from the provided [helmette.Dot] +func renderStateFromDot(dot *helmette.Dot) (state *RenderState, err error) { + defer func() { + switch r := recover().(type) { + case nil: + case error: + err = errors.Wrapf(r, "chart execution failed") + default: + err = errors.Newf("chart execution failed: %#v", r) + } + }() + + state = &RenderState{ + Release: &dot.Release, + Files: &dot.Files, + Chart: &dot.Chart, + Values: helmette.Unwrap[Values](dot.Values), + Dot: dot, + } + state.FetchBootstrapUser() + state.FetchStatefulSetPodSelector() + + return +} + +func firstUser(data []byte) (user string, password string, mechanism string) { + file := string(data) + + for _, line := range strings.Split(file, "\n") { + tokens := strings.Split(line, ":") + + switch len(tokens) { + case 2: + return tokens[0], tokens[1], string(DefaultSASLMechanism) + + case 3: + if !slices.Contains(supportedSASLMechanisms, tokens[2]) { + continue + } + + return tokens[0], tokens[1], tokens[2] + + default: + continue + } + } + + return +} + +// TLSConfig constructs a tls.Config for the given internal listener. +func (r *RenderState) TLSConfig(listener InternalTLS) (*tls.Config, error) { + ctl, err := r.KubeCTL() + if err != nil { + return nil, err + } + + namespace := r.Release.Namespace + serverName := InternalDomain(r) + + rootCertName, rootCertKey, clientCertName := certificatesFor(r, listener.Cert) + + serverTLSError := func(err error) error { + return fmt.Errorf("error fetching server root CA %s/%s: %w", namespace, rootCertName, err) + } + clientTLSError := func(err error) error { + return fmt.Errorf("error fetching client certificate default/%s: %w", clientCertName, err) + } + + tlsConfig := &tls.Config{MinVersion: tls.VersionTLS12, ServerName: serverName} + + var serverCert corev1.Secret + lookupErr := ctl.Get(context.TODO(), types.NamespacedName{Name: rootCertName, Namespace: namespace}, &serverCert) + if lookupErr != nil { + if k8sapierrors.IsNotFound(lookupErr) { + return nil, serverTLSError(ErrServerCertificateNotFound) + } + return nil, serverTLSError(lookupErr) + } + + serverPublicKey, found := serverCert.Data[rootCertKey] + if !found { + return nil, serverTLSError(ErrServerCertificatePublicKeyNotFound) + } + + block, _ := pem.Decode(serverPublicKey) + serverParsedCertificate, err := x509.ParseCertificate(block.Bytes) + if err != nil { + return nil, serverTLSError(fmt.Errorf("unable to parse public key %w", err)) + } + pool := x509.NewCertPool() + pool.AddCert(serverParsedCertificate) + + tlsConfig.RootCAs = pool + + if listener.RequireClientAuth { + var clientCert corev1.Secret + lookupErr := ctl.Get(context.TODO(), types.NamespacedName{Name: clientCertName, Namespace: namespace}, &clientCert) + if lookupErr != nil { + if k8sapierrors.IsNotFound(lookupErr) { + return nil, clientTLSError(ErrClientCertificateNotFound) + } + return nil, clientTLSError(lookupErr) + } + + // we always use tls.crt for client certs + clientPublicKey, found := clientCert.Data[corev1.TLSCertKey] + if !found { + return nil, clientTLSError(ErrClientCertificatePublicKeyNotFound) + } + + clientPrivateKey, found := clientCert.Data[corev1.TLSPrivateKeyKey] + if !found { + return nil, clientTLSError(ErrClientCertificatePrivateKeyNotFound) + } + + clientKey, err := tls.X509KeyPair(clientPublicKey, clientPrivateKey) + if err != nil { + return nil, clientTLSError(fmt.Errorf("unable to parse public and private key %w", err)) + } + + tlsConfig.Certificates = []tls.Certificate{clientKey} + } + + return tlsConfig, nil +} + +func certificatesFor(state *RenderState, name string) (certSecret, certKey, clientSecret string) { + cert, ok := state.Values.TLS.Certs[name] + if !ok || !ptr.Deref(cert.Enabled, true) { + // TODO this isn't correct but it matches historical behavior. + fullname := Fullname(state) + certSecret = fmt.Sprintf("%s-%s-root-certificate", fullname, name) + clientSecret = fmt.Sprintf("%s-default-client-cert", fullname) + + return certSecret, corev1.TLSCertKey, clientSecret + } + + ref := cert.CASecretRef(state, name) + return ref.LocalObjectReference.Name, ref.Key, cert.ClientSecretName(state, name) +} + +// KubeCTL constructs a kube.Ctl from the RenderState's kubeconfig. +func (r *RenderState) KubeCTL() (*kube.Ctl, error) { + return kube.FromRESTConfig(r.Dot.KubeConfig, kube.Options{ + FieldManager: string(DefaultFieldOwner), + }) +} + +// RenderNodePools can be used to render node pools programmatically from Go. +func RenderNodePools(state *RenderState) (_ []*appsv1.StatefulSet, err error) { + defer func() { + switch r := recover().(type) { + case nil: + case error: + err = errors.Wrapf(r, "chart execution failed") + default: + err = errors.Newf("chart execution failed: %#v", r) + } + }() + + return StatefulSets(state), nil +} + +// RenderResources can be used to render non-nodepool resources programmatically from Go. +func RenderResources(state *RenderState) (_ []kube.Object, err error) { + defer func() { + switch r := recover().(type) { + case nil: + case error: + err = errors.Wrapf(r, "chart execution failed") + default: + err = errors.Newf("chart execution failed: %#v", r) + } + }() + + resources := renderResources(state) + + // the renderer is expected to return nil interfaces. + // In the helm world, these nils are filtered out by + // _shims.render-manifests. + j := 0 + for i := range resources { + // Handle the nil unboxing issue. + if reflect.ValueOf(resources[i]).IsNil() { + continue + } + // filter out any helm hooks + if annotations := resources[i].GetAnnotations(); annotations != nil { + if _, isHook := annotations["helm.sh/hook"]; isHook { + continue + } + } + resources[j] = resources[i] + j++ + } + + return resources[:j], nil +} diff --git a/flake.nix b/flake.nix index 48cc5b749..c5ff14e68 100644 --- a/flake.nix +++ b/flake.nix @@ -46,7 +46,18 @@ { name = "KUBEBUILDER_ASSETS"; eval = "$(setup-envtest use -p path 1.32.x)"; } { name = "PATH"; eval = "$(pwd)/.build:$PATH"; } { name = "TEST_CERTMANAGER_VERSION"; eval = "v1.14.2"; } +<<<<<<< HEAD { name = "TEST_REDPANDA_VERSION"; eval = "v25.1.1"; } +======= + { name = "TEST_REDPANDA_REPO"; eval = "redpandadata/redpanda-unstable"; } + { name = "TEST_REDPANDA_VERSION"; eval = "v25.3.1-rc2"; } + { name = "CGO_ENABLED"; eval = "0"; } + # This is a workaround for rpk packages using buf-built grpc-gateway protobuf options, whereas the kubernetes ecosystem + # uses the google provided libraries, which conflict due to them being the same library. We put this here primarily for + # tests run on a local environment so that we can use the same typical "go test" workflow we otherwise would normally. + # Eventually we should remove this and our reliance on internal rpk libraries. + { name = "GOLANG_PROTOBUF_REGISTRATION_CONFLICT"; eval = "ignore"; } +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) ]; # If the version of the installed binary is important make sure to diff --git a/gen/go.mod b/gen/go.mod index b298821cf..a2b6b7068 100644 --- a/gen/go.mod +++ b/gen/go.mod @@ -59,7 +59,12 @@ require ( github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/sprig/v3 v3.3.0 // indirect github.com/Masterminds/squirrel v1.5.4 // indirect +<<<<<<< HEAD github.com/antlr4-go/antlr/v4 v4.13.0 // indirect +======= + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect github.com/aws/aws-sdk-go-v2 v1.32.3 // indirect github.com/aws/aws-sdk-go-v2/config v1.28.1 // indirect @@ -80,6 +85,7 @@ require ( github.com/blang/semver/v4 v4.0.0 // indirect github.com/buger/jsonparser v1.1.1 // indirect github.com/buildkite/interpolate v0.1.5 // indirect + github.com/cenkalti/backoff/v5 v5.0.3 // indirect github.com/cert-manager/cert-manager v1.14.5 // indirect github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/chai2010/gettext-go v1.0.2 // indirect @@ -90,6 +96,8 @@ require ( github.com/containerd/errdefs v1.0.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/emicklei/go-restful/v3 v3.12.2 // indirect @@ -111,7 +119,12 @@ require ( github.com/go-viper/mapstructure/v2 v2.4.0 // indirect github.com/gobwas/glob v0.2.3 // indirect github.com/gogo/protobuf v1.3.2 // indirect +<<<<<<< HEAD github.com/golang-jwt/jwt/v5 v5.2.2 // indirect +======= + github.com/golang-jwt/jwt/v5 v5.3.0 // indirect + github.com/golang/protobuf v1.5.4 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/gonvenience/bunt v1.3.5 // indirect github.com/gonvenience/neat v1.3.13 // indirect github.com/gonvenience/term v1.0.2 // indirect @@ -130,6 +143,8 @@ require ( github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect github.com/gosuri/uitable v0.0.4 // indirect github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/homeport/dyff v1.7.1 // indirect @@ -176,6 +191,7 @@ require ( github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect github.com/pkg/errors v0.9.1 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect +<<<<<<< HEAD github.com/prometheus/client_golang v1.22.0 // indirect github.com/prometheus/client_model v0.6.2 // indirect github.com/prometheus/common v0.64.0 // indirect @@ -185,6 +201,20 @@ require ( github.com/redpanda-data/common-go/rpadmin v0.1.14 // indirect github.com/redpanda-data/common-go/secrets v0.1.3 // indirect github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 // indirect +======= + github.com/prometheus/client_golang v1.23.2 // indirect + github.com/prometheus/client_model v0.6.2 // indirect + github.com/prometheus/common v0.66.1 // indirect + github.com/prometheus/procfs v0.17.0 // indirect + github.com/quasilyte/go-ruleguard/dsl v0.3.22 // indirect + github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 // indirect + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d // indirect + github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7 // indirect + github.com/redpanda-data/common-go/rpadmin v0.2.0 // indirect + github.com/redpanda-data/common-go/secrets v0.1.4 // indirect + github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 // indirect + github.com/redpanda-data/redpanda-operator/gotohelm v1.2.1-0.20250909192010-c59ff494d04a // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6 // indirect github.com/rivo/uniseg v0.4.7 // indirect github.com/rogpeppe/go-internal v1.13.1 // indirect @@ -212,6 +242,7 @@ require ( github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect github.com/x448/float16 v0.8.4 // indirect github.com/xlab/treeprint v1.2.0 // indirect +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 // indirect go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 // indirect go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect @@ -241,8 +272,44 @@ require ( google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237 // indirect google.golang.org/grpc v1.72.1 // indirect google.golang.org/protobuf v1.36.6 // indirect +======= + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect + go.opentelemetry.io/otel v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect + go.opentelemetry.io/otel/metric v1.38.0 // indirect + go.opentelemetry.io/otel/sdk v1.38.0 // indirect + go.opentelemetry.io/otel/trace v1.38.0 // indirect + go.opentelemetry.io/proto/otlp v1.7.1 // indirect + go.uber.org/multierr v1.11.0 // indirect + go.uber.org/zap v1.27.1 // indirect + go.yaml.in/yaml/v2 v2.4.3 // indirect + go.yaml.in/yaml/v3 v3.0.4 // indirect + golang.org/x/crypto v0.45.0 // indirect + golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6 // indirect + golang.org/x/mod v0.30.0 // indirect + golang.org/x/net v0.47.0 // indirect + golang.org/x/oauth2 v0.31.0 // indirect + golang.org/x/sync v0.18.0 // indirect + golang.org/x/sys v0.38.0 // indirect + golang.org/x/term v0.37.0 // indirect + golang.org/x/time v0.13.0 // indirect + gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect + google.golang.org/api v0.250.0 // indirect + google.golang.org/genproto v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/grpc v1.75.1 // indirect + google.golang.org/protobuf v1.36.11 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect gotest.tools/v3 v3.5.2 // indirect @@ -253,10 +320,19 @@ require ( k8s.io/client-go v0.33.3 // indirect k8s.io/component-base v0.33.3 // indirect k8s.io/klog/v2 v2.130.1 // indirect +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect k8s.io/kubectl v0.33.3 // indirect oras.land/oras-go/v2 v2.6.0 // indirect sigs.k8s.io/controller-runtime v0.20.4 // indirect +======= + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect + k8s.io/kubectl v0.33.3 // indirect + oras.land/oras-go/v2 v2.6.0 // indirect + sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect + sigs.k8s.io/controller-runtime v0.22.4 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/gateway-api v1.1.0 // indirect sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/kustomize/api v0.19.0 // indirect diff --git a/gen/go.sum b/gen/go.sum index 226251a2f..f9c6142b6 100644 --- a/gen/go.sum +++ b/gen/go.sum @@ -64,6 +64,8 @@ github.com/Masterminds/squirrel v1.5.4 h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8 github.com/Masterminds/squirrel v1.5.4/go.mod h1:NNaOrjSoIDfDA40n7sr2tPNZRfjzjA400rg+riTZj10= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2 h1:+vx7roKuyA63nhn5WAunQHLTznkw5W8b1Xc0dNjp83s= github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2/go.mod h1:HBCaDeC1lPdgDeDbhX8XFpy1jqjK0IBG8W5K+xYqA0w= github.com/antlr4-go/antlr/v4 v4.13.0 h1:lxCg3LAv+EUK6t1i0y1V6/SLeUi0eKEKdhQAlS8TVTI= @@ -144,6 +146,8 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= @@ -179,8 +183,15 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/evanphx/json-patch v5.9.11+incompatible h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8= @@ -233,6 +244,12 @@ github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9L github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM= github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y= github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8= +<<<<<<< HEAD +======= +github.com/goccy/go-json v0.10.5 h1:Fq85nIqj+gXn/S5ahsiTlK3TmC85qgirsdTP/+DeaC4= +github.com/goccy/go-json v0.10.5/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M= +github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8= @@ -285,9 +302,21 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY= github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3/go.mod h1:ndYquD05frm2vACXE1nsccT4oJzjhw2arTS2cpUD1PI= +======= +github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= @@ -311,6 +340,8 @@ github.com/invopop/jsonschema v0.12.0 h1:6ovsNSuvn9wEQVOyc72aycBMVQFKz7cPdMJn10C github.com/invopop/jsonschema v0.12.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0= github.com/jmoiron/sqlx v1.4.0 h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o= github.com/jmoiron/sqlx v1.4.0/go.mod h1:ZrZ7UsYB/weZdl2Bxg6jCRO9c3YHl8r3ahlKmRT4JLY= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= @@ -458,6 +489,7 @@ github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ= github.com/redis/go-redis/v9 v9.7.3 h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM= github.com/redis/go-redis/v9 v9.7.3/go.mod h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA= +<<<<<<< HEAD github.com/redpanda-data/common-go/net v0.1.0 h1:JnJioRJuL961r1QXiJQ1tW9+yEaJfu8FpXnUmvQbwNM= github.com/redpanda-data/common-go/net v0.1.0/go.mod h1:iOdNkjxM7a1T8F3cYHTaKIPFCHzzp/ia6TN+Z+7Tt5w= github.com/redpanda-data/common-go/rpadmin v0.1.14 h1:G/rlh9cHsGhTsNpkwrISdpGA8fPZ7ul57rzxbPiJhs0= @@ -472,6 +504,24 @@ github.com/redpanda-data/redpanda-operator/charts/redpanda/v5 v5.10.5 h1:eEaymDE github.com/redpanda-data/redpanda-operator/charts/redpanda/v5 v5.10.5/go.mod h1:D8MfzGr+oPWOUNnDEezKSJyHRKvDpGb6NZS0bJdQnds= github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 h1:IV2Ic66JDKPtCnNU4Kn1naJlzZmhl0izRj17qgTCo20= github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0/go.mod h1:usCpPzzzhgtPrRTiUQOzFqGmukce8U0SrzEeX2ONDFE= +======= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 h1:wWHiS4LNYzl5HkUPG6dpGPPvFW3ze7ZnraYvyqZ/+8s= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:V3OBV2kcF/BDDytUZuKvIygbaXoGPT5VO3KmMAz+mBM= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7 h1:MXLdjFdFjOtyuUR4TdVVsqFP8xnru2YDwzH9bJTUr1M= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7/go.mod h1:UJIi/yUxGOBYXUrfUsOkxfYxcb/ll7mZrwae/i+U2kc= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1 h1:fLBU7IJZq8PR88AkEdI5G+yyBsftionGapvAOMPW9hg= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:LzztzYWpD+e+A6hV6+eQhYY60zHQR7ePxhLgyMmRn/Q= +github.com/redpanda-data/common-go/rp-controller-utils v0.0.0-20260109170727-1dd9f5d22ee1 h1:pGPp5rJjnFM2z3JhuHSq099tltYjSf7bZT44zWQfovY= +github.com/redpanda-data/common-go/rp-controller-utils v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:y+TN+dzE/I/CnBIQesZ51SlixR3shI6QNhdZ55E0Yu8= +github.com/redpanda-data/common-go/rpadmin v0.2.0 h1:s2MyyY+yq7B17mLjjW17RO81wFlzo856K9IuBpsmvv0= +github.com/redpanda-data/common-go/rpadmin v0.2.0/go.mod h1:qmu76v7RRKgEXLS3UXxZ8KDpObtSNq6RinOIejJNWzw= +github.com/redpanda-data/common-go/secrets v0.1.4 h1:CGp3KolGnjcJvIafTwf7Hlj5ztLOJCjgkegRu7IAkSw= +github.com/redpanda-data/common-go/secrets v0.1.4/go.mod h1:WjUU/5saSXwItZx6veFOGbQZUgPQz4MQ65z22y0Ky84= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 h1:kfhe8NbuBsXmBF68CnDaA0dDTWICNxwrC3rsO0h3WIg= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186/go.mod h1:a73cXlHClCE0iUOjSOKdaGAPcnwYDv+2WaT9NeLZvKc= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6 h1:SbcvWTYFEbH5+NQOl1To5jppEa8RCK1HAkRNfhdUGLg= github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6/go.mod h1:/8XZuwUVFOGUkn31kglW28Xie5TrM7COtzRMA3GixaA= github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= @@ -498,6 +548,8 @@ github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/spf13/afero v1.12.0 h1:UcOPyRBYczmFn6yvphxkn9ZEOY65cpwGKb5mL36mrqs= github.com/spf13/afero v1.12.0/go.mod h1:ZTlWwG4/ahT8W7T0WQ5uYmjI9duaLQGy3Q2OAl4sk/4= github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= @@ -537,6 +589,7 @@ github.com/tidwall/match v1.1.1/go.mod h1:eRSPERbgtNPcGhD8UCthc6PmLEQXEWd3PRB5JT github.com/tidwall/pretty v1.2.0/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= github.com/tidwall/pretty v1.2.1 h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4= github.com/tidwall/pretty v1.2.1/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= @@ -549,6 +602,26 @@ github.com/twmb/franz-go/pkg/kmsg v1.11.2 h1:hIw75FpwcAjgeyfIGFqivAvwC5uNIOWRGvQ github.com/twmb/franz-go/pkg/kmsg v1.11.2/go.mod h1:CFfkkLysDNmukPYhGzuUcDtf46gQSqCZHMW1T4Z+wDE= github.com/twmb/franz-go/pkg/sr v1.4.1-0.20250620172413-c17130ef7765 h1:+l/P3ExNaY1T5Tft/+zK5r7hiEilgHWS5Cjjh2iZ4ME= github.com/twmb/franz-go/pkg/sr v1.4.1-0.20250620172413-c17130ef7765/go.mod h1:O4o4mUMNfmyEt2HcuM+qZdc6KrcStvjgxWR6Cfvmukw= +======= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +github.com/twmb/franz-go v1.7.0/go.mod h1:PMze0jNfNghhih2XHbkmTFykbMF5sJqmNJB31DOOzro= +github.com/twmb/franz-go v1.20.4 h1:1wTvyLTOxS0oJh5ro/DVt2JHVdx7/kGNtmtFhbcr0O0= +github.com/twmb/franz-go v1.20.4/go.mod h1:YCnepDd4gl6vdzG03I5Wa57RnCTIC6DVEyMpDX/J8UA= +github.com/twmb/franz-go/pkg/kadm v1.17.1 h1:Bt02Y/RLgnFO2NP2HVP1kd2TFtGRiJZx+fSArjZDtpw= +github.com/twmb/franz-go/pkg/kadm v1.17.1/go.mod h1:s4duQmrDbloVW9QTMXhs6mViTepze7JLG43xwPcAeTg= +github.com/twmb/franz-go/pkg/kmsg v1.2.0/go.mod h1:SxG/xJKhgPu25SamAq0rrucfp7lbzCpEXOC+vH/ELrY= +github.com/twmb/franz-go/pkg/kmsg v1.12.0 h1:CbatD7ers1KzDNgJqPbKOq0Bz/WLBdsTH75wgzeVaPc= +github.com/twmb/franz-go/pkg/kmsg v1.12.0/go.mod h1:+DPt4NC8RmI6hqb8G09+3giKObE6uD2Eya6CfqBpeJY= +github.com/twmb/franz-go/pkg/sasl/kerberos v1.1.0 h1:alKdbddkPw3rDh+AwmUEwh6HNYgTvDSFIe/GWYRR9RM= +github.com/twmb/franz-go/pkg/sasl/kerberos v1.1.0/go.mod h1:k8BoBjyUbFj34f0rRbn+Ky12sZFAPbmShrg0karAIMo= +github.com/twmb/franz-go/pkg/sr v1.5.0 h1:KQH8veHxKyAjT4U4/rziJnSEfafuluznLoxhrp0yJfo= +github.com/twmb/franz-go/pkg/sr v1.5.0/go.mod h1:O4o4mUMNfmyEt2HcuM+qZdc6KrcStvjgxWR6Cfvmukw= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/twmb/tlscfg v1.2.1 h1:IU2efmP9utQEIV2fufpZjPq7xgcZK4qu25viD51BB44= github.com/twmb/tlscfg v1.2.1/go.mod h1:GameEQddljI+8Es373JfQEBvtI4dCTLKWGJbqT2kErs= github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 h1:JwtAtbp7r/7QSyGz8mKUbYJBg2+6Cd7OjM8o/GNOcVo= @@ -557,6 +630,8 @@ github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/ github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= @@ -564,8 +639,27 @@ github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9dec github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 h1:RyrtJzu5MAmIcbRrwg75b+w3RlZCP0vJByDVzcpAe3M= go.opentelemetry.io/contrib/bridges/prometheus v0.61.0/go.mod h1:tirr4p9NXbzjlbruiRGp53IzlYrDk5CO2fdHj0sSSaY= go.opentelemetry.io/contrib/exporters/autoexport v0.57.0 h1:jmTVJ86dP60C01K3slFQa2NQ/Aoi7zA+wy7vMOKD9H4= @@ -712,6 +806,8 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= @@ -740,8 +836,15 @@ k8s.io/component-base v0.33.3 h1:mlAuyJqyPlKZM7FyaoM/LcunZaaY353RXiOd2+B5tGA= k8s.io/component-base v0.33.3/go.mod h1:ktBVsBzkI3imDuxYXmVxZ2zxJnYTZ4HAsVj9iF09qp4= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUyGcf03XZEP0ZIKgKj35LS4= k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8= +======= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 h1:r/phHvH1iU7gO/l7tTjQk2K01ER7/OAJi8uFHHyWSac= k8s.io/kubectl v0.33.3/go.mod h1:euj2bG56L6kUGOE/ckZbCoudPwuj4Kud7BR0GzyNiT0= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg= diff --git a/go.work.sum b/go.work.sum index 3f3fed8f6..e0a3b6bdf 100644 --- a/go.work.sum +++ b/go.work.sum @@ -583,8 +583,6 @@ github.com/Microsoft/hcsshim v0.12.3/go.mod h1:Iyl1WVpZzr+UkzjekHZbV8o5Z9ZkxNGx6 github.com/Microsoft/hcsshim/test v0.0.0-20201218223536-d3e5debf77da/go.mod h1:5hlzMzRKMLyo42nCZ9oml8AdTlq/0cvIaBv6tK1RehU= github.com/Microsoft/hcsshim/test v0.0.0-20210227013316-43a75bb4edd3/go.mod h1:mw7qgWloBUl75W/gVH3cQszUg1+gUITj7D6NY7ywVnY= github.com/NYTimes/gziphandler v0.0.0-20170623195520-56545f4a5d46/go.mod h1:3wb06e3pkSAbeQ52E9H9iFoQsEEwGN64994WTCIhntQ= -github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= -github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU= github.com/OneOfOne/xxhash v1.2.8/go.mod h1:eZbhyaAYD41SGSSsnmcpxVoRiQ/MPUTjUdIIOT9Um7Q= github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c h1:kMFnB0vCcX7IL/m9Y5LO+KQYv+t1CQOiFe6+SV2J7bE= @@ -899,8 +897,6 @@ github.com/coreos/go-oidc v2.1.0+incompatible/go.mod h1:CgnwVTmzoESiwO9qyAFEMiHo github.com/coreos/go-oidc v2.3.0+incompatible h1:+5vEsrgprdLjjQ9FzIKAzQz1wwPD+83hQRfUIPh7rO0= github.com/coreos/go-oidc v2.3.0+incompatible/go.mod h1:CgnwVTmzoESiwO9qyAFEMiHoZ1nMCKZlZ9V6mm3/LKc= github.com/coreos/go-semver v0.2.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk= -github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= -github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= github.com/coreos/go-systemd v0.0.0-20161114122254-48702e0da86b/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4= github.com/coreos/go-systemd v0.0.0-20180511133405-39ca1b05acc7/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4= github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e/go.mod h1:F5haX7vjVVG0kc13fIWeqUViNPyEJxv/OmvnBo0Yme4= @@ -991,8 +987,12 @@ github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3 github.com/dop251/goja v0.0.0-20231027120936-b396bb4c349d h1:wi6jN5LVt/ljaBG4ue79Ekzb12QfJ52L9Q98tl8SWhw= github.com/dop251/goja v0.0.0-20231027120936-b396bb4c349d/go.mod h1:QMWlm50DNe14hD7t24KEqZuUdC9sOTy8W6XbCU1mlw4= github.com/dustin/go-humanize v0.0.0-20171111073723-bb3d318650d4/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk= +<<<<<<< HEAD github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +======= +github.com/ebitengine/purego v0.8.2/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/eknkc/amber v0.0.0-20171010120322-cdade1c07385 h1:clC1lXBpe2kTj2VHdaIu9ajZQe4kcEY9j0NsnDDBZ3o= github.com/eknkc/amber v0.0.0-20171010120322-cdade1c07385/go.mod h1:0vRUJqYpeSZifjYj7uP3BG/gKcuzL9xWVV/Y+cK33KM= github.com/elazarl/goproxy v0.0.0-20180725130230-947c36da3153/go.mod h1:/Zj4wYkgs4iZTTu3o/KG3Itv/qCCa8VVMlb3i9OVuzc= @@ -1308,9 +1308,11 @@ github.com/gowebpki/jcs v1.0.1/go.mod h1:CID1cNZ+sHp1CCpAR8mPf6QRtagFBgPJE0FCUQ6 github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= github.com/grpc-ecosystem/go-grpc-middleware v1.0.0/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs= github.com/grpc-ecosystem/go-grpc-middleware v1.0.1-0.20190118093823-f849b5445de4/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs= -github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= github.com/grpc-ecosystem/go-grpc-middleware v1.3.0/go.mod h1:z0ButlSOZa5vEBq9m2m2hlwIgKw+rp3sdCBRoJY+30Y= +<<<<<<< HEAD github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/grpc-ecosystem/grpc-gateway v1.9.0/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY= github.com/grpc-ecosystem/grpc-gateway v1.9.5/go.mod h1:vNeuVxBJEsws4ogUvrchl83t/GYV9WGTSLVdBhOQFDY= github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0/go.mod h1:hgWBS7lorOAVIJEQMi4ZsPv9hVvWI6+ch50m39Pf2Ks= @@ -1741,6 +1743,18 @@ github.com/prometheus/tsdb v0.7.1/go.mod h1:qhTCs0VvXwvX/y3TZrWD7rabWM+ijKTux40T github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4= github.com/redis/go-redis/v9 v9.0.5/go.mod h1:WqMKv5vnQbRuZstUwxQI195wHy+t4PuXDOjzMvcuQHk= github.com/redis/go-redis/v9 v9.6.1/go.mod h1:0C0c6ycQsdpVNQpxb1njEQIqkx5UcsM8FJCQLgE9+RA= +<<<<<<< HEAD +======= +github.com/redpanda-data/benthos/v4 v4.53.0 h1:+4Uujp/Xm5OsjoM0bfVb27C7LEs1c1dJg25lPX/o3fY= +github.com/redpanda-data/benthos/v4 v4.53.0/go.mod h1:IdD1fNqmx2BIqPp/Xdo4D7DrotjcvQ3V1PyZuXluFN4= +github.com/redpanda-data/benthos/v4 v4.56.0 h1:vuPHR1Pf1sNK2Ng7W6ALeY+m/vCgGH9fLYXanRytNsk= +github.com/redpanda-data/benthos/v4 v4.56.0/go.mod h1:NQBR+ek5JR3QICSV9S3UNcj9z/0Mww2+/1JkKt/3Ino= +github.com/redpanda-data/common-go/api v0.0.0-20250701102610-07660e078862 h1:eTXCixbVQLUD6g3Iq4JrfWkr+ObPti92mXKAmCpUSf0= +github.com/redpanda-data/common-go/api v0.0.0-20250701102610-07660e078862/go.mod h1:klAmWfc8Q3hEZk8geFTMu6f2sk3VUKRS7cv/LvB05ig= +github.com/redpanda-data/common-go/api v0.0.0-20251118002524-720a3c2f5569 h1:BEoWWptXOLTozgptV9jUd2CJDFy9+R0dmdGv9Gr32dw= +github.com/redpanda-data/common-go/api v0.0.0-20251118002524-720a3c2f5569/go.mod h1:klAmWfc8Q3hEZk8geFTMu6f2sk3VUKRS7cv/LvB05ig= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/common-go/proto v0.0.0-20250422172326-6a3bcb14b829 h1:fx1Z+t/fa0vd7kAblgCrdYRW3QHc3svYiVnO1DadS94= github.com/redpanda-data/common-go/proto v0.0.0-20250422172326-6a3bcb14b829/go.mod h1:6WXvgZCZIkbQCNsvU5zTx/+ub5eXTuCcl90i5xkhMw0= github.com/redpanda-data/common-go/rpadmin v0.1.14-0.20250425125657-8ab73f3ad62e/go.mod h1:zgE/M2UihQZRdivHfbm4x9Rb3Vm/crO5kiX3GQrxhG4= @@ -1807,8 +1821,6 @@ github.com/smartystreets/assertions v0.0.0-20180927180507-b2de0cb4f26d/go.mod h1 github.com/smartystreets/goconvey v0.0.0-20190330032615-68dc04aab96a/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA= github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA= github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM= -github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= -github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/sosodev/duration v1.2.0 h1:pqK/FLSjsAADWY74SyWDCjOcd5l7H8GSnnOGEB9A1Us= github.com/sosodev/duration v1.2.0/go.mod h1:RQIBBX0+fMLc/D9+Jb/fwvVmo0eZvDDEERAikUR6SDg= github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA= @@ -1874,8 +1886,6 @@ github.com/tklauser/numcpus v0.8.0/go.mod h1:ZJZlAY+dmR4eut8epnzf0u/VwodKmryxR8t github.com/tmc/grpc-websocket-proxy v0.0.0-20170815181823-89b8d40f7ca8/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U= github.com/tmc/grpc-websocket-proxy v0.0.0-20190109142713-0ad062ec5ee5/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U= github.com/tmc/grpc-websocket-proxy v0.0.0-20201229170055-e5319fda7802/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U= -github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= -github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= github.com/tv42/httpunix v0.0.0-20191220191345-2ba4b9c3382c/go.mod h1:hzIxponao9Kjc7aWznkXaL4U4TWaDSs8zcsY4Ka08nM= github.com/twmb/franz-go v1.18.0/go.mod h1:zXCGy74M0p5FbXsLeASdyvfLFsBvTubVqctIaa5wQ+I= github.com/twmb/franz-go v1.18.1/go.mod h1:Uzo77TarcLTUZeLuGq+9lNpSkfZI+JErv7YJhlDjs9M= @@ -1946,8 +1956,6 @@ github.com/xhit/go-str2duration v1.2.0/go.mod h1:3cPSlfZlUHVlneIVfePFWcJZsuwf+P1 github.com/xhit/go-str2duration/v2 v2.1.0 h1:lxklc02Drh6ynqX+DdPyp5pCKLUQpRT8bp8Ydu2Bstc= github.com/xhit/go-str2duration/v2 v2.1.0/go.mod h1:ohY8p+0f07DiV6Em5LKB0s2YpLtXVyJfNt1+BlmyAsU= github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= -github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= -github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xordataexchange/crypt v0.0.3-0.20170626215501-b2862e3d0a77/go.mod h1:aYKd//L2LvnjZzWKhF00oedf4jCCReLcmhLdhm1A27Q= github.com/yashtewari/glob-intersection v0.1.0/go.mod h1:LK7pIC3piUjovexikBbJ26Yml7g8xa5bsjfx2v1fwok= github.com/yosida95/uritemplate/v3 v3.0.2 h1:Ed3Oyj9yrmi9087+NczuL5BwkIc4wvTb5zIM+UJPGz4= @@ -2800,6 +2808,14 @@ google.golang.org/protobuf v1.36.2/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojt google.golang.org/protobuf v1.36.3/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE= google.golang.org/protobuf v1.36.4/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE= google.golang.org/protobuf v1.36.5/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE= +<<<<<<< HEAD +======= +google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY= +google.golang.org/protobuf v1.36.7/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY= +google.golang.org/protobuf v1.36.8/go.mod h1:fuxRtAxBytpl4zzqUh6/eyUujkJdNiuEkXntxiD/uRU= +google.golang.org/protobuf v1.36.9/go.mod h1:fuxRtAxBytpl4zzqUh6/eyUujkJdNiuEkXntxiD/uRU= +google.golang.org/protobuf v1.36.10/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/airbrake/gobrake.v2 v2.0.9/go.mod h1:/h5ZAUhDkGaJfjzjKLSjv6zCL6O0LLBxU4K+aSYdM/U= gopkg.in/alecthomas/kingpin.v1 v1.3.7/go.mod h1:vs0oy7ub8knYaut5kITUTmx/WeE4xRuEeOR34yEAWEA= gopkg.in/alecthomas/kingpin.v2 v2.2.6 h1:jMFz6MfLP0/4fUyZle81rXUoxOBFi19VUFKVDOQfozc= @@ -2822,8 +2838,6 @@ gopkg.in/ini.v1 v1.67.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k= gopkg.in/linkedin/goavro.v1 v1.0.5 h1:BJa69CDh0awSsLUmZ9+BowBdokpduDZSM9Zk8oKHfN4= gopkg.in/linkedin/goavro.v1 v1.0.5/go.mod h1:Aw5GdAbizjOEl0kAMHV9iHmA8reZzW/OKuJAl4Hb9F0= gopkg.in/natefinch/lumberjack.v2 v2.0.0/go.mod h1:l0ndWWf7gzL7RNwBG7wST/UCcT4T24xpD6X8LsfU/+k= -gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= -gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= gopkg.in/resty.v1 v1.12.0/go.mod h1:mDo4pnntr5jdWRML875a/NmxYqAlA73dVijT2AXvQQo= gopkg.in/square/go-jose.v2 v2.2.2/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI= gopkg.in/square/go-jose.v2 v2.3.1 h1:SK5KegNXmKmqE342YYN2qPHEnUYeoMiXXl1poUlI+o4= diff --git a/gotohelm/go.mod b/gotohelm/go.mod index c8eb94fa4..1ded786d9 100644 --- a/gotohelm/go.mod +++ b/gotohelm/go.mod @@ -10,6 +10,10 @@ require ( github.com/gonvenience/ytbx v1.4.4 github.com/homeport/dyff v1.7.1 github.com/imdario/mergo v0.3.16 +<<<<<<< HEAD +======= + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 github.com/stretchr/testify v1.10.0 golang.org/x/exp v0.0.0-20250207012021-f9890c6ad9f3 @@ -27,6 +31,7 @@ require ( ) require ( + cel.dev/expr v0.24.0 // indirect dario.cat/mergo v1.0.2 // indirect github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 // indirect github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect @@ -34,10 +39,17 @@ require ( github.com/MakeNowJust/heredoc v1.0.0 // indirect github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/squirrel v1.5.4 // indirect + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect github.com/bahlo/generic-list-go v0.2.0 // indirect github.com/blang/semver/v4 v4.0.0 // indirect github.com/buger/jsonparser v1.1.1 // indirect +<<<<<<< HEAD +======= + github.com/cenkalti/backoff/v5 v5.0.3 // indirect + github.com/cespare/xxhash/v2 v2.3.0 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/chai2010/gettext-go v1.0.2 // indirect github.com/cockroachdb/logtags v0.0.0-20230118201751-21c54148d20b // indirect github.com/cockroachdb/redact v1.1.5 // indirect @@ -45,6 +57,8 @@ require ( github.com/containerd/errdefs v1.0.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/emicklei/go-restful/v3 v3.12.2 // indirect @@ -52,6 +66,7 @@ require ( github.com/evanphx/json-patch/v5 v5.9.11 // indirect github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect github.com/fatih/color v1.18.0 // indirect +<<<<<<< HEAD github.com/fsnotify/fsnotify v1.9.0 // indirect github.com/fxamacker/cbor/v2 v2.8.0 // indirect github.com/getsentry/sentry-go v0.27.0 // indirect @@ -59,23 +74,43 @@ require ( github.com/go-gorp/gorp/v3 v3.1.0 // indirect github.com/go-logr/logr v1.4.2 // indirect github.com/go-openapi/jsonpointer v0.21.1 // indirect +======= + github.com/felixge/httpsnoop v1.0.4 // indirect + github.com/fsnotify/fsnotify v1.9.0 // indirect + github.com/fxamacker/cbor/v2 v2.9.0 // indirect + github.com/getsentry/sentry-go v0.27.0 // indirect + github.com/go-errors/errors v1.5.1 // indirect + github.com/go-gorp/gorp/v3 v3.1.0 // indirect + github.com/go-logr/logr v1.4.3 // indirect + github.com/go-logr/stdr v1.2.2 // indirect + github.com/go-openapi/jsonpointer v0.22.3 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/go-openapi/jsonreference v0.21.0 // indirect github.com/go-openapi/swag v0.23.1 // indirect github.com/gobwas/glob v0.2.3 // indirect github.com/gogo/protobuf v1.3.2 // indirect + github.com/golang-jwt/jwt/v5 v5.3.0 // indirect + github.com/golang/protobuf v1.5.4 // indirect github.com/gonvenience/bunt v1.3.5 // indirect github.com/gonvenience/neat v1.3.13 // indirect github.com/gonvenience/term v1.0.2 // indirect github.com/gonvenience/text v1.0.7 // indirect github.com/gonvenience/wrap v1.2.0 // indirect github.com/google/btree v1.1.3 // indirect +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 // indirect +======= + github.com/google/cel-go v0.26.1 // indirect + github.com/google/gnostic-models v0.7.0 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/go-cmp v0.7.0 // indirect github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect github.com/google/uuid v1.6.0 // indirect github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect github.com/gosuri/uitable v0.0.4 // indirect github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect @@ -88,6 +123,7 @@ require ( github.com/klauspost/compress v1.18.0 // indirect github.com/kr/pretty v0.3.1 // indirect github.com/kr/text v0.2.0 // indirect + github.com/kylelemons/godebug v1.1.0 // indirect github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect github.com/lib/pq v1.10.9 // indirect @@ -132,14 +168,23 @@ require ( github.com/spf13/cast v1.7.0 // indirect github.com/spf13/cobra v1.9.1 // indirect github.com/spf13/pflag v1.0.7 // indirect +<<<<<<< HEAD github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0 // indirect +======= + github.com/stoewer/go-strcase v1.3.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/texttheater/golang-levenshtein v1.0.1 // indirect github.com/tklauser/numcpus v0.9.0 // indirect github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 // indirect github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect github.com/x448/float16 v0.8.4 // indirect github.com/xlab/treeprint v1.2.0 // indirect + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 // indirect +<<<<<<< HEAD go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect go.opentelemetry.io/otel v1.36.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.11.0 // indirect @@ -167,17 +212,59 @@ require ( google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237 // indirect google.golang.org/grpc v1.72.1 // indirect google.golang.org/protobuf v1.36.6 // indirect +======= + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect + go.opentelemetry.io/otel v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.11.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.11.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.36.0 // indirect + go.opentelemetry.io/otel/metric v1.38.0 // indirect + go.opentelemetry.io/otel/sdk v1.38.0 // indirect + go.opentelemetry.io/otel/sdk/log v0.14.0 // indirect + go.opentelemetry.io/otel/trace v1.38.0 // indirect + go.opentelemetry.io/proto/otlp v1.7.1 // indirect + go.uber.org/multierr v1.11.0 // indirect + go.uber.org/zap v1.27.1 // indirect + go.yaml.in/yaml/v2 v2.4.3 // indirect + go.yaml.in/yaml/v3 v3.0.4 // indirect + golang.org/x/crypto v0.45.0 // indirect + golang.org/x/mod v0.30.0 // indirect + golang.org/x/net v0.47.0 // indirect + golang.org/x/oauth2 v0.31.0 // indirect + golang.org/x/sync v0.18.0 // indirect + golang.org/x/sys v0.38.0 // indirect + golang.org/x/term v0.37.0 // indirect + golang.org/x/text v0.31.0 // indirect + golang.org/x/time v0.13.0 // indirect + gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/grpc v1.75.1 // indirect + google.golang.org/protobuf v1.36.11 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect k8s.io/apiextensions-apiserver v0.33.3 // indirect k8s.io/apiserver v0.33.3 // indirect k8s.io/cli-runtime v0.33.3 // indirect k8s.io/component-base v0.33.3 // indirect k8s.io/klog/v2 v2.130.1 // indirect +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect +======= + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 // indirect oras.land/oras-go/v2 v2.6.0 // indirect + sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/kustomize/api v0.19.0 // indirect sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect diff --git a/gotohelm/go.sum b/gotohelm/go.sum index e763bded6..c3b7a3e34 100644 --- a/gotohelm/go.sum +++ b/gotohelm/go.sum @@ -1,3 +1,5 @@ +cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY= +cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw= dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8= dario.cat/mergo v1.0.2/go.mod h1:E/hbnu0NxMFBjpMIE34DRGLWqDy0g5FuKDhCb31ngxA= filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= @@ -22,6 +24,10 @@ github.com/Masterminds/squirrel v1.5.4 h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8 github.com/Masterminds/squirrel v1.5.4/go.mod h1:NNaOrjSoIDfDA40n7sr2tPNZRfjzjA400rg+riTZj10= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= +github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ= +github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so= @@ -60,6 +66,8 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= @@ -94,8 +102,15 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/evanphx/json-patch v5.9.11+incompatible h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8= @@ -122,8 +137,14 @@ github.com/go-errors/errors v1.5.1 h1:ZwEMSLRCapFLflTpT7NKaAc7ukJ8ZPEjzlxt8rPN8b github.com/go-errors/errors v1.5.1/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og= github.com/go-gorp/gorp/v3 v3.1.0 h1:ItKF/Vbuj31dmV4jxA1qblpSwkl9g1typ24xoe70IGs= github.com/go-gorp/gorp/v3 v3.1.0/go.mod h1:dLEjIyyRNiXvNZ8PSmzpt1GsWAUK8kjVhEpjH8TixEw= +<<<<<<< HEAD github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY= github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= +======= +github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= +github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI= +github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= github.com/go-logr/zapr v1.3.0 h1:XGdV8XW8zdwFiwOA2Dryh1gj2KRQyOOoNmBy4EplIcQ= @@ -145,8 +166,11 @@ github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9L github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM= github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y= github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8= +github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= +github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo= +github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= github.com/gonvenience/bunt v1.3.5 h1:wSQquifvwEWtzn27k1ngLfeLaStyt0k1b/K6TrlCNAs= @@ -163,6 +187,7 @@ github.com/gonvenience/ytbx v1.4.4 h1:jQopwyaLsVGuwdxSiN4WkXjsEaFNPJ3V4lUj7eyEpz github.com/gonvenience/ytbx v1.4.4/go.mod h1:w37+MKCPcCMY/jpPNmEklD4xKqrOAVBO6kIWW2+uI6M= github.com/google/btree v1.1.3 h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg= github.com/google/btree v1.1.3/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4= +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 h1:MU/8wDLif2qCXZmzncUQ/BOfxWfthHi63KqpoNbWqVw= github.com/google/gnostic-models v0.6.9/go.mod h1:CiWsm0s6BSQd1hRn8/QmxqB6BesYcbSZxsz9b0KuDBw= github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= @@ -171,6 +196,19 @@ github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db h1:097atOisP2aRj7vFgYQBbFN4U4JNXUNYpxael3UzMyo= github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144= +======= +github.com/google/cel-go v0.26.1 h1:iPbVVEdkhTX++hpe3lzSk7D3G3QSYqLGoHOcEio+UXQ= +github.com/google/cel-go v0.26.1/go.mod h1:A9O8OU9rdvrK5MQyrqfIxo1a0u4g3sF8KB6PUIaryMM= +github.com/google/gnostic-models v0.7.0 h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo= +github.com/google/gnostic-models v0.7.0/go.mod h1:whL5G0m6dmc5cPxKc5bdKdEN3UjI7OUGxBlw57miDrQ= +github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= +github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= +github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0= +github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8 h1:3DsUAV+VNEQa2CUVLxCY3f87278uWfIDhJnbdvDjvmE= +github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8/go.mod h1:I6V7YzU0XDpsHqbsyrghnFZLO1gwK6NPTNvmetQIk9U= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4= github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ= github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= @@ -185,9 +223,21 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY= github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3/go.mod h1:ndYquD05frm2vACXE1nsccT4oJzjhw2arTS2cpUD1PI= +======= +github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= @@ -209,6 +259,8 @@ github.com/invopop/jsonschema v0.12.0 h1:6ovsNSuvn9wEQVOyc72aycBMVQFKz7cPdMJn10C github.com/invopop/jsonschema v0.12.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0= github.com/jmoiron/sqlx v1.4.0 h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o= github.com/jmoiron/sqlx v1.4.0/go.mod h1:ZrZ7UsYB/weZdl2Bxg6jCRO9c3YHl8r3ahlKmRT4JLY= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= @@ -224,6 +276,8 @@ github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= +github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc= +github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw= github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 h1:SOEGU9fKiNWd/HOJuq6+3iTQz8KNCLtVX6idSoTLdUw= github.com/lann/builder v0.0.0-20180802200727-47ae307949d0/go.mod h1:dXGbAdH5GtBTC4WfIxhKZfyBF/HBFgRZSWwZ9g/He9o= github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 h1:P6pPBnrTSX3DEVR4fDembhRWSsG5rVo6hYhAB/ADZrk= @@ -335,6 +389,11 @@ github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ= github.com/redis/go-redis/v9 v9.7.3 h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM= github.com/redis/go-redis/v9 v9.7.3/go.mod h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA= +<<<<<<< HEAD +======= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 h1:rmgno9TNZCX2c81zJGrv2CZjiPURWevNeQ7Lo8fVszk= github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50/go.mod h1:b/GBKIBr3nLE+LAtb8P4b2KrOwL3SGXAF4l65UcF71c= github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= @@ -359,6 +418,8 @@ github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= github.com/spf13/cast v1.7.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo= github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo= @@ -366,7 +427,11 @@ github.com/spf13/cobra v1.9.1/go.mod h1:nDyEzZ8ogv936Cinf6g1RU9MRY64Ir93oCnqb9wx github.com/spf13/pflag v1.0.6/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/pflag v1.0.7 h1:vN6T9TfwStFPFM5XzjsvmzZkLuaLX+HS+0SeFLRgU6M= github.com/spf13/pflag v1.0.7/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= +github.com/stoewer/go-strcase v1.3.1 h1:iS0MdW+kVTxgMoE1LAZyMiYJFKlOzLooE4MxjirtkAs= +github.com/stoewer/go-strcase v1.3.1/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= +github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= +github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY= github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA= github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs= @@ -374,40 +439,87 @@ github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UV github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +<<<<<<< HEAD github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA= github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= +======= +github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= +github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= +github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U= +github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/testcontainers/testcontainers-go v0.39.0 h1:uCUJ5tA+fcxbFAB0uP3pIK3EJ2IjjDUHFSZ1H1UxAts= github.com/testcontainers/testcontainers-go v0.39.0/go.mod h1:qmHpkG7H5uPf/EvOORKvS6EuDkBUPE3zpVGaH9NL7f8= github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0 h1:oZfauL/CPwI+HtFY7twNOmTj0r2laltqQ5o5EeplSOQ= github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0/go.mod h1:mlHF/P+wcE0+qeEsVYfifeXOOkAFhSmtpBJyDvbzhAc= github.com/texttheater/golang-levenshtein v1.0.1 h1:+cRNoVrfiwufQPhoMzB6N0Yf/Mqajr6t1lOv8GyGE2U= github.com/texttheater/golang-levenshtein v1.0.1/go.mod h1:PYAKrbF5sAiq9wd+H82hs7gNaen0CplQ9uvm6+enD/8= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= github.com/tklauser/numcpus v0.9.0/go.mod h1:SN6Nq1O3VychhC1npsWostA+oW+VOQTxZrS604NSRyI= +======= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 h1:JwtAtbp7r/7QSyGz8mKUbYJBg2+6Cd7OjM8o/GNOcVo= github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74/go.mod h1:RmMWU37GKR2s6pgrIEB4ixgpVCt/cf7dnJv3fuH1J1c= github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/fJgbpc= github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 h1:RyrtJzu5MAmIcbRrwg75b+w3RlZCP0vJByDVzcpAe3M= go.opentelemetry.io/contrib/bridges/prometheus v0.61.0/go.mod h1:tirr4p9NXbzjlbruiRGp53IzlYrDk5CO2fdHj0sSSaY= go.opentelemetry.io/contrib/exporters/autoexport v0.57.0 h1:jmTVJ86dP60C01K3slFQa2NQ/Aoi7zA+wy7vMOKD9H4= go.opentelemetry.io/contrib/exporters/autoexport v0.57.0/go.mod h1:EJBheUMttD/lABFyLXhce47Wr6DPWYReCzaZiXadH7g= +<<<<<<< HEAD go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 h1:CV7UdSGJt/Ao6Gp4CXckLxVRRsRgDHoI8XjbL3PDl8s= go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0/go.mod h1:FRmFuRJfag1IZ2dPkHnEoSFVgTVPUd2qf5Vi69hLb8I= go.opentelemetry.io/otel v1.36.0 h1:UumtzIklRBY6cI/lllNZlALOF5nNIzJVb16APdvgTXg= go.opentelemetry.io/otel v1.36.0/go.mod h1:/TcFMXYjyRNh8khOAO9ybYkqaDBb/70aVwkNML4pP8E= +======= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 h1:q4XOmH/0opmeuJtPsbFNivyl7bCt7yRBbeEm2sC/XtQ= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0/go.mod h1:snMWehoOh2wsEwnvvwtDyFCxVeDAODenXHtn5vzrKjo= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0/go.mod h1:h06DGIukJOevXaj/xrNjhi/2098RZzcLTbc0jDAUbsg= +go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8= +go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.11.0 h1:HMUytBT3uGhPKYY/u/G5MR9itrlSO2SMOsSD3Tk3k7A= go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.11.0/go.mod h1:hdDXsiNLmdW/9BF2jQpnHHlhFajpWCEYfM6e5m2OAZg= go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.11.0 h1:C/Wi2F8wEmbxJ9Kuzw/nhP+Z9XaHYMkyDmXy6yR2cjw= @@ -506,6 +618,7 @@ golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8T golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0= gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY= +<<<<<<< HEAD google.golang.org/genproto v0.0.0-20240123012728-ef4313101c80 h1:KAeGQVN3M9nD0/bQXnr/ClcEMJ968gUXJQ9pwfSynuQ= google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237 h1:Kog3KlB4xevJlAcbbbzPfRG0+X9fdoGM+UBRKVz6Wr0= google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237/go.mod h1:ezi0AVyMKDWy5xAncvjLWH7UcLBB5n7y2fQ8MzjJcto= @@ -515,6 +628,18 @@ google.golang.org/grpc v1.72.1 h1:HR03wO6eyZ7lknl75XlxABNVLLFc2PAb6mHlYh756mA= google.golang.org/grpc v1.72.1/go.mod h1:wH5Aktxcg25y1I3w7H69nHfXdOG3UiadoBtjh3izSDM= google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY= google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY= +======= +gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk= +gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba h1:B14OtaXuMaCQsl2deSvNkyPKIzq3BjfxQp8d00QyWx4= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:G5IanEx8/PgI9w6CFcYQf7jMtHQhZruvfM1i3qOqk5U= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba h1:UKgtfRM7Yh93Sya0Fo8ZzhDP4qBckrrxEr2oF5UIVb8= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk= +google.golang.org/grpc v1.75.1 h1:/ODCNEuf9VghjgO3rqLcfg8fiOP0nSluljWFlDxELLI= +google.golang.org/grpc v1.75.1/go.mod h1:JtPAzKiq4v1xcAB2hydNlWI2RnF85XXcV0mhKXr2ecQ= +google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= +google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= @@ -523,6 +648,8 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= @@ -549,8 +676,15 @@ k8s.io/component-base v0.33.3 h1:mlAuyJqyPlKZM7FyaoM/LcunZaaY353RXiOd2+B5tGA= k8s.io/component-base v0.33.3/go.mod h1:ktBVsBzkI3imDuxYXmVxZ2zxJnYTZ4HAsVj9iF09qp4= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUyGcf03XZEP0ZIKgKj35LS4= k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8= +======= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 h1:r/phHvH1iU7gO/l7tTjQk2K01ER7/OAJi8uFHHyWSac= k8s.io/kubectl v0.33.3/go.mod h1:euj2bG56L6kUGOE/ckZbCoudPwuj4Kud7BR0GzyNiT0= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg= @@ -559,8 +693,17 @@ oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc= oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o= pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw= pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04= +<<<<<<< HEAD sigs.k8s.io/controller-runtime v0.20.4 h1:X3c+Odnxz+iPTRobG4tp092+CvBU9UK0t/bRf+n0DGU= sigs.k8s.io/controller-runtime v0.20.4/go.mod h1:xg2XB0K5ShQzAgsoujxuKN4LNXR2LfwwHsPj7Iaw+XY= +======= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 h1:jpcvIRr3GLoUoEKRkHKSmGjxb6lWwrBlJsXc+eUYQHM= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw= +sigs.k8s.io/controller-runtime v0.22.4 h1:GEjV7KV3TY8e+tJ2LCTxUTanW4z/FmNB7l327UfMq9A= +sigs.k8s.io/controller-runtime v0.22.4/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8= +sigs.k8s.io/gateway-api v1.1.0 h1:DsLDXCi6jR+Xz8/xd0Z1PYl2Pn0TyaFMOPPZIj4inDM= +sigs.k8s.io/gateway-api v1.1.0/go.mod h1:ZH4lHrL2sDi0FHZ9jjneb8kKnGzFWyrTya35sWUTrRs= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE= sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg= sigs.k8s.io/kustomize/api v0.19.0 h1:F+2HB2mU1MSiR9Hp1NEgoU2q9ItNOaBJl0I4Dlus5SQ= diff --git a/gotohelm/testdata/src/example/go.mod b/gotohelm/testdata/src/example/go.mod index 3d84a2104..6b6939bc0 100644 --- a/gotohelm/testdata/src/example/go.mod +++ b/gotohelm/testdata/src/example/go.mod @@ -3,6 +3,10 @@ module example.com/example go 1.24.3 require ( +<<<<<<< HEAD +======= + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda-operator/gotohelm v0.0.0-00010101000000-000000000000 github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 golang.org/x/exp v0.0.0-20250207012021-f9890c6ad9f3 @@ -12,40 +16,70 @@ require ( ) require ( + cel.dev/expr v0.24.0 // indirect dario.cat/mergo v1.0.2 // indirect github.com/Masterminds/goutils v1.1.1 // indirect github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/sprig/v3 v3.3.0 // indirect + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect github.com/bahlo/generic-list-go v0.2.0 // indirect + github.com/beorn7/perks v1.0.1 // indirect + github.com/blang/semver/v4 v4.0.0 // indirect github.com/buger/jsonparser v1.1.1 // indirect + github.com/cenkalti/backoff/v5 v5.0.3 // indirect + github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/cockroachdb/errors v1.11.3 // indirect github.com/cockroachdb/logtags v0.0.0-20230118201751-21c54148d20b // indirect github.com/cockroachdb/redact v1.1.5 // indirect + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/docker/docker v28.3.3+incompatible // indirect github.com/docker/go-connections v0.6.0 // indirect github.com/emicklei/go-restful/v3 v3.12.2 // indirect github.com/evanphx/json-patch/v5 v5.9.11 // indirect +<<<<<<< HEAD github.com/fxamacker/cbor/v2 v2.8.0 // indirect github.com/getsentry/sentry-go v0.27.0 // indirect github.com/go-logr/logr v1.4.2 // indirect github.com/go-openapi/jsonpointer v0.21.1 // indirect +======= + github.com/felixge/httpsnoop v1.0.4 // indirect + github.com/fsnotify/fsnotify v1.9.0 // indirect + github.com/fxamacker/cbor/v2 v2.9.0 // indirect + github.com/getsentry/sentry-go v0.27.0 // indirect + github.com/go-logr/logr v1.4.3 // indirect + github.com/go-logr/stdr v1.2.2 // indirect + github.com/go-openapi/jsonpointer v0.22.3 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/go-openapi/jsonreference v0.21.0 // indirect github.com/go-openapi/swag v0.23.1 // indirect github.com/go-viper/mapstructure/v2 v2.4.0 // indirect github.com/gogo/protobuf v1.3.2 // indirect +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 // indirect +======= + github.com/golang/protobuf v1.5.4 // indirect + github.com/google/btree v1.1.3 // indirect + github.com/google/cel-go v0.26.1 // indirect + github.com/google/gnostic-models v0.7.0 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/go-cmp v0.7.0 // indirect github.com/google/uuid v1.6.0 // indirect github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect github.com/huandu/xstrings v1.5.0 // indirect github.com/imdario/mergo v0.3.16 // indirect + github.com/inconshreveable/mousetrap v1.1.0 // indirect github.com/invopop/jsonschema v0.12.0 // indirect github.com/josharian/intern v1.0.0 // indirect github.com/json-iterator/go v1.1.12 // indirect github.com/kr/pretty v0.3.1 // indirect github.com/kr/text v0.2.0 // indirect + github.com/kylelemons/godebug v1.1.0 // indirect github.com/lucasjones/reggen v0.0.0-20200904144131-37ba4fa293bb // indirect github.com/mailru/easyjson v0.9.0 // indirect github.com/mitchellh/copystructure v1.2.0 // indirect @@ -56,12 +90,24 @@ require ( github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect github.com/pkg/errors v0.9.1 // indirect +<<<<<<< HEAD github.com/rogpeppe/go-internal v1.13.1 // indirect +======= + github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect + github.com/prometheus/client_golang v1.23.2 // indirect + github.com/prometheus/client_model v0.6.2 // indirect + github.com/prometheus/common v0.66.1 // indirect + github.com/prometheus/procfs v0.17.0 // indirect + github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 // indirect + github.com/rogpeppe/go-internal v1.14.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 // indirect github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect github.com/shopspring/decimal v1.4.0 // indirect github.com/spf13/cast v1.7.0 // indirect + github.com/spf13/cobra v1.9.1 // indirect github.com/spf13/pflag v1.0.7 // indirect +<<<<<<< HEAD github.com/testcontainers/testcontainers-go v0.39.0 // indirect github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect github.com/x448/float16 v0.8.4 // indirect @@ -74,14 +120,63 @@ require ( golang.org/x/text v0.27.0 // indirect golang.org/x/time v0.11.0 // indirect google.golang.org/protobuf v1.36.6 // indirect +======= + github.com/stoewer/go-strcase v1.3.1 // indirect + github.com/wk8/go-ordered-map/v2 v2.1.8 // indirect + github.com/x448/float16 v0.8.4 // indirect + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect + go.opentelemetry.io/otel v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect + go.opentelemetry.io/otel/metric v1.38.0 // indirect + go.opentelemetry.io/otel/sdk v1.38.0 // indirect + go.opentelemetry.io/otel/trace v1.38.0 // indirect + go.opentelemetry.io/proto/otlp v1.7.1 // indirect + go.uber.org/multierr v1.11.0 // indirect + go.uber.org/zap v1.27.1 // indirect + go.yaml.in/yaml/v2 v2.4.3 // indirect + go.yaml.in/yaml/v3 v3.0.4 // indirect + golang.org/x/crypto v0.45.0 // indirect + golang.org/x/net v0.47.0 // indirect + golang.org/x/oauth2 v0.31.0 // indirect + golang.org/x/sync v0.18.0 // indirect + golang.org/x/sys v0.38.0 // indirect + golang.org/x/term v0.37.0 // indirect + golang.org/x/text v0.31.0 // indirect + golang.org/x/time v0.13.0 // indirect + gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/grpc v1.75.1 // indirect + google.golang.org/protobuf v1.36.11 // indirect + gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/inf.v0 v0.9.1 // indirect + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect helm.sh/helm/v3 v3.18.5 // indirect +<<<<<<< HEAD k8s.io/apiextensions-apiserver v0.33.3 // indirect k8s.io/client-go v0.33.3 // indirect k8s.io/klog/v2 v2.130.1 // indirect k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect sigs.k8s.io/controller-runtime v0.20.4 // indirect +======= + k8s.io/apiextensions-apiserver v0.34.1 // indirect + k8s.io/apiserver v0.34.1 // indirect + k8s.io/client-go v0.34.1 // indirect + k8s.io/component-base v0.34.1 // indirect + k8s.io/klog/v2 v2.130.1 // indirect + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect + sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect + sigs.k8s.io/controller-runtime v0.22.4 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/randfill v1.0.0 // indirect sigs.k8s.io/structured-merge-diff/v4 v4.7.0 // indirect diff --git a/gotohelm/testdata/src/example/go.sum b/gotohelm/testdata/src/example/go.sum index 1ed2cbc41..0a44d64a1 100644 --- a/gotohelm/testdata/src/example/go.sum +++ b/gotohelm/testdata/src/example/go.sum @@ -1,3 +1,5 @@ +cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY= +cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw= dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8= dario.cat/mergo v1.0.2/go.mod h1:E/hbnu0NxMFBjpMIE34DRGLWqDy0g5FuKDhCb31ngxA= github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 h1:He8afgbRMd7mFxO99hRNu+6tazq8nFF9lIwo9JFroBk= @@ -12,14 +14,34 @@ github.com/Masterminds/sprig/v3 v3.3.0 h1:mQh0Yrg1XPo6vjYXgtf5OtijNAKJRNcTdOOGZe github.com/Masterminds/sprig/v3 v3.3.0/go.mod h1:Zy1iXRYNqNLUolqCpL4uhk6SHUMAOSCzdgBfDb35Lz0= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= +github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ= +github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs= github.com/bahlo/generic-list-go v0.2.0 h1:5sz/EEAK+ls5wF+NeqDpk5+iNdMDXrh3z3nPnH1Wvgk= github.com/bahlo/generic-list-go v0.2.0/go.mod h1:2KvAjgMlE5NNynlg/5iLrrCCZ2+5xWbdbCW3pNTGyYg= +<<<<<<< HEAD +======= +github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM= +github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw= +github.com/blang/semver/v4 v4.0.0 h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM= +github.com/blang/semver/v4 v4.0.0/go.mod h1:IbckMUScFkM3pff0VJDNKRiT6TG/YpiHIM2yvyW5YoQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/buger/jsonparser v1.1.1 h1:2PnMjfWD7wBILjqQbt530v576A/cAbQvEW9gGIpYMUs= github.com/buger/jsonparser v1.1.1/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0= github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8= github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE= +<<<<<<< HEAD +======= +github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM= +github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw= +github.com/cert-manager/cert-manager v1.14.5 h1:uuM1O2g2S80nxiH3eW2cZYMGiL2zmDFVdAzg8sibWuc= +github.com/cert-manager/cert-manager v1.14.5/go.mod h1:fmr/cU5jiLxWj69CroDggSOa49RljUK+dU583TaQUXM= +github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs= +github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/cockroachdb/errors v1.11.3 h1:5bA+k2Y6r+oz/6Z/RFlNeVCesGARKuC6YymtcDrbC/I= github.com/cockroachdb/errors v1.11.3/go.mod h1:m4UIW4CDjx+R5cybPsNrRbreomiFqt8o1h1wUVazSd8= github.com/cockroachdb/logtags v0.0.0-20230118201751-21c54148d20b h1:r6VH0faHjZeQy818SGhaone5OnYfxFR/+AzdY3sf5aE= @@ -34,8 +56,13 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= +github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= +github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= github.com/cpuguy83/dockercfg v0.3.2/go.mod h1:sugsbF4//dDlL/i+S+rtpIWp+5h0BHJHfjj5/jFyUJc= +github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g= github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E= github.com/cyphar/filepath-securejoin v0.4.1 h1:JyxxyPEaktOD+GAnqIqTf9A8tHyAG22rowi7HkoSU1s= github.com/cyphar/filepath-securejoin v0.4.1/go.mod h1:Sdj7gXlvMcPZsbhwhQ33GguGLDGQL7h7bg04C/+u9jI= @@ -53,24 +80,46 @@ github.com/docker/go-connections v0.6.0 h1:LlMG9azAe1TqfR7sO+NJttz1gy6KO7VJBh+pM github.com/docker/go-connections v0.6.0/go.mod h1:AahvXYshr6JgfUJGdDCs2b5EZG/vmaMAntpSFH5BFKE= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= +github.com/evanphx/json-patch v5.9.11+incompatible h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8= +github.com/evanphx/json-patch v5.9.11+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk= github.com/evanphx/json-patch/v5 v5.9.11 h1:/8HVnzMq13/3x9TPvjG08wUGqBTmZBsCWzjTM0wiaDU= github.com/evanphx/json-patch/v5 v5.9.11/go.mod h1:3j+LviiESTElxA4p3EMKAB9HXj3/XEtnUf6OZxqIQTM= github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg= github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U= github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8= github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0= +<<<<<<< HEAD github.com/fxamacker/cbor/v2 v2.8.0 h1:fFtUGXUzXPHTIUdne5+zzMPTfffl3RD5qYnkY40vtxU= github.com/fxamacker/cbor/v2 v2.8.0/go.mod h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ= +======= +github.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k= +github.com/fsnotify/fsnotify v1.9.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0= +github.com/fxamacker/cbor/v2 v2.9.0 h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM= +github.com/fxamacker/cbor/v2 v2.9.0/go.mod h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/getsentry/sentry-go v0.27.0 h1:Pv98CIbtB3LkMWmXi4Joa5OOcwbmnX88sF5qbK3r3Ps= github.com/getsentry/sentry-go v0.27.0/go.mod h1:lc76E2QywIyW8WuBnwl8Lc4bkmQH4+w1gwTf25trprY= github.com/go-errors/errors v1.5.1 h1:ZwEMSLRCapFLflTpT7NKaAc7ukJ8ZPEjzlxt8rPN8bk= github.com/go-errors/errors v1.5.1/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og= +<<<<<<< HEAD github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY= github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= +======= +github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= +github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI= +github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= github.com/go-logr/zapr v1.3.0 h1:XGdV8XW8zdwFiwOA2Dryh1gj2KRQyOOoNmBy4EplIcQ= @@ -87,8 +136,10 @@ github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1v github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8= github.com/go-viper/mapstructure/v2 v2.4.0 h1:EBsztssimR/CONLSZZ04E8qAkxNYq4Qp9LvH92wZUgs= github.com/go-viper/mapstructure/v2 v2.4.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM= +github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 h1:MU/8wDLif2qCXZmzncUQ/BOfxWfthHi63KqpoNbWqVw= github.com/google/gnostic-models v0.6.9/go.mod h1:CiWsm0s6BSQd1hRn8/QmxqB6BesYcbSZxsz9b0KuDBw= github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= @@ -97,16 +148,47 @@ github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db h1:097atOisP2aRj7vFgYQBbFN4U4JNXUNYpxael3UzMyo= github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144= +======= +github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo= +github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE= +github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= +github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= +github.com/google/btree v1.1.3 h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg= +github.com/google/btree v1.1.3/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4= +github.com/google/cel-go v0.26.1 h1:iPbVVEdkhTX++hpe3lzSk7D3G3QSYqLGoHOcEio+UXQ= +github.com/google/cel-go v0.26.1/go.mod h1:A9O8OU9rdvrK5MQyrqfIxo1a0u4g3sF8KB6PUIaryMM= +github.com/google/gnostic-models v0.7.0 h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo= +github.com/google/gnostic-models v0.7.0/go.mod h1:whL5G0m6dmc5cPxKc5bdKdEN3UjI7OUGxBlw57miDrQ= +github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= +github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= +github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0= +github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8 h1:3DsUAV+VNEQa2CUVLxCY3f87278uWfIDhJnbdvDjvmE= +github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8/go.mod h1:I6V7YzU0XDpsHqbsyrghnFZLO1gwK6NPTNvmetQIk9U= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 h1:JeSE6pjso5THxAzdVpqr6/geYxZytqFMBCOtn/ujyeo= github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674/go.mod h1:r4w70xmWCQKmi1ONH4KIaBptdivuRPyosB9RmPlGEwA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= github.com/huandu/xstrings v1.5.0 h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI= github.com/huandu/xstrings v1.5.0/go.mod h1:y5/lhBue+AyNmUVz9RLU9xbLR0o4KIIExikq4ovT0aE= github.com/imdario/mergo v0.3.16 h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4= github.com/imdario/mergo v0.3.16/go.mod h1:WBLT9ZmE3lPoWsEzCh9LPo3TiwVN+ZKEjmz+hD27ysY= +github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8= +github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw= github.com/invopop/jsonschema v0.12.0 h1:6ovsNSuvn9wEQVOyc72aycBMVQFKz7cPdMJn10CvzRI= github.com/invopop/jsonschema v0.12.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= @@ -119,6 +201,8 @@ github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk= github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= +github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc= +github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw= github.com/lucasjones/reggen v0.0.0-20200904144131-37ba4fa293bb h1:w1g9wNDIE/pHSTmAaUhv4TZQuPBS6GV3mMz5hkgziIU= github.com/lucasjones/reggen v0.0.0-20200904144131-37ba4fa293bb/go.mod h1:5ELEyG+X8f+meRWHuqUOewBOhvHkl7M76pdGEansxW4= github.com/lufia/plan9stats v0.0.0-20231016141302-07b5767bb0ed h1:036IscGBfJsFIgJQzlui7nK1Ncm0tp2ktmPj8xO4N/0= @@ -174,6 +258,7 @@ github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINE github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +<<<<<<< HEAD github.com/power-devops/perfstat v0.0.0-20221212215047-62379fc7944b h1:0LFwY6Q3gMACTjAbMZBjXAqTOzOwFaj2Ld6cjeQ7Rig= github.com/power-devops/perfstat v0.0.0-20221212215047-62379fc7944b/go.mod h1:OmDBASR4679mdNQnz2pUhc2G8CO2JrUAVFDRBDP/hJE= github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 h1:rmgno9TNZCX2c81zJGrv2CZjiPURWevNeQ7Lo8fVszk= @@ -181,6 +266,28 @@ github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f5 github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs= github.com/rogpeppe/go-internal v1.13.1 h1:KvO1DLK/DRN07sQ1LQKScxyZJuNnedQ5/wKSR38lUII= github.com/rogpeppe/go-internal v1.13.1/go.mod h1:uMEvuHeurkdAXX61udpOXGD/AzZDWNMNyH2VO9fmH0o= +======= +github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 h1:o4JXh1EVt9k/+g42oCprj/FisM4qX9L3sZB3upGN2ZU= +github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55/go.mod h1:OmDBASR4679mdNQnz2pUhc2G8CO2JrUAVFDRBDP/hJE= +github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.76.2 h1:BpGDC87A2SaxbKgONsFLEX3kRcRJee2aLQbjXsuz0hA= +github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.76.2/go.mod h1:Rd8YnCqz+2FYsiGmE2DMlaLjQRB4v2jFNnzCt9YY4IM= +github.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o= +github.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg= +github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk= +github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE= +github.com/prometheus/common v0.66.1 h1:h5E0h5/Y8niHc5DlaLlWLArTQI7tMrsfQjHV+d9ZoGs= +github.com/prometheus/common v0.66.1/go.mod h1:gcaUsgf3KfRSwHY4dIMXLPV0K/Wg1oZ8+SbZk/HH/dA= +github.com/prometheus/procfs v0.17.0 h1:FuLQ+05u4ZI+SS/w9+BWEM2TXiHKsUQ9TADiRH7DuK0= +github.com/prometheus/procfs v0.17.0/go.mod h1:oPQLaDAMRbA+u8H5Pbfq+dl3VDAvHxMUOVhe0wYB2zw= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50 h1:rmgno9TNZCX2c81zJGrv2CZjiPURWevNeQ7Lo8fVszk= +github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250124085449-058118a82f50/go.mod h1:b/GBKIBr3nLE+LAtb8P4b2KrOwL3SGXAF4l65UcF71c= +github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs= +github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ= +github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc= +github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4= github.com/santhosh-tekuri/jsonschema/v5 v5.3.1/go.mod h1:uToXkOrWAZ6/Oc07xWQrPOhJotwFIyu2bBVN41fcDUY= github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 h1:KRzFb2m7YtdldCEkzs6KqmJw4nqEVZGK7IN2kJkjTuQ= @@ -191,32 +298,61 @@ github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= github.com/spf13/cast v1.7.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo= +github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo= +github.com/spf13/cobra v1.9.1/go.mod h1:nDyEzZ8ogv936Cinf6g1RU9MRY64Ir93oCnqb9wxYW0= +github.com/spf13/pflag v1.0.6/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/pflag v1.0.7 h1:vN6T9TfwStFPFM5XzjsvmzZkLuaLX+HS+0SeFLRgU6M= github.com/spf13/pflag v1.0.7/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= +github.com/stoewer/go-strcase v1.3.1 h1:iS0MdW+kVTxgMoE1LAZyMiYJFKlOzLooE4MxjirtkAs= +github.com/stoewer/go-strcase v1.3.1/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= +github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= +github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY= github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA= github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= +<<<<<<< HEAD github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA= github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= +======= +github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= +github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= +github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U= +github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/testcontainers/testcontainers-go v0.39.0 h1:uCUJ5tA+fcxbFAB0uP3pIK3EJ2IjjDUHFSZ1H1UxAts= github.com/testcontainers/testcontainers-go v0.39.0/go.mod h1:qmHpkG7H5uPf/EvOORKvS6EuDkBUPE3zpVGaH9NL7f8= github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0 h1:oZfauL/CPwI+HtFY7twNOmTj0r2laltqQ5o5EeplSOQ= github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0/go.mod h1:mlHF/P+wcE0+qeEsVYfifeXOOkAFhSmtpBJyDvbzhAc= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= github.com/tklauser/numcpus v0.9.0/go.mod h1:SN6Nq1O3VychhC1npsWostA+oW+VOQTxZrS604NSRyI= +======= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/fJgbpc= github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 h1:CV7UdSGJt/Ao6Gp4CXckLxVRRsRgDHoI8XjbL3PDl8s= @@ -227,6 +363,46 @@ go.opentelemetry.io/otel/metric v1.36.0 h1:MoWPKVhQvJ+eeXWHFBOPoBOi20jh6Iq2CcCRE go.opentelemetry.io/otel/metric v1.36.0/go.mod h1:zC7Ks+yeyJt4xig9DEw9kuUFe5C3zLbVjV2PzT6qzbs= go.opentelemetry.io/otel/trace v1.36.0 h1:ahxWNuqZjpdiFAyrIoQ4GIiAIhxAunQR6MUoKrsNd4w= go.opentelemetry.io/otel/trace v1.36.0/go.mod h1:gQ+OnDZzrybY4k4seLzPAWNwVBBVlF2szhehOBB/tGA= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 h1:q4XOmH/0opmeuJtPsbFNivyl7bCt7yRBbeEm2sC/XtQ= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0/go.mod h1:snMWehoOh2wsEwnvvwtDyFCxVeDAODenXHtn5vzrKjo= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0/go.mod h1:h06DGIukJOevXaj/xrNjhi/2098RZzcLTbc0jDAUbsg= +go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8= +go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM= +go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 h1:GqRJVj7UmLjCVyVJ3ZFLdPRmhDUp2zFmQe3RHIOsw24= +go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0/go.mod h1:ri3aaHSmCTVYu2AWv44YMauwAQc0aqI9gHKIcSbI1pU= +go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 h1:lwI4Dc5leUqENgGuQImwLo4WnuXFPetmPpkLi2IrX54= +go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0/go.mod h1:Kz/oCE7z5wuyhPxsXDuaPteSWqjSBD5YaSdbxZYGbGk= +go.opentelemetry.io/otel/metric v1.38.0 h1:Kl6lzIYGAh5M159u9NgiRkmoMKjvbsKtYRwgfrA6WpA= +go.opentelemetry.io/otel/metric v1.38.0/go.mod h1:kB5n/QoRM8YwmUahxvI3bO34eVtQf2i4utNVLr9gEmI= +go.opentelemetry.io/otel/sdk v1.38.0 h1:l48sr5YbNf2hpCUj/FoGhW9yDkl+Ma+LrVl8qaM5b+E= +go.opentelemetry.io/otel/sdk v1.38.0/go.mod h1:ghmNdGlVemJI3+ZB5iDEuk4bWA3GkTpW+DOoZMYBVVg= +go.opentelemetry.io/otel/sdk/metric v1.38.0 h1:aSH66iL0aZqo//xXzQLYozmWrXxyFkBJ6qT5wthqPoM= +go.opentelemetry.io/otel/sdk/metric v1.38.0/go.mod h1:dg9PBnW9XdQ1Hd6ZnRz689CbtrUp0wMMs9iPcgT9EZA= +go.opentelemetry.io/otel/trace v1.38.0 h1:Fxk5bKrDZJUH+AMyyIXGcFAPah0oRcT+LuNtJrmcNLE= +go.opentelemetry.io/otel/trace v1.38.0/go.mod h1:j1P9ivuFsTceSWe1oY+EeW3sc+Pp42sO++GHkg4wwhs= +go.opentelemetry.io/proto/otlp v1.7.1 h1:gTOMpGDb0WTBOP8JaO72iL3auEZhVmAQg4ipjOVAtj4= +go.opentelemetry.io/proto/otlp v1.7.1/go.mod h1:b2rVh6rfI/s2pHWNlB7ILJcRALpcNDzKhACevjI+ZnE= +go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto= +go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0= go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y= go.uber.org/zap v1.27.0 h1:aJMhYGrd5QSmlpLMr2MftRKl7t8J8PTZPA732ud/XR8= @@ -255,6 +431,8 @@ golang.org/x/oauth2 v0.30.0/go.mod h1:B++QgG3ZKulg6sRPGD/mqlHQs5rB3Ml9erfeDY7xKl golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I= +golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -278,8 +456,23 @@ golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8T golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +<<<<<<< HEAD google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY= google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY= +======= +gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0= +gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY= +gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk= +gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba h1:B14OtaXuMaCQsl2deSvNkyPKIzq3BjfxQp8d00QyWx4= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:G5IanEx8/PgI9w6CFcYQf7jMtHQhZruvfM1i3qOqk5U= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba h1:UKgtfRM7Yh93Sya0Fo8ZzhDP4qBckrrxEr2oF5UIVb8= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk= +google.golang.org/grpc v1.75.1 h1:/ODCNEuf9VghjgO3rqLcfg8fiOP0nSluljWFlDxELLI= +google.golang.org/grpc v1.75.1/go.mod h1:JtPAzKiq4v1xcAB2hydNlWI2RnF85XXcV0mhKXr2ecQ= +google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= +google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q= @@ -287,10 +480,14 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= +gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= helm.sh/helm/v3 v3.18.5 h1:Cc3Z5vd6kDrZq9wO9KxKLNEickiTho6/H/dBNRVSos4= helm.sh/helm/v3 v3.18.5/go.mod h1:L/dXDR2r539oPlFP1PJqKAC1CUgqHJDLkxKpDGrWnyg= +<<<<<<< HEAD k8s.io/api v0.33.3 h1:SRd5t//hhkI1buzxb288fy2xvjubstenEKL9K51KBI8= k8s.io/api v0.33.3/go.mod h1:01Y/iLUjNBM3TAvypct7DIj0M0NIZc+PzAHCIo0CYGE= k8s.io/apiextensions-apiserver v0.33.3 h1:qmOcAHN6DjfD0v9kxL5udB27SRP6SG/MTopmge3MwEs= @@ -307,6 +504,34 @@ k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97 k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= sigs.k8s.io/controller-runtime v0.20.4 h1:X3c+Odnxz+iPTRobG4tp092+CvBU9UK0t/bRf+n0DGU= sigs.k8s.io/controller-runtime v0.20.4/go.mod h1:xg2XB0K5ShQzAgsoujxuKN4LNXR2LfwwHsPj7Iaw+XY= +======= +k8s.io/api v0.34.1 h1:jC+153630BMdlFukegoEL8E/yT7aLyQkIVuwhmwDgJM= +k8s.io/api v0.34.1/go.mod h1:SB80FxFtXn5/gwzCoN6QCtPD7Vbu5w2n1S0J5gFfTYk= +k8s.io/apiextensions-apiserver v0.34.1 h1:NNPBva8FNAPt1iSVwIE0FsdrVriRXMsaWFMqJbII2CI= +k8s.io/apiextensions-apiserver v0.34.1/go.mod h1:hP9Rld3zF5Ay2Of3BeEpLAToP+l4s5UlxiHfqRaRcMc= +k8s.io/apimachinery v0.34.1 h1:dTlxFls/eikpJxmAC7MVE8oOeP1zryV7iRyIjB0gky4= +k8s.io/apimachinery v0.34.1/go.mod h1:/GwIlEcWuTX9zKIg2mbw0LRFIsXwrfoVxn+ef0X13lw= +k8s.io/apiserver v0.34.1 h1:U3JBGdgANK3dfFcyknWde1G6X1F4bg7PXuvlqt8lITA= +k8s.io/apiserver v0.34.1/go.mod h1:eOOc9nrVqlBI1AFCvVzsob0OxtPZUCPiUJL45JOTBG0= +k8s.io/client-go v0.34.1 h1:ZUPJKgXsnKwVwmKKdPfw4tB58+7/Ik3CrjOEhsiZ7mY= +k8s.io/client-go v0.34.1/go.mod h1:kA8v0FP+tk6sZA0yKLRG67LWjqufAoSHA2xVGKw9Of8= +k8s.io/component-base v0.34.1 h1:v7xFgG+ONhytZNFpIz5/kecwD+sUhVE6HU7qQUiRM4A= +k8s.io/component-base v0.34.1/go.mod h1:mknCpLlTSKHzAQJJnnHVKqjxR7gBeHRv0rPXA7gdtQ0= +k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= +k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 h1:hwvWFiBzdWw1FhfY1FooPn3kzWuJ8tmbZBHi4zVsl1Y= +k8s.io/utils v0.0.0-20250604170112-4c0f3b243397/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 h1:jpcvIRr3GLoUoEKRkHKSmGjxb6lWwrBlJsXc+eUYQHM= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw= +sigs.k8s.io/controller-runtime v0.22.4 h1:GEjV7KV3TY8e+tJ2LCTxUTanW4z/FmNB7l327UfMq9A= +sigs.k8s.io/controller-runtime v0.22.4/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8= +sigs.k8s.io/gateway-api v1.1.0 h1:DsLDXCi6jR+Xz8/xd0Z1PYl2Pn0TyaFMOPPZIj4inDM= +sigs.k8s.io/gateway-api v1.1.0/go.mod h1:ZH4lHrL2sDi0FHZ9jjneb8kKnGzFWyrTya35sWUTrRs= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE= sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg= sigs.k8s.io/randfill v0.0.0-20250304075658-069ef1bbf016/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY= diff --git a/harpoon/go.mod b/harpoon/go.mod index 7515aa869..fe5981282 100644 --- a/harpoon/go.mod +++ b/harpoon/go.mod @@ -7,6 +7,10 @@ require ( github.com/cucumber/godog v0.14.1 github.com/cucumber/messages/go/v21 v21.0.1 github.com/olekukonko/tablewriter v0.0.5 +<<<<<<< HEAD +======= + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250123101329-b89e4b888a74 github.com/stretchr/testify v1.10.0 k8s.io/api v0.33.3 @@ -16,6 +20,7 @@ require ( ) require ( + cel.dev/expr v0.24.0 // indirect dario.cat/mergo v1.0.2 // indirect github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6 // indirect github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect @@ -25,8 +30,13 @@ require ( github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/sprig/v3 v3.3.0 // indirect github.com/Masterminds/squirrel v1.5.4 // indirect + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect + github.com/beorn7/perks v1.0.1 // indirect github.com/blang/semver/v4 v4.0.0 // indirect + github.com/cenkalti/backoff/v5 v5.0.3 // indirect + github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/chai2010/gettext-go v1.0.2 // indirect github.com/cockroachdb/logtags v0.0.0-20230118201751-21c54148d20b // indirect github.com/cockroachdb/redact v1.1.5 // indirect @@ -34,6 +44,8 @@ require ( github.com/containerd/errdefs v1.0.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cucumber/gherkin/go/v26 v26.2.0 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect @@ -42,7 +54,13 @@ require ( github.com/evanphx/json-patch/v5 v5.9.11 // indirect github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect github.com/fatih/color v1.18.0 // indirect +<<<<<<< HEAD github.com/fxamacker/cbor/v2 v2.8.0 // indirect +======= + github.com/felixge/httpsnoop v1.0.4 // indirect + github.com/fsnotify/fsnotify v1.9.0 // indirect + github.com/fxamacker/cbor/v2 v2.9.0 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/getsentry/sentry-go v0.27.0 // indirect github.com/go-errors/errors v1.5.1 // indirect github.com/go-gorp/gorp/v3 v3.1.0 // indirect @@ -54,6 +72,7 @@ require ( github.com/gobwas/glob v0.2.3 // indirect github.com/gofrs/uuid v4.4.0+incompatible // indirect github.com/gogo/protobuf v1.3.2 // indirect + github.com/golang/protobuf v1.5.4 // indirect github.com/gonvenience/bunt v1.3.5 // indirect github.com/gonvenience/neat v1.3.13 // indirect github.com/gonvenience/term v1.0.2 // indirect @@ -61,13 +80,20 @@ require ( github.com/gonvenience/wrap v1.2.0 // indirect github.com/gonvenience/ytbx v1.4.4 // indirect github.com/google/btree v1.1.3 // indirect +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 // indirect +======= + github.com/google/cel-go v0.26.1 // indirect + github.com/google/gnostic-models v0.7.0 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/go-cmp v0.7.0 // indirect github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect github.com/google/uuid v1.6.0 // indirect github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect github.com/gosuri/uitable v0.0.4 // indirect github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-immutable-radix v1.3.1 // indirect github.com/hashicorp/go-memdb v1.3.4 // indirect @@ -84,6 +110,7 @@ require ( github.com/klauspost/compress v1.18.0 // indirect github.com/kr/pretty v0.3.1 // indirect github.com/kr/text v0.2.0 // indirect + github.com/kylelemons/godebug v1.1.0 // indirect github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect github.com/lib/pq v1.10.9 // indirect @@ -112,6 +139,15 @@ require ( github.com/peterbourgon/diskv v2.0.1+incompatible // indirect github.com/pkg/errors v0.9.1 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect +<<<<<<< HEAD +======= + github.com/prometheus/client_golang v1.23.2 // indirect + github.com/prometheus/client_model v0.6.2 // indirect + github.com/prometheus/common v0.66.1 // indirect + github.com/prometheus/procfs v0.17.0 // indirect + github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 // indirect + github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/rivo/uniseg v0.4.7 // indirect github.com/rogpeppe/go-internal v1.13.1 // indirect github.com/rubenv/sql-migrate v1.8.0 // indirect @@ -123,10 +159,12 @@ require ( github.com/spf13/cast v1.7.0 // indirect github.com/spf13/cobra v1.9.1 // indirect github.com/spf13/pflag v1.0.7 // indirect + github.com/stoewer/go-strcase v1.3.1 // indirect github.com/texttheater/golang-levenshtein v1.0.1 // indirect github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 // indirect github.com/x448/float16 v0.8.4 // indirect github.com/xlab/treeprint v1.2.0 // indirect +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 // indirect go.opentelemetry.io/otel v1.36.0 // indirect go.opentelemetry.io/otel/log v0.11.0 // indirect @@ -148,8 +186,45 @@ require ( google.golang.org/genproto/googleapis/rpc v0.0.0-20250519155744-55703ea1f237 // indirect google.golang.org/grpc v1.72.1 // indirect google.golang.org/protobuf v1.36.6 // indirect +======= + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect + go.opentelemetry.io/otel v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect + go.opentelemetry.io/otel/log v0.14.0 // indirect + go.opentelemetry.io/otel/metric v1.38.0 // indirect + go.opentelemetry.io/otel/sdk v1.38.0 // indirect + go.opentelemetry.io/otel/sdk/log v0.14.0 // indirect + go.opentelemetry.io/otel/trace v1.38.0 // indirect + go.opentelemetry.io/proto/otlp v1.7.1 // indirect + go.uber.org/multierr v1.11.0 // indirect + go.uber.org/zap v1.27.1 // indirect + go.yaml.in/yaml/v2 v2.4.3 // indirect + go.yaml.in/yaml/v3 v3.0.4 // indirect + golang.org/x/crypto v0.45.0 // indirect + golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6 // indirect + golang.org/x/net v0.47.0 // indirect + golang.org/x/oauth2 v0.31.0 // indirect + golang.org/x/sync v0.18.0 // indirect + golang.org/x/sys v0.38.0 // indirect + golang.org/x/term v0.37.0 // indirect + golang.org/x/text v0.31.0 // indirect + golang.org/x/time v0.13.0 // indirect + golang.org/x/tools v0.39.0 // indirect + gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba // indirect + google.golang.org/grpc v1.75.1 // indirect + google.golang.org/protobuf v1.36.11 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect helm.sh/helm/v3 v3.18.5 // indirect @@ -158,10 +233,16 @@ require ( k8s.io/cli-runtime v0.33.3 // indirect k8s.io/component-base v0.33.3 // indirect k8s.io/klog/v2 v2.130.1 // indirect +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect +======= + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 // indirect k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 // indirect oras.land/oras-go/v2 v2.6.0 // indirect + sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/kustomize/api v0.19.0 // indirect sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect diff --git a/harpoon/go.sum b/harpoon/go.sum index 33da8647e..c02ccde34 100644 --- a/harpoon/go.sum +++ b/harpoon/go.sum @@ -1,3 +1,5 @@ +cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY= +cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw= dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8= dario.cat/mergo v1.0.2/go.mod h1:E/hbnu0NxMFBjpMIE34DRGLWqDy0g5FuKDhCb31ngxA= filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= @@ -22,6 +24,10 @@ github.com/Masterminds/squirrel v1.5.4 h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8 github.com/Masterminds/squirrel v1.5.4/go.mod h1:NNaOrjSoIDfDA40n7sr2tPNZRfjzjA400rg+riTZj10= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= +github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ= +github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so= @@ -58,6 +64,8 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= @@ -100,8 +108,15 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/evanphx/json-patch v5.9.11+incompatible h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8= @@ -150,12 +165,15 @@ github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1v github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8= github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y= github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8= +github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= github.com/gofrs/uuid v4.2.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM= github.com/gofrs/uuid v4.3.1+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM= github.com/gofrs/uuid v4.4.0+incompatible h1:3qXRTX8/NbyulANqlc0lchS1gqAVxRgsuW1YrTJupqA= github.com/gofrs/uuid v4.4.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= +github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo= +github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= github.com/gonvenience/bunt v1.3.5 h1:wSQquifvwEWtzn27k1ngLfeLaStyt0k1b/K6TrlCNAs= @@ -172,6 +190,7 @@ github.com/gonvenience/ytbx v1.4.4 h1:jQopwyaLsVGuwdxSiN4WkXjsEaFNPJ3V4lUj7eyEpz github.com/gonvenience/ytbx v1.4.4/go.mod h1:w37+MKCPcCMY/jpPNmEklD4xKqrOAVBO6kIWW2+uI6M= github.com/google/btree v1.1.3 h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg= github.com/google/btree v1.1.3/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4= +<<<<<<< HEAD github.com/google/gnostic-models v0.6.9 h1:MU/8wDLif2qCXZmzncUQ/BOfxWfthHi63KqpoNbWqVw= github.com/google/gnostic-models v0.6.9/go.mod h1:CiWsm0s6BSQd1hRn8/QmxqB6BesYcbSZxsz9b0KuDBw= github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= @@ -180,6 +199,19 @@ github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db h1:097atOisP2aRj7vFgYQBbFN4U4JNXUNYpxael3UzMyo= github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144= +======= +github.com/google/cel-go v0.26.1 h1:iPbVVEdkhTX++hpe3lzSk7D3G3QSYqLGoHOcEio+UXQ= +github.com/google/cel-go v0.26.1/go.mod h1:A9O8OU9rdvrK5MQyrqfIxo1a0u4g3sF8KB6PUIaryMM= +github.com/google/gnostic-models v0.7.0 h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo= +github.com/google/gnostic-models v0.7.0/go.mod h1:whL5G0m6dmc5cPxKc5bdKdEN3UjI7OUGxBlw57miDrQ= +github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= +github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= +github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0= +github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8 h1:3DsUAV+VNEQa2CUVLxCY3f87278uWfIDhJnbdvDjvmE= +github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8/go.mod h1:I6V7YzU0XDpsHqbsyrghnFZLO1gwK6NPTNvmetQIk9U= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4= github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ= github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= @@ -194,9 +226,21 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY= github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3/go.mod h1:ndYquD05frm2vACXE1nsccT4oJzjhw2arTS2cpUD1PI= +======= +github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= @@ -227,6 +271,8 @@ github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw= github.com/jmoiron/sqlx v1.4.0 h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o= github.com/jmoiron/sqlx v1.4.0/go.mod h1:ZrZ7UsYB/weZdl2Bxg6jCRO9c3YHl8r3ahlKmRT4JLY= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= @@ -243,6 +289,8 @@ github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= +github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc= +github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw= github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 h1:SOEGU9fKiNWd/HOJuq6+3iTQz8KNCLtVX6idSoTLdUw= github.com/lann/builder v0.0.0-20180802200727-47ae307949d0/go.mod h1:dXGbAdH5GtBTC4WfIxhKZfyBF/HBFgRZSWwZ9g/He9o= github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 h1:P6pPBnrTSX3DEVR4fDembhRWSsG5rVo6hYhAB/ADZrk= @@ -357,6 +405,15 @@ github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ= github.com/redis/go-redis/v9 v9.7.3 h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM= github.com/redis/go-redis/v9 v9.7.3/go.mod h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA= +<<<<<<< HEAD +======= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 h1:wWHiS4LNYzl5HkUPG6dpGPPvFW3ze7ZnraYvyqZ/+8s= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:V3OBV2kcF/BDDytUZuKvIygbaXoGPT5VO3KmMAz+mBM= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1 h1:fLBU7IJZq8PR88AkEdI5G+yyBsftionGapvAOMPW9hg= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:LzztzYWpD+e+A6hV6+eQhYY60zHQR7ePxhLgyMmRn/Q= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ= github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88= @@ -377,6 +434,8 @@ github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= github.com/spf13/cast v1.7.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo= github.com/spf13/cobra v1.7.0/go.mod h1:uLxZILRyS/50WlhOIKD7W6V5bgeIt+4sICxh6uRMrb0= @@ -386,6 +445,8 @@ github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An github.com/spf13/pflag v1.0.6/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/pflag v1.0.7 h1:vN6T9TfwStFPFM5XzjsvmzZkLuaLX+HS+0SeFLRgU6M= github.com/spf13/pflag v1.0.7/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= +github.com/stoewer/go-strcase v1.3.1 h1:iS0MdW+kVTxgMoE1LAZyMiYJFKlOzLooE4MxjirtkAs= +github.com/stoewer/go-strcase v1.3.1/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= @@ -408,30 +469,69 @@ github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0 h1:oZfauL/CPwI+H github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0/go.mod h1:mlHF/P+wcE0+qeEsVYfifeXOOkAFhSmtpBJyDvbzhAc= github.com/texttheater/golang-levenshtein v1.0.1 h1:+cRNoVrfiwufQPhoMzB6N0Yf/Mqajr6t1lOv8GyGE2U= github.com/texttheater/golang-levenshtein v1.0.1/go.mod h1:PYAKrbF5sAiq9wd+H82hs7gNaen0CplQ9uvm6+enD/8= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= github.com/tklauser/numcpus v0.9.0/go.mod h1:SN6Nq1O3VychhC1npsWostA+oW+VOQTxZrS604NSRyI= +======= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 h1:JwtAtbp7r/7QSyGz8mKUbYJBg2+6Cd7OjM8o/GNOcVo= github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74/go.mod h1:RmMWU37GKR2s6pgrIEB4ixgpVCt/cf7dnJv3fuH1J1c= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 h1:RyrtJzu5MAmIcbRrwg75b+w3RlZCP0vJByDVzcpAe3M= go.opentelemetry.io/contrib/bridges/prometheus v0.61.0/go.mod h1:tirr4p9NXbzjlbruiRGp53IzlYrDk5CO2fdHj0sSSaY= go.opentelemetry.io/contrib/exporters/autoexport v0.57.0 h1:jmTVJ86dP60C01K3slFQa2NQ/Aoi7zA+wy7vMOKD9H4= go.opentelemetry.io/contrib/exporters/autoexport v0.57.0/go.mod h1:EJBheUMttD/lABFyLXhce47Wr6DPWYReCzaZiXadH7g= +<<<<<<< HEAD go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 h1:CV7UdSGJt/Ao6Gp4CXckLxVRRsRgDHoI8XjbL3PDl8s= go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0/go.mod h1:FRmFuRJfag1IZ2dPkHnEoSFVgTVPUd2qf5Vi69hLb8I= go.opentelemetry.io/otel v1.36.0 h1:UumtzIklRBY6cI/lllNZlALOF5nNIzJVb16APdvgTXg= go.opentelemetry.io/otel v1.36.0/go.mod h1:/TcFMXYjyRNh8khOAO9ybYkqaDBb/70aVwkNML4pP8E= +======= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 h1:q4XOmH/0opmeuJtPsbFNivyl7bCt7yRBbeEm2sC/XtQ= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0/go.mod h1:snMWehoOh2wsEwnvvwtDyFCxVeDAODenXHtn5vzrKjo= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 h1:RbKq8BG0FI8OiXhBfcRtqqHcZcka+gU3cskNuf05R18= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0/go.mod h1:h06DGIukJOevXaj/xrNjhi/2098RZzcLTbc0jDAUbsg= +go.opentelemetry.io/otel v1.38.0 h1:RkfdswUDRimDg0m2Az18RKOsnI8UDzppJAtj01/Ymk8= +go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.11.0 h1:HMUytBT3uGhPKYY/u/G5MR9itrlSO2SMOsSD3Tk3k7A= go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.11.0/go.mod h1:hdDXsiNLmdW/9BF2jQpnHHlhFajpWCEYfM6e5m2OAZg= go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.11.0 h1:C/Wi2F8wEmbxJ9Kuzw/nhP+Z9XaHYMkyDmXy6yR2cjw= @@ -481,8 +581,15 @@ go.yaml.in/yaml/v3 v3.0.3/go.mod h1:tBHosrYAkRZjRAOREWbDnBXUf08JOwYq++0QNwQiWzI= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +<<<<<<< HEAD golang.org/x/crypto v0.40.0 h1:r4x+VvoG5Fm+eJcxMaY8CQM7Lb0l1lsmjGBQ6s8BfKM= golang.org/x/crypto v0.40.0/go.mod h1:Qr1vMER5WyS2dfPHAlsOj01wgLbsyWtFn/aY+5+ZdxY= +======= +golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q= +golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4= +golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6 h1:zfMcR1Cs4KNuomFFgGefv5N0czO2XZpUbxGUy8i8ug0= +golang.org/x/exp v0.0.0-20251113190631-e25ba8c21ef6/go.mod h1:46edojNIoXTNOhySWIWdix628clX9ODXwPsQuG6hsK0= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.25.0 h1:n7a+ZbQKQA/Ysbyb0/6IbB1H/X41mKgbhfv7AfG/44w= @@ -526,6 +633,7 @@ golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8T golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +<<<<<<< HEAD google.golang.org/genproto v0.0.0-20240123012728-ef4313101c80 h1:KAeGQVN3M9nD0/bQXnr/ClcEMJ968gUXJQ9pwfSynuQ= google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237 h1:Kog3KlB4xevJlAcbbbzPfRG0+X9fdoGM+UBRKVz6Wr0= google.golang.org/genproto/googleapis/api v0.0.0-20250519155744-55703ea1f237/go.mod h1:ezi0AVyMKDWy5xAncvjLWH7UcLBB5n7y2fQ8MzjJcto= @@ -535,6 +643,20 @@ google.golang.org/grpc v1.72.1 h1:HR03wO6eyZ7lknl75XlxABNVLLFc2PAb6mHlYh756mA= google.golang.org/grpc v1.72.1/go.mod h1:wH5Aktxcg25y1I3w7H69nHfXdOG3UiadoBtjh3izSDM= google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY= google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY= +======= +gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0= +gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY= +gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk= +gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba h1:B14OtaXuMaCQsl2deSvNkyPKIzq3BjfxQp8d00QyWx4= +google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:G5IanEx8/PgI9w6CFcYQf7jMtHQhZruvfM1i3qOqk5U= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba h1:UKgtfRM7Yh93Sya0Fo8ZzhDP4qBckrrxEr2oF5UIVb8= +google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk= +google.golang.org/grpc v1.75.1 h1:/ODCNEuf9VghjgO3rqLcfg8fiOP0nSluljWFlDxELLI= +google.golang.org/grpc v1.75.1/go.mod h1:JtPAzKiq4v1xcAB2hydNlWI2RnF85XXcV0mhKXr2ecQ= +google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= +google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= @@ -543,6 +665,8 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= @@ -569,8 +693,15 @@ k8s.io/component-base v0.33.3 h1:mlAuyJqyPlKZM7FyaoM/LcunZaaY353RXiOd2+B5tGA= k8s.io/component-base v0.33.3/go.mod h1:ktBVsBzkI3imDuxYXmVxZ2zxJnYTZ4HAsVj9iF09qp4= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUyGcf03XZEP0ZIKgKj35LS4= k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8= +======= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 h1:r/phHvH1iU7gO/l7tTjQk2K01ER7/OAJi8uFHHyWSac= k8s.io/kubectl v0.33.3/go.mod h1:euj2bG56L6kUGOE/ckZbCoudPwuj4Kud7BR0GzyNiT0= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg= @@ -579,8 +710,15 @@ oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc= oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o= pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw= pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04= +<<<<<<< HEAD sigs.k8s.io/controller-runtime v0.20.4 h1:X3c+Odnxz+iPTRobG4tp092+CvBU9UK0t/bRf+n0DGU= sigs.k8s.io/controller-runtime v0.20.4/go.mod h1:xg2XB0K5ShQzAgsoujxuKN4LNXR2LfwwHsPj7Iaw+XY= +======= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 h1:jpcvIRr3GLoUoEKRkHKSmGjxb6lWwrBlJsXc+eUYQHM= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw= +sigs.k8s.io/controller-runtime v0.22.4 h1:GEjV7KV3TY8e+tJ2LCTxUTanW4z/FmNB7l327UfMq9A= +sigs.k8s.io/controller-runtime v0.22.4/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/gateway-api v1.1.0 h1:DsLDXCi6jR+Xz8/xd0Z1PYl2Pn0TyaFMOPPZIj4inDM= sigs.k8s.io/gateway-api v1.1.0/go.mod h1:ZH4lHrL2sDi0FHZ9jjneb8kKnGzFWyrTya35sWUTrRs= sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE= diff --git a/licenses/third_party.md b/licenses/third_party.md index f63a456cf..652f14fd9 100644 --- a/licenses/third_party.md +++ b/licenses/third_party.md @@ -37,7 +37,12 @@ run `task generate:third-party-licenses-list` | github.com/Masterminds/semver/v3 | [MIT](https://github.com/Masterminds/semver/blob/v3.3.1/LICENSE.txt) | | github.com/Masterminds/sprig/v3 | [MIT](https://github.com/Masterminds/sprig/blob/v3.3.0/LICENSE.txt) | | github.com/Masterminds/squirrel | [MIT](https://github.com/Masterminds/squirrel/blob/v1.5.4/LICENSE) | +<<<<<<< HEAD | github.com/antlr4-go/antlr/v4 | [BSD-3-Clause](https://github.com/antlr4-go/antlr/blob/v4.13.0/LICENSE) | +======= +| github.com/NYTimes/gziphandler | [Apache-2.0](https://github.com/NYTimes/gziphandler/blob/v1.1.1/LICENSE) | +| github.com/antlr4-go/antlr/v4 | [BSD-3-Clause](https://github.com/antlr4-go/antlr/blob/v4.13.1/LICENSE) | +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) | github.com/asaskevich/govalidator | [MIT](https://github.com/asaskevich/govalidator/blob/a9d515a09cc2/LICENSE) | | github.com/aws/aws-sdk-go-v2 | [Apache-2.0](https://github.com/aws/aws-sdk-go-v2/blob/v1.32.3/LICENSE.txt) | | github.com/aws/aws-sdk-go-v2/config | [Apache-2.0](https://github.com/aws/aws-sdk-go-v2/blob/config/v1.28.1/config/LICENSE.txt) | @@ -72,6 +77,8 @@ run `task generate:third-party-licenses-list` | github.com/containerd/errdefs | [Apache-2.0](https://github.com/containerd/errdefs/blob/v1.0.0/LICENSE) | | github.com/containerd/log | [Apache-2.0](https://github.com/containerd/log/blob/v0.1.0/LICENSE) | | github.com/containerd/platforms | [Apache-2.0](https://github.com/containerd/platforms/blob/v0.2.1/LICENSE) | +| github.com/coreos/go-semver/semver | [Apache-2.0](https://github.com/coreos/go-semver/blob/v0.3.1/LICENSE) | +| github.com/coreos/go-systemd/v22 | [Apache-2.0](https://github.com/coreos/go-systemd/blob/v22.5.0/LICENSE) | | github.com/cyphar/filepath-securejoin | [BSD-3-Clause](https://github.com/cyphar/filepath-securejoin/blob/v0.4.1/LICENSE) | | github.com/davecgh/go-spew/spew | [ISC](https://github.com/davecgh/go-spew/blob/d8f796af33cc/LICENSE) | | github.com/distribution/reference | [Apache-2.0](https://github.com/distribution/reference/blob/v0.6.0/LICENSE) | @@ -118,7 +125,12 @@ run `task generate:third-party-licenses-list` | github.com/gosuri/uitable | [MIT](https://github.com/gosuri/uitable/blob/v0.0.4/LICENSE) | | github.com/gosuri/uitable/util/wordwrap | [MIT](https://github.com/gosuri/uitable/blob/v0.0.4/util/wordwrap/LICENSE.md) | | github.com/gregjones/httpcache | [MIT](https://github.com/gregjones/httpcache/blob/901d90724c79/LICENSE.txt) | +<<<<<<< HEAD | github.com/grpc-ecosystem/grpc-gateway/v2 | [BSD-3-Clause](https://github.com/grpc-ecosystem/grpc-gateway/blob/v2.26.3/LICENSE) | +======= +| github.com/grpc-ecosystem/go-grpc-prometheus | [Apache-2.0](https://github.com/grpc-ecosystem/go-grpc-prometheus/blob/v1.2.0/LICENSE) | +| github.com/grpc-ecosystem/grpc-gateway/v2 | [BSD-3-Clause](https://github.com/grpc-ecosystem/grpc-gateway/blob/v2.27.3/LICENSE) | +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) | github.com/hashicorp/errwrap | [MPL-2.0](https://github.com/hashicorp/errwrap/blob/v1.1.0/LICENSE) | | github.com/hashicorp/go-multierror | [MPL-2.0](https://github.com/hashicorp/go-multierror/blob/v1.1.1/LICENSE) | | github.com/hashicorp/go-uuid | [MPL-2.0](https://github.com/hashicorp/go-uuid/blob/v1.0.3/LICENSE) | @@ -224,6 +236,7 @@ run `task generate:third-party-licenses-list` | github.com/wk8/go-ordered-map/v2 | [Apache-2.0](https://github.com/wk8/go-ordered-map/blob/v2.1.8/LICENSE) | | github.com/x448/float16 | [MIT](https://github.com/x448/float16/blob/v0.8.4/LICENSE) | | github.com/xlab/treeprint | [MIT](https://github.com/xlab/treeprint/blob/v1.2.0/LICENSE) | +<<<<<<< HEAD | go.opentelemetry.io/auto/sdk | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go-instrumentation/blob/sdk/v1.1.0/sdk/LICENSE) | | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/instrumentation/google.golang.org/grpc/otelgrpc/v0.59.0/instrumentation/google.golang.org/grpc/otelgrpc/LICENSE) | | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/instrumentation/net/http/otelhttp/v0.59.0/instrumentation/net/http/otelhttp/LICENSE) | @@ -236,6 +249,33 @@ run `task generate:third-party-licenses-list` | go.opentelemetry.io/otel/sdk/log | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/sdk/log/v0.11.0/sdk/log/LICENSE) | | go.opentelemetry.io/otel/trace | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/trace/v1.36.0/trace/LICENSE) | | go.opentelemetry.io/proto/otlp | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-proto-go/blob/otlp/v1.6.0/otlp/LICENSE) | +======= +| go.etcd.io/etcd/api/v3 | [Apache-2.0](https://github.com/etcd-io/etcd/blob/api/v3.6.4/api/LICENSE) | +| go.etcd.io/etcd/client/pkg/v3 | [Apache-2.0](https://github.com/etcd-io/etcd/blob/client/pkg/v3.6.4/client/pkg/LICENSE) | +| go.etcd.io/etcd/client/v3 | [Apache-2.0](https://github.com/etcd-io/etcd/blob/client/v3.6.4/client/v3/LICENSE) | +| go.etcd.io/raft/v3 | [Apache-2.0](https://github.com/etcd-io/raft/blob/v3.6.0/LICENSE) | +| go.opentelemetry.io/auto/sdk | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go-instrumentation/blob/sdk/v1.2.1/sdk/LICENSE) | +| go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/instrumentation/google.golang.org/grpc/otelgrpc/v0.61.0/instrumentation/google.golang.org/grpc/otelgrpc/LICENSE) | +| go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/instrumentation/net/http/otelhttp/v0.63.0/instrumentation/net/http/otelhttp/LICENSE) | +| go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | [BSD-3-Clause](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/instrumentation/net/http/otelhttp/v0.63.0/instrumentation/net/http/otelhttp/LICENSE) | +| go.opentelemetry.io/otel | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/v1.38.0/LICENSE) | +| go.opentelemetry.io/otel | [BSD-3-Clause](https://github.com/open-telemetry/opentelemetry-go/blob/v1.38.0/LICENSE) | +| go.opentelemetry.io/otel/exporters/otlp/otlptrace | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/exporters/otlp/otlptrace/v1.38.0/exporters/otlp/otlptrace/LICENSE) | +| go.opentelemetry.io/otel/exporters/otlp/otlptrace | [BSD-3-Clause](https://github.com/open-telemetry/opentelemetry-go/blob/exporters/otlp/otlptrace/v1.38.0/exporters/otlp/otlptrace/LICENSE) | +| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/exporters/otlp/otlptrace/otlptracegrpc/v1.38.0/exporters/otlp/otlptrace/otlptracegrpc/LICENSE) | +| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | [BSD-3-Clause](https://github.com/open-telemetry/opentelemetry-go/blob/exporters/otlp/otlptrace/otlptracegrpc/v1.38.0/exporters/otlp/otlptrace/otlptracegrpc/LICENSE) | +| go.opentelemetry.io/otel/log | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/log/v0.14.0/log/LICENSE) | +| go.opentelemetry.io/otel/log | [BSD-3-Clause](https://github.com/open-telemetry/opentelemetry-go/blob/log/v0.14.0/log/LICENSE) | +| go.opentelemetry.io/otel/metric | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/metric/v1.38.0/metric/LICENSE) | +| go.opentelemetry.io/otel/metric | [BSD-3-Clause](https://github.com/open-telemetry/opentelemetry-go/blob/metric/v1.38.0/metric/LICENSE) | +| go.opentelemetry.io/otel/sdk | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/sdk/v1.38.0/sdk/LICENSE) | +| go.opentelemetry.io/otel/sdk | [BSD-3-Clause](https://github.com/open-telemetry/opentelemetry-go/blob/sdk/v1.38.0/sdk/LICENSE) | +| go.opentelemetry.io/otel/sdk/log | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/sdk/log/v0.14.0/sdk/log/LICENSE) | +| go.opentelemetry.io/otel/sdk/log | [BSD-3-Clause](https://github.com/open-telemetry/opentelemetry-go/blob/sdk/log/v0.14.0/sdk/log/LICENSE) | +| go.opentelemetry.io/otel/trace | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-go/blob/trace/v1.38.0/trace/LICENSE) | +| go.opentelemetry.io/otel/trace | [BSD-3-Clause](https://github.com/open-telemetry/opentelemetry-go/blob/trace/v1.38.0/trace/LICENSE) | +| go.opentelemetry.io/proto/otlp | [Apache-2.0](https://github.com/open-telemetry/opentelemetry-proto-go/blob/otlp/v1.7.1/otlp/LICENSE) | +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) | go.uber.org/multierr | [MIT](https://github.com/uber-go/multierr/blob/v1.11.0/LICENSE.txt) | | go.uber.org/zap | [MIT](https://github.com/uber-go/zap/blob/v1.27.0/LICENSE) | | go.yaml.in/yaml/v2 | [Apache-2.0](https://github.com/yaml/go-yaml/blob/v2.4.2/LICENSE) | @@ -261,6 +301,7 @@ run `task generate:third-party-licenses-list` | google.golang.org/protobuf | [BSD-3-Clause](https://github.com/protocolbuffers/protobuf-go/blob/v1.36.6/LICENSE) | | gopkg.in/evanphx/json-patch.v4 | [BSD-3-Clause](https://github.com/evanphx/json-patch/blob/v4.12.0/LICENSE) | | gopkg.in/inf.v0 | [BSD-3-Clause](https://github.com/go-inf/inf/blob/v0.9.1/LICENSE) | +| gopkg.in/natefinch/lumberjack.v2 | [MIT](https://github.com/natefinch/lumberjack/blob/v2.2.1/LICENSE) | | gopkg.in/yaml.v2 | [Apache-2.0](https://github.com/go-yaml/yaml/blob/v2.4.0/LICENSE) | | gopkg.in/yaml.v3 | [MIT](https://github.com/go-yaml/yaml/blob/v3.0.1/LICENSE) | | helm.sh/helm/v3 | [Apache-2.0](https://github.com/helm/helm/blob/v3.18.5/LICENSE) | @@ -275,12 +316,22 @@ run `task generate:third-party-licenses-list` | k8s.io/component-base | [Apache-2.0](https://github.com/kubernetes/component-base/blob/v0.33.3/LICENSE) | | k8s.io/component-helpers | [Apache-2.0](https://github.com/kubernetes/component-helpers/blob/v0.33.3/LICENSE) | | k8s.io/klog/v2 | [Apache-2.0](https://github.com/kubernetes/klog/blob/v2.130.1/LICENSE) | +<<<<<<< HEAD | k8s.io/kube-openapi/pkg | [Apache-2.0](https://github.com/kubernetes/kube-openapi/blob/c8a335a9a2ff/LICENSE) | | k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json | [BSD-3-Clause](https://github.com/kubernetes/kube-openapi/blob/c8a335a9a2ff/pkg/internal/third_party/go-json-experiment/json/LICENSE) | | k8s.io/kube-openapi/pkg/internal/third_party/govalidator | [MIT](https://github.com/kubernetes/kube-openapi/blob/c8a335a9a2ff/pkg/internal/third_party/govalidator/LICENSE) | | k8s.io/kube-openapi/pkg/validation/errors | [Apache-2.0](https://github.com/kubernetes/kube-openapi/blob/c8a335a9a2ff/pkg/validation/errors/LICENSE) | | k8s.io/kube-openapi/pkg/validation/spec | [Apache-2.0](https://github.com/kubernetes/kube-openapi/blob/c8a335a9a2ff/pkg/validation/spec/LICENSE) | | k8s.io/kube-openapi/pkg/validation/strfmt | [Apache-2.0](https://github.com/kubernetes/kube-openapi/blob/c8a335a9a2ff/pkg/validation/strfmt/LICENSE) | +======= +| k8s.io/kms | [Apache-2.0](https://github.com/kubernetes/kms/blob/v0.34.1/LICENSE) | +| k8s.io/kube-openapi/pkg | [Apache-2.0](https://github.com/kubernetes/kube-openapi/blob/f3f2b991d03b/LICENSE) | +| k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json | [BSD-3-Clause](https://github.com/kubernetes/kube-openapi/blob/f3f2b991d03b/pkg/internal/third_party/go-json-experiment/json/LICENSE) | +| k8s.io/kube-openapi/pkg/internal/third_party/govalidator | [MIT](https://github.com/kubernetes/kube-openapi/blob/f3f2b991d03b/pkg/internal/third_party/govalidator/LICENSE) | +| k8s.io/kube-openapi/pkg/validation/errors | [Apache-2.0](https://github.com/kubernetes/kube-openapi/blob/f3f2b991d03b/pkg/validation/errors/LICENSE) | +| k8s.io/kube-openapi/pkg/validation/spec | [Apache-2.0](https://github.com/kubernetes/kube-openapi/blob/f3f2b991d03b/pkg/validation/spec/LICENSE) | +| k8s.io/kube-openapi/pkg/validation/strfmt | [Apache-2.0](https://github.com/kubernetes/kube-openapi/blob/f3f2b991d03b/pkg/validation/strfmt/LICENSE) | +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) | k8s.io/kubectl/pkg | [Apache-2.0](https://github.com/kubernetes/kubectl/blob/v0.33.3/LICENSE) | | k8s.io/utils | [Apache-2.0](https://github.com/kubernetes/utils/blob/0f33e8f1c979/LICENSE) | | k8s.io/utils/internal/third_party/forked/golang | [BSD-3-Clause](https://github.com/kubernetes/utils/blob/0f33e8f1c979/internal/third_party/forked/golang/LICENSE) | diff --git a/operator/chart/chart.go b/operator/chart/chart.go index b2a98be0a..044ee5aed 100644 --- a/operator/chart/chart.go +++ b/operator/chart/chart.go @@ -60,6 +60,8 @@ func render(dot *helmette.Dot) []kube.Object { Deployment(dot), PreInstallCRDJob(dot), CRDJobServiceAccount(dot), + PostUpgradeMigrationJob(dot), + MigrationJobServiceAccount(dot), } for _, role := range Roles(dot) { diff --git a/operator/chart/post_upgrade_migration_job.go b/operator/chart/post_upgrade_migration_job.go new file mode 100644 index 000000000..aa9ca49db --- /dev/null +++ b/operator/chart/post_upgrade_migration_job.go @@ -0,0 +1,85 @@ +// Copyright 2026 Redpanda Data, Inc. +// +// Use of this software is governed by the Business Source License +// included in the file licenses/BSL.md +// +// As of the Change Date specified in that file, in accordance with +// the Business Source License, use of this software will be governed +// by the Apache License, Version 2.0 + +// +gotohelm:filename=_post-upgrade-migration-job.go.tpl +package operator + +import ( + "fmt" + + batchv1 "k8s.io/api/batch/v1" + corev1 "k8s.io/api/core/v1" + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" + "k8s.io/utils/ptr" + + "github.com/redpanda-data/redpanda-operator/gotohelm/helmette" +) + +// This is a post-upgrade job to make sure it just runs once. +func PostUpgradeMigrationJob(dot *helmette.Dot) *batchv1.Job { + values := helmette.Unwrap[Values](dot.Values) + + return &batchv1.Job{ + TypeMeta: metav1.TypeMeta{ + APIVersion: "batch/v1", + Kind: "Job", + }, + ObjectMeta: metav1.ObjectMeta{ + Name: fmt.Sprintf("%s-migration", Fullname(dot)), + Namespace: dot.Release.Namespace, + Labels: helmette.Merge( + Labels(dot), + ), + Annotations: map[string]string{ + "helm.sh/hook": "post-upgrade", + "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded,hook-failed", + // run this after the CRD job + "helm.sh/hook-weight": "-4", + }, + }, + Spec: batchv1.JobSpec{ + Template: corev1.PodTemplateSpec{ + ObjectMeta: metav1.ObjectMeta{ + Annotations: values.PodAnnotations, + Labels: helmette.Merge(SelectorLabels(dot), values.PodLabels), + }, + Spec: corev1.PodSpec{ + RestartPolicy: corev1.RestartPolicyOnFailure, + AutomountServiceAccountToken: ptr.To(false), + TerminationGracePeriodSeconds: ptr.To(int64(10)), + ImagePullSecrets: values.ImagePullSecrets, + ServiceAccountName: MigrationJobServiceAccountName(dot), + NodeSelector: values.NodeSelector, + Tolerations: values.Tolerations, + Volumes: []corev1.Volume{serviceAccountTokenVolume()}, + Containers: migrationJobContainers(dot), + }, + }, + }, + } +} + +func migrationJobContainers(dot *helmette.Dot) []corev1.Container { + values := helmette.Unwrap[Values](dot.Values) + + args := []string{"migration"} + + return []corev1.Container{ + { + Name: "migration", + Image: containerImage(dot), + ImagePullPolicy: values.Image.PullPolicy, + Command: []string{"/redpanda-operator"}, + Args: args, + SecurityContext: &corev1.SecurityContext{AllowPrivilegeEscalation: ptr.To(false)}, + VolumeMounts: []corev1.VolumeMount{serviceAccountTokenVolumeMount()}, + Resources: values.Resources, + }, + } +} diff --git a/operator/chart/rbac.go b/operator/chart/rbac.go index c935a8254..0b3571108 100644 --- a/operator/chart/rbac.go +++ b/operator/chart/rbac.go @@ -29,11 +29,15 @@ type RBACBundle struct { func clusterRoleBundles(dot *helmette.Dot) []RBACBundle { values := helmette.Unwrap[Values](dot.Values) +<<<<<<< HEAD if !values.RBAC.Create { return nil } return []RBACBundle{ +======= + bundles := []RBACBundle{ +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) { Name: Fullname(dot), Subject: ServiceAccountName(dot), @@ -80,6 +84,21 @@ func clusterRoleBundles(dot *helmette.Dot) []RBACBundle { }, }, } + + // the migration job needs the same general RBAC policy as the operator itself + bundles = append(bundles, RBACBundle{ + Name: MigrationJobServiceAccountName(dot), + Enabled: true, + Subject: MigrationJobServiceAccountName(dot), + Annotations: map[string]string{ + "helm.sh/hook": "post-upgrade", + "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded,hook-failed", + "helm.sh/hook-weight": "-10", + }, + RuleFiles: bundles[0].RuleFiles, + }) + + return bundles } func ClusterRoles(dot *helmette.Dot) []rbacv1.ClusterRole { diff --git a/operator/chart/serviceaccount.go b/operator/chart/serviceaccount.go index 2412d450a..c66712c6f 100644 --- a/operator/chart/serviceaccount.go +++ b/operator/chart/serviceaccount.go @@ -28,6 +28,10 @@ func CRDJobServiceAccountName(dot *helmette.Dot) string { return ServiceAccountName(dot) + "-crd-job" } +func MigrationJobServiceAccountName(dot *helmette.Dot) string { + return ServiceAccountName(dot) + "-migration-job" +} + func ServiceAccount(dot *helmette.Dot) *corev1.ServiceAccount { values := helmette.Unwrap[Values](dot.Values) @@ -83,3 +87,33 @@ func CRDJobServiceAccount(dot *helmette.Dot) *corev1.ServiceAccount { AutomountServiceAccountToken: ptr.To(false), } } + +// MigrationJobServiceAccount returns a ServiceAccount that's used by +// [PostUpgradeMigrationJob]. Helm will delete it after the job succeeds. +func MigrationJobServiceAccount(dot *helmette.Dot) *corev1.ServiceAccount { + values := helmette.Unwrap[Values](dot.Values) + + return &corev1.ServiceAccount{ + TypeMeta: metav1.TypeMeta{ + Kind: "ServiceAccount", + APIVersion: "v1", + }, + ObjectMeta: metav1.ObjectMeta{ + Name: MigrationJobServiceAccountName(dot), + Labels: Labels(dot), + Namespace: dot.Release.Namespace, + Annotations: helmette.Merge( + helmette.Default( + map[string]string{}, + values.ServiceAccount.Annotations, + ), + map[string]string{ + "helm.sh/hook": "post-upgrade", + "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded,hook-failed", + "helm.sh/hook-weight": "-10", + }, + ), + }, + AutomountServiceAccountToken: ptr.To(false), + } +} diff --git a/operator/chart/templates/_chart.go.tpl b/operator/chart/templates/_chart.go.tpl index c9f1fc21f..013468d58 100644 --- a/operator/chart/templates/_chart.go.tpl +++ b/operator/chart/templates/_chart.go.tpl @@ -4,6 +4,7 @@ {{- $dot := (index .a 0) -}} {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} +<<<<<<< HEAD {{- $manifests := (list (get (fromJson (include "operator.Issuer" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.Certificate" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.ConfigMap" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.MetricsService" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.WebhookService" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.MutatingWebhookConfiguration" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.ValidatingWebhookConfiguration" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.ServiceAccount" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.ServiceMonitor" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.Deployment" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.PreInstallCRDJob" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.CRDJobServiceAccount" (dict "a" (list $dot)))) "r")) -}} {{- range $_, $role := (get (fromJson (include "operator.Roles" (dict "a" (list $dot)))) "r") -}} {{- $manifests = (concat (default (list) $manifests) (list $role)) -}} @@ -11,6 +12,9 @@ {{- if $_is_returning -}} {{- break -}} {{- end -}} +======= +{{- $manifests := (list (get (fromJson (include "operator.Issuer" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.Certificate" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.ConfigMap" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.MetricsService" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.WebhookService" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.MutatingWebhookConfiguration" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.ValidatingWebhookConfiguration" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.ServiceAccount" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.ServiceMonitor" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.Deployment" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.PreInstallCRDJob" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.CRDJobServiceAccount" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.PostUpgradeMigrationJob" (dict "a" (list $dot)))) "r") (get (fromJson (include "operator.MigrationJobServiceAccount" (dict "a" (list $dot)))) "r")) -}} +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) {{- range $_, $cr := (get (fromJson (include "operator.ClusterRoles" (dict "a" (list $dot)))) "r") -}} {{- $manifests = (concat (default (list) $manifests) (list $cr)) -}} {{- end -}} diff --git a/operator/chart/templates/_post-upgrade-migration-job.go.tpl b/operator/chart/templates/_post-upgrade-migration-job.go.tpl new file mode 100644 index 000000000..5872585e9 --- /dev/null +++ b/operator/chart/templates/_post-upgrade-migration-job.go.tpl @@ -0,0 +1,26 @@ +{{- /* GENERATED FILE DO NOT EDIT */ -}} +{{- /* Transpiled by gotohelm from "github.com/redpanda-data/redpanda-operator/operator/chart/post_upgrade_migration_job.go" */ -}} + +{{- define "operator.PostUpgradeMigrationJob" -}} +{{- $dot := (index .a 0) -}} +{{- range $_ := (list 1) -}} +{{- $_is_returning := false -}} +{{- $values := $dot.Values.AsMap -}} +{{- $_is_returning = true -}} +{{- (dict "r" (mustMergeOverwrite (dict "metadata" (dict) "spec" (dict "template" (dict "metadata" (dict) "spec" (dict "containers" (coalesce nil)))) "status" (dict)) (mustMergeOverwrite (dict) (dict "apiVersion" "batch/v1" "kind" "Job")) (dict "metadata" (mustMergeOverwrite (dict) (dict "name" (printf "%s-migration" (get (fromJson (include "operator.Fullname" (dict "a" (list $dot)))) "r")) "namespace" $dot.Release.Namespace "labels" (merge (dict) (get (fromJson (include "operator.Labels" (dict "a" (list $dot)))) "r")) "annotations" (dict "helm.sh/hook" "post-upgrade" "helm.sh/hook-delete-policy" "before-hook-creation,hook-succeeded,hook-failed" "helm.sh/hook-weight" "-4"))) "spec" (mustMergeOverwrite (dict "template" (dict "metadata" (dict) "spec" (dict "containers" (coalesce nil)))) (dict "template" (mustMergeOverwrite (dict "metadata" (dict) "spec" (dict "containers" (coalesce nil))) (dict "metadata" (mustMergeOverwrite (dict) (dict "annotations" $values.podAnnotations "labels" (merge (dict) (get (fromJson (include "operator.SelectorLabels" (dict "a" (list $dot)))) "r") $values.podLabels))) "spec" (mustMergeOverwrite (dict "containers" (coalesce nil)) (dict "restartPolicy" "OnFailure" "automountServiceAccountToken" false "terminationGracePeriodSeconds" ((10 | int64) | int64) "imagePullSecrets" $values.imagePullSecrets "serviceAccountName" (get (fromJson (include "operator.MigrationJobServiceAccountName" (dict "a" (list $dot)))) "r") "nodeSelector" $values.nodeSelector "tolerations" $values.tolerations "volumes" (list (get (fromJson (include "operator.serviceAccountTokenVolume" (dict "a" (list)))) "r")) "containers" (get (fromJson (include "operator.migrationJobContainers" (dict "a" (list $dot)))) "r")))))))))) | toJson -}} +{{- break -}} +{{- end -}} +{{- end -}} + +{{- define "operator.migrationJobContainers" -}} +{{- $dot := (index .a 0) -}} +{{- range $_ := (list 1) -}} +{{- $_is_returning := false -}} +{{- $values := $dot.Values.AsMap -}} +{{- $args := (list "migration") -}} +{{- $_is_returning = true -}} +{{- (dict "r" (list (mustMergeOverwrite (dict "name" "" "resources" (dict)) (dict "name" "migration" "image" (get (fromJson (include "operator.containerImage" (dict "a" (list $dot)))) "r") "imagePullPolicy" $values.image.pullPolicy "command" (list "/redpanda-operator") "args" $args "securityContext" (mustMergeOverwrite (dict) (dict "allowPrivilegeEscalation" false)) "volumeMounts" (list (get (fromJson (include "operator.serviceAccountTokenVolumeMount" (dict "a" (list)))) "r")) "resources" $values.resources)))) | toJson -}} +{{- break -}} +{{- end -}} +{{- end -}} + diff --git a/operator/chart/templates/_rbac.go.tpl b/operator/chart/templates/_rbac.go.tpl index 7145a00fd..d6b216d03 100644 --- a/operator/chart/templates/_rbac.go.tpl +++ b/operator/chart/templates/_rbac.go.tpl @@ -5,6 +5,7 @@ {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} {{- $values := $dot.Values.AsMap -}} +<<<<<<< HEAD {{- if (not $values.rbac.create) -}} {{- $_is_returning = true -}} {{- (dict "r" (coalesce nil)) | toJson -}} @@ -12,6 +13,12 @@ {{- end -}} {{- $_is_returning = true -}} {{- (dict "r" (list (mustMergeOverwrite (dict "Name" "" "Subject" "" "Enabled" false "RuleFiles" (coalesce nil) "Annotations" (coalesce nil)) (dict "Name" (get (fromJson (include "operator.Fullname" (dict "a" (list $dot)))) "r") "Subject" (get (fromJson (include "operator.ServiceAccountName" (dict "a" (list $dot)))) "r") "Enabled" (eq $values.scope "Cluster") "RuleFiles" (list "files/rbac/leader-election.ClusterRole.yaml" "files/rbac/pvcunbinder.ClusterRole.yaml" "files/rbac/rack-awareness.ClusterRole.yaml" "files/rbac/v1-manager.ClusterRole.yaml"))) (mustMergeOverwrite (dict "Name" "" "Subject" "" "Enabled" false "RuleFiles" (coalesce nil) "Annotations" (coalesce nil)) (dict "Name" (get (fromJson (include "operator.Fullname" (dict "a" (list $dot)))) "r") "Subject" (get (fromJson (include "operator.ServiceAccountName" (dict "a" (list $dot)))) "r") "Enabled" (eq $values.scope "Namespace") "RuleFiles" (list "files/rbac/leader-election.ClusterRole.yaml" "files/rbac/v2-manager.ClusterRole.yaml"))) (mustMergeOverwrite (dict "Name" "" "Subject" "" "Enabled" false "RuleFiles" (coalesce nil) "Annotations" (coalesce nil)) (dict "Name" (get (fromJson (include "operator.cleanForK8sWithSuffix" (dict "a" (list (get (fromJson (include "operator.Fullname" (dict "a" (list $dot)))) "r") "additional-controllers")))) "r") "Subject" (get (fromJson (include "operator.ServiceAccountName" (dict "a" (list $dot)))) "r") "Enabled" (and (eq $values.scope "Namespace") $values.rbac.createAdditionalControllerCRs) "RuleFiles" (list "files/rbac/decommission.ClusterRole.yaml" "files/rbac/node-watcher.ClusterRole.yaml" "files/rbac/old-decommission.ClusterRole.yaml" "files/rbac/pvcunbinder.ClusterRole.yaml"))) (mustMergeOverwrite (dict "Name" "" "Subject" "" "Enabled" false "RuleFiles" (coalesce nil) "Annotations" (coalesce nil)) (dict "Name" (get (fromJson (include "operator.CRDJobServiceAccountName" (dict "a" (list $dot)))) "r") "Enabled" (or $values.crds.enabled $values.crds.experimental) "Subject" (get (fromJson (include "operator.CRDJobServiceAccountName" (dict "a" (list $dot)))) "r") "Annotations" (dict "helm.sh/hook" "pre-install,pre-upgrade" "helm.sh/hook-delete-policy" "before-hook-creation,hook-succeeded,hook-failed" "helm.sh/hook-weight" "-10") "RuleFiles" (list "files/rbac/crd-installation.ClusterRole.yaml"))))) | toJson -}} +======= +{{- $bundles := (list (mustMergeOverwrite (dict "Enabled" false "Name" "" "Subject" "" "RuleFiles" (coalesce nil) "Annotations" (coalesce nil)) (dict "Name" (get (fromJson (include "operator.Fullname" (dict "a" (list $dot)))) "r") "Enabled" true "Subject" (get (fromJson (include "operator.ServiceAccountName" (dict "a" (list $dot)))) "r") "RuleFiles" (dict "files/rbac/console.ClusterRole.yaml" true "files/rbac/leader-election.ClusterRole.yaml" true "files/rbac/leader-election.Role.yaml" true "files/rbac/pvcunbinder.ClusterRole.yaml" true "files/rbac/pvcunbinder.Role.yaml" true "files/rbac/rack-awareness.ClusterRole.yaml" true "files/rbac/rpk-debug-bundle.Role.yaml" true "files/rbac/sidecar.Role.yaml" true "files/rbac/v1-manager.ClusterRole.yaml" $values.vectorizedControllers.enabled "files/rbac/v1-manager.Role.yaml" $values.vectorizedControllers.enabled "files/rbac/v2-manager.ClusterRole.yaml" true "files/rbac/multicluster-manager.ClusterRole.yaml" $values.multicluster.enabled))) (mustMergeOverwrite (dict "Enabled" false "Name" "" "Subject" "" "RuleFiles" (coalesce nil) "Annotations" (coalesce nil)) (dict "Name" (get (fromJson (include "operator.cleanForK8sWithSuffix" (dict "a" (list (get (fromJson (include "operator.Fullname" (dict "a" (list $dot)))) "r") "additional-controllers")))) "r") "Enabled" $values.rbac.createAdditionalControllerCRs "Subject" (get (fromJson (include "operator.ServiceAccountName" (dict "a" (list $dot)))) "r") "RuleFiles" (dict "files/rbac/decommission.ClusterRole.yaml" true "files/rbac/decommission.Role.yaml" true "files/rbac/node-watcher.ClusterRole.yaml" true "files/rbac/node-watcher.Role.yaml" true "files/rbac/old-decommission.ClusterRole.yaml" true "files/rbac/old-decommission.Role.yaml" true "files/rbac/pvcunbinder.ClusterRole.yaml" true "files/rbac/pvcunbinder.Role.yaml" true))) (mustMergeOverwrite (dict "Enabled" false "Name" "" "Subject" "" "RuleFiles" (coalesce nil) "Annotations" (coalesce nil)) (dict "Name" (get (fromJson (include "operator.CRDJobServiceAccountName" (dict "a" (list $dot)))) "r") "Enabled" (or $values.crds.enabled $values.crds.experimental) "Subject" (get (fromJson (include "operator.CRDJobServiceAccountName" (dict "a" (list $dot)))) "r") "Annotations" (dict "helm.sh/hook" "pre-install,pre-upgrade" "helm.sh/hook-delete-policy" "before-hook-creation,hook-succeeded,hook-failed" "helm.sh/hook-weight" "-10") "RuleFiles" (dict "files/rbac/crd-installation.ClusterRole.yaml" true)))) -}} +{{- $bundles = (concat (default (list) $bundles) (list (mustMergeOverwrite (dict "Enabled" false "Name" "" "Subject" "" "RuleFiles" (coalesce nil) "Annotations" (coalesce nil)) (dict "Name" (get (fromJson (include "operator.MigrationJobServiceAccountName" (dict "a" (list $dot)))) "r") "Enabled" true "Subject" (get (fromJson (include "operator.MigrationJobServiceAccountName" (dict "a" (list $dot)))) "r") "Annotations" (dict "helm.sh/hook" "post-upgrade" "helm.sh/hook-delete-policy" "before-hook-creation,hook-succeeded,hook-failed" "helm.sh/hook-weight" "-10") "RuleFiles" (index $bundles (0 | int)).RuleFiles)))) -}} +{{- $_is_returning = true -}} +{{- (dict "r" $bundles) | toJson -}} +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) {{- break -}} {{- end -}} {{- end -}} diff --git a/operator/chart/templates/_serviceaccount.go.tpl b/operator/chart/templates/_serviceaccount.go.tpl index 5e1d40d74..c6a7255b3 100644 --- a/operator/chart/templates/_serviceaccount.go.tpl +++ b/operator/chart/templates/_serviceaccount.go.tpl @@ -21,6 +21,16 @@ {{- end -}} {{- end -}} +{{- define "operator.MigrationJobServiceAccountName" -}} +{{- $dot := (index .a 0) -}} +{{- range $_ := (list 1) -}} +{{- $_is_returning := false -}} +{{- $_is_returning = true -}} +{{- (dict "r" (printf "%s%s" (get (fromJson (include "operator.ServiceAccountName" (dict "a" (list $dot)))) "r") "-migration-job")) | toJson -}} +{{- break -}} +{{- end -}} +{{- end -}} + {{- define "operator.ServiceAccount" -}} {{- $dot := (index .a 0) -}} {{- range $_ := (list 1) -}} @@ -53,3 +63,14 @@ {{- end -}} {{- end -}} +{{- define "operator.MigrationJobServiceAccount" -}} +{{- $dot := (index .a 0) -}} +{{- range $_ := (list 1) -}} +{{- $_is_returning := false -}} +{{- $values := $dot.Values.AsMap -}} +{{- $_is_returning = true -}} +{{- (dict "r" (mustMergeOverwrite (dict "metadata" (dict)) (mustMergeOverwrite (dict) (dict "kind" "ServiceAccount" "apiVersion" "v1")) (dict "metadata" (mustMergeOverwrite (dict) (dict "name" (get (fromJson (include "operator.MigrationJobServiceAccountName" (dict "a" (list $dot)))) "r") "labels" (get (fromJson (include "operator.Labels" (dict "a" (list $dot)))) "r") "namespace" $dot.Release.Namespace "annotations" (merge (dict) (default (dict) $values.serviceAccount.annotations) (dict "helm.sh/hook" "post-upgrade" "helm.sh/hook-delete-policy" "before-hook-creation,hook-succeeded,hook-failed" "helm.sh/hook-weight" "-10")))) "automountServiceAccountToken" false))) | toJson -}} +{{- break -}} +{{- end -}} +{{- end -}} + diff --git a/operator/chart/testdata/template-cases.golden.txtar b/operator/chart/testdata/template-cases.golden.txtar index 2166336e0..41c49bd83 100644 --- a/operator/chart/testdata/template-cases.golden.txtar +++ b/operator/chart/testdata/template-cases.golden.txtar @@ -846,18 +846,508 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: +<<<<<<< HEAD helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" creationTimestamp: null +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator +<<<<<<< HEAD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 name: operator-crd-job namespace: default +======= + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-migration-job-default +subjects: +- kind: ServiceAccount + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) -- testdata/case-000.yaml.golden -- --- # Source: operator/templates/entry-point.yaml @@ -1641,25 +2131,26 @@ spec: - --metrics-bind-address=:8443 - --leader-elect - --webhook-enabled=false +<<<<<<< HEAD - --namespace=default - --log-level=a35 - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator +======= command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: 82:UkFHNyv imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 873 + failureThreshold: 348 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 527 - periodSeconds: 607 - successThreshold: 417 - terminationGracePeriodSeconds: 475 - timeoutSeconds: 518 + initialDelaySeconds: 563 + periodSeconds: 640 + successThreshold: 391 + terminationGracePeriodSeconds: 395 + timeoutSeconds: 19 name: manager ports: - containerPort: 9443 @@ -1669,44 +2160,50 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 314 + failureThreshold: 854 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 141 - periodSeconds: 465 - successThreshold: 767 - terminationGracePeriodSeconds: 297 - timeoutSeconds: 596 - resources: {} + initialDelaySeconds: 622 + periodSeconds: 608 + successThreshold: 621 + terminationGracePeriodSeconds: 469 + timeoutSeconds: 167 + resources: + limits: + cpu: "432" + memory: "100" + requests: + cpu: "877" + memory: "488" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsPolicy: ʣĔ湲 - enableServiceLinks: true ephemeralContainers: null - hostUsers: true - hostname: Yspp imagePullSecrets: [] initContainers: [] - nodeName: fZ nodeSelector: {} - priority: 1398662212 - priorityClassName: WaxRXd - resourceClaims: - - name: jU - restartPolicy: 瘛qǯ$謎p铷#瀻璗Aɀ尶士 - runtimeClassName: hCt9J - schedulerName: fKZ9k2 securityContext: runAsUser: 65532 - serviceAccountName: w23J - subdomain: 4Z1p + serviceAccountName: XCatYW terminationGracePeriodSeconds: 10 - tolerations: [] + tolerations: + - effect: UÏ懪wȹUFŰ飽靝旁dʀ + key: ygSy + operator: ɄB唣羀ƀ黮/麭:戥彃 + tolerationSeconds: -6921320176253307000 + value: BwCx + - effect: ½ + key: qkZerCG + operator: vŨ&ʏ輈搌嗠Ì隑襮ǃ嵗)ʨįɤ籺I + value: xt2HL1aXX + - key: wq + operator: C*呿烠ĥØ + tolerationSeconds: -3523271185792740400 + value: H3N0dz9 volumes: - name: kube-api-access projected: @@ -1728,156 +2225,58 @@ spec: path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: koBY-metrics-monitor + app.kubernetes.io/name: ctFdYbtL + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: XCatYW-migration-job namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - 2XzRXgKjP: qV75G - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - k0MXnvN5ry3d: qJm80 - k3SW6gk9w: zIr1y - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: S-crd-job - namespace: default --- testdata/case-001.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-default + app.kubernetes.io/name: ctFdYbtL + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: XCatYW-migration-job-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -1887,42 +2286,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -1931,82 +2329,49 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-additional-controllers-default -rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - patch + - create - apiGroups: - - "" + - authorization.k8s.io resources: - - configmaps - - nodes - - secrets + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - events verbs: - - get - - list - - watch + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete - get - list - patch - update - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch - apiGroups: - "" resources: @@ -2016,113 +2381,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: WSGbu-default -subjects: -- kind: ServiceAccount - name: WSGbu - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: WSGbu-additional-controllers-default -subjects: -- kind: ServiceAccount - name: WSGbu - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -2217,9 +2508,11 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -2229,47 +2522,52 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - create - - delete - - get - - list - - patch - update - - watch - apiGroups: - - networking.k8s.io + - cluster.redpanda.com resources: - - ingresses + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - policy + - cluster.redpanda.com resources: - - poddisruptionbudgets + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - rolebindings - - roles + - leases verbs: - create - delete @@ -2278,70 +2576,37 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-additional-controllers - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create - - patch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - delete - get - list + - patch + - update - watch - apiGroups: - - "" - resources: - - pods - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - "" + - networking.k8s.io resources: - - persistentvolumeclaims + - ingresses verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims + - poddisruptionbudgets verbs: + - create - delete - get - list @@ -2349,272 +2614,111 @@ rules: - update - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list - - watch -- apiGroups: - - apps - resources: - - statefulsets/status - verbs: - patch - update -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-rpk-bundle - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services - verbs: - - get - - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-election-role - namespace: default + app.kubernetes.io/name: ctFdYbtL + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: XCatYW-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: WSGbu-election-role + kind: ClusterRole + name: XCatYW-migration-job-default subjects: - kind: ServiceAccount - name: WSGbu + name: XCatYW-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: WSGbu -subjects: -- kind: ServiceAccount - name: WSGbu - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-additional-controllers - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: WSGbu-additional-controllers -subjects: -- kind: ServiceAccount - name: WSGbu - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-rpk-bundle - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: WSGbu-rpk-bundle -subjects: -- kind: ServiceAccount - name: WSGbu - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: EbX3hB7N ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu + app.kubernetes.io/name: ctFdYbtL + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: XCatYW-migration namespace: default spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: EbX3hB7N - strategy: - type: Hɵ汏ʖǶ,儀o-$UE砵ʦ嬗 template: metadata: annotations: {} - creationTimestamp: null labels: + WOC1K: qg4Of app.kubernetes.io/instance: operator - app.kubernetes.io/name: EbX3hB7N + app.kubernetes.io/name: ctFdYbtL spec: automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=TNizkRf0 - - --configurator-tag=H6X3S - - --configurator-base-image=p9Di - - 3AeeXxo - - EoLf5 - - "9" + - migration command: - - /manager - env: [] - image: p9Di:H6X3S - imagePullPolicy: Always - livenessProbe: - failureThreshold: 537 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 32 - periodSeconds: 531 - successThreshold: 999 - terminationGracePeriodSeconds: 452 - timeoutSeconds: 766 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 624 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 735 - periodSeconds: 782 - successThreshold: 328 - terminationGracePeriodSeconds: 279 - timeoutSeconds: 195 - resources: {} + - /redpanda-operator + image: 82:UkFHNyv + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "432" + memory: "100" + requests: + cpu: "877" + memory: "488" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - ephemeralContainers: null imagePullSecrets: [] - initContainers: [] nodeSelector: {} - securityContext: - runAsUser: 65532 - serviceAccountName: WSGbu + restartPolicy: OnFailure + serviceAccountName: XCatYW-migration-job terminationGracePeriodSeconds: 10 - tolerations: [] + tolerations: + - effect: UÏ懪wȹUFŰ飽靝旁dʀ + key: ygSy + operator: ɄB唣羀ƀ黮/麭:戥彃 + tolerationSeconds: -6921320176253307000 + value: BwCx + - effect: ½ + key: qkZerCG + operator: vŨ&ʏ輈搌嗠Ì隑襮ǃ嵗)ʨįɤ籺I + value: xt2HL1aXX + - key: wq + operator: C*呿烠ĥØ + tolerationSeconds: -3523271185792740400 + value: H3N0dz9 volumes: - name: kube-api-access projected: @@ -2634,26 +2738,7 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: WSGbu-crd-job - namespace: default --- testdata/case-002.yaml.golden -- +-- testdata/case-001.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -2661,63 +2746,54 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + apiVersion: aaz7I health: healthProbeBindAddress: :8081 - kind: ControllerManagerConfig + kind: Jk leaderElection: leaderElect: true - resourceName: aa9fc693.vectorized.io + resourceName: "3450" metrics: bindAddress: 127.0.0.1:8080 webhook: port: 9443 kind: ConfigMap metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-config + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-metrics-reader + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -2728,35 +2804,34 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-default + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -2766,42 +2841,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -2810,85 +2884,49 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-additional-controllers-default -rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - patch + - create - apiGroups: - - "" + - authorization.k8s.io resources: - - configmaps - - nodes - - secrets + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - events verbs: - - get - - list - - watch + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete - get - list - patch - update - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch - apiGroups: - "" resources: @@ -2898,125 +2936,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: Dx441G-default -subjects: -- kind: ServiceAccount - name: Dx441G - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: Dx441G-additional-controllers-default -subjects: -- kind: ServiceAccount - name: Dx441G - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -3110,6 +3062,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -3162,6 +3171,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -3175,22 +3186,23 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-additional-controllers - namespace: default + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-additional-controllers-default rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch - apiGroups: - "" resources: @@ -3224,6 +3236,34 @@ rules: - get - list - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -3234,6 +3274,16 @@ rules: - list - patch - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -3248,10 +3298,12 @@ rules: - apiGroups: - "" resources: - - pods + - persistentvolumes verbs: - get - list + - patch + - update - watch - apiGroups: - apps @@ -3260,173 +3312,88 @@ rules: verbs: - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes verbs: - - delete - get - list + - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: Dx441G-election-role -subjects: -- kind: ServiceAccount - name: Dx441G - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: Dx441G -subjects: -- kind: ServiceAccount - name: Dx441G - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-additional-controllers - namespace: default + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: Dx441G-additional-controllers + kind: ClusterRole + name: do1u-default subjects: - kind: ServiceAccount - name: Dx441G + name: do1u namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-rpk-bundle - namespace: default + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: Dx441G-rpk-bundle + kind: ClusterRole + name: do1u-additional-controllers-default subjects: - kind: ServiceAccount - name: Dx441G + name: do1u namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-metrics-service + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-metrics-service namespace: default spec: ports: @@ -3435,57 +3402,40 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: HICN + app.kubernetes.io/name: 8zwp --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - BYFlp: 1ue - PW45cS5PlOC: K5ky3WbW - Rb: A - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u namespace: default spec: - replicas: 826057285 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: HICN + app.kubernetes.io/name: 8zwp strategy: - rollingUpdate: - maxSurge: 219927532 - maxUnavailable: 304746894 - type: "N" + type: RollingUpdate template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: HICN + app.kubernetes.io/name: 8zwp spec: - affinity: - nodeAffinity: {} - podAffinity: {} automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=Ae - - --configurator-tag=v25.1.4 +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager @@ -3493,15 +3443,15 @@ spec: image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 218 + failureThreshold: 873 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 768 - periodSeconds: 416 - successThreshold: 445 - terminationGracePeriodSeconds: 710 - timeoutSeconds: 973 + initialDelaySeconds: 527 + periodSeconds: 607 + successThreshold: 417 + terminationGracePeriodSeconds: 475 + timeoutSeconds: 518 name: manager ports: - containerPort: 9443 @@ -3511,15 +3461,15 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 183 + failureThreshold: 314 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 346 - periodSeconds: 821 - successThreshold: 910 - terminationGracePeriodSeconds: 522 - timeoutSeconds: 285 + initialDelaySeconds: 141 + periodSeconds: 465 + successThreshold: 767 + terminationGracePeriodSeconds: 297 + timeoutSeconds: 596 resources: {} securityContext: allowPrivilegeEscalation: false @@ -3527,16 +3477,26 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true + dnsPolicy: ʣĔ湲 + enableServiceLinks: true ephemeralContainers: null - imagePullSecrets: - - name: fAr - - name: naZgh9c3e2j - - {} + hostUsers: true + hostname: Yspp + imagePullSecrets: [] initContainers: [] + nodeName: fZ nodeSelector: {} + priority: 1398662212 + priorityClassName: WaxRXd + resourceClaims: + - name: jU + restartPolicy: 瘛qǯ$謎p铷#瀻璗Aɀ尶士 + runtimeClassName: hCt9J + schedulerName: fKZ9k2 securityContext: runAsUser: 65532 - serviceAccountName: Dx441G + serviceAccountName: w23J + subdomain: 4Z1p terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -3558,6 +3518,8 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace +<<<<<<< HEAD +======= --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -3565,113 +3527,65 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: HICN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Dx441G-crd-job - namespace: default --- testdata/case-003.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-config + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-default + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas + - horizontalpodautoscalers verbs: - create - delete @@ -3683,40 +3597,51 @@ rules: - apiGroups: - cluster.redpanda.com resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - consoles verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles/status verbs: - get - patch - update - apiGroups: - - cluster.redpanda.com + - networking.k8s.io resources: - - schemas - - topics - - users + - ingresses verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - authentication.k8s.io resources: - - clusterrolebindings - - clusterroles + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps verbs: - create - delete @@ -3725,155 +3650,127 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-additional-controllers-default -rules: - apiGroups: - "" resources: - - persistentvolumes + - events verbs: + - create - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps - - nodes - - secrets + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - persistentvolumes verbs: - - delete - get - list - patch - - update + - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - persistentvolumeclaims + - pods verbs: + - delete - get - list - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get - apiGroups: - "" resources: - configmaps - - secrets + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumes + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions verbs: - get - list - watch - apiGroups: - - "" + - apps resources: - - persistentvolumes + - deployments + - statefulsets verbs: + - create + - delete - get - list - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: rEba-default -subjects: -- kind: ServiceAccount - name: rEba - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: rEba-additional-controllers-default -subjects: -- kind: ServiceAccount - name: rEba - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-election-role - namespace: default -rules: - apiGroups: - - "" + - autoscaling resources: - - configmaps + - horizontalpodautoscalers verbs: - create - delete @@ -3883,16 +3780,22 @@ rules: - update - watch - apiGroups: - - "" + - batch resources: - - events + - jobs verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - cert-manager.io resources: - - leases + - certificates + - issuers verbs: - create - delete @@ -3901,26 +3804,12 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba - namespace: default -rules: - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -3930,13 +3819,52 @@ rules: - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - configmaps - - pods - - secrets - - serviceaccounts - - services + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -3946,25 +3874,34 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - apps + - networking.k8s.io resources: - - controllerrevisions + - ingresses verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - apps + - policy resources: - - deployments - - statefulsets + - poddisruptionbudgets verbs: - create - delete @@ -3974,9 +3911,12 @@ rules: - update - watch - apiGroups: - - autoscaling + - rbac.authorization.k8s.io resources: - - horizontalpodautoscalers + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: - create - delete @@ -3985,10 +3925,184 @@ rules: - patch - update - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: do1u-migration-job-default +subjects: +- kind: ServiceAccount + name: do1u-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8zwp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: do1u-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8zwp + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "721" + memory: "159" + requests: + cpu: "681" + memory: "713" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: do1u-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-002.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: LenOjkJa + health: + healthProbeBindAddress: :8081 + kind: 8lbW + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: q3m + webhook: + port: 450 +kind: ConfigMap +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-default +rules: - apiGroups: - - batch + - "" resources: - - jobs + - configmaps + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -3998,10 +4112,9 @@ rules: - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - issuers + - deployments verbs: - create - delete @@ -4011,9 +4124,9 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - autoscaling resources: - - leases + - horizontalpodautoscalers verbs: - create - delete @@ -4023,10 +4136,9 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - consoles verbs: - create - delete @@ -4035,6 +4147,14 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update - apiGroups: - networking.k8s.io resources: @@ -4048,9 +4168,21 @@ rules: - update - watch - apiGroups: - - policy + - authentication.k8s.io resources: - - poddisruptionbudgets + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps verbs: - create - delete @@ -4060,10 +4192,16 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - "" resources: - - rolebindings - - roles + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -4072,33 +4210,20 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-additional-controllers - namespace: default -rules: - apiGroups: - "" resources: - - events + - persistentvolumes verbs: - - create + - get + - list - patch + - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -4107,30 +4232,58 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods - - secrets + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - get - list - - watch - apiGroups: - - apps + - coordination.k8s.io resources: - - statefulsets + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumeclaims + - configmaps verbs: + - create - delete - get - list - patch - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -4139,158 +4292,535 @@ rules: - delete - get - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list - patch - update - watch - apiGroups: - "" resources: - - pods + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services verbs: + - create - get - list + - patch + - update - watch - apiGroups: - apps resources: - - statefulsets/status + - statefulsets verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - "" + - cert-manager.io resources: - - persistentvolumeclaims - - pods + - certificates + - clusterissuers + - issuers verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - networking.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - ingresses verbs: + - create + - delete - get - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: rEba-election-role -subjects: -- kind: ServiceAccount - name: rEba - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: rEba -subjects: -- kind: ServiceAccount - name: rEba - namespace: default + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-additional-controllers - namespace: default + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: rEba-additional-controllers + kind: ClusterRole + name: zFkw3t-default subjects: - kind: ServiceAccount - name: rEba + name: zFkw3t namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-rpk-bundle - namespace: default + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: rEba-rpk-bundle + kind: ClusterRole + name: zFkw3t-additional-controllers-default subjects: - kind: ServiceAccount - name: rEba + name: zFkw3t namespace: default --- # Source: operator/templates/entry-point.yaml @@ -4298,14 +4828,13 @@ apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-metrics-service + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-metrics-service namespace: default spec: ports: @@ -4314,79 +4843,63 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: kzHCtV + app.kubernetes.io/name: llRXnk1 --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t namespace: default spec: replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: kzHCtV + app.kubernetes.io/name: llRXnk1 strategy: - type: RollingUpdate + type: 麫ƐȈ template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: kzHCtV + app.kubernetes.io/name: llRXnk1 spec: - affinity: - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - topologyKey: EISx1Cm - weight: -635686610 - - podAffinityTerm: - matchLabelKeys: - - rgqfrK - - ELazIMD - topologyKey: vYPE - weight: -1403728953 automountServiceAccountToken: false containers: - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=true - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect + - --log-level=OJGBm + - --metrics-bind-address=:8443 - --webhook-enabled=false - - --namespace=default - - --log-level=CcZY - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator - - 4ApSMU1 - - r - - BXVuKkMQ command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 336 + failureThreshold: 489 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 728 - periodSeconds: 843 - successThreshold: 454 - terminationGracePeriodSeconds: 712 - timeoutSeconds: 557 + initialDelaySeconds: 434 + periodSeconds: 613 + successThreshold: 227 + terminationGracePeriodSeconds: 83 + timeoutSeconds: 136 name: manager ports: - containerPort: 9443 @@ -4396,22 +4909,16 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 820 + failureThreshold: 478 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 827 - periodSeconds: 213 - successThreshold: 999 - terminationGracePeriodSeconds: 721 - timeoutSeconds: 221 - resources: - limits: - cpu: "666" - memory: "812" - requests: - cpu: "587" - memory: "830" + initialDelaySeconds: 714 + periodSeconds: 534 + successThreshold: 593 + terminationGracePeriodSeconds: 64 + timeoutSeconds: 687 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -4421,25 +4928,19 @@ spec: ephemeralContainers: null imagePullSecrets: [] initContainers: [] - nodeSelector: - wua: k2W + nodeSelector: {} securityContext: runAsUser: 65532 - serviceAccountName: rEba + serviceAccountName: zFkw3t terminationGracePeriodSeconds: 10 tolerations: - - effect: 弍ȏʭșp馁®糋ɤ鞗桸ǚ棎MÃɛ鞍sK - key: v - operator: ɮ'7ʑ桒ɉʖǍ翌Đ媏鿩1褉 - value: WAOe - - effect: Ė)İĒÙ\ģǧɹ貏gʢVǘ僘.5 - key: OsAm - operator: ȶ^崬ƨƔ5享õÚ - value: BBBZ - - effect: 袝逥Ǹ5劚叞謨ĝ鸆鲧忂úa萜絇ƗwHƼ - key: 0K - operator: 枑- - value: wF + - key: 7RwO + operator: F<螃I鏏ÄʼnǼ偽鞎ȭ + tolerationSeconds: 447019075627230000 + value: ZYo + - effect: '@泅萪罡«țI搽ĪǴ4t<ł竮廞' + key: zSAjxRPNZrnIE + value: 91fG volumes: - name: kube-api-access projected: @@ -4469,16 +4970,14 @@ metadata: helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rEba-crd-job + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-crd-job namespace: default --- testdata/case-004.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -4486,99 +4985,91 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - Rt5: OeMr - bO3NPc: qn0ImYNRP - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: SpE0 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: uNM - health: - healthProbeBindAddress: :8081 - kind: "3" - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-config + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-metrics-reader + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-crd-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions verbs: + - create - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: {} - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-default + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas + - horizontalpodautoscalers verbs: - create - delete @@ -4590,40 +5081,70 @@ rules: - apiGroups: - cluster.redpanda.com resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - consoles verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles/status verbs: - get - patch - update - apiGroups: - - cluster.redpanda.com + - networking.k8s.io resources: - - schemas - - topics - - users + - ingresses verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - authentication.k8s.io resources: - - clusterrolebindings - - clusterroles + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -4632,52 +5153,76 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-additional-controllers-default -rules: - apiGroups: - "" resources: - persistentvolumes verbs: + - get + - list - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch - apiGroups: - "" resources: - - configmaps - nodes - - secrets verbs: - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - nodes verbs: - get - list @@ -4685,106 +5230,62 @@ rules: - apiGroups: - "" resources: - - configmaps - - secrets + - persistentvolumeclaims verbs: + - delete - get - list - watch - apiGroups: - "" resources: - - persistentvolumes + - pods verbs: + - delete - get - list - patch - update - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services verbs: + - create - get - list + - patch + - update - watch - apiGroups: - - "" + - apps resources: - - persistentvolumes + - statefulsets verbs: + - create + - delete - get - list - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: kdh6Z-default -subjects: -- kind: ServiceAccount - name: SpE0 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: kdh6Z-additional-controllers-default -subjects: -- kind: ServiceAccount - name: SpE0 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-election-role - namespace: default -rules: - apiGroups: - - "" + - cert-manager.io resources: - - configmaps + - certificates + - clusterissuers + - issuers verbs: - create - delete @@ -4794,16 +5295,21 @@ rules: - update - watch - apiGroups: - - "" + - networking.k8s.io resources: - - events + - ingresses verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - policy resources: - - leases + - poddisruptionbudgets verbs: - create - delete @@ -4812,27 +5318,22 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z - namespace: default -rules: - apiGroups: - - coordination.k8s.io + - rbac.authorization.k8s.io resources: - - leases + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters verbs: - create - delete @@ -4841,6 +5342,29 @@ rules: - patch - update - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -4922,6 +5446,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -4974,6 +5555,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -4987,333 +5570,86 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-additional-controllers - namespace: default -rules: -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - - delete - - get - - list - - watch -- apiGroups: - - "" - resources: - - pods - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - - delete - - get - - list - - patch - - update -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - pods - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - statefulsets/status - verbs: - - patch - - update -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-rpk-bundle - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services - verbs: - - get - - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: kdh6Z-election-role -subjects: -- kind: ServiceAccount - name: SpE0 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: kdh6Z -subjects: -- kind: ServiceAccount - name: SpE0 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-additional-controllers - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: kdh6Z-additional-controllers -subjects: -- kind: ServiceAccount - name: SpE0 + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-crd-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: zFkw3t-crd-job-default +subjects: +- kind: ServiceAccount + name: zFkw3t-crd-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-rpk-bundle - namespace: default + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: kdh6Z-rpk-bundle + kind: ClusterRole + name: zFkw3t-migration-job-default subjects: - kind: ServiceAccount - name: SpE0 + name: zFkw3t-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - F0wS: vBToTa - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: BRlD ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" labels: - F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kdh6Z + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-crds namespace: default spec: - replicas: 1024474665 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: BRlD - strategy: - type: RollingUpdate template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: BRlD + app.kubernetes.io/name: llRXnk1 spec: - affinity: - podAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - topologyKey: o7Cc2E automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=a4SuUdq - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - crd + - --vectorized command: - - /manager - env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent - livenessProbe: - failureThreshold: 335 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 578 - periodSeconds: 859 - successThreshold: 225 - terminationGracePeriodSeconds: 766 - timeoutSeconds: 705 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 86 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 771 - periodSeconds: 43 - successThreshold: 41 - terminationGracePeriodSeconds: 226 - timeoutSeconds: 84 + name: crd-installation resources: {} securityContext: allowPrivilegeEscalation: false @@ -5321,18 +5657,19 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - ephemeralContainers: null imagePullSecrets: [] - initContainers: [] - nodeSelector: - R: J9stK - b3Y76k: 8HvVz - pZjN: ZCZvZO - securityContext: - runAsUser: 65532 - serviceAccountName: SpE0 + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: zFkw3t-crd-job terminationGracePeriodSeconds: 10 - tolerations: [] + tolerations: + - key: 7RwO + operator: F<螃I鏏ÄʼnǼ偽鞎ȭ + tolerationSeconds: 447019075627230000 + value: ZYo + - effect: '@泅萪罡«țI搽ĪǴ4t<ł竮廞' + key: zSAjxRPNZrnIE + value: 91fG volumes: - name: kube-api-access projected: @@ -5354,27 +5691,78 @@ spec: path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: annotations: - Rt5: OeMr - bO3NPc: qn0ImYNRP - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + helm.sh/hook-weight: "-4" labels: - F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: SpE0-crd-job + app.kubernetes.io/name: llRXnk1 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zFkw3t-migration namespace: default --- testdata/case-005.yaml.golden -- +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: llRXnk1 + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: zFkw3t-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - key: 7RwO + operator: F<螃I鏏ÄʼnǼ偽鞎ȭ + tolerationSeconds: 447019075627230000 + value: ZYo + - effect: '@泅萪罡«țI搽ĪǴ4t<ł竮廞' + key: zSAjxRPNZrnIE + value: 91fG + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-003.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -5382,48 +5770,40 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: - "1": Waszk6s - AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: "8" namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: g2 + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: - healthProbeBindAddress: z856L - kind: JDwGUjH + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig leaderElection: leaderElect: true resourceName: aa9fc693.vectorized.io metrics: - bindAddress: Oy + bindAddress: 127.0.0.1:8080 webhook: port: 9443 kind: ConfigMap metadata: annotations: null - creationTimestamp: null labels: - "1": Waszk6s - AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-config + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -5431,17 +5811,13 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: null - creationTimestamp: null labels: - "1": Waszk6s - AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-metrics-reader + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -5453,34 +5829,45 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: {} - creationTimestamp: null labels: - "1": Waszk6s - AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-default + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas + - horizontalpodautoscalers verbs: - create - delete @@ -5492,40 +5879,51 @@ rules: - apiGroups: - cluster.redpanda.com resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - consoles verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles/status verbs: - get - patch - update - apiGroups: - - cluster.redpanda.com + - networking.k8s.io resources: - - schemas - - topics - - users + - ingresses verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - authentication.k8s.io resources: - - clusterrolebindings - - clusterroles + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps verbs: - create - delete @@ -5534,170 +5932,90 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - "1": Waszk6s - AhQJg: sYlEc - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-additional-controllers-default -rules: - apiGroups: - "" resources: - - persistentvolumes + - events verbs: + - create - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps - - nodes - - secrets + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - persistentvolumes verbs: - - delete - get - list - patch - - update + - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - persistentvolumeclaims + - pods verbs: + - delete - get - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - nodes verbs: - get - - list - - watch - apiGroups: - "" resources: - - persistentvolumes + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - get - list - - patch - - update - - watch - apiGroups: - - cluster.redpanda.com + - coordination.k8s.io resources: - - redpandas + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumes + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: - - get - - list - - patch - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - "1": Waszk6s - AhQJg: sYlEc - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: WM7nRI7B-default -subjects: -- kind: ServiceAccount - name: WM7nRI7B - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - "1": Waszk6s - AhQJg: sYlEc - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: WM7nRI7B-additional-controllers-default -subjects: -- kind: ServiceAccount - name: WM7nRI7B - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - "1": Waszk6s - AhQJg: sYlEc - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-election-role - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - verbs: - - create - - delete + - create + - delete - get - list - patch @@ -5711,40 +6029,18 @@ rules: - create - patch - apiGroups: - - coordination.k8s.io + - apps resources: - - leases + - controllerrevisions verbs: - - create - - delete - get - list - - patch - - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - "1": Waszk6s - AhQJg: sYlEc - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B - namespace: default -rules: - apiGroups: - - coordination.k8s.io + - apps resources: - - leases + - deployments + - statefulsets verbs: - create - delete @@ -5754,13 +6050,9 @@ rules: - update - watch - apiGroups: - - "" + - autoscaling resources: - - configmaps - - pods - - secrets - - serviceaccounts - - services + - horizontalpodautoscalers verbs: - create - delete @@ -5770,25 +6062,22 @@ rules: - update - watch - apiGroups: - - "" + - batch resources: - - events + - jobs verbs: - create - - patch -- apiGroups: - - apps - resources: - - controllerrevisions - verbs: + - delete - get - list + - patch + - update - watch - apiGroups: - - apps + - cert-manager.io resources: - - deployments - - statefulsets + - certificates + - issuers verbs: - create - delete @@ -5798,9 +6087,11 @@ rules: - update - watch - apiGroups: - - autoscaling + - cluster.redpanda.com resources: - - horizontalpodautoscalers + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -5810,25 +6101,43 @@ rules: - update - watch - apiGroups: - - batch + - cluster.redpanda.com resources: - - jobs + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - cert-manager.io + - cluster.redpanda.com resources: - - certificates - - issuers + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch @@ -5886,6 +6195,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -5899,22 +6210,23 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - "1": Waszk6s - AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-additional-controllers - namespace: default + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-additional-controllers-default rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch - apiGroups: - "" resources: @@ -5948,6 +6260,34 @@ rules: - get - list - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -5958,6 +6298,16 @@ rules: - list - patch - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -5972,10 +6322,12 @@ rules: - apiGroups: - "" resources: - - pods + - persistentvolumes verbs: - get - list + - patch + - update - watch - apiGroups: - apps @@ -5984,155 +6336,74 @@ rules: verbs: - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes verbs: - - delete - get - list + - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - "1": Waszk6s - AhQJg: sYlEc - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - "1": Waszk6s - AhQJg: sYlEc - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: WM7nRI7B-election-role -subjects: -- kind: ServiceAccount - name: WM7nRI7B - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - "1": Waszk6s - AhQJg: sYlEc - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: WM7nRI7B -subjects: -- kind: ServiceAccount - name: WM7nRI7B - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - "1": Waszk6s - AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-additional-controllers - namespace: default + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: WM7nRI7B-additional-controllers + kind: ClusterRole + name: 8-default subjects: - kind: ServiceAccount - name: WM7nRI7B + name: "8" namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - "1": Waszk6s - AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-rpk-bundle - namespace: default + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: WM7nRI7B-rpk-bundle + kind: ClusterRole + name: 8-additional-controllers-default subjects: - kind: ServiceAccount - name: WM7nRI7B + name: "8" namespace: default --- # Source: operator/templates/entry-point.yaml @@ -6140,17 +6411,13 @@ apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: - "1": Waszk6s - AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-metrics-service + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-metrics-service namespace: default spec: ports: @@ -6159,73 +6426,66 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: zejbO + app.kubernetes.io/name: Od --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: null - creationTimestamp: null labels: - "1": Waszk6s - AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: "8" namespace: default spec: - replicas: -292655759 + replicas: -1760924915 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: zejbO + app.kubernetes.io/name: Od strategy: - type: RollingUpdate + rollingUpdate: + maxSurge: 1804299834 + maxUnavailable: 369053326 + type: Wb<卄Y軀伎eǿKS4实r template: metadata: annotations: {} - creationTimestamp: null labels: - K6UTGA2Q: Hy0xv app.kubernetes.io/instance: operator - app.kubernetes.io/name: zejbO + app.kubernetes.io/name: Od spec: - affinity: - nodeAffinity: {} - podAffinity: {} automountServiceAccountToken: false containers: - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect + - --log-level=1t + - --metrics-bind-address=:8443 - --webhook-enabled=false - - --namespace=default - - --log-level=eM - - --configurator-tag=IyW - - --configurator-base-image=Rr9cCH8 - - sAQJC - - "72" command: - /manager env: [] - image: Rr9cCH8:IyW - imagePullPolicy: Always + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 527 + failureThreshold: 353 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 795 - periodSeconds: 490 - successThreshold: 227 - terminationGracePeriodSeconds: 296 - timeoutSeconds: 796 + initialDelaySeconds: 633 + periodSeconds: 920 + successThreshold: 751 + terminationGracePeriodSeconds: 73 + timeoutSeconds: 856 name: manager ports: - containerPort: 9443 @@ -6235,15 +6495,15 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 958 + failureThreshold: 892 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 43 - periodSeconds: 600 - successThreshold: 644 - terminationGracePeriodSeconds: 52 - timeoutSeconds: 624 + initialDelaySeconds: 313 + periodSeconds: 273 + successThreshold: 802 + terminationGracePeriodSeconds: 884 + timeoutSeconds: 357 resources: {} securityContext: allowPrivilegeEscalation: false @@ -6251,33 +6511,19 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsPolicy: 蚱跆ni仩(y·!Sžǩ ephemeralContainers: null - hostAliases: - - ip: x - - ip: "0" - hostPID: true - hostname: t imagePullSecrets: [] initContainers: [] - nodeName: d9B6GC1 nodeSelector: {} - preemptionPolicy: 脈翮蓞Y]FăòDZ^ɐȖÕʫB港 - priority: -1920850068 - priorityClassName: Sr - resourceClaims: - - name: ogjb - restartPolicy: 婐ƱťýÕ$玙d詙枠Ó_瓀拿' - runtimeClassName: 35HE - schedulerName: wDQrlYtUq securityContext: - fsGroupChangePolicy: Always - runAsNonRoot: true runAsUser: 65532 - serviceAccountName: GAzZL - subdomain: stmIvh + serviceAccountName: "8" terminationGracePeriodSeconds: 10 - tolerations: [] + tolerations: + - effect: ė焬ƕ茏莕1紞Ǽǩ菻懾蟮Ǜƴ + key: TevmjuaH + operator: 迩Ĺćȥķȏ + value: J4sGVxy volumes: - name: kube-api-access projected: @@ -6304,120 +6550,53 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - "1": Waszk6s - AhQJg: sYlEc - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wU3MsxN: 4Bn0vQj - name: WM7nRI7B-crd-job - namespace: default --- testdata/case-006.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null labels: - CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-config + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-metrics-reader + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-migration-job-default rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-default -rules: -- apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -6427,42 +6606,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -6471,83 +6649,49 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-additional-controllers-default -rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - patch + - create - apiGroups: - - "" + - authorization.k8s.io resources: - - configmaps - - nodes - - secrets + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - events verbs: - - get - - list - - watch + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete - get - list - patch - update - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch - apiGroups: - "" resources: @@ -6557,117 +6701,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: Em-default -subjects: -- kind: ServiceAccount - name: Em - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: Em-additional-controllers-default -subjects: -- kind: ServiceAccount - name: Em - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -6761,6 +6827,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -6813,6 +6936,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -6826,68 +6951,261 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 8-migration-job-default +subjects: +- kind: ServiceAccount + name: 8-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Od + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 8-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Od + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: 8-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ė焬ƕ茏莕1紞Ǽǩ菻懾蟮Ǜƴ + key: TevmjuaH + operator: 迩Ĺćȥķȏ + value: J4sGVxy + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-004.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: - CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-additional-controllers + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: kDJnGro7 + health: + healthProbeBindAddress: DlFAEr + kind: 8N84t + leaderElection: + leaderElect: true + resourceName: yaL + metrics: + bindAddress: y1LJBef8 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-config namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-default rules: - apiGroups: - "" resources: - - events + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - "" + - apps resources: - - persistentvolumeclaims + - deployments verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - autoscaling resources: - - pods - - secrets + - horizontalpodautoscalers verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - apps + - cluster.redpanda.com resources: - - statefulsets + - consoles verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumeclaims + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create - delete - get - list - patch - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: - - persistentvolumeclaims + - configmaps verbs: + - create - delete - get - list @@ -6897,18 +7215,31 @@ rules: - apiGroups: - "" resources: - - pods + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - apps + - "" resources: - - statefulsets/status + - persistentvolumes verbs: + - get + - list - patch - - update + - watch - apiGroups: - "" resources: @@ -6919,23 +7250,12 @@ rules: - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-rpk-bundle - namespace: default -rules: +- apiGroups: + - "" + resources: + - nodes + verbs: + - get - apiGroups: - "" resources: @@ -6953,101 +7273,417 @@ rules: verbs: - get - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: Em-election-role -subjects: -- kind: ServiceAccount - name: Em - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: Em -subjects: -- kind: ServiceAccount - name: Em - namespace: default + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-additional-controllers - namespace: default + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: Em-additional-controllers + kind: ClusterRole + name: TODeGK-default subjects: - kind: ServiceAccount - name: Em + name: TODeGK namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-rpk-bundle - namespace: default + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: Em-rpk-bundle + kind: ClusterRole + name: TODeGK-additional-controllers-default subjects: - kind: ServiceAccount - name: Em + name: TODeGK namespace: default --- # Source: operator/templates/entry-point.yaml @@ -7055,15 +7691,13 @@ apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: - CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-metrics-service + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-metrics-service namespace: default spec: ports: @@ -7072,67 +7706,63 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: di + app.kubernetes.io/name: bA9B --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: null - creationTimestamp: null labels: - CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK namespace: default spec: - replicas: -212949663 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: di + app.kubernetes.io/name: bA9B strategy: - type: RollingUpdate + type: Ĵ<欩ɜR>ɛ0$'^幦 template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: di - mxRCF: n5j - pkKvta4BL: 9Z + app.kubernetes.io/name: bA9B spec: automountServiceAccountToken: false containers: - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect + - --log-level=1RV + - --metrics-bind-address=:8443 - --webhook-enabled=false - - --namespace=default - - --log-level=OdrK - - --configurator-tag=9JWhXp - - --configurator-base-image=eZ6Hz command: - /manager env: [] - image: eZ6Hz:9JWhXp - imagePullPolicy: Always + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 132 + failureThreshold: 583 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 589 - periodSeconds: 468 - successThreshold: 351 - terminationGracePeriodSeconds: 849 - timeoutSeconds: 594 + initialDelaySeconds: 332 + periodSeconds: 787 + successThreshold: 26 + terminationGracePeriodSeconds: 492 + timeoutSeconds: 849 name: manager ports: - containerPort: 9443 @@ -7142,15 +7772,15 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 900 + failureThreshold: 325 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 626 - periodSeconds: 896 - successThreshold: 505 - terminationGracePeriodSeconds: 161 - timeoutSeconds: 22 + initialDelaySeconds: 501 + periodSeconds: 253 + successThreshold: 523 + terminationGracePeriodSeconds: 714 + timeoutSeconds: 871 resources: {} securityContext: allowPrivilegeEscalation: false @@ -7159,12 +7789,13 @@ spec: name: kube-api-access readOnly: true ephemeralContainers: null - imagePullSecrets: [] + imagePullSecrets: + - name: VCSV initContainers: [] nodeSelector: {} securityContext: runAsUser: 65532 - serviceAccountName: Em + serviceAccountName: TODeGK terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -7188,41 +7819,22 @@ spec: path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-metrics-monitor + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-crd-job namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -7230,337 +7842,91 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - CQkNCSKpK8nmJ: B - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: di - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Em-crd-job - namespace: default --- testdata/case-007.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - RzmaQG: 6HA - oww9mt3ERn: Dv6Y - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ij1lCfI4a - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: QOxZ1 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: G5d - health: - healthProbeBindAddress: :8081 - kind: hCswv - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 345 -kind: ConfigMap -metadata: - annotations: - MDHvCe7Sl: h9WlA1EC - ce3o: igVs - uEbQa: t - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ij1lCfI4a - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 6yA-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - MDHvCe7Sl: h9WlA1EC - ce3o: igVs - uEbQa: t - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ij1lCfI4a - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 6yA-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: ij1lCfI4a ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: - MDHvCe7Sl: h9WlA1EC - ce3o: igVs - uEbQa: t - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ij1lCfI4a - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 6yA + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-migration-job namespace: default -spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: ij1lCfI4a - strategy: - type: RollingUpdate - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: ij1lCfI4a - spec: - automountServiceAccountToken: false - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=Y - - --configurator-tag=E5edBYpa - - --configurator-base-image=ISoDbxsE - command: - - /manager - env: [] - image: ISoDbxsE:E5edBYpa - imagePullPolicy: Never - livenessProbe: - failureThreshold: 206 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 462 - periodSeconds: 304 - successThreshold: 375 - terminationGracePeriodSeconds: 334 - timeoutSeconds: 383 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 122 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 139 - periodSeconds: 565 - successThreshold: 995 - terminationGracePeriodSeconds: 619 - timeoutSeconds: 210 - resources: {} - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - ephemeralContainers: null - imagePullSecrets: [] - initContainers: [] - nodeSelector: {} - securityContext: - runAsUser: 65532 - serviceAccountName: QOxZ1 - terminationGracePeriodSeconds: 10 - tolerations: [] - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - RzmaQG: 6HA helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - oww9mt3ERn: Dv6Y - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ij1lCfI4a - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: QOxZ1-crd-job - namespace: default --- testdata/case-008.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: q5hs - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-metrics-reader + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-crd-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions verbs: + - create - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-default + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas + - horizontalpodautoscalers verbs: - create - delete @@ -7572,40 +7938,51 @@ rules: - apiGroups: - cluster.redpanda.com resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - consoles verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles/status verbs: - get - patch - update - apiGroups: - - cluster.redpanda.com + - networking.k8s.io resources: - - schemas - - topics - - users + - ingresses verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - authentication.k8s.io resources: - - clusterrolebindings - - clusterroles + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps verbs: - create - delete @@ -7614,171 +7991,152 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-additional-controllers-default -rules: - apiGroups: - "" resources: - - persistentvolumes + - events verbs: + - create - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps - - nodes - - secrets + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - persistentvolumes verbs: - - delete - get - list - patch - - update + - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - configmaps + - pods - secrets + - serviceaccounts + - services verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumes + - events verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas + - horizontalpodautoscalers verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - batch resources: - - persistentvolumes + - jobs verbs: + - create + - delete - get - list - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: DBMkVbLNvvZn-default -subjects: -- kind: ServiceAccount - name: q5hs - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: DBMkVbLNvvZn-additional-controllers-default -subjects: -- kind: ServiceAccount - name: q5hs - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-election-role - namespace: default -rules: - apiGroups: - - "" + - cert-manager.io resources: - - configmaps + - certificates + - issuers verbs: - create - delete @@ -7788,44 +8146,62 @@ rules: - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - events + - consoles + - nodepools + - redpandas verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -7839,13 +8215,10 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - configmaps - - pods - - secrets - - serviceaccounts - - services + - podmonitors + - servicemonitors verbs: - create - delete @@ -7855,25 +8228,21 @@ rules: - update - watch - apiGroups: - - "" + - networking.k8s.io resources: - - events + - ingresses verbs: - create - - patch -- apiGroups: - - apps - resources: - - controllerrevisions - verbs: + - delete - get - list + - patch + - update - watch - apiGroups: - - apps + - policy resources: - - deployments - - statefulsets + - poddisruptionbudgets verbs: - create - delete @@ -7883,9 +8252,12 @@ rules: - update - watch - apiGroups: - - autoscaling + - rbac.authorization.k8s.io resources: - - horizontalpodautoscalers + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: - create - delete @@ -7894,10 +8266,270 @@ rules: - patch - update - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-crd-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: TODeGK-crd-job-default +subjects: +- kind: ServiceAccount + name: TODeGK-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: TODeGK-migration-job-default +subjects: +- kind: ServiceAccount + name: TODeGK-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-crds + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: bA9B + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: crd-installation + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: VCSV + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: TODeGK-crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bA9B + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: TODeGK-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: bA9B + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: VCSV + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: TODeGK-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-005.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-default +rules: - apiGroups: - - batch + - "" resources: - - jobs + - configmaps + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -7907,10 +8539,9 @@ rules: - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - issuers + - deployments verbs: - create - delete @@ -7920,9 +8551,9 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - autoscaling resources: - - leases + - horizontalpodautoscalers verbs: - create - delete @@ -7932,10 +8563,9 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - consoles verbs: - create - delete @@ -7944,6 +8574,14 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update - apiGroups: - networking.k8s.io resources: @@ -7957,9 +8595,21 @@ rules: - update - watch - apiGroups: - - policy + - authentication.k8s.io resources: - - poddisruptionbudgets + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps verbs: - create - delete @@ -7969,10 +8619,16 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - "" resources: - - rolebindings - - roles + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -7981,37 +8637,20 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-additional-controllers - namespace: default -rules: - apiGroups: - "" resources: - - events + - persistentvolumes verbs: - - create + - get + - list - patch + - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -8020,35 +8659,48 @@ rules: - apiGroups: - "" resources: - - pods - - secrets + - nodes verbs: - get - - list - - watch - apiGroups: - - apps + - "" resources: - - statefulsets + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - get - list - - watch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumeclaims + - leases verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - "" resources: - - persistentvolumeclaims + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create - delete - get - list @@ -8058,7 +8710,14 @@ rules: - apiGroups: - "" resources: - - pods + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions verbs: - get - list @@ -8066,183 +8725,385 @@ rules: - apiGroups: - apps resources: - - statefulsets/status + - deployments + - statefulsets verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumeclaims - - pods + - horizontalpodautoscalers verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - batch resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - jobs verbs: + - create + - delete - get - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: DBMkVbLNvvZn-election-role -subjects: -- kind: ServiceAccount - name: q5hs - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRole metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: DBMkVbLNvvZn -subjects: -- kind: ServiceAccount - name: q5hs - namespace: default + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-additional-controllers - namespace: default + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: DBMkVbLNvvZn-additional-controllers + kind: ClusterRole + name: hzsFR-default subjects: - kind: ServiceAccount - name: q5hs + name: hzsFR namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-rpk-bundle - namespace: default + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: DBMkVbLNvvZn-rpk-bundle + kind: ClusterRole + name: hzsFR-additional-controllers-default subjects: - kind: ServiceAccount - name: q5hs + name: hzsFR namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn-metrics-service + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-metrics-service namespace: default spec: ports: @@ -8251,86 +9112,64 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: GNbmN + app.kubernetes.io/name: 9Fewiv --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - 5mUYOp: Eqc - AsH: OAiucz - eEDhSFGX: WSL6MXpbA - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: DBMkVbLNvvZn + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR namespace: default spec: - replicas: 1 + replicas: 528936878 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: GNbmN + app.kubernetes.io/name: 9Fewiv strategy: - rollingUpdate: - maxSurge: 1682151515 - maxUnavailable: 354098749 - type: 7Ƿ+韤哄苺跖陎池MÂË駨 + type: RollingUpdate template: metadata: - annotations: - IPd: N0V8HGAm - creationTimestamp: null + annotations: {} labels: - "": ka - CKU4O: "6" + PA: hYD8 app.kubernetes.io/instance: operator - app.kubernetes.io/name: GNbmN - lZYJ: H1y + app.kubernetes.io/name: 9Fewiv spec: - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - {} - - matchExpressions: - - key: syCwYBGKWom - operator: 討<拐ɬ罅vʨɆ撹ĵŷ鄽竼 - values: - - yAuK - - 9YBj automountServiceAccountToken: false containers: - args: + - --configurator-base-image=Fd0 + - --configurator-tag=cOgp6ac + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect + - --log-level=f7W + - --metrics-bind-address=:8443 - --webhook-enabled=false - - --namespace=default - - --log-level=gT - - --configurator-tag=6LBRlD - - --configurator-base-image=kw6W command: - /manager env: [] - image: kw6W:6LBRlD - imagePullPolicy: IfNotPresent + image: Fd0:cOgp6ac + imagePullPolicy: Always livenessProbe: - failureThreshold: 250 + failureThreshold: 723 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 802 - periodSeconds: 498 - successThreshold: 251 - terminationGracePeriodSeconds: 875 - timeoutSeconds: 76 + initialDelaySeconds: 207 + periodSeconds: 908 + successThreshold: 177 + terminationGracePeriodSeconds: 355 + timeoutSeconds: 475 name: manager ports: - containerPort: 9443 @@ -8340,15 +9179,15 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 101 + failureThreshold: 859 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 964 - periodSeconds: 769 - successThreshold: 115 - terminationGracePeriodSeconds: 497 - timeoutSeconds: 861 + initialDelaySeconds: 728 + periodSeconds: 42 + successThreshold: 831 + terminationGracePeriodSeconds: 629 + timeoutSeconds: 727 resources: {} securityContext: allowPrivilegeEscalation: false @@ -8359,14 +9198,24 @@ spec: ephemeralContainers: null imagePullSecrets: [] initContainers: [] - nodeSelector: - "": m - Oes: AiMQMRej + nodeSelector: {} securityContext: runAsUser: 65532 - serviceAccountName: q5hs + serviceAccountName: hzsFR terminationGracePeriodSeconds: 10 - tolerations: [] + tolerations: + - effect: ƶÕ喿禯ʪɄEi3ʓ + key: j5v + operator: 宎ȒʩX腟E蒱椖$ + tolerationSeconds: -4770310437223880000 + value: 1jXPaPV + - effect: 3CŖ益垾ʨn踲"匐厄袮Ǒ蓡Ǹȯ¦L + operator: '#1įħ"O眨å' + value: s + - key: mKZJG + operator: ŻOVÀ峠ZŲu©ɓ嬽ŊǮpŭ歝浪 + tolerationSeconds: -4417487349448592000 + value: vR volumes: - name: kube-api-access projected: @@ -8386,6 +9235,42 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aNfgS0 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: koBY-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aNfgS0 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -8393,20 +9278,22 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: + 2XzRXgKjP: qV75G helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" + k0MXnvN5ry3d: qJm80 + k3SW6gk9w: zIr1y creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: GNbmN + app.kubernetes.io/name: aNfgS0 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - u: yT9Aqc - name: q5hs-crd-job + name: S-crd-job namespace: default --- testdata/case-009.yaml.golden -- +-- testdata/case-001.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -8416,27 +9303,25 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs + name: WSGbu namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 4fZUzy + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: healthProbeBindAddress: :8081 - kind: dZCF6fa + kind: ControllerManagerConfig leaderElection: leaderElect: true - resourceName: TrCkwSs + resourceName: aa9fc693.vectorized.io metrics: bindAddress: 127.0.0.1:8080 webhook: @@ -8446,31 +9331,45 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-config + name: WSGbu-config namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: null +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-metrics-reader + name: WSGbu-metrics-reader rules: - nonResourceURLs: - /metrics @@ -8484,14 +9383,12 @@ metadata: annotations: {} creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-default + name: WSGbu-default rules: - apiGroups: - authentication.k8s.io @@ -8570,14 +9467,12 @@ metadata: annotations: {} creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-additional-controllers-default + name: WSGbu-additional-controllers-default rules: - apiGroups: - "" @@ -8652,50 +9547,460 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: {} creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-default + name: WSGbu-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: kBI8lEs-default + name: WSGbu-default subjects: - kind: ServiceAccount - name: kBI8lEs + name: WSGbu namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding +<<<<<<< HEAD +======= +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: hzsFR-migration-job-default +subjects: +- kind: ServiceAccount + name: hzsFR-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) metadata: annotations: {} creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-additional-controllers-default + name: WSGbu-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: kBI8lEs-additional-controllers-default + name: WSGbu-additional-controllers-default subjects: - kind: ServiceAccount - name: kBI8lEs + name: WSGbu namespace: default --- # Source: operator/templates/entry-point.yaml @@ -8705,14 +10010,12 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-election-role + name: WSGbu-election-role namespace: default rules: - apiGroups: @@ -8754,14 +10057,12 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs + name: WSGbu namespace: default rules: - apiGroups: @@ -8927,14 +10228,12 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-additional-controllers + name: WSGbu-additional-controllers namespace: default rules: - apiGroups: @@ -9024,14 +10323,12 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-rpk-bundle + name: WSGbu-rpk-bundle namespace: default rules: - apiGroups: @@ -9059,22 +10356,20 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-election-role + name: WSGbu-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: kBI8lEs-election-role + name: WSGbu-election-role subjects: - kind: ServiceAccount - name: kBI8lEs + name: WSGbu namespace: default --- # Source: operator/templates/entry-point.yaml @@ -9084,22 +10379,20 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs + name: WSGbu namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: kBI8lEs + name: WSGbu subjects: - kind: ServiceAccount - name: kBI8lEs + name: WSGbu namespace: default --- # Source: operator/templates/entry-point.yaml @@ -9109,22 +10402,20 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-additional-controllers + name: WSGbu-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: kBI8lEs-additional-controllers + name: WSGbu-additional-controllers subjects: - kind: ServiceAccount - name: kBI8lEs + name: WSGbu namespace: default --- # Source: operator/templates/entry-point.yaml @@ -9134,22 +10425,20 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-rpk-bundle + name: WSGbu-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: kBI8lEs-rpk-bundle + name: WSGbu-rpk-bundle subjects: - kind: ServiceAccount - name: kBI8lEs + name: WSGbu namespace: default --- # Source: operator/templates/entry-point.yaml @@ -9159,14 +10448,12 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs-metrics-service + name: WSGbu-metrics-service namespace: default spec: ports: @@ -9175,7 +10462,7 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 @@ -9184,30 +10471,28 @@ metadata: annotations: null creationTimestamp: null labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 - gLlqKr: m helm.sh/chart: operator-25.1.4 - name: kBI8lEs + name: WSGbu namespace: default spec: - replicas: -857065571 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N strategy: - type: RollingUpdate + type: Hɵ汏ʖǶ,儀o-$UE砵ʦ嬗 template: metadata: annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/name: EbX3hB7N spec: automountServiceAccountToken: false containers: @@ -9217,67 +10502,45 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=Qgv - - --configurator-tag=Fc9SuJ - - --configurator-base-image=nkEl + - --log-level=TNizkRf0 + - --configurator-tag=H6X3S + - --configurator-base-image=p9Di + - 3AeeXxo + - EoLf5 + - "9" command: - /manager env: [] - image: nkEl:Fc9SuJ - imagePullPolicy: Never - livenessProbe: - failureThreshold: 423 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 203 - periodSeconds: 404 - successThreshold: 59 - terminationGracePeriodSeconds: 408 - timeoutSeconds: 233 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 409 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 718 - periodSeconds: 337 - successThreshold: 817 - terminationGracePeriodSeconds: 938 - timeoutSeconds: 794 - resources: - limits: - cpu: "44" - memory: "628" - requests: - cpu: "463" - memory: "83" + image: p9Di:H6X3S + imagePullPolicy: Always +<<<<<<< HEAD +======= + name: crd-installation + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - ephemeralContainers: null imagePullSecrets: [] - initContainers: [] - nodeSelector: - Uza8X: ZSPeK - tXcN: UnYnyroDLAY9 - xNJh: j - securityContext: - runAsUser: 65532 - serviceAccountName: kBI8lEs + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: hzsFR-crd-job terminationGracePeriodSeconds: 10 - tolerations: [] + tolerations: + - effect: ƶÕ喿禯ʪɄEi3ʓ + key: j5v + operator: 宎ȒʩX腟E蒱椖$ + tolerationSeconds: -4770310437223880000 + value: 1jXPaPV + - effect: 3CŖ益垾ʨn踲"匐厄袮Ǒ蓡Ǹȯ¦L + operator: '#1įħ"O眨å' + value: s + - key: mKZJG + operator: ŻOVÀ峠ZŲu©ɓ嬽ŊǮpŭ歝浪 + tolerationSeconds: -4417487349448592000 + value: vR volumes: - name: kube-api-access projected: @@ -9299,41 +10562,100 @@ spec: path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + helm.sh/hook-weight: "-4" labels: - "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v25.1.4 - gLlqKr: m - helm.sh/chart: operator-25.1.4 - name: kBI8lEs-crd-job + app.kubernetes.io/name: 9Fewiv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: hzsFR-migration namespace: default --- testdata/case-010.yaml.golden -- +spec: + template: + metadata: + annotations: {} + labels: + PA: hYD8 + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 9Fewiv + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: Fd0:cOgp6ac + imagePullPolicy: Always + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: hzsFR-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ƶÕ喿禯ʪɄEi3ʓ + key: j5v + operator: 宎ȒʩX腟E蒱椖$ + tolerationSeconds: -4770310437223880000 + value: 1jXPaPV + - effect: 3CŖ益垾ʨn踲"匐厄袮Ǒ蓡Ǹȯ¦L + operator: '#1įħ"O眨å' + value: s + - key: mKZJG + operator: ŻOVÀ峠ZŲu©ɓ嬽ŊǮpŭ歝浪 + tolerationSeconds: -4417487349448592000 + value: vR + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-006.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 automountServiceAccountToken: false kind: ServiceAccount metadata: - annotations: null - creationTimestamp: null + annotations: + BE: gaIWt + z: raU labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EWzZWPEbF namespace: default --- # Source: operator/templates/entry-point.yaml @@ -9354,16 +10676,15 @@ data: kind: ConfigMap metadata: annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null + 7eZwch: p + v: fkhSZu labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-config + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: nwn-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -9371,16 +10692,15 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null + 7eZwch: p + v: fkhSZu labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-metrics-reader + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: nwn-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -9392,33 +10712,35 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null + 7eZwch: p + v: fkhSZu labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-default + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: nwn-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -9428,42 +10750,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -9472,84 +10793,49 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-additional-controllers-default -rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - patch + - create - apiGroups: - - "" + - authorization.k8s.io resources: - - configmaps - - nodes - - secrets + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - events verbs: - - get - - list - - watch + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete - get - list - patch - update - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch - apiGroups: - "" resources: @@ -9559,121 +10845,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: rcE-default -subjects: -- kind: ServiceAccount - name: rcE - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: rcE-additional-controllers-default -subjects: -- kind: ServiceAccount - name: rcE - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -9767,6 +10971,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -9819,6 +11080,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -9832,21 +11095,25 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null + 7eZwch: p + v: fkhSZu labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-additional-controllers - namespace: default + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: nwn-additional-controllers-default rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch - apiGroups: - "" resources: @@ -9883,13 +11150,31 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes verbs: - delete - get - list - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -9900,166 +11185,116 @@ rules: - list - patch - update - - watch - apiGroups: - "" resources: + - configmaps - pods + - secrets verbs: - get - list - watch - apiGroups: - - apps + - "" resources: - - statefulsets/status + - persistentvolumeclaims verbs: + - delete + - get + - list - patch - update + - watch - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas verbs: - - delete - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: rcE-election-role -subjects: -- kind: ServiceAccount - name: rcE - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: rcE -subjects: -- kind: ServiceAccount - name: rcE - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null + 7eZwch: p + v: fkhSZu labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-additional-controllers - namespace: default + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: nwn-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: rcE-additional-controllers + kind: ClusterRole + name: nwn-default subjects: - kind: ServiceAccount - name: rcE + name: EWzZWPEbF namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null + 7eZwch: p + v: fkhSZu labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-rpk-bundle - namespace: default + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: nwn-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: rcE-rpk-bundle + kind: ClusterRole + name: nwn-additional-controllers-default subjects: - kind: ServiceAccount - name: rcE + name: EWzZWPEbF namespace: default --- # Source: operator/templates/entry-point.yaml @@ -10067,16 +11302,15 @@ apiVersion: v1 kind: Service metadata: annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null + 7eZwch: p + v: fkhSZu labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-metrics-service + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: nwn-metrics-service namespace: default spec: ports: @@ -10085,94 +11319,75 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Ubj + app.kubernetes.io/name: HsM6 --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - 7Kz: 6vhFA - hw87: p7dM7cs - creationTimestamp: null + 7eZwch: p + v: fkhSZu labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: nwn namespace: default spec: - replicas: 997211798 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Ubj + app.kubernetes.io/name: HsM6 strategy: - type: 辢[Ȳ\顱DGÜ?ǚ$ + rollingUpdate: + maxSurge: 578277263 + maxUnavailable: 1072941343 + type: pO template: metadata: annotations: {} - creationTimestamp: null labels: - U: 8NXJT - W4J: GI7b app.kubernetes.io/instance: operator - app.kubernetes.io/name: Ubj + app.kubernetes.io/name: HsM6 spec: - activeDeadlineSeconds: -8857109636097708000 - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchFields: - - key: 4MxKt - operator: "" - - key: "" - operator: uȮ灜Í聿5*默 - values: - - 32qRUP - - key: sa17ef - operator: Ü竅sDǩn腕3ŏ稰+9嗅覌ţ遲ǰ)P - values: - - wHH - - Lt - - matchExpressions: - - key: ZjhbO - operator: Nƽö攎AɌƝđi+鱸蔥 - values: - - HlphhK4hN8 - - p2d6M1zBBJ - podAntiAffinity: {} automountServiceAccountToken: false containers: - args: + - --configurator-base-image=1F5 + - --configurator-tag=82lZfTf2 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect + - --log-level + - --metrics-bind-address=:8443 - --webhook-enabled=false - - --namespace=default - - --log-level=dqEg - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator - - "" - - W7 command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 - imagePullPolicy: IfNotPresent + image: 1F5:82lZfTf2 + imagePullPolicy: Never +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) livenessProbe: - failureThreshold: 107 + failureThreshold: 537 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 293 - periodSeconds: 863 - successThreshold: 23 - terminationGracePeriodSeconds: 270 - timeoutSeconds: 54 +<<<<<<< HEAD + initialDelaySeconds: 32 + periodSeconds: 531 + successThreshold: 999 + terminationGracePeriodSeconds: 452 +======= + initialDelaySeconds: 54 + periodSeconds: 489 + successThreshold: 79 + terminationGracePeriodSeconds: 560 + timeoutSeconds: 372 name: manager ports: - containerPort: 9443 @@ -10182,15 +11397,15 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 837 + failureThreshold: 986 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 174 - periodSeconds: 494 - successThreshold: 591 - terminationGracePeriodSeconds: 487 - timeoutSeconds: 344 + initialDelaySeconds: 434 + periodSeconds: 660 + successThreshold: 925 + terminationGracePeriodSeconds: 795 + timeoutSeconds: 624 resources: {} securityContext: allowPrivilegeEscalation: false @@ -10198,35 +11413,18 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsPolicy: 橍Ǎ!ɻ麳蠊寢ĥ)×Xʟ羄鳤 - enableServiceLinks: true ephemeralContainers: null - hostAliases: - - ip: "N" - hostIPC: true - hostPID: true - hostUsers: true - hostname: SRC - imagePullSecrets: [] + imagePullSecrets: + - name: VB3 + - name: dTdh initContainers: [] - nodeName: PM1bSuQ - nodeSelector: {} - priorityClassName: g - readinessGates: - - conditionType: "" - - conditionType: ū篌r饾銳D曉lïØ特ǔ - restartPolicy: 笗怌ɷ[諣ƐǏ - runtimeClassName: nl5F - schedulerName: oh - schedulingGates: - - name: 8lQ9mZH2K - - name: Jd - - name: ScuJ + nodeSelector: + G8d5: G + iBM59C6J: 8BS + lKOJqsstYr: ES securityContext: runAsUser: 65532 - serviceAccountName: G3noLIUeP60 - shareProcessNamespace: true - subdomain: kepLXpOh + serviceAccountName: EWzZWPEbF terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -10248,8 +11446,6 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: KNj - - name: oh9dwhjnMI --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -10257,125 +11453,81 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + BE: gaIWt + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: rcE-crd-job - namespace: default --- testdata/case-011.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - VTHH: SaDKhXP - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null + z: raU labels: - VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-config + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EWzZWPEbF-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + 7eZwch: p + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + v: fkhSZu labels: - VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-metrics-reader + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EWzZWPEbF-migration-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services verbs: + - create + - delete - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - VTHH: SaDKhXP - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-default -rules: + - list + - patch + - update + - watch - apiGroups: - - authentication.k8s.io + - apps resources: - - tokenreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - autoscaling resources: - - subjectaccessreviews + - horizontalpodautoscalers verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas + - consoles verbs: - create - delete @@ -10387,40 +11539,58 @@ rules: - apiGroups: - cluster.redpanda.com resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - consoles/status verbs: + - get + - patch - update - apiGroups: - - cluster.redpanda.com + - networking.k8s.io resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - ingresses verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - - cluster.redpanda.com + - authentication.k8s.io resources: - - schemas - - topics - - users + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - "" resources: - - clusterrolebindings - - clusterroles + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -10429,163 +11599,517 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - VTHH: SaDKhXP - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-additional-controllers-default -rules: - apiGroups: - "" resources: - persistentvolumes verbs: + - get + - list - patch + - watch - apiGroups: - "" resources: - - configmaps - - nodes - - secrets + - persistentvolumeclaims + - pods verbs: + - delete - get - list - watch - apiGroups: - "" resources: - - persistentvolumes + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - delete - get - list - - patch - - update - apiGroups: - - cluster.redpanda.com + - coordination.k8s.io resources: - - redpandas + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - configmaps + - pods - secrets + - serviceaccounts + - services verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumes + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas + - horizontalpodautoscalers verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - batch resources: - - persistentvolumes + - jobs verbs: + - create + - delete - get - list - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - annotations: {} - creationTimestamp: null - labels: - VTHH: SaDKhXP - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 7guti07-default -subjects: -- kind: ServiceAccount - name: 7guti07 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null + annotations: + 7eZwch: p + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + v: fkhSZu labels: - VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-additional-controllers-default + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EWzZWPEbF-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: 7guti07-additional-controllers-default + name: EWzZWPEbF-migration-job-default subjects: - kind: ServiceAccount - name: 7guti07 + name: EWzZWPEbF-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HsM6 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: nwn-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: HsM6 + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: 1F5:82lZfTf2 + imagePullPolicy: Never + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: VB3 + - name: dTdh + nodeSelector: + G8d5: G + iBM59C6J: 8BS + lKOJqsstYr: ES + restartPolicy: OnFailure + serviceAccountName: EWzZWPEbF-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-007.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: - VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-election-role + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-config namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-default rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -10617,25 +12141,48 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - VTHH: SaDKhXP - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07 - namespace: default -rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list - apiGroups: - coordination.k8s.io resources: @@ -10729,6 +12276,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -10781,6 +12385,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -10794,22 +12400,23 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-additional-controllers - namespace: default + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-additional-controllers-default rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch - apiGroups: - "" resources: @@ -10846,13 +12453,31 @@ rules: - apiGroups: - "" resources: - - persistentvolumeclaims + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes verbs: - delete - get - list - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -10863,171 +12488,112 @@ rules: - list - patch - update - - watch - apiGroups: - "" resources: + - configmaps - pods + - secrets verbs: - get - list - watch - apiGroups: - - apps + - "" resources: - - statefulsets/status + - persistentvolumeclaims verbs: + - delete + - get + - list - patch - update + - watch - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas verbs: - - delete - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - VTHH: SaDKhXP - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - VTHH: SaDKhXP - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 7guti07-election-role -subjects: -- kind: ServiceAccount - name: 7guti07 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - VTHH: SaDKhXP - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07 - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 7guti07 -subjects: -- kind: ServiceAccount - name: 7guti07 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-additional-controllers - namespace: default + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 7guti07-additional-controllers + kind: ClusterRole + name: 5rz4H-default subjects: - kind: ServiceAccount - name: 7guti07 + name: 5rz4H namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-rpk-bundle - namespace: default + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 7guti07-rpk-bundle + kind: ClusterRole + name: 5rz4H-additional-controllers-default subjects: - kind: ServiceAccount - name: 7guti07 + name: 5rz4H namespace: default --- # Source: operator/templates/entry-point.yaml @@ -11035,17 +12601,13 @@ apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: - VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-metrics-service + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-metrics-service namespace: default spec: ports: @@ -11054,69 +12616,66 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: pP + app.kubernetes.io/name: UMeCRE --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: null - creationTimestamp: null labels: - VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07 + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H namespace: default spec: - replicas: 1 + replicas: 1065597854 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: pP + app.kubernetes.io/name: UMeCRE strategy: - type: RollingUpdate + type: '|fʧ鍾H2' template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: pP + app.kubernetes.io/name: UMeCRE spec: + affinity: + nodeAffinity: {} + podAffinity: {} automountServiceAccountToken: false containers: - args: + - --configurator-base-image=Hol + - --configurator-tag=8ePENyCLz + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect + - --log-level=9KR + - --metrics-bind-address=:8443 - --webhook-enabled=false - - --namespace=default - - --log-level=aWy1AZjYl - - --configurator-tag=W0p45uvP8 - - --configurator-base-image=5grR1QB - - 6SD9JDbQ7Q - - YSovMAw command: - /manager env: [] - image: 5grR1QB:W0p45uvP8 + image: Hol:8ePENyCLz imagePullPolicy: Never livenessProbe: - failureThreshold: 592 + failureThreshold: 671 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 989 - periodSeconds: 111 - successThreshold: 916 - terminationGracePeriodSeconds: 319 - timeoutSeconds: 496 + initialDelaySeconds: 465 + periodSeconds: 153 + successThreshold: 517 + terminationGracePeriodSeconds: 626 + timeoutSeconds: 248 name: manager ports: - containerPort: 9443 @@ -11126,16 +12685,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 318 + failureThreshold: 572 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 817 - periodSeconds: 884 - successThreshold: 96 - terminationGracePeriodSeconds: 3 - timeoutSeconds: 473 - resources: {} + initialDelaySeconds: 183 + periodSeconds: 402 + successThreshold: 476 + terminationGracePeriodSeconds: 674 + timeoutSeconds: 192 + resources: + limits: + cpu: "401" + memory: "862" + requests: + cpu: "624" + memory: "449" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -11145,10 +12710,13 @@ spec: ephemeralContainers: null imagePullSecrets: [] initContainers: [] - nodeSelector: {} + nodeSelector: + 1JQ: qx + 7FM: 1EdNRB + hzNApBK0gj: CtrsF7 securityContext: runAsUser: 65532 - serviceAccountName: 7guti07 + serviceAccountName: 5rz4H terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -11177,116 +12745,53 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - VTHH: SaDKhXP - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pP - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - mOxaE: dEuL - w49JChsEQqA0: "3" - name: 7guti07-crd-job - namespace: default --- testdata/case-012.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: Vhwco - health: - healthProbeBindAddress: smYkB7aF - kind: 4bGK0P3QN1 - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 30 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-config + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-default + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-migration-job-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -11296,42 +12801,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -11340,82 +12844,49 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-additional-controllers-default -rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - patch + - create - apiGroups: - - "" + - authorization.k8s.io resources: - - configmaps - - nodes - - secrets + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - events verbs: - - get - - list - - watch + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete - get - list - patch - update - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch - apiGroups: - "" resources: @@ -11425,113 +12896,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: J5MiI-default -subjects: -- kind: ServiceAccount - name: J5MiI - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: J5MiI-additional-controllers-default -subjects: -- kind: ServiceAccount - name: J5MiI - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -11626,9 +13023,11 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -11638,47 +13037,52 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - create - - delete - - get - - list - - patch - update - - watch - apiGroups: - - networking.k8s.io + - cluster.redpanda.com resources: - - ingresses + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - policy + - cluster.redpanda.com resources: - - poddisruptionbudgets + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - rolebindings - - roles + - leases verbs: - create - delete @@ -11687,70 +13091,37 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-additional-controllers - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create - - patch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - delete - get - list + - patch + - update - watch - apiGroups: - - "" - resources: - - pods - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - "" + - networking.k8s.io resources: - - persistentvolumeclaims + - ingresses verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims + - poddisruptionbudgets verbs: + - create - delete - get - list @@ -11758,316 +13129,100 @@ rules: - update - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list - - watch -- apiGroups: - - apps - resources: - - statefulsets/status - verbs: - patch - update -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-rpk-bundle - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services - verbs: - - get - - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: J5MiI-election-role -subjects: -- kind: ServiceAccount - name: J5MiI - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: J5MiI -subjects: -- kind: ServiceAccount - name: J5MiI - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-additional-controllers - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: J5MiI-additional-controllers -subjects: -- kind: ServiceAccount - name: J5MiI - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-rpk-bundle - namespace: default + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: J5MiI-rpk-bundle + kind: ClusterRole + name: 5rz4H-migration-job-default subjects: - kind: ServiceAccount - name: J5MiI - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-metrics-service + name: 5rz4H-migration-job namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: E4UR --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI + app.kubernetes.io/name: UMeCRE + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 5rz4H-migration namespace: default spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: E4UR - strategy: - type: RollingUpdate template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: E4UR + app.kubernetes.io/name: UMeCRE spec: - activeDeadlineSeconds: -4882479068919526000 automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=HhY5pV - - --configurator-tag=iRz - - --configurator-base-image=DpT1qi9X + - migration command: - - /manager - env: [] - image: DpT1qi9X:iRz - imagePullPolicy: IfNotPresent - livenessProbe: - failureThreshold: 77 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 492 - periodSeconds: 582 - successThreshold: 235 - terminationGracePeriodSeconds: 929 - timeoutSeconds: 336 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 52 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 234 - periodSeconds: 999 - successThreshold: 878 - terminationGracePeriodSeconds: 537 - timeoutSeconds: 233 - resources: {} + - /redpanda-operator + image: Hol:8ePENyCLz + imagePullPolicy: Never + name: migration + resources: + limits: + cpu: "401" + memory: "862" + requests: + cpu: "624" + memory: "449" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsPolicy: Ƣ熨f - ephemeralContainers: null - hostAliases: - - ip: mrcQMVMkPB - - hostnames: - - Ow4 - - fmP - - yoHZ0Y60FY5h - ip: E5UeultMq - - ip: pKc1 - hostIPC: true imagePullSecrets: [] - initContainers: [] - nodeName: B7 nodeSelector: - v4IUGwpWO: ZN4 - priority: 1849183906 - priorityClassName: IOycvf - resourceClaims: - - name: ng2JB8B6VbrG - restartPolicy: 颐ń - runtimeClassName: ACnArGI - schedulerName: Ho3prF - schedulingGates: - - name: i - - name: x4N - securityContext: - fsGroup: -1982488228585156000 - fsGroupChangePolicy: Always - runAsUser: -457651949138351360 - sysctls: - - name: pc - value: mm2Pz7 - - name: 3SLaE - value: DGWqr61 - serviceAccountName: qGnOVE5 - subdomain: txJqtdgH6Vj + 1JQ: qx + 7FM: 1EdNRB + hzNApBK0gj: CtrsF7 + restartPolicy: OnFailure + serviceAccountName: 5rz4H-migration-job terminationGracePeriodSeconds: 10 tolerations: [] - topologySpreadConstraints: - - labelSelector: {} - matchLabelKeys: - - a6Nak3y9 - maxSkew: 1102617202 - minDomains: 1732042660 - nodeAffinityPolicy: EȔ揑Ŋ朔ɘ6A暺ɀ蔟Åj*擘 - nodeTaintsPolicy: 2$^āā)ʡÂXnɠʐ孯ɒNJƢȤ - topologyKey: vfC8qjxH - whenUnsatisfiable: Ȩ惍丼>瘦ɜX_ - - labelSelector: {} - maxSkew: 957936875 - minDomains: -1414427420 - nodeTaintsPolicy: 钔黨 - topologyKey: r91i - whenUnsatisfiable: 閶Ǣ?Ņ韸烡B volumes: - name: kube-api-access projected: @@ -12087,75 +13242,48 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: E1uqQaR - - name: op3V5nJ ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: J5MiI-crd-job - namespace: default --- testdata/case-013.yaml.golden -- +-- testdata/case-008.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false +automountServiceAccountToken: true kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 43f9qCQ namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: kQD1D + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: healthProbeBindAddress: :8081 - kind: FIuFCE + kind: ControllerManagerConfig leaderElection: leaderElect: true resourceName: aa9fc693.vectorized.io metrics: - bindAddress: ZTWMI + bindAddress: 127.0.0.1:8080 webhook: port: 9443 kind: ConfigMap metadata: annotations: null - creationTimestamp: null labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-config + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EB-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -12163,16 +13291,13 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: null - creationTimestamp: null labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-metrics-reader + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EB-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -12184,33 +13309,45 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: {} - creationTimestamp: null labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-default + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EB-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas + - horizontalpodautoscalers verbs: - create - delete @@ -12222,40 +13359,51 @@ rules: - apiGroups: - cluster.redpanda.com resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - consoles verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles/status verbs: - get - patch - update - apiGroups: - - cluster.redpanda.com + - networking.k8s.io resources: - - schemas - - topics - - users + - ingresses verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - authentication.k8s.io resources: - - clusterrolebindings - - clusterroles + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps verbs: - create - delete @@ -12264,65 +13412,24 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-additional-controllers-default -rules: - apiGroups: - "" resources: - - persistentvolumes + - events verbs: + - create - patch - apiGroups: - - "" - resources: - - configmaps - - nodes - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - configmaps - - secrets - verbs: - - get - - list - watch - apiGroups: - "" @@ -12332,140 +13439,40 @@ rules: - get - list - patch - - update - - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - persistentvolumes + - persistentvolumeclaims + - pods verbs: + - delete - get - list - - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: NofaS-default -subjects: -- kind: ServiceAccount - name: NofaS - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: NofaS-additional-controllers-default -subjects: -- kind: ServiceAccount - name: NofaS - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - nodes verbs: - - create - - delete - get - - list - - patch - - update - - watch - apiGroups: - "" resources: + - configmaps + - endpoints - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - patch -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -12559,6 +13566,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -12611,6 +13675,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -12624,21 +13690,23 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-additional-controllers - namespace: default + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EB-additional-controllers-default rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch - apiGroups: - "" resources: @@ -12672,6 +13740,34 @@ rules: - get - list - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -12682,6 +13778,16 @@ rules: - list - patch - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -12696,10 +13802,12 @@ rules: - apiGroups: - "" resources: - - pods + - persistentvolumes verbs: - get - list + - patch + - update - watch - apiGroups: - apps @@ -12708,150 +13816,74 @@ rules: verbs: - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes verbs: - - delete - get - list + - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: NofaS-election-role -subjects: -- kind: ServiceAccount - name: NofaS - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: NofaS -subjects: -- kind: ServiceAccount - name: NofaS - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-additional-controllers - namespace: default + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EB-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: NofaS-additional-controllers + kind: ClusterRole + name: EB-default subjects: - kind: ServiceAccount - name: NofaS + name: 43f9qCQ namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-rpk-bundle - namespace: default + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EB-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: NofaS-rpk-bundle + kind: ClusterRole + name: EB-additional-controllers-default subjects: - kind: ServiceAccount - name: NofaS + name: 43f9qCQ namespace: default --- # Source: operator/templates/entry-point.yaml @@ -12859,16 +13891,13 @@ apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-metrics-service + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EB-metrics-service namespace: default spec: ports: @@ -12877,71 +13906,65 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: xALbe0A + app.kubernetes.io/name: rrM2 --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: null - creationTimestamp: null labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EB namespace: default spec: - replicas: -495726913 + replicas: -1730589042 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: xALbe0A + app.kubernetes.io/name: rrM2 strategy: type: RollingUpdate template: metadata: - annotations: - GRGhQ: fkqnnjt1NtWR - QAQlCL: 3O1IzZ - u3WhJ: H6dv - creationTimestamp: null + annotations: {} labels: - 1SlC: EXAyYDLHKe app.kubernetes.io/instance: operator - app.kubernetes.io/name: xALbe0A - pHipubhkd: My + app.kubernetes.io/name: rrM2 spec: + affinity: + podAffinity: {} automountServiceAccountToken: false containers: - args: + - --configurator-base-image=j + - --configurator-tag=efh5i + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect + - --log-level=MES + - --metrics-bind-address=:8443 - --webhook-enabled=false - - --namespace=default - - --log-level=DCM8 - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 - imagePullPolicy: IfNotPresent + image: j:efh5i + imagePullPolicy: Never livenessProbe: - failureThreshold: 971 + failureThreshold: 446 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 160 - periodSeconds: 287 - successThreshold: 714 - terminationGracePeriodSeconds: 748 - timeoutSeconds: 678 + initialDelaySeconds: 502 + periodSeconds: 514 + successThreshold: 422 + terminationGracePeriodSeconds: 761 + timeoutSeconds: 821 name: manager ports: - containerPort: 9443 @@ -12951,37 +13974,73 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 146 + failureThreshold: 675 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 789 - periodSeconds: 258 - successThreshold: 866 - terminationGracePeriodSeconds: 123 - timeoutSeconds: 490 - resources: - limits: - cpu: "34" - memory: "847" - requests: - cpu: "961" - memory: "537" + initialDelaySeconds: 666 + periodSeconds: 546 + successThreshold: 505 + terminationGracePeriodSeconds: 521 + timeoutSeconds: 754 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true + dnsPolicy: ăčȪŹ刌 ephemeralContainers: null - imagePullSecrets: [] + hostAliases: + - ip: I + hostIPC: true + hostname: "2" + imagePullSecrets: + - name: CuPW3XK2 initContainers: [] + nodeName: GVzf nodeSelector: {} + priorityClassName: "6" + resourceClaims: + - name: 2N1zt + resourceClaimName: kiqEyu0 + resourceClaimTemplateName: bzSI + - name: oGvn + resourceClaimName: c1c8Kuc0S + resourceClaimTemplateName: iR + - name: TbNEr + resourceClaimName: Ll + resourceClaimTemplateName: V86ysj1Git + restartPolicy: Ɏ^- + schedulerName: Dwy securityContext: runAsUser: 65532 - serviceAccountName: NofaS - terminationGracePeriodSeconds: 10 + serviceAccountName: XDvG + subdomain: iZ + terminationGracePeriodSeconds: 4874658190775589000 tolerations: [] + topologySpreadConstraints: + - matchLabelKeys: + - XTXR + maxSkew: 967424029 + minDomains: 896473340 + nodeTaintsPolicy: 咂ʞ'ƃǮuMƯ + topologyKey: oPnr + whenUnsatisfiable: ɳ詊矯鱌込J0蜍誫A灇壨Ø鬂Bý肢喲牞 + - maxSkew: -97271836 + minDomains: 724290509 + nodeAffinityPolicy: 扗. + topologyKey: 76KJNo + whenUnsatisfiable: ' Gv縮尦东ù*辒' + - labelSelector: + matchLabels: + Ey33: aAL + w: EcJ1BUp5 + maxSkew: -379483369 + minDomains: -424780990 + topologyKey: 3JUm + whenUnsatisfiable: ƻʙŸ骃¹2Ę{śɺ僛犂翧ǿ volumes: - name: kube-api-access projected: @@ -13001,6 +14060,7 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace + - name: ZjkRuWYb --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -13008,381 +14068,53 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null labels: - 71sOOTU: en8OPZRyg7 - L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: NofaS-crd-job + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 43f9qCQ-migration-job namespace: default --- testdata/case-014.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - 7AtBTRGr: U8ZxJ - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qKT - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: g5 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: C1vG9c - health: - healthProbeBindAddress: :8081 - kind: FMlJKF - leaderElection: - leaderElect: false - resourceName: UKf - metrics: - bindAddress: Ynr - webhook: - port: 218 -kind: ConfigMap -metadata: - annotations: - DsuWV: hcfr - J: UTbwX - c067UKdeI: tE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qKT - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: o2lMoG-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - DsuWV: hcfr - J: UTbwX - c067UKdeI: tE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qKT - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: o2lMoG-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: qKT ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: - DsuWV: hcfr - J: UTbwX - c067UKdeI: tE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qKT - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: o2lMoG - namespace: default -spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: qKT - strategy: - rollingUpdate: - maxSurge: 674042436 - maxUnavailable: 669562044 - type: ǣę牜ʇ16ȚH!m - template: - metadata: - annotations: - KvRKE1d: XRIJ - W: C3 - fndr: Uyt3Xrutg - creationTimestamp: null - labels: - "": c - app.kubernetes.io/instance: operator - app.kubernetes.io/name: qKT - spec: - activeDeadlineSeconds: -2853855776321121300 - affinity: - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - namespaces: - - HKB8l3 - topologyKey: JXORzPM - weight: 1533141205 - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: {} - namespaceSelector: {} - namespaces: - - exCr - topologyKey: zaViz6 - - mismatchLabelKeys: - - sYY - - c - namespaceSelector: {} - topologyKey: 3i9VHugV - - matchLabelKeys: - - DKX45 - topologyKey: RQtSd - automountServiceAccountToken: false - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=6TGvv - - --configurator-tag=J18tP9n - - --configurator-base-image=AhZ - - x7K3o - command: - - /manager - env: [] - image: AhZ:J18tP9n - imagePullPolicy: Always - livenessProbe: - failureThreshold: 304 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 784 - periodSeconds: 1 - successThreshold: 585 - terminationGracePeriodSeconds: 163 - timeoutSeconds: 806 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 445 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 648 - periodSeconds: 480 - successThreshold: 975 - terminationGracePeriodSeconds: 240 - timeoutSeconds: 134 - resources: - limits: - cpu: "246" - memory: "341" - requests: - cpu: "419" - memory: "949" - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - dnsPolicy: Êĕƹ糁Ř舛ě勒 - ephemeralContainers: null - hostNetwork: true - hostname: buM - imagePullSecrets: - - name: 5l - - name: W - initContainers: [] - nodeName: rOig - nodeSelector: - gT9Z: CsE8yWd83mQMFqv - preemptionPolicy: 3LS谔~Y蟅ȸƃʪȭJu - priorityClassName: 0NKME1gmQ - resourceClaims: - - name: fdLb - - name: S5Hj - - name: Q0mzrA - restartPolicy: '@' - schedulerName: Nddm - schedulingGates: - - name: oljbBFuSK28 - securityContext: - runAsUser: 65532 - serviceAccountName: SZ - setHostnameAsFQDN: true - shareProcessNamespace: true - terminationGracePeriodSeconds: 10 - tolerations: - - effect: Ĥă覀萾Ƌāh-X - key: aaA8 - operator: 壈VIĔ - value: D3f - - effect: ȓ觿Lʏ`[ń騴HākQ=霅N卞嘕û掜 - key: yZ - operator: ķ嫝j麰nŊ1荠欸Ɔo幹浦³袦 - tolerationSeconds: 8387893108164709000 - value: rGuo - - effect: 骺LtÇe劘o銇Þ!暥啂ɡ端ȑ - key: X2UU - operator: 捿boŁ - tolerationSeconds: 3611748545609715700 - value: "Y" - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - 7AtBTRGr: U8ZxJ - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qKT - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: g5-crd-job - namespace: default --- testdata/case-015.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: - "": h5TCA9NX - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - "": h5TCA9NX - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - "": h5TCA9NX - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R-default + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 43f9qCQ-migration-job-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -13392,42 +14124,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -13436,46 +14167,18 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - "": h5TCA9NX - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: K9R-default -subjects: -- kind: ServiceAccount - name: Y7Y8 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - "": h5TCA9NX - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R-election-role - namespace: default -rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -13507,23 +14210,48 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - "": h5TCA9NX - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R - namespace: default -rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list - apiGroups: - coordination.k8s.io resources: @@ -13618,9 +14346,11 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -13630,25 +14360,80 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - networking.k8s.io + - cluster.redpanda.com resources: - - ingresses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete - get - list - patch @@ -13669,6 +14454,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -13682,223 +14469,75 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - "": h5TCA9NX - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: K9R-election-role -subjects: -- kind: ServiceAccount - name: Y7Y8 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - "": h5TCA9NX - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R - namespace: default + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 43f9qCQ-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: K9R + kind: ClusterRole + name: 43f9qCQ-migration-job-default subjects: - kind: ServiceAccount - name: Y7Y8 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - "": h5TCA9NX - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R-metrics-service + name: 43f9qCQ-migration-job namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: TCq --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: annotations: - "": h5TCA9NX - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: K9R + app.kubernetes.io/name: rrM2 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EB-migration namespace: default spec: - replicas: -594257073 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: TCq - strategy: - type: RollingUpdate template: metadata: - annotations: - vgF0: KEEg1Li7 - creationTimestamp: null + annotations: {} labels: - 7Hh0Z: Whlc - 7zRabC62: CP6LI2ne - Pob1: i8Jj - ULZKunhJj: ES - aTbK: "2" app.kubernetes.io/instance: operator - app.kubernetes.io/name: TCq - rGL7NYgsN: BT + app.kubernetes.io/name: rrM2 spec: - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: {} - weight: 576099119 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: null automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=vOvAQKBh - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - migration command: - - /manager - env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 - imagePullPolicy: IfNotPresent - livenessProbe: - failureThreshold: 618 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 473 - periodSeconds: 821 - successThreshold: 474 - terminationGracePeriodSeconds: 307 - timeoutSeconds: 193 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 414 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 982 - periodSeconds: 424 - successThreshold: 242 - terminationGracePeriodSeconds: 473 - timeoutSeconds: 556 - resources: - limits: - cpu: "483" - memory: "365" - requests: - cpu: "857" - memory: "13" + - /redpanda-operator + image: j:efh5i + imagePullPolicy: Never + name: migration + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsPolicy: 禉ȎÝ汱 - ephemeralContainers: null - hostAliases: - - ip: kVf - - ip: sW - - ip: rM - hostPID: true - hostUsers: true - hostname: E imagePullSecrets: - - name: lKwA67wQmuQa - - name: uHBD - initContainers: [] - nodeName: vYKJQj6 + - name: CuPW3XK2 nodeSelector: {} - preemptionPolicy: DŽ觊1牌Ş閏3壈T怠õȍƈǖ - priorityClassName: 0f0 - restartPolicy: ŸÀƷ2讟Ɠ - runtimeClassName: ZEew - schedulerName: R8H - securityContext: - runAsUser: 65532 - serviceAccountName: 09ijr0mdS1NgJ - setHostnameAsFQDN: true - subdomain: UrA - terminationGracePeriodSeconds: -8722592932569511000 + restartPolicy: OnFailure + serviceAccountName: 43f9qCQ-migration-job + terminationGracePeriodSeconds: 10 tolerations: [] - topologySpreadConstraints: - - labelSelector: - matchLabels: - G331g0: T19 - Jt: 8KOg - matchLabelKeys: - - X9 - - 5bB - maxSkew: 1128038377 - minDomains: -98836178 - topologyKey: j8NNYFTR - whenUnsatisfiable: ǼR嚯HyÇ陂m&屗ɇĤ螭ɧǕ胾縳D - - labelSelector: {} - maxSkew: -1392131714 - nodeAffinityPolicy: 舜Șđ瑩Ğ鴃\揌ƒo7Łŷô - nodeTaintsPolicy: Ąʟ/鍽A瘠Iʥ淧BĜ,Ü杵姽4u - topologyKey: T6H - whenUnsatisfiable: 禳鯋龖鱯筁İ赠ƄǪ|杮ɗ吻űU纕聓z序 volumes: - name: kube-api-access projected: @@ -13918,28 +14557,7 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - 8u: ClGJRRP - QqIpNPP: SI09hz - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: TCq - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Y7Y8-crd-job - namespace: default --- testdata/case-016.yaml.golden -- +-- testdata/case-009.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -13947,427 +14565,98 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 5aFk - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - pSTEUjYKreNw: j4onXF - name: f0FlDsNL + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: xVPYSkZt2 namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: pMnSnB87 + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: - healthProbeBindAddress: kpX - kind: 28gpbXzOZ + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig leaderElection: leaderElect: true - resourceName: wYA8UN + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: "n" + bindAddress: 127.0.0.1:8080 webhook: - port: 163 + port: 9443 kind: ConfigMap metadata: annotations: - pl05VC: F - creationTimestamp: null + k1: MeUXOg3 + yXu: iPV0Z labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 5aFk - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - pSTEUjYKreNw: j4onXF - name: f0FlDsNL-config + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tP-config namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - pl05VC: F - creationTimestamp: null + k1: MeUXOg3 + yXu: iPV0Z labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 5aFk - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - pSTEUjYKreNw: j4onXF - name: f0FlDsNL-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 5aFk + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tP-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - pl05VC: F - creationTimestamp: null + k1: MeUXOg3 + yXu: iPV0Z labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 5aFk - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - pSTEUjYKreNw: j4onXF - name: f0FlDsNL - namespace: default -spec: - replicas: 1899554555 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 5aFk - strategy: - type: RollingUpdate - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 5aFk - spec: - activeDeadlineSeconds: -5556799280309865000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchFields: - - key: 9anc - operator: ±蛖ɚȩ糪IJG=Dž羭{ - weight: -621007885 - - preference: {} - weight: 2044903865 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: luQIk - operator: z鎑霷#a槛仠#ɩ昗铩儮沩Ȓj - matchFields: - - key: 3gu - operator: Ý:齰磄瀒 - - key: Ny3s - operator: 虞7埃坨ĮÃŚ鋤鿭ǟĞ蘶 - - key: gnLOKK - operator: e鄷 - - {} - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - "": 7uhVpN4cQ - UntIH5I: tb97Lt8Tc - Y0HG: liwfUwa - namespaceSelector: - matchExpressions: - - key: SPGie - operator: 8ɟkJȤ - - key: O8Kkv - operator: ʦJŷÃʂȕ*寷乀 - - key: rx - operator: "" - topologyKey: JH7Y - weight: -1966373661 - - podAffinityTerm: - matchLabelKeys: - - LJGdA2C - - VvD0D8 - namespaces: - - wI7PWxOCE - - fJKpEUH - - YXjD - topologyKey: 7cFh - weight: -129313368 - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - namespaceSelector: - matchExpressions: - - key: f - operator: C玳kuƞkP恻q隆孼Ķo塹橨匢耟 - values: - - jH - - key: NAFBScy - operator: »6ĕmȏȿ#)磓r蝃蘕畖×h齁ś - - key: 1D - operator: Ħő - matchLabels: - r1j0: d5vuu - topologyKey: dZ - weight: 1727718816 - - podAffinityTerm: - matchLabelKeys: - - wUgBzH - - "" - - uL1eHe - mismatchLabelKeys: - - J - namespaceSelector: {} - topologyKey: bmprd4 - weight: 345672069 - automountServiceAccountToken: false - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=mU - - --configurator-tag=PGITfvk - - --configurator-base-image=4kWMzql - - YXvYnHoraN - - 6PWVVeCET - - D - command: - - /manager - env: [] - image: 4kWMzql:PGITfvk - imagePullPolicy: Always - livenessProbe: - failureThreshold: 789 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 277 - periodSeconds: 445 - successThreshold: 485 - terminationGracePeriodSeconds: 280 - timeoutSeconds: 492 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 782 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 998 - periodSeconds: 637 - successThreshold: 227 - terminationGracePeriodSeconds: 505 - timeoutSeconds: 559 - resources: - limits: - cpu: "889" - memory: "374" - requests: - cpu: "497" - memory: "446" - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - dnsPolicy: 峻Ő輇 - ephemeralContainers: null - hostNetwork: true - hostPID: true - hostUsers: true - hostname: tzD - imagePullSecrets: - - name: 7B - - name: iT52FG - - name: 2p - initContainers: [] - nodeName: yGth6FQAA - nodeSelector: - 9Pg5y: LF8hqD - aRrwBkt: Jvt8Adv - eai: ldwIa - preemptionPolicy: _]頉ýôŴ鶠囀穌ʒ/¨ - priority: 108339805 - priorityClassName: wSH2H5h7d - readinessGates: - - conditionType: k襍燷jx犥l欽Ÿ&ĨʃA4q - - conditionType: 埠獥ųZ - - conditionType: 3V螅º|:=7 - restartPolicy: ʤ`ųŕ](垎I - runtimeClassName: gVULasg3X - schedulerName: hxe - schedulingGates: - - name: c6W - securityContext: - fsGroupChangePolicy: Always - runAsGroup: 2107190638946176800 - runAsNonRoot: true - runAsUser: 65532 - supplementalGroups: - - 7361448140255747000 - serviceAccountName: miTk - subdomain: H - terminationGracePeriodSeconds: -9160842915008825000 - tolerations: - - key: ihN - operator: DŽ(镼żʤȮĕC - value: pLULE - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 5aFk - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - pSTEUjYKreNw: j4onXF - name: f0FlDsNL-crd-job - namespace: default --- testdata/case-017.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: pHzNPjb - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: oQZVx9 - health: - healthProbeBindAddress: :8081 - kind: sv4HQKE - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: uS6G - webhook: - port: 324 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-default + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tP-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -14377,42 +14666,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -14421,84 +14709,49 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-additional-controllers-default -rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - patch + - create - apiGroups: - - "" + - authorization.k8s.io resources: - - configmaps - - nodes - - secrets + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - events verbs: - - get - - list - - watch + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete - get - list - patch - update - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch - apiGroups: - "" resources: @@ -14508,121 +14761,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: DX7O-default -subjects: -- kind: ServiceAccount - name: pHzNPjb - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: DX7O-additional-controllers-default -subjects: -- kind: ServiceAccount - name: pHzNPjb - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -14717,9 +14888,11 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -14729,47 +14902,52 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - create - - delete - - get - - list - - patch - update - - watch - apiGroups: - - networking.k8s.io + - cluster.redpanda.com resources: - - ingresses + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - policy + - cluster.redpanda.com resources: - - poddisruptionbudgets + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - rolebindings - - roles + - leases verbs: - create - delete @@ -14778,72 +14956,37 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-additional-controllers - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create - - patch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - delete - get - list + - patch + - update - watch - apiGroups: - - "" - resources: - - pods - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - "" + - networking.k8s.io resources: - - persistentvolumeclaims + - ingresses verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims + - poddisruptionbudgets verbs: + - create - delete - get - list @@ -14851,181 +14994,58 @@ rules: - update - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list - - watch -- apiGroups: - - apps - resources: - - statefulsets/status - verbs: - patch - update -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + k1: MeUXOg3 + yXu: iPV0Z labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-rpk-bundle - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services - verbs: - - get - - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: DX7O-election-role -subjects: -- kind: ServiceAccount - name: pHzNPjb - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: DX7O -subjects: -- kind: ServiceAccount - name: pHzNPjb - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-additional-controllers - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: DX7O-additional-controllers -subjects: -- kind: ServiceAccount - name: pHzNPjb - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-rpk-bundle - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: DX7O-rpk-bundle -subjects: -- kind: ServiceAccount - name: pHzNPjb + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tP-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tP-default +subjects: +- kind: ServiceAccount + name: xVPYSkZt2 namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + k1: MeUXOg3 + yXu: iPV0Z labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-metrics-service + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tP-metrics-service namespace: default spec: ports: @@ -15034,71 +15054,71 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: NlE3orKsq9 + app.kubernetes.io/name: 2DsVHG --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null - creationTimestamp: null + annotations: + k1: MeUXOg3 + yXu: iPV0Z labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tP namespace: default spec: - replicas: 261912120 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: NlE3orKsq9 + app.kubernetes.io/name: 2DsVHG strategy: - type: ʛ淶 + type: RollingUpdate template: metadata: annotations: - VpV8Qi: s00s - creationTimestamp: null + "": onM93 + iAP: nV + v2fI: J labels: - PngjtPyl: ykFXfD - SABt6OZHhu: d app.kubernetes.io/instance: operator - app.kubernetes.io/name: NlE3orKsq9 - krDSTkt0Cp: fmEynMv3y + app.kubernetes.io/name: 2DsVHG spec: - activeDeadlineSeconds: -5900296573348537000 - automountServiceAccountToken: true + affinity: + nodeAffinity: {} + automountServiceAccountToken: false containers: - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect + - --log-level=yvCT8T + - --metrics-bind-address=:8443 - --webhook-enabled=false - - --namespace=default - - --log-level=BpnfO - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 691 + failureThreshold: 473 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 45 - periodSeconds: 987 - successThreshold: 442 - terminationGracePeriodSeconds: 832 - timeoutSeconds: 499 + initialDelaySeconds: 113 + periodSeconds: 957 + successThreshold: 555 + terminationGracePeriodSeconds: 950 +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + timeoutSeconds: 766 name: manager ports: - containerPort: 9443 @@ -15108,15 +15128,15 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 672 + failureThreshold: 624 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 355 - periodSeconds: 145 - successThreshold: 987 - terminationGracePeriodSeconds: 87 - timeoutSeconds: 446 + initialDelaySeconds: 735 + periodSeconds: 782 + successThreshold: 328 + terminationGracePeriodSeconds: 279 + timeoutSeconds: 195 resources: {} securityContext: allowPrivilegeEscalation: false @@ -15124,111 +15144,15 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - z4 - - 0add - - qpiw9 - options: - - name: g - value: Zj - - name: TLS2q4 - value: IWZ - searches: - - C - - ZWnAi - dnsPolicy: xX鏎öH ephemeralContainers: null - hostIPC: true - hostNetwork: true - hostUsers: true - hostname: 6s5f - imagePullSecrets: - - name: fLk6bKK6 - - name: UFjlI + imagePullSecrets: [] initContainers: [] - nodeName: QFWExG - nodeSelector: - Ds0bfBawR: M - T: v7 - preemptionPolicy: Ǹ - priority: 38583698 - priorityClassName: M5hx9L - restartPolicy: ʙ瓮臎#ɤy鿩ǔʘ怹騙諙诏ʥ^侾 - runtimeClassName: xoq1Z - schedulerName: 5ZjpF2 + nodeSelector: {} securityContext: - fsGroup: 4202070741260157000 - fsGroupChangePolicy: Always - runAsGroup: 9013120776933110000 - runAsNonRoot: true - runAsUser: 8904388612794458000 - sysctls: - - name: u2tM1pwj - value: r3fX5 - - name: R3ebj0 - value: J6V - - name: eyqaE - value: 13RX - serviceAccountName: 6Q - setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: dKcT7J - terminationGracePeriodSeconds: 958157690550273200 - tolerations: - - effect: 鯲ǥzNY=ĩ7綣ǂǩƜ陫Ǹ枢橭 - key: JcNTJI - operator: 璎謉蕵jH`裺庣瀝柎Ɇ凐ȕ - tolerationSeconds: -6474703231875668000 - value: x3srAmb - - effect: m燔o;¦ - key: 1urJ2 - operator: w茱ŲŲ崻Ə瑕ĩƗʪÒW^ - value: mpiVil6 - - effect: Ə誽繏枹娟 - key: QAlBr - operator: a垐擝榟mbŚƫ - tolerationSeconds: -6539370764697410000 - value: oKm5I - topologySpreadConstraints: - - labelSelector: {} - maxSkew: -2056495085 - minDomains: 578714113 - nodeAffinityPolicy: +ɚȽ焑ȸǺǚ左ɶC麷~Ǜɻ4魶垄Ö - nodeTaintsPolicy: ' 銽õ揉糹灨7ɣsGȌʅ灨Ȓȣ該Ɯ娤醆' - topologyKey: vO06mYrm - whenUnsatisfiable: 滕枔ʼn+三H0g¤誚爡竩拺ʌ嵼Ƶ - - maxSkew: -1573120037 - nodeAffinityPolicy: Š - nodeTaintsPolicy: 炥ÁFhóëB2re贈( - topologyKey: dV0wh8 - whenUnsatisfiable: kƆC]舻欴坅灊摬ɐ嘤ȩ拐錹 - - labelSelector: - matchExpressions: - - key: rPA7uc47l - operator: "" - values: - - LXzkh - - erSrq - - key: 4rKY - operator: zr瑧}ȃ7h鰟QɒʝŀȀĢ咠Ɓ袌 - - key: Io5 - operator: Ť{Ő1怴ȲĦT濤=1咴bdž跘| - values: - - m - - B9dGMNfq - - O8wzB - matchLabels: - 6l5: 65a8U - RWurD: iv9 - cpA: "" - matchLabelKeys: - - LnO - maxSkew: -1850914784 - minDomains: 629985372 - nodeTaintsPolicy: dƦć苆n鱿鞵a#úĆ - topologyKey: WYxuG1Q - whenUnsatisfiable: ŻŗƳ<迱ȪĆF梩抮俕鬷 + runAsUser: 65532 + serviceAccountName: WSGbu + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -15250,50 +15174,12 @@ spec: path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: DX7O-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw ---- -# Source: operator/templates/entry-point.yaml apiVersion: v1 automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: +<<<<<<< HEAD helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" @@ -15301,60 +15187,23 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v25.1.4 - bKX: d - helm.sh/chart: operator-25.1.4 - m2Z8Z: wRw - name: pHzNPjb-crd-job - namespace: default --- testdata/case-018.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" + app.kubernetes.io/name: EbX3hB7N app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh + name: WSGbu-crd-job namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: "" - health: - healthProbeBindAddress: :8081 - kind: fiYym - leaderElection: - leaderElect: true - resourceName: xpFTAT6I - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 269 -kind: ConfigMap -metadata: - annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null +-- testdata/case-002.yaml.golden -- +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-config + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: xVPYSkZt2-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml @@ -15362,56 +15211,50 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + k1: MeUXOg3 + yXu: iPV0Z labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-default + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: xVPYSkZt2-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas + - horizontalpodautoscalers verbs: - create - delete @@ -15423,40 +15266,51 @@ rules: - apiGroups: - cluster.redpanda.com resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - consoles verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles/status verbs: - get - patch - update - apiGroups: - - cluster.redpanda.com + - networking.k8s.io resources: - - schemas - - topics - - users + - ingresses verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - authentication.k8s.io resources: - - clusterrolebindings - - clusterroles + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps verbs: - create - delete @@ -15465,213 +15319,67 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-additional-controllers-default -rules: - apiGroups: - "" resources: - - persistentvolumes + - events verbs: + - create - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps - - nodes - - secrets + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - persistentvolumes verbs: - - delete - get - list - patch - - update + - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - persistentvolumeclaims + - pods verbs: + - delete - get - list - watch - apiGroups: - "" resources: - - configmaps - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - update - - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes + - nodes verbs: - get - - list - - patch - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: x8K24mCZYsnh-default -subjects: -- kind: ServiceAccount - name: x8K24mCZYsnh - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: x8K24mCZYsnh-additional-controllers-default -subjects: -- kind: ServiceAccount - name: x8K24mCZYsnh - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-election-role - namespace: default -rules: - apiGroups: - "" resources: - configmaps - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: + - endpoints - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - patch -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -15765,6 +15473,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -15817,6 +15582,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -15830,162 +15597,790 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRoleBinding metadata: annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + k1: MeUXOg3 + yXu: iPV0Z + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: xVPYSkZt2-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: xVPYSkZt2-migration-job-default +subjects: +- kind: ServiceAccount + name: xVPYSkZt2-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 2DsVHG + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tP-migration + namespace: default +spec: + template: + metadata: + annotations: + "": onM93 + iAP: nV + v2fI: J + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 2DsVHG + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "649" + memory: "132" + requests: + cpu: "427" + memory: "705" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: xVPYSkZt2-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 愆歮薵Ǧ馋篵嫀矹 + key: Xtlk + operator: ×驓 + value: Nk5b + - effect: 饷ÅȔ%祪凬ɨ爈躯壌b+Ȗ¶踦鎠dũ + key: e + value: FIf7K4pS + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-010.yaml.golden -- +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-additional-controllers + name: Dx441G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G-config namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G-default rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - events + - tokenreviews verbs: - create - - patch - apiGroups: - - "" + - authorization.k8s.io resources: - - persistentvolumeclaims + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - pods - - secrets + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status verbs: - get - - list - - watch + - patch + - update - apiGroups: - - apps + - cluster.redpanda.com resources: - - statefulsets + - schemas + - topics + - users verbs: - get - list + - patch + - update - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - persistentvolumeclaims + - clusterrolebindings + - clusterroles verbs: + - create - delete - get - list - patch - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G-additional-controllers-default +rules: - apiGroups: - "" resources: - - persistentvolumeclaims + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes verbs: - delete - get - list - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list - watch - apiGroups: - "" resources: - - pods + - configmaps + - secrets verbs: - get - list - watch - apiGroups: - - apps + - "" resources: - - statefulsets/status + - persistentvolumes verbs: + - get + - list - patch - update + - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumeclaims - - pods + - redpandas verbs: - - delete - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - persistentvolumes verbs: - get - list + - patch + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-election-role - namespace: default + name: Dx441G-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: Dx441G-default +subjects: +- kind: ServiceAccount + name: Dx441G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: Dx441G-additional-controllers-default +subjects: +- kind: ServiceAccount + name: Dx441G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HICN + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Dx441G-election-role + namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: x8K24mCZYsnh-election-role + name: Dx441G-election-role subjects: - kind: ServiceAccount - name: x8K24mCZYsnh + name: Dx441G namespace: default --- # Source: operator/templates/entry-point.yaml @@ -15993,25 +16388,25 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh + name: Dx441G namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: x8K24mCZYsnh + name: Dx441G subjects: - kind: ServiceAccount - name: x8K24mCZYsnh + name: Dx441G namespace: default --- # Source: operator/templates/entry-point.yaml @@ -16019,25 +16414,25 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-additional-controllers + name: Dx441G-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: x8K24mCZYsnh-additional-controllers + name: Dx441G-additional-controllers subjects: - kind: ServiceAccount - name: x8K24mCZYsnh + name: Dx441G namespace: default --- # Source: operator/templates/entry-point.yaml @@ -16045,25 +16440,25 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-rpk-bundle + name: Dx441G-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: x8K24mCZYsnh-rpk-bundle + name: Dx441G-rpk-bundle subjects: - kind: ServiceAccount - name: x8K24mCZYsnh + name: Dx441G namespace: default --- # Source: operator/templates/entry-point.yaml @@ -16071,17 +16466,17 @@ apiVersion: v1 kind: Service metadata: annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-metrics-service + name: Dx441G-metrics-service namespace: default spec: ports: @@ -16090,45 +16485,47 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci + BYFlp: 1ue + PW45cS5PlOC: K5ky3WbW + Rb: A creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh + name: Dx441G namespace: default spec: - replicas: -1117470466 + replicas: 826057285 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN strategy: - type: RollingUpdate + rollingUpdate: + maxSurge: 219927532 + maxUnavailable: 304746894 + type: "N" template: metadata: - annotations: - UU: Ih1JV9T5t65 - VBBsKn: k - v: ELoN6W + annotations: {} creationTimestamp: null labels: - Jg: wIR6AIt app.kubernetes.io/instance: operator - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN spec: + affinity: + nodeAffinity: {} + podAffinity: {} automountServiceAccountToken: false containers: - args: @@ -16137,25 +16534,24 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=pMbmKX - - --configurator-tag=UVj2te38 - - --configurator-base-image=gSveMOQ8Iaw - - 6gNh + - --log-level=Ae + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: gSveMOQ8Iaw:UVj2te38 + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 375 + failureThreshold: 218 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 86 - periodSeconds: 833 - successThreshold: 450 - terminationGracePeriodSeconds: 146 - timeoutSeconds: 369 + initialDelaySeconds: 768 + periodSeconds: 416 + successThreshold: 445 + terminationGracePeriodSeconds: 710 + timeoutSeconds: 973 name: manager ports: - containerPort: 9443 @@ -16165,15 +16561,15 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 335 + failureThreshold: 183 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 53 - periodSeconds: 419 - successThreshold: 113 - terminationGracePeriodSeconds: 543 - timeoutSeconds: 999 + initialDelaySeconds: 346 + periodSeconds: 821 + successThreshold: 910 + terminationGracePeriodSeconds: 522 + timeoutSeconds: 285 resources: {} securityContext: allowPrivilegeEscalation: false @@ -16183,29 +16579,16 @@ spec: readOnly: true ephemeralContainers: null imagePullSecrets: - - name: P0TDZL8he - - name: x3WK4 + - name: fAr + - name: naZgh9c3e2j + - {} initContainers: [] - nodeSelector: - k1PDm6M8S: Av + nodeSelector: {} securityContext: runAsUser: 65532 - serviceAccountName: x8K24mCZYsnh + serviceAccountName: Dx441G terminationGracePeriodSeconds: 10 - tolerations: - - effect: F遈魠挢銔ʅu - key: pMn354ce - operator: ʼn鮇ȝǖ玫賰Ĭ%aǞ屩讑=禙賊谥 - value: jBqy9Xc - - effect: 陃dŷF|ɎO琂鹁ƞ哺 - operator: ǁ哐练YǠZ»踳4妼ʂ楃鉓qƽ£蟸´ - tolerationSeconds: -7093685367868430000 - value: lCYrg - - effect: g券貜隑 - key: UAx - operator: Ŋ顴Ƣ)Ƙ饛?ɶ - tolerationSeconds: -4434340529404616700 - value: 12CvQa + tolerations: [] volumes: - name: kube-api-access projected: @@ -16227,44 +16610,6 @@ spec: path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: - bhU: AcTdNUdgDaT - iH: X4s - ieFAk: TxA0xeci - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 ---- -# Source: operator/templates/entry-point.yaml apiVersion: v1 automountServiceAccountToken: false kind: ServiceAccount @@ -16277,12 +16622,12 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "5" + app.kubernetes.io/name: HICN app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: x8K24mCZYsnh-crd-job + name: Dx441G-crd-job namespace: default --- testdata/case-019.yaml.golden -- +-- testdata/case-003.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -16294,10 +16639,10 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi + name: rEba namespace: default --- # Source: operator/templates/entry-point.yaml @@ -16317,36 +16662,30 @@ data: port: 9443 kind: ConfigMap metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-config + name: rEba-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-metrics-reader + name: rEba-metrics-reader rules: - nonResourceURLs: - /metrics @@ -16357,18 +16696,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-default + name: rEba-default rules: - apiGroups: - authentication.k8s.io @@ -16444,18 +16780,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-additional-controllers-default + name: rEba-additional-controllers-default rules: - apiGroups: - "" @@ -16532,68 +16865,59 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-default + name: rEba-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: UHlKDi-default + name: rEba-default subjects: - kind: ServiceAccount - name: UHlKDi + name: rEba namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-additional-controllers-default + name: rEba-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: UHlKDi-additional-controllers-default + name: rEba-additional-controllers-default subjects: - kind: ServiceAccount - name: UHlKDi + name: rEba namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-election-role + name: rEba-election-role namespace: default rules: - apiGroups: @@ -16632,18 +16956,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi + name: rEba namespace: default rules: - apiGroups: @@ -16806,18 +17127,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-additional-controllers + name: rEba-additional-controllers namespace: default rules: - apiGroups: @@ -16904,18 +17222,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-rpk-bundle + name: rEba-rpk-bundle namespace: default rules: - apiGroups: @@ -16940,122 +17255,107 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-election-role + name: rEba-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: UHlKDi-election-role + name: rEba-election-role subjects: - kind: ServiceAccount - name: UHlKDi + name: rEba namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi + name: rEba namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: UHlKDi + name: rEba subjects: - kind: ServiceAccount - name: UHlKDi + name: rEba namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-additional-controllers + name: rEba-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: UHlKDi-additional-controllers + name: rEba-additional-controllers subjects: - kind: ServiceAccount - name: UHlKDi + name: rEba namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-rpk-bundle + name: rEba-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: UHlKDi-rpk-bundle + name: rEba-rpk-bundle subjects: - kind: ServiceAccount - name: UHlKDi + name: rEba namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-metrics-service + name: rEba-metrics-service namespace: default spec: ports: @@ -17064,48 +17364,50 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi + name: rEba namespace: default spec: - replicas: 577319060 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV strategy: - rollingUpdate: - maxSurge: 1303580468 - maxUnavailable: 757075873 - type: ʐɊƦ棍EƄ + type: RollingUpdate template: metadata: - annotations: - hIbtWatj5V: "" - kwFBY9: e8EBkR + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV spec: affinity: - nodeAffinity: {} + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + topologyKey: EISx1Cm + weight: -635686610 + - podAffinityTerm: + matchLabelKeys: + - rgqfrK + - ELazIMD + topologyKey: vYPE + weight: -1403728953 automountServiceAccountToken: false containers: - args: @@ -17114,24 +17416,27 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=5ruW + - --log-level=CcZY - --configurator-tag=v25.1.4 - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - 4ApSMU1 + - r + - BXVuKkMQ command: - /manager env: [] image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 448 + failureThreshold: 336 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 92 - periodSeconds: 828 - successThreshold: 855 - terminationGracePeriodSeconds: 195 - timeoutSeconds: 723 + initialDelaySeconds: 728 + periodSeconds: 843 + successThreshold: 454 + terminationGracePeriodSeconds: 712 + timeoutSeconds: 557 name: manager ports: - containerPort: 9443 @@ -17141,16 +17446,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 911 + failureThreshold: 820 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 992 - periodSeconds: 967 - successThreshold: 613 - terminationGracePeriodSeconds: 799 - timeoutSeconds: 891 - resources: {} + initialDelaySeconds: 827 + periodSeconds: 213 + successThreshold: 999 + terminationGracePeriodSeconds: 721 + timeoutSeconds: 221 + resources: + limits: + cpu: "666" + memory: "812" + requests: + cpu: "587" + memory: "830" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -17160,20 +17471,25 @@ spec: ephemeralContainers: null imagePullSecrets: [] initContainers: [] - nodeSelector: {} + nodeSelector: + wua: k2W securityContext: runAsUser: 65532 - serviceAccountName: UHlKDi + serviceAccountName: rEba terminationGracePeriodSeconds: 10 tolerations: - - key: qR0W0 - operator: i熔ɟ# - tolerationSeconds: 4752464137807170000 - value: X - - effect: Eʟij褔鑚 - key: WKdYyXfN - operator: 噃"盬LJ_Ƹ嚸-ɳ;Njd娀葵ʝǙ - value: ohIxEL + - effect: 弍ȏʭșp馁®糋ɤ鞗桸ǚ棎MÃɛ鞍sK + key: v + operator: ɮ'7ʑ桒ɉʖǍ翌Đ媏鿩1褉 + value: WAOe + - effect: Ė)İĒÙ\ģǧɹ貏gʢVǘ僘.5 + key: OsAm + operator: ȶ^崬ƨƔ5享õÚ + value: BBBZ + - effect: 袝逥Ǹ5劚叞謨ĝ鸆鲧忂úa萜絇ƗwHƼ + key: 0K + operator: 枑- + value: wF volumes: - name: kube-api-access projected: @@ -17195,42 +17511,24 @@ spec: path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - 8dRB: 5cv - EfHk: fBL - Nm4maThP4X: v + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: kzHCtV app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-metrics-monitor + name: rEba-crd-job namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 +-- testdata/case-004.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -17238,48 +17536,46 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" + Rt5: OeMr + bO3NPc: qn0ImYNRP creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Fk + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: UHlKDi-crd-job + name: SpE0 namespace: default --- testdata/case-020.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: PkD + apiVersion: uNM health: - healthProbeBindAddress: Es - kind: bXPNJb + healthProbeBindAddress: :8081 + kind: "3" leaderElection: - leaderElect: false - resourceName: 5qBPLbo9JIP69 + leaderElect: true + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: brP6t94s + bindAddress: 127.0.0.1:8080 webhook: - port: 3 + port: 9443 kind: ConfigMap metadata: annotations: null creationTimestamp: null labels: - NoeniB5: Fc1 + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-config + name: kdh6Z-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -17289,14 +17585,13 @@ metadata: annotations: null creationTimestamp: null labels: - NoeniB5: Fc1 + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-metrics-reader + name: kdh6Z-metrics-reader rules: - nonResourceURLs: - /metrics @@ -17310,14 +17605,13 @@ metadata: annotations: {} creationTimestamp: null labels: - NoeniB5: Fc1 + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-default + name: kdh6Z-default rules: - apiGroups: - authentication.k8s.io @@ -17396,14 +17690,13 @@ metadata: annotations: {} creationTimestamp: null labels: - NoeniB5: Fc1 + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-additional-controllers-default + name: kdh6Z-additional-controllers-default rules: - apiGroups: - "" @@ -17480,71 +17773,235 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - annotations: {} - creationTimestamp: null +<<<<<<< HEAD +======= + annotations: + kbD: UEcwv0 labels: - NoeniB5: Fc1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-default + app.kubernetes.io/name: D4Ec + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: PcH5-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: wINY4HR-default + name: PcH5-default subjects: - kind: ServiceAccount - name: ft + name: PcH5 namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - annotations: {} - creationTimestamp: null + annotations: + kbD: UEcwv0 labels: - NoeniB5: Fc1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-additional-controllers-default + app.kubernetes.io/name: D4Ec + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: PcH5-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: wINY4HR-additional-controllers-default + name: PcH5-additional-controllers-default subjects: - kind: ServiceAccount - name: ft + name: PcH5 namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +apiVersion: v1 +kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + kbD: UEcwv0 labels: - NoeniB5: Fc1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-election-role + app.kubernetes.io/name: D4Ec + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: PcH5-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: D4Ec +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + kbD: UEcwv0 + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: D4Ec + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: PcH5 + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: D4Ec + strategy: + type: RollingUpdate + template: + metadata: + annotations: + 9dLPjBILP: ZLGn + dkUIUt: "1" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: D4Ec + spec: + automountServiceAccountToken: false + containers: + - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=false + - --health-probe-bind-address=:8081 + - --leader-elect + - --log-level=kpY + - --metrics-bind-address=:8443 + - --webhook-enabled=false + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 833 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 272 + periodSeconds: 310 + successThreshold: 760 + terminationGracePeriodSeconds: 16 + timeoutSeconds: 944 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 248 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 264 + periodSeconds: 914 + successThreshold: 797 + terminationGracePeriodSeconds: 723 + timeoutSeconds: 743 + resources: + limits: + cpu: "138" + memory: "156" + requests: + cpu: "440" + memory: "15" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + ephemeralContainers: null + imagePullSecrets: + - name: 7J + - name: LI + initContainers: [] + nodeSelector: + Gu71: XVmoxirzO + tH: yafL + securityContext: + runAsUser: 65532 + serviceAccountName: PcH5 + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: D4Ec + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: PcH5-migration-job namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + kbD: UEcwv0 + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: D4Ec + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: PcH5-migration-job-default rules: - apiGroups: - "" resources: - configmaps + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -17554,16 +18011,21 @@ rules: - update - watch - apiGroups: - - "" + - apps resources: - - events + - deployments verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - autoscaling resources: - - leases + - horizontalpodautoscalers verbs: - create - delete @@ -17572,28 +18034,10 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - NoeniB5: Fc1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR - namespace: default -rules: - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles verbs: - create - delete @@ -17603,13 +18047,17 @@ rules: - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - configmaps - - pods - - secrets - - serviceaccounts - - services + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: - create - delete @@ -17619,25 +18067,21 @@ rules: - update - watch - apiGroups: - - "" + - authentication.k8s.io resources: - - events + - tokenreviews verbs: - create - - patch - apiGroups: - - apps + - authorization.k8s.io resources: - - controllerrevisions + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - configmaps verbs: - create - delete @@ -17647,9 +18091,16 @@ rules: - update - watch - apiGroups: - - autoscaling + - "" resources: - - horizontalpodautoscalers + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -17659,30 +18110,47 @@ rules: - update - watch - apiGroups: - - batch + - "" resources: - - jobs + - persistentvolumes verbs: - - create - - delete - get - list - patch - - update - watch - apiGroups: - - cert-manager.io + - "" resources: - - certificates - - issuers + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list - apiGroups: - coordination.k8s.io resources: @@ -17696,10 +18164,13 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - "" resources: - - podmonitors - - servicemonitors + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -17709,9 +18180,25 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - "" resources: - - ingresses + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets verbs: - create - delete @@ -17721,9 +18208,9 @@ rules: - update - watch - apiGroups: - - policy + - autoscaling resources: - - poddisruptionbudgets + - horizontalpodautoscalers verbs: - create - delete @@ -17733,10 +18220,9 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - batch resources: - - rolebindings - - roles + - jobs verbs: - create - delete @@ -17745,72 +18231,95 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - NoeniB5: Fc1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-additional-controllers - namespace: default -rules: - apiGroups: - - "" + - cert-manager.io resources: - - events + - certificates + - issuers verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumeclaims + - consoles + - nodepools + - redpandas verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - pods - - secrets + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - - list - - watch + - patch + - update - apiGroups: - - apps + - cluster.redpanda.com resources: - - statefulsets + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumeclaims + - leases verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - persistentvolumeclaims + - podmonitors + - servicemonitors verbs: + - create - delete - get - list @@ -17818,464 +18327,128 @@ rules: - update - watch - apiGroups: - - "" + - networking.k8s.io resources: - - pods + - ingresses verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - apps + - policy resources: - - statefulsets/status + - poddisruptionbudgets verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - persistentvolumeclaims - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create - delete - get - list + - patch + - update - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null - labels: - NoeniB5: Fc1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-rpk-bundle - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services - verbs: - - get - - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - NoeniB5: Fc1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: wINY4HR-election-role -subjects: -- kind: ServiceAccount - name: ft - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - NoeniB5: Fc1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: wINY4HR -subjects: -- kind: ServiceAccount - name: ft - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - NoeniB5: Fc1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-additional-controllers - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: wINY4HR-additional-controllers -subjects: -- kind: ServiceAccount - name: ft - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + kbD: UEcwv0 labels: - NoeniB5: Fc1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-rpk-bundle - namespace: default + app.kubernetes.io/name: D4Ec + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: PcH5-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: wINY4HR-rpk-bundle + kind: ClusterRole + name: PcH5-migration-job-default subjects: - kind: ServiceAccount - name: ft - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - NoeniB5: Fc1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR-metrics-service + name: PcH5-migration-job namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: IC6CHScZj --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - NoeniB5: Fc1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: wINY4HR + app.kubernetes.io/name: D4Ec + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: PcH5-migration namespace: default spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: IC6CHScZj - strategy: - rollingUpdate: - maxSurge: 197851187 - maxUnavailable: 76639021 - type: ȺŪ鄈厷)_質H迉ʈ砂\昜闁ɠdz template: metadata: annotations: - gfUi8: 419ry - j: ryqOMF0Jv5 - lO9TC3H: GA - creationTimestamp: null + 9dLPjBILP: ZLGn + dkUIUt: "1" labels: - "4": 52Tm2RbID - A2n: P41k9HiCVIqF - HY: i53EA app.kubernetes.io/instance: operator - app.kubernetes.io/name: IC6CHScZj - r: 9n + app.kubernetes.io/name: D4Ec spec: - activeDeadlineSeconds: -7334991626066240000 - affinity: - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: wa1I6C - operator: v寱县H - values: - - nkcT - - kZVmdT - - 1yCqAQx - matchLabels: - XgvalJB: 4NJfSfnyS - namespaceSelector: - matchLabels: - 5Pf: t5wc1jv - namespaces: - - PNy - topologyKey: a - weight: 1793239155 - - podAffinityTerm: - matchLabelKeys: - - YR5R - mismatchLabelKeys: - - Dd8 - - UENQb - - NFy0hS - namespaces: - - Frj - - ZUe - topologyKey: Q86m7P - weight: 291823071 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: Xiauf72 - operator: 趾Ä灪'ʆsʍëdɬǶȾ!ŭƏɛ - matchLabels: - T: PrGnsT - matchLabelKeys: - - jBnHuN - - Hf - - 2T - namespaceSelector: - matchLabels: - 8Bkgc8ZL: Ezu0 - ovjGpP: WPG - namespaces: - - ZSX - topologyKey: uJ - weight: 316054413 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: mTbu - operator: ȪőT僕Śǿi壓2šQʆıƔ阖ʔțk{ - matchLabels: - Adzu7Pw1: OFMIvt - Eo9J: 2A - fLIuX: nt9902V - mismatchLabelKeys: - - p2NQ - namespaceSelector: {} - topologyKey: AC2fIAX4 - podAntiAffinity: {} automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=wt4uT - - --configurator-tag=MJp - - --configurator-base-image=6ERMjI8 - - vp9WG + - migration command: - - /manager - env: [] - image: 6ERMjI8:MJp - imagePullPolicy: Always - livenessProbe: - failureThreshold: 199 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 704 - periodSeconds: 903 - successThreshold: 291 - terminationGracePeriodSeconds: 215 - timeoutSeconds: 790 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 828 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 849 - periodSeconds: 744 - successThreshold: 144 - terminationGracePeriodSeconds: 220 - timeoutSeconds: 900 + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration resources: limits: - cpu: "576" - memory: "861" + cpu: "138" + memory: "156" requests: - cpu: "54" - memory: "628" + cpu: "440" + memory: "15" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - QXyBi4x - - q - options: - - name: 93C - value: lWWdKFn5 - - name: M4U7d - value: "" - searches: - - RMyq - - ZWAzxvu - dnsPolicy: '@c阁箅怮2UƖ頫ĥ旨©c闸褭v' - enableServiceLinks: true - ephemeralContainers: null - hostAliases: - - hostnames: - - i4ECE0X - ip: OI - - hostnames: - - z - ip: gqTQe1j - hostNetwork: true - hostUsers: true - hostname: DDIcxqJ imagePullSecrets: - - name: LBeC5t - - name: TFCWBezm - initContainers: [] - nodeName: OJJ - nodeSelector: {} - preemptionPolicy: 聉ȸȹńƺY审Ɠ蕱ɉ鴼冟iŜrĠ@籸 - priority: -350249270 - priorityClassName: hO8 - resourceClaims: - - name: 2Zc4C - restartPolicy: HN險琱瘀釗ƎeƣQ揩緙(疮 - runtimeClassName: rsBD5 - schedulerName: ZB6xw - securityContext: - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 9084698496973303000 - runAsNonRoot: true - runAsUser: 3344169292564113400 - serviceAccountName: 1tIUwTl - setHostnameAsFQDN: true - subdomain: G1Ih + - name: 7J + - name: LI + nodeSelector: + Gu71: XVmoxirzO + tH: yafL + restartPolicy: OnFailure + serviceAccountName: PcH5-migration-job terminationGracePeriodSeconds: 10 - tolerations: - - effect: ȀǍhd蛐i - key: XaF - operator: ȒǑs突閼ɔ熈伛!Ì@p嶸ǝǡ - tolerationSeconds: -6963795863015170000 - value: 5su - - effect: 晆ȶ©諳 - key: WgIQZS - operator: /忠\R琇ɜ溮卷??ȏå©F*嗦pʆ - tolerationSeconds: -1505275548904914200 - value: 3aZS3 - - effect: ʕ僁Ɠ矒!ʤ箥Iæ姣ș_ǧɼb醏J - key: xAK9d - operator: ƵPǼƈxªÆşdƱ恜@Pǵ鐄Ŗ:縷 - value: a - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: 6EyjQTRo - operator: 隍%鞙ÉŇ*朹ɝw埡獊ǙǴ} - values: - - 0fVDws - - key: 7PqtLnWW - operator: ÃNÒ蝤Ȕų'ȵ - values: - - E8 - - bNgEZm9 - - key: Opmpk - operator: Ķ顃屹4Y種Uz螷婽虊}ÒrİǕ= - values: - - u5VvsWl - maxSkew: -1637155940 - nodeAffinityPolicy: Gȋ' - nodeTaintsPolicy: 艩yZ.@灟D,Ğ小]ʎʇxʯ晫Þ葍碟 - topologyKey: 7ac - whenUnsatisfiable: ƸĪ鎺劉Xú§ - - labelSelector: - matchExpressions: - - key: NUm - operator: '"貕期ǗʂƤq径' - values: - - N6 - - U5G - - 9R7dT - - key: jr0OdvEf - operator: 嫫ǻƻ4ɻQx=鐈üɇƺƯ楢們ƔÄ~] - values: - - x7XDNC7 - - hCy3 - - ATdO9M - matchLabels: - IRkbr: LxlTB - ny3ztLITPkZQA: t2WSWQfQolp - maxSkew: 830165066 - minDomains: -1516905288 - nodeTaintsPolicy: 粔8ŕ蟸9糄葉5祭葕ý蝗牵:· - topologyKey: uPOu8jgVXuK - whenUnsatisfiable: ñA鿔[vǬɊTûg + tolerations: [] volumes: - name: kube-api-access projected: @@ -18295,30 +18468,7 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: "" - - name: CM ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - NoeniB5: Fc1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - ruSHmUUvOj1: h3BuiPAHIC - name: ft-crd-job - namespace: default --- testdata/case-021.yaml.golden -- +-- testdata/case-011.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -18326,44 +18476,46 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: + B: grOgtF + Pr: RBVP + QVzkdX7Y1I2hjVAXY: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 12bwUKO + app.kubernetes.io/name: 6gRngW4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-6gRngW4 namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 0Ctyxs + apiVersion: "" health: - healthProbeBindAddress: KP - kind: xi + healthProbeBindAddress: 0WbhhAr + kind: "65" leaderElection: - leaderElect: false - resourceName: p + leaderElect: true + resourceName: ZTHotuPvWk metrics: - bindAddress: 127.0.0.1:8080 + bindAddress: jP0o webhook: - port: 83 + port: 9443 kind: ConfigMap metadata: annotations: null - creationTimestamp: null labels: + B: grOgtF + Pr: RBVP + QVzkdX7Y1I2hjVAXY: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-config + app.kubernetes.io/name: 6gRngW4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-6gRngW4-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -18371,15 +18523,16 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: null - creationTimestamp: null labels: + B: grOgtF + Pr: RBVP + QVzkdX7Y1I2hjVAXY: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-metrics-reader + app.kubernetes.io/name: 6gRngW4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-6gRngW4-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -18390,237 +18543,67 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) annotations: {} creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-default + name: kdh6Z-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: kdh6Z-default +subjects: +- kind: ServiceAccount + name: SpE0 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + F0wS: vBToTa + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BRlD + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: kdh6Z-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: kdh6Z-additional-controllers-default +subjects: +- kind: ServiceAccount + name: SpE0 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + F0wS: vBToTa + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BRlD + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: kdh6Z-election-role + namespace: default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers - verbs: - - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas/status - - schemas/status - - topics/status - - users/status - verbs: - - get - - patch - - update -- apiGroups: - - cluster.redpanda.com - resources: - - schemas - - topics - - users - verbs: - - get - - list - - patch - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterrolebindings - - clusterroles - verbs: - - create - - delete - - get - - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-additional-controllers-default -rules: -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - patch -- apiGroups: - - "" - resources: - - configmaps - - nodes - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - delete - - get - - list - - patch - - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - configmaps - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - update - - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 5-default -subjects: -- kind: ServiceAccount - name: 12bwUKO - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 5-additional-controllers-default -subjects: -- kind: ServiceAccount - name: 12bwUKO - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-election-role - namespace: default -rules: -- apiGroups: - - "" + - "" resources: - configmaps verbs: @@ -18658,13 +18641,13 @@ metadata: annotations: null creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: "5" + name: kdh6Z namespace: default rules: - apiGroups: @@ -18830,13 +18813,13 @@ metadata: annotations: null creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-additional-controllers + name: kdh6Z-additional-controllers namespace: default rules: - apiGroups: @@ -18926,13 +18909,13 @@ metadata: annotations: null creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-rpk-bundle + name: kdh6Z-rpk-bundle namespace: default rules: - apiGroups: @@ -18960,21 +18943,21 @@ metadata: annotations: null creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-election-role + name: kdh6Z-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 5-election-role + name: kdh6Z-election-role subjects: - kind: ServiceAccount - name: 12bwUKO + name: SpE0 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -18984,21 +18967,21 @@ metadata: annotations: null creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: "5" + name: kdh6Z namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: "5" + name: kdh6Z subjects: - kind: ServiceAccount - name: 12bwUKO + name: SpE0 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -19008,21 +18991,21 @@ metadata: annotations: null creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-additional-controllers + name: kdh6Z-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 5-additional-controllers + name: kdh6Z-additional-controllers subjects: - kind: ServiceAccount - name: 12bwUKO + name: SpE0 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -19032,21 +19015,21 @@ metadata: annotations: null creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-rpk-bundle + name: kdh6Z-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 5-rpk-bundle + name: kdh6Z-rpk-bundle subjects: - kind: ServiceAccount - name: 12bwUKO + name: SpE0 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -19056,13 +19039,13 @@ metadata: annotations: null creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: 5-metrics-service + name: kdh6Z-metrics-service namespace: default spec: ports: @@ -19071,7 +19054,7 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 @@ -19080,33 +19063,34 @@ metadata: annotations: null creationTimestamp: null labels: + F0wS: vBToTa app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - kxvj1aV: un4v2 - name: "5" + name: kdh6Z namespace: default spec: - replicas: 1305932217 + replicas: 1024474665 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD strategy: - type: 談¾ + type: RollingUpdate template: metadata: - annotations: - CAH: "" - WEO: 3a - WleIUaz: VxUI + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ZtDuI + app.kubernetes.io/name: BRlD spec: + affinity: + podAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - topologyKey: o7Cc2E automountServiceAccountToken: false containers: - args: @@ -19115,27 +19099,24 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=PgU9SwD - - --configurator-tag=fK - - --configurator-base-image=5T8t - - aQJ - - "" - - DJZ4 + - --log-level=a4SuUdq + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: 5T8t:fK + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 621 + failureThreshold: 335 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 500 - periodSeconds: 114 - successThreshold: 590 - terminationGracePeriodSeconds: 91 - timeoutSeconds: 571 + initialDelaySeconds: 578 + periodSeconds: 859 + successThreshold: 225 + terminationGracePeriodSeconds: 766 + timeoutSeconds: 705 name: manager ports: - containerPort: 9443 @@ -19145,22 +19126,16 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 353 + failureThreshold: 86 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 192 - periodSeconds: 302 - successThreshold: 359 - terminationGracePeriodSeconds: 709 - timeoutSeconds: 322 - resources: - limits: - cpu: "441" - memory: "428" - requests: - cpu: "586" - memory: "576" + initialDelaySeconds: 771 + periodSeconds: 43 + successThreshold: 41 + terminationGracePeriodSeconds: 226 + timeoutSeconds: 84 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -19171,24 +19146,14 @@ spec: imagePullSecrets: [] initContainers: [] nodeSelector: - B4: hc - QftYNI: I - Yw: J5YRBO4R + R: J9stK + b3Y76k: 8HvVz + pZjN: ZCZvZO securityContext: runAsUser: 65532 - serviceAccountName: 12bwUKO + serviceAccountName: SpE0 terminationGracePeriodSeconds: 10 - tolerations: - - effect: -7ʫ孼 - key: g3Bs - operator: 枳鋰tɚO_ÁÖ - tolerationSeconds: -4925537737759855000 - value: 25p - - effect: ƣ旾ÈsĦ幏4ǁ帄ǀ荥qȞ癟[烇C' - matchLabels: - eB1Hr04: u2qzbHh - oAsMpK: "" - maxSkew: -168479832 - minDomains: 1465487594 - nodeAffinityPolicy: 騻9ǪȢ昺辛[ɵ - nodeTaintsPolicy: 栘 - topologyKey: rl7xLdf - whenUnsatisfiable: J + serviceAccountName: GAzZL + subdomain: stmIvh + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -20360,7 +20118,6 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: 9wZm7 --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -20373,17 +20130,34 @@ metadata: helm.sh/hook-weight: "-10" creationTimestamp: null labels: - 8BO5: Bd5OIo - JnjTVDz: 5xDh + "1": Waszk6s + AhQJg: sYlEc app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: NY + app.kubernetes.io/name: zejbO app.kubernetes.io/version: v25.1.4 - gWL: pM helm.sh/chart: operator-25.1.4 - name: sFwgtf-crd-job + wU3MsxN: 4Bn0vQj + name: WM7nRI7B-crd-job + namespace: default +-- testdata/case-006.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + CQkNCSKpK8nmJ: B + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: di + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Em namespace: default --- testdata/case-023.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -20405,13 +20179,13 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-config + name: Em-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -20421,13 +20195,13 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-metrics-reader + name: Em-metrics-reader rules: - nonResourceURLs: - /metrics @@ -20441,13 +20215,13 @@ metadata: annotations: {} creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-default + name: Em-default rules: - apiGroups: - authentication.k8s.io @@ -20526,13 +20300,13 @@ metadata: annotations: {} creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-additional-controllers-default + name: Em-additional-controllers-default rules: - apiGroups: - "" @@ -20612,20 +20386,20 @@ metadata: annotations: {} creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-default + name: Em-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: bi-default + name: Em-default subjects: - kind: ServiceAccount - name: TWwJQX + name: Em namespace: default --- # Source: operator/templates/entry-point.yaml @@ -20635,20 +20409,20 @@ metadata: annotations: {} creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-additional-controllers-default + name: Em-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: bi-additional-controllers-default + name: Em-additional-controllers-default subjects: - kind: ServiceAccount - name: TWwJQX + name: Em namespace: default --- # Source: operator/templates/entry-point.yaml @@ -20658,13 +20432,13 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-election-role + name: Em-election-role namespace: default rules: - apiGroups: @@ -20706,13 +20480,13 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi + name: Em namespace: default rules: - apiGroups: @@ -20878,13 +20652,13 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-additional-controllers + name: Em-additional-controllers namespace: default rules: - apiGroups: @@ -20974,13 +20748,13 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-rpk-bundle + name: Em-rpk-bundle namespace: default rules: - apiGroups: @@ -21008,21 +20782,21 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-election-role + name: Em-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: bi-election-role + name: Em-election-role subjects: - kind: ServiceAccount - name: TWwJQX + name: Em namespace: default --- # Source: operator/templates/entry-point.yaml @@ -21032,21 +20806,21 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi + name: Em namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: bi + name: Em subjects: - kind: ServiceAccount - name: TWwJQX + name: Em namespace: default --- # Source: operator/templates/entry-point.yaml @@ -21056,21 +20830,21 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-additional-controllers + name: Em-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: bi-additional-controllers + name: Em-additional-controllers subjects: - kind: ServiceAccount - name: TWwJQX + name: Em namespace: default --- # Source: operator/templates/entry-point.yaml @@ -21080,21 +20854,21 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-rpk-bundle + name: Em-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: bi-rpk-bundle + name: Em-rpk-bundle subjects: - kind: ServiceAccount - name: TWwJQX + name: Em namespace: default --- # Source: operator/templates/entry-point.yaml @@ -21104,13 +20878,13 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi-metrics-service + name: Em-metrics-service namespace: default spec: ports: @@ -21119,7 +20893,7 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 @@ -21128,252 +20902,32 @@ metadata: annotations: null creationTimestamp: null labels: + CQkNCSKpK8nmJ: B app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - iW8sRg: to - name: bi + name: Em namespace: default spec: - replicas: 218897221 + replicas: -212949663 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 4waX + app.kubernetes.io/name: di strategy: type: RollingUpdate template: metadata: - annotations: - BjzEZ: x6aQ - NDv6M: fd9igL - S397o: L - vGR: TH + annotations: {} creationTimestamp: null labels: - QJe1s: KgE - Rk9pXuf: 5uJqz app.kubernetes.io/instance: operator - app.kubernetes.io/name: 4waX - qBd: Wh + app.kubernetes.io/name: di + mxRCF: n5j + pkKvta4BL: 9Z spec: - activeDeadlineSeconds: 908677350345763800 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchFields: - - key: GjZ - operator: 寺Ȫǯæ& - values: - - hc8a9 - - 11gcK - - lhw - - key: a1 - operator: 隕 - - key: QdG5l - operator: \冈g酷b - weight: 1765835600 - - preference: - matchExpressions: - - key: i4 - operator: 質ɺč0鯒Ô禌妃0kŽw - values: - - uFQREyZGh7Ed - - t7I - - w - - key: 7q1I5h - operator: ȥ:鎩Ǹ猢 - - key: d62aMb - operator: 湒vŁ鴧cMȒ]ƌ錝Su唇ʐ柯 - weight: 689430853 - - preference: - matchFields: - - key: LAkFH3Gl - operator: ɚk觱Ź籏<ɭZƍT'H賏 - - key: vs - operator: ĸTgÎH囦1逺粎ʜ启Ɣ潲Ć[ - values: - - gM - - Sv6aS5 - - lt7qLaUy - weight: 106838082 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - HFhhG: qPu3ad - IOcr: thV - RL: OS - matchLabelKeys: - - U1L - - 0ZFiN2U - - xA5L - mismatchLabelKeys: - - ToAt - namespaceSelector: - matchExpressions: - - key: HM6bDqfH4 - operator: 瑗芓ɳ - - key: A5lt8 - operator: 輧h - values: - - SFL3f - - key: 2cY - operator: W - namespaces: - - abe2C6 - topologyKey: yKjZ - weight: -1660862111 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: gsAZ - operator: 汞ƀ$şQøðŠǥ«錐 - - key: qWyJdhF - operator: Ì黨欲浪ĨơPøh噠ʬ - - key: Dl - operator: yǴĨ賢oɻŝg軘矼Mv躯YȦ - matchLabels: - BMMI: 3b6 - HEyr: uEFyszJa2 - y7JrEi4E: jErIYMMan - matchLabelKeys: - - GRRZc - - "2" - mismatchLabelKeys: - - CWkj - namespaces: - - A2pvW9 - - Gdsi - - Br - topologyKey: FSamf - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - HojBg: rJH - matchLabelKeys: - - coC78 - - j6YraJB0Rn - - k6toRo - namespaceSelector: - matchExpressions: - - key: GkjOOh6FjQn - operator: ȵƊµHq - values: - - Op96eYt - matchLabels: - TmlZ0: 9CY - eFKzI: c0WKI23yiov - sxQCJS: tfjS0j - topologyKey: HOgYsI - weight: -262031845 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: Yzzx - operator: ǩ療笵ɌLǐ - values: - - BGB50 - - EPa9P - - key: 0J4U - operator: /taʍư曃ƶ陠Xǧ - values: - - hIgbS - - c - matchLabels: - thXxFH: 7Z0U - matchLabelKeys: - - lWYclL - - XjKQhHPLF - - i8tvK - namespaceSelector: - matchExpressions: - - key: WvmxZS - operator: Ȱ圤ŸPȱ囵+瘩ʘ - values: - - "9" - - Pqvn - - r7Q5D - - key: vfrS5GxCesj - operator: 埬鐂»饄師鴑 - - key: IAt3N - operator: 畝. - matchLabels: - JZV7rSl8: nIY - yt9s7c: K4S - namespaces: - - jqcdm2 - topologyKey: VYx3xk - weight: 1996657884 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - amb: szxMA - mismatchLabelKeys: - - 3p075H - namespaceSelector: - matchExpressions: - - key: ypAVizsc - operator: 揾楫Ȣȫx`ż辎Ź堟>唱WuN - - key: YZiAzVi - operator: '!_怟v屃ł簰瓑''ʘ' - values: - - fP - - key: rNZOekNLt6 - operator: 酮kɀ蟤ɥ鏈x汻粗懗øz獣ȮǨ抧黿 - matchLabels: - ajqBe2Ks1D: Jd - namespaces: - - 9EKcZR - - OcnfKwRCNN - - HiZ4lgW - topologyKey: C - - labelSelector: - matchExpressions: - - key: 2yVYAxbg - operator: 緅橥uƥ渏笕+莦XǵĮ - - key: inuw - operator: EAý郍R{愋Ø - values: - - itVHDZ - - GdnPO - - Ili8 - matchLabels: - CR: TXDo - mismatchLabelKeys: - - "0" - namespaceSelector: - matchLabels: - 1t: JWD3impDVgq - topologyKey: SU7S - - labelSelector: - matchExpressions: - - key: 9jDPBs - operator: "" - matchLabels: - RS: sB4F1RbUo - T4tVq: WCU8epfkI - matchLabelKeys: - - EnBdS6m - - OjXrhdI - - 0D7my - mismatchLabelKeys: - - dd - - R45XH - - 3JeSwL - namespaceSelector: {} - namespaces: - - fwKmGiPOGCF - - p0G - topologyKey: aZZYUC automountServiceAccountToken: false containers: - args: @@ -21382,24 +20936,24 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=S3 - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --log-level=OdrK + - --configurator-tag=9JWhXp + - --configurator-base-image=eZ6Hz command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 - imagePullPolicy: IfNotPresent + image: eZ6Hz:9JWhXp + imagePullPolicy: Always livenessProbe: - failureThreshold: 49 + failureThreshold: 132 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 575 - periodSeconds: 975 - successThreshold: 343 - terminationGracePeriodSeconds: 796 - timeoutSeconds: 982 + initialDelaySeconds: 589 + periodSeconds: 468 + successThreshold: 351 + terminationGracePeriodSeconds: 849 + timeoutSeconds: 594 name: manager ports: - containerPort: 9443 @@ -21409,15 +20963,15 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 564 + failureThreshold: 900 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 36 - periodSeconds: 801 - successThreshold: 620 - terminationGracePeriodSeconds: 145 - timeoutSeconds: 81 + initialDelaySeconds: 626 + periodSeconds: 896 + successThreshold: 505 + terminationGracePeriodSeconds: 161 + timeoutSeconds: 22 resources: {} securityContext: allowPrivilegeEscalation: false @@ -21425,60 +20979,15 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - uFFDQ - dnsPolicy: '&轃ģçǞy$' - enableServiceLinks: true ephemeralContainers: null - hostPID: true - hostUsers: false - hostname: YE55nA - imagePullSecrets: - - name: 9ZLj - - name: P - - name: 7wVg + imagePullSecrets: [] initContainers: [] - nodeName: Pib - nodeSelector: - "": 5PeSaAc - E9YHS: XpIr01PhRH - IErx1IR: mxoBL7PtO - SP1VV: peokQsiLl - TmvT: QoMPUl - priorityClassName: V - readinessGates: - - conditionType: ąɃ瓣廌g~zĵ5H5嘿涫撳斸) - - conditionType: "" - - conditionType: 铋礠買笹ɛȲŽĤ - runtimeClassName: D8ZV5mL - schedulerName: uQBeCHZ - schedulingGates: - - name: bZ1Ky - - name: DyAF - - name: MJ8b + nodeSelector: {} securityContext: - fsGroup: 8286315522698384000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -3461140397115298300 - runAsNonRoot: false - runAsUser: -2938466842819764000 - supplementalGroups: - - 3485326851700496000 - serviceAccountName: KC9sCa8o - setHostnameAsFQDN: false - subdomain: FhT - terminationGracePeriodSeconds: 5028856913311693000 - tolerations: - - effect: 颥Ƹ鹕瘌喼Ãɛɦ腢dmĎW­棑滄 - - key: PuT6xGSH8b - operator: UcEʗúá8髃鰐蛘姗Ä寗 - values: - - E7iG - - x8 - - "4" - weight: 1306690246 - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - qhf: h3 - namespaces: - - gY2qxQ0nkCGD - topologyKey: GohF - weight: -860230123 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: lP - operator: '`+ɧƑ靲ɣ桹' - values: - - BbiLAW3LwZ - - Y6k0hfr - - 0j7 - - key: 19c - operator: 姵%单皜v晛ʙ笿%邈yǿ麩ʃ碂ħ穘 - values: - - cK - - key: cb1Wr9P - operator: +瑙腡xǩ鍷ĈĩȧEv詡9O怉Łƿ,³ - values: - - RHuO7E - matchLabels: - L7C: sI - YPV8Fo7: mICS5N - matchLabelKeys: - - Uix - mismatchLabelKeys: - - uJtKX6 - - DU - namespaceSelector: {} - topologyKey: "" - weight: 533908390 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: SBUrD - operator: F蚨}压ď²Ö囜 - values: - - T8xc - - BI - - key: FWlF - operator: "y" - - key: QFmBAu03 - operator: 酯eȻÖ<僱蔮Gc鏺Q瘻Gg恑Ģ+ - matchLabelKeys: - - lfhl7j - - lnuO - - eeLLS - mismatchLabelKeys: - - C0Z1RY - - BPZdW - namespaceSelector: - matchExpressions: - - key: nX2UcFsh - operator: ƇZ^渚.稀譨洠"N[缾岈% - namespaces: - - G3aYBV2NxKo - - a5y9bZz - - 0T - topologyKey: 8wJ - weight: -1177645999 requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: BekQbPZqKJZ - operator: m貣R - values: - - O82bF - - key: u3B - operator: ȿ譑眢 - - key: fZqoQWWFKIP - operator: ʐ/另ȀȾŘ - mismatchLabelKeys: - - DV - - Y44 - - jon - namespaceSelector: - matchExpressions: - - key: "7" - operator: F衋倚捣韥ƶ9Ģ刄eȗ;ʯ棢È - values: - - qTrUXSCs - - eP - - key: YoPuLVm - operator: 訒Ȉ枬M撚Ġ濾駈Sg + nodeSelectorTerms: + - {} + - matchExpressions: + - key: syCwYBGKWom + operator: 討<拐ɬ罅vʨɆ撹ĵŷ鄽竼 values: - - Pg - - 5GeI - - "94" - matchLabels: - aYbUJz: xpn - topologyKey: W2w + - yAuK + - 9YBj automountServiceAccountToken: false containers: - args: @@ -22486,26 +22134,24 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=mcE2xz8 - - --configurator-tag=z7F5fT - - --configurator-base-image=4s6FZUA - - 2MguVfZ - - 2d4Gz + - --log-level=gT + - --configurator-tag=6LBRlD + - --configurator-base-image=kw6W command: - /manager env: [] - image: 4s6FZUA:z7F5fT - imagePullPolicy: Never + image: kw6W:6LBRlD + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 89 + failureThreshold: 250 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 174 - periodSeconds: 261 - successThreshold: 386 - terminationGracePeriodSeconds: 846 - timeoutSeconds: 908 + initialDelaySeconds: 802 + periodSeconds: 498 + successThreshold: 251 + terminationGracePeriodSeconds: 875 + timeoutSeconds: 76 name: manager ports: - containerPort: 9443 @@ -22515,22 +22161,16 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 111 + failureThreshold: 101 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 406 - periodSeconds: 922 - successThreshold: 33 - terminationGracePeriodSeconds: 567 - timeoutSeconds: 933 - resources: - limits: - cpu: "996" - memory: "505" - requests: - cpu: "89" - memory: "695" + initialDelaySeconds: 964 + periodSeconds: 769 + successThreshold: 115 + terminationGracePeriodSeconds: 497 + timeoutSeconds: 861 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -22538,15 +22178,14 @@ spec: name: kube-api-access readOnly: true ephemeralContainers: null - imagePullSecrets: - - name: 2di49JY + imagePullSecrets: [] initContainers: [] nodeSelector: - 0kGsLN9: oMUX - L3: FtMGt + "": m + Oes: AiMQMRej securityContext: runAsUser: 65532 - serviceAccountName: a + serviceAccountName: q5hs terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -22578,649 +22217,329 @@ metadata: helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - qXu: "N" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: YCs + app.kubernetes.io/name: GNbmN app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: a-crd-job + u: yT9Aqc + name: q5hs-crd-job namespace: default --- testdata/case-025.yaml.golden -- +-- testdata/case-009.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true +automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: null creationTimestamp: null labels: - 0tYCAF2p: LH0vf - 9izrY41ZN: MvuV647jr + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Gn + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: sA + name: kBI8lEs namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 5xlVr0Pv + apiVersion: 4fZUzy health: - healthProbeBindAddress: DO - kind: JlQ + healthProbeBindAddress: :8081 + kind: dZCF6fa leaderElection: leaderElect: true - resourceName: Ertd + resourceName: TrCkwSs metrics: - bindAddress: nj7oX2Fh + bindAddress: 127.0.0.1:8080 webhook: - port: 221 + port: 9443 kind: ConfigMap metadata: - annotations: - x: ORQB + annotations: null creationTimestamp: null labels: - 0tYCAF2p: LH0vf - 9izrY41ZN: MvuV647jr + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Gn + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: VI1RU-config + name: kBI8lEs-config namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - x: ORQB + annotations: null creationTimestamp: null labels: - 0tYCAF2p: LH0vf - 9izrY41ZN: MvuV647jr + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Gn + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: VI1RU-metrics-service + name: kBI8lEs-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + "": Wyz + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/version: v25.1.4 + gLlqKr: m + helm.sh/chart: operator-25.1.4 + name: kBI8lEs-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + "": Wyz + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/version: v25.1.4 + gLlqKr: m + helm.sh/chart: operator-25.1.4 + name: kBI8lEs-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + "": Wyz + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/version: v25.1.4 + gLlqKr: m + helm.sh/chart: operator-25.1.4 + name: kBI8lEs-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: kBI8lEs-default +subjects: +- kind: ServiceAccount + name: kBI8lEs namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + "": Wyz app.kubernetes.io/instance: operator - app.kubernetes.io/name: Gn + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6n9214EY + app.kubernetes.io/version: v25.1.4 + gLlqKr: m + helm.sh/chart: operator-25.1.4 + name: kBI8lEs-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: kBI8lEs-additional-controllers-default +subjects: +- kind: ServiceAccount + name: kBI8lEs + namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - x: ORQB + annotations: null creationTimestamp: null labels: - 0tYCAF2p: LH0vf - 9izrY41ZN: MvuV647jr + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Gn + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: VI1RU + name: kBI8lEs-election-role namespace: default -spec: - replicas: 902866093 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: Gn - strategy: - rollingUpdate: - maxSurge: 1980422136 - maxUnavailable: 2011281189 - type: RollingUpdate - template: - metadata: - annotations: - OSzZn: zFjtDhp - YpD: kvWe712msLmvq - creationTimestamp: null - labels: - TvAx: 7DfhwNU - app.kubernetes.io/instance: operator - app.kubernetes.io/name: Gn - f: mmR9Dv - rq: rp633Yu - spec: - activeDeadlineSeconds: -6397634401589060000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: L9R - operator: '}7Iv' - values: - - SwG - - FH - matchFields: - - key: i13cz6WcCr - operator: ú么庘4怺|乑 - values: - - cOO4w9Ue - - key: twStucD4 - operator: +ŖŽʥNjĦC嘉á - - key: X0Loc - operator: ĠQ綀¾ - values: - - a6yo - - qn - topologyKey: V5cCPc - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: nGjZ - operator: Ȯa醱代Ɵ:RȆȵf烚ķȸ荛' - values: - - C - - mFmL9z - matchLabels: - WOz: IDw - hQ: k5Rv4x7F - matchLabelKeys: - - GM - mismatchLabelKeys: - - qvfKJzn - topologyKey: hP2IsXzK - weight: -1880607146 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: vEZutz - operator: 玓黓«ɔQ鿮憖箴7 - - key: D1 - operator: 怨Z)HW藸団. - values: - - w - matchLabels: - hh: b8vr - lYeVXo: qIsVTM8fu - matchLabelKeys: - - rln - - Zoh - namespaceSelector: - matchExpressions: - - key: I - operator: 珡Gf5対/癄用ŜŽɹ^ƜLJɃmƮʕ - values: - - syyRfQ22o7 - - 6wQTe - - key: 2G48vYS - operator: 年v^槶W"@y钧DŽ^{#:İ - matchLabels: - i6Ul: 3Ir - lRe0FSnq: 7O9Q - vstjaQ0: 6EDkw92 - namespaces: - - pnmOQV - - o - - KtW - topologyKey: kc4Wp9 - weight: -1564809665 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: 0ON5LE - operator: 逝 - values: - - cn1Cet - - udAh8 - - key: VO - operator: eğUfʧ皜ť惑iŻ26äY - values: - - 35a - - nPlm - - "" - matchLabels: - GF0: YDFd7 - qHnm7: X3gbc - matchLabelKeys: - - M - - st3 - mismatchLabelKeys: - - XHmLH - namespaceSelector: - matchLabels: - qDB: "" - topologyKey: H6Q0a8bj - weight: -1254546839 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: pPex5QaH - operator: 裩½膥®!o$Ő嵕ViƟG悮 Ȓo - values: - - XFCGl0481iWXC8t - - 4HBw - - key: UEhwis - operator: D騋頜.開3洨ýĬ絾ɨCI6cB姂鞍Ő - values: - - MnB - - 87h - - oY7 - matchLabels: - l15YWQBhZ: Q1E3EE - matchLabelKeys: - - YYakMFEY - - erAg6zOP - namespaceSelector: {} - namespaces: - - tPjy4sd3 - - Iwd - - t3 - topologyKey: 0mWw1GV - - labelSelector: - matchExpressions: - - key: b75riGdmr - operator: ɭf4Ƣųdǝ,趱b_ɸ - values: - - 9Fk - - qZ8pCY1W9y - - key: I34emF - operator: ş浦c}|v - values: - - Tzre - matchLabels: - gOc3cz: ab - namespaceSelector: {} - topologyKey: ATRK8Cw - automountServiceAccountToken: false - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=NaLO9z - - --configurator-tag=Lotm9epAH - - --configurator-base-image=g96 - command: - - /manager - env: [] - image: g96:Lotm9epAH - imagePullPolicy: Never - livenessProbe: - failureThreshold: 347 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 320 - periodSeconds: 893 - successThreshold: 928 - terminationGracePeriodSeconds: 913 - timeoutSeconds: 25 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 682 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 502 - periodSeconds: 886 - successThreshold: 699 - terminationGracePeriodSeconds: 876 - timeoutSeconds: 573 - resources: - limits: - cpu: "3" - memory: "220" - requests: - cpu: "509" - memory: "234" - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - dnsConfig: - options: - - name: Wf0HvUtqF - value: B - - name: YSJ - value: KVG - - name: mENG1svR2 - value: pLbeGQ27xv - searches: - - W - dnsPolicy: 鼌Ģ鴂 - enableServiceLinks: true - ephemeralContainers: null - hostNetwork: true - hostname: gBduz - imagePullSecrets: [] - initContainers: [] - nodeName: Ni - nodeSelector: - qD47: 630ZQytVa - uc: 6HPiNwKAFVM - preemptionPolicy: e宣鰾r揠İǑ - priority: -1305548838 - priorityClassName: ivc9Qx4W - readinessGates: - - conditionType: 蝠蔢ĦɃ - resourceClaims: - - name: XCVZh - runtimeClassName: 1JJ - schedulerName: 4e4VR - schedulingGates: - - name: "n" - securityContext: - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 6989821764973521000 - runAsNonRoot: false - runAsUser: -4511128637598070300 - supplementalGroups: - - 5575289228098934000 - - -3802520852329744400 - - -3418870242951103000 - sysctls: - - name: yVQUmX - value: HMnESA5X - - name: sppxK - value: ZGrJ - serviceAccountName: nNQXr - setHostnameAsFQDN: false - subdomain: wt8j7AI - terminationGracePeriodSeconds: 6961863183836321000 - tolerations: - - effect: A\Ƣ - key: iziP - operator: ħXK{8Ƿ韟 - tolerationSeconds: -4478242017118697500 - value: 6jeY5TPOEJY - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace - - name: "" - - name: 061joXv - - name: nASsEAPm ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - 0tYCAF2p: LH0vf - 9izrY41ZN: MvuV647jr - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Gn - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: sA-crd-job - namespace: default --- testdata/case-026.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount -metadata: - annotations: - 5L: j2D1CM1hpmck3l - VtUx5gn: vI6EOhi2BO - fHiSr: wgWqdOQ - creationTimestamp: null - labels: - 9Yl4uYdhi: AwRf - SX: I - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: blB - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: L2DP4n7 - health: - healthProbeBindAddress: mZ - kind: KxDoa4t - leaderElection: - leaderElect: false - resourceName: pQvy0sQo - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 194 -kind: ConfigMap -metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl - creationTimestamp: null - labels: - 9Yl4uYdhi: AwRf - SX: I - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl - creationTimestamp: null - labels: - 9Yl4uYdhi: AwRf - SX: I - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl - creationTimestamp: null - labels: - 9Yl4uYdhi: AwRf - SX: I - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create -- apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - configmaps verbs: - create - delete @@ -23230,42 +22549,16 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com - resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers - verbs: - - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas/status - - schemas/status - - topics/status - - users/status - verbs: - - get - - patch - - update -- apiGroups: - - cluster.redpanda.com + - "" resources: - - schemas - - topics - - users + - events verbs: - - get - - list + - create - patch - - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - clusterrolebindings - - clusterroles + - leases verbs: - create - delete @@ -23277,287 +22570,93 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole +kind: Role metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl + annotations: null creationTimestamp: null labels: - 9Yl4uYdhi: AwRf - SX: I + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: 2-additional-controllers-default + name: kBI8lEs + namespace: default rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - "" resources: - configmaps - - nodes + - pods - secrets + - serviceaccounts + - services verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumes + - events verbs: - - delete - - get - - list + - create - patch - - update - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - controllerrevisions verbs: - get - list - watch - apiGroups: - - "" + - apps resources: - - configmaps - - secrets + - deployments + - statefulsets verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumes + - horizontalpodautoscalers verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - cluster.redpanda.com + - batch resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl - creationTimestamp: null - labels: - 9Yl4uYdhi: AwRf - SX: I - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 2-default -subjects: -- kind: ServiceAccount - name: blB - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl - creationTimestamp: null - labels: - 9Yl4uYdhi: AwRf - SX: I - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 2-additional-controllers-default -subjects: -- kind: ServiceAccount - name: blB - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl - creationTimestamp: null - labels: - 9Yl4uYdhi: AwRf - SX: I - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2-election-role - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - delete - - get - - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl - creationTimestamp: null - labels: - 9Yl4uYdhi: AwRf - SX: I - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: "2" - namespace: default -rules: -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - configmaps - - pods - - secrets - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch -- apiGroups: - - apps - resources: - - controllerrevisions - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - batch - resources: - - jobs + - jobs verbs: - create - delete @@ -23646,19 +22745,17 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl + annotations: null creationTimestamp: null labels: - 9Yl4uYdhi: AwRf - SX: I + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: 2-additional-controllers + name: kBI8lEs-additional-controllers namespace: default rules: - apiGroups: @@ -23745,19 +22842,17 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl + annotations: null creationTimestamp: null labels: - 9Yl4uYdhi: AwRf - SX: I + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: 2-rpk-bundle + name: kBI8lEs-rpk-bundle namespace: default rules: - apiGroups: @@ -23782,127 +22877,117 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl + annotations: null creationTimestamp: null labels: - 9Yl4uYdhi: AwRf - SX: I + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: 2-election-role + name: kBI8lEs-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 2-election-role + name: kBI8lEs-election-role subjects: - kind: ServiceAccount - name: blB + name: kBI8lEs namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl + annotations: null creationTimestamp: null labels: - 9Yl4uYdhi: AwRf - SX: I + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: "2" + name: kBI8lEs namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: "2" + name: kBI8lEs subjects: - kind: ServiceAccount - name: blB + name: kBI8lEs namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl + annotations: null creationTimestamp: null labels: - 9Yl4uYdhi: AwRf - SX: I + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: 2-additional-controllers + name: kBI8lEs-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 2-additional-controllers + name: kBI8lEs-additional-controllers subjects: - kind: ServiceAccount - name: blB + name: kBI8lEs namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl + annotations: null creationTimestamp: null labels: - 9Yl4uYdhi: AwRf - SX: I + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: 2-rpk-bundle + name: kBI8lEs-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 2-rpk-bundle + name: kBI8lEs-rpk-bundle subjects: - kind: ServiceAccount - name: blB + name: kBI8lEs namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl + annotations: null creationTimestamp: null labels: - 9Yl4uYdhi: AwRf - SX: I + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: 2-metrics-service + name: kBI8lEs-metrics-service namespace: default spec: ports: @@ -23911,167 +22996,40 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - Xpmsmk: xwQ7HYnx - nht: xpYQ9rPl + annotations: null creationTimestamp: null labels: - 9Yl4uYdhi: AwRf - SX: I + "": Wyz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY app.kubernetes.io/version: v25.1.4 + gLlqKr: m helm.sh/chart: operator-25.1.4 - name: "2" + name: kBI8lEs namespace: default spec: - replicas: -2036915675 + replicas: -857065571 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: VhCMS + app.kubernetes.io/name: 6n9214EY strategy: - rollingUpdate: - maxSurge: 1351085039 - maxUnavailable: 301698135 - type: l¢ʍavń橆V' - tolerationSeconds: -5670792804219815000 - value: J4HDxi9rSArcn - - effect: A蕝uʛȇºůŚLjɽ崮 - key: w0 - operator: /lz枟ȕƮïÏū翁Ɵ罂ŔĖ - value: yfqJp7 - topologySpreadConstraints: - - labelSelector: - matchLabels: - b6O: "82" - uq9N: j0 - matchLabelKeys: - - qszz - maxSkew: 383079126 - minDomains: 574068731 - nodeAffinityPolicy: "" - nodeTaintsPolicy: Ěĝȑ簐Œ柔GÂ鷜蹡jtèȌÂȜǪ - topologyKey: kgyI - whenUnsatisfiable: b洦ƫț4Ȅ蠡[圴撻 - - labelSelector: - matchExpressions: - - key: "" - operator: BĔʧljD'pŅ楕Ⱦdž-gʏ鱸j, - - key: OnpW - operator: 纟殐壴R鷥RI礞璽ĵ葖C薄@8> - values: - - "" - - vx6t4Gn - matchLabelKeys: - - Foa - maxSkew: -1486537465 - minDomains: 1840673437 - nodeAffinityPolicy: ŵļ昿ʟrǖ護泔ȯÏƳČŠų - nodeTaintsPolicy: 軛 - topologyKey: s6 - whenUnsatisfiable: "" + runAsUser: 65532 + serviceAccountName: G3noLIUeP60 + shareProcessNamespace: true + subdomain: kepLXpOh + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -25210,506 +24069,77 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: 166J - - name: 4V + - name: KNj + - name: oh9dwhjnMI --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: - annotations: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" creationTimestamp: null labels: - "9": WiLvS4 - Fzjuqz0im: "023" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Qi + app.kubernetes.io/name: Ubj app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: z7BRO-metrics-monitor + name: rcE-crd-job namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - "9": WiLvS4 - Fzjuqz0im: "023" - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Qi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - "9": WiLvS4 - Fzjuqz0im: "023" - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Qi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tIa-crd-job - namespace: default --- testdata/case-028.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: 0pdE - health: - healthProbeBindAddress: SSUvR - kind: kb - leaderElection: - leaderElect: true - resourceName: fiacWH - metrics: - bindAddress: 0Wri6W - webhook: - port: 425 -kind: ConfigMap -metadata: - annotations: - 6z1JUm: "" - UZQUK5: NmVcFpyl - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: na-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - 6z1JUm: "" - UZQUK5: NmVcFpyl - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: na-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 7Nn ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: - 6z1JUm: "" - UZQUK5: NmVcFpyl - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: na - namespace: default -spec: - replicas: 409512392 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 7Nn - strategy: - rollingUpdate: - maxSurge: 1869473445 - maxUnavailable: 767850509 - type: ƥqȆ - template: - metadata: - annotations: - "": ZBBGf - 4Es1xV8CqO: J59c9YK0b - OLzhH: nO - "y": F - creationTimestamp: null - labels: - "479": R - KzjjU: bNeafB - PUO: 3HVPY - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 7Nn - spec: - activeDeadlineSeconds: -7669638163721044000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: VC9NPg - operator: 堔OQ佟:檭欨雞L瑛O8C - values: - - fJEeZW0qJ - - hVmIEug9SSa - - "" - matchFields: - - key: XNJB53k1F - operator: '#ŷc榆鯁[UªőAx9ɎÉȀ' - - key: D0wl4k - operator: Ɂǃ ʆ4];ÉŪʐç - values: - - w2tSRUq6M - - 2Mxlfv - - 1XpvQL - - key: sNq7IUCFt - operator: 忄AAɚ鮫琕3ɛį&楤zĄ*%Ȧ - weight: 569688052 - - preference: {} - weight: -298021391 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - matchLabelKeys: - - VcRS - namespaces: - - ys - topologyKey: aKQ - weight: -1815889977 - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: VUij - operator: 鵼6ȯ铃SOS屫ż#Ņdʇfɡ8^鼻Ȉ - - key: oZu - operator: 婘&9ɏʦDž蔾uʆ蹆M)幸Ƿ - values: - - cWwpJl2n - - ek9 - - HckueaEyl2 - - key: GyQ4ei - operator: 玔爘W - matchLabels: - 4g47: wjIG - matchLabelKeys: - - f9c - mismatchLabelKeys: - - aS3 - - cL - - Ovi - namespaceSelector: {} - namespaces: - - 05kH - topologyKey: zeZsg2nvt - weight: 1590497712 - automountServiceAccountToken: true - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=EQ - - --configurator-tag=S - - --configurator-base-image=qO8Q6 - - ufbUW - command: - - /manager - env: [] - image: qO8Q6:S - imagePullPolicy: Never - livenessProbe: - failureThreshold: 402 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 74 - periodSeconds: 749 - successThreshold: 877 - terminationGracePeriodSeconds: 208 - timeoutSeconds: 607 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 265 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 604 - periodSeconds: 342 - successThreshold: 325 - terminationGracePeriodSeconds: 355 - timeoutSeconds: 35 - resources: - limits: - cpu: "681" - memory: "288" - requests: - cpu: "839" - memory: "826" - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - dnsConfig: - nameservers: - - 9uF4n - options: - - name: oKphH - value: Tw2 - dnsPolicy: ʢůȠȐʈè忣Ų堗决 - ephemeralContainers: null - hostAliases: - - ip: nipRwzHl - hostIPC: true - hostPID: true - hostUsers: false - hostname: 38Jzj - imagePullSecrets: - - name: Jq6 - initContainers: [] - nodeName: P - nodeSelector: - FJzqc8SS: AfX1rB - XbVrcFi: "1" - "Y": f4i - aY6: p6zmUKv - sm: oGp - preemptionPolicy: 佯¶ð_Ŋ帓ȇȇñȎj - priority: 189241819 - priorityClassName: s6 - resourceClaims: - - name: 2JeXX - - name: 4yOW9 - - name: cY - restartPolicy: 徚籨 - runtimeClassName: Gj15 - schedulerName: GiJ - schedulingGates: - - name: A - securityContext: - fsGroup: 2442655365152128000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 3592741137103323600 - runAsNonRoot: true - runAsUser: 650673957928566800 - sysctls: - - name: 4WiDRa0 - value: vB - - name: WqomZPg - value: pJzBXy5 - - name: Q4ecXvxUI - value: 9Km4a2U - serviceAccountName: zCava2sBrOJ - setHostnameAsFQDN: false - subdomain: xBuRy6JY - terminationGracePeriodSeconds: 7922635006545135000 - tolerations: - - effect: QƓ猠i櫰fŶ>Tǃ碫* - key: o4w - operator: ɇ`iɜ::鱥鄔DÃ妞薺ȭ靄 - tolerationSeconds: -7729504422924054000 - value: ztFE4TAoJW - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: GKG - operator: 'ǎ3Ð+Ūä噏ų ' - values: - - m48Rys - - key: rMY - operator: Ao藱0]领Ȗ½u瞪谶裐辁忓"劶lY - values: - - kjpyMDUO - - UUa - matchLabelKeys: - - W8hec - - 9XvWreUbu - maxSkew: -1591264848 - minDomains: -557215783 - nodeAffinityPolicy: ɰ±ń谪ij液 - nodeTaintsPolicy: ½mƚ - topologyKey: zz9l - whenUnsatisfiable: 駻FƂ薩Ǐ - - labelSelector: {} - maxSkew: 1667721550 - minDomains: -651705871 - nodeAffinityPolicy: 2Ʃųʯ郇ȼ崭x"~嘵|j虷¦!ȟ - nodeTaintsPolicy: 焗泧X 廟J5ʬ - topologyKey: 8k - whenUnsatisfiable: 8ǁ駀dže渣A媨豹l氮Ȣʖ埋F¨ì - - labelSelector: - matchExpressions: - - key: gGILY - operator: R磒冢萑(唀簏呄@篦Ȟ杭YǠě] - - key: 9TJt6 - operator: "" - values: - - "" - - Qp0cBX4 - matchLabels: - JQLd: XYOYfNAA - jt4iO: Z64hnSu - matchLabelKeys: - - HAi9Gv - - sWYmzK - - r6j1rSNKX - maxSkew: -897543284 - minDomains: -1529871564 - nodeAffinityPolicy: '`ěS(U幵ĤıĢȟ紳輆ş' - nodeTaintsPolicy: Łļǻ軀折TŜ崵駿Sã8ō'ɷ嵡 - topologyKey: R - whenUnsatisfiable: Es織ŸgÉw5-颒辰gÝ - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace ---- -# Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: - 6z1JUm: "" - UZQUK5: NmVcFpyl - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: na-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 +-- testdata/case-011.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 automountServiceAccountToken: false kind: ServiceAccount metadata: - annotations: - 2KJ0g0: EDTV8VI1gX - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" + annotations: null creationTimestamp: null labels: + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 7Nn + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: LS9-crd-job + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07 namespace: default --- testdata/case-029.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: Z5c + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: healthProbeBindAddress: :8081 - kind: 8HW7 + kind: ControllerManagerConfig leaderElection: - leaderElect: false - resourceName: 9uQb7 + leaderElect: true + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: Ni + bindAddress: 127.0.0.1:8080 webhook: - port: 60 + port: 9443 kind: ConfigMap metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-config + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -25719,15 +24149,15 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-metrics-reader + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-metrics-reader rules: - nonResourceURLs: - /metrics @@ -25741,15 +24171,15 @@ metadata: annotations: {} creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-default + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-default rules: - apiGroups: - authentication.k8s.io @@ -25828,15 +24258,15 @@ metadata: annotations: {} creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-additional-controllers-default + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-additional-controllers-default rules: - apiGroups: - "" @@ -25916,22 +24346,22 @@ metadata: annotations: {} creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-default + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: D-default + name: 7guti07-default subjects: - kind: ServiceAccount - name: 40Wt + name: 7guti07 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -25941,22 +24371,22 @@ metadata: annotations: {} creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-additional-controllers-default + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: D-additional-controllers-default + name: 7guti07-additional-controllers-default subjects: - kind: ServiceAccount - name: 40Wt + name: 7guti07 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -25966,15 +24396,15 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-election-role + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-election-role namespace: default rules: - apiGroups: @@ -26016,15 +24446,15 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07 namespace: default rules: - apiGroups: @@ -26190,15 +24620,15 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-additional-controllers + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-additional-controllers namespace: default rules: - apiGroups: @@ -26288,15 +24718,15 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-rpk-bundle + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-rpk-bundle namespace: default rules: - apiGroups: @@ -26324,23 +24754,23 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-election-role + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: D-election-role + name: 7guti07-election-role subjects: - kind: ServiceAccount - name: 40Wt + name: 7guti07 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -26350,23 +24780,23 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07 namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: D + name: 7guti07 subjects: - kind: ServiceAccount - name: 40Wt + name: 7guti07 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -26376,23 +24806,23 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-additional-controllers + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: D-additional-controllers + name: 7guti07-additional-controllers subjects: - kind: ServiceAccount - name: 40Wt + name: 7guti07 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -26402,23 +24832,23 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-rpk-bundle + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: D-rpk-bundle + name: 7guti07-rpk-bundle subjects: - kind: ServiceAccount - name: 40Wt + name: 7guti07 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -26428,15 +24858,15 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D-metrics-service + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-metrics-service namespace: default spec: ports: @@ -26445,7 +24875,7 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 @@ -26454,93 +24884,32 @@ metadata: annotations: null creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: D + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07 namespace: default spec: - replicas: 1462201037 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP strategy: - rollingUpdate: - maxSurge: 1170346904 - maxUnavailable: 732386123 - type: 讵揼2嗪刵h®ªɓ'ƹlNĔU嵩Mɖȭ + type: RollingUpdate template: metadata: - annotations: - 7ZgRUIU: Y7 + annotations: {} creationTimestamp: null labels: - "8": 5A9Kc - LBf33434: ic2ddD0 - N7Pnz: jxyQwEY app.kubernetes.io/instance: operator - app.kubernetes.io/name: aYT - bzc: w5h - rsjj: "y" + app.kubernetes.io/name: pP spec: - activeDeadlineSeconds: 7101025196609439000 - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchFields: - - key: QQzmv6 - operator: 9褐uɘ¹齅ʧ潖洝饭W - values: - - bvU - - gD - podAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: xJE86Io - operator: Ń徨 - values: - - 7u1 - - hXrj8 - matchLabelKeys: - - 2RE5c - - ThzhOrWn - mismatchLabelKeys: - - "" - - huqSK - - CjCPaO3z - namespaceSelector: - matchExpressions: - - key: CT - operator: ț症LŲ餑鍶Ȼ - values: - - l0L - - 2XRA - - key: riCReJ - operator: ʣûōUǑƕ鯘 - values: - - Cwb - topologyKey: lK - - labelSelector: - matchLabels: - 9LrxS2q5w7Z9: "n" - AVL: L - namespaceSelector: - matchExpressions: - - key: 3U1 - operator: ǪTÚ9ĝǴ閩鄚ʮõ|\hǧȨL哮 - values: - - I4fKB73i - - 7dZMC0V5 - topologyKey: W8VSBpD - podAntiAffinity: {} automountServiceAccountToken: false containers: - args: @@ -26549,24 +24918,26 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=hPrI1P - - --configurator-tag=Gd0 - - --configurator-base-image=8mlV + - --log-level=aWy1AZjYl + - --configurator-tag=W0p45uvP8 + - --configurator-base-image=5grR1QB + - 6SD9JDbQ7Q + - YSovMAw command: - /manager env: [] - image: 8mlV:Gd0 - imagePullPolicy: Always + image: 5grR1QB:W0p45uvP8 + imagePullPolicy: Never livenessProbe: - failureThreshold: 240 + failureThreshold: 592 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 292 - periodSeconds: 547 - successThreshold: 172 - terminationGracePeriodSeconds: 739 - timeoutSeconds: 881 + initialDelaySeconds: 989 + periodSeconds: 111 + successThreshold: 916 + terminationGracePeriodSeconds: 319 + timeoutSeconds: 496 name: manager ports: - containerPort: 9443 @@ -26576,140 +24947,31 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 402 + failureThreshold: 318 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 856 - periodSeconds: 588 - successThreshold: 217 - terminationGracePeriodSeconds: 183 - timeoutSeconds: 835 - resources: - limits: - cpu: "333" - memory: "590" - requests: - cpu: "514" - memory: "396" + initialDelaySeconds: 817 + periodSeconds: 884 + successThreshold: 96 + terminationGracePeriodSeconds: 3 + timeoutSeconds: 473 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - bnxKu - - at - options: - - name: l - value: M1PV5a - - name: Q5umpKe - value: QbYIA - - name: Zw0 - value: tBlo - searches: - - Va - - c34gV - dnsPolicy: tf@赬Ü梆冹3í帅X(我t焕8坴Ë - enableServiceLinks: true ephemeralContainers: null - hostAliases: - - hostnames: - - fYHCm25 - ip: NVM77TDo - - hostnames: - - PHBAJG8VfD7 - ip: 7F - hostIPC: true - hostUsers: true - hostname: bAue - imagePullSecrets: - - name: 8A - - name: KKraJHhC + imagePullSecrets: [] initContainers: [] - nodeName: Eg0bNdxO - nodeSelector: - 8FdG0D: 296kXxHVMGuu - LATe3oO: ggTFm - Ntd: SNg - preemptionPolicy: 沏d溯ȜŅ蛤!1*G丘沿ę侞5 - tolerationSeconds: -4095124838525527600 - value: 1y8zg1Kk2 - - effect: ŭDZ麒bȮ - key: B451 - tolerationSeconds: 4110500607743422500 - value: Jvs - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: exl - operator: ɐƴɧťɐ詴鬙ɾ - values: - - OMCg7tN - - SfgD2 - - key: rSxDRB - operator: ʬJ - values: - - SvUVX - - kW - - key: xu2dIO - operator: w9Ɉ怯4ǎm耥%ʖcCɉ鏦5nŐ - values: - - gNRWMe - matchLabelKeys: - - mNH - maxSkew: 1458194680 - minDomains: 2020965939 - nodeAffinityPolicy: Aǥ飃7睹DzbR - topologyKey: i0LeOVh - whenUnsatisfiable: 鶽o% - - labelSelector: - matchExpressions: - - key: pXo7K - operator: 4=Wrɑ炶Ƹ4厼áǒ绛ƕ祶亹ȉ,T齫 - - key: U - operator: ¨" - matchLabels: - 0FlprWV0: s - EcL68gi: sem - YB: qtc - maxSkew: -1059610273 - minDomains: 835990228 - nodeAffinityPolicy: hȮ妢Ö滀,ɕrƜG拜ɬ33:`囯 - nodeTaintsPolicy: ǎ苏ȿ鼌ɢNŞ鑼O'þ蹊硌)ļLJ篕 - topologyKey: hnK - whenUnsatisfiable: G蹃 + runAsUser: 65532 + serviceAccountName: 7guti07 + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -26729,9 +24991,6 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: 2vvwzU - - name: KiD - - name: ZxdGol15G --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -26739,686 +24998,99 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - OLg70: YQZ helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - izml0: AtEbGFb creationTimestamp: null labels: - H15A: FR - ImNZ2R: 4b11Ajcj71 - MkV5WTrr: tzjZwG + VTHH: SaDKhXP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: aYT + app.kubernetes.io/name: pP app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 40Wt-crd-job + mOxaE: dEuL + w49JChsEQqA0: "3" + name: 7guti07-crd-job namespace: default --- testdata/case-030.yaml.golden -- +-- testdata/case-012.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true +automountServiceAccountToken: false kind: ServiceAccount metadata: - annotations: - 9GSVF: FmEK - gy8pF: IttW - jNt: b7Ckh + annotations: null creationTimestamp: null labels: - QYmKJqsxF: a app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xl0SYd + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: spW + name: J5MiI namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 4s + apiVersion: Vhwco health: - healthProbeBindAddress: wh - kind: fx7rbwOhkC0 + healthProbeBindAddress: smYkB7aF + kind: 4bGK0P3QN1 leaderElection: - leaderElect: false - resourceName: XYCb + leaderElect: true + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: 2z98LiiBo + bindAddress: 127.0.0.1:8080 webhook: - port: 409 + port: 30 kind: ConfigMap metadata: - annotations: - t45I5Edqvo: dTHP + annotations: null creationTimestamp: null labels: - QYmKJqsxF: a app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xl0SYd + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: vvvAuBP-config + name: J5MiI-config namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - t45I5Edqvo: dTHP + annotations: null creationTimestamp: null labels: - QYmKJqsxF: a app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xl0SYd + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: vvvAuBP-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: xl0SYd + name: J5MiI-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - t45I5Edqvo: dTHP + annotations: {} creationTimestamp: null labels: - QYmKJqsxF: a app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xl0SYd + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: vvvAuBP - namespace: default -spec: - replicas: -1729986112 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: xl0SYd - strategy: - rollingUpdate: - maxSurge: 1852360537 - maxUnavailable: 1199663025 - type: ʍɌ秵'ȣŝKǩɧf抆aȶ"u_钳 - template: - metadata: - annotations: - DP: vR7i - EvDWLWA: sYk - J: TYkG - NN: Y28 - i: uQx - iv2FiB: dhm - creationTimestamp: null - labels: - U52C: 9m99CWM5D - XNiVP1FEuD: 8Ow - app.kubernetes.io/instance: operator - app.kubernetes.io/name: xl0SYd - nFfIbwkj: n4 - spec: - activeDeadlineSeconds: 1491750180455531000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: n7ZI - operator: :庉éx蠟窺龡佫´簒ƠGi腈K婢Ʀ - values: - - ydEC - - Fn6sN2U - - key: iV3S - operator: ím3 - values: - - fCBWy - - fW - - lrYyde - weight: -841504416 - - preference: - matchExpressions: - - key: 4nNfJjYxm - operator: 茚ňʥ×ư鳳ğ誣 ȧ橺ȋă麎VȷP - values: - - pF - - "0" - - n3R - - key: MBvHes - operator: 5x-y烠ɰ瑓ȯ;Ɩ>骽'ʙƿª - values: - - F - - E - - key: 3qCC - operator: H - matchFields: - - key: 4a - operator: ^%7!陆]áǽƑ - values: - - 5tOyDHcP - - key: Mn - operator: ēpÑ唛6YȰ)Cj - values: - - F8OfuV - weight: -2100989072 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: PNMu - operator: G:滨+v啁z - values: - - qeZH05L - - key: HKdNEvE - operator: 珏_ʭ&°jɼ?ɀ漎[朜Zʧʚ< - values: - - cl4xA - - lT4lytG2 - - key: dK3V - operator: "" - values: - - nXfYcJxF - - BExri6Ne - matchFields: - - key: l9S1Tbk - operator: '属<誟ʭ耞V7 ' - - key: OwqIY40d - operator: ťú_ȋ¥藠¬凓¼b黰塠(Ĉ臑 - values: - - O9 - - key: Maqk - operator: ʢeT'/`%憐襻 - - matchExpressions: - - key: Yq - operator: "" - values: - - suq9Y - - Sq - - key: 6ImE - operator: Q侩儲Ċ嶐嘍fgƓſĩd烽竿 - values: - - GL06Z - - J - - key: CdbCq - operator: ì - values: - - "" - - v20 - matchFields: - - key: VV1vDf - operator: 藥匷馑, - values: - - FLs3 - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: A - operator: 饠q胗撇瑘枢Ň 踚虑閯 - values: - - 5e5p3 - - "1" - matchLabels: - GbHjt4YR: 3SA - KaXhZ1A: "" - OdrIVDZy: rvf1Jyi - matchLabelKeys: - - n03k - - Bd4MsdiW1 - mismatchLabelKeys: - - lq - namespaceSelector: - matchExpressions: - - key: fd1Pm - operator: ȢɩF馩簨 - - key: jVz5YdK - operator: 4Ni¨锩ʄ5«勊 - values: - - Ay1xS - - 7P3 - - egGPMnv - - key: sXR - operator: u - values: - - uEhJvYZtHu5 - matchLabels: - Xjf: rOf7S8z - namespaces: - - RV - - UrPdb - topologyKey: "" - weight: -1089282795 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: IOzi8 - operator: '''!ɼiȇ騅gĿtQ)~醖T津ʆ螬' - values: - - yBHRl - - XSognnI7 - - P6R7EK - - key: 8eLSUq91 - operator: ʪh驥 - values: - - "" - - ybn3YpD - - gf8AUU3 - - key: g8aQKp - operator: "" - values: - - QFU - matchLabels: - R: V - matchLabelKeys: - - fMpoWnF - - JSoDrcs - mismatchLabelKeys: - - aYSr - - 4oS7w - - 5qVDerko - namespaceSelector: {} - namespaces: - - tZTyAU89 - - 38K - - "" - topologyKey: 5FXoc - weight: 553016367 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: {} - matchLabelKeys: - - lON - - Kzo - mismatchLabelKeys: - - yJpT7 - namespaceSelector: - matchExpressions: - - key: 3ZO - operator: ɑĚ3瓉5wż硹咳囼詖俁eǭKĐFJr - values: - - 45zGr1 - - QfLGiQ - - key: f9KevjXm - operator: $挠u%戨氌ǜĐyŵow騖橎Tʃ - - key: dWY - operator: 跥'ä>ȯƱC佛£墏 - values: - - 1DV6 - - HRKLX - - 4snWPV - namespaces: - - C - topologyKey: cAsX - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: "" - operator: ' /''n\¯ĒH-]ơŃǸæ' - values: - - kAx8 - - 0G - matchLabels: - N3pXu1W: ID - WiZBgN: fxG - t6k6N: "" - mismatchLabelKeys: - - 6hS - namespaceSelector: - matchExpressions: - - key: gW - operator: 渥êdɾo6ȭʈʂ眙圪 - values: - - DTw8 - - "" - - "" - - key: FM - operator: 鯓煫Zxȗ埱醏,v - values: - - 8A - - 3tkv - - a9l - matchLabels: - 8TTDPF: NV - XIa: 0tUkY - vREvWC: P9l - namespaces: - - HKF - - v - - 5i3eitpz - topologyKey: OQbp - - labelSelector: - matchExpressions: - - key: KkkcD11er - operator: 顑Ƹ - values: - - h - matchLabelKeys: - - DJOqJd - mismatchLabelKeys: - - 9w5aI - - t9giU - namespaceSelector: - matchExpressions: - - key: gHV - operator: 辪JSSȻüc努ɵ - matchLabels: - UkabJI5: tzaoXYFT - namespaces: - - q - - rIawKFyZC - topologyKey: DOHe0m - - labelSelector: - matchExpressions: - - key: ZddcC - operator: ?]贅ȈƣÜs攘ƥ)醆 - values: - - OqYA - - RtPG - - gsIOGJKwg - - key: bs - operator: Ǝ纟ɂ珣ʂǿÞoD桹ËgȦ º錜蠬Ǟ? - values: - - Ki7 - - id - - key: qNt - operator: g* - values: - - DzS27mhY82 - matchLabels: - QNK: I1TS - fqJxC1q: kzo - matchLabelKeys: - - a6Oq - mismatchLabelKeys: - - Vw2sH - namespaceSelector: - matchExpressions: - - key: 5h - operator: Þ®h - values: - - B6x - - 3b - - key: 2ZW - operator: 篰ȉ觉U閄 - values: - - 2BzPk8i - - 1vl - - dFQiBf13aS2 - matchLabels: - "": 96xv - SDtom: k6R3UQ - topologyKey: Vfqn - automountServiceAccountToken: true - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=v1480 - - --configurator-tag=SwdpKv - - --configurator-base-image=a2vgH0 - command: - - /manager - env: [] - image: a2vgH0:SwdpKv - imagePullPolicy: IfNotPresent - livenessProbe: - failureThreshold: 174 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 781 - periodSeconds: 737 - successThreshold: 923 - terminationGracePeriodSeconds: 976 - timeoutSeconds: 968 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 57 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 246 - periodSeconds: 645 - successThreshold: 749 - terminationGracePeriodSeconds: 650 - timeoutSeconds: 276 - resources: - limits: - cpu: "86" - memory: "770" - requests: - cpu: "411" - memory: "554" - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - dnsConfig: - nameservers: - - a - - vKrqNPcbUm - - POr - options: - - name: 2l - value: gRSlrVXm - searches: - - yYUHdam - - wEo - - hlUiZBq - dnsPolicy: ʁ"@ǔņƕ BMŘ扳qB嘗&ȼ泇 - enableServiceLinks: true - ephemeralContainers: null - hostAliases: - - ip: LqvaCa - hostIPC: true - hostUsers: true - hostname: geL4Aa - imagePullSecrets: - - name: h - initContainers: [] - nodeName: yR1 - nodeSelector: - O1HyM630: BKr67cI - ZUz5pLL8: hTYM22hr - l: iJBf - nj3s39: b9nBL - preemptionPolicy: 恟ƞǍʯ嚃A蟘ȃ|xNJǃŇȘ疻- - priority: 1877191256 - priorityClassName: 7K - restartPolicy: '*呦Ə版' - runtimeClassName: QnzgP - schedulerName: vVXMuZK - securityContext: - fsGroup: -7076089516419596000 - fsGroupChangePolicy: Always - runAsGroup: 1111714984489826400 - runAsNonRoot: true - runAsUser: -4289867089642414600 - supplementalGroups: - - -1924996851394923300 - sysctls: - - name: Tx - value: XY2MbMWpG7 - serviceAccountName: erwS - setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: y2pJm - terminationGracePeriodSeconds: -4932597896166567000 - tolerations: - - effect: ńÜȶö邐Ɍ篒ȷbɚ - key: DjtMgK2 - operator: ſɵ2~ɒŕ+lİ - tolerationSeconds: -8775981821060471000 - value: eW72 - - effect: 飭鶱碹ķ欗ʧ掖ǥ|厎饥Łg暠k玈ʙɦ¨ - key: UxxYyS - operator: u銽豵X巅穓m>檭ärźW - tolerationSeconds: 7077156953375636000 - value: Aaf - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace - - name: 1OUY ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - 9GSVF: FmEK - gy8pF: IttW - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - jNt: b7Ckh - creationTimestamp: null - labels: - QYmKJqsxF: a - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: xl0SYd - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: spW-crd-job - namespace: default --- testdata/case-031.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - 6WOM: xxkxL - creationTimestamp: null - labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Zihc6G - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: pnlpbYv - health: - healthProbeBindAddress: aghAW7 - kind: NJn - leaderElection: - leaderElect: false - resourceName: d - metrics: - bindAddress: AKGnHV - webhook: - port: 274 -kind: ConfigMap -metadata: - annotations: - B11cb: P1mQky - creationTimestamp: null - labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - B11cb: P1mQky - creationTimestamp: null - labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - B11cb: P1mQky - creationTimestamp: null - labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-default + name: J5MiI-default rules: - apiGroups: - authentication.k8s.io @@ -27494,18 +25166,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - B11cb: P1mQky + annotations: {} creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-additional-controllers-default + name: J5MiI-additional-controllers-default rules: - apiGroups: - "" @@ -27582,68 +25251,59 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - annotations: - B11cb: P1mQky + annotations: {} creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-default + name: J5MiI-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: tDyp0579ogHIu-default + name: J5MiI-default subjects: - kind: ServiceAccount - name: Zihc6G + name: J5MiI namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - annotations: - B11cb: P1mQky + annotations: {} creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-additional-controllers-default + name: J5MiI-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: tDyp0579ogHIu-additional-controllers-default + name: J5MiI-additional-controllers-default subjects: - kind: ServiceAccount - name: Zihc6G + name: J5MiI namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-election-role + name: J5MiI-election-role namespace: default rules: - apiGroups: @@ -27682,18 +25342,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu + name: J5MiI namespace: default rules: - apiGroups: @@ -27856,18 +25513,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-additional-controllers + name: J5MiI-additional-controllers namespace: default rules: - apiGroups: @@ -27954,18 +25608,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-rpk-bundle + name: J5MiI-rpk-bundle namespace: default rules: - apiGroups: @@ -27990,122 +25641,107 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-election-role + name: J5MiI-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: tDyp0579ogHIu-election-role + name: J5MiI-election-role subjects: - kind: ServiceAccount - name: Zihc6G + name: J5MiI namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu + name: J5MiI namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: tDyp0579ogHIu + name: J5MiI subjects: - kind: ServiceAccount - name: Zihc6G + name: J5MiI namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-additional-controllers + name: J5MiI-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: tDyp0579ogHIu-additional-controllers + name: J5MiI-additional-controllers subjects: - kind: ServiceAccount - name: Zihc6G + name: J5MiI namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-rpk-bundle + name: J5MiI-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: tDyp0579ogHIu-rpk-bundle + name: J5MiI-rpk-bundle subjects: - kind: ServiceAccount - name: Zihc6G + name: J5MiI namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu-metrics-service + name: J5MiI-metrics-service namespace: default spec: ports: @@ -28114,256 +25750,39 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - B11cb: P1mQky + annotations: null creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: tDyp0579ogHIu + name: J5MiI namespace: default spec: - replicas: -2080953608 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR strategy: - rollingUpdate: - maxSurge: 624480148 - maxUnavailable: 302171922 - type: Ļ% 钮眶蟞dČ-{Q譩~).X + type: RollingUpdate template: metadata: - annotations: - "": qYpKB - L3jCpuTn: R - N068dY: ZtIf + annotations: {} creationTimestamp: null labels: - 1Fnm: 1lZzGTl - FmIto: JkYODd59 - UCr6oTD: WoibN1isV app.kubernetes.io/instance: operator - app.kubernetes.io/name: pnciO - dZqk3m: xbfDxoCxSY - i4ZeQT: R + app.kubernetes.io/name: E4UR spec: - activeDeadlineSeconds: -471603162845905600 - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: YautP - operator: "" - values: - - Ewpi1iLxnJ - - key: nfN - operator: K馲ú澾ù元&ǡ>枻荚;峨 - values: - - syqSywj - - key: BLVU - operator: "" - values: - - 3cAXT - - r0ngW - - matchFields: - - key: 7gn - operator: VƇ,l颎*売v趞钫g - - key: kF - operator: Ɯ|$ʒCWp扃&Â嗨ʚ嫘Ăčʏ - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - FrZ20BP9T0G: kcsQkOFM - p5SaX: BWa6 - matchLabelKeys: - - Dq - mismatchLabelKeys: - - 7GQ1xUB - namespaceSelector: - matchExpressions: - - key: zms - operator: »帄ɟ忰@Ȋ裙ieȶd桲Çɚeģ9Ȍ - - key: WaJC - operator: Pȭ农êǎ2虢h - values: - - Lq9 - - a1rE - matchLabels: - 54U9lzP: KI - NWiZPMn: lUD6mXOAvcW - namespaces: - - f9vMBdG - - OtE7Kl5t4 - - tCDp5MkQ - topologyKey: eMtZ3EaLr - weight: -404766207 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: bylLV4V - operator: '#ǑlŬʒļ駚(ƺÛ#' - - key: Phb - operator: 皽縍$ºā - values: - - ZTTCKS - - iR761 - - key: we - operator: ȼ唋Ƹ鰝鸸 - matchLabels: - "": swZwuy2X - CXo0A: bZ1Hd - WVeq: C43 - namespaceSelector: - matchExpressions: - - key: M - operator: 汝:őĦìɝļ¸g_é咬ȌŷQ - values: - - Ou52 - - rNT - - key: c0Sww - operator: o;u轅鐘豄婙/ʌ孓ü觢ʢ抰某棜貦d - values: - - O4RT1 - - key: v8LG2 - operator: "" - matchLabels: - qaekw: V - namespaces: - - 3SJ - topologyKey: 8Ah - weight: -100386840 - - podAffinityTerm: - labelSelector: {} - matchLabelKeys: - - lQ5YvzOEF9 - - 5HroZ0o - namespaceSelector: {} - topologyKey: "1" - weight: -1687222587 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: "86" - operator: 剼ü湔籾蠻梆Š拌劬忼ɩƊ葞ù - values: - - 6V7zL - matchLabels: - 9W7XU7: pVMQk - matchLabelKeys: - - b8Xb - mismatchLabelKeys: - - Asp1qz - namespaceSelector: - matchExpressions: - - key: c - operator: ʮ圪愦湔良ȧȸ査ŸgŴ [綄ȶĶx水g - values: - - 0gkzZ - matchLabels: - "": 2fz - ZRX: 0ROqUZD - namespaces: - - 89i - - 92Wbhoz - - 8g - topologyKey: 9SY - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: {} - mismatchLabelKeys: - - p0OX - - zmXV - - iEys - namespaceSelector: - matchExpressions: - - key: iulNwOX - operator: "" - values: - - gLIt - - tCdWb - - 1Pca9je - matchLabels: - A5Ukw32ccnvh: u - WHM: 4lV - namespaces: - - n7wn2OMT2 - - PyLhj5vfkW - - BWN1eYBm - topologyKey: cb38xL - - labelSelector: - matchExpressions: - - key: jKK - operator: ǟ"L葛Eǁƫ瑛aǶ嶽b孆张 - values: - - GwIUiNGIVd3 - - KjB3mR - matchLabels: - pQpe9Slu: fEn - matchLabelKeys: - - DYN - - R8n3nmt - mismatchLabelKeys: - - pqIrH - - 5D - - eme662NaPz - namespaceSelector: {} - namespaces: - - wFOGE - - G - topologyKey: s - - labelSelector: - matchExpressions: - - key: F - operator: 鞥秧鉖鴲ǻ1zȕ鲐悬儓9鱬=Ǘ - values: - - W - - key: WQF - operator: '>' - values: - - J - - hW - - feLHE0 - matchLabelKeys: - - FWKCFwV - - 96Tur7 - mismatchLabelKeys: - - VBt - - zyRZ - - XIchXTS - namespaceSelector: - matchExpressions: - - key: AbxuK5 - operator: 蠐nj裑ɰ - values: - - dancPNoJe7 - - RX - - Wu - - key: kPo - operator: ķ婈=q氶ȵM謞űh卉ɐv鹧Ȱ嶴x屒 - values: - - hxeBTpB - - 5jBNGT - namespaces: - - 5cGxz9WU0 - - nxg - - HSSuQ - topologyKey: moFrs + activeDeadlineSeconds: -4882479068919526000 automountServiceAccountToken: false containers: - args: @@ -28372,26 +25791,24 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=XxZ - - --configurator-tag=zo - - --configurator-base-image=bqtHD7 - - Rlceb - - pf5 + - --log-level=HhY5pV + - --configurator-tag=iRz + - --configurator-base-image=DpT1qi9X command: - /manager env: [] - image: bqtHD7:zo - imagePullPolicy: Always + image: DpT1qi9X:iRz + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 363 + failureThreshold: 77 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 6 - periodSeconds: 87 - successThreshold: 435 - terminationGracePeriodSeconds: 689 - timeoutSeconds: 343 + initialDelaySeconds: 492 + periodSeconds: 582 + successThreshold: 235 + terminationGracePeriodSeconds: 929 + timeoutSeconds: 336 name: manager ports: - containerPort: 9443 @@ -28401,147 +25818,77 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 927 + failureThreshold: 52 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 5 - periodSeconds: 161 - successThreshold: 290 - terminationGracePeriodSeconds: 318 - timeoutSeconds: 976 - resources: - limits: - cpu: "613" - memory: "0" - requests: - cpu: "351" - memory: "320" + initialDelaySeconds: 234 + periodSeconds: 999 + successThreshold: 878 + terminationGracePeriodSeconds: 537 + timeoutSeconds: 233 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - CDHKmOg2 - - oUUYqD - - sbbQN4Uuof - searches: - - u3hKCjcy - - ZJgoaz - dnsPolicy: ȻR/ʗ楧鱞餇醓丏 - enableServiceLinks: true + dnsPolicy: Ƣ熨f ephemeralContainers: null hostAliases: - - ip: TojRJXx + - ip: mrcQMVMkPB + - hostnames: + - Ow4 + - fmP + - yoHZ0Y60FY5h + ip: E5UeultMq + - ip: pKc1 hostIPC: true - hostNetwork: true - hostUsers: true - hostname: 6GO - imagePullSecrets: - - name: wXRyxq - - name: WBMkPwZA - - {} + imagePullSecrets: [] initContainers: [] - nodeName: xnWuRj50nA7rauK + nodeName: B7 nodeSelector: - e3nv: SVSvv9QvG - neY: uo - rYKkr: "y" - preemptionPolicy: ­Jf弣ƋŞ - priority: 1835241611 - priorityClassName: 15x + v4IUGwpWO: ZN4 + priority: 1849183906 + priorityClassName: IOycvf resourceClaims: - - name: 28yPU - restartPolicy: DŽ<6ɡ擼ƌ%t搨瓴°ū葠©璃Ş - runtimeClassName: rfuJ - schedulerName: OA + - name: ng2JB8B6VbrG + restartPolicy: 颐ń + runtimeClassName: ACnArGI + schedulerName: Ho3prF schedulingGates: - - name: ayGgwCwfW + - name: i + - name: x4N securityContext: - fsGroup: -8912598160199637000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -676902822287339000 - runAsNonRoot: false - runAsUser: 6627815993032152000 - supplementalGroups: - - -6022127879436660000 + fsGroup: -1982488228585156000 + fsGroupChangePolicy: Always + runAsUser: -457651949138351360 sysctls: - - name: mV7R6B - value: fJ6CBS - - name: EoDC - value: jGm8yNvs - - name: de9sf33Pb - value: 6yib5 - serviceAccountName: oPnm2 - setHostnameAsFQDN: false - subdomain: L8UrEhf - terminationGracePeriodSeconds: 69644444177153760 - tolerations: - - effect: 帓矔 - key: zVex3oS8 - operator: 氙幹E燲圻ą觵 - tolerationSeconds: -3800440195176564700 - value: HFHHuMka + - name: pc + value: mm2Pz7 + - name: 3SLaE + value: DGWqr61 + serviceAccountName: qGnOVE5 + subdomain: txJqtdgH6Vj + terminationGracePeriodSeconds: 10 + tolerations: [] topologySpreadConstraints: - - labelSelector: - matchLabels: - EjC5: 8NG9v2WPE - XJkn: dD77HfU - hGnZ: 1s - maxSkew: 976344313 - minDomains: 715355624 - nodeAffinityPolicy: 炝56ʔ歟W倌痓ŰȀ敲S$ǶƓK - nodeTaintsPolicy: ǰÑt贇ƆĽ盀ƺð權Óȡ. - topologyKey: WYqBsn - whenUnsatisfiable: 孍}?fʒł_6甀滈Ȏ摤礨哥ǩ( - - labelSelector: - matchExpressions: - - key: 7GTv1w - operator: '`UŗǍ挟桺źoH炚i)QŢ' - values: - - EPKxL - - jd - - key: JL - operator: 鸦b幆ɕyĬé瓔2ō筅Hʑ¹ȎMʧŀ - values: - - INqgDSOlW - - dMbo - - key: XuhdAJ - operator: 臔(蜸硰臈¹ - values: - - e - - DyatF7a - - Tf - matchLabels: - IPFW2o: pr2 - Jb3PtuCQSljh: jf - iU6: efk + - labelSelector: {} matchLabelKeys: - - j9VpU - - ZOn - maxSkew: 1535859514 - minDomains: 1462801866 - nodeAffinityPolicy: gł曃lyi - nodeTaintsPolicy: 珁牘Ǔ糄JU]E见HB( - topologyKey: F - whenUnsatisfiable: jŖ - - labelSelector: - matchExpressions: - - key: "9" - operator: Ćǘ稸o - values: - - Z - matchLabels: - 6DCkFS8: 6Fsfw - maxSkew: 1853962238 - minDomains: -1346819512 - nodeAffinityPolicy: z绦Z-骗Ã涀]fp<琯+ - nodeTaintsPolicy: Ɵ珢¼F皈|a槵ĕ郉ǝŘ,懳Şʛc - topologyKey: B - whenUnsatisfiable: U蕟ÀG略xQX睩(¶驝Ś;ȘIȟljż + - a6Nak3y9 + maxSkew: 1102617202 + minDomains: 1732042660 + nodeAffinityPolicy: EȔ揑Ŋ朔ɘ6A暺ɀ蔟Åj*擘 + nodeTaintsPolicy: 2$^āā)ʡÂXnɠʐ孯ɒNJƢȤ + topologyKey: vfC8qjxH + whenUnsatisfiable: Ȩ惍丼>瘦ɜX_ + - labelSelector: {} + maxSkew: 957936875 + minDomains: -1414427420 + nodeTaintsPolicy: 钔黨 + topologyKey: r91i + whenUnsatisfiable: 閶Ǣ?Ņ韸烡B volumes: - name: kube-api-access projected: @@ -28561,7 +25908,8 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: SQhKg + - name: E1uqQaR + - name: op3V5nJ --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -28569,606 +25917,260 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - 6WOM: xxkxL helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" creationTimestamp: null labels: - Q3Y: wWGGlI - ZgcMSFjkA: f0Je app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: pnciO + app.kubernetes.io/name: E4UR app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Zihc6G-crd-job + name: J5MiI-crd-job namespace: default --- testdata/case-032.yaml.golden -- +-- testdata/case-013.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true +automountServiceAccountToken: false kind: ServiceAccount metadata: - annotations: - 3Y64: eosT - 5Qb9G22j: um5NlI6mc - uDYM5WqGQ: 6Z7 + annotations: null creationTimestamp: null labels: + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: P6wEG + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: TmM6fo + name: NofaS namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: uCz2LaBB + apiVersion: kQD1D health: - healthProbeBindAddress: Nb - kind: mBBMxze + healthProbeBindAddress: :8081 + kind: FIuFCE leaderElection: - leaderElect: false - resourceName: TnI56l + leaderElect: true + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: 3N + bindAddress: ZTWMI webhook: - port: 175 + port: 9443 kind: ConfigMap metadata: - annotations: - 1Jk1: vK + annotations: null creationTimestamp: null labels: + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: P6wEG + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Wzr8UxvO-config + name: NofaS-config namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - 1Jk1: vK + annotations: null creationTimestamp: null labels: + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: P6wEG + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Wzr8UxvO-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: P6wEG + name: NofaS-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - 1Jk1: vK + annotations: {} creationTimestamp: null labels: + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: P6wEG + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Wzr8UxvO - namespace: default -spec: - replicas: -373101477 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: P6wEG - strategy: - rollingUpdate: - maxSurge: 1872021458 - maxUnavailable: 611380407 - type: 韟綣酠(蝀袁ǜ颀蒆Ų榹iqŚ$9 - template: - metadata: - annotations: - YBkiIECLXIgdW: 2bPKz - creationTimestamp: null - labels: - Y4U: nrcy - app.kubernetes.io/instance: operator - app.kubernetes.io/name: P6wEG - spec: - activeDeadlineSeconds: 1021876365023256000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: aGUe2X - operator: Ɗ潨湢璄 - values: - - gbcG - - AZrVPN - weight: -969250849 - - preference: - matchExpressions: - - key: peIn - operator: ¶Ȳ_*EɊ舰s溚yțá'岫Ď - - key: LIOE - operator: 氚ɻ- - values: - - JGGIfv - - 71lNlQE - matchFields: - - key: avL1 - operator: zÄǗ么ɫ - - key: cL7w - operator: '#駆表豸惟å磸ōljƭPf撋Ɍ痃' - values: - - TQ - - U - - I9Bdv - weight: -207976571 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: MhxRCBKeFN - operator: r\i骬¹/ǟƑÍz^}墹xoǰ - values: - - T6ug - - key: Bl0UX - operator: 犳ƫ}`Dž3RŞ-Ɩȹ - values: - - 1rrLPKR - matchFields: - - key: TK8S - operator: 箑cƀ拎Ɯ;īŖE榆丮ŏ譈ý - values: - - oDdm - - etqc - - key: "" - operator: 糑鑛ū畺 - values: - - IzMfpoP - - matchExpressions: - - key: qYbf - operator: ʡ踐BƯƫM辭丸J - values: - - "" - matchFields: - - key: qkWhoNTGm - operator: Ʋcº荧驑ʤL畏Ơbơy侫 - - key: aGh49Wr - operator: ģ^棖¡Ǒ燙ʫǯ尳楕刘?ʮŲ - values: - - ahme - - YcG - - 0oM - podAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: PqP7x - operator: 喢林 - values: - - zS5m - matchLabels: - "8": ag - mismatchLabelKeys: - - ToAWECJ - - 6fpRcrnJI - namespaceSelector: {} - namespaces: - - 4Xe - - YB - - O4F - topologyKey: ld7Fed9e - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - v: "" - mismatchLabelKeys: - - a - - kkTV - namespaceSelector: {} - namespaces: - - LR3ffs - - VJNB - - nboH7iG6fen9 - topologyKey: Hfw5LCBf6AFM - automountServiceAccountToken: true - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=G3wz - - --configurator-tag=RK6Ba96O - - --configurator-base-image=16DN2 - - wK - command: - - /manager - env: [] - image: 16DN2:RK6Ba96O - imagePullPolicy: Never - livenessProbe: - failureThreshold: 434 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 154 - periodSeconds: 384 - successThreshold: 791 - terminationGracePeriodSeconds: 736 - timeoutSeconds: 759 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 788 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 840 - periodSeconds: 70 - successThreshold: 50 - terminationGracePeriodSeconds: 469 - timeoutSeconds: 0 - resources: - limits: - cpu: "398" - memory: "535" - requests: - cpu: "52" - memory: "121" - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - dnsConfig: - nameservers: - - KryE - options: - - name: qZp - value: ChR - - name: jqbI - value: bk - - value: 0Ypmpzf - searches: - - "" - dnsPolicy: Ɩzȇɀ - ephemeralContainers: null - hostAliases: - - hostnames: - - nidz7Yuy - - DhC5x7t - ip: pY - - ip: dmk - hostIPC: true - hostNetwork: true - hostUsers: true - hostname: ciij - imagePullSecrets: - - name: vgy - - name: Dw - - name: AmPdW - initContainers: [] - nodeName: 5l - nodeSelector: - FCWVhL: BX - fg6adycMTt: wE - gAxa: ZuxUYdtnF - preemptionPolicy: Mƈņumě - priority: -1104627993 - priorityClassName: hBUTUiJP - readinessGates: - - conditionType: W澬5ȳȆOAǵ轼鮁D栮ɱ - - conditionType: ȑNJĸ疞ɮt壓ǝ4ȥ迯NŴ銜表 - restartPolicy: 淄休ŋL綳ǀƲ年ĺ5ʉ2 - runtimeClassName: tFo - schedulingGates: - - name: C - - name: ICjGq - - name: N0k - securityContext: - fsGroup: 3700215875989369000 - fsGroupChangePolicy: Always - runAsGroup: 969663494467258200 - runAsNonRoot: true - runAsUser: -6839067346023426000 - supplementalGroups: - - 5885422743674264000 - - 7949464185642053000 - - 3151508661079112700 - sysctls: - - name: V3Mli - value: mWPuG - serviceAccountName: sxeN2i - setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: LRw2C4hiMR - terminationGracePeriodSeconds: -5489278371963064000 - tolerations: - - effect: 醜ȋ,ȿɔ疦煫篓ő凢e腇旗ʤ}DZ7 - key: FDtXKIviZj - operator: 'K ' - tolerationSeconds: -3134249558038261000 - value: O1m7Z - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: RQvPr - operator: S癱骜皭Ȭ覚ɱ蠀X - values: - - kL2Q - - key: B7i - operator: 縣ʍʣ - - key: Z8VcoQkm - operator: 螺Ń沙国?Oɯ<'榶 - matchLabels: - 8rtP: hROP - sbkwpMQijVFr1S: tpVZLGMk - maxSkew: 377835089 - minDomains: -1687478953 - nodeAffinityPolicy: .=2ń蹁 - nodeTaintsPolicy: Ɖ'ɖZBʋ~厵¤ŵâ - topologyKey: 1QrEq - whenUnsatisfiable: uńƹ彠橐猩Q吁4#队軝TXkȗǎ - - labelSelector: - matchExpressions: - - key: ytUedNja - operator: 坫茪憹L淜\Ű+c - matchLabels: - m9kJd252K: iPfeV28 - maxSkew: 1766424504 - minDomains: -1719290285 - nodeAffinityPolicy: O陂Ȧ - nodeTaintsPolicy: hƦLe皴ǀ荾;È;ɁR習彸ʧ,! - topologyKey: Yln - whenUnsatisfiable: î根¯ʟZ - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace + name: NofaS-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - 1Jk1: vK + annotations: {} creationTimestamp: null labels: + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: P6wEG + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Wzr8UxvO-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: P6wEG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - 3Y64: eosT - 5Qb9G22j: um5NlI6mc - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - uDYM5WqGQ: 6Z7 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: P6wEG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: TmM6fo-crd-job - namespace: default --- testdata/case-033.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: 5gjqBM - health: - healthProbeBindAddress: U8r6618MEX - kind: NEUo8izo0UYP - leaderElection: - leaderElect: true - resourceName: q - metrics: - bindAddress: 0ECBKwI - webhook: - port: 441 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null - labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: null - creationTimestamp: null - labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX-default + name: NofaS-additional-controllers-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - persistentvolumes verbs: - - create + - patch - apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - nodes + - secrets verbs: - - create + - get + - list + - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - persistentvolumes verbs: - - create - delete - get - list - patch - update - - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - redpandas verbs: - - update + - get + - list + - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes verbs: - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - redpandas verbs: - get - list - - patch - - update - watch - apiGroups: - - rbac.authorization.k8s.io + - "" resources: - - clusterrolebindings - - clusterroles + - persistentvolumes verbs: - - create - - delete - get - list - patch - - update - watch --- # Source: operator/templates/entry-point.yaml @@ -29178,22 +26180,45 @@ metadata: annotations: {} creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX-default + name: NofaS-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: 6z0k3NX-default + name: NofaS-default subjects: - kind: ServiceAccount - name: 9xg1jKJ + name: NofaS + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xALbe0A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: NofaS-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: NofaS-additional-controllers-default +subjects: +- kind: ServiceAccount + name: NofaS namespace: default --- # Source: operator/templates/entry-point.yaml @@ -29203,15 +26228,14 @@ metadata: annotations: null creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX-election-role + name: NofaS-election-role namespace: default rules: - apiGroups: @@ -29253,15 +26277,14 @@ metadata: annotations: null creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX + name: NofaS namespace: default rules: - apiGroups: @@ -29427,15 +26450,111 @@ metadata: annotations: null creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX-rpk-bundle + name: NofaS-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xALbe0A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: NofaS-rpk-bundle namespace: default rules: - apiGroups: @@ -29463,23 +26582,22 @@ metadata: annotations: null creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX-election-role + name: NofaS-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 6z0k3NX-election-role + name: NofaS-election-role subjects: - kind: ServiceAccount - name: 9xg1jKJ + name: NofaS namespace: default --- # Source: operator/templates/entry-point.yaml @@ -29489,23 +26607,22 @@ metadata: annotations: null creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX + name: NofaS namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 6z0k3NX + name: NofaS subjects: - kind: ServiceAccount - name: 9xg1jKJ + name: NofaS namespace: default --- # Source: operator/templates/entry-point.yaml @@ -29515,23 +26632,47 @@ metadata: annotations: null creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX-rpk-bundle + name: NofaS-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 6z0k3NX-rpk-bundle + name: NofaS-additional-controllers subjects: - kind: ServiceAccount - name: 9xg1jKJ + name: NofaS + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xALbe0A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: NofaS-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: NofaS-rpk-bundle +subjects: +- kind: ServiceAccount + name: NofaS namespace: default --- # Source: operator/templates/entry-point.yaml @@ -29541,15 +26682,14 @@ metadata: annotations: null creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX-metrics-service + name: NofaS-metrics-service namespace: default spec: ports: @@ -29558,7 +26698,7 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 @@ -29567,247 +26707,36 @@ metadata: annotations: null creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 6z0k3NX + name: NofaS namespace: default spec: - replicas: 999315295 + replicas: -495726913 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A strategy: - rollingUpdate: - maxSurge: 520022418 - maxUnavailable: 419878016 - type: Ǣ=ʣxfȸ + type: RollingUpdate template: metadata: annotations: - 3k2GZ: pSZov - OfkmIIg: lvn0EuSw4nQ - aTgP: 0C4pWjw6Xjegg9a + GRGhQ: fkqnnjt1NtWR + QAQlCL: 3O1IzZ + u3WhJ: H6dv creationTimestamp: null labels: - F6WO: Ib3 + 1SlC: EXAyYDLHKe app.kubernetes.io/instance: operator - app.kubernetes.io/name: 9wjOhT - hKO47: xAT - wue: VABbdY + app.kubernetes.io/name: xALbe0A + pHipubhkd: My spec: - activeDeadlineSeconds: -4209332569599939000 - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - e1uTVLJ: McLB - matchLabelKeys: - - "40" - - "4e73" - - 6r - mismatchLabelKeys: - - 1p9eMjY - - zJg - - diCC - namespaceSelector: - matchExpressions: - - key: 74rez7DvhRz - operator: JU砽ʜ - values: - - MORLtc - - VHEUu - - key: 8v - operator: 畝鎻仝魭騢Ȏ譔$jn-¶Z龗ɋ錻皊K蔛 - values: - - bCCcq - - 51Pi - - key: 1Z8od - operator: 癟kD儼Ⱦ_鵈Ƈ顱櫈@ - matchLabels: - bC45: odNesqxgbw - namespaces: - - e7Alx - topologyKey: 4NKc5T8i - weight: -546355911 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: Z4eJJ2Ek - operator: M鿭ǝį¤\< - matchLabelKeys: - - IwKA74 - - ultKoAtDc - mismatchLabelKeys: - - KjOF3 - - 9zbv - - r3h - namespaceSelector: - matchExpressions: - - key: "" - operator: 卍Î - values: - - 3Ye - - KeE - matchLabels: - d6Eak: WoS - gbK1: NlgbLbiLc - yqjy: yncCdbLug - namespaces: - - u - - XoIW - topologyKey: RLOi1 - - labelSelector: {} - matchLabelKeys: - - 0NKRa - - W - - Aet - mismatchLabelKeys: - - Nz45q - namespaceSelector: - matchExpressions: - - key: pSkn - operator: 壭aǔq - matchLabels: - Am5: "" - tKok: eb - topologyKey: Egqc - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: fGm - operator: Ɠ±ŜP沓v!簜蝦蕱 - - key: "" - operator: kÿ烩篽日ƀ竷-:甒 - values: - - "6" - - key: kZRV9jWCo - operator: 棴ɉvy#eȓōȥ胯ė - values: - - k0LEzj - - O2UF5eHj0 - - W - matchLabels: - 3loBH: nImIeI - RLYek: "" - RaosO: D - matchLabelKeys: - - FzbbgJyd - - raTbn7yH - - 1Q - mismatchLabelKeys: - - OiiaM7 - namespaceSelector: - matchExpressions: - - key: gO4fmt - operator: 訁C眄ǰŅ}ƣ2Ý斲谌ľʧ鏼 - values: - - 64Lx - - 9F - - key: fcYRW5 - operator: £VŠȻ謐ȁ0Ȼő6*ğ陪枭棩ly - values: - - Oq - - a0IsYdZMH - namespaces: - - WhR27YV9SRRJe - - oja4 - topologyKey: c3o - weight: -4040378 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: HH - operator: ƛGȯ刃R氎殯佲颅菉ĜƊǖ誹 - matchLabels: - qxmta: "" - matchLabelKeys: - - 8Fv - - eMMF - - nyHcgRL - mismatchLabelKeys: - - my5jBGHjD - namespaceSelector: - matchExpressions: - - key: dLgl - operator: "" - values: - - 6WV5B - - key: fwoTix - operator: 旐ƕ坾臎ė - values: - - PcbJF6cVs - - bCP1 - - key: Jqd - operator: Ũ,聙Ïȶ@娋k<鲫čCȈdM?Q裚 - values: - - hbQ - - Uwec1YfIJ - - TWua5OK - matchLabels: - F: ZNp - lI1P0: dyy - p3EHV: D - topologyKey: ez0SYN3KBc15j - - labelSelector: - matchExpressions: - - key: qaxGoT5SKrO4l - operator: ɔ鿿>Sx - values: - - Bb - - 3HCn5YL4sIt - - XBdy - - key: "" - operator: 禨裦¤U夣ŗ ē晈`Ȃg欆Ƙ乕馫FXõ - values: - - sPTz9aiX - matchLabelKeys: - - eh - mismatchLabelKeys: - - 9ZZ0BNgs5 - namespaceSelector: - matchLabels: - 1w: 4Wmj - NmKh: Jy8 - topologyKey: Ftf - - labelSelector: - matchExpressions: - - key: Vd - operator: 趢lɉ%# - values: - - kHBf2 - - key: s35 - operator: 噅ńsʓ謳?t - - key: ziqc3J - operator: 2ɼ - values: - - wtNQkwXx - - Bn - matchLabels: - D8qrb: Vnn1hIL - matchLabelKeys: - - W1 - - WtO - - "" - mismatchLabelKeys: - - nM - namespaceSelector: - matchLabels: - Vpv: UPW1 - topologyKey: RnHxlh automountServiceAccountToken: false containers: - args: @@ -29816,26 +26745,24 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=KMFMJqF - - --configurator-tag=NaNHQ74 - - --configurator-base-image=MhZp - - SkxA4PXfixGo6H - - Fa1 + - --log-level=DCM8 + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: MhZp:NaNHQ74 - imagePullPolicy: Never + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 555 + failureThreshold: 971 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 880 - periodSeconds: 169 - successThreshold: 536 - terminationGracePeriodSeconds: 269 - timeoutSeconds: 579 + initialDelaySeconds: 160 + periodSeconds: 287 + successThreshold: 714 + terminationGracePeriodSeconds: 748 + timeoutSeconds: 678 name: manager ports: - containerPort: 9443 @@ -29845,143 +26772,37 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 166 + failureThreshold: 146 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 850 - periodSeconds: 870 - successThreshold: 880 - terminationGracePeriodSeconds: 604 - timeoutSeconds: 425 + initialDelaySeconds: 789 + periodSeconds: 258 + successThreshold: 866 + terminationGracePeriodSeconds: 123 + timeoutSeconds: 490 resources: limits: - cpu: "713" - memory: "863" + cpu: "34" + memory: "847" requests: - cpu: "273" - memory: "183" + cpu: "961" + memory: "537" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - Nr - - d0S - searches: - - Fue - - pDaMCHRq5 - dnsPolicy: 皰|ç0~bȾɷ - enableServiceLinks: true ephemeralContainers: null - hostAliases: - - ip: I - hostIPC: true - hostUsers: true - hostname: wIg - imagePullSecrets: - - name: 1G3qsUeX - - name: MfQ3EzTp7q9k + imagePullSecrets: [] initContainers: [] - nodeName: gNBksxjndF - nodeSelector: - "": k2KbB - 5dCSt9: LElGJ - cIMAXDCuY: Y52Ax - hq20GpR0VRl: Hm - preemptionPolicy: n悳Ťu峧2 - priority: 1538920371 - priorityClassName: mxyOicuJ - readinessGates: - - conditionType: ɷŗ翜栘 - - conditionType: Řʦȏ耟Wįƹ4EÊǖ桉ɭþJ鵻Ȅ - resourceClaims: - - name: MuBfNAK - - name: cz4eqU0R - - name: zfsdyo - restartPolicy: 纍k$ƴI» - runtimeClassName: 4MqDyq5rk - schedulerName: t3coUSyQ - schedulingGates: - - name: c9pzaF - - name: DPecI - - name: GSp + nodeSelector: {} securityContext: - fsGroup: -156572939790639140 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 2183539069813392400 - runAsNonRoot: false - runAsUser: -3112209966011252000 - supplementalGroups: - - -2156329419442480600 - - 5019114569367727000 - sysctls: - - name: O9kEHw - value: 9jLYuYu0k3lOGn - - name: ScRMe - value: mXsDu - - name: qICk7 - value: "" - serviceAccountName: 5oCOmk - setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: TUd - terminationGracePeriodSeconds: -3744990875899211300 - tolerations: - - effect: Ɵ'@?蓎dz錥釽鰼ɖ嫖禎 - key: 7RABX - operator: ʄ- - tolerationSeconds: -6156514130788734000 - value: EtqEjW - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: eLd0JExcVs - operator: ƍ[{Ƃ - values: - - YEWhJ - - y8L1j - - key: "" - operator: CĻ郵奡ųÜÁsŇǞĺ均麶dxʦd - values: - - 66bLrjD - - 62Hbwh56 - - key: sfXaWbXD0 - operator: "" - values: - - yQo - - "" - - KOExMK - matchLabels: - cf: vgE - flC51TdC: vDJf6O32 - matchLabelKeys: - - IxVFD - maxSkew: -1442030726 - minDomains: 2122004706 - nodeAffinityPolicy: s - nodeTaintsPolicy: .ɶȁ汉聙ȯ - nodeTaintsPolicy: =ljí - topologyKey: 3vd - whenUnsatisfiable: ȶ + runAsUser: 65532 + serviceAccountName: NofaS + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -30001,8 +26822,6 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: Y4eYBG - - name: wtbsGN --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -30010,73 +26829,68 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - Ak8Zx: tu0 - Ed: "" helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" creationTimestamp: null labels: - IkOwwd: 37ZfCkM - M3fH: xmhoB + 71sOOTU: en8OPZRyg7 + L2FlwR: TODz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/name: xALbe0A app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - uUW: Us - name: 9xg1jKJ-crd-job + name: NofaS-crd-job namespace: default --- testdata/case-034.yaml.golden -- +-- testdata/case-014.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 automountServiceAccountToken: false kind: ServiceAccount metadata: - annotations: null + annotations: + 7AtBTRGr: U8ZxJ creationTimestamp: null labels: - 0A3p3: jM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/name: qKT app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - in: IEvkGW7b - name: ClL0jwLRjj + name: g5 namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: gwFHgU3 + apiVersion: C1vG9c health: - healthProbeBindAddress: wnA5 - kind: SN4Pz + healthProbeBindAddress: :8081 + kind: FMlJKF leaderElection: - leaderElect: true - resourceName: rAphO + leaderElect: false + resourceName: UKf metrics: - bindAddress: p6a + bindAddress: Ynr webhook: - port: 211 + port: 218 kind: ConfigMap metadata: annotations: - jFAGoiKg: S0ruuP - louERS: dWcc + DsuWV: hcfr + J: UTbwX + c067UKdeI: tE creationTimestamp: null labels: - 0A3p3: jM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/name: qKT app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - in: IEvkGW7b - name: t-config + name: o2lMoG-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -30084,18 +26898,17 @@ apiVersion: v1 kind: Service metadata: annotations: - jFAGoiKg: S0ruuP - louERS: dWcc + DsuWV: hcfr + J: UTbwX + c067UKdeI: tE creationTimestamp: null labels: - 0A3p3: jM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/name: qKT app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - in: IEvkGW7b - name: t-metrics-service + name: o2lMoG-metrics-service namespace: default spec: ports: @@ -30104,259 +26917,73 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/name: qKT --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - jFAGoiKg: S0ruuP - louERS: dWcc + DsuWV: hcfr + J: UTbwX + c067UKdeI: tE creationTimestamp: null labels: - 0A3p3: jM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/name: qKT app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - in: IEvkGW7b - name: t + name: o2lMoG namespace: default spec: - replicas: 1507271392 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/name: qKT strategy: rollingUpdate: - maxSurge: 1343937480 - maxUnavailable: 989960583 - type: i巅P°į欈Ǣg9搨ň偲颕Å矐, + maxSurge: 674042436 + maxUnavailable: 669562044 + type: ǣę牜ʇ16ȚH!m template: metadata: annotations: - "2": ICCoP4E - "7": bp8zXzOF - "095": nWcb - a8BQYCvG: vrjwweZiCAe - bme33: i9xjX - cnwK: WP + KvRKE1d: XRIJ + W: C3 + fndr: Uyt3Xrutg creationTimestamp: null labels: - Dn: Xe - EX: Bb4 - JKMTjfb: Yimx - PL2: SxbcU8Sv + "": c app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6xIMZiuoly3 - voHHm: eY + app.kubernetes.io/name: qKT spec: - activeDeadlineSeconds: -6398421988897698000 + activeDeadlineSeconds: -2853855776321121300 affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: - labelSelector: - matchExpressions: - - key: Pp9 - operator: 衴ʨ瑕.r魿ɺŧ凋_&瓉î寖¤tĜt" - - key: VG - operator: 鼸眙0!啵鹾迓胪SĖY - values: - - i4l - - Y6gl - - WA - matchLabels: - 5jqgHGxN: uQx - mismatchLabelKeys: - - acp - - gn0p04 - - CvvldniL - namespaceSelector: - matchExpressions: - - key: UsyM - operator: Ǭ. - values: - - aFu2Db8qvq - - SwzwU6As - - key: EgI - operator: "" - values: - - 2SN - - i4aVPZmT - - key: JoubvvqBLU - operator: R筈駊Ŗ:挶 - values: - - GqK4CV - matchLabels: - Hxf: Kv - i5ScCfIqa: kao - namespaces: - - TMpTw - topologyKey: d - weight: -119797982 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: zPe50d - operator: '?' - values: - - iFqAX - - key: xnW - operator: :攃ĺV窎 - values: - - 3nYZuq - - JQEB7x - - ZWU - matchLabels: - 9rE8VGR: OZgHuti - OP: ckCaWEL - matchLabelKeys: - - k660y - - 7BvT65jhS - mismatchLabelKeys: - - 4wGxeaSgyM - - "" - - 1X - namespaceSelector: - matchExpressions: - - key: o0sT - operator: ʅ¿掯儯 - values: - - qZ - - l - - YtpVM0H - - key: LVBzP1Ae - operator: ó3缐穳娫嘽3x - values: - - LEbLp namespaces: - - b6s3a0g - topologyKey: tgJ1ADV - weight: -60551341 + - HKB8l3 + topologyKey: JXORzPM + weight: 1533141205 + podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: 7CXo - operator: ũTƓ¨q噞W淵ƚeƘ綗跉Ǘɶɨ靟樿t - values: - - fIjL8ud - - cP6ku3Ce - matchLabels: - EPN: NAF - matchLabelKeys: - - 1Gmhbm - namespaceSelector: - matchExpressions: - - key: 4GLPuhOFl - operator: "" - values: - - rcxiBTaZ8FV - - 7aKrc - - "43" - - key: HlS - operator: 倗龿泍ȗʗe囝涷購;źFƝ單a軷& - values: - - niV + - labelSelector: {} + namespaceSelector: {} namespaces: - - D - - Qq - - "" - topologyKey: zz - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: eAqYoR2B - operator: ʧ膕眹Ʈǰ韑&ÅÆ7ə&ĝ - values: - - rkx - - key: 3ycQsqbL - operator: =¡憴ʊĩƬ_ɕ - values: - - Xp - - xrURdzvH - matchLabels: - s: Q - matchLabelKeys: - - HRAIb - - 5a6U - namespaceSelector: - matchExpressions: - - key: "7" - operator: ʉĥ - - key: NX - operator: ɽ阣旦Áļáʋ霐ĊW覒bYy竰ɋV条蒩 - matchLabels: - "": O4C - JDyjt3: TX - namespaces: - - 9zv - - vb75Ef - - x7R0H - topologyKey: 6BGhh - weight: -1485510964 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: CxpFW5N - operator: n鉢q - - key: T - operator: Y襱Ƞ)4ʜåȸ譨R袞îü筎@b - values: - - hqdw8EVv1 - - 1mT3hr - matchLabels: - UnfuNo: YxmvwMe - mismatchLabelKeys: - - Ov2egK5 - - IOdr - - aoAX2p5 - namespaceSelector: - matchLabels: - 6mgvu490: TT - sXWWyY: Tcd6j - namespaces: - - UOXmG - topologyKey: "" - - labelSelector: - matchLabels: - GgvCsL: 4nHaBTb - xsHA4dSX: A0s6 - matchLabelKeys: - - ISAMP4TC - - ks6XZ9fL09 - - 9av - mismatchLabelKeys: - - SvB0 - namespaceSelector: - matchExpressions: - - key: 70TOcc - operator: 媭饴$ʉ灞颉Ǵ粨 - values: - - oK2lFz54 - - DT - - key: "n" - operator: 爵礝8oJb赇n - values: - - JcD - - 0PHAj4GyS - - 8OS9FIppKicyyn - matchLabels: - wV: agcZU - namespaces: - - S7GUz7tacC - - qmihBv1hRQ - - sl18T1 - topologyKey: s7dw - automountServiceAccountToken: true + - exCr + topologyKey: zaViz6 + - mismatchLabelKeys: + - sYY + - c + namespaceSelector: {} + topologyKey: 3i9VHugV + - matchLabelKeys: + - DKX45 + topologyKey: RQtSd + automountServiceAccountToken: false containers: - args: - --health-probe-bind-address=:8081 @@ -30364,25 +26991,25 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=SzbHWgTpbD2 - - --configurator-tag=jr9 - - --configurator-base-image=5Q - - gQcl6Ej6 + - --log-level=6TGvv + - --configurator-tag=J18tP9n + - --configurator-base-image=AhZ + - x7K3o command: - /manager env: [] - image: 5Q:jr9 - imagePullPolicy: Never + image: AhZ:J18tP9n + imagePullPolicy: Always livenessProbe: - failureThreshold: 810 + failureThreshold: 304 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 500 - periodSeconds: 189 - successThreshold: 853 - terminationGracePeriodSeconds: 565 - timeoutSeconds: 525 + initialDelaySeconds: 784 + periodSeconds: 1 + successThreshold: 585 + terminationGracePeriodSeconds: 163 + timeoutSeconds: 806 name: manager ports: - containerPort: 9443 @@ -30392,99 +27019,70 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 348 + failureThreshold: 445 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 901 - periodSeconds: 523 - successThreshold: 143 - terminationGracePeriodSeconds: 422 - timeoutSeconds: 114 + initialDelaySeconds: 648 + periodSeconds: 480 + successThreshold: 975 + terminationGracePeriodSeconds: 240 + timeoutSeconds: 134 resources: limits: - cpu: "760" - memory: "142" + cpu: "246" + memory: "341" requests: - cpu: "163" - memory: "318" + cpu: "419" + memory: "949" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - options: - - name: 6Fq - value: cuoN - - name: cVM - value: e4mx - - name: IAvD - value: 4szS0pX - dnsPolicy: 絀揋a - enableServiceLinks: true + dnsPolicy: Êĕƹ糁Ř舛ě勒 ephemeralContainers: null - hostAliases: - - hostnames: - - v0Kv - ip: eQ3r5 - - hostnames: - - 8nEk84M - - euK9Qp3 - ip: LEDvLQQsFo9 - hostIPC: true - hostUsers: true - hostname: 3iw + hostNetwork: true + hostname: buM imagePullSecrets: - - name: 9J + - name: 5l + - name: W initContainers: [] - nodeName: 3Q886bLj - nodeSelector: {} - preemptionPolicy: ň鈩(ɟǛ穯農麤蠼 - priority: -770320052 - restartPolicy: ʇ`&箸ħ - runtimeClassName: D - schedulerName: IESs5 + nodeName: rOig + nodeSelector: + gT9Z: CsE8yWd83mQMFqv + preemptionPolicy: 3LS谔~Y蟅ȸƃʪȭJu + priorityClassName: 0NKME1gmQ + resourceClaims: + - name: fdLb + - name: S5Hj + - name: Q0mzrA + restartPolicy: '@' + schedulerName: Nddm schedulingGates: - - name: 8U1 - - name: X + - name: oljbBFuSK28 securityContext: - fsGroup: 6118947562666083000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 6213863176334278000 - runAsNonRoot: false - runAsUser: -2189966760468144400 - supplementalGroups: - - -8830045925767746000 - sysctls: - - name: 34Kkf2OQ - value: 7ZPrf - serviceAccountName: f0 + runAsUser: 65532 + serviceAccountName: SZ setHostnameAsFQDN: true shareProcessNamespace: true - subdomain: "6" - terminationGracePeriodSeconds: -7029881915293393000 - tolerations: [] - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: Ra - operator: 豼 - - key: dEVKZS3 - operator: i膆邓柟洬墐Ǿ$ - values: - - l - matchLabels: - 0ZyOGf: Wijr - matchLabelKeys: - - xlVcmk7TJ - maxSkew: -2107805018 - minDomains: -1180467181 - nodeAffinityPolicy: '''ŵ豞穾蹙還ȑ' - nodeTaintsPolicy: Ğ繰Ÿ@-ě - topologyKey: 0dMxJp - whenUnsatisfiable: ¬鴍ʀɞs<ǨŜ凓ĖDzȣ + terminationGracePeriodSeconds: 10 + tolerations: + - effect: Ĥă覀萾Ƌāh-X + key: aaA8 + operator: 壈VIĔ + value: D3f + - effect: ȓ觿Lʏ`[ń騴HākQ=霅N卞嘕û掜 + key: yZ + operator: ķ嫝j麰nŊ1荠欸Ɔo幹浦³袦 + tolerationSeconds: 8387893108164709000 + value: rGuo + - effect: 骺LtÇe劘o銇Þ!暥啂ɡ端ȑ + key: X2UU + operator: 捿boŁ + tolerationSeconds: 3611748545609715700 + value: "Y" volumes: - name: kube-api-access projected: @@ -30504,394 +27102,522 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: "6" - - name: zAdnzeSaest --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - jFAGoiKg: S0ruuP - louERS: dWcc + 7AtBTRGr: U8ZxJ + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" creationTimestamp: null labels: - 0A3p3: jM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/name: qKT app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - in: IEvkGW7b - name: t-metrics-monitor + name: g5-crd-job namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - 0A3p3: jM - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6xIMZiuoly3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - in: IEvkGW7b +-- testdata/case-015.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" + "": h5TCA9NX creationTimestamp: null labels: - 0A3p3: jM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/name: TCq app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - in: IEvkGW7b - name: ClL0jwLRjj-crd-job + name: K9R-config namespace: default --- testdata/case-035.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - R: x + "": h5TCA9NX creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: k + app.kubernetes.io/name: TCq app.kubernetes.io/version: v25.1.4 - dcuPV: Fy helm.sh/chart: operator-25.1.4 - name: 1316QiC - namespace: default + name: K9R-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: 9nlMnZj2 - health: - healthProbeBindAddress: 86hb6c8 - kind: pS - leaderElection: - leaderElect: false - resourceName: Rej6x7c - metrics: - bindAddress: AA - webhook: - port: 385 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: null + annotations: + "": h5TCA9NX creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: k + app.kubernetes.io/name: TCq app.kubernetes.io/version: v25.1.4 - dcuPV: Fy helm.sh/chart: operator-25.1.4 - name: PW6-config - namespace: default + name: K9R-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: - annotations: null + annotations: + "": h5TCA9NX creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: k + app.kubernetes.io/name: TCq app.kubernetes.io/version: v25.1.4 - dcuPV: Fy helm.sh/chart: operator-25.1.4 - name: PW6-metrics-service + name: K9R-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: K9R-default +subjects: +- kind: ServiceAccount + name: Y7Y8 namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + "": h5TCA9NX + creationTimestamp: null + labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: k + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TCq + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: K9R-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: null + annotations: + "": h5TCA9NX creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: k + app.kubernetes.io/name: TCq app.kubernetes.io/version: v25.1.4 - dcuPV: Fy helm.sh/chart: operator-25.1.4 - name: PW6 + name: K9R namespace: default -spec: - replicas: -863901194 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: k +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + "": h5TCA9NX + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TCq + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: K9R-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: K9R-election-role +subjects: +- kind: ServiceAccount + name: Y7Y8 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + "": h5TCA9NX + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TCq + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: K9R + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: K9R +subjects: +- kind: ServiceAccount + name: Y7Y8 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + "": h5TCA9NX + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TCq + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: K9R-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: TCq +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + "": h5TCA9NX + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TCq + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: K9R + namespace: default +spec: + replicas: -594257073 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: TCq strategy: - rollingUpdate: - maxSurge: 273545509 - maxUnavailable: 1165284047 - type: 竈繭ż7訽ǵVHoG捔Ą + type: RollingUpdate template: metadata: annotations: - 0vs: "1" - L: dwD5nU - pUlqRf45: NG + vgF0: KEEg1Li7 creationTimestamp: null labels: - F8kfXVrMt: lr0M - WOU: k - XHCkj: QKIvxGl5 + 7Hh0Z: Whlc + 7zRabC62: CP6LI2ne + Pob1: i8Jj + ULZKunhJj: ES + aTbK: "2" app.kubernetes.io/instance: operator - app.kubernetes.io/name: k + app.kubernetes.io/name: TCq + rGL7NYgsN: BT spec: - activeDeadlineSeconds: -479205534661964100 affinity: nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchFields: - - key: O4qec - operator: ǀ诺n罣湰ƾŝ黜ǒ耴Ƴfä - values: - - lVX - - 7EKxRsUAz - - key: 1ed - operator: u - values: - - WxGv2 - - key: fTLDFjvn - operator: 7懱c - values: - - so482 - - EitqgZ - podAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: {} - matchLabelKeys: - - DJge - namespaceSelector: - matchExpressions: - - key: rn9 - operator: ƣ愠ƈh絳eɓi§ - values: - - 6imO - - key: yUkrn - operator: ʅv憼腨ɚ - values: - - mZ - - oO1UJ - - 8q - - key: QCHd6 - operator: 櫨}R茤ţmɔ铫uLjȚșǫK借 - matchLabels: - PQQx: zwV - RyFpnA: zQqlgMizGEu - namespaces: - - "9" - topologyKey: kk7yjR - - labelSelector: - matchExpressions: - - key: "y" - operator: ^C境ɂ馷1*DŽz辺uǠʒ6袏c躼ø - values: - - Z - - zfWOtzNayRN - - UN7Auq - matchLabelKeys: - - MZm - namespaceSelector: - matchExpressions: - - key: aDfk1sPM - operator: 姚1Y - values: - - vDNH8 - - 1VLVR - - BUY5Xx4 - - key: g0Cr - operator: 枙!Ǥ - values: - - B00qSVLkHpfG0 - - key: 3RWUaD - operator: 龷衈凌_敃FLJ饮J噁赡 - values: - - BvLwik - - Bqm54DxyiW - - v2N9o - matchLabels: - FI: 4CJ6Ehq - e3Xo: qa - topologyKey: k98kmgw - podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: TQvU6Id - operator: yȨÁ汑ȟEʪɫzȷj脽硗ɬO$ǫ羡 - values: - - WCNC49poydsy - - 5esRdA - - uio - - key: mmE - operator: 釮GsEɲ诒檃拼6韺ÛOm疐ɦ - values: - - "37" - - key: mqVOqJq - operator: Ǝ - values: - - hAKG - matchLabels: - D0geiPus2: tCC - tzXLb: 0Uq - matchLabelKeys: - - Kj - - yi - namespaceSelector: - matchExpressions: - - key: cckS - operator: ɲʣƁ嬩ʧɡ跊Ĥȃ懍嗆鹿Ǜ - values: - - 5inp - - DzJRJ - - key: UOF - operator: 餱覲Kȃ篙兄禔ɥ擫 - values: - - VRWd - - B - - w2ggqD - - key: hwT2eq - operator: 椟k¡栤蘩à娰訾玽-ʏ=^窻ƦX¾, - values: - - g6L - - N9B3wmlSo - matchLabels: - "": "" - Ql: aM - aQp: Wu6 - namespaces: - - Cea4 - - 1c69 - topologyKey: 0T - weight: -1373208300 - - podAffinityTerm: - labelSelector: - matchLabels: - 21EsNlB: oMlzm4tm - matchLabelKeys: - - jW2041N - mismatchLabelKeys: - - 9QZQ2WMN - - TT - - U - namespaceSelector: - matchExpressions: - - key: S - operator: vĢɸɦ狓Ui4lĖ弳Y.珸 - matchLabels: - 7l: BJrJcdKfp - kSRav0N: rDbz53oTY - qKh4tv: iDb2z - namespaces: - - uUXdfwE - - VBuV9 - topologyKey: "" - weight: 1039679825 + - preference: {} + weight: 576099119 requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - C4Saz4lf: 42so6l - L34Nnw8Frg: 4wOR - zDwo: 7hctY - matchLabelKeys: - - iec09dAvG - namespaceSelector: - matchExpressions: - - key: mVp - operator: ų - values: - - yrYw6b - - key: EWsZkpwQ - operator: '埁T佮Ŕ&:' - matchLabels: - G4T: "68" - topologyKey: 3DBj74YHA7j - - labelSelector: - matchExpressions: - - key: IPYws68w - operator: lǰƻſ¯I4x>#ɶ%ɯ徬 - values: - - Z9f - - CQGBiVMq - - key: uXd8n6 - operator: '%J}聜ȡ' - values: - - FOL0 - matchLabels: - "6": 21G4 - m3c4: cUiCI - matchLabelKeys: - - "n" - - nP4Sn - namespaceSelector: - matchExpressions: - - key: Zwk - operator: ŵǹ柉忬诱ôF9搫Ð}*ƞAɺʠʅ日 - values: - - "4" - - 4Y6C - - YpRMY - - key: P3aF4fm4Fc - operator: Y{Ǽɠ - values: - - dJrrmvxXi - - o0qAWA - - tXyqe - matchLabels: - P0A: "" - ROb1lF: gN6G6Wtg - u4apTzbF4XO: i1tol - namespaces: - - JHJ - - BGu5k3e - - TjWU - topologyKey: yhmLl4 + nodeSelectorTerms: null automountServiceAccountToken: false containers: - args: @@ -30900,25 +27626,24 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=iAMFhZ - - --configurator-tag=i6Q4sn53d - - --configurator-base-image=P9JMlA - - 8kSamSw9 + - --log-level=vOvAQKBh + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: P9JMlA:i6Q4sn53d + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 122 + failureThreshold: 618 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 163 - periodSeconds: 240 - successThreshold: 310 - terminationGracePeriodSeconds: 814 - timeoutSeconds: 57 + initialDelaySeconds: 473 + periodSeconds: 821 + successThreshold: 474 + terminationGracePeriodSeconds: 307 + timeoutSeconds: 193 name: manager ports: - containerPort: 9443 @@ -30928,123 +27653,73 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 320 + failureThreshold: 414 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 395 - periodSeconds: 682 - successThreshold: 493 - terminationGracePeriodSeconds: 888 - timeoutSeconds: 845 - resources: - limits: - cpu: "417" - memory: "633" + initialDelaySeconds: 982 + periodSeconds: 424 + successThreshold: 242 + terminationGracePeriodSeconds: 473 + timeoutSeconds: 556 + resources: + limits: + cpu: "483" + memory: "365" requests: - cpu: "307" - memory: "967" + cpu: "857" + memory: "13" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - E4iX - - wh8 - - sEe - options: - - name: LG5d6Ts - value: jCMr - - name: cZX - value: "47" - searches: - - GceCBWJ1Bz - - gMgtPpnfwg - - xJL - dnsPolicy: ʭřɖ讋朩čɦq9 + dnsPolicy: 禉ȎÝ汱 ephemeralContainers: null hostAliases: - - hostnames: - - 4jg - - A6aDqHij - - J0F - ip: JzFtYa - - hostnames: - - 2S1cK - - lgaF6AE - ip: Nm5sHlku - - ip: QVK - hostIPC: true + - ip: kVf + - ip: sW + - ip: rM + hostPID: true hostUsers: true - hostname: w6S + hostname: E imagePullSecrets: - - name: jUtd - - name: 4HyE5S - - name: cTV + - name: lKwA67wQmuQa + - name: uHBD initContainers: [] - nodeName: biEOYK - nodeSelector: - 4PEnEGV: iaAZkrS - m: GP78P - p3: LwcLZgWD4x - preemptionPolicy: 赬應敪塀ſ缲ťǎ邙Xt*Öơ - priority: 1451453581 - priorityClassName: mR - resourceClaims: - - name: PNC - restartPolicy: 諜ŵ7骕蝍ă%Dz薋űĨ¿,M_T - runtimeClassName: aNuW - schedulerName: 5Sk - schedulingGates: - - name: SN - - name: mM - - name: IOhXovq + nodeName: vYKJQj6 + nodeSelector: {} + preemptionPolicy: DŽ觊1牌Ş閏3壈T怠õȍƈǖ + priorityClassName: 0f0 + restartPolicy: ŸÀƷ2讟Ɠ + runtimeClassName: ZEew + schedulerName: R8H securityContext: - fsGroup: -3507907059458774500 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -7869609674426729000 - runAsNonRoot: true - runAsUser: 638537944699867400 - supplementalGroups: - - -1194734635076507400 - sysctls: - - name: kWMtMKZgRV9K - value: FeSa - serviceAccountName: NVe - setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: P0cezK - terminationGracePeriodSeconds: -7912782538847534000 - tolerations: - - effect: R - key: npvocBvp - operator: nĥ憱勐蝵炱¸矋ȓ[ - tolerationSeconds: 7409148459521107000 - value: dh6H4ND + runAsUser: 65532 + serviceAccountName: 09ijr0mdS1NgJ + setHostnameAsFQDN: true + subdomain: UrA + terminationGracePeriodSeconds: -8722592932569511000 + tolerations: [] topologySpreadConstraints: - labelSelector: matchLabels: - P6nf: ND - c1BhNr: YluE8 - rtFA6: iapOjb - maxSkew: 1600069253 - minDomains: 1529433080 - nodeAffinityPolicy: Ǎ倭赖 - nodeTaintsPolicy: ĵů)w[楰R醡uZɱ噍螽曚l* - topologyKey: mmx0nY - whenUnsatisfiable: Æ Ɂ聠Q - - labelSelector: - matchLabels: - MbFDM: 8xD9 - maxSkew: -959650895 - minDomains: -1666435784 - nodeAffinityPolicy: '>Å洗墠Å×蔪o鍵禮廾' - nodeTaintsPolicy: ~rš煫¤īLǬ纨ʫNŪ吮卼¥ÏȦ - topologyKey: 2PWoF15m - whenUnsatisfiable: Ƈ + G331g0: T19 + Jt: 8KOg + matchLabelKeys: + - X9 + - 5bB + maxSkew: 1128038377 + minDomains: -98836178 + topologyKey: j8NNYFTR + whenUnsatisfiable: ǼR嚯HyÇ陂m&屗ɇĤ螭ɧǕ胾縳D + - labelSelector: {} + maxSkew: -1392131714 + nodeAffinityPolicy: 舜Șđ瑩Ğ鴃\揌ƒo7Łŷô + nodeTaintsPolicy: Ąʟ/鍽A瘠Iʥ淧BĜ,Ü杵姽4u + topologyKey: T6H + whenUnsatisfiable: 禳鯋龖鱯筁İ赠ƄǪ|杮ɗ吻űU纕聓z序 volumes: - name: kube-api-access projected: @@ -31064,8 +27739,6 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: "" - - name: MlOcWr --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -31073,7 +27746,8 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - R: x + 8u: ClGJRRP + QqIpNPP: SI09hz helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" @@ -31081,42 +27755,58 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: k + app.kubernetes.io/name: TCq app.kubernetes.io/version: v25.1.4 - dcuPV: Fy helm.sh/chart: operator-25.1.4 - name: 1316QiC-crd-job + name: Y7Y8-crd-job + namespace: default +-- testdata/case-016.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 5aFk + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + pSTEUjYKreNw: j4onXF + name: f0FlDsNL namespace: default --- testdata/case-036.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: oVpv6Jbiu + apiVersion: pMnSnB87 health: - healthProbeBindAddress: rM - kind: "4" + healthProbeBindAddress: kpX + kind: 28gpbXzOZ leaderElection: leaderElect: true - resourceName: 8ABD2 + resourceName: wYA8UN metrics: - bindAddress: aptE + bindAddress: "n" webhook: - port: 265 + port: 163 kind: ConfigMap metadata: annotations: - UUhlBGZ: "4" - klq64tXT: lQvkvI + pl05VC: F creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Z4N6WbZ + app.kubernetes.io/name: 5aFk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: a-config + pSTEUjYKreNw: j4onXF + name: f0FlDsNL-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -31124,16 +27814,16 @@ apiVersion: v1 kind: Service metadata: annotations: - UUhlBGZ: "4" - klq64tXT: lQvkvI + pl05VC: F creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Z4N6WbZ + app.kubernetes.io/name: 5aFk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: a-metrics-service + pSTEUjYKreNw: j4onXF + name: f0FlDsNL-metrics-service namespace: default spec: ports: @@ -31142,388 +27832,120 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Z4N6WbZ + app.kubernetes.io/name: 5aFk --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - UUhlBGZ: "4" - klq64tXT: lQvkvI + pl05VC: F creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Z4N6WbZ + app.kubernetes.io/name: 5aFk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: a + pSTEUjYKreNw: j4onXF + name: f0FlDsNL namespace: default spec: - replicas: 501079035 + replicas: 1899554555 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Z4N6WbZ + app.kubernetes.io/name: 5aFk strategy: - rollingUpdate: - maxSurge: 2067590918 - maxUnavailable: 1947322773 - type: 8t哨F + type: RollingUpdate template: metadata: - annotations: - 2obh6r: YJnq - REz: "91" - q1: hpRYOkCjD + annotations: {} creationTimestamp: null labels: - 8YshAI6y: MbG3NXx - PWOkXnXZ: jBxq app.kubernetes.io/instance: operator - app.kubernetes.io/name: Z4N6WbZ - tAL: H977c3z + app.kubernetes.io/name: 5aFk spec: - activeDeadlineSeconds: 8869812654614202000 + activeDeadlineSeconds: -5556799280309865000 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - - preference: {} - weight: 473439767 - preference: - matchExpressions: - - key: "027" - operator: 苒&FɅ-UĖ - values: - - gPn9 - - hvowqqp8Q9 matchFields: - - key: NCl - operator: ',+ȰB诐Uŭ怍睞ʧ澣0樐阿ijȓ娱Ȥ' - values: - - NgJ8z - - NeO - - Qkl - - key: Pb - operator: ȅ< - values: - - Dbq0DDR - - wVYD8l9l - weight: -396603968 - - preference: - matchExpressions: - - key: LhzwY - operator: "" - values: - - FrO - - "" - - 0m - weight: -1154736427 + - key: 9anc + operator: ±蛖ɚȩ糪IJG=Dž羭{ + weight: -621007885 + - preference: {} + weight: 2044903865 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - - key: gF0 - operator: Ɉ涍ʃŽ杔+ - values: - - YkDQ - - m - - gMKIh - - key: UDt50o - operator: 篲Ǟ僌 - values: - - htXPClZ + - key: luQIk + operator: z鎑霷#a槛仠#ɩ昗铩儮沩Ȓj matchFields: - - key: MUyQ - operator: 雸槾ô慾鹸x籢 - values: - - mYLc7FjPB - - OtkQaV5lk + - key: 3gu + operator: Ý:齰磄瀒 + - key: Ny3s + operator: 虞7埃坨ĮÃŚ鋤鿭ǟĞ蘶 + - key: gnLOKK + operator: e鄷 + - {} podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: {} - matchLabelKeys: - - Bq2lGSc - - "11" - namespaceSelector: - matchLabels: - 61F: WZbVUH - SX9la: Xi - namespaces: - - pZw - - 7PgdMsO7 - topologyKey: KjgQ6MCYvet - weight: 1896493716 - podAffinityTerm: labelSelector: matchLabels: - EoK5b: 0EsO - cAa: 73CDGl5Q28E - hC: QEb - matchLabelKeys: - - ycS1kTps - - jUS - mismatchLabelKeys: - - bb9r7UB + "": 7uhVpN4cQ + UntIH5I: tb97Lt8Tc + Y0HG: liwfUwa namespaceSelector: matchExpressions: - - key: YpiUL - operator: 蕩鉝L鏲傳渋ʅ齸IJH镱鎓Tŝ飿&¶ʁ鞏 - - key: "" - operator: 鯊骟蚎m - values: - - cE - - key: D3S7t - operator: ĐŝÃğLJɾ湐\汻M譭ǁ - matchLabels: - "": 3Xd0zLiqw - 1FRkcAxC: i0rmXF - 04GAcO: iR6H - namespaces: - - R - - EM1Pn - topologyKey: WS - weight: -961265894 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - FBAH: nP16pV - om: "1" - matchLabelKeys: - - HnT - mismatchLabelKeys: - - uGMMd9 - namespaceSelector: - matchExpressions: - - key: 6AXTYUaG - operator: 鯶鳚¢裪hR - - key: "" - operator: 宆E訄蹐÷xł鉁珅9}Ƥ - values: - - Vs - - sP4bxNG8y - - xLJquafHw - - key: 00UA - operator: Ƨ&*ȥ@s躵ʏ0搢0ɯ槃 - values: - - cwC0FTV - matchLabels: - ZsyhZP: "" - namespaces: - - CF2LbLc - topologyKey: vU4qw - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: + - key: SPGie + operator: 8ɟkJȤ + - key: O8Kkv + operator: ʦJŷÃʂȕ*寷乀 + - key: rx + operator: "" + topologyKey: JH7Y + weight: -1966373661 - podAffinityTerm: - labelSelector: - matchExpressions: - - key: mY - operator: 3ȶ臙ʪv腫牐c脎 - values: - - uO3l0fwWh6 - - key: qXVQkeqOR - operator: Ƽ傌ʂ沺F}\]ȃʛ駕Ɇ - values: - - "" - - YLfmiZ - - yROx - - key: kHA - operator: '%襔zʠdm§"EgȰ雑$Ħ¥' - values: - - FDY4eRpq matchLabelKeys: - - I8iTy - - PnzjSV4y - - bwsYsGvz - mismatchLabelKeys: - - E - - I5rAEn8oew4 - namespaceSelector: - matchExpressions: - - key: BTUtFa7 - operator: àʚÍ/Ƣ5{ʃ犕#ʆ湏圄gʐ耆 - values: - - vIs - - key: 2LDI - operator: ņB/ȉś镛ĸ - values: - - fL1DgO + - LJGdA2C + - VvD0D8 namespaces: - - Oxrg - - t - topologyKey: 6r - weight: -1087546313 + - wI7PWxOCE + - fJKpEUH + - YXjD + topologyKey: 7cFh + weight: -129313368 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: - labelSelector: - matchExpressions: - - key: x9B1Nd - operator: ÈĖJ歱Ȋ詮Ƒ卵ʣŐsŹğ - values: - - jRB - - 0oZcYk - - key: sB - operator: 忞yG°~ƎʠA鱃很ō馥ɾ - values: - - wm - - 8GaQE - - key: ek1po - operator: ^1'跢2« - values: - - "" - matchLabels: - U: cJ - g0iGC2x: FPv4Mw - mHv: ESsM - mismatchLabelKeys: - - MWJzXK - - 69e namespaceSelector: matchExpressions: - - key: lyRh - operator: ōý - values: - - 6W9ZKTa - - hdT3hZJ6 - - iuZv5jv - - key: a27D - operator: Ɇ鰖揋żq狮ɦʢ苴ǰ/ + - key: f + operator: C玳kuƞkP恻q隆孼Ķo塹橨匢耟 values: - - 3xTbG8dHf - - key: KHGn0pZ - operator: 3ŸʩÕ£曁Ƞ闷撐磢ɤQ,Z榉W栚奸 + - jH + - key: NAFBScy + operator: »6ĕmȏȿ#)磓r蝃蘕畖×h齁ś + - key: 1D + operator: Ħő matchLabels: - izmMr: 4Syj - topologyKey: TMvGjb - weight: -31298358 + r1j0: d5vuu + topologyKey: dZ + weight: 1727718816 - podAffinityTerm: - labelSelector: - matchExpressions: - - key: dqcW4 - operator: ǂƢ二匪 - values: - - xJ - - y7 - - key: Svv1 - operator: 麖寁ÆK閉Ǹ, - key: 0Xbv0 - operator: 掠LJ禐Ǩ廧约睚駶Dz\ - tolerationSeconds: -296008987596813900 - value: fhUXyNYOFl - - effect: '>ZƩj氘瘺' - key: WLMNz - operator: '`>]Ȯ峤' - tolerationSeconds: -696994963583694200 - value: Cyq9 - - effect: 2Ċ - key: jh - operator: 澀"_Ƹ53 - tolerationSeconds: 8904355430000706000 - value: dXjh - topologySpreadConstraints: - - labelSelector: {} - matchLabelKeys: - - 4SBggR - - W2 - - xucqr1 - maxSkew: -917627070 - minDomains: 44463309 - nodeAffinityPolicy: "" - nodeTaintsPolicy: pDf笫Aß悫ȼ茷w - topologyKey: dnKKLwixm - whenUnsatisfiable: pb>ʯ僙ȴō - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace - - name: "" + m2Z8Z: wRw + name: DX7O-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: - annotations: - L6XT: "9" + annotations: {} creationTimestamp: null labels: - D0BN9: JZC8K app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 2rbFmR + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - miGH: N7Ko - name: A8UY-metrics-monitor + m2Z8Z: wRw + name: DX7O-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: DX7O-default +subjects: +- kind: ServiceAccount + name: pHzNPjb namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - D0BN9: JZC8K - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 2rbFmR - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - miGH: N7Ko --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: - annotations: - CBAVn: vqsp8U3m - gy: whGyY0khAMsJ - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" + annotations: {} creationTimestamp: null labels: - D0BN9: JZC8K app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 2rbFmR + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - miGH: N7Ko - name: tFtWKgQ-crd-job + m2Z8Z: wRw + name: DX7O-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: DX7O-additional-controllers-default +subjects: +- kind: ServiceAccount + name: pHzNPjb namespace: default --- testdata/case-038.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - 1U4k: i7 - U8TFHg6A: OLyvSN + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: dgtMSpw - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: kN - health: - healthProbeBindAddress: Mmg1mhk7P - kind: L2ytr9FI0 - leaderElection: - leaderElect: false - resourceName: iUgGbF1x - metrics: - bindAddress: FrgVf - webhook: - port: 160 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-default -rules: -- apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers - verbs: - - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas/status - - schemas/status - - topics/status - - users/status - verbs: - - get - - patch - - update -- apiGroups: - - cluster.redpanda.com - resources: - - schemas - - topics - - users - verbs: - - get - - list - - patch - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io - resources: - - clusterrolebindings - - clusterroles - verbs: - - create - - delete - - get - - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-additional-controllers-default -rules: -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - patch -- apiGroups: - - "" - resources: - - configmaps - - nodes - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - delete - - get - - list - - patch - - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - configmaps - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - update - - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: fjEnE-default -subjects: -- kind: ServiceAccount - name: dgtMSpw - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: fjEnE-additional-controllers-default -subjects: -- kind: ServiceAccount - name: dgtMSpw - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-election-role + m2Z8Z: wRw + name: DX7O-election-role namespace: default rules: - apiGroups: @@ -32658,12 +28436,12 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE + m2Z8Z: wRw + name: DX7O namespace: default rules: - apiGroups: @@ -32831,12 +28609,12 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-additional-controllers + m2Z8Z: wRw + name: DX7O-additional-controllers namespace: default rules: - apiGroups: @@ -32928,12 +28706,12 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-rpk-bundle + m2Z8Z: wRw + name: DX7O-rpk-bundle namespace: default rules: - apiGroups: @@ -32963,20 +28741,20 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-election-role + m2Z8Z: wRw + name: DX7O-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: fjEnE-election-role + name: DX7O-election-role subjects: - kind: ServiceAccount - name: dgtMSpw + name: pHzNPjb namespace: default --- # Source: operator/templates/entry-point.yaml @@ -32988,20 +28766,20 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE + m2Z8Z: wRw + name: DX7O namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: fjEnE + name: DX7O subjects: - kind: ServiceAccount - name: dgtMSpw + name: pHzNPjb namespace: default --- # Source: operator/templates/entry-point.yaml @@ -33013,20 +28791,20 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-additional-controllers + m2Z8Z: wRw + name: DX7O-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: fjEnE-additional-controllers + name: DX7O-additional-controllers subjects: - kind: ServiceAccount - name: dgtMSpw + name: pHzNPjb namespace: default --- # Source: operator/templates/entry-point.yaml @@ -33038,20 +28816,20 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-rpk-bundle + m2Z8Z: wRw + name: DX7O-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: fjEnE-rpk-bundle + name: DX7O-rpk-bundle subjects: - kind: ServiceAccount - name: dgtMSpw + name: pHzNPjb namespace: default --- # Source: operator/templates/entry-point.yaml @@ -33063,12 +28841,12 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE-metrics-service + m2Z8Z: wRw + name: DX7O-metrics-service namespace: default spec: ports: @@ -33077,7 +28855,7 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 @@ -33088,167 +28866,35 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: fjEnE + m2Z8Z: wRw + name: DX7O namespace: default spec: - replicas: 1948743687 + replicas: 261912120 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 strategy: - rollingUpdate: - maxSurge: 11170225 - maxUnavailable: 805692477 - type: ɴsɺ)灦C油ɨT + type: ʛ淶 template: metadata: annotations: - W: A7ZVK88 - e: f8Tjdvbo + VpV8Qi: s00s creationTimestamp: null labels: - O: SHr5FXhm - RBYx5: 9lXw + PngjtPyl: ykFXfD + SABt6OZHhu: d app.kubernetes.io/instance: operator - app.kubernetes.io/name: RYuL - yEH: Yi58lHOq + app.kubernetes.io/name: NlE3orKsq9 + krDSTkt0Cp: fmEynMv3y spec: - activeDeadlineSeconds: -323868613046808200 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: {} - weight: -168636196 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: {} - matchLabelKeys: - - "5" - mismatchLabelKeys: - - ieCeevI - - BhKPo - - xKNT - namespaceSelector: - matchExpressions: - - key: 4OeUuVVg - operator: Ē%ǘȩ讦忈ìĦ,鸉俦繪7諙痍ĭ緷羾 - values: - - EC3 - - key: CO0 - operator: "" - values: - - P - - key: 3aheCb5s - operator: 蔡 - values: - - luSv2fPCNw - namespaces: - - vEdz - - lHHZ - topologyKey: T - weight: -427628383 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: ye4BK - operator: 务桇讞箜ɼ - values: - - Rd1 - - JEyAJ - matchLabels: - C0vYvd: NjPCyeU - Jp: 9LOOBunPQ - matchLabelKeys: - - hwtTSZkypS - - "71" - mismatchLabelKeys: - - La3 - namespaceSelector: - matchExpressions: - - key: yB7vq - operator: ǟ鴦-ǩȬɱʓ - - key: POaXO5hem - operator: Ǘ沂ɖ塶 - values: - - IN - - oiAR7Y - - key: "" - operator: Ɖ婬ŧƥ2麍t - values: - - vdMYY - namespaces: - - kIEFUkpLfMg - - 8DK - topologyKey: 6t243f - weight: 415484078 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: SSyaI - operator: 彇_ŭ@,鵛K飩ʮȤi= - values: - - rpEDP - - 17BvSx - matchLabels: - Al33: rLkIL - n1EHw: 9i - matchLabelKeys: - - 2ub - - s - mismatchLabelKeys: - - BOWfT - namespaceSelector: {} - topologyKey: 8Dl - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: 8IBUB - operator: VǶ_貘ʊ - values: - - H800O - - LGbdIMq - - SB4lC0adX - matchLabels: - acJB: Mknp - xIA2: EeCKvqio - mismatchLabelKeys: - - vk0gYVm - - 53B - - o - namespaceSelector: - matchExpressions: - - key: iD8HB1 - operator: 憠éUB%繮町Tk菐辁銤µ墠罐慁榀ȼ - values: - - Njuo24byEvJ7 - - 4Y6WJ3 - - Ko - - key: TCGN249 - operator: ƾȿSȧ1毮ɓɸ[DŽɘ莧ǎ - values: - - XO5HfVBJ - - X9cyy3 - - vr4DBm - - key: 6zfsC - operator: 煴YW辿誕岷^ǣĀY - values: - - T8YF9 - matchLabels: - ssT: BAHA7VIV9aim - namespaces: - - lAJRC - topologyKey: O1UQ - automountServiceAccountToken: false + activeDeadlineSeconds: -5900296573348537000 + automountServiceAccountToken: true containers: - args: - --health-probe-bind-address=:8081 @@ -33256,27 +28902,24 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=WFheHptfh - - --configurator-tag=DV - - --configurator-base-image=CABd5 - - E9Eu - - EU - - nE + - --log-level=BpnfO + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: CABd5:DV - imagePullPolicy: Always + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 488 + failureThreshold: 691 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 89 - periodSeconds: 11 - successThreshold: 541 - terminationGracePeriodSeconds: 738 - timeoutSeconds: 588 + initialDelaySeconds: 45 + periodSeconds: 987 + successThreshold: 442 + terminationGracePeriodSeconds: 832 + timeoutSeconds: 499 name: manager ports: - containerPort: 9443 @@ -33286,22 +28929,16 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 439 + failureThreshold: 672 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 615 - periodSeconds: 812 - successThreshold: 91 - terminationGracePeriodSeconds: 631 - timeoutSeconds: 876 - resources: - limits: - cpu: "818" - memory: "212" - requests: - cpu: "782" - memory: "693" + initialDelaySeconds: 355 + periodSeconds: 145 + successThreshold: 987 + terminationGracePeriodSeconds: 87 + timeoutSeconds: 446 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -33310,138 +28947,109 @@ spec: readOnly: true dnsConfig: nameservers: - - KNDuF - - GX + - z4 + - 0add + - qpiw9 options: - - name: QDR34 - value: "" + - name: g + value: Zj + - name: TLS2q4 + value: IWZ searches: - - j82BCHy - - JNHAL - dnsPolicy: 市Ę輭R鑍膙孢ɑƆȂɞ¬畛蠣 - enableServiceLinks: true + - C + - ZWnAi + dnsPolicy: xX鏎öH ephemeralContainers: null - hostAliases: - - hostnames: - - yafcI9 - - V5 - ip: OgwzuyQ - - ip: "49" - - hostnames: - - oB - ip: hJ hostIPC: true hostNetwork: true - hostPID: true - hostUsers: false - hostname: t1 + hostUsers: true + hostname: 6s5f imagePullSecrets: - - name: dWgsEJ3vFfP0B - - name: Go - - name: HfbLZ + - name: fLk6bKK6 + - name: UFjlI initContainers: [] + nodeName: QFWExG nodeSelector: - "": 5fAb9XGF - Vhns: WI4HRq - loM6r39: r856dt0 - preemptionPolicy: 咫橫³赤£ - priority: 1908962750 - priorityClassName: IozrUiO5aF - resourceClaims: - - name: 9F4BZ7 - restartPolicy: mn©ɗĭtdzp/菕J~ó=ǦƜ崑ɹ - runtimeClassName: Hy - schedulerName: iGkYIuitukSc - schedulingGates: - - name: 6bMwonn5 - - name: cdA50 + Ds0bfBawR: M + T: v7 + preemptionPolicy: Ǹ + priority: 38583698 + priorityClassName: M5hx9L + restartPolicy: ʙ瓮臎#ɤy鿩ǔʘ怹騙諙诏ʥ^侾 + runtimeClassName: xoq1Z + schedulerName: 5ZjpF2 securityContext: - fsGroup: 549293409168028100 + fsGroup: 4202070741260157000 fsGroupChangePolicy: Always - runAsGroup: 149530069440945380 + runAsGroup: 9013120776933110000 runAsNonRoot: true - runAsUser: -7733942355662636000 - supplementalGroups: - - -1702888372477800200 - - 9088690877236180000 - - 4815250443616439000 + runAsUser: 8904388612794458000 sysctls: - - name: AG4jfFyY - value: C - serviceAccountName: uXc - setHostnameAsFQDN: false + - name: u2tM1pwj + value: r3fX5 + - name: R3ebj0 + value: J6V + - name: eyqaE + value: 13RX + serviceAccountName: 6Q + setHostnameAsFQDN: true shareProcessNamespace: true - subdomain: KIrzXPX - terminationGracePeriodSeconds: 748025904004594300 + subdomain: dKcT7J + terminationGracePeriodSeconds: 958157690550273200 tolerations: - - effect: W - key: gIbOc - operator: 8戭X墘 - tolerationSeconds: -324497504774729900 - value: rMHpw3dV + - effect: 鯲ǥzNY=ĩ7綣ǂǩƜ陫Ǹ枢橭 + key: JcNTJI + operator: 璎謉蕵jH`裺庣瀝柎Ɇ凐ȕ + tolerationSeconds: -6474703231875668000 + value: x3srAmb + - effect: m燔o;¦ + key: 1urJ2 + operator: w茱ŲŲ崻Ə瑕ĩƗʪÒW^ + value: mpiVil6 + - effect: Ə誽繏枹娟 + key: QAlBr + operator: a垐擝榟mbŚƫ + tolerationSeconds: -6539370764697410000 + value: oKm5I topologySpreadConstraints: + - labelSelector: {} + maxSkew: -2056495085 + minDomains: 578714113 + nodeAffinityPolicy: +ɚȽ焑ȸǺǚ左ɶC麷~Ǜɻ4魶垄Ö + nodeTaintsPolicy: ' 銽õ揉糹灨7ɣsGȌʅ灨Ȓȣ該Ɯ娤醆' + topologyKey: vO06mYrm + whenUnsatisfiable: 滕枔ʼn+三H0g¤誚爡竩拺ʌ嵼Ƶ + - maxSkew: -1573120037 + nodeAffinityPolicy: Š + nodeTaintsPolicy: 炥ÁFhóëB2re贈( + topologyKey: dV0wh8 + whenUnsatisfiable: kƆC]舻欴坅灊摬ɐ嘤ȩ拐錹 - labelSelector: matchExpressions: - - key: eC6qVOtUe - operator: ȵ铯恢"ɛ塑稁ǧɌ(务繤ŀɎ幃Ȍ愗ij - values: - - 12S7AP - - FcS - - key: R - operator: Ȥķ瀱l展ʨp遂@聜銚偘燖Đɯ - values: - - JFgA - - "" - - lrLHv8 - - key: f3O + - key: rPA7uc47l operator: "" values: - - 6VRfde - - "" - - eBwYR - matchLabels: - lUKdod8ocrz: pAm - ssS: agAmqmY - matchLabelKeys: - - L1wK5ak - maxSkew: -1622516497 - minDomains: -560845306 - nodeAffinityPolicy: ŽV0賠#吳Ť焜N - nodeTaintsPolicy: 桵ÖűVG 堫š陨 - topologyKey: iKqwWyz - whenUnsatisfiable: 嘫`拈噒 嶝 - - labelSelector: - matchExpressions: - - key: VfS - operator: ǒG?捾 + - LXzkh + - erSrq + - key: 4rKY + operator: zr瑧}ȃ7h鰟QɒʝŀȀĢ咠Ɓ袌 + - key: Io5 + operator: Ť{Ő1怴ȲĦT濤=1咴bdž跘| values: - - qt9n5hh - - key: oTjx0BGx - operator: ƈxŪ擡熪MƺɌ伴B3v}摟´B}Ě> - matchLabels: - Mgg9aWK: bg - SxX1: boiP - v5zAQyQ1: VPHVucu - maxSkew: -118728404 - minDomains: 653946276 - nodeAffinityPolicy: 櫋MĆ»敂ę+槖O9媯ȵY閐ɩ - nodeTaintsPolicy: ı§Ƃi4à - topologyKey: bst2 - whenUnsatisfiable: 謄菴桊°ŻÎʢþAg*[ - - labelSelector: + - m + - B9dGMNfq + - O8wzB matchLabels: - HJ6Q: "9" - qNEL: 8naHd - qj2B: LQ7 + 6l5: 65a8U + RWurD: iv9 + cpA: "" matchLabelKeys: - - 0B40 - - ukp7wB2 - maxSkew: 495541948 - minDomains: 1472201829 - nodeAffinityPolicy: L8岀¸秿Źʕũ - nodeTaintsPolicy: V - topologyKey: UXd5TFx5U - whenUnsatisfiable: Ɋʆ彸qɑ漾9毲穻 õ<ƣ^"Ĥ + - LnO + maxSkew: -1850914784 + minDomains: 629985372 + nodeTaintsPolicy: dƦć苆n鱿鞵a#úĆ + topologyKey: WYxuG1Q + whenUnsatisfiable: ŻŗƳ<迱ȪĆF梩抮俕鬷 volumes: - name: kube-api-access projected: @@ -33461,9 +29069,45 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: anjrvNnG - - name: w - - name: y8U2FY2 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: NlE3orKsq9 + app.kubernetes.io/version: v25.1.4 + bKX: d + helm.sh/chart: operator-25.1.4 + m2Z8Z: wRw + name: DX7O-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: NlE3orKsq9 + app.kubernetes.io/version: v25.1.4 + bKX: d + helm.sh/chart: operator-25.1.4 + m2Z8Z: wRw --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -33471,8 +29115,6 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - 1U4k: i7 - U8TFHg6A: OLyvSN helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" @@ -33480,1035 +29122,331 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RYuL + app.kubernetes.io/name: NlE3orKsq9 app.kubernetes.io/version: v25.1.4 + bKX: d helm.sh/chart: operator-25.1.4 - oMSwsE1: VOZ - x: 4Xx1lbe - name: dgtMSpw-crd-job + m2Z8Z: wRw + name: pHzNPjb-crd-job + namespace: default +-- testdata/case-018.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "5" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: x8K24mCZYsnh namespace: default --- testdata/case-039.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: Uf5i2FYm + apiVersion: "" health: - healthProbeBindAddress: FwG - kind: 5HAJrdEh + healthProbeBindAddress: :8081 + kind: fiYym leaderElection: leaderElect: true - resourceName: bD4EKsHTEP + resourceName: xpFTAT6I metrics: - bindAddress: ogGdTWj + bindAddress: 127.0.0.1:8080 webhook: - port: 153 + port: 269 kind: ConfigMap metadata: annotations: - kSC: ZSJ + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - ZPcQPMKo: 8du app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "4" + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 - chNK6Zz: 5Ii helm.sh/chart: operator-25.1.4 - name: n9s9M-config + name: x8K24mCZYsnh-config namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - kSC: ZSJ + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - ZPcQPMKo: 8du app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "4" + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 - chNK6Zz: 5Ii helm.sh/chart: operator-25.1.4 - name: n9s9M-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: + name: x8K24mCZYsnh-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci + creationTimestamp: null + labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: "4" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "5" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: x8K24mCZYsnh-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - kSC: ZSJ + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - ZPcQPMKo: 8du app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "4" + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 - chNK6Zz: 5Ii helm.sh/chart: operator-25.1.4 - name: n9s9M - namespace: default -spec: - replicas: -1073260928 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: "4" - strategy: - rollingUpdate: - maxSurge: 16520252 - maxUnavailable: 1601923532 - type: '*ñDBȹȆ=鶫=:S(a_' - template: - metadata: - annotations: - SvFP: 986w - h: YGsQd8JJ5 - nWH: jAiX6oRC - qeyHynV: XYh - creationTimestamp: null - labels: - CCOM8: YXWu - T3dW: hL1iR - app.kubernetes.io/instance: operator - app.kubernetes.io/name: "4" - spec: - activeDeadlineSeconds: 9094660533002612000 - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: oQ - operator: ʏē£tN狖ȠEǏɵ - values: - - 0wDeDy - - key: jz0 - operator: Ń胹CM杌}筼鋢0Nv痱ȅ-ģ - values: - - r9f - - key: dRf - operator: 蕡S9帼Ƶ.萫` - values: - - 18v1yOSEIKRL - - lEaxowe - - iToE - matchLabels: - DmnH7h0Q: 9jqQAC - q8V9k: Uy6c8 - matchLabelKeys: - - I - mismatchLabelKeys: - - MHn - - bFg - - DsNcqV - namespaceSelector: - matchExpressions: - - key: 1Lo6KX - operator: ʓÑGLJ毪MLJǒ蛺2 - values: - - VwKhYqxC - - GhQSh - - key: bYK85 - operator: '@7''ɷ昮貒樓ʜóLJ励' - namespaces: - - KdtSVMO - - LAZQ - - yYIJ - topologyKey: RLkeP - weight: 97631015 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: "8" - operator: ɋ}7[K壳ƧŮȿx ś逵ƅ - values: - - "" - - YmviHD - matchLabelKeys: - - i - - Qb - - xqbuKcACcH - mismatchLabelKeys: - - nh4 - - 8KYrGw - - twd - namespaceSelector: - matchExpressions: - - key: oD3l - operator: k - - key: U - operator: 蓜踩險 - values: - - MTydnSrP - - KSCeZhBvoQp - - 3U - - key: dCY9SNL - operator: 欧ï婓洳鿝 - values: - - j2dBke3 - matchLabels: - GvyAB: Ll7 - iTUAICRw: QMEL - ujmhj: YvEcrp - namespaces: - - 40kE1rx - - yvx - - IYxCc - topologyKey: bqFqFM6 - weight: 671353099 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: YoGDq - operator: ʀZxb溇Ǭ9韆赗ǨZ$ī - values: - - JKV - - key: PYZ62XSO - operator: ƢNɒ猖ʤ鹘 - values: - - "" - - N0gjVZK - - key: eGB - operator: 芐œȏȩɍ峦xɐ悈傿ÈĆ - matchLabels: - Bd1Qov: OU - CYRJ7N: aLBCx - U5e0RWo: I25 - mismatchLabelKeys: - - a - - "" - - LKL - namespaceSelector: - matchLabels: - 6p: 7jZV8CS6oF4hq - namespaces: - - ush5M92P6 - - fX8E - topologyKey: PQ0sX - - labelSelector: - matchLabels: - 4esz: qUjyBpn - Or: BlVjbOo - qsko: InsWb - matchLabelKeys: - - x7Tn - - j851 - namespaceSelector: - matchExpressions: - - key: wwArLRTh6 - operator: 锾 - namespaces: - - bwgDA5 - topologyKey: x0OnRz - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: uI0QK - operator: "" - values: - - Dr4YQNBkGV - - key: 6Ge - operator: ƃKk - matchLabelKeys: - - ZzH7 - - Yh - mismatchLabelKeys: - - 7O - - dwhnHV - - P - namespaceSelector: - matchExpressions: - - key: melMw2 - operator: "" - values: - - nwRA172K - namespaces: - - GlhLC3 - topologyKey: wAqQGDcS - - labelSelector: - matchExpressions: - - key: Txy - operator: 炆Ȭɻ - values: - - 7Cb8xYGEbt - - gy7yUJJb - - GHwWv - - key: V7uhcb - operator: ɬ逞NJj嘺ɼ[Ȳ鞁Ǔ]Ƴ矒 - values: - - Cc - - nrw - - WdB - matchLabels: - TjvJ: TYjT - iqz7: "" - uS7: zuQmxIrr - matchLabelKeys: - - 1Rn8uClR1m - - nH1 - - GSlcG - mismatchLabelKeys: - - 1AP9aqXtgM - namespaceSelector: - matchExpressions: - - key: PSZX5kh2 - operator: Ħį疻Ł詊[Z璎 - values: - - BKzx9B - - bxuxCjmU3 - - 40Jd9 - matchLabels: - Dapj3H5H: 2lT - KtjpiW: QVz5 - i2qgTbX: 6TpD - namespaces: - - lhAY - topologyKey: Mq - automountServiceAccountToken: true - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level= - - --configurator-tag=95V5Gm - - --configurator-base-image=h - - JFs - - nNwqWRT - - ScYwDYt - command: - - /manager - env: [] - image: h:95V5Gm - imagePullPolicy: Never - livenessProbe: - failureThreshold: 462 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 702 - periodSeconds: 45 - successThreshold: 922 - terminationGracePeriodSeconds: 272 - timeoutSeconds: 324 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 902 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 800 - periodSeconds: 924 - successThreshold: 78 - terminationGracePeriodSeconds: 731 - timeoutSeconds: 97 - resources: - limits: - cpu: "639" - memory: "100" - requests: - cpu: "607" - memory: "462" - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - dnsConfig: - searches: - - 1M9d - - ccg - - K8U - dnsPolicy: ?掿~儓髤ńƅǙǟ璍集彗ȃQƏ! - enableServiceLinks: true - ephemeralContainers: null - hostAliases: - - hostnames: - - g3hU5 - - 60OmY - - 6nM - ip: 0uSBO - - hostnames: - - RkcCRmH - - d4aj - - 5yemLpNkv - ip: NkeTCJ - - hostnames: - - Bx6dB - ip: NyW6uH - hostIPC: true - hostNetwork: true - hostUsers: false - hostname: DErH4 - imagePullSecrets: - - name: KmDljL - - name: cJ2n - initContainers: [] - nodeName: tWp - nodeSelector: - 5JLdWw5: I - Bg6pN0ViTM: gLtqR - L2teX: zjC - preemptionPolicy: "" - priority: -1810648038 - priorityClassName: 8L8 - readinessGates: - - conditionType: 鰄愳JhǕ饁枪 - resourceClaims: - - name: MAqE - restartPolicy: 哬ĩQYč.餺爒璛<磨dž璝|ſþŎ鼭罔 - runtimeClassName: TzUN1J - schedulerName: KP6R - schedulingGates: - - name: kS4M9 - - name: nHMZnD - - name: 1cM - securityContext: - fsGroup: 4524591162068226600 - fsGroupChangePolicy: Always - runAsGroup: 9053675502780789000 - runAsNonRoot: false - runAsUser: 2482349962653319700 - supplementalGroups: - - -1464877308109779200 - - -4104680386084361700 - serviceAccountName: 7A7LfLVaSgL - setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: XPWf - terminationGracePeriodSeconds: -5124946022502445000 - tolerations: - - effect: $ - key: fb - operator: -趽d:ʧ|橍 妿{贻 - tolerationSeconds: 27395074208985584 - value: SqBpohLGB - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: f9tKRk - operator: 痳ÿ籋t玄 - - key: o - operator: 窧òÇY篂 - values: - - l - matchLabelKeys: - - Wf00sxS706 - - G6eXtZX - - Gw - maxSkew: -328139720 - minDomains: 1800306710 - nodeAffinityPolicy: ņm饉Eɶ辽ű蟞®s烶"骅啯妍Ȃµ柋裩 - nodeTaintsPolicy: <鯷ȫɜ橼,Fʄ8<殤NJĆ伻ʤ - topologyKey: O9NaFa - whenUnsatisfiable: 缌睩氜栢ʦ是LJ廬茞^Žȟ塖 - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace - - name: A2B8 - - name: G - - name: ZtPPBy + name: x8K24mCZYsnh-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - EMLMp9: eWUNFToc - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - psVEMcLU: IjAVEkU9t - uucv5x: 52Q + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - ZPcQPMKo: 8du app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "4" + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 - chNK6Zz: 5Ii helm.sh/chart: operator-25.1.4 - name: 1s-crd-job + name: x8K24mCZYsnh-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: x8K24mCZYsnh-default +subjects: +- kind: ServiceAccount + name: x8K24mCZYsnh namespace: default --- testdata/case-040.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - qKwD7uKV1jG8: 91mmo + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - Vs8tyk3nrH: X app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kam5 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 - c1ch6r: sk7vUnRJ helm.sh/chart: operator-25.1.4 - o7: kFLRHJ8kS - name: rPim + name: x8K24mCZYsnh-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: x8K24mCZYsnh-additional-controllers-default +subjects: +- kind: ServiceAccount + name: x8K24mCZYsnh namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: KaSxMh4aS - health: - healthProbeBindAddress: 0Xm69MBn7OZ - kind: cx6BfL - leaderElection: - leaderElect: false - resourceName: zb8Y - metrics: - bindAddress: IY8 - webhook: - port: 151 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: annotations: - b: QMv9sM6xG + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - Vs8tyk3nrH: X app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kam5 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 - c1ch6r: sk7vUnRJ helm.sh/chart: operator-25.1.4 - o7: kFLRHJ8kS - name: t08KC6rLj4Z-config + name: x8K24mCZYsnh-election-role namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - b: QMv9sM6xG - creationTimestamp: null - labels: - Vs8tyk3nrH: X - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v25.1.4 - c1ch6r: sk7vUnRJ - helm.sh/chart: operator-25.1.4 - o7: kFLRHJ8kS - name: t08KC6rLj4Z-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: kam5 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: - b: QMv9sM6xG - creationTimestamp: null - labels: - Vs8tyk3nrH: X - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v25.1.4 - c1ch6r: sk7vUnRJ - helm.sh/chart: operator-25.1.4 - o7: kFLRHJ8kS - name: t08KC6rLj4Z - namespace: default -spec: - replicas: 216786617 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: kam5 - strategy: - rollingUpdate: - maxSurge: 1636012556 - maxUnavailable: 1075603656 - type: ' VL龶ƔZ鞝ɹƥ桃炧ƪ帯渋ɦĵæı' - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: kam5 - spec: - activeDeadlineSeconds: 251435796122521860 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: mvuO1qg - operator: Ë韔ĵ嫑淴ʡƛ籂úʋ吞v娝 - values: - - NKc4mZ6t - - O7a5gdp - - k7X6es4ud - - key: lNP1vX - operator: ½桢ĿǔBP蜋¾ȃfɢh緽:礞 - matchFields: - - key: BvQzVP - operator: ɳ禽əe榇蘋UĂ誮 - values: - - UUKYLfEL - - key: d4 - operator: ƜQOƽ - - key: 6hWVN - operator: 读?旵 - values: - - oF2bgNp - - 9y1QpF - weight: 942247031 - - preference: - matchExpressions: - - key: ArG - operator: 鸇吰緀橎h/阼p@V沂W兆ƕ犺þ鲲 - - key: ShuPKe52Md - operator: «n蕉džʭ贼W}ʩ - - key: D6PAsnP - operator: ǹiB嘚糘>瀬Q曂ƕǟ - values: - - izE - - hQJ7qgq1v - - eq4QH4 - matchFields: - - key: BKm2WHTR - operator: =Zƹ娤詓[敓Ĩǎ搚k]ƫ夓 - values: - - G82g - - oJCdgIVx - - key: A798q - operator: tʼn8ȅ»^Ʒ - values: - - i - - 3OMO - - T - weight: 1001113333 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: 5TpATc - operator: iP籡,瘂ɚ - values: - - v0DasK - - Vs - - key: "y" - operator: "" - - key: sY - operator: c.í拊DŽ4 - values: - - NxiSfmPJm - - SGIo - matchFields: - - key: cxanC - operator: L镇-謸眵 - - key: M0iif - operator: gʓÃvʠZ琙ćO园ǒWY攬P - values: - - DtKGnVs2HOB - - 8IqfI8 - podAffinity: {} - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: ql7 - operator: 詸o烂牵MĊǸDȢQŬÓ - mismatchLabelKeys: - - ebR - - R2P29a0 - namespaceSelector: - matchExpressions: - - key: 99v4d0 - operator: b鮻e権乍ʦ - values: - - ARoVD - - NU3qFeEGH - - key: IYZ - operator: 褰硺鰛ŏƺʋ - values: - - tOp - - Q5L94evoH - matchLabels: - P5tV: UNH - kCLm: RBZoDi - namespaces: - - 5r78oGv2 - - 1is3xw9 - topologyKey: ily - automountServiceAccountToken: true - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=yGdn - - --configurator-tag=YHoj - - --configurator-base-image=OjO - - krIILz - - "5" - - cS - command: - - /manager - env: [] - image: OjO:YHoj - imagePullPolicy: Never - livenessProbe: - failureThreshold: 531 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 583 - periodSeconds: 222 - successThreshold: 252 - terminationGracePeriodSeconds: 837 - timeoutSeconds: 909 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 749 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 517 - periodSeconds: 24 - successThreshold: 394 - terminationGracePeriodSeconds: 195 - timeoutSeconds: 927 - resources: - limits: - cpu: "827" - memory: "740" - requests: - cpu: "180" - memory: "721" - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - dnsConfig: - nameservers: - - 1n - - C5ma - - lcQh - options: - - name: xZXnM - value: "" - - name: OjsT1tQR01v - value: Hi0 - - name: 9og9 - value: 8y - searches: - - EBCv - - OERh - - XyrGhIZJun - dnsPolicy: 1ƌƐʁ嶖ǜ9 - enableServiceLinks: true - ephemeralContainers: null - hostIPC: true - hostUsers: false - hostname: SIJz - imagePullSecrets: - - name: SYrN - - name: 62nXDB4y - initContainers: [] - nodeName: rEgnkwIW - nodeSelector: - CUxb: fEK - JoPel: b8xxB - MaACPDUKyp: k4fAtIR - preemptionPolicy: ʝ[ɰKǖđ»xŎT襡ğ暶W磂 - priority: 1256576650 - priorityClassName: 6vL - readinessGates: - - conditionType: ûqǩsɳnH繚JƑ5驌ýx¦nYǪU - resourceClaims: - - name: cVAU48a9 - - name: e4r - restartPolicy: Ǔ阾´葚阛C[愴ð邛龒= - runtimeClassName: fwxnLh - schedulerName: J - schedulingGates: - - name: amoH - - name: 6N - securityContext: - fsGroup: -3303406895627459600 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -1458003432895942100 - runAsNonRoot: true - runAsUser: -5536728191982958000 - supplementalGroups: - - -4522827934488287000 - - 3586674186732541000 - - -8562529629626633000 - sysctls: - - name: 7Vxd8P - value: noP2jX - - name: X - value: Q6yMaZdR - serviceAccountName: Ml - setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: Wue - terminationGracePeriodSeconds: 6277362132289052000 - tolerations: - - effect: 粞b<觿愻NɢǷ賡¦:Ƨ聒 - key: BoAOCj1 - tolerationSeconds: 7651949633204226000 - value: oR - - effect: 煸¥n - key: xZUZ9oX - operator: Éƨ伸1K舝 - tolerationSeconds: 8454353132979107000 - value: GseJ - - effect: 鍗ɐ.y恼h瑄 - key: fCbg - operator: 欄.EßȈ骁 - tolerationSeconds: -3695161036555460600 - value: WgeZzwA - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace - - name: AAtLJGf - - name: vCIXV ---- -# Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: - b: QMv9sM6xG - creationTimestamp: null - labels: - Vs8tyk3nrH: X - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v25.1.4 - c1ch6r: sk7vUnRJ - helm.sh/chart: operator-25.1.4 - o7: kFLRHJ8kS - name: t08KC6rLj4Z-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - Vs8tyk3nrH: X - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v25.1.4 - c1ch6r: sk7vUnRJ - helm.sh/chart: operator-25.1.4 - o7: kFLRHJ8kS ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - qKwD7uKV1jG8: 91mmo - creationTimestamp: null - labels: - Vs8tyk3nrH: X - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v25.1.4 - c1ch6r: sk7vUnRJ - helm.sh/chart: operator-25.1.4 - o7: kFLRHJ8kS - name: rPim-crd-job - namespace: default --- testdata/case-041.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: eYU - health: - healthProbeBindAddress: z - kind: RSErp4X - leaderElection: - leaderElect: true - resourceName: Z1mNhQH - metrics: - bindAddress: LT - webhook: - port: 434 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null - labels: - 5M5X: Fi - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: null - creationTimestamp: null - labels: - 5M5X: Fi - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - 5M5X: Fi - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create -- apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - configmaps verbs: - create - delete @@ -34518,42 +29456,16 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com - resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers - verbs: - - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas/status - - schemas/status - - topics/status - - users/status - verbs: - - get - - patch - - update -- apiGroups: - - cluster.redpanda.com + - "" resources: - - schemas - - topics - - users + - events verbs: - - get - - list + - create - patch - - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - clusterrolebindings - - clusterroles + - leases verbs: - create - delete @@ -34565,198 +29477,20 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole +kind: Role metadata: - annotations: {} + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-additional-controllers-default -rules: -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - patch -- apiGroups: - - "" - resources: - - configmaps - - nodes - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - delete - - get - - list - - patch - - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - configmaps - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - update - - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - 5M5X: Fi - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: dLmCJ99UDA-default -subjects: -- kind: ServiceAccount - name: ttC - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - 5M5X: Fi - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: dLmCJ99UDA-additional-controllers-default -subjects: -- kind: ServiceAccount - name: ttC - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - 5M5X: Fi - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-election-role - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - delete - - get - - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - 5M5X: Fi - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA + name: x8K24mCZYsnh namespace: default rules: - apiGroups: @@ -34919,16 +29653,18 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: null + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-additional-controllers + name: x8K24mCZYsnh-additional-controllers namespace: default rules: - apiGroups: @@ -35013,90 +29749,160 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "5" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: x8K24mCZYsnh-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: null + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-election-role + name: x8K24mCZYsnh-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: dLmCJ99UDA-election-role + name: x8K24mCZYsnh-election-role subjects: - kind: ServiceAccount - name: ttC + name: x8K24mCZYsnh namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: null + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA + name: x8K24mCZYsnh namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: dLmCJ99UDA + name: x8K24mCZYsnh subjects: - kind: ServiceAccount - name: ttC + name: x8K24mCZYsnh namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: null + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-additional-controllers + name: x8K24mCZYsnh-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: dLmCJ99UDA-additional-controllers + name: x8K24mCZYsnh-additional-controllers subjects: - kind: ServiceAccount - name: ttC + name: x8K24mCZYsnh + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "5" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: x8K24mCZYsnh-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: x8K24mCZYsnh-rpk-bundle +subjects: +- kind: ServiceAccount + name: x8K24mCZYsnh namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-metrics-service + name: x8K24mCZYsnh-metrics-service namespace: default spec: ports: @@ -35105,274 +29911,46 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA + name: x8K24mCZYsnh namespace: default spec: - replicas: 539215686 + replicas: -1117470466 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" strategy: - rollingUpdate: - maxSurge: 584533562 - maxUnavailable: 287449819 - type: ðfƛ湉 + type: RollingUpdate template: metadata: annotations: - UnIG3mv: Kz - nZr8PzgXXzU: xt2TI + UU: Ih1JV9T5t65 + VBBsKn: k + v: ELoN6W creationTimestamp: null labels: - JzJGu: JCV5O - LTu: vl + Jg: wIR6AIt app.kubernetes.io/instance: operator - app.kubernetes.io/name: ATIdy9 - "n": c9 - u7bSOm: cC8sDS8 + app.kubernetes.io/name: "5" spec: - activeDeadlineSeconds: 343223886725035200 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: HSFMdumsq - operator: Ĕ寋½I伋ɦŢ`帚:憸ʡ+Ǽ - values: - - "" - - iOoBM0 - - key: b1BDK - operator: /Kè菴莄傮ɠ惾ƈE - values: - - 4JviXX - - JsC - weight: -1075886949 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: JZZIrRZMyZMe - operator: ļ炙啤Aɢ無 - values: - - FvkW67BnRq - - key: qmG - operator: 喳ʯ剧ƕ忸-zÙǟ%> - values: - - j2R3M - - hMEU - - 5UaS - matchFields: - - key: ILxOcPKQ - operator: +鹊ÒÇ^ʩȩɇȬɁăű - values: - - 7U - - h1gvP - - key: 00ypQ - operator: 潴dz惁ē敧Ûȩ# - values: - - "" - - key: pI87LE - operator: 权槣ǜɢǪ\{ƶ熫Lj狈ʎ - - matchExpressions: - - key: 8WYuwNs - operator: 糑'Ț黣nI媘ǩK浲隐泹9 - values: - - 0DcE4oN - - fwa - - 9Cc447gm - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: AVC - operator: 傡N臃炌睯掣+扜ȋȇ历Ěģsȇ - - key: qmxKSA2 - operator: j - values: - - dpt4JF - - key: 4VUME - operator: P=踯讃nɦ - values: - - ng7UhGY - - HrCHhobTgn1l - - 4vn - matchLabels: - "": l8T - HHLld: O - cnrqr: P8nZli9 - matchLabelKeys: - - f0bH4 - - jWB7g6 - - L0r8L - namespaceSelector: - matchLabels: - GeFFWOnlvR: oEDoq - topologyKey: mHDqv - weight: -2078847718 - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: VG - operator: 睙梍 - values: - - UFcFApg - - 0HHY5m - - 6F - - key: j - operator: ñ珙Ƙ耨įU - values: - - EarXI2s6 - - key: SmhxyDwjQ - operator: "" - values: - - "" - - QlnRAN - - rV - matchLabels: - BdL3yNDHg: jKrhvg - jRg: kQ - mu0og6: Hu4 - matchLabelKeys: - - Qti - - CB2uQGGTdU - mismatchLabelKeys: - - TKB - namespaceSelector: - matchExpressions: - - key: PyY - operator: 粴 - matchLabels: - a7wOI: VHEKkT - zkP: 6FrE1Q - namespaces: - - wEcnOtMRSR9 - - VXad - - x - topologyKey: a3RwL - weight: 8935598 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: su1 - operator: Ɇɷȣ碧嬞.諭ʭȍiǦ粊ň$ʚ - values: - - Su6wIC4 - - Y0siGq - - key: LI9ex - operator: 筳陌ýW儬+憕贂6<椯Ǻ - values: - - "" - - key: 4Q8H - operator: ʨ瑗ijʬ!%芉aʣvŮ] - values: - - CfbCs - - "" - - zwmrT - matchLabels: - qSGApnD4ip: mQdXTr - matchLabelKeys: - - AyIO - - sM1DxqhXiP - - XCKUbBe - mismatchLabelKeys: - - g - namespaceSelector: {} - namespaces: - - LP5r4ThY - topologyKey: Lcw0hO1 - weight: 1038634642 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: MZ - operator: w纹埩闺4匭玄薙Ɍ6追µ]ɿȞɇÆ貵煘 - values: - - N1a1 - - key: Oga3 - operator: ʭyÝĉž - values: - - xFemY - - KYTuaak - - "" - mismatchLabelKeys: - - "" - - wqAGL - namespaceSelector: - matchLabels: - ISGu: iQbRzEDFp - lACmJKu: ZVjdv13 - namespaces: - - qbcq - - dBhT - - KOlh - topologyKey: "" - weight: -1045387182 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: OPg6ir - operator: f0]o;t - - key: yMp - operator: 儦è侜鸫篞ă - values: - - rVktV - matchLabels: - ThjprgQnQ: OHK3C - mismatchLabelKeys: - - JKPVG0NSVz - - PUeMFvo - - 3lSo - namespaceSelector: - matchExpressions: - - key: 57Z3C - operator: _ƿ騅6Ë紼o將n矌/iĮ州阤ÄǠÊ - values: - - Qr78do8c - namespaces: - - slTFoFbSw - - HCKCKD3T - topologyKey: i - - labelSelector: - matchLabels: - 21CTLF: LYAus - RlnML: "" - matchLabelKeys: - - CvT - - oCw - - pVA37X - namespaceSelector: - matchExpressions: - - key: Jca - operator: 閁ǜVc~(胿Ư - values: - - vmfMfrEWhRX - matchLabels: - qa: BkHd - namespaces: - - V6Bg0bes - - FH - - "" - topologyKey: GUQi4 - automountServiceAccountToken: true + automountServiceAccountToken: false containers: - args: - --health-probe-bind-address=:8081 @@ -35380,25 +29958,25 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=K - - --configurator-tag=X - - --configurator-base-image=Olq - - jq37e + - --log-level=pMbmKX + - --configurator-tag=UVj2te38 + - --configurator-base-image=gSveMOQ8Iaw + - 6gNh command: - /manager env: [] - image: Olq:X + image: gSveMOQ8Iaw:UVj2te38 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 798 + failureThreshold: 375 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 312 - periodSeconds: 14 - successThreshold: 170 - terminationGracePeriodSeconds: 596 - timeoutSeconds: 148 + initialDelaySeconds: 86 + periodSeconds: 833 + successThreshold: 450 + terminationGracePeriodSeconds: 146 + timeoutSeconds: 369 name: manager ports: - containerPort: 9443 @@ -35408,87 +29986,47 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 845 + failureThreshold: 335 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 71 - periodSeconds: 217 - successThreshold: 397 - terminationGracePeriodSeconds: 816 - timeoutSeconds: 444 - resources: - limits: - cpu: "325" - memory: "235" - requests: - cpu: "369" - memory: "494" + initialDelaySeconds: 53 + periodSeconds: 419 + successThreshold: 113 + terminationGracePeriodSeconds: 543 + timeoutSeconds: 999 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - "34" - - 2GXfHq - searches: - - "" - - "" - dnsPolicy: Z管ʯȋ厘ʒĸ趃H爠[ ephemeralContainers: null - hostAliases: - - hostnames: - - q - ip: "4" - hostUsers: true - hostname: jMB imagePullSecrets: - - name: aXkh - - name: 4ud6kgVwv + - name: P0TDZL8he + - name: x3WK4 initContainers: [] - nodeName: okmdY nodeSelector: - Ya: nenKzfYu - hTzjlT: 6endG97tJ - nPRTz: YDua - swBkpYQ: Ot9 - preemptionPolicy: 緀Nj/搜Aʢy尿ĿJ - priority: -876807169 - priorityClassName: stxrwOkC - readinessGates: - - conditionType: ɛ产'夹渳uk/屋ɦ( - - conditionType: 螊j - restartPolicy: ǒ綧LJ(¤閹孊ǚ0磩婀谊笰1$屘 - runtimeClassName: gNJ - schedulerName: 2Zi - schedulingGates: - - name: L + k1PDm6M8S: Av securityContext: - fsGroup: 5651385294292094000 - fsGroupChangePolicy: Always - runAsGroup: -945106715671247200 - runAsNonRoot: false - runAsUser: -8924625094629118000 - supplementalGroups: - - -625871999789495000 - - 5073997621943202000 - - -2582129587677231600 - sysctls: - - name: by - value: tDkLnEzq - serviceAccountName: yNv - setHostnameAsFQDN: false - subdomain: 6Ke2TY3 - terminationGracePeriodSeconds: 7674869702488048000 + runAsUser: 65532 + serviceAccountName: x8K24mCZYsnh + terminationGracePeriodSeconds: 10 tolerations: - - effect: 裥Ǐ[byP罝ș迚!Ȱ - key: ao - operator: ŕ瓹ƖbƟvŃ3"ť'嶮õ§苰f5顗 - tolerationSeconds: 3452689405398166000 - value: uC3s + - effect: F遈魠挢銔ʅu + key: pMn354ce + operator: ʼn鮇ȝǖ玫賰Ĭ%aǞ屩讑=禙賊谥 + value: jBqy9Xc + - effect: 陃dŷF|ɎO琂鹁ƞ哺 + operator: ǁ哐练YǠZ»踳4妼ʂ楃鉓qƽ£蟸´ + tolerationSeconds: -7093685367868430000 + value: lCYrg + - effect: g券貜隑 + key: UAx + operator: Ŋ顴Ƣ)Ƙ饛?ɶ + tolerationSeconds: -4434340529404616700 + value: 12CvQa volumes: - name: kube-api-access projected: @@ -35513,16 +30051,18 @@ spec: apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: - annotations: null + annotations: + bhU: AcTdNUdgDaT + iH: X4s + ieFAk: TxA0xeci creationTimestamp: null labels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: dLmCJ99UDA-metrics-monitor + name: x8K24mCZYsnh-metrics-monitor namespace: default spec: endpoints: @@ -35539,10 +30079,9 @@ spec: - default selector: matchLabels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 --- @@ -35552,51 +30091,65 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - aTQmdweF: E7 helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" creationTimestamp: null labels: - 5M5X: Fi app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/name: "5" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: ttC-crd-job + name: x8K24mCZYsnh-crd-job + namespace: default +-- testdata/case-019.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Fk + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: UHlKDi namespace: default --- testdata/case-042.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: qwcbM + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: - healthProbeBindAddress: 9eBm - kind: GTUKBoasPTOjg + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig leaderElection: - leaderElect: false - resourceName: PnSDJ + leaderElect: true + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: H7lNfCTp2mq + bindAddress: 127.0.0.1:8080 webhook: - port: 344 + port: 9443 kind: ConfigMap metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-config + name: UHlKDi-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -35604,17 +30157,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-metrics-reader + name: UHlKDi-metrics-reader rules: - nonResourceURLs: - /metrics @@ -35626,17 +30179,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-default + name: UHlKDi-default rules: - apiGroups: - authentication.k8s.io @@ -35713,17 +30266,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-additional-controllers-default + name: UHlKDi-additional-controllers-default rules: - apiGroups: - "" @@ -35801,24 +30354,24 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-default + name: UHlKDi-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: I5FRf-default + name: UHlKDi-default subjects: - kind: ServiceAccount - name: jPVwE + name: UHlKDi namespace: default --- # Source: operator/templates/entry-point.yaml @@ -35826,24 +30379,24 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-additional-controllers-default + name: UHlKDi-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: I5FRf-additional-controllers-default + name: UHlKDi-additional-controllers-default subjects: - kind: ServiceAccount - name: jPVwE + name: UHlKDi namespace: default --- # Source: operator/templates/entry-point.yaml @@ -35851,17 +30404,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-election-role + name: UHlKDi-election-role namespace: default rules: - apiGroups: @@ -35901,17 +30454,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf + name: UHlKDi namespace: default rules: - apiGroups: @@ -36075,17 +30628,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-additional-controllers + name: UHlKDi-additional-controllers namespace: default rules: - apiGroups: @@ -36170,28 +30723,64 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Fk + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: UHlKDi-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-election-role + name: UHlKDi-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: I5FRf-election-role + name: UHlKDi-election-role subjects: - kind: ServiceAccount - name: jPVwE + name: UHlKDi namespace: default --- # Source: operator/templates/entry-point.yaml @@ -36199,25 +30788,25 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf + name: UHlKDi namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: I5FRf + name: UHlKDi subjects: - kind: ServiceAccount - name: jPVwE + name: UHlKDi namespace: default --- # Source: operator/templates/entry-point.yaml @@ -36225,25 +30814,51 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-additional-controllers + name: UHlKDi-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: I5FRf-additional-controllers + name: UHlKDi-additional-controllers subjects: - kind: ServiceAccount - name: jPVwE + name: UHlKDi + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Fk + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: UHlKDi-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: UHlKDi-rpk-bundle +subjects: +- kind: ServiceAccount + name: UHlKDi namespace: default --- # Source: operator/templates/entry-point.yaml @@ -36251,17 +30866,17 @@ apiVersion: v1 kind: Service metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-metrics-service + name: UHlKDi-metrics-service namespace: default spec: ports: @@ -36270,372 +30885,49 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf + name: UHlKDi namespace: default spec: - replicas: 549278956 + replicas: 577319060 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk strategy: rollingUpdate: - maxSurge: 1689383301 - maxUnavailable: 1098097625 - type: ćʅbUɗ敏斎Ī迊ĊD7剏Ĺɸ + maxSurge: 1303580468 + maxUnavailable: 757075873 + type: ʐɊƦ棍EƄ template: metadata: annotations: - 5cGuav: aM5RZ + hIbtWatj5V: "" + kwFBY9: e8EBkR creationTimestamp: null labels: - A6HkU3mb: xwSfZ - EIfXnY: AexS app.kubernetes.io/instance: operator - app.kubernetes.io/name: A - dvR: Nckdy - rnqNVm: xIG2K0M + app.kubernetes.io/name: Fk spec: - activeDeadlineSeconds: 6872421515153581000 affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: 4ZFHy - operator: '%o低誥njĈĥ錴嬧ɛnjȆ較' - - key: AMl - operator: )ʼn馼 - values: - - BvcW9Ja7 - matchFields: - - key: DfbH1Awc0QT - operator: dF - weight: 909331927 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: t6 - operator: G爿4fʼnɧʡ!ɏìüj辵螴厧yȅ - values: - - T - - ZH - - key: tXVIKk - operator: ;浕ȢÒ - values: - - RTT6Nm4zhCN - - 9HLOidlES - - key: I7UL2 - operator: "" - matchFields: - - key: Lr8 - operator: ɺ撚Ĭɂʎs - values: - - OIVd5OS - - Qc6g - - 1XIc - - matchExpressions: - - key: ggTWeRK - operator: ȍɽ呛Ɔw鿀Qɷʣǟ - values: - - da5pVG3t - - E4u - - key: K5n - operator: kóALJň - values: - - ce3mv - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: zg - operator: vɦ - values: - - w - - 5owH4f - - key: WdAjIF9p - operator: ñɰ鮢ƹĉ熤L揫亙Hʃ?Ǧ聯 - values: - - KJg3Q - - Hw0N - - Mnb8ROAovg - - key: E16qfI - operator: 寋惷 - values: - - mdy3dY43 - - bxX43oZ - matchLabels: - 1iHzWVY: Jd - 3Bee1lG2: CIIlv3 - pRg9FY: Eer - matchLabelKeys: - - ecr192mw - - 0u - mismatchLabelKeys: - - 6JFMRW2 - - Hzjd - namespaceSelector: - matchExpressions: - - key: SRey - operator: MÇå/吹`ó樞CDž`&O - values: - - tA4e - - JRzD0WRo - - key: kYddD - operator: ǟ珉澶N®;喙悞ɬ梈 - values: - - rJdy6 - - i8tLPusJ - - SE7d - namespaces: - - fpnECS - - rg0U77aT - topologyKey: rqPrJwS9xipmY - weight: 656669195 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: zKxUjqeNkMHtHa - operator: ƖfDÔđ駧鹏ȡ瓃Å鿶~砬7璒Ȼùđ/ - - key: 2UC6G3flN - operator: ǨBĤ頍ȉSʀ - values: - - idmpoggw - - jMM - - iK41t0 - - key: XBjviy - operator: 媿敺ɼw*鷠忴NdTʋł銃剧hŭ拟卹橒 - values: - - P3r - matchLabels: - vAH6rHN: bgcsCU - matchLabelKeys: - - t21PZsV - mismatchLabelKeys: - - Sr2N8 - namespaceSelector: - matchLabels: - "": 4PInDY - h8wrsqi: glrI - namespaces: - - 7OR8 - - Ybh1w - - TRbSPCklhjK - topologyKey: O2ba - - labelSelector: - matchExpressions: - - key: J4vV - operator: ZXu]癃È沍*撼ʎDa - values: - - "13" - - y5BjZIb - - cY0Vo - - key: fG4HuQ - operator: ʌƊ{ - - key: seowVkne - operator: ƫŰTʊ> - matchLabels: - Tf8Bxx: sIePnH - ubqHQp: "" - matchLabelKeys: - - cOI - - wdrXqVaY - - Cokj - mismatchLabelKeys: - - x4 - - "" - namespaceSelector: - matchExpressions: - - key: hTL - operator: '>zƝQJ弹婭帨戭f択' - values: - - Pum - matchLabels: - 4Up: jnembUf - Ce0b4sh8VvJ: 6MaNR4J68uc - factQ: 7VNNAK - topologyKey: SjPGY - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: HZi - operator: TiŎș8´c¿ʨÏ\ȩ\Ȁ麼娜宪 - values: - - Dk4HRW - matchLabels: - 9EclKqI74rL: wRb - D3Chh: "" - H4BwLJG: dJ - mismatchLabelKeys: - - 5Td8 - - fnltz0d - namespaceSelector: - matchExpressions: - - key: TwBLu8 - operator: ;换埜!髣Cğ]ƴ縁ĕ潣!糠玚 - values: - - ia2n6Y0WV - - 6EM - - 7p - - key: XvT - operator: ©碁縆U珧ʯɯ牜Ȧfz0咤 - values: - - i - - key: mq - operator: "" - matchLabels: - wWdY6: YCW9 - namespaces: - - "80" - - 1Lnh - - KJ - topologyKey: BJ6p - weight: -1960666384 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: WQRVg5 - operator: 桍p拈Ŀy[y鈙叢辌 - values: - - G - - efNF - - ppPSVkQ - - key: CyVE - operator: "" - values: - - 1NN31 - - key: PXGeD2 - operator: "" - values: - - xxtkSlE - - r - - jOM4Q - matchLabels: - V: wQC - tN: iVigc - mismatchLabelKeys: - - 0hsMtHDM - - yriC - namespaceSelector: - matchExpressions: - - key: cIn7tzt - operator: "" - values: - - xu1 - - 4q - - JAZo - - key: 0z5h - operator: Ʈ+痘鍽ŖƊÂqɿ+ - values: - - fWmt - - tHbTK1pl9u5 - namespaces: - - AvrT3 - topologyKey: 0mQMyp - weight: -1370107543 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: 2xa - operator: TK-/ƨ鷡Ȭ裻欟ǞpʊųɁ - - key: oREhN - operator: .yɻ篻抰鈩Kȩ~2 - values: - - yRDRk4 - - fXJYF2M0 - - R1pJKNnzRiym - - key: 1HO - operator: "" - matchLabels: - hWS: RBXk - s7: "" - y14u7ee8: "" - matchLabelKeys: - - Opbacm - - up61Mphtb - mismatchLabelKeys: - - gq - namespaceSelector: - matchLabels: - JX: Y4oR - v75: MTQc - namespaces: - - "" - - GCYcSMd - - "2" - topologyKey: K - - labelSelector: - matchExpressions: - - key: 9mIVwt - operator: DžâȿíeUJÙ慿萡捽ʌ潠u^ - matchLabels: - Nbcf: siQdU - Z: WdJ8PN - mKTc8MGq: A - matchLabelKeys: - - mJGM - mismatchLabelKeys: - - C7 - - 2fvYt7 - namespaceSelector: - matchExpressions: - - key: k - operator: Ĉö&侳 - values: - - hlPa - - BEwx - - OGJL - matchLabels: - 6dD2x: Buuv - 9cS: KI - w: fh05lkL - namespaces: - - h - - KtB - topologyKey: yC4Y9szbtyRH - - labelSelector: - matchExpressions: - - key: FSfWPk - operator: 麧 - - key: Zi - operator: '}ǜŬ鉗ɶɍ顗NǼƉ#闑(:唳Ugȗ' - values: - - ynwTLHe - - RBM - - CRQ1 - matchLabels: - bkLT4Tkln7XX: w - zPt1f: gU73eYOAjg - namespaceSelector: - matchExpressions: - - key: QmKsO1UKEa - operator: )驻ƹ擖涹ė8ǭ煛¶諝 - matchLabels: - Rxd1p0n: y52tozGuZ - UUS: CSnIZGq - b5: JQCe - topologyKey: xg - automountServiceAccountToken: true + nodeAffinity: {} + automountServiceAccountToken: false containers: - args: - --health-probe-bind-address=:8081 @@ -36643,26 +30935,24 @@ spec: - --leader-elect - --webhook-enabled=false - --namespace=default - - --log-level=10rTK - - --configurator-tag=VPI - - --configurator-base-image=VX7rtbd - - Fpr - - bQ4Xdn + - --log-level=5ruW + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: VX7rtbd:VPI - imagePullPolicy: Always + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 953 + failureThreshold: 448 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 551 - periodSeconds: 111 - successThreshold: 958 - terminationGracePeriodSeconds: 17 - timeoutSeconds: 938 + initialDelaySeconds: 92 + periodSeconds: 828 + successThreshold: 855 + terminationGracePeriodSeconds: 195 + timeoutSeconds: 723 name: manager ports: - containerPort: 9443 @@ -36672,144 +30962,39 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 178 + failureThreshold: 911 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 903 - periodSeconds: 491 - successThreshold: 68 - terminationGracePeriodSeconds: 105 - timeoutSeconds: 698 - resources: - limits: - cpu: "896" - memory: "477" - requests: - cpu: "411" - memory: "65" + initialDelaySeconds: 992 + periodSeconds: 967 + successThreshold: 613 + terminationGracePeriodSeconds: 799 + timeoutSeconds: 891 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - g9 - options: - - name: D0xhMfcPbv - value: n4 - - name: wq - value: N5vx - - name: GxY - value: Q5sm - searches: - - Nsx - - omRlK395 - - O4e7Oi9QaO - dnsPolicy: łÏxÚ7焹ìūűȊvɁ - enableServiceLinks: true ephemeralContainers: null - hostAliases: - - ip: DDMbcJE - hostIPC: true - hostNetwork: true - hostPID: true - hostUsers: true - hostname: cw - imagePullSecrets: - - name: Ji32eCG + imagePullSecrets: [] initContainers: [] - nodeName: 8xm5qy - nodeSelector: - KIjke3ItE: UFkX6 - P7WsBHi: CuuJsnyAKkT0x - ikazX: nALV - lrER1v7: TA - preemptionPolicy: E懁闩/ňś - priority: 703159166 - priorityClassName: Mgn1EG - readinessGates: - - conditionType: _ - - conditionType: $熷h2瑿赏灗vȗqUŝƲf覑鸂=h咴 - - conditionType: Ŀ - restartPolicy: ǒ锔%>dž醬 ɆƔ×ȕ;yÃN幣BƂw - runtimeClassName: pcE - schedulerName: bFrK85 + nodeSelector: {} securityContext: - fsGroup: 2980526123398523400 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 1717253414127171600 - runAsNonRoot: false - runAsUser: -2542658499850500600 - supplementalGroups: - - 8611476070349896000 - - -2096030859437496800 - - 57930524811109340 - sysctls: - - name: F3B - value: T86Cac - serviceAccountName: rrpOv - setHostnameAsFQDN: false - subdomain: Mni - terminationGracePeriodSeconds: 6911531097165868000 + runAsUser: 65532 + serviceAccountName: UHlKDi + terminationGracePeriodSeconds: 10 tolerations: - - effect: )娝Ì盭.¢ɷƲƔđNIʙ爰嶘Kɑ纏ɠ - key: EQDLsOTb - operator: 鳪²Ň踁鈷śQC ~ʕ膹 - tolerationSeconds: 261600404303321120 - value: 9voI - - effect: \nj,ʡ檄龉}啈嬚沝m - key: iwpjbTD - operator: ES|øąȵ蒒OǪtZȓ霸笭U蛫ŦDZ - tolerationSeconds: 8951817649970730000 - value: tTOkjI - - effect: ĕKªbƓƙAȸ鬮Z,湢eF驆 - key: 1BCP - operator: Ʌ45ʤǽ伀ɻDŽK`伴#3脐5 - tolerationSeconds: -6963744936651421000 - value: qpG - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: zfq9YSwZ7zP - operator: '''ņ5Ɗg舅怌ɯ覲ʅ坸櫾+ĉ沤Ś闀+' - values: - - RIZuQ - matchLabels: - 1ndv7BA: 9fKQa - l15kkLH: I4VRP6HUUi - yCdGsa1aQ: vDdtd - maxSkew: -158618891 - minDomains: -190913918 - nodeAffinityPolicy: 嬦蜱腊D鰺忪洉ņǾ畍x!ƾ8t - nodeTaintsPolicy: aɏ癒0MsʘD牻[Ŭ跱ľƕ伱 - topologyKey: hzSQ6 - whenUnsatisfiable: 播sś梇垫幵ȮE}<蘄P珶a鸨枰æ0( - - labelSelector: - matchExpressions: - - key: G - operator: 觮1:$Ǣ§Į犓 - values: - - MLGzE1lw - - 0E - - key: 5mblb - operator: 赒爧"诗臗磭ij農 - values: - - pBB9Q - - Edx54 - - zaU - matchLabels: - Anv: p3VxU - matchLabelKeys: - - o27dE - maxSkew: -1846977581 - minDomains: -1845114183 - nodeAffinityPolicy: LŽŗƄ梏包hɜ^ȅU资銝śM狃狔6 - nodeTaintsPolicy: 溰"鯮倁6 - topologyKey: D - whenUnsatisfiable: 紒_尘LɼO槆 + - key: qR0W0 + operator: i熔ɟ# + tolerationSeconds: 4752464137807170000 + value: X + - effect: Eʟij褔鑚 + key: WKdYyXfN + operator: 噃"盬LJ_Ƹ嚸-ɳ;Njd娀葵ʝǙ + value: ohIxEL volumes: - name: kube-api-access projected: @@ -36829,25 +31014,23 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: noEL0 - - name: v --- # Source: operator/templates/entry-point.yaml apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: annotations: - j: cfo02 + 8dRB: 5cv + EfHk: fBL + Nm4maThP4X: v creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: I5FRf-metrics-monitor + name: UHlKDi-metrics-monitor namespace: default spec: endpoints: @@ -36866,11 +31049,9 @@ spec: matchLabels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -36878,351 +31059,880 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - HSs9D: 9SpkutyWquq - VJ: Lsbx4ai1 helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - hp9N: w creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: A + app.kubernetes.io/name: Fk app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - vAU3IVb: K0a - x: c - name: jPVwE-crd-job + name: UHlKDi-crd-job namespace: default --- testdata/case-043.yaml.golden -- +-- testdata/case-020.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +data: + controller_manager_config.yaml: |- + apiVersion: PkD + health: + healthProbeBindAddress: Es + kind: bXPNJb + leaderElection: + leaderElect: false + resourceName: 5qBPLbo9JIP69 + metrics: + bindAddress: brP6t94s + webhook: + port: 3 +kind: ConfigMap metadata: - annotations: - PMp9J: ObRXDGAb - Z0EUj9: 9nCl + annotations: null creationTimestamp: null labels: - JSQeek3: yjWsGmb + NoeniB5: Fc1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator + app.kubernetes.io/name: IC6CHScZj app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Kha + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-config namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: VPQGI1R - health: - healthProbeBindAddress: vAjfZRDH - kind: Rkv - leaderElection: - leaderElect: true - resourceName: F4TBMLVmSO - metrics: - bindAddress: vskNAaGG - webhook: - port: 411 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - MqMu: Z751YFdX - jK4Tz: nRtRZ9 + annotations: null creationTimestamp: null labels: - JSQeek3: yjWsGmb + NoeniB5: Fc1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator + app.kubernetes.io/name: IC6CHScZj app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 3Xj6U-config + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: wINY4HR-default +subjects: +- kind: ServiceAccount + name: ft namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: - annotations: - MqMu: Z751YFdX - jK4Tz: nRtRZ9 + annotations: {} creationTimestamp: null labels: - JSQeek3: yjWsGmb + NoeniB5: Fc1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator + app.kubernetes.io/name: IC6CHScZj app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 3Xj6U-metrics-service + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: wINY4HR-additional-controllers-default +subjects: +- kind: ServiceAccount + name: ft namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + NoeniB5: Fc1 app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - MqMu: Z751YFdX - jK4Tz: nRtRZ9 + annotations: null creationTimestamp: null labels: - JSQeek3: yjWsGmb + NoeniB5: Fc1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator + app.kubernetes.io/name: IC6CHScZj app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 3Xj6U + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR namespace: default -spec: - replicas: 602892202 +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: wINY4HR-election-role +subjects: +- kind: ServiceAccount + name: ft + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: wINY4HR +subjects: +- kind: ServiceAccount + name: ft + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: wINY4HR-additional-controllers +subjects: +- kind: ServiceAccount + name: ft + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: wINY4HR-rpk-bundle +subjects: +- kind: ServiceAccount + name: ft + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: IC6CHScZj +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + NoeniB5: Fc1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: IC6CHScZj + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ruSHmUUvOj1: h3BuiPAHIC + name: wINY4HR + namespace: default +spec: + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator + app.kubernetes.io/name: IC6CHScZj strategy: rollingUpdate: - maxSurge: 1254637227 - maxUnavailable: 1181960699 - type: ƴ旾皧ư¸5浢ȶʧ廥RÍƔ + maxSurge: 197851187 + maxUnavailable: 76639021 + type: ȺŪ鄈厷)_質H迉ʈ砂\昜闁ɠdz template: metadata: - annotations: {} + annotations: + gfUi8: 419ry + j: ryqOMF0Jv5 + lO9TC3H: GA creationTimestamp: null labels: - LAJ: qbyZ + "4": 52Tm2RbID + A2n: P41k9HiCVIqF + HY: i53EA app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator - qgpZEn: tSA + app.kubernetes.io/name: IC6CHScZj + r: 9n spec: - activeDeadlineSeconds: 8122815581103249000 + activeDeadlineSeconds: -7334991626066240000 affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: QFA9 - operator: V乯衉>:Ó韈Rƴ扫Ȧ鉴9.ǯ - values: - - IYjKm1G - - "N" - - key: 7C - operator: ¢ʓĈ嚗ɉ - values: - - s2mkuOpFFV - - PACPko5E - - rgdqj6pU0Inh - - key: J4 - operator: á + - key: wa1I6C + operator: v寱县H values: - - E + - nkcT + - kZVmdT + - 1yCqAQx matchLabels: - CS2kjF: KchW - pUSJC2a: sJheWOAo - xy: 1w3MKNN7 + XgvalJB: 4NJfSfnyS + namespaceSelector: + matchLabels: + 5Pf: t5wc1jv + namespaces: + - PNy + topologyKey: a + weight: 1793239155 + - podAffinityTerm: matchLabelKeys: - - qRbX - - ZeggQf + - YR5R mismatchLabelKeys: - - n97uA - - hg4J0bG4 - - lYX - namespaceSelector: + - Dd8 + - UENQb + - NFy0hS + namespaces: + - Frj + - ZUe + topologyKey: Q86m7P + weight: 291823071 + - podAffinityTerm: + labelSelector: matchExpressions: - - key: C1wCSxIG - operator: À惚 - values: - - 4fTqzN - - bDaABZFS - - K6KpN6 - - key: I - operator: 獯渉亹糉 - values: - - HcB - - tvZ - - key: iRexk6dySuY0 - operator: 0> - values: - - bVe - topologyKey: lOxekkaX - weight: 1165570909 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: rgZ - operator: =fɼ齨Ălj( - values: - - y34T - - jU - matchLabels: - ihMjREr: T - matchLabelKeys: - - nloa - - ghiw - - a4UE2VX - mismatchLabelKeys: - - kC1ibUKRH3G - - J38D - namespaceSelector: - matchExpressions: - - key: asNY - operator: '*Ȥ' - values: - - aO - - key: pG9kE7iM - operator: <蚬緄栮0 - values: - - Zu - - cKEm1S - - jmF8Fy3TX - matchLabels: - 0S0sOoL: WJ - HoF8N: GuarN0Tk - namespaces: - - mPyaOX - - "" - topologyKey: S4Uou5cVA0X - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: vj9hQ - operator: ìR菝ǔ - - conditionType: )ĥ - resourceClaims: - - name: zs0z - - name: Uh - - name: Cwm5 - restartPolicy: 倀尶Eʂ»EvǣǕ"銏轻OÞʍ顃g^柚 - runtimeClassName: zfdSRp - schedulerName: z - schedulingGates: - - name: QYXY - - name: I + B4: hc + QftYNI: I + Yw: J5YRBO4R securityContext: - fsGroup: 6810058302486106000 - fsGroupChangePolicy: Always - runAsGroup: -4632546854526170000 - runAsNonRoot: true - runAsUser: 5327409515334876000 - supplementalGroups: - - 3764293082951256000 - - 2051046491540931300 - - 5729763965168114000 - serviceAccountName: vDmiZ - setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: SRdjniq7 - terminationGracePeriodSeconds: 7746510581024413000 + runAsUser: 65532 + serviceAccountName: 12bwUKO + terminationGracePeriodSeconds: 10 tolerations: - - effect: xů~貈Y撍暾悝厯鲜酮´əí7ȉL - key: Dx6JvLeW - operator: 哇ÏĔv啼ɓ齋!渴祝6ƭzLȻ,摯+ - tolerationSeconds: -5860159725938606000 - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: 4yar - operator: 家狌V渮ʧANɸ郱娞H - values: - - Ha5v - - T2Xw - - key: wmVm - operator: nY - - key: MlTi - operator: ËÁa渀易{!ÃÍɳƣŗƑ1ɱ漶獦fƣ - values: - - "" - - DrV - matchLabels: - 5G9tK0D6h: "27" - d0S: abaz - matchLabelKeys: - - lvgl - maxSkew: -219149065 - minDomains: -1853068091 - nodeAffinityPolicy: 擤Ǥ箱¼暿倮豳=NJţ埤ZMdȼY裔 - nodeTaintsPolicy: c狣候sŜ亭讜`p躭SƞO - topologyKey: qCFaIX - whenUnsatisfiable: ČHDZh%å - - labelSelector: - matchLabels: - aTDLv8: D3s - vjhtc1LP: o9Ge - matchLabelKeys: - - yGI - - i3SbNrjwUfZ4 - maxSkew: -2032787523 - minDomains: 547987185 - nodeAffinityPolicy: X銛罇WȐ纾屰儭%ƛ@ - nodeTaintsPolicy: /?秕wO墏jlȝ隄兎鴗e3¸ʔƘlÇ - topologyKey: lI9 - whenUnsatisfiable: ʀ?G纴$ - - labelSelector: - matchExpressions: - - key: RjAsRn7k2Hn - operator: 0汰aʝș - values: - - 9zoyg - - IRoGF - - key: G7CN - operator: '>gİ喴旬d榣锼杒ɾʞ' - matchLabels: - Bar7Nf: NSbIUdqe7 - VjF: 5p8x - matchLabelKeys: - - H2 - maxSkew: 1105402615 - minDomains: 123739480 - nodeAffinityPolicy: 邲Ý蕍Ȅ+ʩ缴T桰瓑_ - nodeTaintsPolicy: 挡&mć#Tǀ演Ô怞揙 - topologyKey: T4wz - whenUnsatisfiable: Œ1 + - effect: -7ʫ孼 + key: g3Bs + operator: 枳鋰tɚO_ÁÖ + tolerationSeconds: -4925537737759855000 + value: 25p + - effect: ƣ旾ÈsĦ幏4ǁ帄ǀ荥qȞ癟[烇C' + matchLabels: + eB1Hr04: u2qzbHh + oAsMpK: "" + maxSkew: -168479832 + minDomains: 1465487594 + nodeAffinityPolicy: 騻9ǪȢ昺辛[ɵ + nodeTaintsPolicy: 栘 + topologyKey: rl7xLdf + whenUnsatisfiable: J + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: 9wZm7 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + 8BO5: Bd5OIo + JnjTVDz: 5xDh + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: NY + app.kubernetes.io/version: v25.1.4 + gWL: pM + helm.sh/chart: operator-25.1.4 + name: sFwgtf-crd-job + namespace: default +-- testdata/case-023.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: bi-default +subjects: +- kind: ServiceAccount + name: TWwJQX + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: bi-additional-controllers-default +subjects: +- kind: ServiceAccount + name: TWwJQX + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: bi-election-role +subjects: +- kind: ServiceAccount + name: TWwJQX + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: bi +subjects: +- kind: ServiceAccount + name: TWwJQX + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: bi-additional-controllers +subjects: +- kind: ServiceAccount + name: TWwJQX + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: bi-rpk-bundle +subjects: +- kind: ServiceAccount + name: TWwJQX + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 4waX +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4waX + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + iW8sRg: to + name: bi + namespace: default +spec: + replicas: 218897221 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 4waX + strategy: + type: RollingUpdate + template: + metadata: + annotations: + BjzEZ: x6aQ + NDv6M: fd9igL + S397o: L + vGR: TH + creationTimestamp: null + labels: + QJe1s: KgE + Rk9pXuf: 5uJqz + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 4waX + qBd: Wh + spec: + activeDeadlineSeconds: 908677350345763800 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchFields: + - key: GjZ + operator: 寺Ȫǯæ& + values: + - hc8a9 + - 11gcK + - lhw + - key: a1 + operator: 隕 + - key: QdG5l + operator: \冈g酷b + weight: 1765835600 + - preference: + matchExpressions: + - key: i4 + operator: 質ɺč0鯒Ô禌妃0kŽw + values: + - uFQREyZGh7Ed + - t7I + - w + - key: 7q1I5h + operator: ȥ:鎩Ǹ猢 + - key: d62aMb + operator: 湒vŁ鴧cMȒ]ƌ錝Su唇ʐ柯 + weight: 689430853 + - preference: + matchFields: + - key: LAkFH3Gl + operator: ɚk觱Ź籏<ɭZƍT'H賏 + - key: vs + operator: ĸTgÎH囦1逺粎ʜ启Ɣ潲Ć[ + values: + - gM + - Sv6aS5 + - lt7qLaUy + weight: 106838082 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + HFhhG: qPu3ad + IOcr: thV + RL: OS + matchLabelKeys: + - U1L + - 0ZFiN2U + - xA5L + mismatchLabelKeys: + - ToAt + namespaceSelector: + matchExpressions: + - key: HM6bDqfH4 + operator: 瑗芓ɳ + - key: A5lt8 + operator: 輧h + values: + - SFL3f + - key: 2cY + operator: W + namespaces: + - abe2C6 + topologyKey: yKjZ + weight: -1660862111 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: gsAZ + operator: 汞ƀ$şQøðŠǥ«錐 + - key: qWyJdhF + operator: Ì黨欲浪ĨơPøh噠ʬ + - key: Dl + operator: yǴĨ賢oɻŝg軘矼Mv躯YȦ + matchLabels: + BMMI: 3b6 + HEyr: uEFyszJa2 + y7JrEi4E: jErIYMMan + matchLabelKeys: + - GRRZc + - "2" + mismatchLabelKeys: + - CWkj + namespaces: + - A2pvW9 + - Gdsi + - Br + topologyKey: FSamf + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + HojBg: rJH + matchLabelKeys: + - coC78 + - j6YraJB0Rn + - k6toRo + namespaceSelector: + matchExpressions: + - key: GkjOOh6FjQn + operator: ȵƊµHq + values: + - Op96eYt + matchLabels: + TmlZ0: 9CY + eFKzI: c0WKI23yiov + sxQCJS: tfjS0j + topologyKey: HOgYsI + weight: -262031845 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: Yzzx + operator: ǩ療笵ɌLǐ + values: + - BGB50 + - EPa9P + - key: 0J4U + operator: /taʍư曃ƶ陠Xǧ + values: + - hIgbS + - c + matchLabels: + thXxFH: 7Z0U + matchLabelKeys: + - lWYclL + - XjKQhHPLF + - i8tvK + namespaceSelector: + matchExpressions: + - key: WvmxZS + operator: Ȱ圤ŸPȱ囵+瘩ʘ + values: + - "9" + - Pqvn + - r7Q5D + - key: vfrS5GxCesj + operator: 埬鐂»饄師鴑 + - key: IAt3N + operator: 畝. + matchLabels: + JZV7rSl8: nIY + yt9s7c: K4S + namespaces: + - jqcdm2 + topologyKey: VYx3xk + weight: 1996657884 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + amb: szxMA + mismatchLabelKeys: + - 3p075H + namespaceSelector: + matchExpressions: + - key: ypAVizsc + operator: 揾楫Ȣȫx`ż辎Ź堟>唱WuN + - key: YZiAzVi + operator: '!_怟v屃ł簰瓑''ʘ' + values: + - fP + - key: rNZOekNLt6 + operator: 酮kɀ蟤ɥ鏈x汻粗懗øz獣ȮǨ抧黿 + matchLabels: + ajqBe2Ks1D: Jd + namespaces: + - 9EKcZR + - OcnfKwRCNN + - HiZ4lgW + topologyKey: C + - labelSelector: + matchExpressions: + - key: 2yVYAxbg + operator: 緅橥uƥ渏笕+莦XǵĮ + - key: inuw + operator: EAý郍R{愋Ø + values: + - itVHDZ + - GdnPO + - Ili8 + matchLabels: + CR: TXDo + mismatchLabelKeys: + - "0" + namespaceSelector: + matchLabels: + 1t: JWD3impDVgq + topologyKey: SU7S + - labelSelector: + matchExpressions: + - key: 9jDPBs + operator: "" + matchLabels: + RS: sB4F1RbUo + T4tVq: WCU8epfkI + matchLabelKeys: + - EnBdS6m + - OjXrhdI + - 0D7my + mismatchLabelKeys: + - dd + - R45XH + - 3JeSwL + namespaceSelector: {} + namespaces: + - fwKmGiPOGCF + - p0G + topologyKey: aZZYUC + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=S3 + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 49 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 575 + periodSeconds: 975 + successThreshold: 343 + terminationGracePeriodSeconds: 796 + timeoutSeconds: 982 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 564 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 36 + periodSeconds: 801 + successThreshold: 620 + terminationGracePeriodSeconds: 145 + timeoutSeconds: 81 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - uFFDQ + dnsPolicy: '&轃ģçǞy$' + enableServiceLinks: true + ephemeralContainers: null + hostPID: true + hostUsers: false + hostname: YE55nA + imagePullSecrets: + - name: 9ZLj + - name: P + - name: 7wVg + initContainers: [] + nodeName: Pib + nodeSelector: + "": 5PeSaAc + E9YHS: XpIr01PhRH + IErx1IR: mxoBL7PtO + SP1VV: peokQsiLl + TmvT: QoMPUl + priorityClassName: V + readinessGates: + - conditionType: ąɃ瓣廌g~zĵ5H5嘿涫撳斸) + - conditionType: "" + - conditionType: 铋礠買笹ɛȲŽĤ + runtimeClassName: D8ZV5mL + schedulerName: uQBeCHZ + schedulingGates: + - name: bZ1Ky + - name: DyAF + - name: MJ8b + securityContext: + fsGroup: 8286315522698384000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -3461140397115298300 + runAsNonRoot: false + runAsUser: -2938466842819764000 + supplementalGroups: + - 3485326851700496000 + serviceAccountName: KC9sCa8o + setHostnameAsFQDN: false + subdomain: FhT + terminationGracePeriodSeconds: 5028856913311693000 + tolerations: + - effect: 颥Ƹ鹕瘌喼Ãɛɦ腢dmĎW­棑滄 + - key: PuT6xGSH8b + operator: UcEʗúá8髃鰐蛘姗Ä寗 + values: + - E7iG + - x8 + - "4" + weight: 1306690246 + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + qhf: h3 + namespaces: + - gY2qxQ0nkCGD + topologyKey: GohF + weight: -860230123 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: lP + operator: '`+ɧƑ靲ɣ桹' + values: + - BbiLAW3LwZ + - Y6k0hfr + - 0j7 + - key: 19c + operator: 姵%单皜v晛ʙ笿%邈yǿ麩ʃ碂ħ穘 + values: + - cK + - key: cb1Wr9P + operator: +瑙腡xǩ鍷ĈĩȧEv詡9O怉Łƿ,³ + values: + - RHuO7E + matchLabels: + L7C: sI + YPV8Fo7: mICS5N + matchLabelKeys: + - Uix + mismatchLabelKeys: + - uJtKX6 + - DU + namespaceSelector: {} + topologyKey: "" + weight: 533908390 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: SBUrD + operator: F蚨}压ď²Ö囜 + values: + - T8xc + - BI + - key: FWlF + operator: "y" + - key: QFmBAu03 + operator: 酯eȻÖ<僱蔮Gc鏺Q瘻Gg恑Ģ+ + matchLabelKeys: + - lfhl7j + - lnuO + - eeLLS + mismatchLabelKeys: + - C0Z1RY + - BPZdW + namespaceSelector: + matchExpressions: + - key: nX2UcFsh + operator: ƇZ^渚.稀譨洠"N[缾岈% + namespaces: + - G3aYBV2NxKo + - a5y9bZz + - 0T + topologyKey: 8wJ + weight: -1177645999 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: BekQbPZqKJZ + operator: m貣R + values: + - O82bF + - key: u3B + operator: ȿ譑眢 + - key: fZqoQWWFKIP + operator: ʐ/另ȀȾŘ + mismatchLabelKeys: + - DV + - Y44 + - jon + namespaceSelector: + matchExpressions: + - key: "7" + operator: F衋倚捣韥ƶ9Ģ刄eȗ;ʯ棢È + values: + - qTrUXSCs + - eP + - key: YoPuLVm + operator: 訒Ȉ枬M撚Ġ濾駈Sg + values: + - Pg + - 5GeI + - "94" + matchLabels: + aYbUJz: xpn + topologyKey: W2w + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=mcE2xz8 + - --configurator-tag=z7F5fT + - --configurator-base-image=4s6FZUA + - 2MguVfZ + - 2d4Gz + command: + - /manager + env: [] + image: 4s6FZUA:z7F5fT + imagePullPolicy: Never + livenessProbe: + failureThreshold: 89 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 174 + periodSeconds: 261 + successThreshold: 386 + terminationGracePeriodSeconds: 846 + timeoutSeconds: 908 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 111 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 406 + periodSeconds: 922 + successThreshold: 33 + terminationGracePeriodSeconds: 567 + timeoutSeconds: 933 + resources: + limits: + cpu: "996" + memory: "505" + requests: + cpu: "89" + memory: "695" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + ephemeralContainers: null + imagePullSecrets: + - name: 2di49JY + initContainers: [] + nodeSelector: + 0kGsLN9: oMUX + L3: FtMGt + securityContext: + runAsUser: 65532 + serviceAccountName: a + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + qXu: "N" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: YCs + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: a-crd-job + namespace: default +-- testdata/case-025.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + 0tYCAF2p: LH0vf + 9izrY41ZN: MvuV647jr + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Gn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: sA + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 5xlVr0Pv + health: + healthProbeBindAddress: DO + kind: JlQ + leaderElection: + leaderElect: true + resourceName: Ertd + metrics: + bindAddress: nj7oX2Fh + webhook: + port: 221 +kind: ConfigMap +metadata: + annotations: + x: ORQB + creationTimestamp: null + labels: + 0tYCAF2p: LH0vf + 9izrY41ZN: MvuV647jr + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Gn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: VI1RU-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + x: ORQB + creationTimestamp: null + labels: + 0tYCAF2p: LH0vf + 9izrY41ZN: MvuV647jr + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Gn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: VI1RU-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Gn +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + x: ORQB + creationTimestamp: null + labels: + 0tYCAF2p: LH0vf + 9izrY41ZN: MvuV647jr + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Gn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: VI1RU + namespace: default +spec: + replicas: 902866093 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Gn + strategy: + rollingUpdate: + maxSurge: 1980422136 + maxUnavailable: 2011281189 + type: RollingUpdate + template: + metadata: + annotations: + OSzZn: zFjtDhp + YpD: kvWe712msLmvq + creationTimestamp: null + labels: + TvAx: 7DfhwNU + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Gn + f: mmR9Dv + rq: rp633Yu + spec: + activeDeadlineSeconds: -6397634401589060000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: L9R + operator: '}7Iv' + values: + - SwG + - FH + matchFields: + - key: i13cz6WcCr + operator: ú么庘4怺|乑 + values: + - cOO4w9Ue + - key: twStucD4 + operator: +ŖŽʥNjĦC嘉á + - key: X0Loc + operator: ĠQ綀¾ + values: + - a6yo + - qn + topologyKey: V5cCPc + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: nGjZ + operator: Ȯa醱代Ɵ:RȆȵf烚ķȸ荛' + values: + - C + - mFmL9z + matchLabels: + WOz: IDw + hQ: k5Rv4x7F + matchLabelKeys: + - GM + mismatchLabelKeys: + - qvfKJzn + topologyKey: hP2IsXzK + weight: -1880607146 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: vEZutz + operator: 玓黓«ɔQ鿮憖箴7 + - key: D1 + operator: 怨Z)HW藸団. + values: + - w + matchLabels: + hh: b8vr + lYeVXo: qIsVTM8fu + matchLabelKeys: + - rln + - Zoh + namespaceSelector: + matchExpressions: + - key: I + operator: 珡Gf5対/癄用ŜŽɹ^ƜLJɃmƮʕ + values: + - syyRfQ22o7 + - 6wQTe + - key: 2G48vYS + operator: 年v^槶W"@y钧DŽ^{#:İ + matchLabels: + i6Ul: 3Ir + lRe0FSnq: 7O9Q + vstjaQ0: 6EDkw92 + namespaces: + - pnmOQV + - o + - KtW + topologyKey: kc4Wp9 + weight: -1564809665 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: 0ON5LE + operator: 逝 + values: + - cn1Cet + - udAh8 + - key: VO + operator: eğUfʧ皜ť惑iŻ26äY + values: + - 35a + - nPlm + - "" + matchLabels: + GF0: YDFd7 + qHnm7: X3gbc + matchLabelKeys: + - M + - st3 + mismatchLabelKeys: + - XHmLH + namespaceSelector: + matchLabels: + qDB: "" + topologyKey: H6Q0a8bj + weight: -1254546839 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: pPex5QaH + operator: 裩½膥®!o$Ő嵕ViƟG悮 Ȓo + values: + - XFCGl0481iWXC8t + - 4HBw + - key: UEhwis + operator: D騋頜.開3洨ýĬ絾ɨCI6cB姂鞍Ő + values: + - MnB + - 87h + - oY7 + matchLabels: + l15YWQBhZ: Q1E3EE + matchLabelKeys: + - YYakMFEY + - erAg6zOP + namespaceSelector: {} + namespaces: + - tPjy4sd3 + - Iwd + - t3 + topologyKey: 0mWw1GV + - labelSelector: + matchExpressions: + - key: b75riGdmr + operator: ɭf4Ƣųdǝ,趱b_ɸ + values: + - 9Fk + - qZ8pCY1W9y + - key: I34emF + operator: ş浦c}|v + values: + - Tzre + matchLabels: + gOc3cz: ab + namespaceSelector: {} + topologyKey: ATRK8Cw + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=NaLO9z + - --configurator-tag=Lotm9epAH + - --configurator-base-image=g96 + command: + - /manager + env: [] + image: g96:Lotm9epAH + imagePullPolicy: Never + livenessProbe: + failureThreshold: 347 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 320 + periodSeconds: 893 + successThreshold: 928 + terminationGracePeriodSeconds: 913 + timeoutSeconds: 25 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 682 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 502 + periodSeconds: 886 + successThreshold: 699 + terminationGracePeriodSeconds: 876 + timeoutSeconds: 573 + resources: + limits: + cpu: "3" + memory: "220" + requests: + cpu: "509" + memory: "234" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + options: + - name: Wf0HvUtqF + value: B + - name: YSJ + value: KVG + - name: mENG1svR2 + value: pLbeGQ27xv + searches: + - W + dnsPolicy: 鼌Ģ鴂 + enableServiceLinks: true + ephemeralContainers: null + hostNetwork: true + hostname: gBduz + imagePullSecrets: [] + initContainers: [] + nodeName: Ni + nodeSelector: + qD47: 630ZQytVa + uc: 6HPiNwKAFVM + preemptionPolicy: e宣鰾r揠İǑ + priority: -1305548838 + priorityClassName: ivc9Qx4W + readinessGates: + - conditionType: 蝠蔢ĦɃ + resourceClaims: + - name: XCVZh + runtimeClassName: 1JJ + schedulerName: 4e4VR + schedulingGates: + - name: "n" + securityContext: + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 6989821764973521000 + runAsNonRoot: false + runAsUser: -4511128637598070300 + supplementalGroups: + - 5575289228098934000 + - -3802520852329744400 + - -3418870242951103000 + sysctls: + - name: yVQUmX + value: HMnESA5X + - name: sppxK + value: ZGrJ + serviceAccountName: nNQXr + setHostnameAsFQDN: false + subdomain: wt8j7AI + terminationGracePeriodSeconds: 6961863183836321000 + tolerations: + - effect: A\Ƣ + key: iziP + operator: ħXK{8Ƿ韟 + tolerationSeconds: -4478242017118697500 + value: 6jeY5TPOEJY + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: "" + - name: 061joXv + - name: nASsEAPm +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + 0tYCAF2p: LH0vf + 9izrY41ZN: MvuV647jr + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Gn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: sA-crd-job + namespace: default +-- testdata/case-026.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + 5L: j2D1CM1hpmck3l + VtUx5gn: vI6EOhi2BO + fHiSr: wgWqdOQ + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: blB + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: L2DP4n7 + health: + healthProbeBindAddress: mZ + kind: KxDoa4t + leaderElection: + leaderElect: false + resourceName: pQvy0sQo + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 194 +kind: ConfigMap +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 2-default +subjects: +- kind: ServiceAccount + name: blB + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 2-additional-controllers-default +subjects: +- kind: ServiceAccount + name: blB + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: "2" + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 2-election-role +subjects: +- kind: ServiceAccount + name: blB + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: "2" + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: "2" +subjects: +- kind: ServiceAccount + name: blB + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 2-additional-controllers +subjects: +- kind: ServiceAccount + name: blB + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 2-rpk-bundle +subjects: +- kind: ServiceAccount + name: blB + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: VhCMS +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + Xpmsmk: xwQ7HYnx + nht: xpYQ9rPl + creationTimestamp: null + labels: + 9Yl4uYdhi: AwRf + SX: I + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VhCMS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: "2" + namespace: default +spec: + replicas: -2036915675 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: VhCMS + strategy: + rollingUpdate: + maxSurge: 1351085039 + maxUnavailable: 301698135 + type: l¢ʍavń橆V' + tolerationSeconds: -5670792804219815000 + value: J4HDxi9rSArcn + - effect: A蕝uʛȇºůŚLjɽ崮 + key: w0 + operator: /lz枟ȕƮïÏū翁Ɵ罂ŔĖ + value: yfqJp7 + topologySpreadConstraints: + - labelSelector: + matchLabels: + b6O: "82" + uq9N: j0 + matchLabelKeys: + - qszz + maxSkew: 383079126 + minDomains: 574068731 + nodeAffinityPolicy: "" + nodeTaintsPolicy: Ěĝȑ簐Œ柔GÂ鷜蹡jtèȌÂȜǪ + topologyKey: kgyI + whenUnsatisfiable: b洦ƫț4Ȅ蠡[圴撻 + - labelSelector: + matchExpressions: + - key: "" + operator: BĔʧljD'pŅ楕Ⱦdž-gʏ鱸j, + - key: OnpW + operator: 纟殐壴R鷥RI礞璽ĵ葖C薄@8> + values: + - "" + - vx6t4Gn + matchLabelKeys: + - Foa + maxSkew: -1486537465 + minDomains: 1840673437 + nodeAffinityPolicy: ŵļ昿ʟrǖ護泔ȯÏƳČŠų + nodeTaintsPolicy: 軛 + topologyKey: s6 + whenUnsatisfiable: "" + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: 166J + - name: 4V +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + "9": WiLvS4 + Fzjuqz0im: "023" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Qi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: z7BRO-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + "9": WiLvS4 + Fzjuqz0im: "023" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Qi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + "9": WiLvS4 + Fzjuqz0im: "023" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Qi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tIa-crd-job + namespace: default +-- testdata/case-028.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 0pdE + health: + healthProbeBindAddress: SSUvR + kind: kb + leaderElection: + leaderElect: true + resourceName: fiacWH + metrics: + bindAddress: 0Wri6W + webhook: + port: 425 +kind: ConfigMap +metadata: + annotations: + 6z1JUm: "" + UZQUK5: NmVcFpyl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 7Nn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: na-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + 6z1JUm: "" + UZQUK5: NmVcFpyl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 7Nn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: na-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 7Nn +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + 6z1JUm: "" + UZQUK5: NmVcFpyl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 7Nn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: na + namespace: default +spec: + replicas: 409512392 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 7Nn + strategy: + rollingUpdate: + maxSurge: 1869473445 + maxUnavailable: 767850509 + type: ƥqȆ + template: + metadata: + annotations: + "": ZBBGf + 4Es1xV8CqO: J59c9YK0b + OLzhH: nO + "y": F + creationTimestamp: null + labels: + "479": R + KzjjU: bNeafB + PUO: 3HVPY + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 7Nn + spec: + activeDeadlineSeconds: -7669638163721044000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: VC9NPg + operator: 堔OQ佟:檭欨雞L瑛O8C + values: + - fJEeZW0qJ + - hVmIEug9SSa + - "" + matchFields: + - key: XNJB53k1F + operator: '#ŷc榆鯁[UªőAx9ɎÉȀ' + - key: D0wl4k + operator: Ɂǃ ʆ4];ÉŪʐç + values: + - w2tSRUq6M + - 2Mxlfv + - 1XpvQL + - key: sNq7IUCFt + operator: 忄AAɚ鮫琕3ɛį&楤zĄ*%Ȧ + weight: 569688052 + - preference: {} + weight: -298021391 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + matchLabelKeys: + - VcRS + namespaces: + - ys + topologyKey: aKQ + weight: -1815889977 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: VUij + operator: 鵼6ȯ铃SOS屫ż#Ņdʇfɡ8^鼻Ȉ + - key: oZu + operator: 婘&9ɏʦDž蔾uʆ蹆M)幸Ƿ + values: + - cWwpJl2n + - ek9 + - HckueaEyl2 + - key: GyQ4ei + operator: 玔爘W + matchLabels: + 4g47: wjIG + matchLabelKeys: + - f9c + mismatchLabelKeys: + - aS3 + - cL + - Ovi + namespaceSelector: {} + namespaces: + - 05kH + topologyKey: zeZsg2nvt + weight: 1590497712 + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=EQ + - --configurator-tag=S + - --configurator-base-image=qO8Q6 + - ufbUW + command: + - /manager + env: [] + image: qO8Q6:S + imagePullPolicy: Never + livenessProbe: + failureThreshold: 402 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 74 + periodSeconds: 749 + successThreshold: 877 + terminationGracePeriodSeconds: 208 + timeoutSeconds: 607 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 265 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 604 + periodSeconds: 342 + successThreshold: 325 + terminationGracePeriodSeconds: 355 + timeoutSeconds: 35 + resources: + limits: + cpu: "681" + memory: "288" + requests: + cpu: "839" + memory: "826" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - 9uF4n + options: + - name: oKphH + value: Tw2 + dnsPolicy: ʢůȠȐʈè忣Ų堗决 + ephemeralContainers: null + hostAliases: + - ip: nipRwzHl + hostIPC: true + hostPID: true + hostUsers: false + hostname: 38Jzj + imagePullSecrets: + - name: Jq6 + initContainers: [] + nodeName: P + nodeSelector: + FJzqc8SS: AfX1rB + XbVrcFi: "1" + "Y": f4i + aY6: p6zmUKv + sm: oGp + preemptionPolicy: 佯¶ð_Ŋ帓ȇȇñȎj + priority: 189241819 + priorityClassName: s6 + resourceClaims: + - name: 2JeXX + - name: 4yOW9 + - name: cY + restartPolicy: 徚籨 + runtimeClassName: Gj15 + schedulerName: GiJ + schedulingGates: + - name: A + securityContext: + fsGroup: 2442655365152128000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 3592741137103323600 + runAsNonRoot: true + runAsUser: 650673957928566800 + sysctls: + - name: 4WiDRa0 + value: vB + - name: WqomZPg + value: pJzBXy5 + - name: Q4ecXvxUI + value: 9Km4a2U + serviceAccountName: zCava2sBrOJ + setHostnameAsFQDN: false + subdomain: xBuRy6JY + terminationGracePeriodSeconds: 7922635006545135000 + tolerations: + - effect: QƓ猠i櫰fŶ>Tǃ碫* + key: o4w + operator: ɇ`iɜ::鱥鄔DÃ妞薺ȭ靄 + tolerationSeconds: -7729504422924054000 + value: ztFE4TAoJW + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: GKG + operator: 'ǎ3Ð+Ūä噏ų ' + values: + - m48Rys + - key: rMY + operator: Ao藱0]领Ȗ½u瞪谶裐辁忓"劶lY + values: + - kjpyMDUO + - UUa + matchLabelKeys: + - W8hec + - 9XvWreUbu + maxSkew: -1591264848 + minDomains: -557215783 + nodeAffinityPolicy: ɰ±ń谪ij液 + nodeTaintsPolicy: ½mƚ + topologyKey: zz9l + whenUnsatisfiable: 駻FƂ薩Ǐ + - labelSelector: {} + maxSkew: 1667721550 + minDomains: -651705871 + nodeAffinityPolicy: 2Ʃųʯ郇ȼ崭x"~嘵|j虷¦!ȟ + nodeTaintsPolicy: 焗泧X 廟J5ʬ + topologyKey: 8k + whenUnsatisfiable: 8ǁ駀dže渣A媨豹l氮Ȣʖ埋F¨ì + - labelSelector: + matchExpressions: + - key: gGILY + operator: R磒冢萑(唀簏呄@篦Ȟ杭YǠě] + - key: 9TJt6 + operator: "" + values: + - "" + - Qp0cBX4 + matchLabels: + JQLd: XYOYfNAA + jt4iO: Z64hnSu + matchLabelKeys: + - HAi9Gv + - sWYmzK + - r6j1rSNKX + maxSkew: -897543284 + minDomains: -1529871564 + nodeAffinityPolicy: '`ěS(U幵ĤıĢȟ紳輆ş' + nodeTaintsPolicy: Łļǻ軀折TŜ崵駿Sã8ō'ɷ嵡 + topologyKey: R + whenUnsatisfiable: Es織ŸgÉw5-颒辰gÝ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + 6z1JUm: "" + UZQUK5: NmVcFpyl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 7Nn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: na-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 7Nn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 2KJ0g0: EDTV8VI1gX + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 7Nn + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: LS9-crd-job + namespace: default +-- testdata/case-029.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: Z5c + health: + healthProbeBindAddress: :8081 + kind: 8HW7 + leaderElection: + leaderElect: false + resourceName: 9uQb7 + metrics: + bindAddress: Ni + webhook: + port: 60 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: D-default +subjects: +- kind: ServiceAccount + name: 40Wt + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: D-additional-controllers-default +subjects: +- kind: ServiceAccount + name: 40Wt + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: D-election-role +subjects: +- kind: ServiceAccount + name: 40Wt + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: D +subjects: +- kind: ServiceAccount + name: 40Wt + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: D-additional-controllers +subjects: +- kind: ServiceAccount + name: 40Wt + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: D-rpk-bundle +subjects: +- kind: ServiceAccount + name: 40Wt + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: aYT +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: D + namespace: default +spec: + replicas: 1462201037 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: aYT + strategy: + rollingUpdate: + maxSurge: 1170346904 + maxUnavailable: 732386123 + type: 讵揼2嗪刵h®ªɓ'ƹlNĔU嵩Mɖȭ + template: + metadata: + annotations: + 7ZgRUIU: Y7 + creationTimestamp: null + labels: + "8": 5A9Kc + LBf33434: ic2ddD0 + N7Pnz: jxyQwEY + app.kubernetes.io/instance: operator + app.kubernetes.io/name: aYT + bzc: w5h + rsjj: "y" + spec: + activeDeadlineSeconds: 7101025196609439000 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchFields: + - key: QQzmv6 + operator: 9褐uɘ¹齅ʧ潖洝饭W + values: + - bvU + - gD + podAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: xJE86Io + operator: Ń徨 + values: + - 7u1 + - hXrj8 + matchLabelKeys: + - 2RE5c + - ThzhOrWn + mismatchLabelKeys: + - "" + - huqSK + - CjCPaO3z + namespaceSelector: + matchExpressions: + - key: CT + operator: ț症LŲ餑鍶Ȼ + values: + - l0L + - 2XRA + - key: riCReJ + operator: ʣûōUǑƕ鯘 + values: + - Cwb + topologyKey: lK + - labelSelector: + matchLabels: + 9LrxS2q5w7Z9: "n" + AVL: L + namespaceSelector: + matchExpressions: + - key: 3U1 + operator: ǪTÚ9ĝǴ閩鄚ʮõ|\hǧȨL哮 + values: + - I4fKB73i + - 7dZMC0V5 + topologyKey: W8VSBpD + podAntiAffinity: {} + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=hPrI1P + - --configurator-tag=Gd0 + - --configurator-base-image=8mlV + command: + - /manager + env: [] + image: 8mlV:Gd0 + imagePullPolicy: Always + livenessProbe: + failureThreshold: 240 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 292 + periodSeconds: 547 + successThreshold: 172 + terminationGracePeriodSeconds: 739 + timeoutSeconds: 881 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 402 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 856 + periodSeconds: 588 + successThreshold: 217 + terminationGracePeriodSeconds: 183 + timeoutSeconds: 835 + resources: + limits: + cpu: "333" + memory: "590" + requests: + cpu: "514" + memory: "396" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - bnxKu + - at + options: + - name: l + value: M1PV5a + - name: Q5umpKe + value: QbYIA + - name: Zw0 + value: tBlo + searches: + - Va + - c34gV + dnsPolicy: tf@赬Ü梆冹3í帅X(我t焕8坴Ë + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - fYHCm25 + ip: NVM77TDo + - hostnames: + - PHBAJG8VfD7 + ip: 7F + hostIPC: true + hostUsers: true + hostname: bAue + imagePullSecrets: + - name: 8A + - name: KKraJHhC + initContainers: [] + nodeName: Eg0bNdxO + nodeSelector: + 8FdG0D: 296kXxHVMGuu + LATe3oO: ggTFm + Ntd: SNg + preemptionPolicy: 沏d溯ȜŅ蛤!1*G丘沿ę侞5 + tolerationSeconds: -4095124838525527600 + value: 1y8zg1Kk2 + - effect: ŭDZ麒bȮ + key: B451 + tolerationSeconds: 4110500607743422500 + value: Jvs + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: exl + operator: ɐƴɧťɐ詴鬙ɾ + values: + - OMCg7tN + - SfgD2 + - key: rSxDRB + operator: ʬJ + values: + - SvUVX + - kW + - key: xu2dIO + operator: w9Ɉ怯4ǎm耥%ʖcCɉ鏦5nŐ + values: + - gNRWMe + matchLabelKeys: + - mNH + maxSkew: 1458194680 + minDomains: 2020965939 + nodeAffinityPolicy: Aǥ飃7睹DzbR + topologyKey: i0LeOVh + whenUnsatisfiable: 鶽o% + - labelSelector: + matchExpressions: + - key: pXo7K + operator: 4=Wrɑ炶Ƹ4厼áǒ绛ƕ祶亹ȉ,T齫 + - key: U + operator: ¨" + matchLabels: + 0FlprWV0: s + EcL68gi: sem + YB: qtc + maxSkew: -1059610273 + minDomains: 835990228 + nodeAffinityPolicy: hȮ妢Ö滀,ɕrƜG拜ɬ33:`囯 + nodeTaintsPolicy: ǎ苏ȿ鼌ɢNŞ鑼O'þ蹊硌)ļLJ篕 + topologyKey: hnK + whenUnsatisfiable: G蹃 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: 2vvwzU + - name: KiD + - name: ZxdGol15G +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + OLg70: YQZ + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + izml0: AtEbGFb + creationTimestamp: null + labels: + H15A: FR + ImNZ2R: 4b11Ajcj71 + MkV5WTrr: tzjZwG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: aYT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 40Wt-crd-job + namespace: default +-- testdata/case-030.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + 9GSVF: FmEK + gy8pF: IttW + jNt: b7Ckh + creationTimestamp: null + labels: + QYmKJqsxF: a + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xl0SYd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: spW + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 4s + health: + healthProbeBindAddress: wh + kind: fx7rbwOhkC0 + leaderElection: + leaderElect: false + resourceName: XYCb + metrics: + bindAddress: 2z98LiiBo + webhook: + port: 409 +kind: ConfigMap +metadata: + annotations: + t45I5Edqvo: dTHP + creationTimestamp: null + labels: + QYmKJqsxF: a + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xl0SYd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: vvvAuBP-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + t45I5Edqvo: dTHP + creationTimestamp: null + labels: + QYmKJqsxF: a + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xl0SYd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: vvvAuBP-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: xl0SYd +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + t45I5Edqvo: dTHP + creationTimestamp: null + labels: + QYmKJqsxF: a + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xl0SYd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: vvvAuBP + namespace: default +spec: + replicas: -1729986112 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: xl0SYd + strategy: + rollingUpdate: + maxSurge: 1852360537 + maxUnavailable: 1199663025 + type: ʍɌ秵'ȣŝKǩɧf抆aȶ"u_钳 + template: + metadata: + annotations: + DP: vR7i + EvDWLWA: sYk + J: TYkG + NN: Y28 + i: uQx + iv2FiB: dhm + creationTimestamp: null + labels: + U52C: 9m99CWM5D + XNiVP1FEuD: 8Ow + app.kubernetes.io/instance: operator + app.kubernetes.io/name: xl0SYd + nFfIbwkj: n4 + spec: + activeDeadlineSeconds: 1491750180455531000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: n7ZI + operator: :庉éx蠟窺龡佫´簒ƠGi腈K婢Ʀ + values: + - ydEC + - Fn6sN2U + - key: iV3S + operator: ím3 + values: + - fCBWy + - fW + - lrYyde + weight: -841504416 + - preference: + matchExpressions: + - key: 4nNfJjYxm + operator: 茚ňʥ×ư鳳ğ誣 ȧ橺ȋă麎VȷP + values: + - pF + - "0" + - n3R + - key: MBvHes + operator: 5x-y烠ɰ瑓ȯ;Ɩ>骽'ʙƿª + values: + - F + - E + - key: 3qCC + operator: H + matchFields: + - key: 4a + operator: ^%7!陆]áǽƑ + values: + - 5tOyDHcP + - key: Mn + operator: ēpÑ唛6YȰ)Cj + values: + - F8OfuV + weight: -2100989072 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: PNMu + operator: G:滨+v啁z + values: + - qeZH05L + - key: HKdNEvE + operator: 珏_ʭ&°jɼ?ɀ漎[朜Zʧʚ< + values: + - cl4xA + - lT4lytG2 + - key: dK3V + operator: "" + values: + - nXfYcJxF + - BExri6Ne + matchFields: + - key: l9S1Tbk + operator: '属<誟ʭ耞V7 ' + - key: OwqIY40d + operator: ťú_ȋ¥藠¬凓¼b黰塠(Ĉ臑 + values: + - O9 + - key: Maqk + operator: ʢeT'/`%憐襻 + - matchExpressions: + - key: Yq + operator: "" + values: + - suq9Y + - Sq + - key: 6ImE + operator: Q侩儲Ċ嶐嘍fgƓſĩd烽竿 + values: + - GL06Z + - J + - key: CdbCq + operator: ì + values: + - "" + - v20 + matchFields: + - key: VV1vDf + operator: 藥匷馑, + values: + - FLs3 + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: A + operator: 饠q胗撇瑘枢Ň 踚虑閯 + values: + - 5e5p3 + - "1" + matchLabels: + GbHjt4YR: 3SA + KaXhZ1A: "" + OdrIVDZy: rvf1Jyi + matchLabelKeys: + - n03k + - Bd4MsdiW1 + mismatchLabelKeys: + - lq + namespaceSelector: + matchExpressions: + - key: fd1Pm + operator: ȢɩF馩簨 + - key: jVz5YdK + operator: 4Ni¨锩ʄ5«勊 + values: + - Ay1xS + - 7P3 + - egGPMnv + - key: sXR + operator: u + values: + - uEhJvYZtHu5 + matchLabels: + Xjf: rOf7S8z + namespaces: + - RV + - UrPdb + topologyKey: "" + weight: -1089282795 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: IOzi8 + operator: '''!ɼiȇ騅gĿtQ)~醖T津ʆ螬' + values: + - yBHRl + - XSognnI7 + - P6R7EK + - key: 8eLSUq91 + operator: ʪh驥 + values: + - "" + - ybn3YpD + - gf8AUU3 + - key: g8aQKp + operator: "" + values: + - QFU + matchLabels: + R: V + matchLabelKeys: + - fMpoWnF + - JSoDrcs + mismatchLabelKeys: + - aYSr + - 4oS7w + - 5qVDerko + namespaceSelector: {} + namespaces: + - tZTyAU89 + - 38K + - "" + topologyKey: 5FXoc + weight: 553016367 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: {} + matchLabelKeys: + - lON + - Kzo + mismatchLabelKeys: + - yJpT7 + namespaceSelector: + matchExpressions: + - key: 3ZO + operator: ɑĚ3瓉5wż硹咳囼詖俁eǭKĐFJr + values: + - 45zGr1 + - QfLGiQ + - key: f9KevjXm + operator: $挠u%戨氌ǜĐyŵow騖橎Tʃ + - key: dWY + operator: 跥'ä>ȯƱC佛£墏 + values: + - 1DV6 + - HRKLX + - 4snWPV + namespaces: + - C + topologyKey: cAsX + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: "" + operator: ' /''n\¯ĒH-]ơŃǸæ' + values: + - kAx8 + - 0G + matchLabels: + N3pXu1W: ID + WiZBgN: fxG + t6k6N: "" + mismatchLabelKeys: + - 6hS + namespaceSelector: + matchExpressions: + - key: gW + operator: 渥êdɾo6ȭʈʂ眙圪 + values: + - DTw8 + - "" + - "" + - key: FM + operator: 鯓煫Zxȗ埱醏,v + values: + - 8A + - 3tkv + - a9l + matchLabels: + 8TTDPF: NV + XIa: 0tUkY + vREvWC: P9l + namespaces: + - HKF + - v + - 5i3eitpz + topologyKey: OQbp + - labelSelector: + matchExpressions: + - key: KkkcD11er + operator: 顑Ƹ + values: + - h + matchLabelKeys: + - DJOqJd + mismatchLabelKeys: + - 9w5aI + - t9giU + namespaceSelector: + matchExpressions: + - key: gHV + operator: 辪JSSȻüc努ɵ + matchLabels: + UkabJI5: tzaoXYFT + namespaces: + - q + - rIawKFyZC + topologyKey: DOHe0m + - labelSelector: + matchExpressions: + - key: ZddcC + operator: ?]贅ȈƣÜs攘ƥ)醆 + values: + - OqYA + - RtPG + - gsIOGJKwg + - key: bs + operator: Ǝ纟ɂ珣ʂǿÞoD桹ËgȦ º錜蠬Ǟ? + values: + - Ki7 + - id + - key: qNt + operator: g* + values: + - DzS27mhY82 + matchLabels: + QNK: I1TS + fqJxC1q: kzo + matchLabelKeys: + - a6Oq + mismatchLabelKeys: + - Vw2sH + namespaceSelector: + matchExpressions: + - key: 5h + operator: Þ®h + values: + - B6x + - 3b + - key: 2ZW + operator: 篰ȉ觉U閄 + values: + - 2BzPk8i + - 1vl + - dFQiBf13aS2 + matchLabels: + "": 96xv + SDtom: k6R3UQ + topologyKey: Vfqn + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=v1480 + - --configurator-tag=SwdpKv + - --configurator-base-image=a2vgH0 + command: + - /manager + env: [] + image: a2vgH0:SwdpKv + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 174 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 781 + periodSeconds: 737 + successThreshold: 923 + terminationGracePeriodSeconds: 976 + timeoutSeconds: 968 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 57 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 246 + periodSeconds: 645 + successThreshold: 749 + terminationGracePeriodSeconds: 650 + timeoutSeconds: 276 + resources: + limits: + cpu: "86" + memory: "770" + requests: + cpu: "411" + memory: "554" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - a + - vKrqNPcbUm + - POr + options: + - name: 2l + value: gRSlrVXm + searches: + - yYUHdam + - wEo + - hlUiZBq + dnsPolicy: ʁ"@ǔņƕ BMŘ扳qB嘗&ȼ泇 + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - ip: LqvaCa + hostIPC: true + hostUsers: true + hostname: geL4Aa + imagePullSecrets: + - name: h + initContainers: [] + nodeName: yR1 + nodeSelector: + O1HyM630: BKr67cI + ZUz5pLL8: hTYM22hr + l: iJBf + nj3s39: b9nBL + preemptionPolicy: 恟ƞǍʯ嚃A蟘ȃ|xNJǃŇȘ疻- + priority: 1877191256 + priorityClassName: 7K + restartPolicy: '*呦Ə版' + runtimeClassName: QnzgP + schedulerName: vVXMuZK + securityContext: + fsGroup: -7076089516419596000 + fsGroupChangePolicy: Always + runAsGroup: 1111714984489826400 + runAsNonRoot: true + runAsUser: -4289867089642414600 + supplementalGroups: + - -1924996851394923300 + sysctls: + - name: Tx + value: XY2MbMWpG7 + serviceAccountName: erwS + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: y2pJm + terminationGracePeriodSeconds: -4932597896166567000 + tolerations: + - effect: ńÜȶö邐Ɍ篒ȷbɚ + key: DjtMgK2 + operator: ſɵ2~ɒŕ+lİ + tolerationSeconds: -8775981821060471000 + value: eW72 + - effect: 飭鶱碹ķ欗ʧ掖ǥ|厎饥Łg暠k玈ʙɦ¨ + key: UxxYyS + operator: u銽豵X巅穓m>檭ärźW + tolerationSeconds: 7077156953375636000 + value: Aaf + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: 1OUY +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 9GSVF: FmEK + gy8pF: IttW + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + jNt: b7Ckh + creationTimestamp: null + labels: + QYmKJqsxF: a + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xl0SYd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: spW-crd-job + namespace: default +-- testdata/case-031.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 6WOM: xxkxL + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Zihc6G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: pnlpbYv + health: + healthProbeBindAddress: aghAW7 + kind: NJn + leaderElection: + leaderElect: false + resourceName: d + metrics: + bindAddress: AKGnHV + webhook: + port: 274 +kind: ConfigMap +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tDyp0579ogHIu-default +subjects: +- kind: ServiceAccount + name: Zihc6G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tDyp0579ogHIu-additional-controllers-default +subjects: +- kind: ServiceAccount + name: Zihc6G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tDyp0579ogHIu-election-role +subjects: +- kind: ServiceAccount + name: Zihc6G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tDyp0579ogHIu +subjects: +- kind: ServiceAccount + name: Zihc6G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tDyp0579ogHIu-additional-controllers +subjects: +- kind: ServiceAccount + name: Zihc6G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tDyp0579ogHIu-rpk-bundle +subjects: +- kind: ServiceAccount + name: Zihc6G + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: pnciO +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + B11cb: P1mQky + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tDyp0579ogHIu + namespace: default +spec: + replicas: -2080953608 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: pnciO + strategy: + rollingUpdate: + maxSurge: 624480148 + maxUnavailable: 302171922 + type: Ļ% 钮眶蟞dČ-{Q譩~).X + template: + metadata: + annotations: + "": qYpKB + L3jCpuTn: R + N068dY: ZtIf + creationTimestamp: null + labels: + 1Fnm: 1lZzGTl + FmIto: JkYODd59 + UCr6oTD: WoibN1isV + app.kubernetes.io/instance: operator + app.kubernetes.io/name: pnciO + dZqk3m: xbfDxoCxSY + i4ZeQT: R + spec: + activeDeadlineSeconds: -471603162845905600 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: YautP + operator: "" + values: + - Ewpi1iLxnJ + - key: nfN + operator: K馲ú澾ù元&ǡ>枻荚;峨 + values: + - syqSywj + - key: BLVU + operator: "" + values: + - 3cAXT + - r0ngW + - matchFields: + - key: 7gn + operator: VƇ,l颎*売v趞钫g + - key: kF + operator: Ɯ|$ʒCWp扃&Â嗨ʚ嫘Ăčʏ + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + FrZ20BP9T0G: kcsQkOFM + p5SaX: BWa6 + matchLabelKeys: + - Dq + mismatchLabelKeys: + - 7GQ1xUB + namespaceSelector: + matchExpressions: + - key: zms + operator: »帄ɟ忰@Ȋ裙ieȶd桲Çɚeģ9Ȍ + - key: WaJC + operator: Pȭ农êǎ2虢h + values: + - Lq9 + - a1rE + matchLabels: + 54U9lzP: KI + NWiZPMn: lUD6mXOAvcW + namespaces: + - f9vMBdG + - OtE7Kl5t4 + - tCDp5MkQ + topologyKey: eMtZ3EaLr + weight: -404766207 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: bylLV4V + operator: '#ǑlŬʒļ駚(ƺÛ#' + - key: Phb + operator: 皽縍$ºā + values: + - ZTTCKS + - iR761 + - key: we + operator: ȼ唋Ƹ鰝鸸 + matchLabels: + "": swZwuy2X + CXo0A: bZ1Hd + WVeq: C43 + namespaceSelector: + matchExpressions: + - key: M + operator: 汝:őĦìɝļ¸g_é咬ȌŷQ + values: + - Ou52 + - rNT + - key: c0Sww + operator: o;u轅鐘豄婙/ʌ孓ü觢ʢ抰某棜貦d + values: + - O4RT1 + - key: v8LG2 + operator: "" + matchLabels: + qaekw: V + namespaces: + - 3SJ + topologyKey: 8Ah + weight: -100386840 + - podAffinityTerm: + labelSelector: {} + matchLabelKeys: + - lQ5YvzOEF9 + - 5HroZ0o + namespaceSelector: {} + topologyKey: "1" + weight: -1687222587 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: "86" + operator: 剼ü湔籾蠻梆Š拌劬忼ɩƊ葞ù + values: + - 6V7zL + matchLabels: + 9W7XU7: pVMQk + matchLabelKeys: + - b8Xb + mismatchLabelKeys: + - Asp1qz + namespaceSelector: + matchExpressions: + - key: c + operator: ʮ圪愦湔良ȧȸ査ŸgŴ [綄ȶĶx水g + values: + - 0gkzZ + matchLabels: + "": 2fz + ZRX: 0ROqUZD + namespaces: + - 89i + - 92Wbhoz + - 8g + topologyKey: 9SY + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: {} + mismatchLabelKeys: + - p0OX + - zmXV + - iEys + namespaceSelector: + matchExpressions: + - key: iulNwOX + operator: "" + values: + - gLIt + - tCdWb + - 1Pca9je + matchLabels: + A5Ukw32ccnvh: u + WHM: 4lV + namespaces: + - n7wn2OMT2 + - PyLhj5vfkW + - BWN1eYBm + topologyKey: cb38xL + - labelSelector: + matchExpressions: + - key: jKK + operator: ǟ"L葛Eǁƫ瑛aǶ嶽b孆张 + values: + - GwIUiNGIVd3 + - KjB3mR + matchLabels: + pQpe9Slu: fEn + matchLabelKeys: + - DYN + - R8n3nmt + mismatchLabelKeys: + - pqIrH + - 5D + - eme662NaPz + namespaceSelector: {} + namespaces: + - wFOGE + - G + topologyKey: s + - labelSelector: + matchExpressions: + - key: F + operator: 鞥秧鉖鴲ǻ1zȕ鲐悬儓9鱬=Ǘ + values: + - W + - key: WQF + operator: '>' + values: + - J + - hW + - feLHE0 + matchLabelKeys: + - FWKCFwV + - 96Tur7 + mismatchLabelKeys: + - VBt + - zyRZ + - XIchXTS + namespaceSelector: + matchExpressions: + - key: AbxuK5 + operator: 蠐nj裑ɰ + values: + - dancPNoJe7 + - RX + - Wu + - key: kPo + operator: ķ婈=q氶ȵM謞űh卉ɐv鹧Ȱ嶴x屒 + values: + - hxeBTpB + - 5jBNGT + namespaces: + - 5cGxz9WU0 + - nxg + - HSSuQ + topologyKey: moFrs + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=XxZ + - --configurator-tag=zo + - --configurator-base-image=bqtHD7 + - Rlceb + - pf5 + command: + - /manager + env: [] + image: bqtHD7:zo + imagePullPolicy: Always + livenessProbe: + failureThreshold: 363 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 6 + periodSeconds: 87 + successThreshold: 435 + terminationGracePeriodSeconds: 689 + timeoutSeconds: 343 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 927 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 161 + successThreshold: 290 + terminationGracePeriodSeconds: 318 + timeoutSeconds: 976 + resources: + limits: + cpu: "613" + memory: "0" + requests: + cpu: "351" + memory: "320" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - CDHKmOg2 + - oUUYqD + - sbbQN4Uuof + searches: + - u3hKCjcy + - ZJgoaz + dnsPolicy: ȻR/ʗ楧鱞餇醓丏 + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - ip: TojRJXx + hostIPC: true + hostNetwork: true + hostUsers: true + hostname: 6GO + imagePullSecrets: + - name: wXRyxq + - name: WBMkPwZA + - {} + initContainers: [] + nodeName: xnWuRj50nA7rauK + nodeSelector: + e3nv: SVSvv9QvG + neY: uo + rYKkr: "y" + preemptionPolicy: ­Jf弣ƋŞ + priority: 1835241611 + priorityClassName: 15x + resourceClaims: + - name: 28yPU + restartPolicy: DŽ<6ɡ擼ƌ%t搨瓴°ū葠©璃Ş + runtimeClassName: rfuJ + schedulerName: OA + schedulingGates: + - name: ayGgwCwfW + securityContext: + fsGroup: -8912598160199637000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -676902822287339000 + runAsNonRoot: false + runAsUser: 6627815993032152000 + supplementalGroups: + - -6022127879436660000 + sysctls: + - name: mV7R6B + value: fJ6CBS + - name: EoDC + value: jGm8yNvs + - name: de9sf33Pb + value: 6yib5 + serviceAccountName: oPnm2 + setHostnameAsFQDN: false + subdomain: L8UrEhf + terminationGracePeriodSeconds: 69644444177153760 + tolerations: + - effect: 帓矔 + key: zVex3oS8 + operator: 氙幹E燲圻ą觵 + tolerationSeconds: -3800440195176564700 + value: HFHHuMka + topologySpreadConstraints: + - labelSelector: + matchLabels: + EjC5: 8NG9v2WPE + XJkn: dD77HfU + hGnZ: 1s + maxSkew: 976344313 + minDomains: 715355624 + nodeAffinityPolicy: 炝56ʔ歟W倌痓ŰȀ敲S$ǶƓK + nodeTaintsPolicy: ǰÑt贇ƆĽ盀ƺð權Óȡ. + topologyKey: WYqBsn + whenUnsatisfiable: 孍}?fʒł_6甀滈Ȏ摤礨哥ǩ( + - labelSelector: + matchExpressions: + - key: 7GTv1w + operator: '`UŗǍ挟桺źoH炚i)QŢ' + values: + - EPKxL + - jd + - key: JL + operator: 鸦b幆ɕyĬé瓔2ō筅Hʑ¹ȎMʧŀ + values: + - INqgDSOlW + - dMbo + - key: XuhdAJ + operator: 臔(蜸硰臈¹ + values: + - e + - DyatF7a + - Tf + matchLabels: + IPFW2o: pr2 + Jb3PtuCQSljh: jf + iU6: efk + matchLabelKeys: + - j9VpU + - ZOn + maxSkew: 1535859514 + minDomains: 1462801866 + nodeAffinityPolicy: gł曃lyi + nodeTaintsPolicy: 珁牘Ǔ糄JU]E见HB( + topologyKey: F + whenUnsatisfiable: jŖ + - labelSelector: + matchExpressions: + - key: "9" + operator: Ćǘ稸o + values: + - Z + matchLabels: + 6DCkFS8: 6Fsfw + maxSkew: 1853962238 + minDomains: -1346819512 + nodeAffinityPolicy: z绦Z-骗Ã涀]fp<琯+ + nodeTaintsPolicy: Ɵ珢¼F皈|a槵ĕ郉ǝŘ,懳Şʛc + topologyKey: B + whenUnsatisfiable: U蕟ÀG略xQX睩(¶驝Ś;ȘIȟljż + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: SQhKg +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 6WOM: xxkxL + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + Q3Y: wWGGlI + ZgcMSFjkA: f0Je + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pnciO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Zihc6G-crd-job + namespace: default +-- testdata/case-032.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + 3Y64: eosT + 5Qb9G22j: um5NlI6mc + uDYM5WqGQ: 6Z7 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: P6wEG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: TmM6fo + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: uCz2LaBB + health: + healthProbeBindAddress: Nb + kind: mBBMxze + leaderElection: + leaderElect: false + resourceName: TnI56l + metrics: + bindAddress: 3N + webhook: + port: 175 +kind: ConfigMap +metadata: + annotations: + 1Jk1: vK + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: P6wEG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Wzr8UxvO-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + 1Jk1: vK + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: P6wEG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Wzr8UxvO-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: P6wEG +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + 1Jk1: vK + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: P6wEG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Wzr8UxvO + namespace: default +spec: + replicas: -373101477 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: P6wEG + strategy: + rollingUpdate: + maxSurge: 1872021458 + maxUnavailable: 611380407 + type: 韟綣酠(蝀袁ǜ颀蒆Ų榹iqŚ$9 + template: + metadata: + annotations: + YBkiIECLXIgdW: 2bPKz + creationTimestamp: null + labels: + Y4U: nrcy + app.kubernetes.io/instance: operator + app.kubernetes.io/name: P6wEG + spec: + activeDeadlineSeconds: 1021876365023256000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: aGUe2X + operator: Ɗ潨湢璄 + values: + - gbcG + - AZrVPN + weight: -969250849 + - preference: + matchExpressions: + - key: peIn + operator: ¶Ȳ_*EɊ舰s溚yțá'岫Ď + - key: LIOE + operator: 氚ɻ- + values: + - JGGIfv + - 71lNlQE + matchFields: + - key: avL1 + operator: zÄǗ么ɫ + - key: cL7w + operator: '#駆表豸惟å磸ōljƭPf撋Ɍ痃' + values: + - TQ + - U + - I9Bdv + weight: -207976571 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: MhxRCBKeFN + operator: r\i骬¹/ǟƑÍz^}墹xoǰ + values: + - T6ug + - key: Bl0UX + operator: 犳ƫ}`Dž3RŞ-Ɩȹ + values: + - 1rrLPKR + matchFields: + - key: TK8S + operator: 箑cƀ拎Ɯ;īŖE榆丮ŏ譈ý + values: + - oDdm + - etqc + - key: "" + operator: 糑鑛ū畺 + values: + - IzMfpoP + - matchExpressions: + - key: qYbf + operator: ʡ踐BƯƫM辭丸J + values: + - "" + matchFields: + - key: qkWhoNTGm + operator: Ʋcº荧驑ʤL畏Ơbơy侫 + - key: aGh49Wr + operator: ģ^棖¡Ǒ燙ʫǯ尳楕刘?ʮŲ + values: + - ahme + - YcG + - 0oM + podAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: PqP7x + operator: 喢林 + values: + - zS5m + matchLabels: + "8": ag + mismatchLabelKeys: + - ToAWECJ + - 6fpRcrnJI + namespaceSelector: {} + namespaces: + - 4Xe + - YB + - O4F + topologyKey: ld7Fed9e + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + v: "" + mismatchLabelKeys: + - a + - kkTV + namespaceSelector: {} + namespaces: + - LR3ffs + - VJNB + - nboH7iG6fen9 + topologyKey: Hfw5LCBf6AFM + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=G3wz + - --configurator-tag=RK6Ba96O + - --configurator-base-image=16DN2 + - wK + command: + - /manager + env: [] + image: 16DN2:RK6Ba96O + imagePullPolicy: Never + livenessProbe: + failureThreshold: 434 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 154 + periodSeconds: 384 + successThreshold: 791 + terminationGracePeriodSeconds: 736 + timeoutSeconds: 759 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 788 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 840 + periodSeconds: 70 + successThreshold: 50 + terminationGracePeriodSeconds: 469 + timeoutSeconds: 0 + resources: + limits: + cpu: "398" + memory: "535" + requests: + cpu: "52" + memory: "121" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - KryE + options: + - name: qZp + value: ChR + - name: jqbI + value: bk + - value: 0Ypmpzf + searches: + - "" + dnsPolicy: Ɩzȇɀ + ephemeralContainers: null + hostAliases: + - hostnames: + - nidz7Yuy + - DhC5x7t + ip: pY + - ip: dmk + hostIPC: true + hostNetwork: true + hostUsers: true + hostname: ciij + imagePullSecrets: + - name: vgy + - name: Dw + - name: AmPdW + initContainers: [] + nodeName: 5l + nodeSelector: + FCWVhL: BX + fg6adycMTt: wE + gAxa: ZuxUYdtnF + preemptionPolicy: Mƈņumě + priority: -1104627993 + priorityClassName: hBUTUiJP + readinessGates: + - conditionType: W澬5ȳȆOAǵ轼鮁D栮ɱ + - conditionType: ȑNJĸ疞ɮt壓ǝ4ȥ迯NŴ銜表 + restartPolicy: 淄休ŋL綳ǀƲ年ĺ5ʉ2 + runtimeClassName: tFo + schedulingGates: + - name: C + - name: ICjGq + - name: N0k + securityContext: + fsGroup: 3700215875989369000 + fsGroupChangePolicy: Always + runAsGroup: 969663494467258200 + runAsNonRoot: true + runAsUser: -6839067346023426000 + supplementalGroups: + - 5885422743674264000 + - 7949464185642053000 + - 3151508661079112700 + sysctls: + - name: V3Mli + value: mWPuG + serviceAccountName: sxeN2i + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: LRw2C4hiMR + terminationGracePeriodSeconds: -5489278371963064000 + tolerations: + - effect: 醜ȋ,ȿɔ疦煫篓ő凢e腇旗ʤ}DZ7 + key: FDtXKIviZj + operator: 'K ' + tolerationSeconds: -3134249558038261000 + value: O1m7Z + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: RQvPr + operator: S癱骜皭Ȭ覚ɱ蠀X + values: + - kL2Q + - key: B7i + operator: 縣ʍʣ + - key: Z8VcoQkm + operator: 螺Ń沙国?Oɯ<'榶 + matchLabels: + 8rtP: hROP + sbkwpMQijVFr1S: tpVZLGMk + maxSkew: 377835089 + minDomains: -1687478953 + nodeAffinityPolicy: .=2ń蹁 + nodeTaintsPolicy: Ɖ'ɖZBʋ~厵¤ŵâ + topologyKey: 1QrEq + whenUnsatisfiable: uńƹ彠橐猩Q吁4#队軝TXkȗǎ + - labelSelector: + matchExpressions: + - key: ytUedNja + operator: 坫茪憹L淜\Ű+c + matchLabels: + m9kJd252K: iPfeV28 + maxSkew: 1766424504 + minDomains: -1719290285 + nodeAffinityPolicy: O陂Ȧ + nodeTaintsPolicy: hƦLe皴ǀ荾;È;ɁR習彸ʧ,! + topologyKey: Yln + whenUnsatisfiable: î根¯ʟZ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + 1Jk1: vK + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: P6wEG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Wzr8UxvO-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: P6wEG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 3Y64: eosT + 5Qb9G22j: um5NlI6mc + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + uDYM5WqGQ: 6Z7 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: P6wEG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: TmM6fo-crd-job + namespace: default +-- testdata/case-033.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 5gjqBM + health: + healthProbeBindAddress: U8r6618MEX + kind: NEUo8izo0UYP + leaderElection: + leaderElect: true + resourceName: q + metrics: + bindAddress: 0ECBKwI + webhook: + port: 441 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 6z0k3NX-default +subjects: +- kind: ServiceAccount + name: 9xg1jKJ + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 6z0k3NX-election-role +subjects: +- kind: ServiceAccount + name: 9xg1jKJ + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 6z0k3NX +subjects: +- kind: ServiceAccount + name: 9xg1jKJ + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 6z0k3NX-rpk-bundle +subjects: +- kind: ServiceAccount + name: 9xg1jKJ + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 9wjOhT +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 6z0k3NX + namespace: default +spec: + replicas: 999315295 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 9wjOhT + strategy: + rollingUpdate: + maxSurge: 520022418 + maxUnavailable: 419878016 + type: Ǣ=ʣxfȸ + template: + metadata: + annotations: + 3k2GZ: pSZov + OfkmIIg: lvn0EuSw4nQ + aTgP: 0C4pWjw6Xjegg9a + creationTimestamp: null + labels: + F6WO: Ib3 + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 9wjOhT + hKO47: xAT + wue: VABbdY + spec: + activeDeadlineSeconds: -4209332569599939000 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + e1uTVLJ: McLB + matchLabelKeys: + - "40" + - "4e73" + - 6r + mismatchLabelKeys: + - 1p9eMjY + - zJg + - diCC + namespaceSelector: + matchExpressions: + - key: 74rez7DvhRz + operator: JU砽ʜ + values: + - MORLtc + - VHEUu + - key: 8v + operator: 畝鎻仝魭騢Ȏ譔$jn-¶Z龗ɋ錻皊K蔛 + values: + - bCCcq + - 51Pi + - key: 1Z8od + operator: 癟kD儼Ⱦ_鵈Ƈ顱櫈@ + matchLabels: + bC45: odNesqxgbw + namespaces: + - e7Alx + topologyKey: 4NKc5T8i + weight: -546355911 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: Z4eJJ2Ek + operator: M鿭ǝį¤\< + matchLabelKeys: + - IwKA74 + - ultKoAtDc + mismatchLabelKeys: + - KjOF3 + - 9zbv + - r3h + namespaceSelector: + matchExpressions: + - key: "" + operator: 卍Î + values: + - 3Ye + - KeE + matchLabels: + d6Eak: WoS + gbK1: NlgbLbiLc + yqjy: yncCdbLug + namespaces: + - u + - XoIW + topologyKey: RLOi1 + - labelSelector: {} + matchLabelKeys: + - 0NKRa + - W + - Aet + mismatchLabelKeys: + - Nz45q + namespaceSelector: + matchExpressions: + - key: pSkn + operator: 壭aǔq + matchLabels: + Am5: "" + tKok: eb + topologyKey: Egqc + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: fGm + operator: Ɠ±ŜP沓v!簜蝦蕱 + - key: "" + operator: kÿ烩篽日ƀ竷-:甒 + values: + - "6" + - key: kZRV9jWCo + operator: 棴ɉvy#eȓōȥ胯ė + values: + - k0LEzj + - O2UF5eHj0 + - W + matchLabels: + 3loBH: nImIeI + RLYek: "" + RaosO: D + matchLabelKeys: + - FzbbgJyd + - raTbn7yH + - 1Q + mismatchLabelKeys: + - OiiaM7 + namespaceSelector: + matchExpressions: + - key: gO4fmt + operator: 訁C眄ǰŅ}ƣ2Ý斲谌ľʧ鏼 + values: + - 64Lx + - 9F + - key: fcYRW5 + operator: £VŠȻ謐ȁ0Ȼő6*ğ陪枭棩ly + values: + - Oq + - a0IsYdZMH + namespaces: + - WhR27YV9SRRJe + - oja4 + topologyKey: c3o + weight: -4040378 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: HH + operator: ƛGȯ刃R氎殯佲颅菉ĜƊǖ誹 + matchLabels: + qxmta: "" + matchLabelKeys: + - 8Fv + - eMMF + - nyHcgRL + mismatchLabelKeys: + - my5jBGHjD + namespaceSelector: + matchExpressions: + - key: dLgl + operator: "" + values: + - 6WV5B + - key: fwoTix + operator: 旐ƕ坾臎ė + values: + - PcbJF6cVs + - bCP1 + - key: Jqd + operator: Ũ,聙Ïȶ@娋k<鲫čCȈdM?Q裚 + values: + - hbQ + - Uwec1YfIJ + - TWua5OK + matchLabels: + F: ZNp + lI1P0: dyy + p3EHV: D + topologyKey: ez0SYN3KBc15j + - labelSelector: + matchExpressions: + - key: qaxGoT5SKrO4l + operator: ɔ鿿>Sx + values: + - Bb + - 3HCn5YL4sIt + - XBdy + - key: "" + operator: 禨裦¤U夣ŗ ē晈`Ȃg欆Ƙ乕馫FXõ + values: + - sPTz9aiX + matchLabelKeys: + - eh + mismatchLabelKeys: + - 9ZZ0BNgs5 + namespaceSelector: + matchLabels: + 1w: 4Wmj + NmKh: Jy8 + topologyKey: Ftf + - labelSelector: + matchExpressions: + - key: Vd + operator: 趢lɉ%# + values: + - kHBf2 + - key: s35 + operator: 噅ńsʓ謳?t + - key: ziqc3J + operator: 2ɼ + values: + - wtNQkwXx + - Bn + matchLabels: + D8qrb: Vnn1hIL + matchLabelKeys: + - W1 + - WtO + - "" + mismatchLabelKeys: + - nM + namespaceSelector: + matchLabels: + Vpv: UPW1 + topologyKey: RnHxlh + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=KMFMJqF + - --configurator-tag=NaNHQ74 + - --configurator-base-image=MhZp + - SkxA4PXfixGo6H + - Fa1 + command: + - /manager + env: [] + image: MhZp:NaNHQ74 + imagePullPolicy: Never + livenessProbe: + failureThreshold: 555 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 880 + periodSeconds: 169 + successThreshold: 536 + terminationGracePeriodSeconds: 269 + timeoutSeconds: 579 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 166 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 850 + periodSeconds: 870 + successThreshold: 880 + terminationGracePeriodSeconds: 604 + timeoutSeconds: 425 + resources: + limits: + cpu: "713" + memory: "863" + requests: + cpu: "273" + memory: "183" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - Nr + - d0S + searches: + - Fue + - pDaMCHRq5 + dnsPolicy: 皰|ç0~bȾɷ + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - ip: I + hostIPC: true + hostUsers: true + hostname: wIg + imagePullSecrets: + - name: 1G3qsUeX + - name: MfQ3EzTp7q9k + initContainers: [] + nodeName: gNBksxjndF + nodeSelector: + "": k2KbB + 5dCSt9: LElGJ + cIMAXDCuY: Y52Ax + hq20GpR0VRl: Hm + preemptionPolicy: n悳Ťu峧2 + priority: 1538920371 + priorityClassName: mxyOicuJ + readinessGates: + - conditionType: ɷŗ翜栘 + - conditionType: Řʦȏ耟Wįƹ4EÊǖ桉ɭþJ鵻Ȅ + resourceClaims: + - name: MuBfNAK + - name: cz4eqU0R + - name: zfsdyo + restartPolicy: 纍k$ƴI» + runtimeClassName: 4MqDyq5rk + schedulerName: t3coUSyQ + schedulingGates: + - name: c9pzaF + - name: DPecI + - name: GSp + securityContext: + fsGroup: -156572939790639140 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 2183539069813392400 + runAsNonRoot: false + runAsUser: -3112209966011252000 + supplementalGroups: + - -2156329419442480600 + - 5019114569367727000 + sysctls: + - name: O9kEHw + value: 9jLYuYu0k3lOGn + - name: ScRMe + value: mXsDu + - name: qICk7 + value: "" + serviceAccountName: 5oCOmk + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: TUd + terminationGracePeriodSeconds: -3744990875899211300 + tolerations: + - effect: Ɵ'@?蓎dz錥釽鰼ɖ嫖禎 + key: 7RABX + operator: ʄ- + tolerationSeconds: -6156514130788734000 + value: EtqEjW + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: eLd0JExcVs + operator: ƍ[{Ƃ + values: + - YEWhJ + - y8L1j + - key: "" + operator: CĻ郵奡ųÜÁsŇǞĺ均麶dxʦd + values: + - 66bLrjD + - 62Hbwh56 + - key: sfXaWbXD0 + operator: "" + values: + - yQo + - "" + - KOExMK + matchLabels: + cf: vgE + flC51TdC: vDJf6O32 + matchLabelKeys: + - IxVFD + maxSkew: -1442030726 + minDomains: 2122004706 + nodeAffinityPolicy: s + nodeTaintsPolicy: .ɶȁ汉聙ȯ + nodeTaintsPolicy: =ljí + topologyKey: 3vd + whenUnsatisfiable: ȶ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: Y4eYBG + - name: wtbsGN +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + Ak8Zx: tu0 + Ed: "" + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + IkOwwd: 37ZfCkM + M3fH: xmhoB + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 9wjOhT + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + uUW: Us + name: 9xg1jKJ-crd-job + namespace: default +-- testdata/case-034.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + 0A3p3: jM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + in: IEvkGW7b + name: ClL0jwLRjj + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: gwFHgU3 + health: + healthProbeBindAddress: wnA5 + kind: SN4Pz + leaderElection: + leaderElect: true + resourceName: rAphO + metrics: + bindAddress: p6a + webhook: + port: 211 +kind: ConfigMap +metadata: + annotations: + jFAGoiKg: S0ruuP + louERS: dWcc + creationTimestamp: null + labels: + 0A3p3: jM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + in: IEvkGW7b + name: t-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + jFAGoiKg: S0ruuP + louERS: dWcc + creationTimestamp: null + labels: + 0A3p3: jM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + in: IEvkGW7b + name: t-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 6xIMZiuoly3 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + jFAGoiKg: S0ruuP + louERS: dWcc + creationTimestamp: null + labels: + 0A3p3: jM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + in: IEvkGW7b + name: t + namespace: default +spec: + replicas: 1507271392 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 6xIMZiuoly3 + strategy: + rollingUpdate: + maxSurge: 1343937480 + maxUnavailable: 989960583 + type: i巅P°į欈Ǣg9搨ň偲颕Å矐, + template: + metadata: + annotations: + "2": ICCoP4E + "7": bp8zXzOF + "095": nWcb + a8BQYCvG: vrjwweZiCAe + bme33: i9xjX + cnwK: WP + creationTimestamp: null + labels: + Dn: Xe + EX: Bb4 + JKMTjfb: Yimx + PL2: SxbcU8Sv + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 6xIMZiuoly3 + voHHm: eY + spec: + activeDeadlineSeconds: -6398421988897698000 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: Pp9 + operator: 衴ʨ瑕.r魿ɺŧ凋_&瓉î寖¤tĜt" + - key: VG + operator: 鼸眙0!啵鹾迓胪SĖY + values: + - i4l + - Y6gl + - WA + matchLabels: + 5jqgHGxN: uQx + mismatchLabelKeys: + - acp + - gn0p04 + - CvvldniL + namespaceSelector: + matchExpressions: + - key: UsyM + operator: Ǭ. + values: + - aFu2Db8qvq + - SwzwU6As + - key: EgI + operator: "" + values: + - 2SN + - i4aVPZmT + - key: JoubvvqBLU + operator: R筈駊Ŗ:挶 + values: + - GqK4CV + matchLabels: + Hxf: Kv + i5ScCfIqa: kao + namespaces: + - TMpTw + topologyKey: d + weight: -119797982 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: zPe50d + operator: '?' + values: + - iFqAX + - key: xnW + operator: :攃ĺV窎 + values: + - 3nYZuq + - JQEB7x + - ZWU + matchLabels: + 9rE8VGR: OZgHuti + OP: ckCaWEL + matchLabelKeys: + - k660y + - 7BvT65jhS + mismatchLabelKeys: + - 4wGxeaSgyM + - "" + - 1X + namespaceSelector: + matchExpressions: + - key: o0sT + operator: ʅ¿掯儯 + values: + - qZ + - l + - YtpVM0H + - key: LVBzP1Ae + operator: ó3缐穳娫嘽3x + values: + - LEbLp + namespaces: + - b6s3a0g + topologyKey: tgJ1ADV + weight: -60551341 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: 7CXo + operator: ũTƓ¨q噞W淵ƚeƘ綗跉Ǘɶɨ靟樿t + values: + - fIjL8ud + - cP6ku3Ce + matchLabels: + EPN: NAF + matchLabelKeys: + - 1Gmhbm + namespaceSelector: + matchExpressions: + - key: 4GLPuhOFl + operator: "" + values: + - rcxiBTaZ8FV + - 7aKrc + - "43" + - key: HlS + operator: 倗龿泍ȗʗe囝涷購;źFƝ單a軷& + values: + - niV + namespaces: + - D + - Qq + - "" + topologyKey: zz + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: eAqYoR2B + operator: ʧ膕眹Ʈǰ韑&ÅÆ7ə&ĝ + values: + - rkx + - key: 3ycQsqbL + operator: =¡憴ʊĩƬ_ɕ + values: + - Xp + - xrURdzvH + matchLabels: + s: Q + matchLabelKeys: + - HRAIb + - 5a6U + namespaceSelector: + matchExpressions: + - key: "7" + operator: ʉĥ + - key: NX + operator: ɽ阣旦Áļáʋ霐ĊW覒bYy竰ɋV条蒩 + matchLabels: + "": O4C + JDyjt3: TX + namespaces: + - 9zv + - vb75Ef + - x7R0H + topologyKey: 6BGhh + weight: -1485510964 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: CxpFW5N + operator: n鉢q + - key: T + operator: Y襱Ƞ)4ʜåȸ譨R袞îü筎@b + values: + - hqdw8EVv1 + - 1mT3hr + matchLabels: + UnfuNo: YxmvwMe + mismatchLabelKeys: + - Ov2egK5 + - IOdr + - aoAX2p5 + namespaceSelector: + matchLabels: + 6mgvu490: TT + sXWWyY: Tcd6j + namespaces: + - UOXmG + topologyKey: "" + - labelSelector: + matchLabels: + GgvCsL: 4nHaBTb + xsHA4dSX: A0s6 + matchLabelKeys: + - ISAMP4TC + - ks6XZ9fL09 + - 9av + mismatchLabelKeys: + - SvB0 + namespaceSelector: + matchExpressions: + - key: 70TOcc + operator: 媭饴$ʉ灞颉Ǵ粨 + values: + - oK2lFz54 + - DT + - key: "n" + operator: 爵礝8oJb赇n + values: + - JcD + - 0PHAj4GyS + - 8OS9FIppKicyyn + matchLabels: + wV: agcZU + namespaces: + - S7GUz7tacC + - qmihBv1hRQ + - sl18T1 + topologyKey: s7dw + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=SzbHWgTpbD2 + - --configurator-tag=jr9 + - --configurator-base-image=5Q + - gQcl6Ej6 + command: + - /manager + env: [] + image: 5Q:jr9 + imagePullPolicy: Never + livenessProbe: + failureThreshold: 810 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 500 + periodSeconds: 189 + successThreshold: 853 + terminationGracePeriodSeconds: 565 + timeoutSeconds: 525 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 348 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 901 + periodSeconds: 523 + successThreshold: 143 + terminationGracePeriodSeconds: 422 + timeoutSeconds: 114 + resources: + limits: + cpu: "760" + memory: "142" + requests: + cpu: "163" + memory: "318" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + options: + - name: 6Fq + value: cuoN + - name: cVM + value: e4mx + - name: IAvD + value: 4szS0pX + dnsPolicy: 絀揋a + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - v0Kv + ip: eQ3r5 + - hostnames: + - 8nEk84M + - euK9Qp3 + ip: LEDvLQQsFo9 + hostIPC: true + hostUsers: true + hostname: 3iw + imagePullSecrets: + - name: 9J + initContainers: [] + nodeName: 3Q886bLj + nodeSelector: {} + preemptionPolicy: ň鈩(ɟǛ穯農麤蠼 + priority: -770320052 + restartPolicy: ʇ`&箸ħ + runtimeClassName: D + schedulerName: IESs5 + schedulingGates: + - name: 8U1 + - name: X + securityContext: + fsGroup: 6118947562666083000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 6213863176334278000 + runAsNonRoot: false + runAsUser: -2189966760468144400 + supplementalGroups: + - -8830045925767746000 + sysctls: + - name: 34Kkf2OQ + value: 7ZPrf + serviceAccountName: f0 + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: "6" + terminationGracePeriodSeconds: -7029881915293393000 + tolerations: [] + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: Ra + operator: 豼 + - key: dEVKZS3 + operator: i膆邓柟洬墐Ǿ$ + values: + - l + matchLabels: + 0ZyOGf: Wijr + matchLabelKeys: + - xlVcmk7TJ + maxSkew: -2107805018 + minDomains: -1180467181 + nodeAffinityPolicy: '''ŵ豞穾蹙還ȑ' + nodeTaintsPolicy: Ğ繰Ÿ@-ě + topologyKey: 0dMxJp + whenUnsatisfiable: ¬鴍ʀɞs<ǨŜ凓ĖDzȣ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: "6" + - name: zAdnzeSaest +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + jFAGoiKg: S0ruuP + louERS: dWcc + creationTimestamp: null + labels: + 0A3p3: jM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + in: IEvkGW7b + name: t-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + 0A3p3: jM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + in: IEvkGW7b +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + 0A3p3: jM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6xIMZiuoly3 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + in: IEvkGW7b + name: ClL0jwLRjj-crd-job + namespace: default +-- testdata/case-035.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + R: x + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: k + app.kubernetes.io/version: v25.1.4 + dcuPV: Fy + helm.sh/chart: operator-25.1.4 + name: 1316QiC + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 9nlMnZj2 + health: + healthProbeBindAddress: 86hb6c8 + kind: pS + leaderElection: + leaderElect: false + resourceName: Rej6x7c + metrics: + bindAddress: AA + webhook: + port: 385 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: k + app.kubernetes.io/version: v25.1.4 + dcuPV: Fy + helm.sh/chart: operator-25.1.4 + name: PW6-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: k + app.kubernetes.io/version: v25.1.4 + dcuPV: Fy + helm.sh/chart: operator-25.1.4 + name: PW6-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: k +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: k + app.kubernetes.io/version: v25.1.4 + dcuPV: Fy + helm.sh/chart: operator-25.1.4 + name: PW6 + namespace: default +spec: + replicas: -863901194 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: k + strategy: + rollingUpdate: + maxSurge: 273545509 + maxUnavailable: 1165284047 + type: 竈繭ż7訽ǵVHoG捔Ą + template: + metadata: + annotations: + 0vs: "1" + L: dwD5nU + pUlqRf45: NG + creationTimestamp: null + labels: + F8kfXVrMt: lr0M + WOU: k + XHCkj: QKIvxGl5 + app.kubernetes.io/instance: operator + app.kubernetes.io/name: k + spec: + activeDeadlineSeconds: -479205534661964100 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchFields: + - key: O4qec + operator: ǀ诺n罣湰ƾŝ黜ǒ耴Ƴfä + values: + - lVX + - 7EKxRsUAz + - key: 1ed + operator: u + values: + - WxGv2 + - key: fTLDFjvn + operator: 7懱c + values: + - so482 + - EitqgZ + podAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: {} + matchLabelKeys: + - DJge + namespaceSelector: + matchExpressions: + - key: rn9 + operator: ƣ愠ƈh絳eɓi§ + values: + - 6imO + - key: yUkrn + operator: ʅv憼腨ɚ + values: + - mZ + - oO1UJ + - 8q + - key: QCHd6 + operator: 櫨}R茤ţmɔ铫uLjȚșǫK借 + matchLabels: + PQQx: zwV + RyFpnA: zQqlgMizGEu + namespaces: + - "9" + topologyKey: kk7yjR + - labelSelector: + matchExpressions: + - key: "y" + operator: ^C境ɂ馷1*DŽz辺uǠʒ6袏c躼ø + values: + - Z + - zfWOtzNayRN + - UN7Auq + matchLabelKeys: + - MZm + namespaceSelector: + matchExpressions: + - key: aDfk1sPM + operator: 姚1Y + values: + - vDNH8 + - 1VLVR + - BUY5Xx4 + - key: g0Cr + operator: 枙!Ǥ + values: + - B00qSVLkHpfG0 + - key: 3RWUaD + operator: 龷衈凌_敃FLJ饮J噁赡 + values: + - BvLwik + - Bqm54DxyiW + - v2N9o + matchLabels: + FI: 4CJ6Ehq + e3Xo: qa + topologyKey: k98kmgw + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: TQvU6Id + operator: yȨÁ汑ȟEʪɫzȷj脽硗ɬO$ǫ羡 + values: + - WCNC49poydsy + - 5esRdA + - uio + - key: mmE + operator: 釮GsEɲ诒檃拼6韺ÛOm疐ɦ + values: + - "37" + - key: mqVOqJq + operator: Ǝ + values: + - hAKG + matchLabels: + D0geiPus2: tCC + tzXLb: 0Uq + matchLabelKeys: + - Kj + - yi + namespaceSelector: + matchExpressions: + - key: cckS + operator: ɲʣƁ嬩ʧɡ跊Ĥȃ懍嗆鹿Ǜ + values: + - 5inp + - DzJRJ + - key: UOF + operator: 餱覲Kȃ篙兄禔ɥ擫 + values: + - VRWd + - B + - w2ggqD + - key: hwT2eq + operator: 椟k¡栤蘩à娰訾玽-ʏ=^窻ƦX¾, + values: + - g6L + - N9B3wmlSo + matchLabels: + "": "" + Ql: aM + aQp: Wu6 + namespaces: + - Cea4 + - 1c69 + topologyKey: 0T + weight: -1373208300 + - podAffinityTerm: + labelSelector: + matchLabels: + 21EsNlB: oMlzm4tm + matchLabelKeys: + - jW2041N + mismatchLabelKeys: + - 9QZQ2WMN + - TT + - U + namespaceSelector: + matchExpressions: + - key: S + operator: vĢɸɦ狓Ui4lĖ弳Y.珸 + matchLabels: + 7l: BJrJcdKfp + kSRav0N: rDbz53oTY + qKh4tv: iDb2z + namespaces: + - uUXdfwE + - VBuV9 + topologyKey: "" + weight: 1039679825 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + C4Saz4lf: 42so6l + L34Nnw8Frg: 4wOR + zDwo: 7hctY + matchLabelKeys: + - iec09dAvG + namespaceSelector: + matchExpressions: + - key: mVp + operator: ų + values: + - yrYw6b + - key: EWsZkpwQ + operator: '埁T佮Ŕ&:' + matchLabels: + G4T: "68" + topologyKey: 3DBj74YHA7j + - labelSelector: + matchExpressions: + - key: IPYws68w + operator: lǰƻſ¯I4x>#ɶ%ɯ徬 + values: + - Z9f + - CQGBiVMq + - key: uXd8n6 + operator: '%J}聜ȡ' + values: + - FOL0 + matchLabels: + "6": 21G4 + m3c4: cUiCI + matchLabelKeys: + - "n" + - nP4Sn + namespaceSelector: + matchExpressions: + - key: Zwk + operator: ŵǹ柉忬诱ôF9搫Ð}*ƞAɺʠʅ日 + values: + - "4" + - 4Y6C + - YpRMY + - key: P3aF4fm4Fc + operator: Y{Ǽɠ + values: + - dJrrmvxXi + - o0qAWA + - tXyqe + matchLabels: + P0A: "" + ROb1lF: gN6G6Wtg + u4apTzbF4XO: i1tol + namespaces: + - JHJ + - BGu5k3e + - TjWU + topologyKey: yhmLl4 + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=iAMFhZ + - --configurator-tag=i6Q4sn53d + - --configurator-base-image=P9JMlA + - 8kSamSw9 + command: + - /manager + env: [] + image: P9JMlA:i6Q4sn53d + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 122 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 163 + periodSeconds: 240 + successThreshold: 310 + terminationGracePeriodSeconds: 814 + timeoutSeconds: 57 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 320 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 395 + periodSeconds: 682 + successThreshold: 493 + terminationGracePeriodSeconds: 888 + timeoutSeconds: 845 + resources: + limits: + cpu: "417" + memory: "633" + requests: + cpu: "307" + memory: "967" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - E4iX + - wh8 + - sEe + options: + - name: LG5d6Ts + value: jCMr + - name: cZX + value: "47" + searches: + - GceCBWJ1Bz + - gMgtPpnfwg + - xJL + dnsPolicy: ʭřɖ讋朩čɦq9 + ephemeralContainers: null + hostAliases: + - hostnames: + - 4jg + - A6aDqHij + - J0F + ip: JzFtYa + - hostnames: + - 2S1cK + - lgaF6AE + ip: Nm5sHlku + - ip: QVK + hostIPC: true + hostUsers: true + hostname: w6S + imagePullSecrets: + - name: jUtd + - name: 4HyE5S + - name: cTV + initContainers: [] + nodeName: biEOYK + nodeSelector: + 4PEnEGV: iaAZkrS + m: GP78P + p3: LwcLZgWD4x + preemptionPolicy: 赬應敪塀ſ缲ťǎ邙Xt*Öơ + priority: 1451453581 + priorityClassName: mR + resourceClaims: + - name: PNC + restartPolicy: 諜ŵ7骕蝍ă%Dz薋űĨ¿,M_T + runtimeClassName: aNuW + schedulerName: 5Sk + schedulingGates: + - name: SN + - name: mM + - name: IOhXovq + securityContext: + fsGroup: -3507907059458774500 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -7869609674426729000 + runAsNonRoot: true + runAsUser: 638537944699867400 + supplementalGroups: + - -1194734635076507400 + sysctls: + - name: kWMtMKZgRV9K + value: FeSa + serviceAccountName: NVe + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: P0cezK + terminationGracePeriodSeconds: -7912782538847534000 + tolerations: + - effect: R + key: npvocBvp + operator: nĥ憱勐蝵炱¸矋ȓ[ + tolerationSeconds: 7409148459521107000 + value: dh6H4ND + topologySpreadConstraints: + - labelSelector: + matchLabels: + P6nf: ND + c1BhNr: YluE8 + rtFA6: iapOjb + maxSkew: 1600069253 + minDomains: 1529433080 + nodeAffinityPolicy: Ǎ倭赖 + nodeTaintsPolicy: ĵů)w[楰R醡uZɱ噍螽曚l* + topologyKey: mmx0nY + whenUnsatisfiable: Æ Ɂ聠Q + - labelSelector: + matchLabels: + MbFDM: 8xD9 + maxSkew: -959650895 + minDomains: -1666435784 + nodeAffinityPolicy: '>Å洗墠Å×蔪o鍵禮廾' + nodeTaintsPolicy: ~rš煫¤īLǬ纨ʫNŪ吮卼¥ÏȦ + topologyKey: 2PWoF15m + whenUnsatisfiable: Ƈ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: "" + - name: MlOcWr +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + R: x + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: k + app.kubernetes.io/version: v25.1.4 + dcuPV: Fy + helm.sh/chart: operator-25.1.4 + name: 1316QiC-crd-job + namespace: default +-- testdata/case-036.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: oVpv6Jbiu + health: + healthProbeBindAddress: rM + kind: "4" + leaderElection: + leaderElect: true + resourceName: 8ABD2 + metrics: + bindAddress: aptE + webhook: + port: 265 +kind: ConfigMap +metadata: + annotations: + UUhlBGZ: "4" + klq64tXT: lQvkvI + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Z4N6WbZ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: a-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + UUhlBGZ: "4" + klq64tXT: lQvkvI + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Z4N6WbZ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: a-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Z4N6WbZ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + UUhlBGZ: "4" + klq64tXT: lQvkvI + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Z4N6WbZ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: a + namespace: default +spec: + replicas: 501079035 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Z4N6WbZ + strategy: + rollingUpdate: + maxSurge: 2067590918 + maxUnavailable: 1947322773 + type: 8t哨F + template: + metadata: + annotations: + 2obh6r: YJnq + REz: "91" + q1: hpRYOkCjD + creationTimestamp: null + labels: + 8YshAI6y: MbG3NXx + PWOkXnXZ: jBxq + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Z4N6WbZ + tAL: H977c3z + spec: + activeDeadlineSeconds: 8869812654614202000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: {} + weight: 473439767 + - preference: + matchExpressions: + - key: "027" + operator: 苒&FɅ-UĖ + values: + - gPn9 + - hvowqqp8Q9 + matchFields: + - key: NCl + operator: ',+ȰB诐Uŭ怍睞ʧ澣0樐阿ijȓ娱Ȥ' + values: + - NgJ8z + - NeO + - Qkl + - key: Pb + operator: ȅ< + values: + - Dbq0DDR + - wVYD8l9l + weight: -396603968 + - preference: + matchExpressions: + - key: LhzwY + operator: "" + values: + - FrO + - "" + - 0m + weight: -1154736427 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: gF0 + operator: Ɉ涍ʃŽ杔+ + values: + - YkDQ + - m + - gMKIh + - key: UDt50o + operator: 篲Ǟ僌 + values: + - htXPClZ + matchFields: + - key: MUyQ + operator: 雸槾ô慾鹸x籢 + values: + - mYLc7FjPB + - OtkQaV5lk + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: {} + matchLabelKeys: + - Bq2lGSc + - "11" + namespaceSelector: + matchLabels: + 61F: WZbVUH + SX9la: Xi + namespaces: + - pZw + - 7PgdMsO7 + topologyKey: KjgQ6MCYvet + weight: 1896493716 + - podAffinityTerm: + labelSelector: + matchLabels: + EoK5b: 0EsO + cAa: 73CDGl5Q28E + hC: QEb + matchLabelKeys: + - ycS1kTps + - jUS + mismatchLabelKeys: + - bb9r7UB + namespaceSelector: + matchExpressions: + - key: YpiUL + operator: 蕩鉝L鏲傳渋ʅ齸IJH镱鎓Tŝ飿&¶ʁ鞏 + - key: "" + operator: 鯊骟蚎m + values: + - cE + - key: D3S7t + operator: ĐŝÃğLJɾ湐\汻M譭ǁ + matchLabels: + "": 3Xd0zLiqw + 1FRkcAxC: i0rmXF + 04GAcO: iR6H + namespaces: + - R + - EM1Pn + topologyKey: WS + weight: -961265894 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + FBAH: nP16pV + om: "1" + matchLabelKeys: + - HnT + mismatchLabelKeys: + - uGMMd9 + namespaceSelector: + matchExpressions: + - key: 6AXTYUaG + operator: 鯶鳚¢裪hR + - key: "" + operator: 宆E訄蹐÷xł鉁珅9}Ƥ + values: + - Vs + - sP4bxNG8y + - xLJquafHw + - key: 00UA + operator: Ƨ&*ȥ@s躵ʏ0搢0ɯ槃 + values: + - cwC0FTV + matchLabels: + ZsyhZP: "" + namespaces: + - CF2LbLc + topologyKey: vU4qw + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: mY + operator: 3ȶ臙ʪv腫牐c脎 + values: + - uO3l0fwWh6 + - key: qXVQkeqOR + operator: Ƽ傌ʂ沺F}\]ȃʛ駕Ɇ + values: + - "" + - YLfmiZ + - yROx + - key: kHA + operator: '%襔zʠdm§"EgȰ雑$Ħ¥' + values: + - FDY4eRpq + matchLabelKeys: + - I8iTy + - PnzjSV4y + - bwsYsGvz + mismatchLabelKeys: + - E + - I5rAEn8oew4 + namespaceSelector: + matchExpressions: + - key: BTUtFa7 + operator: àʚÍ/Ƣ5{ʃ犕#ʆ湏圄gʐ耆 + values: + - vIs + - key: 2LDI + operator: ņB/ȉś镛ĸ + values: + - fL1DgO + namespaces: + - Oxrg + - t + topologyKey: 6r + weight: -1087546313 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: x9B1Nd + operator: ÈĖJ歱Ȋ詮Ƒ卵ʣŐsŹğ + values: + - jRB + - 0oZcYk + - key: sB + operator: 忞yG°~ƎʠA鱃很ō馥ɾ + values: + - wm + - 8GaQE + - key: ek1po + operator: ^1'跢2« + values: + - "" + matchLabels: + U: cJ + g0iGC2x: FPv4Mw + mHv: ESsM + mismatchLabelKeys: + - MWJzXK + - 69e + namespaceSelector: + matchExpressions: + - key: lyRh + operator: ōý + values: + - 6W9ZKTa + - hdT3hZJ6 + - iuZv5jv + - key: a27D + operator: Ɇ鰖揋żq狮ɦʢ苴ǰ/ + values: + - 3xTbG8dHf + - key: KHGn0pZ + operator: 3ŸʩÕ£曁Ƞ闷撐磢ɤQ,Z榉W栚奸 + matchLabels: + izmMr: 4Syj + topologyKey: TMvGjb + weight: -31298358 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: dqcW4 + operator: ǂƢ二匪 + values: + - xJ + - y7 + - key: Svv1 + operator: 麖寁ÆK閉Ǹ, + key: 0Xbv0 + operator: 掠LJ禐Ǩ廧约睚駶Dz\ + tolerationSeconds: -296008987596813900 + value: fhUXyNYOFl + - effect: '>ZƩj氘瘺' + key: WLMNz + operator: '`>]Ȯ峤' + tolerationSeconds: -696994963583694200 + value: Cyq9 + - effect: 2Ċ + key: jh + operator: 澀"_Ƹ53 + tolerationSeconds: 8904355430000706000 + value: dXjh + topologySpreadConstraints: + - labelSelector: {} + matchLabelKeys: + - 4SBggR + - W2 + - xucqr1 + maxSkew: -917627070 + minDomains: 44463309 + nodeAffinityPolicy: "" + nodeTaintsPolicy: pDf笫Aß悫ȼ茷w + topologyKey: dnKKLwixm + whenUnsatisfiable: pb>ʯ僙ȴō + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: "" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + L6XT: "9" + creationTimestamp: null + labels: + D0BN9: JZC8K + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 2rbFmR + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + miGH: N7Ko + name: A8UY-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + D0BN9: JZC8K + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 2rbFmR + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + miGH: N7Ko +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + CBAVn: vqsp8U3m + gy: whGyY0khAMsJ + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + D0BN9: JZC8K + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 2rbFmR + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + miGH: N7Ko + name: tFtWKgQ-crd-job + namespace: default +-- testdata/case-038.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 1U4k: i7 + U8TFHg6A: OLyvSN + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: dgtMSpw + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: kN + health: + healthProbeBindAddress: Mmg1mhk7P + kind: L2ytr9FI0 + leaderElection: + leaderElect: false + resourceName: iUgGbF1x + metrics: + bindAddress: FrgVf + webhook: + port: 160 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: fjEnE-default +subjects: +- kind: ServiceAccount + name: dgtMSpw + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: fjEnE-additional-controllers-default +subjects: +- kind: ServiceAccount + name: dgtMSpw + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: fjEnE-election-role +subjects: +- kind: ServiceAccount + name: dgtMSpw + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: fjEnE +subjects: +- kind: ServiceAccount + name: dgtMSpw + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: fjEnE-additional-controllers +subjects: +- kind: ServiceAccount + name: dgtMSpw + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: fjEnE-rpk-bundle +subjects: +- kind: ServiceAccount + name: dgtMSpw + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: RYuL +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: fjEnE + namespace: default +spec: + replicas: 1948743687 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: RYuL + strategy: + rollingUpdate: + maxSurge: 11170225 + maxUnavailable: 805692477 + type: ɴsɺ)灦C油ɨT + template: + metadata: + annotations: + W: A7ZVK88 + e: f8Tjdvbo + creationTimestamp: null + labels: + O: SHr5FXhm + RBYx5: 9lXw + app.kubernetes.io/instance: operator + app.kubernetes.io/name: RYuL + yEH: Yi58lHOq + spec: + activeDeadlineSeconds: -323868613046808200 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: {} + weight: -168636196 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: {} + matchLabelKeys: + - "5" + mismatchLabelKeys: + - ieCeevI + - BhKPo + - xKNT + namespaceSelector: + matchExpressions: + - key: 4OeUuVVg + operator: Ē%ǘȩ讦忈ìĦ,鸉俦繪7諙痍ĭ緷羾 + values: + - EC3 + - key: CO0 + operator: "" + values: + - P + - key: 3aheCb5s + operator: 蔡 + values: + - luSv2fPCNw + namespaces: + - vEdz + - lHHZ + topologyKey: T + weight: -427628383 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: ye4BK + operator: 务桇讞箜ɼ + values: + - Rd1 + - JEyAJ + matchLabels: + C0vYvd: NjPCyeU + Jp: 9LOOBunPQ + matchLabelKeys: + - hwtTSZkypS + - "71" + mismatchLabelKeys: + - La3 + namespaceSelector: + matchExpressions: + - key: yB7vq + operator: ǟ鴦-ǩȬɱʓ + - key: POaXO5hem + operator: Ǘ沂ɖ塶 + values: + - IN + - oiAR7Y + - key: "" + operator: Ɖ婬ŧƥ2麍t + values: + - vdMYY + namespaces: + - kIEFUkpLfMg + - 8DK + topologyKey: 6t243f + weight: 415484078 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: SSyaI + operator: 彇_ŭ@,鵛K飩ʮȤi= + values: + - rpEDP + - 17BvSx + matchLabels: + Al33: rLkIL + n1EHw: 9i + matchLabelKeys: + - 2ub + - s + mismatchLabelKeys: + - BOWfT + namespaceSelector: {} + topologyKey: 8Dl + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: 8IBUB + operator: VǶ_貘ʊ + values: + - H800O + - LGbdIMq + - SB4lC0adX + matchLabels: + acJB: Mknp + xIA2: EeCKvqio + mismatchLabelKeys: + - vk0gYVm + - 53B + - o + namespaceSelector: + matchExpressions: + - key: iD8HB1 + operator: 憠éUB%繮町Tk菐辁銤µ墠罐慁榀ȼ + values: + - Njuo24byEvJ7 + - 4Y6WJ3 + - Ko + - key: TCGN249 + operator: ƾȿSȧ1毮ɓɸ[DŽɘ莧ǎ + values: + - XO5HfVBJ + - X9cyy3 + - vr4DBm + - key: 6zfsC + operator: 煴YW辿誕岷^ǣĀY + values: + - T8YF9 + matchLabels: + ssT: BAHA7VIV9aim + namespaces: + - lAJRC + topologyKey: O1UQ + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=WFheHptfh + - --configurator-tag=DV + - --configurator-base-image=CABd5 + - E9Eu + - EU + - nE + command: + - /manager + env: [] + image: CABd5:DV + imagePullPolicy: Always + livenessProbe: + failureThreshold: 488 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 89 + periodSeconds: 11 + successThreshold: 541 + terminationGracePeriodSeconds: 738 + timeoutSeconds: 588 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 439 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 615 + periodSeconds: 812 + successThreshold: 91 + terminationGracePeriodSeconds: 631 + timeoutSeconds: 876 + resources: + limits: + cpu: "818" + memory: "212" + requests: + cpu: "782" + memory: "693" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - KNDuF + - GX + options: + - name: QDR34 + value: "" + searches: + - j82BCHy + - JNHAL + dnsPolicy: 市Ę輭R鑍膙孢ɑƆȂɞ¬畛蠣 + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - yafcI9 + - V5 + ip: OgwzuyQ + - ip: "49" + - hostnames: + - oB + ip: hJ + hostIPC: true + hostNetwork: true + hostPID: true + hostUsers: false + hostname: t1 + imagePullSecrets: + - name: dWgsEJ3vFfP0B + - name: Go + - name: HfbLZ + initContainers: [] + nodeSelector: + "": 5fAb9XGF + Vhns: WI4HRq + loM6r39: r856dt0 + preemptionPolicy: 咫橫³赤£ + priority: 1908962750 + priorityClassName: IozrUiO5aF + resourceClaims: + - name: 9F4BZ7 + restartPolicy: mn©ɗĭtdzp/菕J~ó=ǦƜ崑ɹ + runtimeClassName: Hy + schedulerName: iGkYIuitukSc + schedulingGates: + - name: 6bMwonn5 + - name: cdA50 + securityContext: + fsGroup: 549293409168028100 + fsGroupChangePolicy: Always + runAsGroup: 149530069440945380 + runAsNonRoot: true + runAsUser: -7733942355662636000 + supplementalGroups: + - -1702888372477800200 + - 9088690877236180000 + - 4815250443616439000 + sysctls: + - name: AG4jfFyY + value: C + serviceAccountName: uXc + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: KIrzXPX + terminationGracePeriodSeconds: 748025904004594300 + tolerations: + - effect: W + key: gIbOc + operator: 8戭X墘 + tolerationSeconds: -324497504774729900 + value: rMHpw3dV + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: eC6qVOtUe + operator: ȵ铯恢"ɛ塑稁ǧɌ(务繤ŀɎ幃Ȍ愗ij + values: + - 12S7AP + - FcS + - key: R + operator: Ȥķ瀱l展ʨp遂@聜銚偘燖Đɯ + values: + - JFgA + - "" + - lrLHv8 + - key: f3O + operator: "" + values: + - 6VRfde + - "" + - eBwYR + matchLabels: + lUKdod8ocrz: pAm + ssS: agAmqmY + matchLabelKeys: + - L1wK5ak + maxSkew: -1622516497 + minDomains: -560845306 + nodeAffinityPolicy: ŽV0賠#吳Ť焜N + nodeTaintsPolicy: 桵ÖűVG 堫š陨 + topologyKey: iKqwWyz + whenUnsatisfiable: 嘫`拈噒 嶝 + - labelSelector: + matchExpressions: + - key: VfS + operator: ǒG?捾 + values: + - qt9n5hh + - key: oTjx0BGx + operator: ƈxŪ擡熪MƺɌ伴B3v}摟´B}Ě> + matchLabels: + Mgg9aWK: bg + SxX1: boiP + v5zAQyQ1: VPHVucu + maxSkew: -118728404 + minDomains: 653946276 + nodeAffinityPolicy: 櫋MĆ»敂ę+槖O9媯ȵY閐ɩ + nodeTaintsPolicy: ı§Ƃi4à + topologyKey: bst2 + whenUnsatisfiable: 謄菴桊°ŻÎʢþAg*[ + - labelSelector: + matchLabels: + HJ6Q: "9" + qNEL: 8naHd + qj2B: LQ7 + matchLabelKeys: + - 0B40 + - ukp7wB2 + maxSkew: 495541948 + minDomains: 1472201829 + nodeAffinityPolicy: L8岀¸秿Źʕũ + nodeTaintsPolicy: V + topologyKey: UXd5TFx5U + whenUnsatisfiable: Ɋʆ彸qɑ漾9毲穻 õ<ƣ^"Ĥ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: anjrvNnG + - name: w + - name: y8U2FY2 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 1U4k: i7 + U8TFHg6A: OLyvSN + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RYuL + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oMSwsE1: VOZ + x: 4Xx1lbe + name: dgtMSpw-crd-job + namespace: default +-- testdata/case-039.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: Uf5i2FYm + health: + healthProbeBindAddress: FwG + kind: 5HAJrdEh + leaderElection: + leaderElect: true + resourceName: bD4EKsHTEP + metrics: + bindAddress: ogGdTWj + webhook: + port: 153 +kind: ConfigMap +metadata: + annotations: + kSC: ZSJ + creationTimestamp: null + labels: + ZPcQPMKo: 8du + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "4" + app.kubernetes.io/version: v25.1.4 + chNK6Zz: 5Ii + helm.sh/chart: operator-25.1.4 + name: n9s9M-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + kSC: ZSJ + creationTimestamp: null + labels: + ZPcQPMKo: 8du + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "4" + app.kubernetes.io/version: v25.1.4 + chNK6Zz: 5Ii + helm.sh/chart: operator-25.1.4 + name: n9s9M-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "4" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + kSC: ZSJ + creationTimestamp: null + labels: + ZPcQPMKo: 8du + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "4" + app.kubernetes.io/version: v25.1.4 + chNK6Zz: 5Ii + helm.sh/chart: operator-25.1.4 + name: n9s9M + namespace: default +spec: + replicas: -1073260928 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "4" + strategy: + rollingUpdate: + maxSurge: 16520252 + maxUnavailable: 1601923532 + type: '*ñDBȹȆ=鶫=:S(a_' + template: + metadata: + annotations: + SvFP: 986w + h: YGsQd8JJ5 + nWH: jAiX6oRC + qeyHynV: XYh + creationTimestamp: null + labels: + CCOM8: YXWu + T3dW: hL1iR + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "4" + spec: + activeDeadlineSeconds: 9094660533002612000 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: oQ + operator: ʏē£tN狖ȠEǏɵ + values: + - 0wDeDy + - key: jz0 + operator: Ń胹CM杌}筼鋢0Nv痱ȅ-ģ + values: + - r9f + - key: dRf + operator: 蕡S9帼Ƶ.萫` + values: + - 18v1yOSEIKRL + - lEaxowe + - iToE + matchLabels: + DmnH7h0Q: 9jqQAC + q8V9k: Uy6c8 + matchLabelKeys: + - I + mismatchLabelKeys: + - MHn + - bFg + - DsNcqV + namespaceSelector: + matchExpressions: + - key: 1Lo6KX + operator: ʓÑGLJ毪MLJǒ蛺2 + values: + - VwKhYqxC + - GhQSh + - key: bYK85 + operator: '@7''ɷ昮貒樓ʜóLJ励' + namespaces: + - KdtSVMO + - LAZQ + - yYIJ + topologyKey: RLkeP + weight: 97631015 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: "8" + operator: ɋ}7[K壳ƧŮȿx ś逵ƅ + values: + - "" + - YmviHD + matchLabelKeys: + - i + - Qb + - xqbuKcACcH + mismatchLabelKeys: + - nh4 + - 8KYrGw + - twd + namespaceSelector: + matchExpressions: + - key: oD3l + operator: k + - key: U + operator: 蓜踩險 + values: + - MTydnSrP + - KSCeZhBvoQp + - 3U + - key: dCY9SNL + operator: 欧ï婓洳鿝 + values: + - j2dBke3 + matchLabels: + GvyAB: Ll7 + iTUAICRw: QMEL + ujmhj: YvEcrp + namespaces: + - 40kE1rx + - yvx + - IYxCc + topologyKey: bqFqFM6 + weight: 671353099 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: YoGDq + operator: ʀZxb溇Ǭ9韆赗ǨZ$ī + values: + - JKV + - key: PYZ62XSO + operator: ƢNɒ猖ʤ鹘 + values: + - "" + - N0gjVZK + - key: eGB + operator: 芐œȏȩɍ峦xɐ悈傿ÈĆ + matchLabels: + Bd1Qov: OU + CYRJ7N: aLBCx + U5e0RWo: I25 + mismatchLabelKeys: + - a + - "" + - LKL + namespaceSelector: + matchLabels: + 6p: 7jZV8CS6oF4hq + namespaces: + - ush5M92P6 + - fX8E + topologyKey: PQ0sX + - labelSelector: + matchLabels: + 4esz: qUjyBpn + Or: BlVjbOo + qsko: InsWb + matchLabelKeys: + - x7Tn + - j851 + namespaceSelector: + matchExpressions: + - key: wwArLRTh6 + operator: 锾 + namespaces: + - bwgDA5 + topologyKey: x0OnRz + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: uI0QK + operator: "" + values: + - Dr4YQNBkGV + - key: 6Ge + operator: ƃKk + matchLabelKeys: + - ZzH7 + - Yh + mismatchLabelKeys: + - 7O + - dwhnHV + - P + namespaceSelector: + matchExpressions: + - key: melMw2 + operator: "" + values: + - nwRA172K + namespaces: + - GlhLC3 + topologyKey: wAqQGDcS + - labelSelector: + matchExpressions: + - key: Txy + operator: 炆Ȭɻ + values: + - 7Cb8xYGEbt + - gy7yUJJb + - GHwWv + - key: V7uhcb + operator: ɬ逞NJj嘺ɼ[Ȳ鞁Ǔ]Ƴ矒 + values: + - Cc + - nrw + - WdB + matchLabels: + TjvJ: TYjT + iqz7: "" + uS7: zuQmxIrr + matchLabelKeys: + - 1Rn8uClR1m + - nH1 + - GSlcG + mismatchLabelKeys: + - 1AP9aqXtgM + namespaceSelector: + matchExpressions: + - key: PSZX5kh2 + operator: Ħį疻Ł詊[Z璎 + values: + - BKzx9B + - bxuxCjmU3 + - 40Jd9 + matchLabels: + Dapj3H5H: 2lT + KtjpiW: QVz5 + i2qgTbX: 6TpD + namespaces: + - lhAY + topologyKey: Mq + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level= + - --configurator-tag=95V5Gm + - --configurator-base-image=h + - JFs + - nNwqWRT + - ScYwDYt + command: + - /manager + env: [] + image: h:95V5Gm + imagePullPolicy: Never + livenessProbe: + failureThreshold: 462 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 702 + periodSeconds: 45 + successThreshold: 922 + terminationGracePeriodSeconds: 272 + timeoutSeconds: 324 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 902 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 800 + periodSeconds: 924 + successThreshold: 78 + terminationGracePeriodSeconds: 731 + timeoutSeconds: 97 + resources: + limits: + cpu: "639" + memory: "100" + requests: + cpu: "607" + memory: "462" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + searches: + - 1M9d + - ccg + - K8U + dnsPolicy: ?掿~儓髤ńƅǙǟ璍集彗ȃQƏ! + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - g3hU5 + - 60OmY + - 6nM + ip: 0uSBO + - hostnames: + - RkcCRmH + - d4aj + - 5yemLpNkv + ip: NkeTCJ + - hostnames: + - Bx6dB + ip: NyW6uH + hostIPC: true + hostNetwork: true + hostUsers: false + hostname: DErH4 + imagePullSecrets: + - name: KmDljL + - name: cJ2n + initContainers: [] + nodeName: tWp + nodeSelector: + 5JLdWw5: I + Bg6pN0ViTM: gLtqR + L2teX: zjC + preemptionPolicy: "" + priority: -1810648038 + priorityClassName: 8L8 + readinessGates: + - conditionType: 鰄愳JhǕ饁枪 + resourceClaims: + - name: MAqE + restartPolicy: 哬ĩQYč.餺爒璛<磨dž璝|ſþŎ鼭罔 + runtimeClassName: TzUN1J + schedulerName: KP6R + schedulingGates: + - name: kS4M9 + - name: nHMZnD + - name: 1cM + securityContext: + fsGroup: 4524591162068226600 + fsGroupChangePolicy: Always + runAsGroup: 9053675502780789000 + runAsNonRoot: false + runAsUser: 2482349962653319700 + supplementalGroups: + - -1464877308109779200 + - -4104680386084361700 + serviceAccountName: 7A7LfLVaSgL + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: XPWf + terminationGracePeriodSeconds: -5124946022502445000 + tolerations: + - effect: $ + key: fb + operator: -趽d:ʧ|橍 妿{贻 + tolerationSeconds: 27395074208985584 + value: SqBpohLGB + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: f9tKRk + operator: 痳ÿ籋t玄 + - key: o + operator: 窧òÇY篂 + values: + - l + matchLabelKeys: + - Wf00sxS706 + - G6eXtZX + - Gw + maxSkew: -328139720 + minDomains: 1800306710 + nodeAffinityPolicy: ņm饉Eɶ辽ű蟞®s烶"骅啯妍Ȃµ柋裩 + nodeTaintsPolicy: <鯷ȫɜ橼,Fʄ8<殤NJĆ伻ʤ + topologyKey: O9NaFa + whenUnsatisfiable: 缌睩氜栢ʦ是LJ廬茞^Žȟ塖 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: A2B8 + - name: G + - name: ZtPPBy +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + EMLMp9: eWUNFToc + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + psVEMcLU: IjAVEkU9t + uucv5x: 52Q + creationTimestamp: null + labels: + ZPcQPMKo: 8du + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "4" + app.kubernetes.io/version: v25.1.4 + chNK6Zz: 5Ii + helm.sh/chart: operator-25.1.4 + name: 1s-crd-job + namespace: default +-- testdata/case-040.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + qKwD7uKV1jG8: 91mmo + creationTimestamp: null + labels: + Vs8tyk3nrH: X + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kam5 + app.kubernetes.io/version: v25.1.4 + c1ch6r: sk7vUnRJ + helm.sh/chart: operator-25.1.4 + o7: kFLRHJ8kS + name: rPim + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: KaSxMh4aS + health: + healthProbeBindAddress: 0Xm69MBn7OZ + kind: cx6BfL + leaderElection: + leaderElect: false + resourceName: zb8Y + metrics: + bindAddress: IY8 + webhook: + port: 151 +kind: ConfigMap +metadata: + annotations: + b: QMv9sM6xG + creationTimestamp: null + labels: + Vs8tyk3nrH: X + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kam5 + app.kubernetes.io/version: v25.1.4 + c1ch6r: sk7vUnRJ + helm.sh/chart: operator-25.1.4 + o7: kFLRHJ8kS + name: t08KC6rLj4Z-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + b: QMv9sM6xG + creationTimestamp: null + labels: + Vs8tyk3nrH: X + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kam5 + app.kubernetes.io/version: v25.1.4 + c1ch6r: sk7vUnRJ + helm.sh/chart: operator-25.1.4 + o7: kFLRHJ8kS + name: t08KC6rLj4Z-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: kam5 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + b: QMv9sM6xG + creationTimestamp: null + labels: + Vs8tyk3nrH: X + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kam5 + app.kubernetes.io/version: v25.1.4 + c1ch6r: sk7vUnRJ + helm.sh/chart: operator-25.1.4 + o7: kFLRHJ8kS + name: t08KC6rLj4Z + namespace: default +spec: + replicas: 216786617 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: kam5 + strategy: + rollingUpdate: + maxSurge: 1636012556 + maxUnavailable: 1075603656 + type: ' VL龶ƔZ鞝ɹƥ桃炧ƪ帯渋ɦĵæı' + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: kam5 + spec: + activeDeadlineSeconds: 251435796122521860 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: mvuO1qg + operator: Ë韔ĵ嫑淴ʡƛ籂úʋ吞v娝 + values: + - NKc4mZ6t + - O7a5gdp + - k7X6es4ud + - key: lNP1vX + operator: ½桢ĿǔBP蜋¾ȃfɢh緽:礞 + matchFields: + - key: BvQzVP + operator: ɳ禽əe榇蘋UĂ誮 + values: + - UUKYLfEL + - key: d4 + operator: ƜQOƽ + - key: 6hWVN + operator: 读?旵 + values: + - oF2bgNp + - 9y1QpF + weight: 942247031 + - preference: + matchExpressions: + - key: ArG + operator: 鸇吰緀橎h/阼p@V沂W兆ƕ犺þ鲲 + - key: ShuPKe52Md + operator: «n蕉džʭ贼W}ʩ + - key: D6PAsnP + operator: ǹiB嘚糘>瀬Q曂ƕǟ + values: + - izE + - hQJ7qgq1v + - eq4QH4 + matchFields: + - key: BKm2WHTR + operator: =Zƹ娤詓[敓Ĩǎ搚k]ƫ夓 + values: + - G82g + - oJCdgIVx + - key: A798q + operator: tʼn8ȅ»^Ʒ + values: + - i + - 3OMO + - T + weight: 1001113333 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: 5TpATc + operator: iP籡,瘂ɚ + values: + - v0DasK + - Vs + - key: "y" + operator: "" + - key: sY + operator: c.í拊DŽ4 + values: + - NxiSfmPJm + - SGIo + matchFields: + - key: cxanC + operator: L镇-謸眵 + - key: M0iif + operator: gʓÃvʠZ琙ćO园ǒWY攬P + values: + - DtKGnVs2HOB + - 8IqfI8 + podAffinity: {} + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: ql7 + operator: 詸o烂牵MĊǸDȢQŬÓ + mismatchLabelKeys: + - ebR + - R2P29a0 + namespaceSelector: + matchExpressions: + - key: 99v4d0 + operator: b鮻e権乍ʦ + values: + - ARoVD + - NU3qFeEGH + - key: IYZ + operator: 褰硺鰛ŏƺʋ + values: + - tOp + - Q5L94evoH + matchLabels: + P5tV: UNH + kCLm: RBZoDi + namespaces: + - 5r78oGv2 + - 1is3xw9 + topologyKey: ily + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=yGdn + - --configurator-tag=YHoj + - --configurator-base-image=OjO + - krIILz + - "5" + - cS + command: + - /manager + env: [] + image: OjO:YHoj + imagePullPolicy: Never + livenessProbe: + failureThreshold: 531 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 583 + periodSeconds: 222 + successThreshold: 252 + terminationGracePeriodSeconds: 837 + timeoutSeconds: 909 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 749 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 517 + periodSeconds: 24 + successThreshold: 394 + terminationGracePeriodSeconds: 195 + timeoutSeconds: 927 + resources: + limits: + cpu: "827" + memory: "740" + requests: + cpu: "180" + memory: "721" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - 1n + - C5ma + - lcQh + options: + - name: xZXnM + value: "" + - name: OjsT1tQR01v + value: Hi0 + - name: 9og9 + value: 8y + searches: + - EBCv + - OERh + - XyrGhIZJun + dnsPolicy: 1ƌƐʁ嶖ǜ9 + enableServiceLinks: true + ephemeralContainers: null + hostIPC: true + hostUsers: false + hostname: SIJz + imagePullSecrets: + - name: SYrN + - name: 62nXDB4y + initContainers: [] + nodeName: rEgnkwIW + nodeSelector: + CUxb: fEK + JoPel: b8xxB + MaACPDUKyp: k4fAtIR + preemptionPolicy: ʝ[ɰKǖđ»xŎT襡ğ暶W磂 + priority: 1256576650 + priorityClassName: 6vL + readinessGates: + - conditionType: ûqǩsɳnH繚JƑ5驌ýx¦nYǪU + resourceClaims: + - name: cVAU48a9 + - name: e4r + restartPolicy: Ǔ阾´葚阛C[愴ð邛龒= + runtimeClassName: fwxnLh + schedulerName: J + schedulingGates: + - name: amoH + - name: 6N + securityContext: + fsGroup: -3303406895627459600 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -1458003432895942100 + runAsNonRoot: true + runAsUser: -5536728191982958000 + supplementalGroups: + - -4522827934488287000 + - 3586674186732541000 + - -8562529629626633000 + sysctls: + - name: 7Vxd8P + value: noP2jX + - name: X + value: Q6yMaZdR + serviceAccountName: Ml + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: Wue + terminationGracePeriodSeconds: 6277362132289052000 + tolerations: + - effect: 粞b<觿愻NɢǷ賡¦:Ƨ聒 + key: BoAOCj1 + tolerationSeconds: 7651949633204226000 + value: oR + - effect: 煸¥n + key: xZUZ9oX + operator: Éƨ伸1K舝 + tolerationSeconds: 8454353132979107000 + value: GseJ + - effect: 鍗ɐ.y恼h瑄 + key: fCbg + operator: 欄.EßȈ骁 + tolerationSeconds: -3695161036555460600 + value: WgeZzwA + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: AAtLJGf + - name: vCIXV +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + b: QMv9sM6xG + creationTimestamp: null + labels: + Vs8tyk3nrH: X + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kam5 + app.kubernetes.io/version: v25.1.4 + c1ch6r: sk7vUnRJ + helm.sh/chart: operator-25.1.4 + o7: kFLRHJ8kS + name: t08KC6rLj4Z-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + Vs8tyk3nrH: X + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kam5 + app.kubernetes.io/version: v25.1.4 + c1ch6r: sk7vUnRJ + helm.sh/chart: operator-25.1.4 + o7: kFLRHJ8kS +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + qKwD7uKV1jG8: 91mmo + creationTimestamp: null + labels: + Vs8tyk3nrH: X + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kam5 + app.kubernetes.io/version: v25.1.4 + c1ch6r: sk7vUnRJ + helm.sh/chart: operator-25.1.4 + o7: kFLRHJ8kS + name: rPim-crd-job + namespace: default +-- testdata/case-041.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: eYU + health: + healthProbeBindAddress: z + kind: RSErp4X + leaderElection: + leaderElect: true + resourceName: Z1mNhQH + metrics: + bindAddress: LT + webhook: + port: 434 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: dLmCJ99UDA-default +subjects: +- kind: ServiceAccount + name: ttC + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: dLmCJ99UDA-additional-controllers-default +subjects: +- kind: ServiceAccount + name: ttC + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: dLmCJ99UDA-election-role +subjects: +- kind: ServiceAccount + name: ttC + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: dLmCJ99UDA +subjects: +- kind: ServiceAccount + name: ttC + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: dLmCJ99UDA-additional-controllers +subjects: +- kind: ServiceAccount + name: ttC + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ATIdy9 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA + namespace: default +spec: + replicas: 539215686 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ATIdy9 + strategy: + rollingUpdate: + maxSurge: 584533562 + maxUnavailable: 287449819 + type: ðfƛ湉 + template: + metadata: + annotations: + UnIG3mv: Kz + nZr8PzgXXzU: xt2TI + creationTimestamp: null + labels: + JzJGu: JCV5O + LTu: vl + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ATIdy9 + "n": c9 + u7bSOm: cC8sDS8 + spec: + activeDeadlineSeconds: 343223886725035200 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: HSFMdumsq + operator: Ĕ寋½I伋ɦŢ`帚:憸ʡ+Ǽ + values: + - "" + - iOoBM0 + - key: b1BDK + operator: /Kè菴莄傮ɠ惾ƈE + values: + - 4JviXX + - JsC + weight: -1075886949 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: JZZIrRZMyZMe + operator: ļ炙啤Aɢ無 + values: + - FvkW67BnRq + - key: qmG + operator: 喳ʯ剧ƕ忸-zÙǟ%> + values: + - j2R3M + - hMEU + - 5UaS + matchFields: + - key: ILxOcPKQ + operator: +鹊ÒÇ^ʩȩɇȬɁăű + values: + - 7U + - h1gvP + - key: 00ypQ + operator: 潴dz惁ē敧Ûȩ# + values: + - "" + - key: pI87LE + operator: 权槣ǜɢǪ\{ƶ熫Lj狈ʎ + - matchExpressions: + - key: 8WYuwNs + operator: 糑'Ț黣nI媘ǩK浲隐泹9 + values: + - 0DcE4oN + - fwa + - 9Cc447gm + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: AVC + operator: 傡N臃炌睯掣+扜ȋȇ历Ěģsȇ + - key: qmxKSA2 + operator: j + values: + - dpt4JF + - key: 4VUME + operator: P=踯讃nɦ + values: + - ng7UhGY + - HrCHhobTgn1l + - 4vn + matchLabels: + "": l8T + HHLld: O + cnrqr: P8nZli9 + matchLabelKeys: + - f0bH4 + - jWB7g6 + - L0r8L + namespaceSelector: + matchLabels: + GeFFWOnlvR: oEDoq + topologyKey: mHDqv + weight: -2078847718 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: VG + operator: 睙梍 + values: + - UFcFApg + - 0HHY5m + - 6F + - key: j + operator: ñ珙Ƙ耨įU + values: + - EarXI2s6 + - key: SmhxyDwjQ + operator: "" + values: + - "" + - QlnRAN + - rV + matchLabels: + BdL3yNDHg: jKrhvg + jRg: kQ + mu0og6: Hu4 + matchLabelKeys: + - Qti + - CB2uQGGTdU + mismatchLabelKeys: + - TKB + namespaceSelector: + matchExpressions: + - key: PyY + operator: 粴 + matchLabels: + a7wOI: VHEKkT + zkP: 6FrE1Q + namespaces: + - wEcnOtMRSR9 + - VXad + - x + topologyKey: a3RwL + weight: 8935598 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: su1 + operator: Ɇɷȣ碧嬞.諭ʭȍiǦ粊ň$ʚ + values: + - Su6wIC4 + - Y0siGq + - key: LI9ex + operator: 筳陌ýW儬+憕贂6<椯Ǻ + values: + - "" + - key: 4Q8H + operator: ʨ瑗ijʬ!%芉aʣvŮ] + values: + - CfbCs + - "" + - zwmrT + matchLabels: + qSGApnD4ip: mQdXTr + matchLabelKeys: + - AyIO + - sM1DxqhXiP + - XCKUbBe + mismatchLabelKeys: + - g + namespaceSelector: {} + namespaces: + - LP5r4ThY + topologyKey: Lcw0hO1 + weight: 1038634642 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: MZ + operator: w纹埩闺4匭玄薙Ɍ6追µ]ɿȞɇÆ貵煘 + values: + - N1a1 + - key: Oga3 + operator: ʭyÝĉž + values: + - xFemY + - KYTuaak + - "" + mismatchLabelKeys: + - "" + - wqAGL + namespaceSelector: + matchLabels: + ISGu: iQbRzEDFp + lACmJKu: ZVjdv13 + namespaces: + - qbcq + - dBhT + - KOlh + topologyKey: "" + weight: -1045387182 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: OPg6ir + operator: f0]o;t + - key: yMp + operator: 儦è侜鸫篞ă + values: + - rVktV + matchLabels: + ThjprgQnQ: OHK3C + mismatchLabelKeys: + - JKPVG0NSVz + - PUeMFvo + - 3lSo + namespaceSelector: + matchExpressions: + - key: 57Z3C + operator: _ƿ騅6Ë紼o將n矌/iĮ州阤ÄǠÊ + values: + - Qr78do8c + namespaces: + - slTFoFbSw + - HCKCKD3T + topologyKey: i + - labelSelector: + matchLabels: + 21CTLF: LYAus + RlnML: "" + matchLabelKeys: + - CvT + - oCw + - pVA37X + namespaceSelector: + matchExpressions: + - key: Jca + operator: 閁ǜVc~(胿Ư + values: + - vmfMfrEWhRX + matchLabels: + qa: BkHd + namespaces: + - V6Bg0bes + - FH + - "" + topologyKey: GUQi4 + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=K + - --configurator-tag=X + - --configurator-base-image=Olq + - jq37e + command: + - /manager + env: [] + image: Olq:X + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 798 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 312 + periodSeconds: 14 + successThreshold: 170 + terminationGracePeriodSeconds: 596 + timeoutSeconds: 148 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 845 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 71 + periodSeconds: 217 + successThreshold: 397 + terminationGracePeriodSeconds: 816 + timeoutSeconds: 444 + resources: + limits: + cpu: "325" + memory: "235" + requests: + cpu: "369" + memory: "494" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - "34" + - 2GXfHq + searches: + - "" + - "" + dnsPolicy: Z管ʯȋ厘ʒĸ趃H爠[ + ephemeralContainers: null + hostAliases: + - hostnames: + - q + ip: "4" + hostUsers: true + hostname: jMB + imagePullSecrets: + - name: aXkh + - name: 4ud6kgVwv + initContainers: [] + nodeName: okmdY + nodeSelector: + Ya: nenKzfYu + hTzjlT: 6endG97tJ + nPRTz: YDua + swBkpYQ: Ot9 + preemptionPolicy: 緀Nj/搜Aʢy尿ĿJ + priority: -876807169 + priorityClassName: stxrwOkC + readinessGates: + - conditionType: ɛ产'夹渳uk/屋ɦ( + - conditionType: 螊j + restartPolicy: ǒ綧LJ(¤閹孊ǚ0磩婀谊笰1$屘 + runtimeClassName: gNJ + schedulerName: 2Zi + schedulingGates: + - name: L + securityContext: + fsGroup: 5651385294292094000 + fsGroupChangePolicy: Always + runAsGroup: -945106715671247200 + runAsNonRoot: false + runAsUser: -8924625094629118000 + supplementalGroups: + - -625871999789495000 + - 5073997621943202000 + - -2582129587677231600 + sysctls: + - name: by + value: tDkLnEzq + serviceAccountName: yNv + setHostnameAsFQDN: false + subdomain: 6Ke2TY3 + terminationGracePeriodSeconds: 7674869702488048000 + tolerations: + - effect: 裥Ǐ[byP罝ș迚!Ȱ + key: ao + operator: ŕ瓹ƖbƟvŃ3"ť'嶮õ§苰f5顗 + tolerationSeconds: 3452689405398166000 + value: uC3s + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dLmCJ99UDA-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + aTQmdweF: E7 + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + 5M5X: Fi + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ATIdy9 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: ttC-crd-job + namespace: default +-- testdata/case-042.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: qwcbM + health: + healthProbeBindAddress: 9eBm + kind: GTUKBoasPTOjg + leaderElection: + leaderElect: false + resourceName: PnSDJ + metrics: + bindAddress: H7lNfCTp2mq + webhook: + port: 344 +kind: ConfigMap +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: I5FRf-default +subjects: +- kind: ServiceAccount + name: jPVwE + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: I5FRf-additional-controllers-default +subjects: +- kind: ServiceAccount + name: jPVwE + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: I5FRf-election-role +subjects: +- kind: ServiceAccount + name: jPVwE + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: I5FRf +subjects: +- kind: ServiceAccount + name: jPVwE + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: I5FRf-additional-controllers +subjects: +- kind: ServiceAccount + name: jPVwE + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: A +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf + namespace: default +spec: + replicas: 549278956 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: A + strategy: + rollingUpdate: + maxSurge: 1689383301 + maxUnavailable: 1098097625 + type: ćʅbUɗ敏斎Ī迊ĊD7剏Ĺɸ + template: + metadata: + annotations: + 5cGuav: aM5RZ + creationTimestamp: null + labels: + A6HkU3mb: xwSfZ + EIfXnY: AexS + app.kubernetes.io/instance: operator + app.kubernetes.io/name: A + dvR: Nckdy + rnqNVm: xIG2K0M + spec: + activeDeadlineSeconds: 6872421515153581000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: 4ZFHy + operator: '%o低誥njĈĥ錴嬧ɛnjȆ較' + - key: AMl + operator: )ʼn馼 + values: + - BvcW9Ja7 + matchFields: + - key: DfbH1Awc0QT + operator: dF + weight: 909331927 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: t6 + operator: G爿4fʼnɧʡ!ɏìüj辵螴厧yȅ + values: + - T + - ZH + - key: tXVIKk + operator: ;浕ȢÒ + values: + - RTT6Nm4zhCN + - 9HLOidlES + - key: I7UL2 + operator: "" + matchFields: + - key: Lr8 + operator: ɺ撚Ĭɂʎs + values: + - OIVd5OS + - Qc6g + - 1XIc + - matchExpressions: + - key: ggTWeRK + operator: ȍɽ呛Ɔw鿀Qɷʣǟ + values: + - da5pVG3t + - E4u + - key: K5n + operator: kóALJň + values: + - ce3mv + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: zg + operator: vɦ + values: + - w + - 5owH4f + - key: WdAjIF9p + operator: ñɰ鮢ƹĉ熤L揫亙Hʃ?Ǧ聯 + values: + - KJg3Q + - Hw0N + - Mnb8ROAovg + - key: E16qfI + operator: 寋惷 + values: + - mdy3dY43 + - bxX43oZ + matchLabels: + 1iHzWVY: Jd + 3Bee1lG2: CIIlv3 + pRg9FY: Eer + matchLabelKeys: + - ecr192mw + - 0u + mismatchLabelKeys: + - 6JFMRW2 + - Hzjd + namespaceSelector: + matchExpressions: + - key: SRey + operator: MÇå/吹`ó樞CDž`&O + values: + - tA4e + - JRzD0WRo + - key: kYddD + operator: ǟ珉澶N®;喙悞ɬ梈 + values: + - rJdy6 + - i8tLPusJ + - SE7d + namespaces: + - fpnECS + - rg0U77aT + topologyKey: rqPrJwS9xipmY + weight: 656669195 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: zKxUjqeNkMHtHa + operator: ƖfDÔđ駧鹏ȡ瓃Å鿶~砬7璒Ȼùđ/ + - key: 2UC6G3flN + operator: ǨBĤ頍ȉSʀ + values: + - idmpoggw + - jMM + - iK41t0 + - key: XBjviy + operator: 媿敺ɼw*鷠忴NdTʋł銃剧hŭ拟卹橒 + values: + - P3r + matchLabels: + vAH6rHN: bgcsCU + matchLabelKeys: + - t21PZsV + mismatchLabelKeys: + - Sr2N8 + namespaceSelector: + matchLabels: + "": 4PInDY + h8wrsqi: glrI + namespaces: + - 7OR8 + - Ybh1w + - TRbSPCklhjK + topologyKey: O2ba + - labelSelector: + matchExpressions: + - key: J4vV + operator: ZXu]癃È沍*撼ʎDa + values: + - "13" + - y5BjZIb + - cY0Vo + - key: fG4HuQ + operator: ʌƊ{ + - key: seowVkne + operator: ƫŰTʊ> + matchLabels: + Tf8Bxx: sIePnH + ubqHQp: "" + matchLabelKeys: + - cOI + - wdrXqVaY + - Cokj + mismatchLabelKeys: + - x4 + - "" + namespaceSelector: + matchExpressions: + - key: hTL + operator: '>zƝQJ弹婭帨戭f択' + values: + - Pum + matchLabels: + 4Up: jnembUf + Ce0b4sh8VvJ: 6MaNR4J68uc + factQ: 7VNNAK + topologyKey: SjPGY + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: HZi + operator: TiŎș8´c¿ʨÏ\ȩ\Ȁ麼娜宪 + values: + - Dk4HRW + matchLabels: + 9EclKqI74rL: wRb + D3Chh: "" + H4BwLJG: dJ + mismatchLabelKeys: + - 5Td8 + - fnltz0d + namespaceSelector: + matchExpressions: + - key: TwBLu8 + operator: ;换埜!髣Cğ]ƴ縁ĕ潣!糠玚 + values: + - ia2n6Y0WV + - 6EM + - 7p + - key: XvT + operator: ©碁縆U珧ʯɯ牜Ȧfz0咤 + values: + - i + - key: mq + operator: "" + matchLabels: + wWdY6: YCW9 + namespaces: + - "80" + - 1Lnh + - KJ + topologyKey: BJ6p + weight: -1960666384 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: WQRVg5 + operator: 桍p拈Ŀy[y鈙叢辌 + values: + - G + - efNF + - ppPSVkQ + - key: CyVE + operator: "" + values: + - 1NN31 + - key: PXGeD2 + operator: "" + values: + - xxtkSlE + - r + - jOM4Q + matchLabels: + V: wQC + tN: iVigc + mismatchLabelKeys: + - 0hsMtHDM + - yriC + namespaceSelector: + matchExpressions: + - key: cIn7tzt + operator: "" + values: + - xu1 + - 4q + - JAZo + - key: 0z5h + operator: Ʈ+痘鍽ŖƊÂqɿ+ + values: + - fWmt + - tHbTK1pl9u5 + namespaces: + - AvrT3 + topologyKey: 0mQMyp + weight: -1370107543 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: 2xa + operator: TK-/ƨ鷡Ȭ裻欟ǞpʊųɁ + - key: oREhN + operator: .yɻ篻抰鈩Kȩ~2 + values: + - yRDRk4 + - fXJYF2M0 + - R1pJKNnzRiym + - key: 1HO + operator: "" + matchLabels: + hWS: RBXk + s7: "" + y14u7ee8: "" + matchLabelKeys: + - Opbacm + - up61Mphtb + mismatchLabelKeys: + - gq + namespaceSelector: + matchLabels: + JX: Y4oR + v75: MTQc + namespaces: + - "" + - GCYcSMd + - "2" + topologyKey: K + - labelSelector: + matchExpressions: + - key: 9mIVwt + operator: DžâȿíeUJÙ慿萡捽ʌ潠u^ + matchLabels: + Nbcf: siQdU + Z: WdJ8PN + mKTc8MGq: A + matchLabelKeys: + - mJGM + mismatchLabelKeys: + - C7 + - 2fvYt7 + namespaceSelector: + matchExpressions: + - key: k + operator: Ĉö&侳 + values: + - hlPa + - BEwx + - OGJL + matchLabels: + 6dD2x: Buuv + 9cS: KI + w: fh05lkL + namespaces: + - h + - KtB + topologyKey: yC4Y9szbtyRH + - labelSelector: + matchExpressions: + - key: FSfWPk + operator: 麧 + - key: Zi + operator: '}ǜŬ鉗ɶɍ顗NǼƉ#闑(:唳Ugȗ' + values: + - ynwTLHe + - RBM + - CRQ1 + matchLabels: + bkLT4Tkln7XX: w + zPt1f: gU73eYOAjg + namespaceSelector: + matchExpressions: + - key: QmKsO1UKEa + operator: )驻ƹ擖涹ė8ǭ煛¶諝 + matchLabels: + Rxd1p0n: y52tozGuZ + UUS: CSnIZGq + b5: JQCe + topologyKey: xg + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=10rTK + - --configurator-tag=VPI + - --configurator-base-image=VX7rtbd + - Fpr + - bQ4Xdn + command: + - /manager + env: [] + image: VX7rtbd:VPI + imagePullPolicy: Always + livenessProbe: + failureThreshold: 953 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 551 + periodSeconds: 111 + successThreshold: 958 + terminationGracePeriodSeconds: 17 + timeoutSeconds: 938 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 178 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 903 + periodSeconds: 491 + successThreshold: 68 + terminationGracePeriodSeconds: 105 + timeoutSeconds: 698 + resources: + limits: + cpu: "896" + memory: "477" + requests: + cpu: "411" + memory: "65" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - g9 + options: + - name: D0xhMfcPbv + value: n4 + - name: wq + value: N5vx + - name: GxY + value: Q5sm + searches: + - Nsx + - omRlK395 + - O4e7Oi9QaO + dnsPolicy: łÏxÚ7焹ìūűȊvɁ + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - ip: DDMbcJE + hostIPC: true + hostNetwork: true + hostPID: true + hostUsers: true + hostname: cw + imagePullSecrets: + - name: Ji32eCG + initContainers: [] + nodeName: 8xm5qy + nodeSelector: + KIjke3ItE: UFkX6 + P7WsBHi: CuuJsnyAKkT0x + ikazX: nALV + lrER1v7: TA + preemptionPolicy: E懁闩/ňś + priority: 703159166 + priorityClassName: Mgn1EG + readinessGates: + - conditionType: _ + - conditionType: $熷h2瑿赏灗vȗqUŝƲf覑鸂=h咴 + - conditionType: Ŀ + restartPolicy: ǒ锔%>dž醬 ɆƔ×ȕ;yÃN幣BƂw + runtimeClassName: pcE + schedulerName: bFrK85 + securityContext: + fsGroup: 2980526123398523400 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1717253414127171600 + runAsNonRoot: false + runAsUser: -2542658499850500600 + supplementalGroups: + - 8611476070349896000 + - -2096030859437496800 + - 57930524811109340 + sysctls: + - name: F3B + value: T86Cac + serviceAccountName: rrpOv + setHostnameAsFQDN: false + subdomain: Mni + terminationGracePeriodSeconds: 6911531097165868000 + tolerations: + - effect: )娝Ì盭.¢ɷƲƔđNIʙ爰嶘Kɑ纏ɠ + key: EQDLsOTb + operator: 鳪²Ň踁鈷śQC ~ʕ膹 + tolerationSeconds: 261600404303321120 + value: 9voI + - effect: \nj,ʡ檄龉}啈嬚沝m + key: iwpjbTD + operator: ES|øąȵ蒒OǪtZȓ霸笭U蛫ŦDZ + tolerationSeconds: 8951817649970730000 + value: tTOkjI + - effect: ĕKªbƓƙAȸ鬮Z,湢eF驆 + key: 1BCP + operator: Ʌ45ʤǽ伀ɻDŽK`伴#3脐5 + tolerationSeconds: -6963744936651421000 + value: qpG + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: zfq9YSwZ7zP + operator: '''ņ5Ɗg舅怌ɯ覲ʅ坸櫾+ĉ沤Ś闀+' + values: + - RIZuQ + matchLabels: + 1ndv7BA: 9fKQa + l15kkLH: I4VRP6HUUi + yCdGsa1aQ: vDdtd + maxSkew: -158618891 + minDomains: -190913918 + nodeAffinityPolicy: 嬦蜱腊D鰺忪洉ņǾ畍x!ƾ8t + nodeTaintsPolicy: aɏ癒0MsʘD牻[Ŭ跱ľƕ伱 + topologyKey: hzSQ6 + whenUnsatisfiable: 播sś梇垫幵ȮE}<蘄P珶a鸨枰æ0( + - labelSelector: + matchExpressions: + - key: G + operator: 觮1:$Ǣ§Į犓 + values: + - MLGzE1lw + - 0E + - key: 5mblb + operator: 赒爧"诗臗磭ij農 + values: + - pBB9Q + - Edx54 + - zaU + matchLabels: + Anv: p3VxU + matchLabelKeys: + - o27dE + maxSkew: -1846977581 + minDomains: -1845114183 + nodeAffinityPolicy: LŽŗƄ梏包hɜ^ȅU资銝śM狃狔6 + nodeTaintsPolicy: 溰"鯮倁6 + topologyKey: D + whenUnsatisfiable: 紒_尘LɼO槆 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: noEL0 + - name: v +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + j: cfo02 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: I5FRf-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + HSs9D: 9SpkutyWquq + VJ: Lsbx4ai1 + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + hp9N: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: A + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + vAU3IVb: K0a + x: c + name: jPVwE-crd-job + namespace: default +-- testdata/case-043.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + PMp9J: ObRXDGAb + Z0EUj9: 9nCl + creationTimestamp: null + labels: + JSQeek3: yjWsGmb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Kha + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: VPQGI1R + health: + healthProbeBindAddress: vAjfZRDH + kind: Rkv + leaderElection: + leaderElect: true + resourceName: F4TBMLVmSO + metrics: + bindAddress: vskNAaGG + webhook: + port: 411 +kind: ConfigMap +metadata: + annotations: + MqMu: Z751YFdX + jK4Tz: nRtRZ9 + creationTimestamp: null + labels: + JSQeek3: yjWsGmb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 3Xj6U-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + MqMu: Z751YFdX + jK4Tz: nRtRZ9 + creationTimestamp: null + labels: + JSQeek3: yjWsGmb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 3Xj6U-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + MqMu: Z751YFdX + jK4Tz: nRtRZ9 + creationTimestamp: null + labels: + JSQeek3: yjWsGmb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 3Xj6U + namespace: default +spec: + replicas: 602892202 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + strategy: + rollingUpdate: + maxSurge: 1254637227 + maxUnavailable: 1181960699 + type: ƴ旾皧ư¸5浢ȶʧ廥RÍƔ + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + LAJ: qbyZ + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + qgpZEn: tSA + spec: + activeDeadlineSeconds: 8122815581103249000 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: QFA9 + operator: V乯衉>:Ó韈Rƴ扫Ȧ鉴9.ǯ + values: + - IYjKm1G + - "N" + - key: 7C + operator: ¢ʓĈ嚗ɉ + values: + - s2mkuOpFFV + - PACPko5E + - rgdqj6pU0Inh + - key: J4 + operator: á + values: + - E + matchLabels: + CS2kjF: KchW + pUSJC2a: sJheWOAo + xy: 1w3MKNN7 + matchLabelKeys: + - qRbX + - ZeggQf + mismatchLabelKeys: + - n97uA + - hg4J0bG4 + - lYX + namespaceSelector: + matchExpressions: + - key: C1wCSxIG + operator: À惚 + values: + - 4fTqzN + - bDaABZFS + - K6KpN6 + - key: I + operator: 獯渉亹糉 + values: + - HcB + - tvZ + - key: iRexk6dySuY0 + operator: 0> + values: + - bVe + topologyKey: lOxekkaX + weight: 1165570909 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: rgZ + operator: =fɼ齨Ălj( + values: + - y34T + - jU + matchLabels: + ihMjREr: T + matchLabelKeys: + - nloa + - ghiw + - a4UE2VX + mismatchLabelKeys: + - kC1ibUKRH3G + - J38D + namespaceSelector: + matchExpressions: + - key: asNY + operator: '*Ȥ' + values: + - aO + - key: pG9kE7iM + operator: <蚬緄栮0 + values: + - Zu + - cKEm1S + - jmF8Fy3TX + matchLabels: + 0S0sOoL: WJ + HoF8N: GuarN0Tk + namespaces: + - mPyaOX + - "" + topologyKey: S4Uou5cVA0X + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: vj9hQ + operator: ìR菝ǔ + - conditionType: )ĥ + resourceClaims: + - name: zs0z + - name: Uh + - name: Cwm5 + restartPolicy: 倀尶Eʂ»EvǣǕ"銏轻OÞʍ顃g^柚 + runtimeClassName: zfdSRp + schedulerName: z + schedulingGates: + - name: QYXY + - name: I + securityContext: + fsGroup: 6810058302486106000 + fsGroupChangePolicy: Always + runAsGroup: -4632546854526170000 + runAsNonRoot: true + runAsUser: 5327409515334876000 + supplementalGroups: + - 3764293082951256000 + - 2051046491540931300 + - 5729763965168114000 + serviceAccountName: vDmiZ + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: SRdjniq7 + terminationGracePeriodSeconds: 7746510581024413000 + tolerations: + - effect: xů~貈Y撍暾悝厯鲜酮´əí7ȉL + key: Dx6JvLeW + operator: 哇ÏĔv啼ɓ齋!渴祝6ƭzLȻ,摯+ + tolerationSeconds: -5860159725938606000 + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: 4yar + operator: 家狌V渮ʧANɸ郱娞H + values: + - Ha5v + - T2Xw + - key: wmVm + operator: nY + - key: MlTi + operator: ËÁa渀易{!ÃÍɳƣŗƑ1ɱ漶獦fƣ + values: + - "" + - DrV + matchLabels: + 5G9tK0D6h: "27" + d0S: abaz + matchLabelKeys: + - lvgl + maxSkew: -219149065 + minDomains: -1853068091 + nodeAffinityPolicy: 擤Ǥ箱¼暿倮豳=NJţ埤ZMdȼY裔 + nodeTaintsPolicy: c狣候sŜ亭讜`p躭SƞO + topologyKey: qCFaIX + whenUnsatisfiable: ČHDZh%å + - labelSelector: + matchLabels: + aTDLv8: D3s + vjhtc1LP: o9Ge + matchLabelKeys: + - yGI + - i3SbNrjwUfZ4 + maxSkew: -2032787523 + minDomains: 547987185 + nodeAffinityPolicy: X銛罇WȐ纾屰儭%ƛ@ + nodeTaintsPolicy: /?秕wO墏jlȝ隄兎鴗e3¸ʔƘlÇ + topologyKey: lI9 + whenUnsatisfiable: ʀ?G纴$ + - labelSelector: + matchExpressions: + - key: RjAsRn7k2Hn + operator: 0汰aʝș + values: + - 9zoyg + - IRoGF + - key: G7CN + operator: '>gİ喴旬d榣锼杒ɾʞ' + matchLabels: + Bar7Nf: NSbIUdqe7 + VjF: 5p8x + matchLabelKeys: + - H2 + maxSkew: 1105402615 + minDomains: 123739480 + nodeAffinityPolicy: 邲Ý蕍Ȅ+ʩ缴T桰瓑_ + nodeTaintsPolicy: 挡&mć#Tǀ演Ô怞揙 + topologyKey: T4wz + whenUnsatisfiable: Œ1 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: 7wEL0 + - name: EeMIH + - name: iQoV +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + zdPL: 3ZqroY + creationTimestamp: null + labels: + 2Q3: 4eG3k4Q + 3iy: cFa + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 23c + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Uu-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + 2Q3: 4eG3k4Q + 3iy: cFa + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 23c + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + UtMd: aFO1 + X2: gclsGu + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + s9YCj1ZV9d: jKVDaA + creationTimestamp: null + labels: + 2Q3: 4eG3k4Q + 3iy: cFa + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 23c + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 5rSJNtq-crd-job + namespace: default +-- testdata/case-045.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + I6z: bgcjS + MNMEwkPV: kzM36 + creationTimestamp: null + labels: + 85G: Wn5f + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WgoV + app.kubernetes.io/version: v25.1.4 + aqO3ub: Ai5ntG + helm.sh/chart: operator-25.1.4 + povH0tOlni: A + name: 4X8m6P + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 6dSnL0 + health: + healthProbeBindAddress: YzK + kind: SfFaB + leaderElection: + leaderElect: false + resourceName: Bsqi1dYsyB + metrics: + bindAddress: SdeHtyNx + webhook: + port: 273 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + 85G: Wn5f + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WgoV + app.kubernetes.io/version: v25.1.4 + aqO3ub: Ai5ntG + helm.sh/chart: operator-25.1.4 + povH0tOlni: A + name: oyGLBa-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + 85G: Wn5f + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WgoV + app.kubernetes.io/version: v25.1.4 + aqO3ub: Ai5ntG + helm.sh/chart: operator-25.1.4 + povH0tOlni: A + name: oyGLBa-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: WgoV +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + 85G: Wn5f + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WgoV + app.kubernetes.io/version: v25.1.4 + aqO3ub: Ai5ntG + helm.sh/chart: operator-25.1.4 + povH0tOlni: A + name: oyGLBa + namespace: default +spec: + replicas: -1515947856 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: WgoV + strategy: + rollingUpdate: + maxSurge: 1993687357 + maxUnavailable: 757517014 + type: Ɋ溑@džxű詹%ƀȵí楣槓范渃¶ + template: + metadata: + annotations: + 1cScccu1h: sLgh2HF3m + E4ZGN8: T8TOnqMBR + creationTimestamp: null + labels: 79hvt2: 28iW1 Lkak: pKGcr T: H4QynactGw4 app.kubernetes.io/instance: operator - app.kubernetes.io/name: WgoV + app.kubernetes.io/name: WgoV + spec: + activeDeadlineSeconds: 8517436021481636000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: 0O + operator: 鶥ʧŷ袸粶Ƚ悊|úY櫶襄ɨ牚ƤƔ聍 + values: + - OOmD + - az0yMAah + - JOK + - key: q2 + operator: Ǫęŷŀ珣搐廒ÔälĽU慃-Ɔ恺+ + values: + - yIY + - jRVE + - AwosxJOY + matchFields: + - key: GyT0dGW + operator: 怌h机Ǖ瓋Ūxk&9wy還昖i鳃ǔ + values: + - DsPogS + - R9gB + - RIJl + weight: -766748941 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: 8uvMjiWzBOQ + operator: EǮ8戬Ɇ + mismatchLabelKeys: + - Hp6PSgn + - RniyheU + - i + namespaceSelector: + matchExpressions: + - key: 19LFz + operator: )騙BQ毺tĽ瑭髱ĭ嬫箵}窈胟倨UØ + values: + - rxluT + - RzP8AR + - lhiDXnx + - key: psSVb + operator: ɷ畁ȒrL + values: + - GdwgPG + - key: 1ek + operator: 嬳冈 + values: + - SZ5Fye + - x83KbQOK + - O8pMP1V + namespaces: + - H + - eU90s + topologyKey: 5zdJ + weight: 1160992652 + - podAffinityTerm: + labelSelector: + matchLabels: + "": qXdYU + mismatchLabelKeys: + - "" + - zs + - flicu + namespaceSelector: + matchExpressions: + - key: gt + operator: ƉŤMĕz + values: + - Sd2TsQc + - Xl + - key: BJ4V172F + operator: $ + - key: 7tYy8Ud + operator: ŀ鳼Ȥ歨轎w倉禍ǵ#ɝ + values: + - FJa3D1I + - s7Mvyt + namespaces: + - amOSuy + topologyKey: pNLZLnwSv + weight: 1465456140 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: F + operator: ȩ灂ȼéȱr貴 + values: + - QQI + - HF4 + - key: OqYys1j8g + operator: ƪ芮n + values: + - QlhDKhQ5v + - KBh4ig8 + - fjV + - key: LPTVNVCd + operator: j脭`8燅c蹋箤(瘓à + values: + - hlrmr + matchLabels: + 7N6FV: 7Hc + f0: 8ssGzW + m8dwrDdQI: "" + namespaceSelector: + matchExpressions: + - key: WRys + operator: 6Ź8 + values: + - iV + - qvSMb + - key: 9Bpe0q + operator: 駉j屍ɓ?ȯ!:v齮痔桜黚 + - key: ZNq7ak2 + operator: ǩ碈< + values: + - 4ZG + matchLabels: + 0qSfKGhTN: 0JNv + i4e3e: co7rR + namespaces: + - "1" + - f4CR + - pUEkTki + topologyKey: X + - labelSelector: + matchExpressions: + - key: bdiq + operator: 蟨 + matchLabels: + 1jZJHLH9: wx + KyT: bgLxSsl + NvtPki5: ojLhlK + matchLabelKeys: + - nO + - rG7BYxiHa7 + - 7cGar + mismatchLabelKeys: + - uCmBQg6Vs + - Z8QQGLGHO + namespaceSelector: + matchExpressions: + - key: NsHeHH + operator: 祢腗蚗 + values: + - AlA + - xq0B5 + - 1ND + - key: Dm5XrYF + operator: '%ã肩ʫL样İğ' + - key: xdF + operator: Xd尕鿁]掍繛瓷&緈垙<ȩT + values: + - okAfu + - vXtIJgVn + - 24Hqw + matchLabels: + tXQm: JxUq + topologyKey: VHrX6 + - labelSelector: + matchExpressions: + - key: rr9UE5yiv + operator: 沸a)Ȥɘȗ*f虖>Ȉ\跘摃梡M1 + - key: jSSPM + operator: 坨孀 + - key: CExbI + operator: 鋺唱鱖Ú* + values: + - O + - Vu + - lgQ + matchLabels: + RX: mRN + matchLabelKeys: + - xFOyA6OD8 + - zmc + mismatchLabelKeys: + - 7ZMxa7okydGf + - xAt12Lr + namespaceSelector: + matchExpressions: + - key: Yq9fjxN8 + operator: 崊dʭʓ + values: + - "" + - "" + - k6pAQ + matchLabels: + Ax: 1c + namespaces: + - sN1S + - BpRRtw + topologyKey: QeF7HWto + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + qlNhu7K: ZRmvQy + mismatchLabelKeys: + - dArXnCa + - FH + - pGd15wlred + namespaceSelector: + matchExpressions: + - key: tY + operator: 渶Ď[泣(蛏p縼蓂 + values: + - VWw8 + - NVso + - 0B27 + - key: 6mA + operator: 傈厇kĶ竓Ș趫祄昙嵥(j噲$陫窎 + values: + - e6i62Q + - "" + topologyKey: Xfi30Zca + weight: 1975781303 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: VLjkGhf + operator: "" + values: + - YhLghmxw + - xuThL + - key: B + operator: ť攇桡呟D颛訞Yzɾ冉t(幬f岥CZ + values: + - GMQupJ + - BJOurJ + - key: wHF3y + operator: S + values: + - 3Mdt + - aBCk6J + mismatchLabelKeys: + - UlXD + namespaceSelector: + matchExpressions: + - key: gXhZQJx4 + operator: oǿ + values: + - VbrAa + - BwkxO + - key: OaCAe8va5 + operator: 驼Þ簿--ŮF)CĕctɮÄȊǦɐļe + - key: P1HlUyRJ + operator: 賽!e\>ĺÿ璒ȆƳ濤ŃÐHG儚Zǘ椘 + values: + - kRXLx + - jXS3fY + topologyKey: pXtyl + weight: -395468765 + - podAffinityTerm: + labelSelector: + matchLabels: + jCGF: nH + wz: mRZPcj + matchLabelKeys: + - FodjS0RYf + - 2UxT3 + mismatchLabelKeys: + - BAb + - Fpu + namespaceSelector: {} + namespaces: + - hl + topologyKey: DT7d + weight: -1720224527 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + YY8v: L + f: JcpM1b + namespaceSelector: + matchLabels: + 0WihS: xl + sZh: ld9ncR + u: 1dM + namespaces: + - mqqAiz4gX + - "" + topologyKey: hl6IEOj + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=YQXlr + - --configurator-tag=H + - --configurator-base-image=Nt + - KeFi + - dfONW9 + - 9znBOn + command: + - /manager + env: [] + image: Nt:H + imagePullPolicy: Always + livenessProbe: + failureThreshold: 122 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 598 + periodSeconds: 192 + successThreshold: 163 + terminationGracePeriodSeconds: 602 + timeoutSeconds: 792 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 376 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 576 + periodSeconds: 929 + successThreshold: 628 + terminationGracePeriodSeconds: 234 + timeoutSeconds: 833 + resources: + limits: + cpu: "70" + memory: "179" + requests: + cpu: "361" + memory: "304" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - uu5wuW + - Bol9J + searches: + - BVejU6FkQ + - hti + - UA + dnsPolicy: )öDž*厧ȣ}眭 + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - 1CLOeowAxb + - CxZs + ip: eiUTF + hostIPC: true + hostNetwork: true + hostPID: true + hostUsers: true + hostname: AeGl2y + imagePullSecrets: + - name: yhMJMJnb8 + - name: cgEZxLt + initContainers: [] + nodeName: LLpUiEAZCZ + nodeSelector: + TLl0PZ6OTN: vkbv8W + ZdErK: 6iw + iUwg: Wu + preemptionPolicy: 蠘Y¬ĺ忒"鶈j宬I岺<NJ韍銏~ȕ + priority: 258864602 + priorityClassName: "N" + restartPolicy: 輰爭'4鍽 + runtimeClassName: W + schedulerName: iwfxQaVdWarPz + securityContext: + fsGroup: -2148455437780501000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 4397321133833196000 + runAsNonRoot: false + runAsUser: 741314432643626500 + supplementalGroups: + - -601783420272022700 + - 8053103445269503000 + - -3944851009563354600 + sysctls: + - name: "" + value: C7Usd + serviceAccountName: 7Dq + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: S3 + terminationGracePeriodSeconds: -7320009787630770000 + tolerations: + - effect: '&鏅ɷ1ɯĵ>r' + key: nz + operator: ɺdžċĐijxɕ + tolerationSeconds: -4015282094144227000 + value: YUCnlhz + - effect: 塼 + key: B7pZHa + operator: '!Ǎ?環Ȩ奠įȩəȚ,ɵ讞$<懒' + tolerationSeconds: -74957164183154200 + value: 6M6E + - key: t + operator: z嗴z奈閶ąŨ卉椸ɫǢ\ũc`ƍƉ + tolerationSeconds: 1380891834235558700 + value: 1Gyq + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: hFda + operator: ŲtHƪG`ɥ枻殜õ6 + - key: vv3h0dGP1 + operator: 鐴ŀ?蔀ȿ嶮m襉 + matchLabelKeys: + - fqGXSlw + maxSkew: -1479045130 + minDomains: -1439264948 + nodeAffinityPolicy: ȷ%ȵƲc睊 + nodeTaintsPolicy: ʂ.Ĭ齭sȤé籔~ñ'k`Ȣɗ烐ɟėƹ + topologyKey: CEXN + whenUnsatisfiable: 夨屣鯞Ì蜿ÿ嘒J慯瀉Ƅdž篨Q; + - labelSelector: + matchLabels: + NnS6: OT8S6Cn4f + aNLpsJD: BTSGW + dajfmOJC: 2jrw0cOu + maxSkew: 1099055978 + minDomains: 1592864027 + nodeAffinityPolicy: =-鲲q雷ʌ>Ç橕} V, + nodeTaintsPolicy: '|åɥ#9甽¼ŝVZ' + topologyKey: hb4mcC + whenUnsatisfiable: /ɼɇâE + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: EbmP3 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + I6z: bgcjS + MNMEwkPV: kzM36 + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + 85G: Wn5f + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WgoV + app.kubernetes.io/version: v25.1.4 + aqO3ub: Ai5ntG + helm.sh/chart: operator-25.1.4 + povH0tOlni: A + name: 4X8m6P-crd-job + namespace: default +-- testdata/case-046.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + uKiV: x73f + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 0tSU + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Wmx1ORHBT + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: zd + health: + healthProbeBindAddress: uyO + kind: 5xDLZq + leaderElection: + leaderElect: false + resourceName: WfnOlt + metrics: + bindAddress: 7H + webhook: + port: 256 +kind: ConfigMap +metadata: + annotations: + 5PCqmrcu: 9Mh2cYD + 7ioUdNK: ZfqZZ + ka: lnxR4 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 0tSU + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: kO-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + 5PCqmrcu: 9Mh2cYD + 7ioUdNK: ZfqZZ + ka: lnxR4 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 0tSU + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: kO-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 0tSU +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + 5PCqmrcu: 9Mh2cYD + 7ioUdNK: ZfqZZ + ka: lnxR4 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 0tSU + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: kO + namespace: default +spec: + replicas: 1544247573 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 0tSU + strategy: + rollingUpdate: + maxSurge: 1997166204 + maxUnavailable: 1274979507 + type: ^萀彼=ĎʼnØ皙Îk!Ë婽甊t + template: + metadata: + annotations: + "4": z + 32D: xxW + creationTimestamp: null + labels: + G: "" + ZAHH: LAa + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 0tSU + m2vh: oO5 + uY9r: vT + spec: + activeDeadlineSeconds: 7867988885961322000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: EBm0OWl + operator: 沫ȤňĭĖ校¤?6r驕ȵRʢ潞饜 + values: + - S4cLQgY + - key: sCTFAdg + operator: 疙Ȁȣ\鬹亁2讉ŏ/舴Mŕ熵 + values: + - HG4QpF0 + - 0V8fa5AEhda2 + - hruUdDl + - key: UjSH41 + operator: Ů\z[$)ĢǷ瞗ƥ廅退Ȁ輜崀ʬ + values: + - Oo52C + - "" + matchFields: + - key: oY + operator: ɶmƽư + values: + - myfWkL + - BWE9sBVy + - key: AzGq + operator: 瀇廓bľ嘹>如a襤殪櫕ȉ岯ŭ + values: + - SYsJeo + weight: 132079138 + - preference: + matchExpressions: + - key: Ufd + operator: VĵƣÎ钕ċ + - key: 03Z + operator: Ǭɱò圦劮,2凷]}=icű枾 + values: + - 6aEkz + - g + - 8ZjMt + - key: "" + operator: ſȭpP籼ĵ紬癝r糘轔ƪ4祹狫酃鐺FJ + values: + - BGV7q + - jRq + - RDP + weight: 1820515791 + - preference: + matchExpressions: + - key: myIMD + operator: e檎鮓菅輨,餙娌uDZ]) + values: + - wh + - qWF + - key: 8p + operator: ǔW凛 + values: + - Bl1GI1 + - HL3vm + - Z8V0QG + matchFields: + - key: WaxY80 + operator: ŝǁő鏪ƽɇe7?隧× + values: + - jcVXe + weight: -1898189568 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: rDAprk + operator: bo»t鵞Ƈ噼&qKƬ}甼Ō晏 + values: + - m7JIapRHROvtI + - 18d + matchFields: + - key: wFjOx + operator: 5廈k猃w}漄胎ŶǮ唻蒫婈 + - key: QAGmuJVyKO + operator: .梸T铘ʆ愂踋"欛逍Ʃ+ƽ栃噤瑖] + values: + - M7Leap + - p2NqUfPV + - FCag + - matchExpressions: + - key: udITb + operator: 監呣礝+n与鑕醥ȅ + - key: sk4O9J7cQ + operator: 9"遽Ǵ輱ļI5ʘȤ + values: + - Mq + - I + - matchExpressions: + - key: Z2xbNz8p + operator: '"WCȰijɍ綻玟夑Ƙ鸍ń' + values: + - Ug1UmNiXuz0 + - key: x + operator: Hɻ0ĩ mʒäĬ6枵ǎ^Hɭ鄈 + - key: UV + operator: lŶ耯^穟7Úȹ + values: + - lAk8S + - tO0 + podAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: "" + operator: 煴ÿ戥霪gĿ 嚜_攄Gņ樧爊ʂ墋Ƹ絥 + values: + - GHJP8Igv + - SDXg + - key: 5N + operator: ^S>ŢS枥Cƣ + values: + - qbpuhVEI + - i4Q4A + - RDwvkFcBvQ + matchLabelKeys: + - og7qAhNC + - "5e20" + - bEX + mismatchLabelKeys: + - o + namespaceSelector: + matchExpressions: + - key: XyijfaQ + operator: "" + values: + - G3nFB5 + - a + matchLabels: + mxuSXpI0k4: seiahuvm4L + namespaces: + - XQ + topologyKey: 3oq9eC + - labelSelector: + matchLabels: + "": "" + cXVby5hPwzPn: P6RAP + matchLabelKeys: + - v5eoGst8Hr + - Xj0Nc + - Ihw + namespaceSelector: {} + namespaces: + - CGm3YgV + topologyKey: HHPI + - labelSelector: + matchExpressions: + - key: utfqZ + operator: 髓Ȥ礁K{絗&ǩ! + values: + - Wxx2rK6o2 + matchLabels: + hN: UaT5N + matchLabelKeys: + - j + - MnyZgn + - UKzSg + mismatchLabelKeys: + - wI + - eXzzW + - 4j + namespaceSelector: + matchLabels: + IeMGidnmo9B: YDlPq + bg: 9cIn5Ks + oupUqZeV: gzujQsGP + namespaces: + - cPfJ + - yuXuqa4X + topologyKey: Cjufs1 + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + L: VP85h6f + Qu2W7dr: 8ucp3d + matchLabelKeys: + - ulYtMY + - i2lqCh + mismatchLabelKeys: + - sffvIzro + namespaceSelector: + matchLabels: + MIc1oN: 4U + jwXjp: OG + t: z + topologyKey: vE + - labelSelector: + matchExpressions: + - key: xt8 + operator: 忟朤qƍĮCZ甠ƣ + values: + - 8DGjvW + - oFw + - vXZL7uR + - key: vHxM + operator: ɳƑ$迗湵菑S:Ȝ鉡' + values: + - gDstcfI + - key: NqEX + operator: ħ膰#!b'!鿼ɤ塪鶞+>Ȱ + values: + - jT7ab + - owLaAs + matchLabels: + 7dyEycCK6F: Ztaj6abb + V: 4Zh83hs + VKb: LCJK + matchLabelKeys: + - C + namespaceSelector: + matchLabels: + 0ncmeEqz: hCLQVxX + bkdGD1B: A0zLz + e8O4P: Mq6K414H5n + namespaces: + - YY7H + - Iz + - xyEH + topologyKey: n28JY + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=TwQtVGrOeJf + - --configurator-tag=go + - --configurator-base-image=MRDUBfo4 + command: + - /manager + env: [] + image: MRDUBfo4:go + imagePullPolicy: Never + livenessProbe: + failureThreshold: 590 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 662 + periodSeconds: 137 + successThreshold: 971 + terminationGracePeriodSeconds: 814 + timeoutSeconds: 640 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 718 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 320 + periodSeconds: 745 + successThreshold: 714 + terminationGracePeriodSeconds: 610 + timeoutSeconds: 345 + resources: + limits: + cpu: "1" + memory: "427" + requests: + cpu: "108" + memory: "560" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - MlS + searches: + - 7ddU + - eAY3 + dnsPolicy: 咧嘳 + ephemeralContainers: null + hostAliases: + - hostnames: + - k9SgM2Y + - 8NB1 + ip: hjmC4gcl2 + - hostnames: + - Ic3 + ip: wJMhEo9e + - hostnames: + - Efc8FX + - oV3GlgAF + ip: ZsRszsDK + hostIPC: true + hostNetwork: true + hostPID: true + hostUsers: true + hostname: DaO + imagePullSecrets: + - name: ggPp + - name: ORs + initContainers: [] + nodeName: XnaQGp + nodeSelector: + 8Xhhvc: QeJV + G: 4oZHp + preemptionPolicy: ?ʚȹ欦DcYǰ;[LhÕ?長Ǫ凣 + priority: 431927033 + priorityClassName: 6C98 + readinessGates: + - conditionType: 散4畲T媧q裾浸 + resourceClaims: + - name: 6S9WJH2 + - name: hALKj9sZ + restartPolicy: ɊÝ,û~iƂ + runtimeClassName: AQss2 + schedulerName: U728d + schedulingGates: + - name: AbeA6 + securityContext: + fsGroup: 5860725421596689000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -6792494876590631000 + runAsNonRoot: false + runAsUser: 3376299592244123600 + supplementalGroups: + - 1010093601451592800 + - -5028736228493234000 + - 1947408406497262000 + sysctls: + - name: "500" + value: D + - name: n5Op + value: 3o3 + serviceAccountName: gA2BiKxgw + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: LxuMm + terminationGracePeriodSeconds: 3482153433229272000 + tolerations: + - effect: ÿǓȻ\浮从铏ŀ牰 + key: Tm3Fr + operator: 抄 + tolerationSeconds: -186331534445053250 + value: "7" + - effect: ƐŦǀ竓挾 + key: gy + tolerationSeconds: 4883906869684912000 + value: jIxNJO + - effect: 邈Ž鍞砎撑Ȓ櫵選7歺ƻ偫Öɺ奘Ŝį + key: lu7PaAvSZD + operator: 唡団ɢ9煪-ƴǽ堎ȵ+勾Ɣ咯ɉɪț,翭 + tolerationSeconds: -6189008985546581000 + value: gSexIRiNQoyW + topologySpreadConstraints: + - labelSelector: + matchLabels: + 1lZGp: q + L: y9 + Nlj5: TN2o + matchLabelKeys: + - xquV + maxSkew: 1561733678 + minDomains: -1000334657 + nodeAffinityPolicy: 囖Ʉʫ香==戔Lúw + nodeTaintsPolicy: LJôzRįij癮Ŗž黕 + topologyKey: "91" + whenUnsatisfiable: ɜ妒ʢIJ嶇习>NJ>ä + - labelSelector: {} + matchLabelKeys: + - Q + - bmTYzW + maxSkew: -1940779004 + minDomains: 589570672 + nodeAffinityPolicy: 鐂瓀UȮǂƔ + nodeTaintsPolicy: 眝g攠+菕Ɠ%#Ƒj亼ʼn荭淓舥 + topologyKey: jAIPAdyB6Pi + whenUnsatisfiable: Z.鳉ȃ靃z' + - labelSelector: {} + matchLabelKeys: + - kZIVnYJog + - rF1bA + - Gljl + maxSkew: 1700406858 + minDomains: 1941371014 + nodeAffinityPolicy: 顐Oʌ枚P`鴱Ǿ¡b画[丏 + nodeTaintsPolicy: 傮UÚ媵ʏ泮ȝ皱ĻȡƩǪ0FŃ彩筹 + topologyKey: V + whenUnsatisfiable: 旔8>Ǡ&z+}睂筢´È-ʗNj' + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + uKiV: x73f + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 0tSU + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Wmx1ORHBT-crd-job + namespace: default +-- testdata/case-047.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: PBU + health: + healthProbeBindAddress: BUZg6I + kind: Wh + leaderElection: + leaderElect: true + resourceName: fj4jpKo + metrics: + bindAddress: GX + webhook: + port: 430 +kind: ConfigMap +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: oL1SSfzH9d-default +subjects: +- kind: ServiceAccount + name: i7DA + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: oL1SSfzH9d-additional-controllers-default +subjects: +- kind: ServiceAccount + name: i7DA + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: oL1SSfzH9d-election-role +subjects: +- kind: ServiceAccount + name: i7DA + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: oL1SSfzH9d +subjects: +- kind: ServiceAccount + name: i7DA + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: oL1SSfzH9d-additional-controllers +subjects: +- kind: ServiceAccount + name: i7DA + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: kF +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + Ko0pmEw: 59Cu + Q: 3fQgP + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oL1SSfzH9d + namespace: default +spec: + replicas: 1441832588 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: kF + strategy: + rollingUpdate: + maxSurge: 1051307328 + maxUnavailable: 1045370553 + type: ɶ柢£? + template: + metadata: + annotations: + EmRu: Cn59 + fz7c: 4sdKfo2FSqT3 + kar: "" + yP57wD: jIUAEX + creationTimestamp: null + labels: + In: ZiPrGmN75Tu + app.kubernetes.io/instance: operator + app.kubernetes.io/name: kF + iEwo: Ft + pRkD9: 47qmsTI + spec: + activeDeadlineSeconds: -4123803089407925000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: uNe5 + operator: 寕B胇KƎP昿蹅xſɨ殙 + - key: YVd + operator: C奤Ă5賊 + values: + - 7E + - u + - key: opJFYnB7Oym + operator: G礛ĸƫP©ėŬ%ʚt0:陳塈 + matchFields: + - key: 9j + operator: 扃竑 + values: + - H + - 8cCddDMoGdpi + weight: 2013915680 + - preference: + matchExpressions: + - key: BYLN + operator: 2l犞`遊芖W盆ʨuƯ¹+ + - key: Qq + operator: 殨舢佾Ň聰®秤X蠁?藒 + values: + - HhFN + - key: MjC + operator: 脔#Ĝ + values: + - N0KzTseOI + - cMHSBXX + matchFields: + - key: TSi8 + operator: ŕſgP~Ń臻 + - key: rcknFBaHyDP45WA + operator: 酮|ƏƲį&v紩ǚ + values: + - 0vw1 + - YWAHGw + - key: t + operator: 鷴Q袪棺ȋɒ=ƍs©ʮ + values: + - 1kbmhJI + - 1Df8mJ + - "" + weight: 2113734231 + - preference: + matchExpressions: + - key: zhZ4 + operator: 齶|!_Ħ簤o苽灉6N瀏 + values: + - 3mlYM + - MVC + matchFields: + - key: xXQfz + operator: å靕瞇柩G踛ƺ歶鉒¨į垿X腽hɌ + - key: EyuL8GS + operator: Gʜǧ筋奋仟渴c竅z + values: + - NihX + - kdg + weight: -650476903 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + 0K: "3" + PnX1n: VNWxqQ + qKjP: 8WGM + mismatchLabelKeys: + - 0dU + namespaceSelector: + matchExpressions: + - key: 5X + operator: 幠棝觑篜馡{偺 + values: + - "" + - 0VGL6 + matchLabels: + 8m: oEjDoUs8x9 + eba: "" + zG653VFi: A2swcnry2jkF + namespaces: + - 0ilU4SAQV + - 5Znq9gw + topologyKey: PYzBcM + weight: -468083968 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: aOc + operator: ƅ愧5wƃĺɈ噊壀Ǎ + values: + - YThMfcaTTz + - sKxo + - ZXVhGfVM + - key: eW02zLj + operator: id`谲韇废ɲəɱ攑ĉ纲Th¹G­ + matchLabels: + 39tnFaL: "" + y8CN4o: WtEKfMv7OhOv + mismatchLabelKeys: + - 8WDiqfpCo + namespaceSelector: + matchExpressions: + - key: xY + operator: 召ʓ猚 + values: + - zR + - BXMmL7 + - key: FpQP8y + operator: n-ƣ矚g蚡儲 + values: + - zDobj + namespaces: + - heDwYBP + topologyKey: o2pbqTyEl + - labelSelector: + matchExpressions: + - key: ehzhQVU + operator: 葦²l翑]碊Ɲ罠鶉w + matchLabelKeys: + - TgFaoq + - TJXyJq + - NK + mismatchLabelKeys: + - QaJSjgb + namespaceSelector: + matchExpressions: + - key: AUGEkl + operator: 倂}Ƚʂ5{仓pĪ貄pi!簪抪ƺ@ǯ鎜 + values: + - AYFJF + - xcn7Gk + - key: stkUV7w3 + operator: ƶǞ旷\D耚蟑谵*,厡î遭LȆx砹 + values: + - A6j + - 9nO + - 9IW + - key: rowgqxqxNp + operator: "" + matchLabels: + ii3ZoO: zWkor + w0SKNtC5: DmW8 + wnY: dL2UKYnI4D4 + namespaces: + - 4BZD + - c4X + - MtZfDn + topologyKey: S0g7 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + 7t9hx6U8fzL5: ljsPMMc9m8k + matchLabelKeys: + - Vo + mismatchLabelKeys: + - 7SEFY + namespaceSelector: + matchExpressions: + - key: Yd4IO + operator: K臘.ɧŀX欦E靪c+ + values: + - L3iB + - fzg50 + - key: q + operator: 束悴麏ƻùȍr甉湥轿Ƀ眇Ȓ] + values: + - MDYLRwRJ + - tAjQSw + - B9FPwACM + matchLabels: + Fnvzaszq: kKnao0GuRJ9c + qKJts1U: tvVc + topologyKey: GNCj + weight: 2125033831 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: FSvFAd + operator: 飠 + values: + - WA9PQ + - b + - key: 5eB + operator: ɉć慁堏Ʀ譭QV梋澧ʥL)貃Ŕ径 + values: + - sX + matchLabels: + 43Q9: I + OMljwWVc4wj: hfb + matchLabelKeys: + - UX + - q8aLUI1X4M + mismatchLabelKeys: + - Rf + - J + namespaceSelector: + matchExpressions: + - key: wwtXWqFD1s + operator: 噽哔 + values: + - zB04 + - MRA6dRrptwWdKp + - key: 8m6H + operator: 窐>ƪƣ昮锍韀 + - key: jSyWsYQs + operator: "" + values: + - Bbzpnr + - AHvuf + matchLabels: + L0BN: PJspte3L + s1P0m: H + namespaces: + - KzdgBbfV + - QIjkC + topologyKey: 6oJCw + - labelSelector: + matchLabels: + he: oH + matchLabelKeys: + - 74HUO + mismatchLabelKeys: + - 71vZS + - P4Qgh + namespaceSelector: + matchLabels: + 0f: Xc + 1ZHpPW2U: U4lDglo + ZoXhuUOn: DwFq91 + namespaces: + - ep3ro + topologyKey: WpA + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=EFXhBX + - --configurator-tag=pneZv + - --configurator-base-image=KbWqGz + - 5O + command: + - /manager + env: [] + image: KbWqGz:pneZv + imagePullPolicy: Always + livenessProbe: + failureThreshold: 723 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 831 + periodSeconds: 576 + successThreshold: 866 + terminationGracePeriodSeconds: 590 + timeoutSeconds: 303 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 618 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 489 + periodSeconds: 407 + successThreshold: 175 + terminationGracePeriodSeconds: 128 + timeoutSeconds: 388 + resources: + limits: + cpu: "276" + memory: "533" + requests: + cpu: "944" + memory: "133" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - XQQvkKFB7z + - vqb + options: + - name: rA + value: V3 + - name: "6" + value: UxotQ + dnsPolicy: 4ƔȟE}燸榘Ÿ?ƥ/貜 + ephemeralContainers: null + hostIPC: true + hostUsers: false + hostname: wn3zlZ7 + imagePullSecrets: + - name: v + - name: hHQDwu7N5Q + - name: VbZ + initContainers: [] + nodeName: 0Ee5S + nodeSelector: + 8uxdh8Ut6xs: e6X8c22BMIrKkd + aygiD: "" + bBdu: IpXHwGw + preemptionPolicy: 渻 + priority: -1143446041 + readinessGates: + - conditionType: 乴谽bč忕 + - conditionType: 璇>Ŗ + restartPolicy: DŽû4闠 + runtimeClassName: mPt5FoX + schedulerName: RT + schedulingGates: + - name: WZNHmy + - name: koe3 + - name: T + securityContext: + fsGroup: 3425056346527125500 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -8843691012766103000 + runAsNonRoot: true + runAsUser: 2040938350598920400 + supplementalGroups: + - 4624815095572574000 + - -6622660602628227000 + - 6757111341335144000 + sysctls: + - name: mTO7M + value: Aa2a + - name: Bnh29NCDOa + value: ano + - name: oKePh + value: t + serviceAccountName: "6" + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: C + terminationGracePeriodSeconds: 6097461166688802000 + tolerations: + - effect: 0V棔糀ÃŘ膆Š讏 + key: QbTou + operator: ǞpȪŪ3煴ʋúɟ=ƙ:肍39Ŏ + tolerationSeconds: 3316644788216531500 + value: A + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: W9 + - name: xuaa0 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 7GKS: kf + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + 5ga: L6kCMw6j + NImdN7q5tNW: UPT + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kF + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: i7DA-crd-job + namespace: default +-- testdata/case-048.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: hxBG + health: + healthProbeBindAddress: l + kind: TJaGphLwcawiM + leaderElection: + leaderElect: false + resourceName: YK + metrics: + bindAddress: RgXfRMqEJ + webhook: + port: 60 +kind: ConfigMap +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: qVYvaMYre-default +subjects: +- kind: ServiceAccount + name: Rsep9k + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: qVYvaMYre-election-role +subjects: +- kind: ServiceAccount + name: Rsep9k + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: qVYvaMYre +subjects: +- kind: ServiceAccount + name: Rsep9k + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: qVYvaMYre-rpk-bundle +subjects: +- kind: ServiceAccount + name: Rsep9k + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: icwMYEubJ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + Hb: p6nsnNym + XCiiUj: V9 + nfDuOzQO: w + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: qVYvaMYre + namespace: default +spec: + replicas: -1694564830 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: icwMYEubJ + strategy: + rollingUpdate: + maxSurge: 888694814 + maxUnavailable: 1389219603 + type: 迂Ƹ/餳c¡ + template: + metadata: + annotations: + Auj: ot87eXT + H6JkGozv: 4eeJ7 + j3Pi4o: CtwRh + kN1wtkKOq: WKhl + creationTimestamp: null + labels: + 7Z2: Z4 + K: kVOYzsH + app.kubernetes.io/instance: operator + app.kubernetes.io/name: icwMYEubJ + spec: + activeDeadlineSeconds: -1791496714744389400 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + QbG9Mk: npHb + mismatchLabelKeys: + - mTbMruAj + - SG7QeK8RZrF + - ouf2N0 + namespaceSelector: + matchExpressions: + - key: "" + operator: \&[ȟo閳ĆZƴ&}皎釷 + values: + - zVf + - 5DYzYV2Q + - key: gYu5z + operator: 虀柜 + values: + - xnu3ILGkJZ09 + - B3Suy + - 4ck + - key: P5N + operator: ƶ1Ŀ®|ä9 + values: + - 4GC6Q + - 0rMVdT + matchLabels: + V: alTZGeuk + topologyKey: cCi + weight: -226612297 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: qLOd + operator: ƾk瓳BhƩ綼虾^>¢n:EĿljû + matchLabelKeys: + - dZY + - bbge9qatP + - NX2iY + mismatchLabelKeys: + - AZ9 + namespaceSelector: + matchExpressions: + - key: mKZCYX2u + operator: cɸ塙5藎{ɆƓo傥Ɉ|8< + values: + - PqMTnsD0z + matchLabels: + fGW: G + namespaces: + - Y2VeTk1W + - POPBzPK + topologyKey: iIFXA + - labelSelector: + matchExpressions: + - key: "7" + operator: mY褏澖 + values: + - E + - xYwPiAiCprT6ee + - key: g9Y4t + operator: ȳk涀鐭霜Nj,伻 + matchLabels: + F: XE8rQzOU + LmWDLqidh2P: c + S9ZaVdhTISfa0H: 5HeZs + matchLabelKeys: + - feTG + mismatchLabelKeys: + - OnJd + namespaceSelector: + matchLabels: + NYU: Y1hI + OReo: m989 + namespaces: + - P + - bs9S40e + topologyKey: HAdK + - labelSelector: + matchLabels: + NtmDfUYK5aR9: ArWFo + matchLabelKeys: + - GQ + - wUKa8j1 + mismatchLabelKeys: + - gpS + namespaceSelector: + matchExpressions: + - key: ot9Vun8V + operator: '&棾晚ǜ_ɥ' + values: + - gt7 + - D0tuRDfaaqF + - hKu8ertsz + matchLabels: + F: tdj28 + uCIzH4: K9Q7db + topologyKey: xx97 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: "90" + operator: ŋ4銭ʌ坵 + - key: Xj + operator: 裫艏Ǯ]A亽Ȁ¡Ǟɤ瀢Ųɼ^-T辇獽 + values: + - DrKfkH + - kYVJgZ + - 9MM + matchLabels: + ugbLL: nVJy + w: CFB + mismatchLabelKeys: + - mcZ + - RV9XzP + namespaceSelector: + matchExpressions: + - key: eq2jbvk + operator: Õ矷P傝蹵ƕ萭Z幋ĩ[ + values: + - ydUzhj + matchLabels: + gFSF1J: GMguIadtNB + jBrn: G0 + mqyw: BCnj8zFPWK + namespaces: + - xUimbqiJ + - Kb07r + topologyKey: Il7A6 + weight: -699542974 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: Aza2yP8 + operator: Q錫ģ縟ǖjŷ + - key: Az + operator: ÜɪXĒŢ驡ɡ Á钶pj壃ÜÐ臑顩\ + matchLabels: + "7007": TE6la6A + TeOUnuuJ5e: lpO + gwqr: o1h + matchLabelKeys: + - W9ZHn + - 1N1w5C4G4 + mismatchLabelKeys: + - uJImFg + namespaceSelector: + matchExpressions: + - key: CT + operator: ʚ农ǤC<攊'Ɍ譣磻ƤgF8{ + - key: "1" + operator: 驭!Ơ潂T敎矅PfĽș蕘ĦōVɣ笩 + matchLabels: + BIJvg1G6: TOt8R + namespaces: + - VsOXnAssX + - 3fz9X + - gT7 + topologyKey: iAPfX + weight: -324721382 + - podAffinityTerm: + labelSelector: {} + matchLabelKeys: + - S0 + - UdJIF59 + mismatchLabelKeys: + - zwO + - LH + namespaceSelector: + matchLabels: + vBxydG4: rGIqfhF6Bp + namespaces: + - RL7Ngl46f + topologyKey: cshTSjrl + weight: -1018167230 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: ari + operator: 鮫n瀕b=Ʌ霂嶚|,YqBǛɴ + - key: 8Ota + operator: 許S屢%佱. + values: + - jCdObPq + - b9gND + matchLabels: + "": HGh + "4": CMlweQI + NG50YChS: 93Ce + mismatchLabelKeys: + - IiLl + - ybv + namespaceSelector: + matchExpressions: + - key: j + operator: '`Øȩ攌赸' + values: + - X + - zfNjG1t + - key: 5LWgCb + operator: 澾澟9$qĔƈƞv + values: + - uN + namespaces: + - dn + - 78z + topologyKey: 2w + - labelSelector: + matchExpressions: + - key: wdIB5 + operator: 聎鴦Ųē別ȏ倛雛 + - key: Pa7Fpf + operator: kɌ.渚ņL| + values: + - Oiw + - Rj8icGqThR + - key: uCsZ8v + operator: "" + values: + - MrkvV + - vbro + - Uf + matchLabels: + Jd0WgU: AycMdvt + O: S9JugfEe + matchLabelKeys: + - rXOAQv + - 059wt + - nz + mismatchLabelKeys: + - "" + - bfOFFW + namespaceSelector: + matchExpressions: + - key: gS30 + operator: 诓1璠o%~ + values: + - Di + topologyKey: GQH + - labelSelector: + matchExpressions: + - key: xCEW + operator: )葍ĂX邞阯宏慯XG(龧嫣夶翕 + values: + - 2snD + - key: 8OsZ0YK + operator: Ǯ袱伨'ȒƪȜ + matchLabels: + O: 4i1 + kqkgpct: UU6DrWWYr + matchLabelKeys: + - vUNl9fc + - Lf27mQbT + mismatchLabelKeys: + - MEFRq6 + namespaceSelector: + matchExpressions: + - key: HF9S1iy + operator: ƪă~盅ȼ旱耧 + matchLabels: + zZ3txVU: zBJWGJruLY + namespaces: + - "" + - 5Yiak + - ZESlWGSU5sb + topologyKey: AjlI34l + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=ozF + - --configurator-tag=qPbAyXLw + - --configurator-base-image=CPQ9Y6 + command: + - /manager + env: [] + image: CPQ9Y6:qPbAyXLw + imagePullPolicy: Never + livenessProbe: + failureThreshold: 760 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 987 + periodSeconds: 962 + successThreshold: 312 + terminationGracePeriodSeconds: 608 + timeoutSeconds: 180 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 847 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 755 + periodSeconds: 40 + successThreshold: 15 + terminationGracePeriodSeconds: 751 + timeoutSeconds: 281 + resources: + limits: + cpu: "245" + memory: "433" + requests: + cpu: "312" + memory: "805" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - OKrRLUXo1z + options: + - name: j9ThUG + value: Vwy0cIZz0k + - name: 4M + value: gfAxn5R + searches: + - 8MBaXH + dnsPolicy: 犤Ųħc瘖 + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - 8Z + - Qw + - "" + ip: b53FGnAG + - ip: bOu + hostNetwork: true + hostUsers: true + hostname: 7ZGs8 + imagePullSecrets: + - name: I6Na86OnyBNx + - name: "3" + - name: J1RoqWBLo + initContainers: [] + nodeName: GtzrBO + nodeSelector: + XD: c4GG + preemptionPolicy: ËƨÐ襙娕XŤT7躊ȉ]蚾g + priority: 1718744077 + priorityClassName: VG + readinessGates: + - conditionType: A骇ɶȻ1Ǫȟ摦趼R榸) + - conditionType: 3µ鐰zɁ= + resourceClaims: + - name: F + - name: mLOmJqVCjwrxV + restartPolicy: 闂瀴]餵DZQx幼Ȑa|Ⱦ{秴煴揓Ǣ!ǡ + runtimeClassName: 5b4Eh + schedulerName: u + schedulingGates: + - name: OQed6Yr9jyIj + - name: KlVhqpr + - name: 82PM + securityContext: + fsGroup: -4349798517018984400 + fsGroupChangePolicy: Always + runAsGroup: 7312856401095131000 + runAsNonRoot: true + runAsUser: 8704693581475557000 + supplementalGroups: + - -401001079325091900 + sysctls: + - name: n1tf + value: 8u8Qs + serviceAccountName: DHL7nEGLFqio + setHostnameAsFQDN: false + subdomain: Sxdzh + terminationGracePeriodSeconds: -2850524812313792500 + tolerations: + - effect: x裉,嗠ý檼nȓʎ甅p黛 + key: H9 + operator: '}' + tolerationSeconds: 7651644094769316000 + value: gMwcGW5He + - effect: ʫĔmĞ3ʦ瞷鉒紥憹_ª怸ŷ + key: I9bF + operator: 玗ʫ鍦Ĉ锫ȂƔȊ瀅Ǽʚ功ɫU帝圅8 + tolerationSeconds: -8913348716878803000 + value: 7o + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: "" + - name: "1" + - name: zEJeXFitCdV +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Rsep9k-crd-job + namespace: default +-- testdata/case-049.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: tSPxL1Cf1HO9FjR + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: "2" + health: + healthProbeBindAddress: SO + kind: jeQg + leaderElection: + leaderElect: true + resourceName: aZI4XP9tX + metrics: + bindAddress: p0Zfh + webhook: + port: 156 +kind: ConfigMap +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: RxVwZrtkv-default +subjects: +- kind: ServiceAccount + name: tSPxL1Cf1HO9FjR + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: RxVwZrtkv-additional-controllers-default +subjects: +- kind: ServiceAccount + name: tSPxL1Cf1HO9FjR + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: RxVwZrtkv-election-role +subjects: +- kind: ServiceAccount + name: tSPxL1Cf1HO9FjR + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: RxVwZrtkv +subjects: +- kind: ServiceAccount + name: tSPxL1Cf1HO9FjR + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: RxVwZrtkv-additional-controllers +subjects: +- kind: ServiceAccount + name: tSPxL1Cf1HO9FjR + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: DFwU +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv + namespace: default +spec: + replicas: 776075670 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: DFwU + strategy: + rollingUpdate: + maxSurge: 1327175499 + maxUnavailable: 1850944945 + type: ']ɟȲ扢džŀ勩Ć' + template: + metadata: + annotations: + ykKtt: uAAi + creationTimestamp: null + labels: + VKJBbpRutKV64: Tgs4iTZGVDYkK + app.kubernetes.io/instance: operator + app.kubernetes.io/name: DFwU + spec: + activeDeadlineSeconds: 2278089967418417700 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: 15Gh + operator: 馬磖țd;Őjá爥茄OȮ{ʩ"壛9} + - key: iuiH + operator: 揩;靱ȝÌ鐛*ŢT唘ä哸 Ƽ7-sr + values: + - Q3h + - key: 8RWhACd + operator: 皧f鋴W闔疷鑢賑 + values: + - xwE9wrooJYT + matchFields: + - key: HqfBvM + operator: Īĩ^ʮɋ湒Ću淹ķ窿ď襪ŕ堗,鎵ʌ + values: + - DWD + weight: 932855426 + - preference: + matchExpressions: + - key: U56 + operator: "" + - key: fF9Y1wJawGXfb + operator: 鮩O2誠Ƨþ髂/誮n鵁Ȕ + values: + - T7sK + matchFields: + - key: PQg + operator: 衟斊趝#ȚBĢj%朷Ơ=鷠呜 + values: + - 5a2U + - vYc4 + - 0E + weight: -102914742 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchFields: + - key: Yu + operator: ƺ + values: + - "2" + - bwMjX + - key: Y6Hr + operator: 陯ĸȏǵɦñ橧Ħz骩腦Ȋ + values: + - e0lj + - key: uHQb + operator: ɶȽƪ患ʬ传魁訋=¹Ȁ弈"ɒ箈&ɂ麨 + values: + - Nuz + - DGPIO6kZuK + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: pVXB + operator: /虣鯮F毥w姪;ʟ競tI液 + - key: AI + operator: e + values: + - 13FGcVyxCH2G + matchLabels: + UrhEPuS: a + kueXjOKN: xC + tjIlJv: v3PQ1 + namespaceSelector: + matchLabels: + OvNA57r8: u8V8CwS + PMN5sFJ: Huuo9FR3p + xuRslX: lr + namespaces: + - Z + topologyKey: k9Dr + weight: -677997772 + - podAffinityTerm: + labelSelector: + matchLabels: + KcurMxaxV: gQvm + matchLabelKeys: + - pEwCyEQF + - l0E + mismatchLabelKeys: + - uOWE + - cSzL + namespaceSelector: + matchExpressions: + - key: 13Hyc4Zk + operator: 幣¢Ƒ弾Öi]ʎŲǺǩNJ糡T + values: + - W22wD + - "" + - key: KnY + operator: Ţ癖鍽Ȏ飖^Ɂ¾_蕈EŁƋ頡穌ɼ鑎 + values: + - FFcIpld8Do + matchLabels: + 2CSk: FcWN + OKc: I0 + vIe9lCH: 1B + topologyKey: 58qkCgr + weight: -1031576769 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + V8K: nIFBNGQ5 + Wqxq: i8 + llpoo8xNIVV: GDA1 + matchLabelKeys: + - p + - 950XH + mismatchLabelKeys: + - 4NrzjIs + namespaceSelector: + matchExpressions: + - key: J + operator: DZ_ĸɃď餃r功2ɓƜČ + values: + - PYzIeoB + - 59c0baFR0De + matchLabels: + 77I: 8pwL + namespaces: + - nza + topologyKey: NCaF7r + weight: -1497610672 + - podAffinityTerm: + labelSelector: {} + matchLabelKeys: + - YITmAQC + - 8FiOp + mismatchLabelKeys: + - GVXcM + namespaceSelector: + matchExpressions: + - key: kte + operator: iW釢 + values: + - JzubwaL8 + matchLabels: + MMIBy: SSDsSZGDXhV + namespaces: + - sEm3G + - oq + topologyKey: q + weight: 77365845 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: g85 + operator: 龍 + values: + - dLpu0ZWapA5tU + - oPqTHoY + - 4vtv + - key: s + operator: 皟ȆBC琥.*悏ĉZŶ + values: + - "" + - key: DR9qdEc + operator: Y鯿CÌ#_抛ȹL + values: + - VWQ + - bVtuGpDd + - 3t + matchLabelKeys: + - MzvfR + - SwlZSvD + - y266T0HBMRNLUh + namespaceSelector: + matchExpressions: + - key: 0qmXCQZQnl + operator: 9鼽Ġ+ɰ*贷ɀ念 + values: + - OHp3H + - 3g + - key: xdJrO + operator: ɥA匨 :k + values: + - 0168yqU + - EWVbM + - 6A8 + - key: "" + operator: 摕 + values: + - X1KB + - jrcowx + matchLabels: + I7R1DVHubys: "" + tNG: "" + namespaces: + - fcxim + topologyKey: X9 + weight: -1794490661 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + AYvNb1: J5 + THtfyqu0Z: gZsbQMMYY + tOe: L2q3mNmm8 + matchLabelKeys: + - BOCkn + - Dpxw + - 4Oh + mismatchLabelKeys: + - OBkJICrllYH + - XwIo + - T1M5AHcvI + namespaceSelector: + matchExpressions: + - key: uKOg00q + operator: ƮƯ膨枚vƬBe,ǫ憿[ħ埒ȗ9 + values: + - yjuBCK2 + - puA5JnDm + - pb + matchLabels: + "": rJ5Yr + namespaces: + - YAlxsI + - "" + topologyKey: X + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=bVWCG + - --configurator-tag=CyopzJ + - --configurator-base-image=U4heCUyQYeE + - 6ArBn + - zve + command: + - /manager + env: [] + image: U4heCUyQYeE:CyopzJ + imagePullPolicy: Always + livenessProbe: + failureThreshold: 438 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 607 + periodSeconds: 231 + successThreshold: 254 + terminationGracePeriodSeconds: 69 + timeoutSeconds: 371 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 308 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 158 + periodSeconds: 674 + successThreshold: 957 + terminationGracePeriodSeconds: 647 + timeoutSeconds: 773 + resources: + limits: + cpu: "70" + memory: "847" + requests: + cpu: "337" + memory: "364" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + options: + - name: HHHVB5Q + value: "8" + - name: NEYIw9Ky + value: cq4m + - name: hbRxYS5v0h + value: Nb + dnsPolicy: a粽_Nǽ$2爿圷ó曌0 + ephemeralContainers: null + hostAliases: + - hostnames: + - "6" + - 2KGJ + ip: YiykWtfuD + - hostnames: + - Tu2d82bz + - UNm2WGvd + ip: pedLX + hostNetwork: true + hostUsers: false + hostname: LU + imagePullSecrets: + - name: tzmKb2w + initContainers: [] + nodeName: hg + nodeSelector: + "": K8WFYsf5a + 1GlN3Q7: vY4abw + "8": 41bR + iV1Tv4: tA + rivMfqV: BR + preemptionPolicy: =%ɵV糘砊ʤ$Ɵ撇Ǽpį柘 + priority: 197745233 + priorityClassName: fnjH + readinessGates: + - conditionType: Vǰ + restartPolicy: ʟs烵 + runtimeClassName: OLc + schedulerName: AleqDOyBh + schedulingGates: + - name: FIBu + securityContext: + fsGroup: -1038967961494618500 + fsGroupChangePolicy: Always + runAsGroup: 7947011129488217000 + runAsNonRoot: false + runAsUser: 478576484240270200 + supplementalGroups: + - 587654813381564000 + - 2391151309579290000 + serviceAccountName: "n" + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: 8pUyWb + terminationGracePeriodSeconds: -1755150528265436400 + tolerations: + - effect: r + key: Dqs + operator: 澚毸仪伍旍ʣ匭隃Nj龝k吓. + tolerationSeconds: 6842016513609661000 + value: mpVsu + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: 9g2 + operator: 5*奁{LJe娈ġɦʕ鐠©~ġƣd蒫 + values: + - Q + - yOrKqPET + - wjd + matchLabels: + 4lQ8AdhbM: v3aT + "39": LN2piV + IFs: 9jy + maxSkew: -2007469080 + minDomains: -1864064833 + nodeAffinityPolicy: '''聶Ŏ2' + nodeTaintsPolicy: 摓塨yĨC短 + topologyKey: VfR74HH + whenUnsatisfiable: Ȕ + - labelSelector: + matchExpressions: + - key: RAsNLC + operator: ļ荖·ʖ + values: + - oEptsf7n + matchLabels: + U: kMS + padcK: ja2sd + maxSkew: 1886823748 + minDomains: 486819042 + nodeAffinityPolicy: PLʈ\ + nodeTaintsPolicy: ãɑȇ]Ȭ + topologyKey: oTK + whenUnsatisfiable: 83š"萃筒蝌ǬŚ殿詜þ脈 + - labelSelector: + matchExpressions: + - key: Fx78b + operator: 瑟齆Ő>ĔǺ框ʋL*ij焲4啺 + values: + - LbgOed + - Y1UvH + - yMoKiUsh + matchLabels: + Yrmm31: 1ey3BdW + cljX: jTs8glnxr8 + matchLabelKeys: + - hH + maxSkew: -439943541 + minDomains: -937218896 + nodeAffinityPolicy: "" + nodeTaintsPolicy: -颼Ɣ总b%*+9»ƣ焗Ǎ + topologyKey: ws2m1 + whenUnsatisfiable: ȇ麄巬ʘ8袹"Û繋ȭCĿ錍ʤȢȖ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: A8 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + Tett6RPd3GK0SY: SS0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: RxVwZrtkv-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DFwU + app.kubernetes.io/version: v25.1.4 + fuVZ: gcPCqrc0l + helm.sh/chart: operator-25.1.4 + name: tSPxL1Cf1HO9FjR-crd-job + namespace: default +-- testdata/case-050.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: RAyK-default +subjects: +- kind: ServiceAccount + name: RAyK + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: RAyK-election-role +subjects: +- kind: ServiceAccount + name: RAyK + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: RAyK +subjects: +- kind: ServiceAccount + name: RAyK + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: RAyK-rpk-bundle +subjects: +- kind: ServiceAccount + name: RAyK + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 6iZG +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 6iZG-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 6iZG +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 6iZG + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 6iZG + spec: + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=WHh + - --configurator-base-image=AzmZ3dTJs + command: + - /manager + env: [] + image: AzmZ3dTJs:WHh + imagePullPolicy: Always + livenessProbe: + failureThreshold: 954 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 209 + periodSeconds: 143 + successThreshold: 577 + terminationGracePeriodSeconds: 639 + timeoutSeconds: 240 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 573 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 467 + periodSeconds: 570 + successThreshold: 39 + terminationGracePeriodSeconds: 871 + timeoutSeconds: 484 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: RAyK + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ɘ訇 + key: zZq + operator: '!鈸ɍĠ隦酋ʏá訊u' + value: SVKC + - effect: ']峖ũř/àɔ撶JƣʯǤ6E筒6ȇi' + key: 5UvyO3 + operator: uHȧ姍鶉 + value: Ej8o78T + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +<<<<<<< HEAD + - name: cert + secret: + defaultMode: 420 + secretName: "" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - 6iZG-webhook-service.default.svc + - 6iZG-webhook-service.default.svc.eQX8VRA0Q + issuerRef: + kind: Issuer + name: RAyK-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: "" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: RAyK-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 6iZG-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: RAyK-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 6iZG-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: +<<<<<<< HEAD + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6iZG + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: RAyK-crd-job + namespace: default +-- testdata/case-051.yaml.golden -- +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + B: grOgtF + Pr: RBVP + QVzkdX7Y1I2hjVAXY: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6gRngW4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-6gRngW4-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + B: grOgtF + Pr: RBVP + QVzkdX7Y1I2hjVAXY: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6gRngW4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-6gRngW4-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + B: grOgtF + Pr: RBVP + QVzkdX7Y1I2hjVAXY: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6gRngW4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-6gRngW4-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-6gRngW4-migration-job-default +subjects: +- kind: ServiceAccount + name: operator-6gRngW4-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + B: grOgtF + Pr: RBVP + QVzkdX7Y1I2hjVAXY: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 6gRngW4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-6gRngW4-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 6gRngW4 + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "261" + memory: "842" + requests: + cpu: "496" + memory: "275" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-6gRngW4-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 儥牍漧Șȣȧƌ + key: cOil + operator: n.棢$Ɖd玗ɺƟ抇挳¡ǔkƋň + value: qcjQ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-012.yaml.golden -- +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tyx5W-default +subjects: +- kind: ServiceAccount + name: tyx5W + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tyx5W-election-role +subjects: +- kind: ServiceAccount + name: tyx5W + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tyx5W +subjects: +- kind: ServiceAccount + name: tyx5W + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tyx5W-rpk-bundle +subjects: +- kind: ServiceAccount + name: tyx5W + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: hsmvzpSm +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: hsmvzpSm-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: hsmvzpSm +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: hsmvzpSm + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: hsmvzpSm + spec: + activeDeadlineSeconds: -3568968370034163000 + affinity: + podAntiAffinity: {} + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=K + - --configurator-base-image=mM7lGw9fmKx + - l4dHBtic0cX0cs7 + - "" + command: + - /manager + env: [] + image: mM7lGw9fmKx:K + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 654 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 266 + periodSeconds: 67 + successThreshold: 587 + terminationGracePeriodSeconds: 834 + timeoutSeconds: 543 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 226 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 189 + periodSeconds: 648 + successThreshold: 100 + terminationGracePeriodSeconds: 90 + timeoutSeconds: 281 + resources: + limits: + cpu: "642" + memory: "573" + requests: + cpu: "351" + memory: "829" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsPolicy: xť]\ĕȨ宂鄈 + ephemeralContainers: null + hostIPC: true + hostname: thPFaybO + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + preemptionPolicy: (ƸĠȸx垩骳 + priorityClassName: hYrZm + readinessGates: + - conditionType: 徱窭Nj + - conditionType: "" + restartPolicy: 咸¤沭騁xp;蔖菞Ĩʣ + runtimeClassName: 94jSzI68RgM + schedulerName: DwYnpi9khB9k + securityContext: + runAsUser: 65532 + serviceAccountName: c9k + subdomain: 38i + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +<<<<<<< HEAD + - name: cert + secret: + defaultMode: 420 + secretName: 2ecI +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - hsmvzpSm-webhook-service.default.svc + - hsmvzpSm-webhook-service.default.svc.S + issuerRef: + kind: Issuer + name: tyx5W-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: 2ecI +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: tyx5W-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: hsmvzpSm-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: tyx5W-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: hsmvzpSm-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: +<<<<<<< HEAD + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: tyx5W-crd-job + namespace: default +-- testdata/case-052.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fEL2 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-config +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 9lb-migration-job +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: +<<<<<<< HEAD + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-default +rules: +======= + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 9lb-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: +<<<<<<< HEAD + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events +<<<<<<< HEAD + - secrets + - serviceaccounts + - services + verbs: + - create +======= + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: +<<<<<<< HEAD + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: +======= + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: +<<<<<<< HEAD + - pods/finalizers + - pods/status + verbs: + - patch + - update +======= + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +<<<<<<< HEAD + - cert-manager.io + resources: + - certificates + - clusterissuers +======= + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +<<<<<<< HEAD +======= + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles +<<<<<<< HEAD + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles +======= + - rolebindings + - roles +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +<<<<<<< HEAD +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: +<<<<<<< HEAD + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 89IgS-default +subjects: +- kind: ServiceAccount + name: fEL2 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 89IgS-election-role +subjects: +- kind: ServiceAccount + name: fEL2 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 89IgS +subjects: +- kind: ServiceAccount + name: fEL2 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 89IgS-rpk-bundle +subjects: +- kind: ServiceAccount + name: fEL2 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: njC0cLDExDA +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: njC0cLDExDA-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: njC0cLDExDA +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: njC0cLDExDA + strategy: + type: RollingUpdate + template: + metadata: + annotations: + "": 82Xww0 + 2J1XQz: 9Ke + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: njC0cLDExDA + spec: + activeDeadlineSeconds: 7346256592642930000 + affinity: + podAffinity: {} + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 840 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 219 + periodSeconds: 674 + successThreshold: 446 + terminationGracePeriodSeconds: 494 + timeoutSeconds: 935 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 498 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 16 + periodSeconds: 432 + successThreshold: 888 + terminationGracePeriodSeconds: 82 + timeoutSeconds: 233 + resources: {} +======= + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 9lb-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 9lb-migration-job-default +subjects: +- kind: ServiceAccount + name: 9lb-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: au3C7-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "192" + memory: "632" + requests: + cpu: "955" + memory: "186" +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true +<<<<<<< HEAD + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: {} + dnsPolicy: 刲ʑ|ʖl狉J + enableServiceLinks: true + ephemeralContainers: null + hostname: 0R1Ydin + imagePullSecrets: [] + initContainers: [] + nodeName: DeOJp + nodeSelector: {} + priority: 1281798407 + priorityClassName: Q3Tz + readinessGates: + - conditionType: ~3ź黙}忮ǒȰyÛǕ + - conditionType: 猭WɏƎŊ°粅Z銘椢拘N0Ǜ2ǚĺ + - conditionType: 阱睰(ʩ + restartPolicy: Ƙ莱;ɐ偂手墾GĜF憟磒ƶ埖嘫ē藕ç% + runtimeClassName: CcMVUvC + schedulerName: Fext4lbhp2RbU + securityContext: + fsGroupChangePolicy: Always + runAsGroup: -3142309644442217000 + runAsUser: 3888375852294945000 + serviceAccountName: Xz0J + shareProcessNamespace: true + subdomain: Y0JYo +======= + imagePullSecrets: [] + nodeSelector: + d6kQUb: bEX + restartPolicy: OnFailure + serviceAccountName: 9lb-migration-job +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +<<<<<<< HEAD + - name: cert + secret: + defaultMode: 420 + secretName: "5" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - njC0cLDExDA-webhook-service.default.svc + - njC0cLDExDA-webhook-service.default.svc.mED + issuerRef: + kind: Issuer + name: 89IgS-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: "5" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 89IgS-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: 89IgS-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: njC0cLDExDA-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: 89IgS-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: njC0cLDExDA-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fEL2-crd-job + namespace: default +-- testdata/case-053.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0 + namespace: default +======= +-- testdata/case-013.yaml.golden -- +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: +<<<<<<< HEAD + - redpanda.vectorized.io +======= + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + 1jQ9Wuut: FnhwzZlPE + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: M + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: w4N-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: w4N-default +subjects: +- kind: ServiceAccount + name: wZ2 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + 1jQ9Wuut: FnhwzZlPE + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: M + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: w4N-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: w4N-additional-controllers-default +subjects: +- kind: ServiceAccount + name: wZ2 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + 1jQ9Wuut: FnhwzZlPE + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: M + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: w4N-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: M +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + 1jQ9Wuut: FnhwzZlPE + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: M + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: w4N + namespace: default +spec: + replicas: 1804064464 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: M + strategy: + type: 阖7G喙驲揇śȏ_駌WOǭpX.s! + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: M + spec: + automountServiceAccountToken: false + containers: + - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=false + - --health-probe-bind-address=:8081 + - --leader-elect + - --log-level=BukP + - --metrics-bind-address=:8443 + - --webhook-enabled=false + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 902 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 995 + periodSeconds: 210 + successThreshold: 209 + terminationGracePeriodSeconds: 49 + timeoutSeconds: 250 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 230 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 814 + periodSeconds: 232 + successThreshold: 752 + terminationGracePeriodSeconds: 42 + timeoutSeconds: 212 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: wZ2 + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ~bī呥eǫ~ǔü擡Ʒ韔撝Ƙ搩Ǚ葼 + key: e + operator: 鎺zɅÑ脈ŽǰÀG孆胙ǝr + tolerationSeconds: -3699412277039201300 + value: BD4K51e + - effect: YȘŝÍ]n業Ǜ:荽虊 K + key: zh8T5sZz + operator: ȜOÝș鐓rçIJ駆O + tolerationSeconds: -5824547789260454000 + value: 7y3 + - effect: 鴈 + key: Ot + operator: '|G#宆疶ȭǭK' + value: 1D3v + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: M + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wZ2-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + 1jQ9Wuut: FnhwzZlPE + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: M + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wZ2-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + 1jQ9Wuut: FnhwzZlPE + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: M + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wZ2-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: wZ2-migration-job-default +subjects: +- kind: ServiceAccount + name: wZ2-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: M + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: w4N-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: M + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: wZ2-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ~bī呥eǫ~ǔü擡Ʒ韔撝Ƙ搩Ǚ葼 + key: e + operator: 鎺zɅÑ脈ŽǰÀG孆胙ǝr + tolerationSeconds: -3699412277039201300 + value: BD4K51e + - effect: YȘŝÍ]n業Ǜ:荽虊 K + key: zh8T5sZz + operator: ȜOÝș鐓rçIJ駆O + tolerationSeconds: -5824547789260454000 + value: 7y3 + - effect: 鴈 + key: Ot + operator: '|G#宆疶ȭǭK' + value: 1D3v + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-014.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: wDZRv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EW2WAAJK + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 0p4ZtWL8U + health: + healthProbeBindAddress: aP + kind: 89XA + leaderElection: + leaderElect: true + resourceName: BVak + metrics: + bindAddress: MrpWCB9He + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: wDZRv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EW2WAAJK-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: wDZRv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EW2WAAJK-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: wDZRv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EW2WAAJK-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: fRjXK1u0-default +subjects: +- kind: ServiceAccount + name: fRjXK1u0 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0 + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: fRjXK1u0-election-role +subjects: +- kind: ServiceAccount + name: fRjXK1u0 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0 + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: fRjXK1u0 +subjects: +- kind: ServiceAccount + name: fRjXK1u0 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: fRjXK1u0-rpk-bundle +subjects: +- kind: ServiceAccount + name: fRjXK1u0 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator +<<<<<<< HEAD + app.kubernetes.io/name: Re +======= + app.kubernetes.io/name: wDZRv +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: wDZRv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EW2WAAJK + namespace: default +spec: + replicas: 1400548450 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: wDZRv + strategy: + type: Ǯʕ亀巰筴患Gxm鷻 + template: + metadata: + annotations: {} + labels: + EwdnX: 8pxa + app.kubernetes.io/instance: operator + app.kubernetes.io/name: wDZRv + bkBiNueGnkH: Y9XD + spec: + automountServiceAccountToken: false + containers: + - args: + - --configurator-base-image=YVfoVe + - --configurator-tag=wqmCFiuJSq + - --enable-console=true + - --enable-vectorized-controllers=false + - --health-probe-bind-address=:8081 + - --leader-elect + - --log-level=o35bJ + - --metrics-bind-address=:8443 + - --webhook-enabled=false + command: + - /manager + env: [] + image: YVfoVe:wqmCFiuJSq + imagePullPolicy: Never + livenessProbe: + failureThreshold: 152 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 563 + periodSeconds: 399 + successThreshold: 360 + terminationGracePeriodSeconds: 746 + timeoutSeconds: 32 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 359 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 623 + periodSeconds: 24 + successThreshold: 741 + terminationGracePeriodSeconds: 180 + timeoutSeconds: 664 + resources: + limits: + cpu: "258" + memory: "952" + requests: + cpu: "701" + memory: "894" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: EW2WAAJK + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 琰棦樯eĂ鄔ŸƘȹǫȬ頻'd巪铀*}胵 + key: j5LhW + operator: 裕¨5Qćd0郳Ƨ)蹥J雃)顆< + tolerationSeconds: 4980396607279929000 + value: 8pHuoGBG + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: wDZRv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EW2WAAJK-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: wDZRv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EW2WAAJK-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: wDZRv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EW2WAAJK-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: EW2WAAJK-migration-job-default +subjects: +- kind: ServiceAccount + name: EW2WAAJK-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: wDZRv + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: EW2WAAJK-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + EwdnX: 8pxa + app.kubernetes.io/instance: operator + app.kubernetes.io/name: wDZRv + bkBiNueGnkH: Y9XD + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: YVfoVe:wqmCFiuJSq + imagePullPolicy: Never + name: migration + resources: + limits: + cpu: "258" + memory: "952" + requests: + cpu: "701" + memory: "894" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: EW2WAAJK-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 琰棦樯eĂ鄔ŸƘȹǫȬ頻'd巪铀*}胵 + key: j5LhW + operator: 裕¨5Qćd0郳Ƨ)蹥J雃)顆< + tolerationSeconds: 4980396607279929000 + value: 8pHuoGBG + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-015.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: U8u + health: + healthProbeBindAddress: QEi + kind: aSN1eb + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 489 +kind: ConfigMap +metadata: + annotations: + "7": bfdIdwhhRM + labels: + "": PRrvt + CaaxFeQ7: wI3 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: vbY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tS9k-config + namespace: default +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm +<<<<<<< HEAD + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Re-webhook-service +======= + app.kubernetes.io/name: vbY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tS9k-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: vbY +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + "7": bfdIdwhhRM + labels: + "": PRrvt + CaaxFeQ7: wI3 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: vbY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tS9k + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: vbY + strategy: + rollingUpdate: + maxSurge: 2079969370 + maxUnavailable: 552565595 + type: 使隣 + template: + metadata: + annotations: + 55C: a5xn + g: dyv + veuP5RONlo: Icalq + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: vbY + spec: + activeDeadlineSeconds: -7072150689081682000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: 6JtIAfE + operator: ',p66莀ěǝU幺/' + - key: GMGwWf + operator: ?)ʨ趛+Yź(+ + - key: RQQ9 + operator: 鏚G+#杆WP2韃 + values: + - oy + - wHH3DLWY + - 8g9 + matchFields: + - key: ApWMHuH + operator: "" + - key: DH + operator: 犙閹Ú + values: + - "" + - AOGXVc + - a5ncx + weight: -255264080 + - preference: + matchFields: + - key: J + operator: 栢纮悞Ěi5ɄIʇv~ + - key: n4zKT + operator: 9吉乭w瑥`时ɣʨkID滏Ŭ1ljg + - key: hoe3 + operator: Ɣȱ%鶫寶¼ǜƽ«[ā)屓ŽŎ刴雿Ƿ6 + values: + - P2 + - 1I2 + - aY + weight: -641162458 + - preference: + matchExpressions: + - key: "" + operator: 壈(3 + - key: 6uaw + operator: ;镠霵翛Ȃ¡ + weight: 1741138028 + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - mismatchLabelKeys: + - 0T1OZLr + namespaces: + - kWA + - BDHVT + topologyKey: MDI + automountServiceAccountToken: false + containers: + - args: + - --configurator-base-image=5ZJUE + - --configurator-tag=25V2E90p + - --enable-console=true + - --enable-vectorized-controllers=false + - --health-probe-bind-address=:8081 + - --leader-elect + - --log-level=4DBZ + - --metrics-bind-address=:8443 + - --webhook-enabled=false + command: + - /manager + env: [] + image: 5ZJUE:25V2E90p + imagePullPolicy: Always + livenessProbe: + failureThreshold: 814 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 153 + periodSeconds: 243 + successThreshold: 139 + terminationGracePeriodSeconds: 821 + timeoutSeconds: 959 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 790 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 625 + periodSeconds: 832 + successThreshold: 547 + terminationGracePeriodSeconds: 188 + timeoutSeconds: 676 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsPolicy: 寛ƺ蘓ģęɤÌ鶌綢d颼ȅ巪侰KğOh逤 + ephemeralContainers: null + hostIPC: true + hostNetwork: true + hostPID: true + hostUsers: false + hostname: sMQ + imagePullSecrets: + - name: ieH + - name: 5I + initContainers: [] + nodeName: JWq + nodeSelector: {} + preemptionPolicy: ƈ}µ倌{Ŭ*Nke舖豺矣Ąʣ添p净ļ + priority: -309536032 + priorityClassName: Jz0KmHIfn + restartPolicy: '"鄿濢ʪ俫' + runtimeClassName: fHil + schedulerName: g + schedulingGates: + - name: drORF + securityContext: + runAsUser: 65532 + serviceAccountName: xs6eo + setHostnameAsFQDN: false + subdomain: sJARd + terminationGracePeriodSeconds: 10 + tolerations: + - key: OKcPLmPJ + operator: Ù承Ɇ\Tʆ陖 + value: qU4qmqefG1D + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: Dy +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + SmSBK2DBaK: fvNoH + YNhbez8W: PZbxATG3eA + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + mo: Dzyax + labels: + "": PRrvt + CaaxFeQ7: wI3 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: vbY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 9w-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + "": PRrvt + CaaxFeQ7: wI3 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: vbY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tS9k-migration + namespace: default +spec: + template: + metadata: + annotations: + g: dyv + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: vbY + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: 5ZJUE:25V2E90p + imagePullPolicy: Always + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: ieH + - name: 5I + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: 9w-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 灤 + key: P + operator: 龽锰胦gk缹含V1o@3ɿșƽÀ + value: skb0W + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-016.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: IN0QPF4i + health: + healthProbeBindAddress: rqPe4Mqn + kind: 8oMs + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: YKWWF-default +subjects: +- kind: ServiceAccount + name: YKWWF + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: YKWWF-additional-controllers-default +subjects: +- kind: ServiceAccount + name: YKWWF + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: uRLJ1j +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: uRLJ1j-webhook-service +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Re +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0 + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Re + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Re + spec: + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 957 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 615 + periodSeconds: 728 + successThreshold: 46 + terminationGracePeriodSeconds: 882 + timeoutSeconds: 321 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 162 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 221 + periodSeconds: 239 + successThreshold: 438 + terminationGracePeriodSeconds: 290 + timeoutSeconds: 121 + resources: + limits: + cpu: "243" + memory: "99" + requests: + cpu: "91" + memory: "106" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: fRjXK1u0 + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: ktQ0dZ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - Re-webhook-service.default.svc + - Re-webhook-service.default.svc.I + issuerRef: + kind: Issuer + name: fRjXK1u0-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: ktQ0dZ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + aG4: btgx7ZmcV + gwBKGQjyw: XzUFAE + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: fRjXK1u0-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Re-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: fRjXK1u0-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Re-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Re + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fRjXK1u0-crd-job + namespace: default +-- testdata/case-054.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 2jUS-default +subjects: +- kind: ServiceAccount + name: 2jUS + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 2jUS-election-role +subjects: +- kind: ServiceAccount + name: 2jUS + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 2jUS +subjects: +- kind: ServiceAccount + name: 2jUS + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 2jUS-rpk-bundle +subjects: +- kind: ServiceAccount + name: 2jUS + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: eMNuQ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: eMNuQ-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: eMNuQ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: eMNuQ + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: eMNuQ + spec: + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=NnFVx + - --configurator-base-image=zCQ + command: + - /manager + env: [] + image: zCQ:NnFVx + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 332 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 423 + periodSeconds: 374 + successThreshold: 76 + terminationGracePeriodSeconds: 975 + timeoutSeconds: 736 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 220 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 469 + successThreshold: 7 + terminationGracePeriodSeconds: 703 + timeoutSeconds: 671 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + ephemeralContainers: null + imagePullSecrets: + - name: eNCbsc + - name: JNdAyNz + - name: 5Q3VQMDN + initContainers: [] + nodeSelector: + 44yymqi2: eNsx + securityContext: + runAsUser: 65532 + serviceAccountName: 2jUS + terminationGracePeriodSeconds: 10 + tolerations: + - effect: í瑓Ū + key: R8tjx + operator: ħƁ粭贘ɂ幃í瑓<Œpʧňʧ5秷"Ƨ/ + tolerationSeconds: 3264495343725739500 + value: d89px + - effect: 痭\i + key: FtLH68 + operator: '%' + tolerationSeconds: 4269468755441473000 + value: ygpVX + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: wA +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - eMNuQ-webhook-service.default.svc + - eMNuQ-webhook-service.default.svc.LW + issuerRef: + kind: Issuer + name: 2jUS-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: wA +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + ybiJQZ: Ga + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: 2jUS-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: eMNuQ-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: 2jUS-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: eMNuQ-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + 1c0jr: ImaKzYy + afd: Q9L + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: eMNuQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2jUS-crd-job + namespace: default +-- testdata/case-055.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: WM-default +subjects: +- kind: ServiceAccount + name: WM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: WM-election-role +subjects: +- kind: ServiceAccount + name: WM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: WM +subjects: +- kind: ServiceAccount + name: WM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: WM-rpk-bundle +subjects: +- kind: ServiceAccount + name: WM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: hJkIJY5Y +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: hJkIJY5Y-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: hJkIJY5Y +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM + namespace: default +spec: + replicas: 910858327 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: hJkIJY5Y + strategy: + type: 耥顅öƲ=MŰ5;ǗAȵɴı|Ǯ + template: + metadata: + annotations: + HA: itGE + J: EB + qA1Kj3: Rty + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: hJkIJY5Y + spec: + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - D4rks + - p7p + - 1kSb + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 214 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 56 + periodSeconds: 467 + successThreshold: 245 + terminationGracePeriodSeconds: 189 + timeoutSeconds: 515 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 268 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 427 + periodSeconds: 720 + successThreshold: 277 + terminationGracePeriodSeconds: 221 + timeoutSeconds: 87 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: + 7gLg: w + p9vPF2WR: "" + securityContext: + runAsUser: 65532 + serviceAccountName: WM + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: OYJbb +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - hJkIJY5Y-webhook-service.default.svc + - hJkIJY5Y-webhook-service.default.svc.wRGH + issuerRef: + kind: Issuer + name: WM-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: OYJbb +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: WM-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: hJkIJY5Y-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: WM-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: hJkIJY5Y-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + kP0Mu: tnINl + name: WM-crd-job + namespace: default +-- testdata/case-056.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: X2us + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-X2us + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: EbwFoQ3p + health: + healthProbeBindAddress: d6q + kind: 7r + leaderElection: + leaderElect: true + resourceName: FEqz5a3Cku + metrics: + bindAddress: LM + webhook: + port: 218 +kind: ConfigMap +metadata: + annotations: + SCGcyFgoJx: Gp6 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: X2us + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-X2us-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + SCGcyFgoJx: Gp6 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: X2us + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-X2us-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: X2us +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + SCGcyFgoJx: Gp6 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: X2us + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X2us-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: X2us +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + SCGcyFgoJx: Gp6 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: X2us + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-X2us + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: X2us + strategy: + type: .éĸ + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + LiMB: JSDH + SSwyvabPaXn: DVXkf + app.kubernetes.io/instance: operator + app.kubernetes.io/name: X2us + oCw: NTKwbx4 + spec: + activeDeadlineSeconds: -5132082406686871000 + affinity: + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + 5dvfw9: mOesiUHmdc + IwMzkyTNvFz4: Wrj7 + mismatchLabelKeys: + - 8gXFN + - TpO + topologyKey: jO5PPSt + weight: 1697436510 + - podAffinityTerm: + mismatchLabelKeys: + - iXxDdowWo + - LWq4t1m + - nFTixP0 + topologyKey: vNKXC1Lh + weight: 1528484004 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: "" + operator: 鴶诬硔Ɓ( + values: + - 5J7usX + - QIY + - key: VxHc1 + operator: 栾pe睹迂Ȓpk1[ƶ¨彊 + mismatchLabelKeys: + - O2cy + - m + namespaceSelector: {} + topologyKey: X + weight: 37722091 + requiredDuringSchedulingIgnoredDuringExecution: + - namespaceSelector: {} + namespaces: + - Hsi1kM56ggat + topologyKey: 169EWQ + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 155 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 922 + periodSeconds: 620 + successThreshold: 571 + terminationGracePeriodSeconds: 873 + timeoutSeconds: 852 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 283 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 642 + periodSeconds: 527 + successThreshold: 958 + terminationGracePeriodSeconds: 117 + timeoutSeconds: 54 + resources: + limits: + cpu: "833" + memory: "805" + requests: + cpu: "954" + memory: "410" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsPolicy: 旃9乚ɸ蓔2嘷! + ephemeralContainers: null + hostPID: true + hostUsers: true + hostname: hEf + imagePullSecrets: [] + initContainers: [] + nodeName: 0CPLJfQO + nodeSelector: {} + priorityClassName: sr + restartPolicy: K蘰綹,鳕 + runtimeClassName: tXvm9TFY + schedulerName: OS1b + schedulingGates: + - name: 1G + - name: R8 + - name: Cpc3yiAApl + securityContext: + fsGroupChangePolicy: OnRootMismatch + runAsNonRoot: false + runAsUser: 65532 + serviceAccountName: 0QSN3Cc + subdomain: 5Ex + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: Hf +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + SCGcyFgoJx: Gp6 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: X2us + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - X2us-webhook-service.default.svc + - X2us-webhook-service.default.svc. + issuerRef: + kind: Issuer + name: operator-X2us-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: Hf +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + SCGcyFgoJx: Gp6 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: X2us + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-X2us-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: operator-X2us-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: X2us-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: operator-X2us-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: X2us-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: X2us + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-X2us-crd-job + namespace: default +-- testdata/case-057.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A + name: n0qMA4h57I5 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: + 7rP00: GPBGHypSmn8lV + FuOQyLeQ: lBFlu10wLN + creationTimestamp: null + labels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A + name: pEvEye-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + 7rP00: GPBGHypSmn8lV + FuOQyLeQ: lBFlu10wLN + creationTimestamp: null + labels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A + name: pEvEye-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: BdJ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + 7rP00: GPBGHypSmn8lV + FuOQyLeQ: lBFlu10wLN + creationTimestamp: null + labels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A + name: BdJ-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: BdJ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + 7rP00: GPBGHypSmn8lV + FuOQyLeQ: lBFlu10wLN + creationTimestamp: null + labels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A + name: pEvEye + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: BdJ + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + Jja2z: AMUJ2Hk + app.kubernetes.io/instance: operator + app.kubernetes.io/name: BdJ + nn5: SwX + spec: + affinity: + nodeAffinity: {} + podAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - topologyKey: zAe4N + podAntiAffinity: {} + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=Jug9nLx + - --configurator-base-image=ma3F + - JOd + - JV6w + command: + - /manager + env: [] + image: ma3F:Jug9nLx + imagePullPolicy: Never + livenessProbe: + failureThreshold: 271 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 332 + periodSeconds: 695 + successThreshold: 473 + terminationGracePeriodSeconds: 834 + timeoutSeconds: 882 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 706 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 868 + periodSeconds: 235 + successThreshold: 64 + terminationGracePeriodSeconds: 683 + timeoutSeconds: 403 + resources: + limits: + cpu: "932" + memory: "329" + requests: + cpu: "392" + memory: "833" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: {} + dnsPolicy: ±訇邓/釉Ï捓ʐ + ephemeralContainers: null + hostAliases: + - ip: MJS3n + - hostnames: + - F6D8 + - e5ENx6fE + - m875H + ip: hOaK3Z7 + - ip: hfHpqW + hostIPC: true + hostUsers: true + hostname: NfgrE + imagePullSecrets: + - name: WWFoP + - name: WsYnXzso01 + - name: IX6v + initContainers: [] + nodeName: t + nodeSelector: + wfiRdUFg: bR3B + priority: 651429941 + priorityClassName: 1hFL + restartPolicy: ȭZ*藗ćɢ晨+ʆ;櫾ċZȡȷ媔Þ桾 + runtimeClassName: nIMeT + schedulerName: d6EME + schedulingGates: + - name: 5kc2 + securityContext: + fsGroup: 2635739868325116400 + fsGroupChangePolicy: OnRootMismatch + runAsNonRoot: false + runAsUser: -7079131959713203000 + sysctls: + - name: vecwhX3pb + value: oP2z67g + serviceAccountName: xRu + subdomain: tFiX + terminationGracePeriodSeconds: 7833815452667532000 + tolerations: [] + topologySpreadConstraints: + - labelSelector: {} + matchLabelKeys: + - AflVlO484I + - wl2BxC + maxSkew: 1303641541 + minDomains: 507684309 + nodeAffinityPolicy: GȆƚ-豏ɾɃ誔wʫ赜型ɂ + topologyKey: QC + whenUnsatisfiable: Č楨ũ忶獓ɮ+襊埂-ě + - maxSkew: -255504187 + minDomains: 1629532814 + nodeAffinityPolicy: 抹Ɯʫ;屯k­c应 + topologyKey: He + whenUnsatisfiable: õS<]²玤闂刉:ǚ婲jʝĭ緉 + - matchLabelKeys: + - w3IYvD + - jgMvIuL4 + - LEWtvIa + maxSkew: 1344485537 + minDomains: 1746487916 + nodeAffinityPolicy: ħĻf + topologyKey: 6pT + whenUnsatisfiable: V療争 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: M8yk +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + 7rP00: GPBGHypSmn8lV + FuOQyLeQ: lBFlu10wLN + creationTimestamp: null + labels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - BdJ-webhook-service.default.svc + - BdJ-webhook-service.default.svc.zd + issuerRef: + kind: Issuer + name: pEvEye-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: M8yk +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + 7rP00: GPBGHypSmn8lV + FuOQyLeQ: lBFlu10wLN + creationTimestamp: null + labels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A + name: pEvEye-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: pEvEye-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: BdJ-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + 7rP00: GPBGHypSmn8lV + FuOQyLeQ: lBFlu10wLN + creationTimestamp: null + labels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A + name: pEvEye-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: pEvEye-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: BdJ-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + GFJWcympe: pAUQva + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: BdJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jE0q9M4zk: 1A + name: n0qMA4h57I5-crd-job + namespace: default +-- testdata/case-058.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2PyZZ8ZNsM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: nLM2irjC-default +subjects: +- kind: ServiceAccount + name: 2PyZZ8ZNsM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: nLM2irjC-election-role +subjects: +- kind: ServiceAccount + name: 2PyZZ8ZNsM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: nLM2irjC +subjects: +- kind: ServiceAccount + name: 2PyZZ8ZNsM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: nLM2irjC-rpk-bundle +subjects: +- kind: ServiceAccount + name: 2PyZZ8ZNsM + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: fgsJm +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: fgsJm-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: fgsJm +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: fgsJm + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + 93Zq: XIlI + app.kubernetes.io/instance: operator + app.kubernetes.io/name: fgsJm + fx3sz6: "38" + spec: + activeDeadlineSeconds: 7810061853687495000 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - {} + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=vnJvYTYU8 + - --configurator-base-image=idWmcYq6IZQH + command: + - /manager + env: [] + image: idWmcYq6IZQH:vnJvYTYU8 + imagePullPolicy: Always + livenessProbe: + failureThreshold: 932 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 423 + periodSeconds: 730 + successThreshold: 714 + terminationGracePeriodSeconds: 936 + timeoutSeconds: 192 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 872 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 101 + periodSeconds: 189 + successThreshold: 63 + terminationGracePeriodSeconds: 758 + timeoutSeconds: 675 + resources: + limits: + cpu: "905" + memory: "563" + requests: + cpu: "163" + memory: "88" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsPolicy: 荧ʇNJ亍/-ʇƬQ{Ǯ/ + ephemeralContainers: null + hostAliases: + - hostnames: + - dSV1wJ + - CC + ip: Gxz + - ip: SrzM + - hostnames: + - 5yiJs + - AOv + ip: m9tJ + hostPID: true + imagePullSecrets: [] + initContainers: [] + nodeName: HkTWCvk + nodeSelector: + oEluSh: TQJ6t8emxOMQg + pX: LGnS + priority: -390065565 + priorityClassName: 6TvoBD + resourceClaims: + - name: tOnffFc3 + - name: Y9poS + restartPolicy: 'x鲡ÜY鄍故:' + runtimeClassName: ty2TXT + schedulerName: JK0BTM + schedulingGates: + - name: RSTS + securityContext: + runAsUser: 65532 + serviceAccountName: fQmYz + subdomain: Qt + terminationGracePeriodSeconds: 9217582102908294000 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: 3y3R +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - fgsJm-webhook-service.default.svc + - fgsJm-webhook-service.default.svc.OWImEb + issuerRef: + kind: Issuer + name: nLM2irjC-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: 3y3R +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nLM2irjC-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: nLM2irjC-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: fgsJm-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: nLM2irjC-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: fgsJm-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: fgsJm + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 2PyZZ8ZNsM-crd-job + namespace: default +-- testdata/case-059.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + F: 2wq + Vcp6O5a1Q: 5Dgl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PiQzKZrHGl + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: l2 + health: + healthProbeBindAddress: pR + kind: P1nZUB + leaderElection: + leaderElect: true + resourceName: qMple + metrics: + bindAddress: 31mM + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: X374QF3AYX-default +subjects: +- kind: ServiceAccount + name: PiQzKZrHGl + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: X374QF3AYX-election-role +subjects: +- kind: ServiceAccount + name: PiQzKZrHGl + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: X374QF3AYX +subjects: +- kind: ServiceAccount + name: PiQzKZrHGl + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: X374QF3AYX-rpk-bundle +subjects: +- kind: ServiceAccount + name: PiQzKZrHGl + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: zUC +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: zUC-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: zUC +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX + namespace: default +spec: + replicas: 738560762 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: zUC + strategy: + rollingUpdate: + maxSurge: 697560028 + maxUnavailable: 946395942 + type: '&+貱0ʬ,Ǐ' + template: + metadata: + annotations: + R: cue4iXwcB + Y4XIpDcNK: g6MHOhm + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: zUC + spec: + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 941 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 378 + periodSeconds: 953 + successThreshold: 95 + terminationGracePeriodSeconds: 100 + timeoutSeconds: 207 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 297 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 644 + periodSeconds: 638 + successThreshold: 951 + terminationGracePeriodSeconds: 932 + timeoutSeconds: 305 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: PiQzKZrHGl + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: Fk +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - zUC-webhook-service.default.svc + - zUC-webhook-service.default.svc.tP3Ji + issuerRef: + kind: Issuer + name: X374QF3AYX-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: Fk +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: X374QF3AYX-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: zUC-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: X374QF3AYX-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: X374QF3AYX-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: zUC-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + F: 2wq + Vcp6O5a1Q: 5Dgl + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zUC + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PiQzKZrHGl-crd-job + namespace: default +-- testdata/case-060.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + z: "1" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Fzbi9OkP + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: Zw5Q6jqaoy + health: + healthProbeBindAddress: qhc + kind: "" + leaderElection: + leaderElect: false + resourceName: TV4wZ7Ut + metrics: + bindAddress: mjhcN + webhook: + port: 257 +kind: ConfigMap +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: G-default +subjects: +- kind: ServiceAccount + name: Fzbi9OkP + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: G-election-role +subjects: +- kind: ServiceAccount + name: Fzbi9OkP + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: G +subjects: +- kind: ServiceAccount + name: Fzbi9OkP + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: G-rpk-bundle +subjects: +- kind: ServiceAccount + name: Fzbi9OkP + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8V1wVzO +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 8V1wVzO-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8V1wVzO +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G + namespace: default +spec: + replicas: -1286924151 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8V1wVzO + strategy: + type: RollingUpdate + template: + metadata: + annotations: + CoIt: Hip0tNLH + SWcPP8duqV: NoCR + "y": gaFmFF + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8V1wVzO + spec: + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: {} + weight: 877903035 + - preference: + matchExpressions: + - key: auHzoPu + operator: 燃qȉ÷鑆 + values: + - 6gr8 + - fX9 + matchFields: + - key: CQw + operator: MçɌ伌磾歗耛 + values: + - dEaa + - key: Ubm + operator: m`橐鬅ʢ盏;Ȃb + - key: 0D + operator: ȖÒǃ剠'Qf佛鸻柹6D钗糯íǩMw2 + weight: 1545337051 + - preference: + matchFields: + - key: P5O1 + operator: \Ƈ焀愌lʠ²¸ + values: + - GjDqqGL0 + - ttgHCT + - JhZ12 + weight: 86425671 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchFields: + - key: Tk + operator: ƹ隞剻ƥ + - key: zwAQ + operator: '#' + - key: wG5QKmp + operator: 凸Ɛ纊 + values: + - uoqs4vJBU + - VmihKE + - SH + - matchFields: + - key: pB8ePm + operator: "" + - key: KVclk6J3u5 + operator: È姪 ÜɤÙ蝱步tī惏 + values: + - pq5L9RO8 + - iE3Onta + - key: "5" + operator: '&e鉧N牧Ȏ迋缴Pȣ^' + values: + - ROrxgrNk9F + - S0 + - gxD8rwSV + - matchExpressions: + - key: cIBa5wm8n + operator: -ʖȾʧ0鯭ȓ + values: + - uLwxSr + - tN2 + - key: ybXwTy + operator: Űs觫¼ȇ + values: + - mkq2L + - FThOx3 + - KvrS + - key: zeEA + operator: d2坍ďɌ%t'錧Ùïzfɉŗ® + values: + - RKcPya + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: "" + operator: Ý霿Þ,a競纁気J]敿ǘ錥/遮ʝ + - key: iIAK + operator: 糎òKj5.(ȍ糁ăB鮷~ + values: + - f9Nl + - TG + - key: o + operator: '*爜ó蜿Ǽpƒņ)Bɶ|oƞ痺B' + mismatchLabelKeys: + - f2PpXqY4S + - j3KnrXbKf + namespaceSelector: + matchExpressions: + - key: EG0uU + operator: 礪x2ʄƶM)RĤ喸粞e燡Ĺ瑏ȔPżO + - key: LryrGH + operator: ' Oʑ' + values: + - NgD + - gF79Udx7 + - znN + namespaces: + - "" + - 91p + topologyKey: "" + weight: 249676732 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: H + operator: 掠HoƦAF + - key: pzj5k + operator: 腐ȟ + values: + - kxS8IJ + - kE + - 7nBj + - key: Ho + operator: ʥyIŽF镼桵57|ƍWďg訜 + matchLabelKeys: + - "5" + - WydLI + namespaceSelector: + matchLabels: + ZrOBwQQX: dnC + topologyKey: AWn + weight: -1363427772 + requiredDuringSchedulingIgnoredDuringExecution: + - matchLabelKeys: + - J4yP + - jRVKfnd + - aLGXXYXtNvS + mismatchLabelKeys: + - FrbUpKod + - c4rUB + - w0drDOwQ8VEV + namespaceSelector: + matchLabels: + d6pDEFDy: KR2bs3 + topologyKey: GLNxA5 + - labelSelector: + matchExpressions: + - key: FwEIsmhFI + operator: 輔ë碉剉 + values: + - yq8M + - VZO9Vg + - Qj3KdAhLCM5 + - key: N5d3lMrBII + operator: '|ǔeR.邈L簋Ā鉥ȹ' + matchLabels: + "": I7fhPK + 25kkA: X5M + mismatchLabelKeys: + - Mb4LbuExHD6 + - XAk + namespaces: + - O + topologyKey: FHxii + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=9mw + - --configurator-base-image=qbU + - 8TZ + - c + - cpUq + command: + - /manager + env: [] + image: qbU:9mw + imagePullPolicy: Never + livenessProbe: + failureThreshold: 127 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 324 + periodSeconds: 27 + successThreshold: 265 + terminationGracePeriodSeconds: 459 + timeoutSeconds: 872 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 146 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 979 + periodSeconds: 599 + successThreshold: 375 + terminationGracePeriodSeconds: 47 + timeoutSeconds: 33 + resources: + limits: + cpu: "459" + memory: "629" + requests: + cpu: "100" + memory: "277" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + ephemeralContainers: null + imagePullSecrets: + - name: Qzv + - name: 3TWwF + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: Fzbi9OkP + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ĩŇ鸶埡E鬼b欈鬚ħ汣ĆBȟʼn + key: 6Y + operator: ĸN怔精畹 Ɲ + tolerationSeconds: 3239167562437367000 + value: U4S5 + - effect: 韘銫.衳;aƣ榌懣(ɲ篥­9邊斤榽fŷ + key: wMhDI + operator: )HuȕL搩Iʇ\ŦZȋ[:镱DZ + tolerationSeconds: -180540694248284540 + value: F0lt + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: ByyEUurwR +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - 8V1wVzO-webhook-service.default.svc + - 8V1wVzO-webhook-service.default.svc.RBjyK1IISE + issuerRef: + kind: Issuer + name: G-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: ByyEUurwR +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + Hp8LxD6: 9oZ3ip + Jw: Jn + lKmeE2: L + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: G-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: G-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 8V1wVzO-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: G-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 8V1wVzO-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + z: "1" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Fzbi9OkP-crd-job + namespace: default +-- testdata/case-061.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + m: IHPyB + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: Z20j25RfqSp + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: zBK9hkZ4 + health: + healthProbeBindAddress: f3 + kind: jV + leaderElection: + leaderElect: true + resourceName: CM4KfP + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 199 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: tDaA-default +subjects: +- kind: ServiceAccount + name: Z20j25RfqSp + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tDaA-election-role +subjects: +- kind: ServiceAccount + name: Z20j25RfqSp + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tDaA +subjects: +- kind: ServiceAccount + name: Z20j25RfqSp + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: tDaA-rpk-bundle +subjects: +- kind: ServiceAccount + name: Z20j25RfqSp + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: JhtIXu +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: JhtIXu-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: JhtIXu +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA + namespace: default +spec: + replicas: 692702430 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: JhtIXu + strategy: + rollingUpdate: + maxSurge: 1272820202 + maxUnavailable: 1599763437 + type: p唧ţ逆ƒ4Ħ{'å + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + "": otm65 + app.kubernetes.io/instance: operator + app.kubernetes.io/name: JhtIXu + spec: + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=GfYtT + - --configurator-base-image=2g + command: + - /manager + env: [] + image: 2g:GfYtT + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 877 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 442 + periodSeconds: 386 + successThreshold: 858 + terminationGracePeriodSeconds: 328 + timeoutSeconds: 697 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 430 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 666 + periodSeconds: 556 + successThreshold: 172 + terminationGracePeriodSeconds: 200 + timeoutSeconds: 194 + resources: + limits: + cpu: "769" + memory: "582" + requests: + cpu: "988" + memory: "839" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: Z20j25RfqSp + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: vT +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - JhtIXu-webhook-service.default.svc + - JhtIXu-webhook-service.default.svc.v0W + issuerRef: + kind: Issuer + name: tDaA-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: vT +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: tDaA-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: JhtIXu-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: tDaA-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: tDaA-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: JhtIXu-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + m: IHPyB + creationTimestamp: null + labels: + AWBTKJBE3: lLUGUf + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: JhtIXu + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jcF: qXntI + name: Z20j25RfqSp-crd-job + namespace: default +-- testdata/case-062.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 5EOV + health: + healthProbeBindAddress: :8081 + kind: g65 + leaderElection: + leaderElect: true + resourceName: ut + metrics: + bindAddress: V1ZJHnc0 + webhook: + port: 76 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 79ioSjMT8KG-default +subjects: +- kind: ServiceAccount + name: 79ioSjMT8KG + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 79ioSjMT8KG-election-role +subjects: +- kind: ServiceAccount + name: 79ioSjMT8KG + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 79ioSjMT8KG +subjects: +- kind: ServiceAccount + name: 79ioSjMT8KG + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 79ioSjMT8KG-rpk-bundle +subjects: +- kind: ServiceAccount + name: 79ioSjMT8KG + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ZRaS +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: ZRaS-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ZRaS +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + L5oVQe9mXi: Ha5na1 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ZRaS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + j: Wmsdb + uS: h6Fj + name: 79ioSjMT8KG + namespace: default +spec: + replicas: 1349316373 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ZRaS + strategy: + type: RollingUpdate + template: + metadata: + annotations: + yc: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ZRaS + spec: + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchFields: + - key: 9xbOcnTn + operator: 凥ǩk雐必3 ȏ0A邿u癮!­Ⱦ銂, + values: + - h + - DTdeaN + weight: -738772381 + - preference: + matchExpressions: + - key: lfpZtGAtSu + operator: w俢m<轮V{3(閡彲¶pg + values: + - vRFviQGe0 + - zGZM + - key: RMjmZnOkvvZc + operator: (盆7Ƚ}鏴Ɉ)'Jeå蹷 + values: + - Zvv16KE + matchFields: + - key: Vt2gIz0 + operator: '%' + - matchExpressions: + - key: CdoYQP + operator: x割鳑)í噁 + values: + - hHER8zu4 + - Ni + - wSgMO + matchFields: + - key: 2mcWT + operator: '>ģ扃 麷¹Ńĺ腣XǬȞAž幢掑Ä' + values: + - ULwogXx6z5 + - 9zP8p + - q8 + - key: iZTM9Vm + operator: -ǿ#毖齸倖瞍vWʞ:Ă^6徨 + values: + - K5le06tD + podAntiAffinity: {} + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=DF517x + - --configurator-base-image=SCN + - "" + - QL9X + command: + - /manager + env: [] + image: SCN:DF517x + imagePullPolicy: Always + livenessProbe: + failureThreshold: 941 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 763 + periodSeconds: 486 + successThreshold: 976 + terminationGracePeriodSeconds: 631 + timeoutSeconds: 593 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 96 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 110 + periodSeconds: 304 + successThreshold: 487 + terminationGracePeriodSeconds: 749 + timeoutSeconds: 268 + resources: + limits: + cpu: "678" + memory: "136" + requests: + cpu: "25" + memory: "887" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + ephemeralContainers: null + imagePullSecrets: + - name: Qi + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: Ev1EfK + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 煲釠č5瓏{癧aǼ + key: Y9U7 + operator: o筈辅űųʝ@鷻銩0 + tolerationSeconds: 2028340599953699800 + value: GoO + - effect: »g_js羿O幯乽;戰嬹ËƔ{t4姛瓬 + operator: 9]ɞ丮¹DOłſɌ髽 + value: 1ikTXwf + - effect: ʦ爢åS兲ƈʮƾ + key: RUhE + operator: Q芎帲@ɂ§[Ř:乶纱r + tolerationSeconds: 7398301711804277000 + value: D + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: pkhQjFp +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + HvdUM8c: xgMVqIkmZB + Sy: 53p2w + Zxp7: CdyC + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Kcp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - Kcp-webhook-service.default.svc + - Kcp-webhook-service.default.svc.kVV + issuerRef: + kind: Issuer + name: xtpIQu-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: pkhQjFp +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + HvdUM8c: xgMVqIkmZB + Sy: 53p2w + Zxp7: CdyC + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Kcp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: xtpIQu-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: xtpIQu-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Kcp-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: xtpIQu-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Kcp-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + Tv9mrE: QJOCh1aO + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + jW: CZz80QZ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Kcp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Ev1EfK-crd-job + namespace: default +-- testdata/case-065.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 6cBdO4WXpPbYNd + health: + healthProbeBindAddress: :8081 + kind: 9m + leaderElection: + leaderElect: false + resourceName: qAkskeq + metrics: + bindAddress: oEhm + webhook: + port: 223 +kind: ConfigMap +metadata: + annotations: + Wcv: XlJt1il + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "78" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + yhRLU: bn88A + name: CbM6ZNJQ-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Wcv: XlJt1il + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "78" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + yhRLU: bn88A + name: CbM6ZNJQ-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "78" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Wcv: XlJt1il + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "78" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + yhRLU: bn88A + name: 78-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "78" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + Wcv: XlJt1il + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "78" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + yhRLU: bn88A + name: CbM6ZNJQ + namespace: default +spec: + replicas: -610531173 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "78" + strategy: + rollingUpdate: + maxSurge: 17395768 + maxUnavailable: 1807806628 + type: ʛ + template: + metadata: + annotations: + kINvq: mSXo + qNT: 2P + creationTimestamp: null + labels: + "": VLlyct + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "78" + lmGA: iZ + spec: + activeDeadlineSeconds: 8105160926795581000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: k2nz7 + operator: 鴗¥H型u塑ɑ[ȗaü^ǟR + values: + - S + - SOs + - e2 + - key: SN37 + operator: ),訨"ʠŻz戒5跥RĮÖȴ莳芅烥XZ + - key: Usgg0wwYK + operator: ı/|Ƶ + values: + - Shgrw + - pcCanAQXkE6 + matchFields: + - key: drX + operator: k蜞挺FȤv両ðĔʼn豣@Ǚ挭靮陰Ų + - key: HCR + operator: 塊茡ǐsǬ斘ï:馭r铔沶 + - key: qAsqjfvzE5f + operator: 'Iİ!.6Áʏ!ö&{福ɨǍnD迪:' + values: + - oZT0 + - wht6Bhi + weight: 1926175553 + - preference: + matchExpressions: + - key: rz + operator: LJzęʯs裂}bB + values: + - HnoETI0PMkx + - RypJyp + - Lf + - key: 5qiexOXE + operator: 叱 + matchFields: + - key: VDH0hq + operator: ǬG緧霞郪ɟȾ倹 + values: + - 9gsy0k + weight: 1413888902 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - {} + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: EkrTV7nWi8Z + operator: 炷韘ɡƀ嫉匵鼸]$藎 ɔ騬悹侰脯 + values: + - NE33 + - key: Hup + operator: ȑ_ɽ觀N琁Nƒ嗉珥ȳ眮[ + matchLabels: + VKyGu: SeTv9 + matchLabelKeys: + - eg33OtYq + - p + - LI5Hhjht + mismatchLabelKeys: + - KVBnSCT0MT + namespaceSelector: + matchExpressions: + - key: dSPL07rZV + operator: 6K寞Ĩ\NƅǑ + values: + - 4Uj + - "" + - FYHqO + - key: KvBQTDxp1h + operator: Ȗ + - key: X9z5s03xxx3 + operator: žD?cƢôʕ騼%bx + values: + - Adkq + - 3eP + namespaces: + - aduq + topologyKey: 9RzUTpFi + - labelSelector: + matchExpressions: + - key: "4" + operator: c鸚Ľ酌ĕ玾rǵÄ + values: + - kYnbqv + - "" + matchLabelKeys: + - vFJrs + - hso + - QKrj + mismatchLabelKeys: + - lB8SMB + namespaces: + - r02c + topologyKey: xKaS + - labelSelector: + matchExpressions: + - key: if + operator: JŖ9ɴµ鑹/IJ焸Ħ£嚙āʫ[@[ + values: + - M0hOLCK + - u0 + - key: ZSjEKJsL3 + operator: v7現ů.ɔɸ垚黌雱袇 + values: + - AT + - Z0egr4aN6dv + - key: tMsupB1xD + operator: '}ž蘔DŽ_ȿ瑾暿bMb¼' + matchLabels: + QgeIJ: Mn3X5l + ZCnTNKJl: btJk3Jawl + ygz: TD + matchLabelKeys: + - XH2n0G2w + namespaceSelector: + matchExpressions: + - key: XubSMnhx + operator: Ȱ啐kD裿/I駉 + values: + - 8W6 + - key: 3f + operator: "" + - key: 3gugWW + operator: 絁ílV¾z'@ʆ鎳m假竭嗓Ŭ5膔軸 + values: + - 36yfO + topologyKey: bi50gE3 + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=1 + - --configurator-base-image= + - Q9 + - JLCZc + - c + command: + - /manager + env: [] + image: :1 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 304 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 302 + periodSeconds: 723 + successThreshold: 355 + terminationGracePeriodSeconds: 788 + timeoutSeconds: 861 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 620 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 459 + periodSeconds: 854 + successThreshold: 952 + terminationGracePeriodSeconds: 872 + timeoutSeconds: 356 + resources: + limits: + cpu: "615" + memory: "532" + requests: + cpu: "418" + memory: "17" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - QiG + options: + - name: pK4d7m + value: W4K1f4IZaag + searches: + - 5w + - t96y3H + dnsPolicy: 堓)危沜ƭȵ`šDžbC + ephemeralContainers: null + hostAliases: + - ip: lZ2v + - ip: Oy73nSH + hostIPC: true + hostPID: true + hostUsers: false + hostname: RpdEt + imagePullSecrets: + - name: KRByA + - name: 3rKSw + initContainers: [] + nodeName: cK8kqsk3XW + nodeSelector: + 8eySA6Mq: YE9kw + Wz751pxdu: 49WYQ2U + wzW4: fX + preemptionPolicy: 學 + priority: -1208746674 + priorityClassName: rhail5Pt + resourceClaims: + - name: "" + restartPolicy: /=畝XįŨ鶓ɦ`DZē槯蒋Ō橥\Ɯʼn + runtimeClassName: EdXVp2q2j + schedulerName: JokA5C1 + securityContext: + runAsUser: 65532 + serviceAccountName: GP + setHostnameAsFQDN: false + subdomain: Cf + terminationGracePeriodSeconds: 524540695880788860 + tolerations: + - effect: ȯtȕu恡Ï^珢堯ƍɕ>n浀 + key: aZZW3 + operator: ¬ + tolerationSeconds: 1736400152056944000 + value: dh5 + - effect: 爧囶Ę鯖HýĢ旴¶Ư仍ÏŹCǔǢƝÊ0 + key: aGmmwu + operator: 礮Ls鱆CşD + tolerationSeconds: -5598207332444537000 + value: x1MEp + - effect: Õ檉Ȏſƹ霫冬8ȮL<ƫʇ!Ɖś曊ȪƸ + key: kb + operator: 禍Í} + tolerationSeconds: -7540897080678534000 + value: hJ + topologySpreadConstraints: + - matchLabelKeys: + - "" + - hWekEfgyZee + - rLF0UT + maxSkew: 481101461 + nodeAffinityPolicy: 莭.厵K鐥ȼ + nodeTaintsPolicy: x×ɷʘĞR + topologyKey: 0p + whenUnsatisfiable: 癯 + - labelSelector: + matchLabels: + ZL: Ou8yKgj + dwi: cR11 + maxSkew: 750139390 + minDomains: 1215610347 + nodeAffinityPolicy: IǞ陣Ɯ致g璪Ȉŏo駗 + nodeTaintsPolicy: 初藂q:墄N + topologyKey: WP4QXxrf + whenUnsatisfiable: NjČI蒓2Ċ檗毦I_\鶚5柴ŨhȖ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: cuO +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + Wcv: XlJt1il + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "78" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + yhRLU: bn88A + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - 78-webhook-service.default.svc + - 78-webhook-service.default.svc.5pvLBDJ + issuerRef: + kind: Issuer + name: CbM6ZNJQ-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: cuO +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + Wcv: XlJt1il + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "78" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + yhRLU: bn88A + name: CbM6ZNJQ-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: CbM6ZNJQ-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 78-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: CbM6ZNJQ-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 78-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "78" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + yhRLU: bn88A + name: Qi-crd-job + namespace: default +-- testdata/case-066.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + 1qZ: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 4s + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: K9Pwc + health: + healthProbeBindAddress: Pk + kind: Tfpa + leaderElection: + leaderElect: true + resourceName: zgg + metrics: + bindAddress: Lzl8T1yaT1 + webhook: + port: 379 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + 1qZ: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oWZxG4ft6-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + 1qZ: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oWZxG4ft6-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 19ztDQ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + 1qZ: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 19ztDQ-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 19ztDQ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + 1qZ: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oWZxG4ft6 + namespace: default +spec: + replicas: 266253858 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 19ztDQ + strategy: + rollingUpdate: + maxSurge: 344725018 + maxUnavailable: 538463142 + type: u職'鐠瀈殝J槉 + template: + metadata: + annotations: + Kuup: 0RGT7k + PuGCj: pBL8mQlrvD1wIq1I + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 19ztDQ + eSIZX: ylvYxvF + i: f + spec: + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: bCn + operator: 鼃¤礏欕寕o>Ȼ«PĆ+m梞尗 + - key: NEloyYm + operator: ʃñg4璓Õ偛萕M_潼蘜$糱ɶ拚傢sȗ + - key: Zb1 + operator: 咂ŚǝI + values: + - sNUUx0 + - j8AEGgOD + - Lnoj + weight: 499737970 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: RY + operator: kɑ憚誷醠ƅɓ澆簎ƫM4稃y良 + values: + - iQQfAxq + - z3CkqXav + matchFields: + - key: "3" + operator: 鈛<_ȷ瞛Ʃ餇貨椢Ÿ猊F岤ƁɄ堙ǁk穽 + values: + - nLyOiE + - s5K8bkg + - KjJZJkZ + - matchExpressions: + - key: C5NrGF7 + operator: dz=X练姬ǽ贂ƣ + matchFields: + - key: mbsDXueRj + operator: '{ī?鏤TŀČ盞ȱƯ籒礽歔Ⱦq' + values: + - hKYLiv + - WzlwjJ4w0 + - key: wVzT8MARQn + operator: ǫZȡ嵔| + values: + - aQU + - WmS + - matchExpressions: + - key: IrRyd + operator: "" + values: + - j9 + - 4r + - asVGT + - key: gHnFgdtA + operator: ųFÆȉ塊ľâ槏0qEƯ + values: + - JipRy1WN + - tGQG + - F1Kz3Rk + - key: g + operator: 缈ĶÂİ}棷戆鵷ʣ0I + values: + - xoXe2malhBmQ + - bDLEDEUU + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: ziVjVgVS1 + operator: 龰笍hDzʢɜǟ揧ùɏ + values: + - s8 + - key: fUbqzS + operator: /6hȐĥûʒg妁菔炊(dkX + matchLabelKeys: + - jg + - b + - WtiMVCB + mismatchLabelKeys: + - fv0XiY + - pCSbL + namespaceSelector: + matchExpressions: + - key: 56so + operator: ċv鬉鸩ȤȵŞń暃Ȱe + values: + - i + - key: "" + operator: "" + namespaces: + - BvcAeP + - "" + - v63k + topologyKey: sZtGVIQui + weight: -832216521 + - podAffinityTerm: + mismatchLabelKeys: + - CYt + - v + namespaceSelector: + matchLabels: + ja: x + namespaces: + - kdbd4ONN8 + - mBsDIT3W + - jek + topologyKey: 8L + weight: -1937454382 + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=47nK + - --configurator-base-image=UWHmykY + command: + - /manager + env: [] + image: UWHmykY:47nK + imagePullPolicy: Never + livenessProbe: + failureThreshold: 624 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 221 + periodSeconds: 313 + successThreshold: 335 + terminationGracePeriodSeconds: 835 + timeoutSeconds: 649 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 733 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 728 + periodSeconds: 817 + successThreshold: 759 + terminationGracePeriodSeconds: 380 + timeoutSeconds: 497 + resources: + limits: + cpu: "305" + memory: "992" + requests: + cpu: "838" + memory: "463" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + ephemeralContainers: null + imagePullSecrets: + - name: T + - name: nOg2mwF + - name: i + initContainers: [] + nodeSelector: + pM: PqhP2g6Tgu + securityContext: + runAsUser: 65532 + serviceAccountName: 4s + terminationGracePeriodSeconds: 10 + tolerations: + - effect: dIJ/缱腀ʛ,Ô銉Ő + key: HzSB + operator: ř挻iju厅笀üǑ + tolerationSeconds: -7103754535413956000 + value: T9rytQtkmkQ + - effect: 琞痡4ï劀lĝĝW幩魋bêLJ + key: LihyJ8V29 + operator: é韹ǵ*ø + tolerationSeconds: -2267351823149110500 + value: N2sZniPW + - effect: '"l敻ȓ' + key: E + operator: ĕ亓nÈţ`歠ȏws熻1ʆN蒔驈Ƀx + tolerationSeconds: -411540980645837600 + value: uFHD2K + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: Wy5KjIn +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + 1qZ: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - 19ztDQ-webhook-service.default.svc + - 19ztDQ-webhook-service.default.svc.uM + issuerRef: + kind: Issuer + name: oWZxG4ft6-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: Wy5KjIn +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + 1qZ: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: oWZxG4ft6-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: oWZxG4ft6-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 19ztDQ-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: oWZxG4ft6-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 19ztDQ-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + 1qZ: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 4s-crd-job + namespace: default +-- testdata/case-067.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: k6 + health: + healthProbeBindAddress: bo + kind: tiT1t + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: E + webhook: + port: 242 +kind: ConfigMap +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: PxBN-default +subjects: +- kind: ServiceAccount + name: hqG9jAF + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: PxBN-election-role +subjects: +- kind: ServiceAccount + name: hqG9jAF + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: PxBN +subjects: +- kind: ServiceAccount + name: hqG9jAF + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: PxBN-rpk-bundle +subjects: +- kind: ServiceAccount + name: hqG9jAF + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: axjCvWi +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: axjCvWi-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: axjCvWi +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN + namespace: default +spec: + replicas: -1982289334 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: axjCvWi + strategy: + rollingUpdate: + maxSurge: 1568786111 + maxUnavailable: 430364916 + type: ǣ捕 + template: + metadata: + annotations: + 7LmO7fVg: QCIxppkhJ + Yy: eZLU0 + nTqj1D0: u + creationTimestamp: null + labels: + "3": nQZ978Pf + 9HNKACRCp: Wq6g + YWgWYGNSgoEW: 46OXI + app.kubernetes.io/instance: operator + app.kubernetes.io/name: axjCvWi + spec: + activeDeadlineSeconds: 3041725903292901400 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: wRp3 + operator: 傤wsþ哨踻xƕ冘x鱊% + values: + - "" + - b5g + - key: 4tJXosqX + operator: ʀ + - key: Flx + operator: sŌ藾Ŵ*ʄ鍛ƞ~ġOm錭÷Jɱ| + values: + - 6s + matchFields: + - key: TIC8i5C0IxFuH + operator: 7]C偼W盔9Ȏ&ņ佗Vʝ蒥ǖ + values: + - SoZN + - IEMENHh + - key: mjoG + operator: ÿ + values: + - 2tgpD + weight: -197157498 + - preference: {} + weight: 1014387204 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: E4oSEf8mL + operator: ʐș/.湭嘶råĺ哥ʌcÈ劻鏹(羢j + - key: yNsM + operator: 埙³Á掌Ķ孝屺ʄ火r^ȶqƁ + - key: "5" + operator: '{Ɓ銬年ń' + - {} + - {} + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: eiDlj0T + operator: ȷzþ8Mu璲DƊŹwz + values: + - "y" + - "" + - 7o8 + mismatchLabelKeys: + - 5O6E + - e + - y2D1 + namespaceSelector: + matchExpressions: + - key: jRyqPA + operator: ş獖Ǒ胐9蘩拺戦ʉS忲螺Q傓Ȉ + namespaces: + - fH2J2u + topologyKey: "" + weight: 1847247856 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: mNEX + operator: ɰ7ǯm + values: + - mrDNh + matchLabelKeys: + - 4vs2U8 + - Xpck + namespaceSelector: + matchExpressions: + - key: Vaug52udNl + operator: ƄELj + values: + - iA2z + - AZL2acrB + matchLabels: + 1NiS5: lW2 + HrdPjxielsLEQA2: VQaT + f: 1VgftZ03q + namespaces: + - fkOH + - 0ciTxy + - NfrvAO + topologyKey: lbtNGOX + weight: -1821939424 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: zhXdDw2g + operator: "" + values: + - fRD1mnH + - x6a + - IVVxA + - key: CFTD3DnuC + operator: 茗嚯*槇妍ȐZ+q詻ƞ!罬ɿDžʓ + values: + - C + matchLabels: + 9r: pqIJ8L + Z9YxgpeprM: 7Mgpqn2 + matchLabelKeys: + - iZ + - ar + mismatchLabelKeys: + - "" + - muZKSOH + - LgEI + namespaceSelector: + matchExpressions: + - key: zghTFptxP + operator: Ǟƛ颷z#Ƣ脒Ɍ%:ɠ飶³獃ƥìşn + - key: WaY1G5jY + operator: 匍隼ú1ǚ]8帻蘋庹Đ')¡f尕s + values: + - 3Zcb9 + - key: "" + operator: ƕëɷʤH犆-趟| + matchLabels: + L: wK9ecYzyVFT + namespaces: + - PEbhG2 + - il + topologyKey: aXR + weight: 2032418302 + - podAffinityTerm: + labelSelector: + matchLabels: + 5qGp6SG: "95" + mEYK: M + pZp7Dnms: 2z23PO8YY + matchLabelKeys: + - "3" + - jmHY8X8 + topologyKey: rr3EBfkMO + weight: 712720701 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + B: cDSmpXzN + Egu: tUl9KQp + yr: wx + namespaceSelector: + matchExpressions: + - key: 3BgtPvpmm + operator: 楣áť抔镭]ň{畈Sƙɐʝȹ墠Ⱦ/ + values: + - Z9 + matchLabels: + NH3TD: rpvAxz3mom + Za: UvrzQgvC2Ft + topologyKey: YbKFvWIJ + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=boxAxRu + - --configurator-base-image=kBJV23 + command: + - /manager + env: [] + image: kBJV23:boxAxRu + imagePullPolicy: Never + livenessProbe: + failureThreshold: 957 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 464 + periodSeconds: 489 + successThreshold: 209 + terminationGracePeriodSeconds: 584 + timeoutSeconds: 671 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 21 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 909 + periodSeconds: 439 + successThreshold: 126 + terminationGracePeriodSeconds: 392 + timeoutSeconds: 692 + resources: + limits: + cpu: "27" + memory: "260" + requests: + cpu: "66" + memory: "643" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - mXmDRel + - "0" + - "" + options: + - name: x4P + value: BZIU + - name: 6v53s + value: "30" + - name: K5fNJ + value: p4y3xY + searches: + - 5Tz92V + - W4XnFCMXuw + dnsPolicy: ȫĥ\yƪ凉q撰-盳梑Ų鯂4悛ŭVŴł + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - ARm + - 5mbeENc + ip: HpEC + - hostnames: + - gVP + - d3B + - B1 + ip: 0Kvbz + - hostnames: + - RFtp + - 5L + - 6jJ0pQxwY + ip: wmVMfSFk + hostNetwork: true + hostUsers: true + hostname: nz + imagePullSecrets: + - name: MWx33gQ + - {} + - name: t2p + initContainers: [] + nodeName: KGkN15 + nodeSelector: + 7nv8NF: 8bQE + E1TRY: zn + preemptionPolicy: ǣ]ɕCûmF + priority: 1012712017 + priorityClassName: XRvFc + readinessGates: + - conditionType: ',鬝啪Ý' + restartPolicy: ʏʟ0u[DžŲȚ)呲火}b涱öƜɌ趥鿦 + runtimeClassName: vK17LmnrAJ + schedulingGates: + - name: D2h + - name: dXaL8Qq + - name: tGPE + securityContext: + fsGroup: 1945406407046873300 + fsGroupChangePolicy: Always + runAsGroup: -5600140835378511000 + runAsNonRoot: false + runAsUser: 3194905015790483500 + sysctls: + - name: dbg + value: Ux3p + - name: DixIbluM + value: RGtigIISV + - name: tBE + value: AC0jFpBZL + serviceAccountName: NmN2 + setHostnameAsFQDN: true + terminationGracePeriodSeconds: 3178304874460420000 + tolerations: + - effect: '!ɀ卐ɍ/9諽8Ĕ^' + key: 44gXm + tolerationSeconds: 8277934016578035000 + value: anUSxHGOw9Y + - effect: 判`Ǖɜ臘峪ǧ;D + key: h + operator: şDzcŒƇʝ売fǿȑ咤縪3Řv + tolerationSeconds: 4280426830307880400 + value: L4ckl5Et + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: Rt7yVKtRrPNIxb + operator: 綘ǗPw譯Ȩ浌貝oLVY#Â啜j窜恸 + - key: LHJo + operator: Ȭ讅嬗捀下ǬŜ + values: + - lj7FiOLajQ + - ONQ01y8 + - key: MsR + operator: "" + values: + - RBYb2 + maxSkew: -1030960538 + minDomains: -429957677 + nodeAffinityPolicy: ʒ诣- + nodeTaintsPolicy: ɀ僅 + topologyKey: nk + whenUnsatisfiable: éɘ.R5鏝àå=澕 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: Gza +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - axjCvWi-webhook-service.default.svc + - axjCvWi-webhook-service.default.svc.HgZvm + issuerRef: + kind: Issuer + name: PxBN-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: Gza +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + "": knwqEfPVTu + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: PxBN-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: PxBN-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: axjCvWi-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: PxBN-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: axjCvWi-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + bclGU: Z0rZ + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: axjCvWi + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: hqG9jAF-crd-job + namespace: default +-- testdata/case-068.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: d7O64pqge + health: + healthProbeBindAddress: nqsbjJiH + kind: vlqn1EfQw3x + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: "" + webhook: + port: 111 +kind: ConfigMap +metadata: + annotations: + MXZN: GguW + t: 64UZsJyzd0Fl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bNOJ + app.kubernetes.io/version: v25.1.4 + fYyBJj2Al: 00TYG + helm.sh/chart: operator-25.1.4 + name: CFnO9s-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + MXZN: GguW + t: 64UZsJyzd0Fl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bNOJ + app.kubernetes.io/version: v25.1.4 + fYyBJj2Al: 00TYG + helm.sh/chart: operator-25.1.4 + name: CFnO9s-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: bNOJ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + MXZN: GguW + t: 64UZsJyzd0Fl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bNOJ + app.kubernetes.io/version: v25.1.4 + fYyBJj2Al: 00TYG + helm.sh/chart: operator-25.1.4 + name: bNOJ-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: bNOJ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + MXZN: GguW + t: 64UZsJyzd0Fl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bNOJ + app.kubernetes.io/version: v25.1.4 + fYyBJj2Al: 00TYG + helm.sh/chart: operator-25.1.4 + name: CFnO9s + namespace: default +spec: + replicas: 469365847 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: bNOJ + strategy: + rollingUpdate: + maxSurge: 279731675 + maxUnavailable: 959318152 + type: ǺɹW%M搓 + template: + metadata: + annotations: + 1eBjL: 7dCt4IX + ERZ5g: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: bNOJ + hZcnuz: RFVo8VHB4 + tZVMLHI1: 2e7fk + spec: + activeDeadlineSeconds: -1705312198462537700 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: i8 + operator: 鶨b驍ǾÂɈgʇ洟Y+ĐIJ秸 + values: + - OsCE + - Iq0KpC8b7 + - 9h + - key: wd8p + operator: l + values: + - QukCF + - key: vDwZB + operator: jK纮毄蝌 + matchFields: + - key: 8Z + operator: ''',' + values: + - G1OUWwe + - lr + - nVwaLdM + - key: 9bM6Ejx + operator: \OŌi艠Ĵ萗:ɟ岔b珌4 + values: + - Cx + weight: 2123660020 + - preference: + matchFields: + - key: 1tw + operator: É妡褂緮Ş蹤îX伌珹Ʒ糤Ş¿瑥Zə + values: + - qDFyAM4q + - key: TRJrS2KBFsn + operator: 蝞?4鯚 + - key: A9w0shIOe + operator: FɨŸɆƼ咉Xyk皰]D¼ + weight: 1241138408 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: h9HCbqo + operator: Ō[4两4 9罈廍DŽôʅǠq饀zh + - key: UM + operator: ɣ?恗.ĠƴYÂ即径"L + values: + - IiSf4OydHDi + - "" + - udaPvX + - matchFields: + - key: B + operator: 泐Õ + values: + - Yg + - z + - 2aL + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: PHTg + operator: qU斠ǭ鄧Ȧ鬞I荎罜钢Ȓ徵ɺnt饨x4 + values: + - Xxngg + matchLabels: + E55M: 5XWJU + mismatchLabelKeys: + - A2pJfZLq + namespaceSelector: + matchExpressions: + - key: tRzdVFPrUU + operator: '>?ºG奅''愠' + - key: hYtE + operator: 'WŦ梏嵻ɵ@ʍ枭D4ż:' + namespaces: + - N3cup14cvV + topologyKey: 4q7 + weight: 1803004877 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + PUqk: OOASm + aVhG: G + kCvGTHgW: QuKzd + matchLabelKeys: + - AemkoN + - 14TGfGu7joP + - 31KoX + namespaceSelector: + matchLabels: + 7zlC: xzrAfMezVw1 + EIlYy: sOG3m + WEiyw52S4Ry: qqluP + namespaces: + - zrjMH + - "" + - rUf0pMp4 + topologyKey: ZrnvTR6hLJWm + - labelSelector: + matchExpressions: + - key: 2o3JO + operator: ɔ鼘JǰW + values: + - ZEIaf + - W7zSM7 + - key: TtAoc + operator: 屈ɜ凋諗Ù1辚=`0ǧ译暈:r + values: + - czEeFJr6rr + - key: zDK + operator: 櫲*ɗ1ǒU窚ƅ­ + matchLabels: + 6QR4V: q4 + al7wjCH: Diz9 + xTq: JXTV9Q + matchLabelKeys: + - nq24l + - qnZWSZ + - g + namespaceSelector: + matchExpressions: + - key: xDoGIoFFP + operator: '@頄ȫ;夈' + values: + - nWbBqNhHt + - c8QL + matchLabels: + VJcC: qKz15NI + mFF: pFS + xStpVFZD3l: Ox4DD72 + namespaces: + - jk + - PcKpFF1 + topologyKey: qJ + - labelSelector: + matchExpressions: + - key: SU4p0A35nW + operator: "" + values: + - 9S8F + - IdUcrwI + - DB7y + - key: KdXTw + operator: 遟G笻m + values: + - MFPEmv + - key: 1cqycMQPiR + operator: "" + values: + - LzQr8kbU + matchLabelKeys: + - "" + mismatchLabelKeys: + - UlhGXW + - WKdRue0e + - LXBpBIJ + namespaceSelector: + matchExpressions: + - key: uwWKVm + operator: ɜX[莄噮ȝȄV檨ŏm + matchLabels: + ByZyC2j: ra + qghvd4: hP3 + namespaces: + - Uqd + - 5z + topologyKey: 2koIfv + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=HXXm + - --configurator-base-image=7wdG0 + - dWzxr3xXRM + - vEF + - DAM + command: + - /manager + env: [] + image: 7wdG0:HXXm + imagePullPolicy: Never + livenessProbe: + failureThreshold: 945 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 682 + periodSeconds: 459 + successThreshold: 594 + terminationGracePeriodSeconds: 298 + timeoutSeconds: 41 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 635 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 256 + periodSeconds: 813 + successThreshold: 356 + terminationGracePeriodSeconds: 275 + timeoutSeconds: 629 + resources: + limits: + cpu: "746" + memory: "288" + requests: + cpu: "620" + memory: "29" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - iJM + - XDRoJ6YLA + searches: + - "" + dnsPolicy: "y" + ephemeralContainers: null + hostPID: true + hostUsers: true + hostname: 6SYwau + imagePullSecrets: + - name: 1K + - name: Oiv9Q40 + initContainers: [] + nodeName: CvCXOqSOde1 + nodeSelector: + ZmT: "" + imEN0Z1: nxrD + zWlEzg: 08Lmn + preemptionPolicy: 灸艟 Z嬡騱 + priority: -1528017339 + priorityClassName: rMxc6W + readinessGates: + - conditionType: ɏX黃Ȧ8Ui郜鎼i + - conditionType: 筧ķ!欸Ⱦ掜7艭菁ȫ泡ǯ + resourceClaims: + - name: gnBb0HOM + restartPolicy: 敊暈泾pD紌Ȓ愫Aʏ嚢6T + runtimeClassName: ouiV + schedulerName: mHTNvj + schedulingGates: + - name: F0TuqyX + - name: Fh1 + - name: "" + securityContext: + fsGroup: 2245000337122880000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 384494554013477250 + runAsNonRoot: true + runAsUser: 65532 + serviceAccountName: Ns + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: WKYlR + terminationGracePeriodSeconds: -7008269543804538000 + tolerations: + - effect: éȨ椬NūP±鞉煞ǟBE驒ȵȓìƳ蟖{ + key: k + operator: ʖʞ輂Ĭ{DŽȭ臼ƊG俅 + tolerationSeconds: 6233334905321045000 + value: jGlyr + - effect: ɸƸľȼQVm{惁gȓ曂w1C + key: TYCa + operator: 薏!ȴŋ鰛 + tolerationSeconds: 6216053217729322000 + value: kKA74L + - effect: SD'瞎P*缁 + key: me1 + operator: 寤 + tolerationSeconds: -2750578968371669500 + value: WyiR + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: AuC8Y61 + operator: '{瘰r爘*ǰ' + values: + - ttlC3AE + - 1B + - key: 5r + operator: 脕z條*ɮfȩʖ + matchLabelKeys: + - WWjXY4KNR979 + maxSkew: -1184923908 + nodeAffinityPolicy: íĈǠ蟔 + nodeTaintsPolicy: ƹ儯丢*0発P + topologyKey: EI + whenUnsatisfiable: 妩Ǩʘ頨喁^njǜȅǚIw堄駬ɕ瞗C膵 + - labelSelector: + matchExpressions: + - key: OFRTlW + operator: ĉhɽĦE + values: + - WZGO + - f83Jp + - key: EuhMF + operator: ɋ&掱·a2¨ + values: + - iNF0 + - IeElBaz + - JcO + matchLabels: + lufNES: EWoWd0 + matchLabelKeys: + - d + - Q9mw8 + - kyBs1 + maxSkew: -1851729964 + minDomains: 90497520 + nodeAffinityPolicy: "N" + nodeTaintsPolicy: 7瑾俎ȟTF賩Ĥ裑ƥÎǫ蹔填F" + topologyKey: dFAI44X + whenUnsatisfiable: ~淓焒&ŚZ様[tȭÏ,ųȭ + - labelSelector: + matchExpressions: + - key: Qqyo1kCJ + operator: 閆b睩ēW襌Z媖CS%ɮ衻Ğ'R + values: + - udM + matchLabels: + bh6Z: L7m + j8WmMou: SCFrQIqK2ikBf + oi: C5iE + matchLabelKeys: + - p7Op0mVOZ + - WyCG15f + maxSkew: -2008023906 + nodeAffinityPolicy: '&渊á E$叩>ãïʆ' + nodeTaintsPolicy: 芞 + topologyKey: IPa5T + whenUnsatisfiable: nČ俪辨u'Ł9Yė°竣]ć擯>b屠ƕ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: j + - name: Bo + - name: IRrU6r + - name: bKEcelo +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + MXZN: GguW + t: 64UZsJyzd0Fl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bNOJ + app.kubernetes.io/version: v25.1.4 + fYyBJj2Al: 00TYG + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - bNOJ-webhook-service.default.svc + - bNOJ-webhook-service.default.svc.NKh + issuerRef: + kind: Issuer + name: CFnO9s-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: j +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + MXZN: GguW + t: 64UZsJyzd0Fl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bNOJ + app.kubernetes.io/version: v25.1.4 + fYyBJj2Al: 00TYG + helm.sh/chart: operator-25.1.4 + name: CFnO9s-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: CFnO9s-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: bNOJ-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + MXZN: GguW + t: 64UZsJyzd0Fl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bNOJ + app.kubernetes.io/version: v25.1.4 + fYyBJj2Al: 00TYG + helm.sh/chart: operator-25.1.4 + name: CFnO9s-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bNOJ + app.kubernetes.io/version: v25.1.4 + fYyBJj2Al: 00TYG + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: CFnO9s-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: bNOJ-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bNOJ + app.kubernetes.io/version: v25.1.4 + fYyBJj2Al: 00TYG + helm.sh/chart: operator-25.1.4 + name: -crd-job + namespace: default +-- testdata/case-069.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + HQJtGQ: "4" + J1VZibc: dy4OXHkP + creationTimestamp: null + labels: + 2RSj: YyoP + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "N" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 9q + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: + EEjDa: KlmyGoaLD + eK9S1me: d7Jx75gs + x: WycC4D7Xr + creationTimestamp: null + labels: + 2RSj: YyoP + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "N" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: zLyH-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + EEjDa: KlmyGoaLD + eK9S1me: d7Jx75gs + x: WycC4D7Xr + creationTimestamp: null + labels: + 2RSj: YyoP + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "N" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: zLyH-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "N" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + EEjDa: KlmyGoaLD + eK9S1me: d7Jx75gs + x: WycC4D7Xr + creationTimestamp: null + labels: + 2RSj: YyoP + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "N" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: N-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "N" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + EEjDa: KlmyGoaLD + eK9S1me: d7Jx75gs + x: WycC4D7Xr + creationTimestamp: null + labels: + 2RSj: YyoP + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "N" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: zLyH + namespace: default +spec: + replicas: 465449617 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "N" + strategy: + rollingUpdate: + maxSurge: 1716441912 + maxUnavailable: 1988867546 + type: DoW梃LJ珇?÷ŧŷGcsʃ囀i跿v閚 + template: + metadata: + annotations: + "": vJ + QtG: Hi9KT5pHY + Vb79: 42karr1J + creationTimestamp: null + labels: + DLTGtucciFffWT: zpXmi + PaXb: VwCnSE + RFcNaS: Gx9GL + Y9: my + YEgVl: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "N" + spec: + activeDeadlineSeconds: 7704266910641800000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchFields: + - key: "" + operator: 鄺ƴƨ隋靿嫑苕駒Ķ梤 + values: + - GIs + - "" + - csrvTLc3Op + - key: PHMEf + operator: 黄ɵ空ʪhȾ¸ÉNJİf垉qx{蘮Ƒ颓 + values: + - Z9MoXeFiqyz + - XcUIb + - key: o1S1BSCoJHL + operator: 蝊蛷Č勅ưä^i"鉤晄ƒĊ; + values: + - PgA7xsO + - C + - cL + weight: 2065024832 + - preference: + matchExpressions: + - key: FdO + operator: Ȗ*Ɓ + - key: Ncs7mi96L6 + operator: 囮銕Ŋ霈ɼå筹Ɩfʕ磲6µ蓪颡淖 + values: + - wV53KgeWARD + - GF + - jB31k + weight: -208456974 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: uZsr + operator: L錄X閵远ł + values: + - m8I3PZcF + - matchExpressions: + - key: yAt + operator: Ⱦ乒Æ蠑ɡʑ4Ȫ矗? + values: + - q + - key: qYW + operator: \w + values: + - 2mo9LHD + - wCFX + matchFields: + - key: UXs6xwxn3 + operator: kɸO\嵀竰9婍莥襮餐屇ɟzĖ蛫墰 + values: + - C + - 07NFVz1Lq + - 2osAV9 + - matchExpressions: + - key: KowC + operator: "" + values: + - 9Lt5 + - AGiTVS + - key: 7crCw + operator: 懵 + values: + - RzMiQ + matchFields: + - key: aiXn + operator: 猯媫ɠ×锊H8ȳgūTĚĨ + - key: "" + operator: 詃ûŦ0琝灎ɼ + - key: FjLA + operator: 穤 噪&%ɮy龨騦罙Ư¯剩=(聬彰 + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: kwjiJdVxd + operator: ɨ烚鹳Ŝ陎) + values: + - "3" + matchLabels: + dcdgYC: Pv9sOER0M + namespaceSelector: + matchLabels: + gL01: YoqqG + yy: Eliiemq5 + namespaces: + - QHas + - KQG8q + topologyKey: I + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=Vk + - --configurator-base-image=xmIP4HeALlQ8 + - oxdTcKZmy5 + command: + - /manager + env: [] + image: xmIP4HeALlQ8:Vk + imagePullPolicy: Never + livenessProbe: + failureThreshold: 41 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 771 + periodSeconds: 259 + successThreshold: 775 + terminationGracePeriodSeconds: 289 + timeoutSeconds: 787 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 309 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 959 + periodSeconds: 499 + successThreshold: 424 + terminationGracePeriodSeconds: 603 + timeoutSeconds: 287 + resources: + limits: + cpu: "310" + memory: "803" + requests: + cpu: "923" + memory: "732" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - w + - JIz + - lZX2s + options: + - name: 298T9EO + value: RX5p + dnsPolicy: anº笓辝K*Ƞȫ劭 + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - ip: "87" + - hostnames: + - LR + - ztMTP + ip: WXU1H + - hostnames: + - HK + - HZog + - ki + ip: oy + hostIPC: true + hostNetwork: true + hostUsers: true + hostname: hfPH0 + imagePullSecrets: + - name: hiSb + initContainers: [] + nodeName: 5JBxXslIgCEb + nodeSelector: + 62Uu: AFw4hagGF + OPJh0: 9bWd + SSr1IGR: "" + cJO5: 3skt + preemptionPolicy: "" + priority: 1801948378 + priorityClassName: 0mynE + readinessGates: + - conditionType: À妔噜u塋ɽė¥ + - conditionType: 聾Ćý郘āŦ5Ȱȿ铷4欪蓥 + - conditionType: q + restartPolicy: QɬV猇荎秖 + runtimeClassName: z3Fvzfv + schedulerName: 7Ql5Wgrk + securityContext: + fsGroupChangePolicy: Always + runAsGroup: -289679913673291100 + runAsNonRoot: true + runAsUser: 3277457960714383400 + supplementalGroups: + - 4004021037495296000 + - -7849641669981918000 + - -2841407942728574500 + serviceAccountName: dd823A + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: UIv + terminationGracePeriodSeconds: -3127580359084209700 + tolerations: + - effect: O6 + key: S94cTX5 + operator: ʘ~梧9絛R<Ǯ姺鵍薓ȄƆÜɃ擎Ǹ垴 + tolerationSeconds: 471416478218419140 + value: 9Hu + - effect: :轚řYʟ + key: pfuyWy + operator: Ĥʗ + tolerationSeconds: -5247169065928297000 + value: 5yiC + - effect: Ȏ璝qɲD蘎, + key: O1EWo + operator: 況6ʡ鞶潃ț儼涘沬 + tolerationSeconds: 6277993023857373000 + value: l + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: s2nFJW + - name: "" + - name: PyZLCyzj + - name: R +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + EEjDa: KlmyGoaLD + eK9S1me: d7Jx75gs + x: WycC4D7Xr + creationTimestamp: null + labels: + 2RSj: YyoP + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "N" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - N-webhook-service.default.svc + - N-webhook-service.default.svc.W4sbkdoCM + issuerRef: + kind: Issuer + name: zLyH-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: s2nFJW +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + EEjDa: KlmyGoaLD + eK9S1me: d7Jx75gs + x: WycC4D7Xr + creationTimestamp: null + labels: + 2RSj: YyoP + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "N" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: zLyH-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: zLyH-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: N-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: zLyH-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: N-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +<<<<<<< HEAD +======= +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: YKWWF-migration-job-default +subjects: +- kind: ServiceAccount + name: YKWWF-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + B6AmPaZ: Usluk + W7aCzkZu: pID + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: uRLJ1j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + tCcCCzCLW: D + name: YKWWF-migration + namespace: default +spec: + template: + metadata: + annotations: + ETpvbF7SzCK: 4QPw7Q3kTT + jLYPPZ1n: V5u + mGDnHs: hIToC7RYP3v + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: uRLJ1j + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: hchsZ8:9lUTX + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "728" + memory: "418" + requests: + cpu: "506" + memory: "109" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: + BKiiNnQ: nPWy + restartPolicy: OnFailure + serviceAccountName: YKWWF-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-017.yaml.golden -- +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + HQJtGQ: "4" + J1VZibc: dy4OXHkP + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + 2RSj: YyoP + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "N" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 9q-crd-job + namespace: default +-- testdata/case-070.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 9aGDc17j + health: + healthProbeBindAddress: ND + kind: 9A80iCR + leaderElection: + leaderElect: false + resourceName: 1pe6680 + metrics: + bindAddress: KfUbSQ + webhook: + port: 358 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: m7Z5VmKktJ-default +subjects: +- kind: ServiceAccount + name: 8QmVHY8X + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: m7Z5VmKktJ-election-role +subjects: +- kind: ServiceAccount + name: 8QmVHY8X + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: m7Z5VmKktJ +subjects: +- kind: ServiceAccount + name: 8QmVHY8X + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: m7Z5VmKktJ-rpk-bundle +subjects: +- kind: ServiceAccount + name: 8QmVHY8X + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: nUS +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: nUS-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: nUS +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ + namespace: default +spec: + replicas: -1022601339 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: nUS + strategy: + rollingUpdate: + maxSurge: 1074023694 + maxUnavailable: 1190852902 + type: ɈļčŪ亵\娛Q讒惂Ȱʍ灎īzɉ|稥| + template: + metadata: + annotations: + He6ymbE: f4kMrSEEXyH + z6: n4r + creationTimestamp: null + labels: + "": eTAV6 + app.kubernetes.io/instance: operator + app.kubernetes.io/name: nUS + o7qWs: k1Qga + vRShZ: AisxX + spec: + activeDeadlineSeconds: 3148841434328277000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: b + operator: 3萁ʀV!jc!卺S懐ʖ瑆. + - key: 5E + operator: 籱巓/赒Ąʍ\Ƿ|踐ŋoǹi&蔘 + values: + - JgIazb + - key: wY0bLvbEknV + operator: 损H盆嶠ʂäə\à顐Gʩ + matchFields: + - key: 5bvU6ftIWw + operator: ʡġû£UŌx + values: + - "" + - key: B3Bz + operator: 芓ĔĖǁ;Ƴɥȅɍȇ=ɼ4W挌Ʒw3 + values: + - GK0Dngy + - SWb8LBy6r + - key: 2ntc7T + operator: Ë7Ġʕř己ʅɫ¿巶哛Ȩ + values: + - "" + - Lhd3y + - 2WSJMRmD6wRk + weight: 1037587274 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: 4n86 + operator: DɊǟa爷%撧>絟+N筟] 芉讫檹 + - key: Xoarh + operator: ŷƴȤƅ}}妔i雠蘎@ + values: + - Rb1v7 + - Zo4G + - BWSH + - key: zEIj + operator: _樆o幝ɖ塙愾?cǖs渾蔗虽犐ɱ& + values: + - t5ffVO + - d + - eENRWz + matchFields: + - key: aA1DR + operator: '''釘EÒ畭w縝b瘺]鮾礊祂.iC蹖ɋz' + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: C2Dcam4GT + operator: 醩Ǔ珱XSō + - key: GNnD + operator: 安1Ƅ屜ŻʀɡF蔬ƿ + - key: "" + operator: Ö»9zȗ堢疻络懜sE + values: + - s4NtZaob + matchLabels: + FAh: eJf + QIt1XLbk: ts + mismatchLabelKeys: + - g + - "" + - p + namespaceSelector: + matchExpressions: + - key: zq + operator: '@卆QAb潪妊¯ʗ' + values: + - A78MjzU + - uTr + - key: 3Wg + operator: 聖³冢N黓ǭʛu鯷ù眠Yȹ + values: + - V5y1Yh + - key: su + operator: xʨg4MƔ + values: + - LO + namespaces: + - V + topologyKey: RWIrWZjMNwt + weight: -846529921 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: Rtb + operator: ĩ哖叢 + values: + - WO8yT3 + - 9jGBGzJ + - key: ECAmtZC0YwxFw + operator: 鶣袪}8#ɭǵ鵋佬樽茍\ + values: + - c3NaRgoq + - ro + matchLabelKeys: + - VZ8a5h3 + - J06Lk + mismatchLabelKeys: + - c2rc + - xVca2qDQaj + - i + namespaceSelector: {} + namespaces: + - Uzvb + - WYJbOY2D + topologyKey: 5Ir + weight: -710942582 + - podAffinityTerm: + labelSelector: + matchLabels: + 6mr: "" + 7X: Mabr2Sa + matchLabelKeys: + - KWkmIR + - JhREbl + namespaceSelector: + matchExpressions: + - key: "5" + operator: 茪槜舯ǎȸĈ馑njǙ攣 + values: + - "" + - key: TR + operator: ÎȀG骞勊Uż|岋 + values: + - Z + - key: u8QU + operator: 鏯ƮX职i撆g霅Ơ瘠yɼ + values: + - GaWmpQcBi + - kcAW + - PeLaAr + matchLabels: + ZYuvv: aLQm5 + jxhWQ43: wiA7IHbLYs + namespaces: + - orYEc + - 64fCNf + - 0YS19Vy2 + topologyKey: laNS0Pp + weight: -2115229939 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + joqnn: wX + matchLabelKeys: + - cdZ + namespaceSelector: {} + namespaces: + - Toaj9N4a3P + - qjS + - xdsG7iozY + topologyKey: vJh + - labelSelector: + matchExpressions: + - key: DAol64n54 + operator: 嘍µƫ + - key: vTTn + operator: Ȯ^蒯鏍4ä醑x;蓥öũ胄鐻寄 + matchLabelKeys: + - uv37 + - s + - qPe7WuVpx + mismatchLabelKeys: + - goeq6fzpVC + namespaceSelector: + matchExpressions: + - key: aqSQdak + operator: ź喪殊qɿƚ + values: + - Db + - "" + - key: cI9U + operator: ÍŅĊf鯸廴~ʔ'秽嚋 + matchLabels: + soz: gBj + topologyKey: PSzjv1OFh + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + 3V: TyUVdZr + kErTp: 6wDM + xmzC: O8lu + matchLabelKeys: + - 6k9qosIfIH8Ri + mismatchLabelKeys: + - w8Xn + namespaceSelector: + matchExpressions: + - key: 5p2O + operator: ɬ盰v + values: + - Agu2 + - RdvqKYu0 + matchLabels: + RS0: 4i7YkzMP + cSbm6B: H1 + namespaces: + - uK9V + - 4JS7F + - saI9td1NaO + topologyKey: FUq5 + weight: -1974794081 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: QIAC + operator: 揎洡攝ȼ蘶ȿld)4鏈渀ɈKlÀ, + - key: "" + operator: NƐr鶡Ĕǹ瓽秆ø为鼡 + values: + - 7EXL + - vySjiMS + matchLabels: + WyuLdlP0eH9: 5Lg4h0Gsg4 + namespaceSelector: + matchExpressions: + - key: jNI9 + operator: 恋蹃域ȣ再\膈$嶐yţ蔇愝 + values: + - uCaQvJbqFc + - key: C0F + operator: Úʕ癔娚Fƨ牌ǫǓ痜ƳO嶍飤頹;O + values: + - 4uI + - zRE4Wc + matchLabels: + B1: inNmxhB1 + dAfnxE: m2CVU0 + lz1Ep0: 6c + namespaces: + - ImjZsquG + - qXU5 + topologyKey: 8gwG + weight: -1824337579 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: cyKW + operator: 擎WUo + values: + - a + matchLabelKeys: + - iKd5 + - YQePZCj + - whsNX20 + mismatchLabelKeys: + - Lnt + - KDSp + - rsu1v9UaT + namespaceSelector: + matchExpressions: + - key: ViM6HV + operator: Ü0Ǟȱı­9|ƸƐ硒揹粤ĎW熃駞譝鞪 + values: + - u0cw + - key: g08SDtcjU + operator: 肙3綯V內.tZŲ + - key: XKq + operator: ¼ʀ嵥鉪MĆŏūIw$喝烿ǿ + matchLabels: + ccW8uyV: SmbBCYS + uiV: 7MGETs + namespaces: + - V + topologyKey: hHV + - labelSelector: + matchLabels: + 5z: mJkp13KXYjjMi + B22n: 2jT96O + yT: Ptb6 + matchLabelKeys: + - GcRGP + - RtQ + - oYWDSnax + mismatchLabelKeys: + - WWUzS + - aSVjuSu + - f + namespaceSelector: + matchExpressions: + - key: mmygZw + operator: d^Æ妑耱ʈd徃 + values: + - p + - c + - Nwi9o + - key: V6y + operator: RA9T盺ǭÒ捁撯VȀN晄ʆʂŮ軲ũ + - key: WSN5qQW + operator: Ŀ鸳攓ǿ朎ư)嵕G + topologyKey: QZH97uF + - labelSelector: + matchExpressions: + - key: TXe + operator: 4ů4瀭嶭8鳳­ǹd迆K噖Ȫ糦盆 + values: + - V9 + matchLabels: + 0MpiXEn: "" + dB: kpfja + matchLabelKeys: + - CAG + - nm8LHeF4 + mismatchLabelKeys: + - btCkAc + namespaceSelector: + matchExpressions: + - key: 3PXCWma2r + operator: UʊL(ňȯ逴蛄=ƙ酆兄é + values: + - mlN8X2wK + - jg + - key: 2P1mH + operator: 齥融Mr災鴢發 + - key: qv6n7z9XSM + operator: 9懽綦 + values: + - 7QLrKXZvd + - FuG + - 7vzoz + matchLabels: + m: CpwG8 + namespaces: + - r + topologyKey: 5s + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=m0a + - --configurator-base-image=h9 + - ReK6Upw + - 7Pu0AA + - 0yNEqlggmA + command: + - /manager + env: [] + image: h9:m0a + imagePullPolicy: Always + livenessProbe: + failureThreshold: 903 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 76 + periodSeconds: 231 + successThreshold: 164 + terminationGracePeriodSeconds: 914 + timeoutSeconds: 616 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 663 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 201 + periodSeconds: 253 + successThreshold: 732 + terminationGracePeriodSeconds: 358 + timeoutSeconds: 833 + resources: + limits: + cpu: "245" + memory: "56" + requests: + cpu: "618" + memory: "338" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - D8E + - RZ69 + options: + - name: JhCpkH + value: yPokebJ + - name: c + value: 3M + - name: qthA5J + value: YC + searches: + - UUw4qb27Tvm + - DZ + - mcrp + dnsPolicy: ɹMǗ烺攩÷ + ephemeralContainers: null + hostAliases: + - ip: Qe + - hostnames: + - B + - Pg0JefVX + - "" + ip: 2GR + hostPID: true + hostUsers: true + hostname: kIyztbA + imagePullSecrets: + - name: voAR + - name: x + - name: ZwA2p5 + initContainers: [] + nodeName: QC + nodeSelector: + L5NQ: F8qTt + e9wmeT: 9gE + gjJy: fHS5xhP93 + kei7kjf92c: "" + preemptionPolicy: 粯zZ鐨禗ǐ帐ʙ煎)ŘĢ + priority: -1615851531 + priorityClassName: HuyLzyK + readinessGates: + - conditionType: .叒 + resourceClaims: + - name: 5vt90o + - name: Z5pumR + restartPolicy: 沈脊U%枩G鑄郱ƻ/ + runtimeClassName: sfR + schedulerName: JzVQA + schedulingGates: + - name: 1YpB82 + securityContext: + fsGroup: -4275336331760164400 + fsGroupChangePolicy: Always + runAsGroup: -892762427284622100 + runAsNonRoot: false + runAsUser: 5511452696650032000 + supplementalGroups: + - 1817087188644479200 + - -7703597735633781000 + sysctls: + - name: hF8AzofjT + value: JfzTNp + serviceAccountName: VE + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: 6Ne4XLfhW + terminationGracePeriodSeconds: -5384773926476877000 + tolerations: + - effect: 窍n愌4惊~] + key: J + operator: 纳ɹ*馩蠶f!QÑæݦÏpúRŀʒ芜 + tolerationSeconds: 5938109854598603000 + value: C3oMFn + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: kFe + operator: c拱髣籕 + values: + - LicVr + - 527eYic + - u0B01 + - key: 4mTTb + operator: Lā´dž, + values: + - YBD + - GLXJV7UGa + matchLabelKeys: + - smudP + - Lv + - Es + maxSkew: -708303020 + minDomains: -865172960 + nodeAffinityPolicy: 眽 + nodeTaintsPolicy: "" + topologyKey: lQz24S + whenUnsatisfiable: ʛ¤ƴƚʑ鞧鮞R沶{iɀ毆獯z + - labelSelector: + matchExpressions: + - key: Qn3IQQxxhs9Sag + operator: c±ĥ0ū缳!ǸŠ蛊3KF¦ɂH + values: + - AY0 + matchLabelKeys: + - DY8RFtaKdy + - HEk9 + maxSkew: 925290393 + minDomains: -1059295255 + nodeAffinityPolicy: ȎOäɌ癟 + nodeTaintsPolicy: ǭǾ葫衸Ƅɢ側j羌ţɖY + topologyKey: QJ1wtpuk + whenUnsatisfiable: / + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +<<<<<<< HEAD + - name: cert + secret: + defaultMode: 420 + secretName: Tnab1z + - name: NYz + - name: XTpYfV + - name: s4u +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - nUS-webhook-service.default.svc + - nUS-webhook-service.default.svc.9A + issuerRef: + kind: Issuer + name: m7Z5VmKktJ-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: Tnab1z +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: m7Z5VmKktJ-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: nUS-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: m7Z5VmKktJ-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: m7Z5VmKktJ-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: nUS-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: +<<<<<<< HEAD + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + Pu8: aQVSuDE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nUS + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 8QmVHY8X-crd-job + namespace: default +-- testdata/case-071.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: hUMg + health: + healthProbeBindAddress: "" + kind: CdcPG8LYYff + leaderElection: + leaderElect: true + resourceName: uUeaYfPR5O + metrics: + bindAddress: 1NJz0eKhcHs + webhook: + port: 212 +kind: ConfigMap +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT-config +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 3RQJ3j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: w-migration-job +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: +<<<<<<< HEAD + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 3RQJ3j + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: w-migration-job-default +rules: +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +- apiGroups: + - "" + resources: + - configmaps +<<<<<<< HEAD + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - secrets + - serviceaccounts + - services + verbs: + - create +<<<<<<< HEAD + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +<<<<<<< HEAD + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets +======= + - apps + resources: + - deployments +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +<<<<<<< HEAD + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers +======= + - autoscaling + resources: + - horizontalpodautoscalers +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +<<<<<<< HEAD +======= + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +<<<<<<< HEAD + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: OyOZvn5WT-default +subjects: +- kind: ServiceAccount + name: BI7X + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT-election-role + namespace: default +rules: +======= + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +<<<<<<< HEAD +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: OyOZvn5WT-election-role +subjects: +- kind: ServiceAccount + name: BI7X + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: OyOZvn5WT +subjects: +- kind: ServiceAccount + name: BI7X + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Eg0Oz +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Eg0Oz-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Eg0Oz +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT + namespace: default +spec: + replicas: 1277937157 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Eg0Oz + strategy: + rollingUpdate: + maxSurge: 1795016009 + maxUnavailable: 920502458 + type: o徃ǚɉ魖*砾謐Ʌ菱 + template: + metadata: + annotations: + Hy: "" + u: Alj + yVw: 2LiN4 + creationTimestamp: null + labels: + a5yZq6DPR: 2gj94Xe + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Eg0Oz + spec: + activeDeadlineSeconds: 2906796184660660700 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: ErQUv + operator: ',#讍醓ƐÐ糩Gţ敠圽棸ɜdz莑ň萭' + values: + - F + - vftrBqx8kIrtj + - AKHvv + matchFields: + - key: 8cijSF + operator: 呷û槡惝IJhDž濧bȞ輴ʆlj扤 + values: + - "n" + - key: pborSu2p91 + operator: Ɇ覴葃à + weight: 851640615 + - preference: + matchExpressions: + - key: D2R + operator: 措蔪眣ȡ釮BȰ廜ɔPɪȯ慲磽 + values: + - HgcVkH + - key: Mv + operator: 苺忋|D鿬嫆洐V墾揟 + values: + - "" + - key: OA6 + operator: '{虇3`aP櫗ʨȈ4捱鳠腓' + values: + - Ulr + matchFields: + - key: D1Lus + operator: "" + - key: m + operator: 畝Vƭ'ĦÕ + values: + - npe7crhN + - "" + - us05ucio + - key: aHR + operator: vƈZN鹿Ų膗. + values: + - hy + - ay4Xp + weight: 830776366 + - preference: + matchExpressions: + - key: 3IugyKeQB + operator: ɑ+D櫫駮|ȡ + values: + - "" + - V + - shT + - key: H1Ro + operator: ƙdžNĔ崮*K< + values: + - zTbtmiBoE + - E8d1O + - key: THZns + operator: ô郇ɿE9k柒Ȥ偓ɩŧ+ÖƦ_ɲ + values: + - qv + matchFields: + - key: zeucnJt3LV + operator: ǃtE阷Db嚹{ + values: + - 7nBvn9d + - key: 57x3O + operator: 樅炅ƚ«ĥ=Ȱ褅躡僭砡氊蹓ȩģ袷 + values: + - ye4 + - key: GhDSe + operator: Ƥ妎.ƞƚņŌ缁峉M;朔Ȅ辢鲍ĎOFA + values: + - eHr + - l73ziMx + weight: 456644011 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: {} + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: oCRwZQhs + operator: 筤 + values: + - a3n + - lopkt2O + - key: lFz + operator: 龹椡輊9篖輬IȖYȳÕ2ɖɧ堐W皍早 + matchLabels: + kY3U7f: R56hs88p7MZ + matchLabelKeys: + - R + mismatchLabelKeys: + - C + - REzJ8QPcGfuu + - 4L + namespaceSelector: + matchExpressions: + - key: Pu4K + operator: 確{楐+=裱ēƯƛȟȄ逹 + - key: IjSg + operator: 擸\@ʎYȞd 67 + values: + - 8PiuJ + - key: 6c0 + operator: I + values: + - PJPUw + - Zzaab + matchLabels: + 4dMbO: K5SXW + gXJ7m: 62SEO + vkeTz5: zljX + namespaces: + - iuoJOdFq1F + - FOKB + topologyKey: ZWCw + weight: 975323462 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: ekqvG + operator: ɞ桠蜔虪騉粥饶5Ƽ鉖緃龃椥詨& + values: + - fN + - key: 0HXI2F + operator: ³µơ¶¹û弴ɄvǬ + values: + - NElySO + mismatchLabelKeys: + - DYenvo + namespaceSelector: + matchExpressions: + - key: dL + operator: JŊ&涚ƩGǜ轍8穵[f + values: + - "" + matchLabels: + M: xQwdTGT + jAsP8: Et9f0q + namespaces: + - Tr + topologyKey: 0ayops + weight: 2137398144 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: 4JUBij2 + operator: "" + values: + - fPJ2 + - key: Xg98aP3 + operator: 5ǟvǙB#ŚĂĶĸœR + values: + - ty + - 4xzHp + - key: H9p + operator: )Ş(ɫƄ~O葀ǂ媭審g敡u色á + values: + - "" + - L0C + matchLabels: + ZFF967F: L + matchLabelKeys: + - rD8L + mismatchLabelKeys: + - Z + namespaceSelector: {} + namespaces: + - "" + - jiAc + topologyKey: X5Hx13b + - labelSelector: + matchLabels: + 5Guj: jXfeaC + c1U: Hxk + namespaceSelector: {} + topologyKey: 67lO8JCg6Z + - labelSelector: + matchExpressions: + - key: QE + operator: XɐzȆ4<崜f兜LF嵚 + values: + - Ir + - L3 + matchLabels: + rk7rM: dUNTwz8 + matchLabelKeys: + - MnWZrNdfgQfZ + - V3bAMv + mismatchLabelKeys: + - Wjc + namespaceSelector: + matchExpressions: + - key: u9SNlsRLICJ + operator: BzÀ嗪 + values: + - mbiML7 + - Nd + - key: hygXk + operator: ʟ(嵷~3ɶþø襒h缠'D炿¡ + values: + - xJkDP + - 6a2f1a7 + - key: r + operator: ȴCl`畗Xǻ}/鸒咤 + values: + - tvpzab + - NnooI45rcL + matchLabels: + E9wpkgOim: IUdTPb + cjv: seg3OyvX + rG: 2Sl8VugAk + topologyKey: M + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=TPaa + - --configurator-base-image=Zme9w8o + - LlHz1 + - 4qYzSV + command: + - /manager + env: [] + image: Zme9w8o:TPaa + imagePullPolicy: Always + livenessProbe: + failureThreshold: 589 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 759 + periodSeconds: 807 + successThreshold: 657 + terminationGracePeriodSeconds: 977 + timeoutSeconds: 708 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 250 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 531 + periodSeconds: 261 + successThreshold: 56 + terminationGracePeriodSeconds: 240 + timeoutSeconds: 366 + resources: + limits: + cpu: "498" + memory: "528" + requests: + cpu: "334" + memory: "62" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + searches: + - 0IRYIXHfLfR + dnsPolicy: .=5緟ǔ甃庪v + ephemeralContainers: null + hostNetwork: true + hostPID: true + hostUsers: true + hostname: ONXnRWfzGp + imagePullSecrets: + - name: YBOC + - name: CvMbo + - name: 7II0g3 + initContainers: [] + nodeName: EAe + nodeSelector: + 4tcw: hrz + FK: ahIm6 + r4u: "" + preemptionPolicy: ǩÞɚ蜰貾鱃Ǟ脺Z) + priority: -1092437364 + priorityClassName: Gya + readinessGates: + - conditionType: ĎȦã象 + - conditionType: Nl匵ŴDDº + restartPolicy: Ȳv箪Ķ贩Ő+ǥ樃揔ë + runtimeClassName: 7LAT + schedulerName: dvxA + schedulingGates: + - name: l3Owe7 + - name: OicM + securityContext: + fsGroup: 4969790577398164000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 7718336087706937000 + runAsNonRoot: true + runAsUser: 8332715385011441000 + supplementalGroups: + - -3314907293636207600 + - 2664518875298825000 + sysctls: + - name: h8VsfTAI + value: PzuCv + serviceAccountName: nFEUMXO + setHostnameAsFQDN: true + subdomain: o + terminationGracePeriodSeconds: 5115861171877325000 + tolerations: + - effect: ½L(殱鎎掊t蟐磙ÊĖj¾jʢ + key: RvwRQ + operator: S鰑dzc捥轫乙Ż佖=ij7ÊŸ + tolerationSeconds: -2083560657260833800 + value: wx5m + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: rwUs + operator: '[貢]ß紏恳捭Y花ʥ_fß' + values: + - U + - key: TTSuQ + operator: Y悿彧B缛鷱ȅÓƍTƞĿƁiɸï宮 + values: + - AMy2MTt + matchLabels: + lhqD: TiL9 + maxSkew: -921377621 + minDomains: 450959143 + nodeAffinityPolicy: 婐ƈ撰Ȳ + nodeTaintsPolicy: 格Ɉ掺M踏膸q叉R蘈 + topologyKey: QJCBTo1 + whenUnsatisfiable: ȺR蛖 + - labelSelector: + matchLabels: + "": GydNo + matchLabelKeys: + - bWR + - dtV + - 5cPhtU + maxSkew: -1328890317 + minDomains: 1506338093 + nodeAffinityPolicy: Ã灣÷埰WǸEn礡pɡ"謵|ÝSȦ亭 + nodeTaintsPolicy: "" + topologyKey: ievxeEYXR + whenUnsatisfiable: 鉯ď^I + - labelSelector: + matchExpressions: + - key: 9K6 + operator: ñ蓸BXŬ顥8G­ + values: + - 0TLjRwHe + - g7 + - key: jt + operator: ']剼xʈ壐CR~锭Ƒ锷骸鼒醻幭' + values: + - 5JMdp3T + - "" + - s + matchLabels: + 2LmzPU: Vn + 4TD: NiQsjbsE + fEXqg: 0FaPA + maxSkew: -1091202818 + minDomains: 1768851156 + nodeAffinityPolicy: 鑬ß+ H滨d蕪bǤǰmǨ + nodeTaintsPolicy: ɏɣ;Ŧƛdž儊涙ň'ś + topologyKey: 1BnA + whenUnsatisfiable: '}|ǗȳȽ抧ǎŤĿ仇恹' + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: WFuUZ + - name: PSp +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - Eg0Oz-webhook-service.default.svc + - Eg0Oz-webhook-service.default.svc. + issuerRef: + kind: Issuer + name: OyOZvn5WT-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: WFuUZ +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: OyOZvn5WT-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Eg0Oz-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + E4i6xcvJ: ZJEz + yeHnwQ: fUkYaRf + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OyOZvn5WT-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: OyOZvn5WT-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Eg0Oz-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + NA: wF + Rw: mH + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + uNRQOklv: e + creationTimestamp: null + labels: + 6uv1egE: IzPSkvDQ + C9l: git + E5l: BF8ozbb + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: BI7X-crd-job + namespace: default +-- testdata/case-072.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: lYXEaS + health: + healthProbeBindAddress: o7WXT133 + kind: YrnkFwDGANkbHseo + leaderElection: + leaderElect: true + resourceName: kpeu + metrics: + bindAddress: "" + webhook: + port: 312 +kind: ConfigMap +metadata: + annotations: + ij: htyiQR + wsZn: jDMDcnh1rh + creationTimestamp: null + labels: + Q9a: uDXPfw + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v0: 1iClRDvVO3c + name: 5GoUVR7T-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + ij: htyiQR + wsZn: jDMDcnh1rh + creationTimestamp: null + labels: + Q9a: uDXPfw + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v0: 1iClRDvVO3c + name: 5GoUVR7T-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8I1Iyd +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + ij: htyiQR + wsZn: jDMDcnh1rh + creationTimestamp: null + labels: + Q9a: uDXPfw + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v0: 1iClRDvVO3c + name: 8I1Iyd-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8I1Iyd +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + ij: htyiQR + wsZn: jDMDcnh1rh + creationTimestamp: null + labels: + Q9a: uDXPfw + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v0: 1iClRDvVO3c + name: 5GoUVR7T + namespace: default +spec: + replicas: 828111921 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8I1Iyd + strategy: + rollingUpdate: + maxSurge: 886970740 + maxUnavailable: 289045062 + type: 她厓ƇL6ìǬģčʒģy卌鏖D + template: + metadata: + annotations: + 6yf: PBVe + Fi63TSPtN: "" + kRhL: QpWMEi + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8I1Iyd + spec: + activeDeadlineSeconds: 8932134171902015000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: "" + operator: 囬b + values: + - ZQ + - jtWF + - key: 03D6 + operator: 榧碊楶灠;暈b嫑ŏ犷&ɃË + - key: yAbhAt1 + operator: ȧŝ$Jɡ4ǖşĥ弧-崽!俒%胖ļ + values: + - Fv + - "2" + matchFields: + - key: n1gUu + operator: 璧鯅羛棭Ż驰~酌]H + - key: zmZ + operator: 仐D屢ƶ + values: + - AgYOv + - prpwQ2Y + - key: NtLyDIwJ + operator: 鲟獽dž颷)0 + values: + - yvXPcl + - U + - EHA1ZUKMn + weight: -1586937060 + - preference: + matchFields: + - key: hx + operator: 洡Ƙp廔糀$i蔂ʋGü篲Ő?<爆ƅ + values: + - s0ixY + - key: bEfMEgH + operator: ƚɢ| + values: + - TbRQ + - grZxJ + weight: 1809119344 + - preference: + matchExpressions: + - key: s + operator: »Ȼ{Rđ/ƜO鰌溟稂) + values: + - lM1fXt0IHd + matchFields: + - key: 6wak + operator: '*ǍȸƟE|鐓ï' + weight: 702698876 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchFields: + - key: i + operator: 蓒A蟞ʈļ肶Ò沟nj蛏纳V柇ʝȽ + values: + - "" + - 0jfeQbt0 + - LY88aj + - key: ye2 + operator: ƾ勾覗wì,Ē%X鹠īĵǦÜɐʧɨ纲 + values: + - ZYJK + - gkVA + - eDNU + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: vVFUAZ + operator: 跽Ǎ,ę3 + matchLabelKeys: + - eGJVem2Ei3M + - m5dgOKm + mismatchLabelKeys: + - qV7Wf9s + - KseQJ + namespaceSelector: + matchExpressions: + - key: wVU + operator: 卾&Ɋ=淇牉Oxÿȥ + values: + - "67" + - chu + - key: cte9t9 + operator: Á雀囹噗6硢0膋莄 ^DǛ-悇2 + values: + - I8Hpn + - GdNwZf + - qhCYuN + - key: yE7Tr4 + operator: Ľ蚒±ņ邜 + matchLabels: + IRz: yglVn3 + namespaces: + - "n" + - LR3tmda9 + topologyKey: LtACPw8s0kl + weight: 551238201 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: trXm5qwh87f + operator: 0熑1A冒畦TƎĕ冋w%&±髙堡譅d + values: + - H3ocU + - j0VfYw3w + - f5ak + - key: BkyAiH + operator: Ȭ请ÍÎĔ蓏 + values: + - XnYAozD + - Qd + - vE7J7 + - key: myzg + operator: êť篧]2忲Å迆ũ7鄋RmɅY鐙頷攮M + values: + - Z1UFC + - p00 + - YeoDwj + matchLabelKeys: + - MxI4 + - Dz + mismatchLabelKeys: + - 7J8 + - WqMUV + namespaceSelector: {} + namespaces: + - VL5y + - 05iB9d + - qJD + topologyKey: RhsB4WrGitTl + - labelSelector: + matchLabels: + g: 9dCA + mismatchLabelKeys: + - 3yXG + - 4pAQseL + - a8u5 + namespaceSelector: + matchExpressions: + - key: vAM3 + operator: 蝹'D^ + - key: 8SjWB + operator: 2ɥ`ƚ忣My>箫ɆȻ=5 + values: + - nlWnsS6 + - mXcFVezB8J7 + matchLabels: + 5zaBYTKDWsPu: 497at + WfP3: a + namespaces: + - p6eyCU + - Qao + - b6TXy + topologyKey: h0y54x + - labelSelector: + matchExpressions: + - key: dvh + operator: Pclj63ǖ薠 + - key: e3D7 + operator: ȿ摼檉ŞH怑卑¸4鱳砤kŷ!懷 + values: + - e + - RY8jM + - key: t2w + operator: ķ¯U廦膷 + values: + - "" + matchLabels: + 90H: "7" + matchLabelKeys: + - m + mismatchLabelKeys: + - 3j8Khu8x9A + - qc6R + namespaceSelector: + matchExpressions: + - key: e9 + operator: 矝穝濾 + matchLabels: + pLT: HjCAZ3Dc + wLmaFn: 9LPrGCAUk8cG + topologyKey: nNeEst7JtnQ + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: cQ + operator: f菏´飼鳍ʐT騇内 + values: + - g2c + - 4G + - key: IJ + operator: YĔ + values: + - SlDsXi + - pp + matchLabels: + q0B: Vg + tqUGv: zJnBeoLSpcz + matchLabelKeys: + - "" + - 1m + - lidPQ + mismatchLabelKeys: + - f9Lx48 + - VH + - 2g49DJ15 + namespaceSelector: + matchExpressions: + - key: X5g + operator: 鑧B Ƴ®¨瞔镽稤Ǯƣ + values: + - y4kU88 + matchLabels: + 8L2DhyPz: H4pSI7a + QPd6GR: ateDxqZmH + ysCPq: Mf + namespaces: + - 61aqeKbIK + - aNQXw2s + - pvG + topologyKey: JBEpmi9R3 + weight: -518664718 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: 3T7RW + operator: ɀʬ埄Z&$ɵʂ球梬篪ɾ + - key: M6BDy + operator: ȕ:'Ǫ蚂ɷW气叼ď爱 + values: + - Lcn + - nt + - key: a4q6kcF5 + operator: 嫔阞wǗ¾洃O+c5鈙 + values: + - c7ml1T5R + - C + matchLabels: + Ea: GxrmiTp + matchLabelKeys: + - 9dkf4g + - EI797kBKWK + - 8tQ + namespaceSelector: + matchExpressions: + - key: hFxwxBCJR56u + operator: '%俁Ʃɝǟ碡蝿''ɺ悉鵗K藪DŽÁ@ȳ旵嚱' + values: + - UUWrNWr + - MSYKxvb + matchLabels: + d91: 95j7rd + namespaces: + - gC3VM + - rLYQOjw + topologyKey: IooOU + weight: 553020618 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: xt48oN + operator: "" + values: + - nF0CLQ + - y4yYtuP + matchLabels: + MEdj: bJJESL9Z1 + tA: "" + xnW: Mtm1h + matchLabelKeys: + - aXzcuYUA + - yc03y + namespaceSelector: + matchExpressions: + - key: Qw7JhqWu + operator: ª裞袡jǦ舭uɥ=kKn + values: + - MaVwc + - XrBL + - key: iZZP + operator: "" + values: + - HKRw + - 57Vp5 + - key: xssctJ8F1 + operator: 蟤Ⱥ沌Ø戔凕 + values: + - TXiV + - Uzpzg + - FET + namespaces: + - DyrF + topologyKey: R4729BSC1 + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=6E02z0oYQUL + - --configurator-base-image=Tzah + - zTsg + - Sv + - 9M23O7X + command: + - /manager + env: [] + image: Tzah:6E02z0oYQUL + imagePullPolicy: Always + livenessProbe: + failureThreshold: 952 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 274 + periodSeconds: 473 + successThreshold: 29 + terminationGracePeriodSeconds: 887 + timeoutSeconds: 91 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 718 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 710 + periodSeconds: 733 + successThreshold: 637 + terminationGracePeriodSeconds: 689 + timeoutSeconds: 465 + resources: + limits: + cpu: "583" + memory: "460" + requests: + cpu: "960" + memory: "844" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - "" + - WO + - I + searches: + - uSzGLWz + dnsPolicy: v#ƁƐÿ + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - lrl0vw + - YJt9t + ip: UYcKtV + - ip: 4uIxYAS + - ip: "" + hostPID: true + hostUsers: false + hostname: 5oCQx + imagePullSecrets: + - name: jUh + initContainers: [] + nodeName: Jb0YiW + nodeSelector: + 7Bii9yz: Y9 + OME: l1 + WXL6yK: CdEcZFp9 + preemptionPolicy: Cɘ¶ + priority: 1799249224 + priorityClassName: x + readinessGates: + - conditionType: ț@5线]茠ŔK?礳籓Ȝ嘟:ʁ窌嵮Ģ + - conditionType: 鋔ɖ惌貓nƭ俜 + resourceClaims: + - name: "" + - name: Vnor + restartPolicy: 法#ƿȁƋ饆袈ɒȳ + runtimeClassName: piASTpN + schedulerName: W72 + schedulingGates: + - name: M + - name: 26sClw3aR + - name: xp9iKar + securityContext: + fsGroup: -5999645359566591000 + fsGroupChangePolicy: Always + runAsGroup: -7858053613302335000 + runAsNonRoot: true + runAsUser: -6325737295439407000 + sysctls: + - name: 7Grq + value: Lf + - name: kZ + value: exDx + - name: qC + value: rrAv + serviceAccountName: WHEsd5gQ + setHostnameAsFQDN: true + subdomain: 3m + terminationGracePeriodSeconds: 9038582553894451000 + tolerations: + - effect: bƇ弮Yr:K抉R飓a结黂Ĥ + key: G + operator: ȓ(7Pĩ Ǽ + tolerationSeconds: -7818649012535975000 + value: ote8FvN + - effect: ʥ岁認榤 ɊĔƭ敽欛RJ + key: U7S1 + operator: ȉ_VQ馳ƀ7~ + tolerationSeconds: -2377395593567595000 + value: awqsGSdpe + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: 0Me + operator: Ń + values: + - DTls + matchLabels: + r9p4MF: iX4o2aJpl + maxSkew: -552013603 + minDomains: -1279133216 + nodeAffinityPolicy: 0抧|8澁2=3鳛·媀ȋĵ( + nodeTaintsPolicy: '{' + topologyKey: ybGWO0YEF1 + whenUnsatisfiable: KƿĻ觮ȑmvǯ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: SnlpK8 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + ij: htyiQR + wsZn: jDMDcnh1rh + creationTimestamp: null + labels: + Q9a: uDXPfw + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v0: 1iClRDvVO3c + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - 8I1Iyd-webhook-service.default.svc + - 8I1Iyd-webhook-service.default.svc.17 + issuerRef: + kind: Issuer + name: 5GoUVR7T-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: SnlpK8 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + ij: htyiQR + wsZn: jDMDcnh1rh + creationTimestamp: null + labels: + Q9a: uDXPfw + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v0: 1iClRDvVO3c + name: 5GoUVR7T-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: 5GoUVR7T-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 8I1Iyd-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: 5GoUVR7T-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 8I1Iyd-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + D: M5xpMC + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + Q9a: uDXPfw + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v0: 1iClRDvVO3c + name: 9r-crd-job + namespace: default +-- testdata/case-073.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + ET9H70: 1pFh + b28jlJ: gH2i + creationTimestamp: null + labels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: r8KRW4 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: "" + health: + healthProbeBindAddress: vDu4Byrze + kind: WZZg + leaderElection: + leaderElect: true + resourceName: B3J5nSv + metrics: + bindAddress: 63kh7z + webhook: + port: 23 +kind: ConfigMap +metadata: + annotations: + M8kdd: rg + SdYUtgj: zuHEEr + ysGlNYAJk: 9XN2vwiVm + creationTimestamp: null + labels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: IsP97jKm-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + M8kdd: rg + SdYUtgj: zuHEEr + ysGlNYAJk: 9XN2vwiVm + creationTimestamp: null + labels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: IsP97jKm-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Pt +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + M8kdd: rg + SdYUtgj: zuHEEr + ysGlNYAJk: 9XN2vwiVm + creationTimestamp: null + labels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Pt-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Pt +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + M8kdd: rg + SdYUtgj: zuHEEr + ysGlNYAJk: 9XN2vwiVm + creationTimestamp: null + labels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: IsP97jKm + namespace: default +spec: + replicas: 1300059575 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Pt + strategy: + rollingUpdate: + maxSurge: 1829832553 + maxUnavailable: 1914125389 + type: ǝ愘媭ºš(Ȝ·ɛ炰ȏP谵ZŢJWǁ + template: + metadata: + annotations: + L0jYB: A5gEIsPpn6 + eN: 9zBUgl + tB1TKvd: gZ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Pt + j: a2vBpk + spec: + activeDeadlineSeconds: -4473331471797640700 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: WtS9OI + operator: 蔢癹霻H戃鄛S滂Ȧ骥汯#9Ʉ磑 + values: + - IfgQb + - KIZI9qHFyZ4 + - 9AkfR + - key: HxNFZalo4X + operator: ' /鵈ʂ岦蟷W''靸wMÜ招淡:' + - key: cwk + operator: 氠 + values: + - DUl + - I7Tg2QAQ1 + - HwbVLO + matchFields: + - key: XHUD + operator: 齞 + values: + - LFjdN + - 9y9GVU + - pImdQW + - key: 46th + operator: Zʧ嫤w輋棋Y鶃'>喺e + values: + - YvTAnoZ + - MqrwRUN + weight: -1667780946 + - preference: + matchExpressions: + - key: oyV2 + operator: TɎɹ罣潋woŝ痆佩fV + - key: lNxmM + operator: "" + values: + - "" + - WZ3y + - iFwwT4 + - key: Txqz + operator: gɳÿ²悊扉|厏ǰ嘽kŝf淊 + values: + - e5K9 + - 8zta + - 9MbX + matchFields: + - key: Fp1JEU4leiiAl + operator: "" + values: + - U8Y7vH + - 84cKUu + weight: -1435032077 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: 7nN + operator: 3w錷.ɢıġ + values: + - 9D + - nwawx + matchLabels: + xJea2DphvCSd: H2V4I + matchLabelKeys: + - Eiq + - pY + mismatchLabelKeys: + - tk5sP2 + - 6jFL0 + - NF + namespaceSelector: + matchExpressions: + - key: w6LCuiR + operator: 罾Ɩǧȸ輄Á$ê@Ǔ鵢Ƚ±C鴘xêʝ> + - key: yjriYJV + operator: ȩ>鱪*藟c#梱ƝM + values: + - "" + namespaces: + - o + topologyKey: 1DypqJK + - labelSelector: + matchExpressions: + - key: IgjgPwpL + operator: -ǰ揌)儧綇z鿱馬爨ǘ僙 + values: + - e4mA + matchLabels: + 97oQcVQ: ZTBkU + IiUrcBfQ: h9Ox3x + matchLabelKeys: + - FCGgC + mismatchLabelKeys: + - Ng2l + - U0sCE6 + namespaceSelector: + matchExpressions: + - key: a4N0mhOu + operator: 砙ä莑ŪȃƔ" + values: + - 5j31oV1 + - jQ + - Ry9FtY + - key: zT3v + operator: "" + values: + - ZUGOWvA5Az + - yMZG + - qjb3DDS + - key: "" + operator: ­裗皊1ʝƾ欟鎱ƻ洩Ⱥ羸ƞð$ + values: + - 2C + matchLabels: + ONHjXf: WMMnrhT + namespaces: + - 72hx + - U166hU2r6y6zq + topologyKey: JpnDY8IxT + - labelSelector: + matchExpressions: + - key: "" + operator: ȫ儮晽Cz_ĆaF^a獰 + values: + - a + - bCNSG6Z + - "" + - key: fBa + operator: ǵ鉟攒{<§Eǐʋ鷨怴恞氈*=Ŧ + values: + - yP59C + - YpED + - KjXa + - key: 4Hb7Gg + operator: 鱚%陫ƌNÿ椁f + values: + - aPv + - gJTm + - nd1WIoc + matchLabels: + 8qy4emP: rnz + FQj95Sk4: wTC1oK + TLe9rk9: 0rMfRXxd + matchLabelKeys: + - N06JQc7qiY + - ij1 + - JNFNiUbG + mismatchLabelKeys: + - 5kE + - 3mxI + - mQ + namespaceSelector: + matchExpressions: + - key: 2nU + operator: 銮Ǿʼn跄ìvŠ + values: + - "n" + - 86w5 + - key: 8zhS9WR6 + operator: ĴĐʩ讨齑njɵ5>謔û`筬 + values: + - ZzT8lG + namespaces: + - jFo + - BEQ + - w + topologyKey: 7DOuy + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + JRBgl2HLhz2: xify57C + ZNNwIS9ficU9: t2SFAI + bGoTegc5: i2 + matchLabelKeys: + - fE2kJcm + - s1MZyeI2Q + - vOfj29L1 + namespaceSelector: + matchExpressions: + - key: n0tNeb + operator: ɚĬčƟ懨ñõ鋽Öc + values: + - CIzuR + - key: caPANg + operator: 6)SÅöNkȍƓ粢蓃İľ竛gƫµ + matchLabels: + V2ZQQ23f: TyI + fyRqME: yYq + j: jryt6D1P + namespaces: + - n9XK + - gdp + - 46iyg + topologyKey: 89mw328 + weight: 471035160 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: Fc5J + operator: 駝?e泉Ƚȃ.łʩŭ«\6U + values: + - dUlUF + - 4X + - NrMJLN5L + - key: XcS + operator: '!#Əo漠ɌÀ{廴Ĺ魷''Ő黅LS' + values: + - Vfx5zI19VL + - nqyavQu15 + - a92N + - key: rV90 + operator: "" + values: + - TltzFD + matchLabels: + d6B: r0WnIivK + xRiHsFz: Dwo + matchLabelKeys: + - lRUNowK + - aIm + - gmM2x + namespaceSelector: + matchExpressions: + - key: nJ6wcK0 + operator: 遼Ŕ礨鷐脐颥雡鸐濪VsD泿 + - key: 1WT + operator: 槵0? + values: + - cOxaCg3I + - key: 40a + operator: XǎolÏä¾ + matchLabels: + 16A1HW: X + Q414: xlhb + SmjL7zlcNgm: PzJxwu + topologyKey: y7uX + weight: 698697850 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: Agq7S + operator: 践9S堵ɘ郓\O歿鎈üɑ怸ţ铦 + values: + - w7 + - S0Zf + - Shuj + matchLabels: + RoMzVq: La + matchLabelKeys: + - JfeT2 + mismatchLabelKeys: + - mLT9uf + - iLBzJde + - 83pbm5 + namespaceSelector: + matchExpressions: + - key: 8v + operator: 曩掺ɷƓg蚯áȬ倣{ƹ'跳溅 + - key: GGo05 + operator: ƛȴ=魕詶P豏7N1倇Ƌɏɷ + values: + - Vng4 + - Ef1S + - 4Ajmlkuz + - key: Gw + operator: ¸Ũ3Ƙ盲hDĉ + values: + - 4ecIh5 + - OBhYox + - UGW + matchLabels: + 1Jvk1K: MCSZs5 + Xh4MDYJ: TSM + xsm4OYL7: RhKDcn + namespaces: + - L1WADE + - NJdtb + - RStHE0T0 + topologyKey: f + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=3ncj + - --configurator-base-image=Ozfq + - 5orCeu + - v7kr + command: + - /manager + env: [] + image: Ozfq:3ncj + imagePullPolicy: Always + livenessProbe: + failureThreshold: 321 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 406 + periodSeconds: 862 + successThreshold: 686 + terminationGracePeriodSeconds: 381 + timeoutSeconds: 131 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 248 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 775 + periodSeconds: 283 + successThreshold: 575 + terminationGracePeriodSeconds: 700 + timeoutSeconds: 235 + resources: + limits: + cpu: "275" + memory: "916" + requests: + cpu: "391" + memory: "252" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - s7h5u7RQdK + options: + - name: WOUE43n + value: Nr26Y + - name: a + value: iO7e + searches: + - E3IgL + - Xb4A1Hhi + - AcuLKAAOS2 + dnsPolicy: ƨ莼ǟ<疄ȵǔ + enableServiceLinks: true + ephemeralContainers: null + hostNetwork: true + hostPID: true + hostUsers: true + hostname: pdJJj0z + imagePullSecrets: + - name: pG + initContainers: [] + nodeName: oerpOC + nodeSelector: + AiS5q: anZtnTwfy + preemptionPolicy: ƙ$ħƦ + priority: 1159578060 + priorityClassName: "0" + readinessGates: + - conditionType: e麏ǍǛp!üĥ瞑Ì唘叁 + - conditionType: "" + resourceClaims: + - name: PAxX + - name: 5SfIIB + restartPolicy: U刞膶ƓP楠ɚ瞼人 + runtimeClassName: ujUXGY + schedulerName: DeAp + schedulingGates: + - name: HNRQD + securityContext: + fsGroup: 6191068330256292000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -7551376484633501000 + runAsNonRoot: true + runAsUser: -4593421443118058500 + supplementalGroups: + - -8514564952898012000 + - -1515799728164621800 + - 2544088899832977000 + serviceAccountName: PkxO0N5e + setHostnameAsFQDN: true + subdomain: K8qFMYK + terminationGracePeriodSeconds: 4708904236068725000 + tolerations: + - key: v2jZ70 + operator: l墯熡/Ȁǀŭ"Ƭ + tolerationSeconds: 6387464848797268000 + value: M7Iwkkc + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: pVTF09oEq + operator: ŐŐ^)ȍ琗DŴķ + - key: Wlz + operator: 秚"Ƴǎ鶙J仚瀵d宝ʀ驐`肪n陬臱曠 + values: + - Fd + - key: pMyYG57 + operator: əʐ裧ʒo瑀ɢ菏ñ\佔üƫ + matchLabels: + IZ6h1ki: Z4 + T: TaAp + t0w: 6RY + maxSkew: -1416850991 + minDomains: 1267419823 + nodeAffinityPolicy: P>堣®}) + nodeTaintsPolicy: k傯0Ơ + topologyKey: 9ErUbIkWTWx + whenUnsatisfiable: 謭š漪ZqiɆ蹖ɭš'0<Ȳ|4;Ɂ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: faro4 + - name: NBK1ScbB7 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + M8kdd: rg + SdYUtgj: zuHEEr + ysGlNYAJk: 9XN2vwiVm + creationTimestamp: null + labels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - Pt-webhook-service.default.svc + - Pt-webhook-service.default.svc.KkAJ5ce2Z + issuerRef: + kind: Issuer + name: IsP97jKm-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: faro4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + M8kdd: rg + SdYUtgj: zuHEEr + ysGlNYAJk: 9XN2vwiVm + creationTimestamp: null + labels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: IsP97jKm-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: IsP97jKm-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Pt-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + M8kdd: rg + SdYUtgj: zuHEEr + ysGlNYAJk: 9XN2vwiVm + creationTimestamp: null + labels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: IsP97jKm-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: IsP97jKm-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Pt-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + ET9H70: 1pFh + b28jlJ: gH2i + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + "": "3" + N9sd2SXL: f2jOHWU + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Pt + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: r8KRW4-crd-job + namespace: default +-- testdata/case-074.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: mywUt8tuv + health: + healthProbeBindAddress: lEjIvsWJ + kind: xeKMrAMG + leaderElection: + leaderElect: true + resourceName: y36 + metrics: + bindAddress: sn1CAiMF + webhook: + port: 391 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + 6tS3Gzxd: hgT9pfe + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4MPmeCPMB + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dHTgQf-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + 6tS3Gzxd: hgT9pfe + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4MPmeCPMB + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dHTgQf-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 4MPmeCPMB +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + 6tS3Gzxd: hgT9pfe + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4MPmeCPMB + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 4MPmeCPMB-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 4MPmeCPMB +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + 6tS3Gzxd: hgT9pfe + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4MPmeCPMB + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dHTgQf + namespace: default +spec: + replicas: -43968875 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 4MPmeCPMB + strategy: + rollingUpdate: + maxSurge: 861090835 + maxUnavailable: 1344206621 + type: 黛g°CÑz書嶁綺Ɩ觗ȁɇ1C窏Ǻ掑瞝 + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + 0N: HPYHri + OF: "9" + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 4MPmeCPMB + sV6F: "" + spec: + activeDeadlineSeconds: 5605029791004607000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: 29pz6m + operator: ɒ枊 + values: + - H + - GsmPZVPg + - qhLjEE2 + - key: aokb + operator: 賾 + values: + - f + - jj + - "n" + - key: lj9biws7b4 + operator: T殷靈蒓ɜȟƱ躀+崢Ǭ + matchFields: + - key: "6" + operator: ɂ门s剃Ȧɇrƀ ʁŒ銊ɚƬ帗ŊY + values: + - Dp3I7EZ + - key: "" + operator: ɿ`釨m傮牜jjɚ4ĥ眲禳咈 + values: + - rqTIcSKPDCM + - key: cFnV7K67 + operator: '`坎''芺ȟ' + weight: 1798342112 + - preference: + matchExpressions: + - key: Zv21MQex + operator: Ņ娑飳ĿŠ眻S絺磂ojLjwuXɶÝC% + values: + - "1" + matchFields: + - key: 5LN + operator: '}眙!ůŪe4ŢpCƌĥȏ愩Ȼ牭h' + values: + - kRmh + - qW + - key: zb + operator: 嵯â鄂E攐QŤň5 + values: + - F + - dDYSHp + weight: -1824401339 + - preference: + matchExpressions: + - key: "" + operator: we-ŵƹRʐ蹥 + values: + - b8T + - EH + - M + matchFields: + - key: zH97 + operator: ʪ + values: + - MNt + - 4Co + - mHm72jT + weight: -1301190656 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: E8ERmHeuRZ3 + operator: '}颩柫ȟHz阗聄sɥa7r]&' + values: + - RE + - ZZ + - WwOU02JqhKSN + - key: qQfq6fdwQo + operator: '|s4啡搾|' + values: + - bWr3lRF8cdngh + - key: GlH + operator:  aȎĴƧQ絆Js6 + values: + - 2qtxfd3u + - kWed + - z + matchLabels: + goi: gfbJHCPb + msPUfCDOxV: ku + matchLabelKeys: + - EyDpC9 + mismatchLabelKeys: + - Pu + - "5" + namespaceSelector: + matchExpressions: + - key: Udjo + operator: Ć + values: + - lq8im2lc + - p9hA + - YVwuOp + - key: CkDeO + operator: łĨ觩?Ĝ#詩ʬa枅龆鐝|ŎŲò + values: + - YTD + - tHjV1 + - C2K + - key: wjII3N + operator: ɂ%0Ǻď + matchLabels: + 6aJdy4: "n" + namespaces: + - rJe8ts + - O5zk8 + - KvN + topologyKey: Jhx4 + weight: -264164496 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: L + operator: 穢kŝ!ȇ槄m殃迅鬇愕懆櫋 + values: + - l + - 5JA + - ur2pXHUlz + - key: R8xGdHg + operator: ƿƛþǽć霄 + - key: wwRWJw51 + operator: 砒Ǥä蘱趢[O + values: + - R + - AU + - kdwH + matchLabels: + PD: T + mismatchLabelKeys: + - A8qsTHJ5ZbMK + namespaceSelector: + matchExpressions: + - key: BT4x6 + operator: VŴ瓔X>ǒ° + values: + - 1yLB + - f3KFrgJKJiE + - key: "2" + operator: ɩ鈉ʜà耯 + values: + - DTAVD + - fAXv4 + matchLabels: + 9zVWUzsHJ: TFe9I + 48UKSy: gHQ7B + KcVgD: bzIxKS6sn + topologyKey: iiY6f + - labelSelector: + matchExpressions: + - key: jSMEy9tj + operator: 殷峆ɋ陱緩ʯȐ璪Ȓ击%Sʖ煛e(奫鬺秳 + values: + - Jb + - 9iiNXF + - key: 8e + operator: 諃掦 + values: + - 26q7hr + - P0 + - key: oQ + operator: '''蠁^戨5NVn<差s觨煕呠' + values: + - sXHEgze6r9JP + mismatchLabelKeys: + - Wjont + namespaceSelector: {} + topologyKey: NpYPYvTMBHqc + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: uv + operator: Z舽皾B8ʝʼnn奮鑳 + matchLabels: + DZNzSypnNd: OM + matchLabelKeys: + - NR0 + - GL + mismatchLabelKeys: + - "6" + - QfJ22cik + namespaceSelector: + matchExpressions: + - key: "4" + operator: 稇j´=iýɰ + values: + - msBBCt + - BYK7j + matchLabels: + EQy8E: k9p4 + qA: i9g + namespaces: + - Zy7qVf + - Cgqu + - bU2 + topologyKey: BI7G + weight: -570707983 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: 6vKbNM4p + operator: 陥t殷~ǩʕ霸¹ŧ + - key: b1sSLKMIk + operator: qC夨6獮丕»ƴɈ + values: + - "n" + - O2p9W + - 0AFawSrw + matchLabels: + 3tI7I: "y" + IN9: "" + LtnEuZ: d4tf1IZE3 + matchLabelKeys: + - je + - 79Ppx + namespaceSelector: + matchExpressions: + - key: S6 + operator: FXǴ + values: + - Sqrf2 + - mu + - key: o + operator: 夆 + values: + - txYP1ujkZWO + - 7iab8KMe7A + - F4LIf + - key: KjJ + operator: Ʌ諭bʒll罌床 + values: + - "" + matchLabels: + jFkqSGhA: AQzK0Z9 + q6Oev: 9veSz + wR4R: p + namespaces: + - lT + topologyKey: Knl2pTupr + - labelSelector: + matchLabels: + 5smDgD9TD: W66iRY9Uc + 9qTg9iB1: AI1fB7 + p0i: AtyQqRAriE + mismatchLabelKeys: + - o3dWg5L + namespaceSelector: + matchLabels: + 9DwVlkD: 9GPaQR9HR + tz5: efgpCt + z0: owPgU + namespaces: + - H7dPr + topologyKey: WB + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=8YPjvr + - --configurator-base-image=w3qgVe7 + - "n" + - H7B3A1m + command: + - /manager + env: [] + image: w3qgVe7:8YPjvr + imagePullPolicy: Always + livenessProbe: + failureThreshold: 617 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 538 + periodSeconds: 45 + successThreshold: 413 + terminationGracePeriodSeconds: 624 + timeoutSeconds: 978 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 595 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 506 + periodSeconds: 408 + successThreshold: 243 + terminationGracePeriodSeconds: 297 + timeoutSeconds: 213 + resources: + limits: + cpu: "636" + memory: "523" + requests: + cpu: "206" + memory: "172" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - bga8iMz + options: + - name: YZZ + value: gk + - name: T1 + value: nTT9rY + searches: + - laTKpor1A + - eBE0i + dnsPolicy: 犓ʈ髌^?脰蜫霩 + enableServiceLinks: true + ephemeralContainers: null + hostIPC: true + hostUsers: true + hostname: fe + imagePullSecrets: + - name: Dm9pfeb + - name: ivq7l0 + - name: jrO6LT + initContainers: [] + nodeName: ZTyPf + nodeSelector: + 7MLcksU: bLkMrL + OyGw: IZ + QPHL8: x9 + h: LVPqH0 + nz: jL + preemptionPolicy: ǦǬɄ歿煸ȍ矦澎ȕ'瘝njQɟ哓 + priority: -1800304797 + priorityClassName: VaSOV98 + readinessGates: + - conditionType: Kǘ嗆无秼炫掟聫ç庖撬6沙gɖTS·Q + - conditionType: ȐŐʝ螛厔ò.汚ǦũT凅匳Œ蜔1蠤柫 + resourceClaims: + - name: cON3C3Auy7T + - name: oBb91o + restartPolicy: ŗ + runtimeClassName: 1jv + schedulerName: gD + schedulingGates: + - name: YENK8 + - name: BD4ibDV8U + - name: ylCnVd + securityContext: + fsGroup: -2860612089304590000 + fsGroupChangePolicy: Always + runAsGroup: -1827725402989350000 + runAsNonRoot: false + runAsUser: 8839503618715715000 + supplementalGroups: + - 2412557130195790300 + - -7346098406697862000 + - -4814383466567724000 + sysctls: + - name: kJ4ycc + value: 0o09 + - name: StUND9 + value: 8a9tO + - name: GommwMBaA + value: NqvEE + serviceAccountName: C2ljrknKo + setHostnameAsFQDN: false + subdomain: vJD + terminationGracePeriodSeconds: -6615004201982806000 + tolerations: + - effect: Ɠ癏A诔Ǭ*,ŧ筪Ê3aąm烘  + key: i8cH793 + operator: ɦw匝鞱ɏ弳簪1SƱĩħ2K滥 + tolerationSeconds: -3374367227524388000 + value: 3j4 + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: CrqiYWNMp + operator: ǒD貯6,{w\(ȢU? + - key: fdx7 + operator: æǃĺ|%ʡR曷Q瓞Ú + values: + - jalZ + - key: HaURTVl + operator: ɌL妨涾Fȵ`l騅ʼnS + values: + - C + - GG + - ozmK4 + matchLabels: + R: Utb6ETP4 + matchLabelKeys: + - nq5L8J + - u6zb93 + - lfNz6 + maxSkew: -546249673 + minDomains: -459798189 + nodeAffinityPolicy: zɽ莄/3录筘ʅ8 -ʞ + nodeTaintsPolicy: ev訅)麤Ƈl泚Dž氜õ + topologyKey: lUBy + whenUnsatisfiable: 蟶ŁȠÔ0谏 + - labelSelector: + matchLabels: + gjMYRi: 2RlZeR + vczCL: eTK7Jnk + matchLabelKeys: + - DQtU0 + - 6fvPm + maxSkew: 375766521 + minDomains: -551712245 + nodeAffinityPolicy: vǵ鳈 + nodeTaintsPolicy: ĄƠU`P紪d訿亸Ëö牷ã + topologyKey: "Y" + whenUnsatisfiable: "" + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: CcbjlS + - name: Y1n8j1syq + - name: m45i4rPu + - name: t3Cy +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + 6tS3Gzxd: hgT9pfe + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4MPmeCPMB + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - 4MPmeCPMB-webhook-service.default.svc + - 4MPmeCPMB-webhook-service.default.svc.YI + issuerRef: + kind: Issuer + name: dHTgQf-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: CcbjlS +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + 6tS3Gzxd: hgT9pfe + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4MPmeCPMB + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: dHTgQf-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: dHTgQf-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 4MPmeCPMB-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: dHTgQf-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 4MPmeCPMB-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + TfmSjDQ: xDJr + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + iMdWdUM: SiPHNH6j + oFoZcs: 8LViNh0JD + creationTimestamp: null + labels: + 6tS3Gzxd: hgT9pfe + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 4MPmeCPMB + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: xPlFoa8U-crd-job + namespace: default +-- testdata/case-075.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + e6mSM: MVXAO + zKu2Al: wC + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: "567" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: E6z + health: + healthProbeBindAddress: rxHDaXPt + kind: EETFn + leaderElection: + leaderElect: true + resourceName: k8 + metrics: + bindAddress: Nuy + webhook: + port: 320 +kind: ConfigMap +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: +<<<<<<< HEAD + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: Hjo9sbxO-default +subjects: +- kind: ServiceAccount + name: "567" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO + namespace: default +rules: +- apiGroups: + - "" + resources: +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +<<<<<<< HEAD +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-rpk-bundle + namespace: default +rules: +======= +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +<<<<<<< HEAD +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: Hjo9sbxO-election-role +subjects: +- kind: ServiceAccount + name: "567" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: Hjo9sbxO +subjects: +- kind: ServiceAccount + name: "567" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: Hjo9sbxO-rpk-bundle +subjects: +- kind: ServiceAccount + name: "567" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8ZgI1VH +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 8ZgI1VH-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8ZgI1VH +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO + namespace: default +spec: + replicas: -524693962 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8ZgI1VH + strategy: + rollingUpdate: + maxSurge: 596897809 + maxUnavailable: 476555247 + type: Á.ɫ鑧8颶 + template: + metadata: + annotations: + "": gl6v + M57szq: J + j96kfNUus: Ijr55i + z1la2G: S9Z4dW + zWc6Q: BJX + creationTimestamp: null + labels: + Lp: YkknZbO + Yp39: "5" + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8ZgI1VH + jAdo: EO + spec: + activeDeadlineSeconds: 8860282710824060000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchFields: + - key: NjKat + operator: 8螫ȗ鿬擧疿Ȉ"Í艓ŀȞʂ + values: + - Q07AV + weight: -671966542 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: JdLPzIs + operator: 虶.久诗6焱4ûȹİR均窼Iz !ʣ~ + values: + - g10v6 + - Ye7T9NByS + - UHKd + matchLabels: + CnWM: Td2 + EpaY: iD7y + XU1g: "" + matchLabelKeys: + - 6rLaeisT + - eXD4 + mismatchLabelKeys: + - jksVjgbzc8 + - 1ESly7NIox + - Tf6ZqIhHbE + namespaceSelector: + matchExpressions: + - key: k5XlXm + operator: 3C料 Ĩʬɥr9猲ŏb + values: + - IZ3 + - S8n6hDZM0 + - key: 0T1i78Zr87 + operator: ȉ蔝Jɞ坟挢Ȍ篵 + values: + - kkn6pKzGi0 + - L3JML + - UlSVv2BdK + - key: G4CooKG2g + operator: 妷ȓ賸髋L捙¢ɼđ=lL嬑Ƒ + values: + - zAcj + matchLabels: + j9pPtlwzC1L: Wcao + namespaces: + - q + - nQjk5TJ + topologyKey: v + - labelSelector: + matchLabels: + X5IxJRjL: Z + uUAzszYsIv: MQoS + xT7h: aNUmPsb + matchLabelKeys: + - TCSw35Qar + mismatchLabelKeys: + - zz3 + - x0UG7P + namespaceSelector: + matchExpressions: + - key: UWyVNR + operator: Ū,¤栈騴ȵPmʏ*欍D3ƩǞ謯 + values: + - X5 + - 30QC + - key: AYTFwhY + operator: ZbƮX淊ʖVǕǎ齘Őȿŝǃ + - key: r + operator: 萒Ǹ蔂Żȣ鎢eɩ瓱钆璊ȃ鳟Nƿhņ + values: + - VM7fJ + - cuPKF + - d + matchLabels: + 3se: xpRnM + MjKtZoqo: A9Gi + bwC: 8uPx + namespaces: + - jc + - "" + - 4o + topologyKey: g + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: VVc4ZUl + operator: 6锈ĤǪCâ,?遞ȴȿ憩 + values: + - OlFd5KNuAd3J + - i7yr + - key: rbVsKp + operator: ʤƞƷ釻鷆Ǥ蚂晩悅墴f + values: + - FdjUOhW + - key: 0p0ze4wO2Ug + operator: 7幔{睱ƔyƖʜ郹` + values: + - P4z + matchLabels: + auDXF9AYZn: lX9ux + uAP: MXn + namespaceSelector: + matchExpressions: + - key: 0xEOAYJPk2z + operator: cǷŔvĻ諢鯳sȜȋ"gȥ^i扛粐拇 + matchLabels: + X: 649QQrf + namespaces: + - wEB + - bd2 + - Tu47 + topologyKey: VJ5 + weight: -433891957 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: 50XhN1ox5Gz + operator: ă縠樜肾醲ʪǙGbƊ坝搔棼KC + values: + - "" + - ArO + - key: "" + operator: ;śÇ咎v + values: + - VD + - L5oyxK6o + - RneGz + - key: JgcCF + operator: Ă刁晋攴Ã×灝颼Ȗ0鱷ɮżǃ勣甬渔諨ɗ + values: + - sucw + - 2xTwY + matchLabelKeys: + - mUlPcM + mismatchLabelKeys: + - NTaltxi + - HCj + - wSN + namespaceSelector: + matchLabels: + "": "" + 7B: UhZIlRd7NS + topologyKey: ldQ + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=hk + - --configurator-base-image=9kg + - eyxGhI + - 9YL + - 6HEr + command: + - /manager + env: [] + image: 9kg:hk + imagePullPolicy: Never + livenessProbe: + failureThreshold: 501 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 430 + periodSeconds: 301 + successThreshold: 779 + terminationGracePeriodSeconds: 220 + timeoutSeconds: 656 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 847 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 377 + periodSeconds: 911 + successThreshold: 668 + terminationGracePeriodSeconds: 881 + timeoutSeconds: 52 + resources: + limits: + cpu: "483" + memory: "426" + requests: + cpu: "582" + memory: "5" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - 4mEBMGUN + - eW0ncQ1 + options: + - name: fGdpRd + value: "" + - name: a68vK + value: fFsKfckTBell + searches: + - DGNape + - sTUo + ephemeralContainers: null + hostAliases: + - hostnames: + - S7 + - Nb + - MSI1c5z + ip: PO + - hostnames: + - oCyf + ip: zigho2MJj + hostIPC: true + hostPID: true + hostUsers: true + hostname: Q + imagePullSecrets: + - name: dO + initContainers: [] + nodeName: 2NjpJ + nodeSelector: + 8X: FmCUcCRg + JUps: pHT46I1 + Jo11wn: qv + KxkrbPV: BfrcT + o4: QmvS85 + preemptionPolicy: 抝鸁!ɢưʩõ!¸宁剓Ǖ硰 + priority: 1899005886 + priorityClassName: QdsxfmGTz + readinessGates: + - conditionType: 薜K5羜}_ǜ.ȼÏu摴À + - conditionType: mɶ蔼峫兩ƏɤɁ + resourceClaims: + - name: F1E + runtimeClassName: vmC7Hvzm + schedulerName: 4UKQ + schedulingGates: + - name: rnq + - name: 2V + securityContext: + fsGroup: 8926242825143552000 + fsGroupChangePolicy: Always + runAsGroup: 8747486125952529000 + runAsNonRoot: true + runAsUser: -451060548145037500 + supplementalGroups: + - 3746112542108710400 + - -6527083130648772000 + - -2015245842731106300 + serviceAccountName: "567" + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: t1GfKasszD + terminationGracePeriodSeconds: -2460823117072627700 + tolerations: + - effect: ƽqêTȨ茬鳰质襭 + key: Nq5 + operator: 烡t裖ɤſƼƥ蟨V士踏Ċ + tolerationSeconds: 6699689125267329000 + value: wKVtov + - effect: 嗘採鳖 + key: 8y9WC + operator: 艽œɝKʖ萣殹ɅA2鳷{鯽垲 + tolerationSeconds: -2365666611357915000 + value: 4nCYmTIs + - effect: 渡悵z了揾Â. + key: bLxG9ujcZ + operator: 筋Z煭ƞ,犃 + tolerationSeconds: 3907366189500161500 + value: GhmdPdN + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: cX + operator: 出ŊǹOǔƱG + values: + - 0tJrY + - iFkr4hmK + - Xy + matchLabelKeys: + - dXst + - LK2q + - NqP64 + maxSkew: 1537329546 + minDomains: -1720337935 + nodeAffinityPolicy: ȓ籴ɭ$ȼ6¬慈B + nodeTaintsPolicy: ɚ,ɝƲ溤宗Ê轧ƞ| + topologyKey: "" + whenUnsatisfiable: +hē}鿐suwo諗hz豴ȴɮ + - labelSelector: + matchExpressions: + - key: PYDcUs8Zq + operator: 铇秫 + values: + - SqDWeja + - tTedc + - wb + - key: 8zULko + operator: 疄 + values: + - fAUHq + - ZZOhi + - "7" + - key: 6V + operator: nč彝}ʇTi嚡vMȸ昻 + values: + - h + - "" + - 8AQ0 + matchLabels: + 4kmh: QCa + VXwKZfw: LO8AyhU + hWrGDCfa1Ij: 9zFgf08 + maxSkew: -275470034 + minDomains: -1225374972 + nodeAffinityPolicy: 蠱擙 + nodeTaintsPolicy: ĘįÇɸŦ菽彅`虞 + topologyKey: i + whenUnsatisfiable: ',ɯŚ(ɖ叕Ȉ8芒杋_LJ鴄ȢVǬ醺' + - labelSelector: + matchLabels: + OZyVul: PQQ8b1 + cL3I9BNam: EzlBz9 + matchLabelKeys: + - brAOgDpDb + - FZNd90EVkKB + maxSkew: 1309446521 + minDomains: 250354744 + nodeAffinityPolicy: ɦv佸ʝ + nodeTaintsPolicy: 男ǂȄx + topologyKey: i8m8 + whenUnsatisfiable: 荩Ŧ\攽ƾ槉E{蔄ʑź + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: pV + - name: G7ezke +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - 8ZgI1VH-webhook-service.default.svc + - 8ZgI1VH-webhook-service.default.svc.iuxdfE + issuerRef: + kind: Issuer + name: Hjo9sbxO-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: pV +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + qA: WyamBB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Hjo9sbxO-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: Hjo9sbxO-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 8ZgI1VH-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: Hjo9sbxO-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: 8ZgI1VH-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + e6mSM: MVXAO + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + zKu2Al: wC + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 567-crd-job + namespace: default +-- testdata/case-076.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 8MCt + health: + healthProbeBindAddress: "54" + kind: hFpDu + leaderElection: + leaderElect: false + resourceName: JCxBXAw6 + metrics: + bindAddress: Av + webhook: + port: 329 +kind: ConfigMap +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch +======= +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - watch +- apiGroups: + - "" + resources: +<<<<<<< HEAD + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps +======= + - configmaps + - pods + - secrets + - serviceaccounts + - services +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events +<<<<<<< HEAD + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes +======= + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + verbs: + - get + - list + - watch +- apiGroups: +<<<<<<< HEAD + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +<<<<<<< HEAD + - cert-manager.io + resources: + - certificates + - clusterissuers +======= + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +<<<<<<< HEAD +======= + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles +<<<<<<< HEAD + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles +======= + - rolebindings + - roles +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +<<<<<<< HEAD +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: +<<<<<<< HEAD + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 8K2N-default +subjects: +- kind: ServiceAccount + name: YP12Q + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 8K2N-election-role +subjects: +- kind: ServiceAccount + name: YP12Q + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 8K2N +subjects: +- kind: ServiceAccount + name: YP12Q + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: an +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: an-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: an +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + Ou: tUUeg100 + QOCh: CAl + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: an + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + ib: 8cz + mKZJ: qFJ + name: 8K2N + namespace: default +spec: + replicas: -2075530003 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: an + strategy: + rollingUpdate: + maxSurge: 2081592605 + maxUnavailable: 1885460453 + type: Wû.$Ȋ岭ÿ蜪郁`{`Ʃ + template: + metadata: + annotations: + AkeDnt5VPkKPy: "3" + Fr5Hh: v5ePByX47 + G: zDZSnjZA + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: an + gTaNkih: g9Tr2xh + spec: + activeDeadlineSeconds: 5799411821181429000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: CYk + operator: D窖曏Ȟ + values: + - UWI + - JU + - FJ + - key: jPl1iS8UXT + operator: ŗ² + values: + - uvH + - tO6XE + matchFields: + - key: "" + operator: Ʈ叐另5t綀ȝ° + values: + - NETx + - RKzy1 + - key: csKN + operator: 抦Ɖ犘Mƶ涫ĭ + values: + - 0d7K3CL + - key: 6aFsNI + operator: a氙š宕ȩ酑ƷRđY5抩ȧɛ貪繮堀媌ď + values: + - J + - "2" + - 42g5QN + weight: 247115514 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + 85yJ478d: Vo7 + NgQ5EH: o1bl + Z232YGd: Aep0 + mismatchLabelKeys: + - hI + - eIuV4 + namespaceSelector: + matchExpressions: + - key: l9AE4D + operator: "" + - key: NYsDY4i + operator: ǺYʄȨ_Ʈ,!Ã1ƮG睇 + values: + - M4KMQQtSS + - LY7S + namespaces: + - ohq + topologyKey: 9RQ2Zix2lXU + weight: -77294897 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: Eg + operator: Njƥʩ儐嚸氠ƀĆ垜 + values: + - t8T + - hag + - key: HJngluMZ1Gt4 + operator: 飗阂Ț + values: + - VcI + - tRuMlK + - GWMq3PG + - key: HS5QS + operator: TX屒~ÈJ + values: + - 69slSEWwH6N + - p + matchLabels: + 7x: nkheJ + 8yV5foq: 6kWv + nHtYZe: aLoixy + matchLabelKeys: + - 0CQ + mismatchLabelKeys: + - Zzfc + - p + - rOvKTF + namespaceSelector: + matchExpressions: + - key: RdOt + operator: 'ù§蜔醫(˯JÁ偻:' + values: + - i45 + - Fy4G + - "" + - key: 1eR + operator: "" + values: + - NianifQ + - key: CU8g5nTV9R + operator: 蟷<ʭ闻[恣Ɛ劉唌!E«栂 + matchLabels: + "": VZ6myuoXR9 + "7": SNzG + namespaces: + - ter5SPqDJ + - 6J + - gzGOT + topologyKey: uu + weight: -483029993 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: E1dAP + operator: ɵ`/Hû鬫Œ埙伋tĻȉ + - key: Yfh2 + operator: aɢÚɕ厀跈ŕǤ + values: + - q + - CNmr + - 8hZgCz5 + matchLabels: + G: kvGnDJb + uyI: GcT + wd4NZ: hlGF7 + matchLabelKeys: + - V62aP7 + mismatchLabelKeys: + - yLn8 + - n0b + - mNd + namespaceSelector: + matchExpressions: + - key: MgB + operator: ö敝蹍鱈r拖亴ǯNJdzk砎Aɞ + values: + - UKLTWJdvIS + - dZxRDbCPGw9g + - key: 79f + operator: ǯ繠ɜŜ懵櫳Ȉ箪o + - key: pltHB + operator: 塞)l忞@ + values: + - Dx + - whKmqiD + - TYUiI + matchLabels: + P87YGTPtc: uO + hOhm7hGh: tj + topologyKey: KZpV + weight: -574325726 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: sM18uA4 + operator: 1;cćô麗ķÞȪ/D1l錐hǐƧ®T + values: + - HlAb + - t + - key: QKJ2PGSlUU59 + operator: 扺蓄@蛀折扤#0Ƃ + values: + - XgJkOw + - key: t + operator: a萉Ū舐&NȐ賁諥旴4ī{Ǚėßȡn + values: + - oMj8iy + matchLabels: + inDd: "" + mismatchLabelKeys: + - 4Cf + - bzeKW + namespaceSelector: + matchExpressions: + - key: BZNNJ3 + operator: Òȕ瀦DZǦÝhɰ巗ȝ湹Ģ薵 + - key: hsnivgy5 + operator: Ł乗Ƃ + values: + - z + - 2XgDH + - r8P2 + matchLabels: + WrKQ: P + uO: NjkzU2I3 + topologyKey: X1v + - labelSelector: {} + matchLabelKeys: + - pWRDj + mismatchLabelKeys: + - Toir + namespaceSelector: + matchExpressions: + - key: aO + operator: '*kn摹ʬ.艂ɹȊešƳNDZȮjN闐' + values: + - v62 + - id0OWM + - a + - key: nfEz8wh + operator: 蜐溊ŽʆbNjJ撻狽y+鸻栂枡 + values: + - v7Ceau + - wjfNLJAz + - o851xqcUl + - key: uM1a9 + operator: -lɴ;þ\睖咟储Ɯ穆ɭ.ŀɍg浊è + values: + - 2hZZ0 + - c + matchLabels: + "": t + namespaces: + - kZjv + - JnaG89i + - cw + topologyKey: mNZR4WV + - labelSelector: + matchLabels: + "": "" + Jhaaujnc9: SIzPY + pyYNPwm: ZVJxhvAKL + mismatchLabelKeys: + - Y4Irc2Irno5o3 + namespaceSelector: + matchExpressions: + - key: u8vap5 + operator: Āł鎝嚽q惞é蒐瑂Qŋɶ:ȽO姡 + values: + - rQ4Fgo4 + - yphu9q + - key: R6xr + operator: ¼ + matchLabels: + 0xoWeHaR: UWA9sYUtyE + Hm366a: q + topologyKey: WVSXai0Q + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: kOtCJmi + operator: Žȣ1OǠȌĎɮ + - key: Q4Ql + operator: '[rɄų堛' + values: + - HcBejxu + - xfu + matchLabelKeys: + - XGNT + - D0dDfOI2 + - 4i + mismatchLabelKeys: + - T1lgExlW + namespaceSelector: + matchLabels: + ETK2M: q + topologyKey: eO + weight: -227304814 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: 4p + operator: jmCN冮}7阵ïA{ + values: + - NCSN + matchLabels: + 3hitzIhY0: kRzg + matchLabelKeys: + - Wfq + mismatchLabelKeys: + - z4Qsp + - Ba6V + - 5l + namespaceSelector: + matchExpressions: + - key: cx + operator: 锐h + values: + - 4hzpDaSK + - W1K + matchLabels: + s1Fu: GAMiUZ + namespaces: + - IH + topologyKey: "n" + weight: -779432579 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: d4xP + operator: 譵簿Ĕ葉 + values: + - kzLbV + - 2Rpm + - key: IXEAa4i9 + operator: Ă垁疞Ɏf捣狖踃ʨmǾ竭Q,ƧĂV牲 + values: + - Bff + - key: 1r + operator: ÐlľȻ諑ǀ蘒~ + values: + - YXxr0 + - jr7l3j5CH + - a46rQd + matchLabels: + 6eV: 1ZiOZ + jj: X3Otox6p + matchLabelKeys: + - kLFD1Nt + - vqPu + mismatchLabelKeys: + - UI9S + - 7qP9 + - Ugqd + namespaceSelector: + matchExpressions: + - key: ai4IgX + operator: 鄖Ĥ(p囜Yvȴɤƭȑlpi6鐚 + - key: cExFkkWl + operator: 伹鷳焑恁鱑ĎŜ + - key: a + operator: 6頎漙ʘŮ萛aS寐·Ǫß!qġ-WǤ( + values: + - CWVc8ngf + - EPis19IEdL + namespaces: + - FSApYwCg + - U + - Qp + topologyKey: 9CYHm + weight: 478561448 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: LbtXK0 + operator: 阄另嶋b(祢> + values: + - S7a9 + - zfEMJo71O + - kLVe + matchLabels: + "": l9hC8Y + ZP1: xG + matchLabelKeys: + - IYGUJy0tZTD + - fDT + mismatchLabelKeys: + - Ilfs8EI + namespaceSelector: + matchExpressions: + - key: p6ZXg + operator: 0戺ß莤顬鴦Qů + values: + - I9igEx + - kYK21Q + - C0Qbx5WE4ryE + - key: dk6u + operator: 镱ʩbd + values: + - PYA + - Jk5c + - 8ytiAgm3I7e + - key: qcqeq + operator: ʁȜ摇撧Ñ说P逇ɚ.W _E壟ʇɮ睃 + values: + - y8A4HwS + namespaces: + - Vj1hYzNpa + topologyKey: kbejvw + - labelSelector: + matchExpressions: + - key: Q + operator: 'ķƜ戺ʮũ?菵Ó釘羸¤JʒǠ ' + values: + - F + - 7IKAX + - cp7sv4p + - key: nA6Xe + operator: ƌ姺踤,ơ虌袧]葝sRƛ + values: + - wPrrV3Ufhj + - qlnoxIQCNv + matchLabels: + 8r: 8lk4CAL + AN7nb: dZhZ + matchLabelKeys: + - CVDiPfS + - c4Glm + mismatchLabelKeys: + - xy1Wyd + - nKj + - eBImiHdI6v + namespaceSelector: + matchExpressions: + - key: 8KpuaONbUs + operator: FzgB轅籵鏣Ĥ湅À貏Nj扏4 + values: + - wmca + - L8Za8l + - j + - key: adh + operator: Øž + values: + - jFNIl3t + - Yj6dW9 + - key: bTbI8OzS + operator: 铽§紜č芒ȶpǽ嘧 + values: + - "" + matchLabels: + "": TN + topologyKey: D5FE + - labelSelector: + matchExpressions: + - key: vdSWz + operator: ĸne鐱$C慂_|ȒPĬ + values: + - cEH3048FJt + - key: TG30D + operator: '[幁I蟧&>¢ťȦ''蜛ÐB>' + values: + - lAXsg + - 6nfeIMWRdjcj5 + matchLabels: + sxc: 3PThK + matchLabelKeys: + - I4G + mismatchLabelKeys: + - mAf + - ANIKx + namespaceSelector: + matchExpressions: + - key: hPuq + operator: 7ʂ鐤o舦yW螅lÂ/[顯LQ + values: + - La9apqCGq + matchLabels: + vYBX: wRg + namespaces: + - s + - tHp + topologyKey: 6UDS7Or + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=McKTb81 + - --configurator-base-image=D43Nf + command: + - /manager + env: [] + image: D43Nf:McKTb81 + imagePullPolicy: Never + livenessProbe: + failureThreshold: 136 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 391 + periodSeconds: 132 + successThreshold: 75 + terminationGracePeriodSeconds: 572 + timeoutSeconds: 573 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 680 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 563 + periodSeconds: 529 + successThreshold: 787 + terminationGracePeriodSeconds: 402 + timeoutSeconds: 84 + resources: + limits: + cpu: "890" + memory: "496" + requests: + cpu: "519" + memory: "201" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - 9vmm6l + - rtQO + - ycvTf + searches: + - mb00 + - G + - "8" + dnsPolicy: ' 觩.ʜ{X俓ğŇ倆[魀氎ƶ澷扈Ǫ' + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - Ax + ip: 27VC + - hostnames: + - OHbL9b2Y + ip: n0WUVdZ + - hostnames: + - Lr2p7xlD + ip: p + hostPID: true + hostUsers: false + hostname: vXNpWb3Q + imagePullSecrets: + - name: RRfZPIJFA + - name: 8F + - name: S + initContainers: [] + nodeName: 9U5 + nodeSelector: + JfRWThU: e0lo + VmcbYx1: 3iv81ur + preemptionPolicy: N發A>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true +<<<<<<< HEAD + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - RGKmo + options: + - name: XQcPRL + value: ZYcO + searches: + - yJkd + dnsPolicy: ǡ譶ɱĿÙXƨ9ȚYȺiŅöǫ瓯ɱ氒Á + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - d + - aY2 + - C9YZO2rtm + ip: AOxSTQhIMifUsX + - ip: r9Tn2 + - hostnames: + - oa0 + ip: F1h + hostIPC: true + hostUsers: true + hostname: R9mUvbeZtG4fqR + imagePullSecrets: + - name: oyd + - name: 0bMDpG + - name: xJ8O + initContainers: [] + nodeName: aZKQFB + nodeSelector: + 7hu: h + "45": 72YHvjmjC + Qb8GbZ4zR: LfqLm + cy8oui: ETESW + preemptionPolicy: ǤP?詠Ǎ篁匘[臾 + priority: -909430233 + priorityClassName: pur1 + readinessGates: + - conditionType: 竴嘁Xġ + resourceClaims: + - name: ar0Em + - name: k1bJV + - name: 0BYWL + restartPolicy: c + schedulerName: uz9 + schedulingGates: + - name: vE + - name: tsZowO1b + securityContext: + fsGroup: 3748036559664877600 + fsGroupChangePolicy: Always + runAsGroup: -8133496137540755000 + runAsNonRoot: false + runAsUser: 5973838121814043000 + supplementalGroups: + - -2370008637195322400 + - -5276059965230186000 + sysctls: + - name: E9CK + value: 5XdFt + serviceAccountName: "89" + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: mn0muFFqVr3h + terminationGracePeriodSeconds: -3403454298388414000 + tolerations: + - effect: t碿k<Ʈ + key: qKQH + operator: 缠 + tolerationSeconds: 4655400418735045000 + value: MKkVqM + - effect: ¬珳FǶǞ + operator: 紴愢觅cÈTȔ戝嵧悜Rċ觡 + tolerationSeconds: 1565276200297110800 + value: hT59pHEK + - effect: 嬳瓑ţ榈 + key: o + operator: uʪ騾 + tolerationSeconds: -6794209356492257000 + value: lqzVIrDs + topologySpreadConstraints: + - labelSelector: + matchLabels: + YuM: KO + ayTs2hRCQ: tv3 + bwY1xcHY: wmgu1 + maxSkew: -1110183877 + minDomains: -1245207363 + nodeAffinityPolicy: źmʠțʑ?_猝$}¦ź;Dȩòe2l + nodeTaintsPolicy: 畔阐ș_o氐澖掍V~=楱ļ渁B + topologyKey: Ls8 + whenUnsatisfiable: "" +======= + imagePullSecrets: + - name: nFghX2ZwrF + - name: g + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: w-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +<<<<<<< HEAD + - name: cert + secret: + defaultMode: 420 + secretName: "5" + - name: 9vIg + - name: Ce + - name: ol +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lbhx + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - lbhx-webhook-service.default.svc + - lbhx-webhook-service.default.svc.sXi + issuerRef: + kind: Issuer + name: QClq-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: "5" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lbhx + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: QClq-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: QClq-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: lbhx-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lbhx + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: QClq-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lbhx + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: QClq-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: lbhx-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 0Kf6: o + AU8gkJ: lsVk + C2ct: Fx4QSm + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: lbhx + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: meK-crd-job + namespace: default +-- testdata/case-080.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + xYYx: 8dxCCUX + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: Wx + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: Mr + health: + healthProbeBindAddress: dgoI9bc + kind: Sx3 + leaderElection: + leaderElect: false + resourceName: lTP7ZNCO + metrics: + bindAddress: p + webhook: + port: 362 +kind: ConfigMap +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: xxjYziP-default +subjects: +- kind: ServiceAccount + name: Wx + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: xxjYziP-election-role +subjects: +- kind: ServiceAccount + name: Wx + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: xxjYziP +subjects: +- kind: ServiceAccount + name: Wx + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ovez +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: ovez-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ovez +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP + namespace: default +spec: + replicas: 1309643940 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ovez + strategy: + rollingUpdate: + maxSurge: 1348765604 + maxUnavailable: 1691837010 + type: bŏ~怹ŋ誶U钓 + template: + metadata: + annotations: + 1fxyVO: CeTVT + 2cyc: 1a0VS5 + "5": DPtq46QYlF + X: SgzV + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: ovez + deT: "" + f: 680aAMwEeCu + m: qHEDa1mmQs55DN + xTbv: wk + zgr2: Kura5 + spec: + activeDeadlineSeconds: -6119805175379791000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: DCIL + operator: 鋇 + - key: bx1e9 + operator: 嗃hǮ攧Kì鷬埧粃6 + values: + - bD + - ranDH + - X4 + - key: lCpMz + operator: ʙP4赍ôɧmǴlľRdz爽摾éǞėġ + values: + - CrG2 + - RN + - VhT + matchFields: + - key: k4E + operator: ĸɔēƞ裈q肜1áLh鄠ƺȮ謾寍ĂǸ + values: + - OIp1 + - mT + - a8Gr + - key: "7" + operator: "" + values: + - sKj4 + - pu + - key: bsPDMZo + operator: ʪ謪Ùj(ƛ簎*蚃Ī懹ŎLXê鵾 + values: + - 2swVSTi0D + weight: 1034374934 + - preference: + matchExpressions: + - key: "" + operator: Ğƈòƞ貈壼 + values: + - Hq4Kf + matchFields: + - key: 3Ge + operator: 6:鑾)追兂3黤£ʖǸęŎżT亏庅o3 + values: + - K2KWWgELhq + - key: R1tbxa3fPsHYME7 + operator: òʦȍŝǀĠĜ謔Êt磶=hɹ坨+[褼 + values: + - xe + - "y" + - key: 9f3kmmv + operator: Å ĂƬi$读:Ĝ=Ǻ扒类鏚R + weight: -275323758 + - preference: {} + weight: -346321123 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: oDWy + operator: ǹ龏暶ɖ鬄 + values: + - fpO0f + - d + - JUzaG + - key: HDiH6 + operator: 稢匢 + values: + - VV + - N7 + - cWA + - key: sRHW9O84z0G + operator: sTxĐ瘐餻uqɰĬ3蛡d,,0 + values: + - uUZ7dJb8UD + - qi8 + - A5CmJ + matchFields: + - key: nKW3BfVe + operator: 袙稤豺ʌ + values: + - lL6X + - {} + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: Vhwxosp9qF9q + operator: ǡ嵗4肸3UʥïȸzwǛ8 + - key: pEieLA + operator: 菻IĽřɣZij漜Q蔧Č&瘒箖Zʞė + matchLabelKeys: + - rMfBnIXN0m + - FkLOGXrJ + mismatchLabelKeys: + - KgT + - JdwN + - bEsu53GBc + namespaceSelector: + matchExpressions: + - key: 4EFFCw + operator: ']蚋ƌĩ_諘--į 曙ȳ嚉H粣脬譁' + values: + - 1RVTr + - oxicwJZ + - "" + - key: JxyqSQ + operator: ʁt渽ŏ撊ĦĩDžwƘ¿椥®ØĔ芆u垰 + - key: Tl1K + operator: 肭{ǼȬø4鷢ȱƙdÜ + values: + - 6ZGq + - qNJVg5e + matchLabels: + 1lKS9iG: "" + 1xpi: QnFBpy1c + yv: "" + namespaces: + - lSr4 + - J + topologyKey: u5hvTQ + weight: -1324847046 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: h2RV + operator: 鿡ţɭ渗 + matchLabels: + F8uYV: "" + PExA2Zzv3x: y9wi + nvWoMm: UHq5 + matchLabelKeys: + - 8ytws + - r + mismatchLabelKeys: + - MK + namespaceSelector: + matchExpressions: + - key: gUWmSoIx + operator: "" + values: + - U + - tUnHB + matchLabels: + S7: L + dB: auMzY + namespaces: + - 2wrF9B + topologyKey: FvBQFs + weight: 1950683647 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: YQI0bLabc + operator: oɽ擮)>¦ɺ嶨儽fºʩ仃斫@ + values: + - OKV7u + - Jw + - key: zmu + operator: 蛃ľ皪ƥ軃GǏ殣意G莀哪柋昢ɫ鱒 + values: + - oa9e + - "2" + matchLabels: + "": x + HVcoV8O9: w4BjtsrW + matchLabelKeys: + - nZXUs + namespaceSelector: + matchLabels: + 8JOR: "" + fcXthu7: "Y" + namespaces: + - 9e8cVITA + topologyKey: "" + weight: -166626011 + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=ZpYBKn + - --configurator-base-image=ZMlofIenTW3 + command: + - /manager + env: [] + image: ZMlofIenTW3:ZpYBKn + imagePullPolicy: Always + livenessProbe: + failureThreshold: 691 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 271 + periodSeconds: 489 + successThreshold: 965 + terminationGracePeriodSeconds: 154 + timeoutSeconds: 796 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 649 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 414 + periodSeconds: 897 + successThreshold: 597 + terminationGracePeriodSeconds: 44 + timeoutSeconds: 486 + resources: + limits: + cpu: "282" + memory: "709" + requests: + cpu: "141" + memory: "444" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - dVU + - YuvBgCt + - AtGNbNObX + options: + - name: QVQEUfgls7rGt + value: "" + - name: YLY0 + value: JWRjBqPUtn + searches: + - r8mD4wPFC1 + - LStfOo3 + dnsPolicy: 驎ǃ秵ŋɿu锥ɫ4鹧Ȯ + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - ip: GYg + - ip: "9" + - hostnames: + - 9UBCsp + - NbHS + ip: jJKRBB + hostIPC: true + hostPID: true + hostUsers: true + imagePullSecrets: + - name: WngLGW + - name: pH + initContainers: [] + nodeName: JY + nodeSelector: + DXkWdhYn: C + eNn47aUMg: "" + preemptionPolicy: 逘潒Le犺佀WɰXʮ涩 + priority: -498747253 + priorityClassName: nQN + readinessGates: + - conditionType: X嗋Ɯ0眴铜竽b + - conditionType: '*槢Ȋ8Ɖ偉®Zð' + resourceClaims: + - name: cS + - name: V5gjfxiv + restartPolicy: 鹵ƱcǚĐʢƼ + runtimeClassName: vXXB + schedulerName: PHRJqMYM + schedulingGates: + - name: RP + - name: g4lxIqW + securityContext: + fsGroup: -7392701597241162000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 8372901019133498000 + runAsNonRoot: false + runAsUser: -484481943082609400 + supplementalGroups: + - -7223585303965730000 + sysctls: + - name: "y" + value: "" + - name: p9JjpzgZ + value: F + - name: Xr + value: roFX + serviceAccountName: Ky7M1Rr1O + setHostnameAsFQDN: false + subdomain: Ks + terminationGracePeriodSeconds: -7623189043254688000 + tolerations: + - effect: 閨供iţôIŎŷX脂販暖<塗ž剸 + key: tjmunK1 + operator: ɶɵ歮&əpĜ + tolerationSeconds: -5018449569375824000 + value: c2 + - effect: 躛 + key: ZXBpd + operator: '嗨砼堽Ŷ誜ĕƅ攸闦{邙)蕦v滽:' + tolerationSeconds: 725040168445271800 + value: mMci32cJ + topologySpreadConstraints: + - labelSelector: + matchLabels: + b: Oy + matchLabelKeys: + - 6T + - PA0unBLzXB + maxSkew: 1916755573 + minDomains: 719946978 + nodeAffinityPolicy: Fpʒ<ɚůJ譿驑÷孃虞DzƔ + nodeTaintsPolicy: ƊL!`垄禐§Y.猟K(福 + topologyKey: C5C2wM + whenUnsatisfiable: 漋.敻LJÙ齯ele恊恦f sxȒ埜= + - labelSelector: + matchLabels: + 3EH4: aLhPurcQ + MGn: g + gWEsGCuvE: hq + matchLabelKeys: + - X8f + - UtU3 + - vUe + maxSkew: -1570018943 + minDomains: 129102213 + nodeAffinityPolicy: Ʋ羕]旤@栏ƔH祌Ǟ!ă卅墛/ + nodeTaintsPolicy: ljʀ犓锼JoE獬Ân)鍚¨帧Ŗ籉蟶 + topologyKey: e9dRmTq + whenUnsatisfiable: w汱k巳ƶȾ祖 + - labelSelector: + matchExpressions: + - key: 1fUOPVY4C + operator: "" + - key: g5aC + operator: e?k粠 + values: + - F4E + - bKBE + - "" + - key: QYJ8JDSH + operator: 芵%Åw鐵ɉ + matchLabels: + 0kQnuTsp9sW: kXZHA + maxSkew: 1505445176 + minDomains: 1442684664 + nodeAffinityPolicy: Ï賨曆趿/ah嬮ǭ尧ǂʛȳ + nodeTaintsPolicy: Ⱦ吏ʧɪ¹L'ł珥渰ƃʤǣȍɂt~ + topologyKey: Q3qDZKw8 + whenUnsatisfiable: )6i7ʤ5僛Źwƅtvɯ彵ƞÏŘBĝ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: Gx + - name: "" + - name: DZu63M + - name: bfdOMq +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - ovez-webhook-service.default.svc + - ovez-webhook-service.default.svc.xaBy9DzE + issuerRef: + kind: Issuer + name: xxjYziP-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: Gx +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: xxjYziP-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: ovez-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + Pb9Oh: F3QHWxK + puaMG: "2" + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: xxjYziP-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: xxjYziP-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: ovez-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + xYYx: 8dxCCUX + creationTimestamp: null + labels: + JHXVQsYdx4WC: KFytXl + UN: h + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: ovez + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + zWv: hIfkuex2B + name: Wx-crd-job + namespace: default +-- testdata/case-081.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 7ZTjb + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: ujOV3u + health: + healthProbeBindAddress: zcMagN2 + kind: LO0N + leaderElection: + leaderElect: true + resourceName: UL + metrics: + bindAddress: 7Hi + webhook: + port: 376 +kind: ConfigMap +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: OZHCbAk-default +subjects: +- kind: ServiceAccount + name: 7ZTjb + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: OZHCbAk-election-role +subjects: +- kind: ServiceAccount + name: 7ZTjb + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: OZHCbAk +subjects: +- kind: ServiceAccount + name: 7ZTjb + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: zsU8D +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: zsU8D-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: zsU8D +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk + namespace: default +spec: + replicas: 737186237 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: zsU8D + strategy: + rollingUpdate: + maxSurge: 2059369383 + maxUnavailable: 578932184 + type: RollingUpdate + template: + metadata: + annotations: + 18t52Ey: KftQ5Yn6yL + Cnhja: Jjf9 + LFQZlLJ5Id: pcV + creationTimestamp: null + labels: + 7SH6Rp: XkrMRVuLon + 9xJevy: f + app.kubernetes.io/instance: operator + app.kubernetes.io/name: zsU8D + spec: + activeDeadlineSeconds: 5075138460131302000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchFields: + - key: 0rxFyK + operator: ɖ|絪ɩ邏怂ð + values: + - lGCU + weight: 1246435144 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: x47n + operator: 碵 + matchFields: + - key: 2DX + operator: Ĩý慯騂.7b + values: + - R9InN + - "" + - matchExpressions: + - key: z + operator: D鏜&yǟ挹"盜j颊撵8T轳$Ĵɦv + values: + - d7qY + - V9vN + matchFields: + - key: muVha2BSur + operator: Ÿ痌Ł魨êÅz敋$Dz粇7ɾǹ + values: + - 9eFxKu + - key: BWJd3 + operator: t纮鞴é伱0)ɧţ#ʆl圪清襻鰖 + - matchFields: + - key: bus8X + operator: Ƃ錌豂虾jĦ + values: + - OOb + - HEd3 + - key: 68o8i + operator: µĝů淄測淼缝繿闄ƊȒț岷ȕ + values: + - CKLWc + - 0wK8a + - key: RKHFlC + operator: 肴ʟ + values: + - KdW07 + - xa1 + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: yT8I + operator: Ƽ|%洓ƦC郘` + values: + - nd3YZ8IwLb + - mMZQZ + - "" + matchLabels: + EDrS: va + N75F: p59 + mismatchLabelKeys: + - Wta + namespaceSelector: + matchExpressions: + - key: rMw + operator: ^K + values: + - qzvtVm + - key: AP + operator: ſdž厷Ȟ泸Ǿ澴 + values: + - Z8gY + - key: rkWUW + operator: 麣舷ħ¶/榀1鎹A蟛ǧɢ壹ȏȶ紇 + values: + - Z + - aKQ + - eEM1y9w + matchLabels: + FhlMU5Kw: Ce964mW7 + namespaces: + - b + - x2Y + - wHFks + topologyKey: Gb5 + weight: -387201249 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + ByD: jUB5 + WGu9: "" + matchLabelKeys: + - kSCL3wh + mismatchLabelKeys: + - ucy6ZHZx + - w + - em + namespaceSelector: + matchExpressions: + - key: jjCog + operator: Ä + values: + - tMDvmRCt74c + - JlT5eloJcxX + matchLabels: + I0nL: XxLZ + namespaces: + - VXF + - vrCLINB + - MIgeg + topologyKey: l3Rl71Nxi + - labelSelector: + matchExpressions: + - key: jFf + operator: Õ郺嶷虇ɑ弣ņ Ë!襋o秊錺Y + values: + - eX3RUhH + - oaa + - key: mtG4syAadE7 + operator: 7fjɌ癅/Đȩ9DŽ + values: + - iA + - zkb + - BhciuY2 + matchLabels: + wC7QN48jz: Gn + xcE313: w + matchLabelKeys: + - E + mismatchLabelKeys: + - horaNlEl + namespaceSelector: + matchExpressions: + - key: sWA + operator: 妗čm咟ĿĩÄ牏 Ţ$儧麂 + namespaces: + - fgLu4 + - je + topologyKey: Hi + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + AMdqJ: 3JE2njxG + KIzrVXc: B7tW9md2Zws + mismatchLabelKeys: + - RW + namespaceSelector: + matchExpressions: + - key: 1oeG + operator: 蜃=ÿǙ燬ö褭 + values: + - wkp3 + - key: yM + operator: ½ūů + values: + - AzqGsty47MkIB + - GLSN + namespaces: + - a + - hV0DG2B + - WAhdr8 + topologyKey: cGpOSLEO + weight: 1360768454 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: n5XYmLFj + operator: 精秮晵õ.ɚǞ.犧YƓ謽黋ª龺 + values: + - RMoWI + - NmD9oFeYoVzt + - 8lrE + - key: 81RzHp4Sv8J + operator: Ĝf必DZʁŚƱt + matchLabels: + JYMS3XTR: jI + xPM: Qthu + matchLabelKeys: + - PVz + namespaceSelector: + matchExpressions: + - key: dPfsCEnR + operator: 2Ȟɋyɷ欵Pc6Wë铥=减w湏稀Ċ + values: + - PAA6aBnm2 + - key: G5E0z7dBNLy + operator: 茚鱑锣ɐ + values: + - RwkW + - key: 8KVw + operator: 漵嚔R仑Ǚ] + values: + - aj306N1ChXihGl + - "" + - "" + matchLabels: + UxglI27: VrE9h + rsqYx: y4 + topologyKey: eSIo8QT + weight: 1879262232 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: UGnMe + operator: 踏+7铻Ɠ$璞皰T[ņ嘛ɹ.Ë.Ǡµ + - key: n8Kyq6MZnn + operator: ɕȐ袞政肽S+ + values: + - d4Va6 + - "" + matchLabels: + "": WH6RB + hlYsK: oA + matchLabelKeys: + - CGjlYIjQa + - 3ArLGPQ + - TVFL + mismatchLabelKeys: + - ZN67Fk50 + - K + - BIK3F + namespaceSelector: + matchExpressions: + - key: RfSgAZW + operator: 锦NJȱ頔饴X坮谙 + values: + - EUs8 + - KBnej + - Awg88 + namespaces: + - "" + topologyKey: e3QFK + weight: 2136767491 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: Lv + operator: 黎ʘq志 + values: + - j84g + - xtWEL + matchLabelKeys: + - it9FgYyd + mismatchLabelKeys: + - mpg + namespaceSelector: + matchExpressions: + - key: MmD + operator: 绪.檧 + values: + - Is + - WJzXx9P + - RlU0Vy + - key: DvcZFz + operator: 個g 吮Ŷj绂鑭奻ʟʃ + values: + - v + - ghys + - Hur + matchLabels: + 4Bag0xtZ: PcXKf7 + namespaces: + - QLOS + - GB1Xfl2Bh + topologyKey: Ex + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=okj1Bqm1LHE + - --configurator-base-image=YYLGC7 + - Gc3q48w + - JNFXPzkrj + - hYzBm + command: + - /manager + env: [] + image: YYLGC7:okj1Bqm1LHE + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 483 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 398 + periodSeconds: 195 + successThreshold: 102 + terminationGracePeriodSeconds: 324 + timeoutSeconds: 854 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 484 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 948 + periodSeconds: 31 + successThreshold: 811 + terminationGracePeriodSeconds: 971 + timeoutSeconds: 302 + resources: + limits: + cpu: "391" + memory: "331" + requests: + cpu: "565" + memory: "577" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - "" + - 3B1J + options: + - name: EKTU5 + value: uGrsKSv + searches: + - jzvX + - "" + - QUGE + dnsPolicy: b丅盝ì4ʜ鿶Ì蚰 + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - lSSC + - "4" + ip: mbGtHu + - hostnames: + - Be + - Fa + ip: 6m7jCCt + - hostnames: + - BAX + - T + ip: "" + hostNetwork: true + hostPID: true + hostUsers: true + hostname: P + imagePullSecrets: + - name: pgu1 + - {} + - name: k + initContainers: [] + nodeName: LCE + nodeSelector: + "": Oj8 + preemptionPolicy: _ŞĖ搓Ƙ铌皬8姱垿ȉK9剚 j躳v + priority: 693230071 + priorityClassName: G + resourceClaims: + - name: kfkaZ + - name: O + restartPolicy: '%v罰胧ʥ碔á7Ƿ蒙¬?兣寲Dx骱' + runtimeClassName: wWcFKJY + schedulerName: K64mA + securityContext: + fsGroup: 6718607243193313000 + fsGroupChangePolicy: Always + runAsGroup: -1791668966521515800 + runAsNonRoot: false + runAsUser: -2730138901692621000 + supplementalGroups: + - 805361304793257700 + sysctls: + - name: UBPPWy + value: 4T5 + - name: C2cMj2 + value: 8rbtdE + serviceAccountName: NrdXODCm + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: gWuTd + terminationGracePeriodSeconds: -8771004476345526000 + tolerations: + - effect: â+ɹuñĄ鬨?eɌB¬`3 + key: hV0 + operator: ;ȳ窨.EƓ- + tolerationSeconds: -1848018919213049300 + value: V9xuhyF + - effect: '!' + key: Yaptp4d5N + tolerationSeconds: -651827740239648600 + value: ahXis + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: RtKeQx + operator: < + values: + - 4SOS + - lbt1vl + - w + matchLabels: + CL1: x7Y + l6x: BhZyTgl + rna1k9s: l + maxSkew: 1960215012 + minDomains: 541264139 + nodeAffinityPolicy: ȍw(ŢW=@ij峸ɰʏũĜĜ换^Z椒芜 + nodeTaintsPolicy: ī{凮 + topologyKey: V5FKq3 + whenUnsatisfiable: ^*浐[TǻzŪǸ4嚍 + - labelSelector: + matchExpressions: + - key: Usp + operator: "7" + values: + - XCUsN0 + - End + - key: KV5u + operator: g5dĔǨP + values: + - S8Q7Nj + - v3DRq38f + - saL + - key: apEg + operator: "" + values: + - Cbk8 + matchLabels: + I1a: Nt8eh + h4cGiMg: VvNF + matchLabelKeys: + - bidOGl + - lBMT7d + maxSkew: 977904069 + minDomains: -1227979045 + nodeAffinityPolicy: $ʃ嬘Œ/Ǫ + nodeTaintsPolicy: u艌饔DzX~ + topologyKey: kOJfe + whenUnsatisfiable: ɑyǟƎċ匣鰵-0ĹbK2綗vɭĈK + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: e8ZBqt + - name: 1yV8 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - zsU8D-webhook-service.default.svc + - zsU8D-webhook-service.default.svc.x0g4v + issuerRef: + kind: Issuer + name: OZHCbAk-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: e8ZBqt +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: OZHCbAk-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: zsU8D-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + NFFw: qCc3rOA + gKTYp: Zd2R + jKQQEfT: FduvIJJ + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: OZHCbAk-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: OZHCbAk-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: zsU8D-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: zsU8D + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 7ZTjb-crd-job + namespace: default +-- testdata/case-082.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: k0gO + health: + healthProbeBindAddress: 2v2 + kind: bEutG + leaderElection: + leaderElect: false + resourceName: EQkuZC0C + metrics: + bindAddress: 9eXxc11 + webhook: + port: 384 +kind: ConfigMap +metadata: + annotations: + p: DV1 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v: pV + name: JvUUYZNAn-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + p: DV1 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v: pV + name: JvUUYZNAn-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + p: DV1 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v: pV + name: operator-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + p: DV1 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v: pV + name: JvUUYZNAn + namespace: default +spec: + replicas: -1282715809 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + strategy: + rollingUpdate: + maxSurge: 706213910 + maxUnavailable: 1958671198 + type: Ʒ#敇ŧňqʂJ2ǎ絙湌淸HŇĕŦ颦A + template: + metadata: + annotations: + 4CSkABO: ITTJyql + creationTimestamp: null + labels: + 5F0sWgcV31: w0W + 6nk3DMQ9q: DHR1Slo6VJ + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + oeuWrTVaS: iQ + spec: + activeDeadlineSeconds: 4327148074270488000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: r4g7 + operator: 汔ŁI悓)#觊膩șÍ辯m_ + values: + - Da + - AJqw1 + - "" + - key: J + operator: "" + - key: VC5 + operator: '`蜚7' + values: + - c + - xNYDAq + matchFields: + - key: 8K98uW + operator: 檁YM聏ɧǍ + values: + - 7wqj + - key: KzlyvM + operator: Ǵ越q + values: + - N40vLS + weight: 1716021049 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: lCp + operator: gúW瑾.O糂dUő + values: + - ChpwElbY + - QxP + matchFields: + - key: Y0uQsss + operator: 萀-伙 + values: + - B8XwFbT + - matchExpressions: + - key: a + operator: 膘H鑝K芁ʞ'¾S堆qɦ鱀GkƸH' + values: + - uB + - key: Cl4Gy + operator: ʬƥ蜚Øm鄉ƏHÎE#ț矇s聋ɽ魴毪縙 + matchFields: + - key: gRC + operator: Ǭo<ȝ埔 + values: + - Q6nu + - YCX8 + - e8YoXu + - key: 02xxhs + operator: É矖湵潈 + values: + - Z95 + - Dhv + podAffinity: {} + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: "" + operator: 5旍!ƠǀŹ + values: + - ufabqBY2 + - key: sjc06JAk + operator: ȂǍ + values: + - AIn0j + - key: r6SM + operator: E鮃Z洊丫ƪ垁<7Ɨc库ǎ骪¶雑 + matchLabels: + EKHTt: HM + matchLabelKeys: + - cyY4rx0 + - PBIfh + - e23iWr + namespaceSelector: + matchExpressions: + - key: cV2PdoeG + operator: "" + matchLabels: + KV1o: YzsQVo + NFt6l: kLct + lcwSIV: nWbtoy + namespaces: + - Au1Zw + - rN + - aRAD + topologyKey: 5I + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=H0aN + - --configurator-base-image=kG9n + command: + - /manager + env: [] + image: kG9n:H0aN + imagePullPolicy: Never + livenessProbe: + failureThreshold: 210 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 483 + periodSeconds: 101 + successThreshold: 946 + terminationGracePeriodSeconds: 632 + timeoutSeconds: 714 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 841 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 25 + periodSeconds: 321 + successThreshold: 829 + terminationGracePeriodSeconds: 770 + timeoutSeconds: 182 + resources: + limits: + cpu: "104" + memory: "472" + requests: + cpu: "905" + memory: "554" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - h9KdM + options: + - name: qwrR + value: LUC + dnsPolicy: 鍝2Ruɂõy基鰠Ǯu鈏ǥ櫳¦r + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - ip: B2mapZDDPI + - hostnames: + - 43K4JN + ip: QCjQ33I + hostPID: true + hostUsers: true + hostname: UcVgcPlB3Tp + imagePullSecrets: + - name: L3xc + - name: b2AowAh7 + initContainers: [] + nodeName: toIvU5utWJJ + nodeSelector: + oD: LUM5IOof + preemptionPolicy: Ndz魦°瑼乭05ʚ ȃhŁ栛冤 + priority: -1752439580 + priorityClassName: SjrGf0 + readinessGates: + - conditionType: qx÷E(ʯ{ɗF仵eʝ + - conditionType: 廅 + - conditionType: eX鼺Ǐ邹6ɼțrl{墳贝 + resourceClaims: + - name: vn1HJRfk + restartPolicy: 寪SC嚸Ydæ媁缵Ö91佤k + runtimeClassName: KKo8 + schedulerName: rHdgH + schedulingGates: + - name: lt + - name: w56 + - name: 5QkP + securityContext: + fsGroup: 8284482227971759000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 7549977893834572000 + runAsNonRoot: false + runAsUser: 2890183731546937000 + supplementalGroups: + - -8069923849240214000 + - 888768176187646600 + - -5100419271157934000 + sysctls: + - name: o + value: uZ570Tq + - name: gwsVIsOeL + value: Ts6 + - name: cUEGZd + value: fevys + serviceAccountName: P2 + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: Tws + terminationGracePeriodSeconds: 5906580452447393000 + tolerations: + - effect: Ę&h + key: Sb0Qh + tolerationSeconds: -6895611838181698000 + value: qv5 + topologySpreadConstraints: + - labelSelector: {} + matchLabelKeys: + - Emso + - "" + maxSkew: 757251221 + minDomains: -1013392564 + nodeAffinityPolicy: Ĩa奋騐u + nodeTaintsPolicy: "" + topologyKey: YQH + whenUnsatisfiable: 赿仔F跃$礪刞ūȏiǟ + - labelSelector: + matchExpressions: + - key: px + operator: 儇( + values: + - 4bccBIY + matchLabelKeys: + - "" + maxSkew: 157171156 + minDomains: -216696003 + nodeAffinityPolicy: Ł + nodeTaintsPolicy: ¯嚋2Ǐ#Í菗SĄ謐*l汁鄖Ȍ + topologyKey: 4pVrPZxh + whenUnsatisfiable: 轸J薶?ôƱ3ƳN¤鿉ɻ璛Įƍ坼?D + - labelSelector: + matchExpressions: + - key: bwq + operator: ı枱A稓乿酇Ø贤E淞Ū梖}Iĕȴ + values: + - LM + - u7PG + - key: Xy + operator: ²[ƸǬ逍 + values: + - WvjZ7X3d + - fS + - key: 8WvmN + operator: 驿W笕.ÀQ©~碀瓚琩镪ƖŁ坭+ + values: + - 7PKYszc6 + - runyFPLgH5g + matchLabels: + 8Zpv: hNK + YPSqw8B8: FD + matchLabelKeys: + - "1" + - EJwB + - F4jliy + maxSkew: 2058005309 + minDomains: -304661344 + nodeAffinityPolicy: t曽C@áMG筌 + nodeTaintsPolicy: 9Ƿ啩äj?ė冯隉敖 + topologyKey: "y" + whenUnsatisfiable: ǩ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: kE9 + - name: AyYiFET5u + - name: RMYhGM +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + p: DV1 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v: pV + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - operator-webhook-service.default.svc + - operator-webhook-service.default.svc.liM + issuerRef: + kind: Issuer + name: JvUUYZNAn-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: kE9 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + p: DV1 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v: pV + name: JvUUYZNAn-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: JvUUYZNAn-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: operator-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: JvUUYZNAn-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: operator-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + v: pV + name: G-crd-job + namespace: default +-- testdata/case-083.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: Z + health: + healthProbeBindAddress: tT3ln + kind: qRpLfXMeqNwbtB + leaderElection: + leaderElect: true + resourceName: gNGg + metrics: + bindAddress: K4wonq + webhook: + port: 326 +kind: ConfigMap +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: twuYH9-default +subjects: +- kind: ServiceAccount + name: 53ObZL18D + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9 + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: twuYH9-election-role +subjects: +- kind: ServiceAccount + name: 53ObZL18D + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9 + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: twuYH9 +subjects: +- kind: ServiceAccount + name: 53ObZL18D + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: AD +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: AD-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: AD +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9 + namespace: default +spec: + replicas: -1992894717 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: AD + strategy: + rollingUpdate: + maxSurge: 1933093602 + maxUnavailable: 1334294633 + type: ʥ蓜蟙峑7íZ甖yŔ + template: + metadata: + annotations: + 5tv: p5PIYsI4 + T1F: Dpqk + nhTQfP5eg35h: U12zbsp + oi6rukR28V: zM + qAQ8mETGY: jQtYv + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: AD + spec: + activeDeadlineSeconds: -3290817518659555000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchFields: + - key: UYYTqOzzzI + operator: '`ɻ緧敗ÇŦȶ`霤łƅ騣=鳃' + - key: "y" + operator: '*Ʒ錒鏂wih-|ĶƘrLjɚ;讹' + values: + - m63 + - fx0vLWX4 + - yv9zg + - key: 3qvDet + operator: ɭ吃X紂IO甾旪策Ƿč3糝utĻ諀奪# + values: + - k5 + weight: -918868426 + - preference: + matchExpressions: + - key: OFGGO + operator: ē + matchFields: + - key: FAYg7jE5 + operator: 韊劬ĭ訡 + values: + - cbW7ib + - FARU + - iuvBLw7R + - key: vFVPXz7G + operator: 訮d贺ü櫼蒒鋱隮痄綜戏ɣ + values: + - QH + - VZ3k + - key: RWFgXeS + operator: 藋ǼK蛖ĜʚɠJ巻 + values: + - A9G + - xVWxb + weight: 666121791 + - preference: + matchExpressions: + - key: SgZ + operator: 7'睪²韛墈ɇ狼斡患Ž鵬焑ul羰~½ + values: + - Emtn + - PRqH2 + - wyxy2PK + - key: gwQvB + operator: Nj凳9ƖÊ~ĥG鹢烼t竂dzȏ + values: + - fEU1YvKZEh + - "" + - GTq + matchFields: + - key: MMt + operator: '*堂>ĆɦǔȩEȓ' + values: + - lt + - EEl1 + - key: Py + operator: 摲雥ʏáę鴤Š娑薸Ɋ金 + values: + - Csd0 + weight: 1371460940 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: voL6CXATwtI + operator: ÁjȹƦʆ)ȹ戳Ǻ珫Ġ)Ç扸醘 + values: + - bk1 + - 67GUH + - matchExpressions: + - key: 8e2LCJeo0t + operator: ¼ȑ窤^Ɩ応鑿`țkƻƩķ-a<屙[ + - key: 1RA8y + operator: '''Ȋŵċf縂TX姽J' + values: + - F + - key: whAjv0OUp + operator: "" + values: + - fUZaSg + - matchExpressions: + - key: xL + operator: 6ùLJȔĩ?闟ĬR + values: + - 0A9fp2U7fz + - TyZ + - IDm + - key: oUa2PS5g + operator: /隼耬ň'ɏ5媊%ǘ慳7拙K + values: + - AX86H + - N55 + - d8uIn + matchFields: + - key: DLq3Bm + operator: Ǯª + values: + - X7e9V + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: j5 + operator: '&,lj抭DžZc煵1阵' + values: + - 9g1YZ83fVF6kuj + - S5n00 + - key: ZaAm + operator: èB吲 + values: + - axmNtRA + - GCmrOl + - 6Ts96 + - key: cgNbRMJmStVj + operator: "" + matchLabelKeys: + - 6G7 + - fj5rP + mismatchLabelKeys: + - 2IFbSJj + - tUzR2 + - UNCXGXOAqmt + namespaceSelector: + matchExpressions: + - key: W5hVjFDJ + operator: Ȩë鞖ʼnr兯疻 + values: + - WSwg + - tyN7 + namespaces: + - Kk + topologyKey: lE5 + weight: -993382932 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: ug + operator: 圵ƲƄɌɝď苫'徕EdɒĪ=k噩#Ȟ + values: + - iUJPfnJ + - KW4P2ir + - mQe + - key: dZx2UCUc + operator: K旵 + - key: QW9HVWg + operator: 誺ļbþ + values: + - "31" + - 77jF5CJ + - 7CsW1l3WR + matchLabels: + "": d6 + BOT: D56ZE8Q92F + Mh7: z + matchLabelKeys: + - gv0v2x73Q + - YLl + - Slb + mismatchLabelKeys: + - 2n + namespaceSelector: + matchExpressions: + - key: O + operator: DɆ艀堂mDz"肑^ + - key: 8E9qZ + operator: 牶#氌X{Ű蓃v鯃ü + values: + - OYYyJnnvJ + - ObrL + - nZP + matchLabels: + "": omgUlQG + namespaces: + - MgU6fKR + - 0a + topologyKey: kl3aT + weight: 43416081 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: {} + mismatchLabelKeys: + - SLC + namespaceSelector: + matchExpressions: + - key: 0coNmjPfZo3 + operator: ¸襺F绚贝ɶğǙɼ鯫Y + values: + - x + - w8C + matchLabels: + V1dGsG3au: RN3 + hh: Te2oHZNcX + namespaces: + - qGUp3R + - R + topologyKey: 7PGdnmE7PGP + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + BuW: 1X + UqcMl: "" + matchLabelKeys: + - 3KTyGufoO + - RL4aD2 + mismatchLabelKeys: + - B1rQ1T9YI7 + - Eb4dMoubook + - U + namespaceSelector: + matchLabels: + EdBD: xlEvn + Nt6X66x: COy + dlK: BdP9Hd + namespaces: + - 7A + - MdT + topologyKey: v8r5UL5qMyyZ + weight: 1870120105 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: 1ONRpGEF + operator: 栂"徿<ÖĈ嶄哚Ƥ}LȽǰ橥Dvŀ + values: + - LUY1 + - qbGo + matchLabels: + S3hZQ: vhxVsbe4 + Vrc: 7l + matchLabelKeys: + - dFPJ + - OzQl8qCc7 + mismatchLabelKeys: + - j0B + namespaceSelector: + matchExpressions: + - key: eYC6PVMQ + operator: 吻C苉nȔC茅词韋籔S + values: + - J1 + - WS8 + matchLabels: + fLgtTmLuaC8: edezQrn0 + namespaces: + - Br5FAK + topologyKey: Ipq + weight: -1639783795 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: UgO + operator: Ī槱刢xē秸Ŧíz怵ɡhơ¯小庮鼣aű + matchLabels: + Y12: NyJQCP + ac1P8qw: cctX2 + ad: z + matchLabelKeys: + - N0WhZQ + - "" + - SG1Q + mismatchLabelKeys: + - eLBeK + namespaceSelector: + matchExpressions: + - key: J0In0 + operator: '"Ƌ=Þ喗Q蚜ȓ倣b' + values: + - e3IiM + - sFsS0DgxSJC + - fS4RTVzJWc + - key: cEYRHqpD + operator: K{囯ČŐ姣Ķ9澊 + values: + - abY4f7 + matchLabels: + ARNo5pl: F9 + O79pU: 99NAnXcfdeeql8 + topologyKey: wXX5kx + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=3BE + - --configurator-base-image=BkpCoE + - QpxE2 + command: + - /manager + env: [] + image: BkpCoE:3BE + imagePullPolicy: Always + livenessProbe: + failureThreshold: 578 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 963 + periodSeconds: 596 + successThreshold: 52 + terminationGracePeriodSeconds: 989 + timeoutSeconds: 311 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 854 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 551 + periodSeconds: 16 + successThreshold: 688 + terminationGracePeriodSeconds: 467 + timeoutSeconds: 125 + resources: + limits: + cpu: "25" + memory: "957" + requests: + cpu: "126" + memory: "229" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - dSXcDS + options: + - name: A7HUjf + value: A + - name: Yz + value: OCnDhT + searches: + - 6oQ2shOAuEGd + dnsPolicy: 4BVɥ埙L钝粪Ǫ/ɜƷŮ,褔秽缺衲 + ephemeralContainers: null + hostAliases: + - hostnames: + - k + - "" + - xeRvB8I4r75s + ip: j3VP + hostNetwork: true + hostUsers: false + hostname: RLXxjp + imagePullSecrets: + - name: 0xvbPS + - name: umn5qIm + initContainers: [] + nodeName: l9dr6aUQfK5 + nodeSelector: + Q3: EEpI5 + Vf4IqSxi: 6eTPe + atZIRXJC: zbcJj + preemptionPolicy: "" + priority: -1795967358 + priorityClassName: "0" + readinessGates: + - conditionType: vȭ?ɛī厐[ʣĩ家嫑Oy + - conditionType: áX箜&%l憯(梺胉Ƅ/)慜 + - conditionType: u颣ɍMg秗ċ廫 + resourceClaims: + - name: m66F7 + runtimeClassName: 51NHMJjO + schedulerName: 2pW5ph7y + schedulingGates: + - name: plp8 + - name: 2j + - name: awK + securityContext: + fsGroup: 6319116615642430000 + fsGroupChangePolicy: Always + runAsGroup: 6616439806545871000 + runAsNonRoot: false + runAsUser: 3911306703841559000 + supplementalGroups: + - 6114687739699545000 + sysctls: + - name: lAMX4tXQg + value: ais7GLVXPucxy + - name: ODxk2RRh + value: Jpvd + - name: hG6 + value: uyRNu + serviceAccountName: YoPNk + setHostnameAsFQDN: true + subdomain: qjvHEfli + terminationGracePeriodSeconds: 2802694886159121400 + tolerations: + - effect: 啝ǫ豥犂%3凅3D + key: yvPI + operator: ',蘘虣ǟxȋ<:骃Cɥ欶Qƒ埕¢Ĩ4;' + tolerationSeconds: 6979162648566219000 + value: dwDIwZb + - effect: ǭƦt瓇Ȗ:稵 + key: VsgL + operator: 惺}ĻƷĭw + tolerationSeconds: 5105815127740725000 + value: Ullldnm + - effect: 优ǞƎŎR龝tƆɿ)Eg梩 + key: Xt9jqiVd + operator: A徰ʗ>,njʏ赇瘑 + tolerationSeconds: -6790234676212962000 + value: smlpzi + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: wDvbF + operator: 檻\ + values: + - 3Kb3 + - GWpq0EKR + matchLabels: + Fkt2W: yYCIcscZ + Nuw: hRhO + matchLabelKeys: + - qRjh + - sQL + - J6DNJXz64ng + maxSkew: 1919093625 + minDomains: -1291723558 + nodeAffinityPolicy: 凶sđD,臹l螲緇茁奿翙ƮÕƣ~ + nodeTaintsPolicy: 俑W鉢铖 *]ȭĄĺ~mȵƛ + topologyKey: ijMvPSo1 + whenUnsatisfiable: ^ɔ筰 + - labelSelector: + matchExpressions: + - key: MmUJZ2 + operator: 昮Rn战鲸;忞榑g0技¢ā + values: + - BNT + - key: LYB + operator: Ɇ韆Ɍ卞U0T藑ö隬ž,& + matchLabels: + "2": aKglOmV + 5GG7: xa + L: R3C + matchLabelKeys: + - H2gkgEwExA + - LQwNlux + maxSkew: -1312523589 + minDomains: 584241845 + nodeAffinityPolicy: +KI|gȍ&BƗWHɮ偷ɩ煡 + nodeTaintsPolicy: ¤G,戁豢eDƩʀBǾ碙濥j + topologyKey: poNRifM + whenUnsatisfiable: H,/MıÃ樛嚗 + - labelSelector: + matchExpressions: + - key: 02e6E + operator: ²ËNǾ + - key: Bqr3G9L + operator: '!' + values: + - OHn5S + - "" + matchLabels: + xYEV9SS: s0VtwRK + maxSkew: -959970438 + minDomains: 1893050440 + nodeAffinityPolicy: j妼魚ȁ笰Ǜ¾j + nodeTaintsPolicy: lj达v嘄{ĨȖȟǹʦ#坖Ú + topologyKey: vZ + whenUnsatisfiable: mUƚ;ʗƷ嶑铻 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: PrNLNBOj4nG +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - AD-webhook-service.default.svc + - AD-webhook-service.default.svc.nO + issuerRef: + kind: Issuer + name: twuYH9-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: PrNLNBOj4nG +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + wqUHiDS: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: twuYH9-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: twuYH9-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: AD-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: twuYH9-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: AD-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 5w3BM: DJFeE + HPEA: "" + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: AD + app.kubernetes.io/version: v25.1.4 + dRuotY: sUV + helm.sh/chart: operator-25.1.4 + name: 53ObZL18D-crd-job + namespace: default +-- testdata/case-084.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + "8": tf7ML2YS2 + Nr: WJKMVr9D + Vl: "" + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: g + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 7vs5b + health: + healthProbeBindAddress: "" + kind: NQSI2 + leaderElection: + leaderElect: true + resourceName: rzH + metrics: + bindAddress: JjOkiuAQDPE6 + webhook: + port: 482 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: Sb2hWn-default +subjects: +- kind: ServiceAccount + name: g + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: Sb2hWn-election-role +subjects: +- kind: ServiceAccount + name: g + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: Sb2hWn +subjects: +- kind: ServiceAccount + name: g + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: Sb2hWn-rpk-bundle +subjects: +- kind: ServiceAccount + name: g + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: MOjCBp +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: MOjCBp-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: MOjCBp +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn + namespace: default +spec: + replicas: -373229836 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: MOjCBp + strategy: + rollingUpdate: + maxSurge: 1994924858 + maxUnavailable: 1244466687 + type: )A + template: + metadata: + annotations: + 0DzQx: 2ZX + 5uUlacM6mq: rz + iUEpv: TEfbNK + creationTimestamp: null + labels: + "": t + app.kubernetes.io/instance: operator + app.kubernetes.io/name: MOjCBp + spec: + activeDeadlineSeconds: -2246099825379296300 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: Ka + operator: ?鷌翧Ȯ=Lȑ`ǻɤĪ,炂幺~绶é0Ø + values: + - ZfKxG + - pXi + - key: a57PWzZ6 + operator: 孧ɝƎ3"/tz襶睃Ō砯OųFJ + values: + - fOLt0iP + - pbn + - KcEMns + matchFields: + - key: eX + operator: ʫ愿+ɹ + values: + - uAkePehZZyLW9o + - 3z8 + - 2WMM + - key: F54J + operator: 赕扯SŃ»Ʈ肏膏闊Ȕ + values: + - axHp2U + - 0vCVcVm + - bKRAH5YpB + - key: RU + operator: "" + values: + - QF + weight: -545986755 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: E4 + operator: Ǟǃ諿枤&?ƽȚɿq劳疛%QvD + values: + - IlIOp + - vRn1nYUz6 + - key: "9" + operator: M醥Z<緝ƨE + values: + - 5Nm5 + matchFields: + - key: t8k2 + operator: 慅¡煱ƌɏ磫MobƱ;悽曂#) + values: + - APV + - 5V + - key: "y" + operator: Kmká_8Fy毷鮹Ð慟Ǯ娸# + values: + - aQDHX + - matchExpressions: + - key: uFeU + operator: 鎢盄帼r &誢p. + values: + - LysfP + - ZcuO + - Vbi + - key: ALirU + operator: 0袦0鐆"Eʚ*ʜčÛU1榺ZTg + matchFields: + - key: dDqy + operator: Ė鯛ďǐč2Ô + values: + - pw5cbzP + - matchExpressions: + - key: S5unJb7B + operator: 苳ʥćWŀǐěƿN滙誫 + values: + - Hv + - key: sV2mp + operator: 髂:sǀ炉dž]蟽ȧO兆 + values: + - ZTJFrJ8Cqy8S + - eUC8TkNQN + - key: pyRT + operator: 3)饩MAɄ容ȏĔ¢沔Ɠ,穑茲孟%Hō + values: + - "" + - h6eI + - Ikf5cvEh9NZFb + matchFields: + - key: otsM0 + operator: Z`f%皰頶 + values: + - ytwAnhQ + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: i2Yd + operator: 蟦Vɱ蔅d丂DÉ秤Ń岑囌J翮ȱʊ + matchLabels: + jHn: lid + matchLabelKeys: + - kD1kvi + - 9KH9ui1LbyOE + - D + mismatchLabelKeys: + - WR + namespaceSelector: + matchLabels: + kbWYtJ: z4u4F + namespaces: + - 5oj + - iMSG8N + topologyKey: sPj + weight: -1454982636 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: rcXNsa + operator: ɐLjĮjƫ4;C羚ƍ|呾ǮǕ÷濧Ɍ¶ + values: + - K + - jma + - key: MM1 + operator: ɀìɦȼ彆+扭 + values: + - 21xDgiB2h + - key: iP7lsf5 + operator: 3嚲誴Ɏ.ɖǶĜ@典氐ǂ + matchLabels: + 6u: "N" + 82eQ: Ij + matchLabelKeys: + - lMPCXm6 + - rZh7Y + - ynCOrnK60 + mismatchLabelKeys: + - Zx73 + - nh2TGmsHP5 + - un + namespaceSelector: + matchExpressions: + - key: hF7F + operator: ǝƊI¿ƍ熍ƌ曺圥皼Ɋ| + values: + - Tv + - XEt1 + - j29 + - key: VwkX4c + operator: ==GȢĿɍÓŴÃ0NJ旋轠ɂʌʥ + values: + - ro + - lsrjonA + - key: q + operator: ĨɦƖ釅蹚ñɘ鸶7Ŧ蔅ǫZɐ骅Di$墘 + values: + - I02X6z0hR + - wX + - PpU + matchLabels: + 5D8: G01r5VUDT + namespaces: + - rMgg + - aSTysFdx + - iBK + topologyKey: "" + weight: -1129889139 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: "" + operator: 柴IĢ觐ƒ埔匱®ƦF5 + - key: QV7m + operator: 卌桢X|柘糁TÚ7ż + values: + - IxExiu + - xoU5vkb + matchLabelKeys: + - vr + - fKl3 + - Aww + mismatchLabelKeys: + - 2gZ + - OF + - UzNZa2GG + namespaceSelector: {} + namespaces: + - rRKS + topologyKey: wIaw + - labelSelector: + matchExpressions: + - key: Tdc + operator: ųem魲箬徤ē身氶縝膢C蛓:篹ďu^ + values: + - rzNT + - Kn + - Qx + - key: FX + operator: 顆Ōȋ縺E髳9K翜ƻȏƼKȂp4ƣ龱 + matchLabels: + 2m: w + mi6YiCvW: 5vL + qqgwKJgw: KFkRS + matchLabelKeys: + - zDwh + mismatchLabelKeys: + - 9Y1 + - "85" + namespaceSelector: + matchExpressions: + - key: uKoUAJegj + operator: ȑ{戃ǹƑfT间<ʨ冊iɉL襾 + values: + - pn0 + - ODho + - Mw + matchLabels: + gAYxNPwv: "" + namespaces: + - xoqtp + - gqFN0F6 + - hfABXv + topologyKey: eZigjcr + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: sFZf1 + operator: 頸咾%;ɦɤʉɡ哦mZ, + values: + - WoXBm2 + - key: cO + operator: áʀŁf薎&y:疛Eɻp筸ħ + mismatchLabelKeys: + - 7evLyF6 + namespaceSelector: + matchExpressions: + - key: D4XJFPTz + operator: ğ + - key: yD1a + operator: wǺ<Ɖ諥箧ƕ9ș蛡 + - key: aVeWs6aiG + operator: 犙蝥6k悸柦蕥í瞣ȑHw域徑Y + values: + - 9WfvQS + - hZBaWOL + namespaces: + - Rz3tiFM + - u2DUO2pp + - G + topologyKey: uM5 + weight: -1873790375 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + CFodA: epELn + matchLabelKeys: + - hT + mismatchLabelKeys: + - OKZEsI + - gseMbYy + - hNiQ2C + namespaceSelector: {} + namespaces: + - PVR1 + - RhA + topologyKey: LA3T + - labelSelector: + matchExpressions: + - key: c3yG2bnW + operator: 滛57ħ瞘ǒ#JLJ骶~颒Ļ + - key: uX + operator: ǝQȅd + - key: 6iK + operator: GÉs + values: + - DfRNQ0 + - D3G + matchLabels: + o: 74T + matchLabelKeys: + - W3FWL4 + namespaceSelector: + matchExpressions: + - key: JiqSMpi + operator: '`V区Å[銘氚Dz讜Óļ睻}&ɿn颢唘' + values: + - OGIx + - JGHg3JPc + - key: QiOUB + operator: 6猧wDz哊藯掭酌瞡彸ʯ種ŎNJh] + values: + - UaUBtE + - BU3xJ + - sQ1 + matchLabels: + qyrPifdU: 3NJe + topologyKey: kl5 + - labelSelector: + matchExpressions: + - key: FWHaEt + operator: 耛鈞笵憦Ľ + values: + - 10FWIeIUIV + - 9fotw + - Kxbpx + - key: Zvhd + operator: i(艱 + values: + - ech + - cRpvMX + - "5" + matchLabels: + crAc: ZHLB3 + mismatchLabelKeys: + - "48" + namespaceSelector: {} + topologyKey: ayQ + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=y8Skx9 + - --configurator-base-image=n74Ca + - bv4LbFjFG + - X5vvak7u + command: + - /manager + env: [] + image: n74Ca:y8Skx9 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 64 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 547 + periodSeconds: 952 + successThreshold: 102 + terminationGracePeriodSeconds: 374 + timeoutSeconds: 533 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 935 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 566 + periodSeconds: 45 + successThreshold: 979 + terminationGracePeriodSeconds: 927 + timeoutSeconds: 307 + resources: + limits: + cpu: "640" + memory: "580" + requests: + cpu: "919" + memory: "170" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + searches: + - H1Ls9 + - SR69A + - 8zal + dnsPolicy: ǧÏ6鞤ǃ$'[ëĀo壗WNj醝篙ʠ栏DŽ + ephemeralContainers: null + hostAliases: + - hostnames: + - o8oST + - GKRC + - NA4 + ip: 3ii4zn9U + hostPID: true + hostUsers: true + hostname: 3daCO + imagePullSecrets: + - name: uu5NgOq + - name: 07xyy + initContainers: [] + nodeName: vglXkE + nodeSelector: + FhSUG: 2yqKe7z + GHtF: h + aCZcb: Wr + preemptionPolicy: 如菧阣唖墡Ċġ鱙|o).BƬ©v8 + priority: -982659739 + readinessGates: + - conditionType: ',Ȥ鈤' + - conditionType: 峻IʍíS彸诒Ʌȑ.cȑFŨɥgcƨ + - conditionType: Ć媩ė + restartPolicy: 基QħDzP{ + runtimeClassName: 5RJEe + schedulerName: LdYLugz + securityContext: + fsGroup: -2057651510620291800 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1435433652739589000 + runAsNonRoot: false + runAsUser: 6430428212335180000 + serviceAccountName: p4SA + setHostnameAsFQDN: true + subdomain: MCqP6 + terminationGracePeriodSeconds: 2536493343284787700 + tolerations: + - effect: 1評鐧ȍ嫌u贝ǹƦ饷ǻ6 + key: xMcOw + operator: µ + tolerationSeconds: -8531274251908150000 + value: T + - effect: ő',U ǖ®EŤc践i訤綶ǁ + key: T39B + operator: ʕ60WH + tolerationSeconds: 4553033317707853300 + value: RrKuu + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: MwR2Pwv + - name: 9vyXal + - name: Vs5abT + - name: t10I +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - MOjCBp-webhook-service.default.svc + - MOjCBp-webhook-service.default.svc.Xcx1 + issuerRef: + kind: Issuer + name: Sb2hWn-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: MwR2Pwv +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: Sb2hWn-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: MOjCBp-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Sb2hWn-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: Sb2hWn-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: MOjCBp-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + "8": tf7ML2YS2 + Nr: WJKMVr9D + Vl: "" + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + Jacfyrff: CPx2 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MOjCBp + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: g-crd-job + namespace: default +-- testdata/case-085.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: KDM + health: + healthProbeBindAddress: wycgD5c + kind: IyB + leaderElection: + leaderElect: false + resourceName: "" + metrics: + bindAddress: KF + webhook: + port: 303 +kind: ConfigMap +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-B-default +subjects: +- kind: ServiceAccount + name: je1S + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-B-election-role +subjects: +- kind: ServiceAccount + name: je1S + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-B +subjects: +- kind: ServiceAccount + name: je1S + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: B +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: B-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: B +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B + namespace: default +spec: + replicas: -991454453 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: B + strategy: + rollingUpdate: + maxSurge: 1937774995 + maxUnavailable: 1190668901 + type: (WƯ!};悝坉 + template: + metadata: + annotations: + "": lQQOuemOde + 7bziLy6: 1adb1B + hcirf2TLX: jDyR + creationTimestamp: null + labels: + 6SnAV: uaxH5W906K + QMcVns7sS: kRzb + app.kubernetes.io/instance: operator + app.kubernetes.io/name: B + p: mpjYhM + spec: + activeDeadlineSeconds: -7878435763390549000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchFields: + - key: Wk8kIT + operator: 爼熘k丽稺øŜ彍娜ǭ + values: + - WRFzjOY + - yBjci + - Fc2viIi + - key: SikY + operator: ǪPƋ + values: + - ppQ0K4G + - wEoi + weight: -1098671981 + - preference: + matchExpressions: + - key: H6a + operator: Č堣ɧġ俏蘻舐嗂檮8 + values: + - D9c + - C + matchFields: + - key: oALca + operator: 骐挢鿋 + - key: hVDRt8g + operator: "y" + weight: -1789374020 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: 0SV0XWK + operator: ʭƐ樝ƾhőʇ]飐墪,礽 + values: + - A5EXLlJ + - J + - Xqoct5MT4 + - key: i4w9axF + operator: 艿毌楆鰓+ + matchFields: + - key: EcetQ6v + operator: Vʧo<ƀ + values: + - WtU + - b + - cb + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: cgoIIhXBNsAA + operator: ÛD除,^掄3ǡ + matchLabels: + f: tl7 + j: QVzmksQ + yL25uhM: eJ73 + matchLabelKeys: + - "9" + - 5Z6 + mismatchLabelKeys: + - dDRd + - GPE9 + namespaceSelector: + matchLabels: + 1OrS9bbBE: iBl85Ft8 + x: zU + topologyKey: cfkeXDX + weight: -280462771 + - podAffinityTerm: + labelSelector: {} + matchLabelKeys: + - mRv + mismatchLabelKeys: + - TSZIHYXy + - "" + namespaceSelector: + matchLabels: + 0yQ1MAs8: p + aW: wboVc + j: K7x6hpmg + namespaces: + - 6Bs + topologyKey: hO + weight: 273500041 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: 5BR + operator: IJTPɁ= + matchLabelKeys: + - yS7 + - LFF3D46C + - 9tprIb1DgdS + mismatchLabelKeys: + - 9O4vK + - 8mdq + - N7jeqZE + namespaceSelector: + matchExpressions: + - key: 5AiNz2G + operator: 曽ɠ/Ơ + values: + - p4JR + matchLabels: + Iae: GXSok + c3AmNm5: JpxmO5 + oXyB: Lto27BSiZ + namespaces: + - lZiNIC + - v3TiqOqut + - e3Mq + topologyKey: ner + weight: 1046548334 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: YKl7 + operator: 猩r + values: + - 48mqOWy + - MD0qE + matchLabels: + phmGp: HRpuD7EAKz + matchLabelKeys: + - GCWhorcZ + mismatchLabelKeys: + - hZGc + - GgU + namespaceSelector: + matchLabels: + 6D5tsqbwi: er5H2r4 + DFP5: cKZ + MDTL: xzXb7 + namespaces: + - 1XBZut + - bpZro + topologyKey: 6OdV + weight: -546886544 + - podAffinityTerm: + labelSelector: {} + matchLabelKeys: + - R + mismatchLabelKeys: + - 4b6tBLcsni4 + namespaceSelector: {} + topologyKey: n0G0qkJ1s + weight: 762012860 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: Yd5 + operator: Ǜā|(`ȥ¼ǬƊ槹 + values: + - QR + - c0V99E + - key: vInVhLQ6 + operator: A钫ǜ誰D礨參癶¿肻佊ê + values: + - Tojkshis + - key: PoqQ + operator: 驨 + matchLabelKeys: + - c4AB2hZ + - 7g + - ac6U3 + mismatchLabelKeys: + - Qld + namespaceSelector: + matchExpressions: + - key: ZO + operator: 椤ŦkĞa桭Î佄Ʋ + values: + - QsoS + - key: TmU + operator: ģɸ謩ɚ + values: + - cdXLf + - Hss + - key: ckgB4L + operator: 弤荏蒳柚溵]橮ǯɡA8祿ǝ`臑Ȇ齱 + values: + - Bx + - IN7PGHg3 + - xQHI8kiXeOR + matchLabels: + "": K + naRtOdp: Ds9D + vFHV0iM: sU025 + namespaces: + - gzLxZ + topologyKey: vW8Ax + weight: -1615076535 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + pyudxm: uYlVP + matchLabelKeys: + - 68EWK + - qb04qrnut + mismatchLabelKeys: + - F + - FyqGDfZhkz7T + namespaceSelector: + matchExpressions: + - key: U1AB4 + operator: Ûȸ + values: + - POhbV + - xwWbwcrx + - MZS + matchLabels: + UtqN2: I8 + namespaces: + - yYyARb8 + - glcIadI2L + topologyKey: xBJrS + - labelSelector: {} + matchLabelKeys: + - G8pcgzA9q + - Gp + namespaceSelector: + matchExpressions: + - key: ddlUO + operator: '}溲(pɛ鰍¼ʦ' + values: + - CZOQJG + matchLabels: + a8hIYjkhT: QFXC + pT9OT: c + namespaces: + - ObXq8 + - PSG501RD + topologyKey: FI8 + automountServiceAccountToken: true + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=bBlM + - --configurator-base-image=ftKlY + - amoUVan + command: + - /manager + env: [] + image: ftKlY:bBlM + imagePullPolicy: Always + livenessProbe: + failureThreshold: 554 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 941 + periodSeconds: 589 + successThreshold: 118 + terminationGracePeriodSeconds: 63 + timeoutSeconds: 733 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 751 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 234 + periodSeconds: 570 + successThreshold: 828 + terminationGracePeriodSeconds: 435 + timeoutSeconds: 451 + resources: + limits: + cpu: "125" + memory: "249" + requests: + cpu: "877" + memory: "279" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + nameservers: + - puVsXD + - Kll1 + options: + - name: R1wvl + value: N1Tp + - name: eLC9 + value: RxUBin3 + searches: + - K3 + - 9h8 + dnsPolicy: 藕ɚu抩"úF懭øʃǽb慬sF駢1O烑 + enableServiceLinks: true + ephemeralContainers: null + hostNetwork: true + hostPID: true + hostUsers: true + hostname: VJmG3G + imagePullSecrets: + - name: iqb + initContainers: [] + nodeName: fIbNqzMr + nodeSelector: + FiGgG: xLfA + Gofa7lA0: qM4HCo + boRUnI: wZduOUw + preemptionPolicy: oƨȠĈ縶樑 + priority: -218326744 + priorityClassName: K7 + readinessGates: + - conditionType: ƙnɫ%ʂ + - conditionType: Ů逭ƻP[9ȁD\IJ! + restartPolicy: 鈴Ŕjř5șs64焫竌粥T搫bB + runtimeClassName: CtWS + schedulerName: oJRX + schedulingGates: + - name: z + - name: sIdY + - name: R4JiY + securityContext: + fsGroup: -7501809040235854000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -7273152115155623000 + runAsNonRoot: true + runAsUser: -6592709742871125000 + supplementalGroups: + - 2843801778861937700 + - -8950654477624867000 + - -5634093482383345000 + sysctls: + - name: dZp + value: zjyFb + - name: LcxA45c + value: S9vTESIXCD + - name: PYX996 + value: vNQSNse + serviceAccountName: LenWv + setHostnameAsFQDN: true + subdomain: 9m + terminationGracePeriodSeconds: -6311763428986161000 + tolerations: + - effect: a鴟j晌丶禆* + key: VEV + operator: 7ȎBȡ賡1<ɻŻ]ǹȽ呝ÑŘȍwF + tolerationSeconds: 1804483854762967000 + value: SEiR2 + - effect: '*Ɲ&ȀñNʇX麤^猝烐ŵ浶ȊĘƮ' + key: 9P5 + operator: e鐒ǐʖdž簟Ƨ粂 + tolerationSeconds: 3825796718011534300 + value: 94WYMLw + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: "" + operator: Žƚđʋ + values: + - GPi + - gES2 + - kIzQlc + matchLabels: + XTERJrouGYchN: Pf + matchLabelKeys: + - Sm02Q2pO + - 08uu + - RIK96rg + maxSkew: -1787144842 + minDomains: -176326459 + nodeAffinityPolicy: h + nodeTaintsPolicy: 歆澔'ŏz$9oÐ:ҵ + topologyKey: pySCgG4ZN + whenUnsatisfiable: Lj譩NJvď + - labelSelector: {} + matchLabelKeys: + - FEMppYW + maxSkew: -1975604271 + minDomains: -101658169 + nodeAffinityPolicy: ~脽ăʒŧ樹笻Qɵ層鍄稨电廢烰2Ȕ + nodeTaintsPolicy: 龩Öǖ~Ļò談Ê螘_逆ū + topologyKey: Z6BhYdo18 + whenUnsatisfiable: ə#Ą毈R>掤ƘŚa簺痟嫼忱ÔR叢 + - labelSelector: + matchExpressions: + - key: Jbp + operator: m~御鎡møƣ嫽削Vx + values: + - v + - key: YchsSC + operator: ɟx果鸈轫-ɜʦǢ惦B恹0 + values: + - SBW71MB6qIB + - CC + - M8bymIUVA + matchLabels: + K: EIyt6 + Q: gdcFCOyVnMd + id2CllN: xfp + matchLabelKeys: + - s + - xSN7bzk + maxSkew: -1286496217 + minDomains: -957876961 + nodeAffinityPolicy: ŕ濊 + nodeTaintsPolicy: B + topologyKey: h3hAibfhYC + whenUnsatisfiable: 攻/yʢH鄹謞膭筎 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: Op2TzEc + - name: 7K + - name: Q9 + - name: pPbI +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: redpanda-serving-cert + namespace: default +spec: + dnsNames: + - B-webhook-service.default.svc + - B-webhook-service.default.svc.y4nxdBsb7Zu + issuerRef: + kind: Issuer + name: operator-B-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: Op2TzEc +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B-selfsigned-issuer + namespace: default +spec: + selfSigned: {} +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: operator-B-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: B-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + pZTJ: OgaeCRx + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-B-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: operator-B-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: B-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: B + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: je1S-crd-job + namespace: default +-- testdata/case-086.yaml.golden -- +======= +-- testdata/case-018.yaml.golden -- +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + RcCTPya3q: gXZ1Mm1dK + VnLc: jQYB + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: S + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: M2i0h + health: +<<<<<<< HEAD + healthProbeBindAddress: uixV6HW + kind: jN +======= + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: t-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: t-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: t-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: t-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: t-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: t-default +subjects: +- kind: ServiceAccount + name: "" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: t-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: t-additional-controllers-default +subjects: +- kind: ServiceAccount + name: "" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: t-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: mBH +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: t + namespace: default +spec: + replicas: -195629669 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: mBH + strategy: + rollingUpdate: + maxSurge: 1706509908 + maxUnavailable: 90751881 + type: 撽耺uŘ + template: + metadata: + annotations: {} + labels: + FBgpZyzhI3: SXtIi8 + TbfD: kEnhJ4a + app.kubernetes.io/instance: operator + app.kubernetes.io/name: mBH + eyc: g8 spec: - activeDeadlineSeconds: 8517436021481636000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: 0O - operator: 鶥ʧŷ袸粶Ƚ悊|úY櫶襄ɨ牚ƤƔ聍 - values: - - OOmD - - az0yMAah - - JOK - - key: q2 - operator: Ǫęŷŀ珣搐廒ÔälĽU慃-Ɔ恺+ - values: - - yIY - - jRVE - - AwosxJOY - matchFields: - - key: GyT0dGW - operator: 怌h机Ǖ瓋Ūxk&9wy還昖i鳃ǔ - values: - - DsPogS - - R9gB - - RIJl - weight: -766748941 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: 8uvMjiWzBOQ - operator: EǮ8戬Ɇ - mismatchLabelKeys: - - Hp6PSgn - - RniyheU - - i - namespaceSelector: - matchExpressions: - - key: 19LFz - operator: )騙BQ毺tĽ瑭髱ĭ嬫箵}窈胟倨UØ - values: - - rxluT - - RzP8AR - - lhiDXnx - - key: psSVb - operator: ɷ畁ȒrL - values: - - GdwgPG - - key: 1ek - operator: 嬳冈 - values: - - SZ5Fye - - x83KbQOK - - O8pMP1V - namespaces: - - H - - eU90s - topologyKey: 5zdJ - weight: 1160992652 - - podAffinityTerm: - labelSelector: - matchLabels: - "": qXdYU - mismatchLabelKeys: - - "" - - zs - - flicu - namespaceSelector: - matchExpressions: - - key: gt - operator: ƉŤMĕz - values: - - Sd2TsQc - - Xl - - key: BJ4V172F - operator: $ - - key: 7tYy8Ud - operator: ŀ鳼Ȥ歨轎w倉禍ǵ#ɝ - values: - - FJa3D1I - - s7Mvyt - namespaces: - - amOSuy - topologyKey: pNLZLnwSv - weight: 1465456140 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: F - operator: ȩ灂ȼéȱr貴 - values: - - QQI - - HF4 - - key: OqYys1j8g - operator: ƪ芮n - values: - - QlhDKhQ5v - - KBh4ig8 - - fjV - - key: LPTVNVCd - operator: j脭`8燅c蹋箤(瘓à - values: - - hlrmr - matchLabels: - 7N6FV: 7Hc - f0: 8ssGzW - m8dwrDdQI: "" - namespaceSelector: - matchExpressions: - - key: WRys - operator: 6Ź8 - values: - - iV - - qvSMb - - key: 9Bpe0q - operator: 駉j屍ɓ?ȯ!:v齮痔桜黚 - - key: ZNq7ak2 - operator: ǩ碈< - values: - - 4ZG - matchLabels: - 0qSfKGhTN: 0JNv - i4e3e: co7rR - namespaces: - - "1" - - f4CR - - pUEkTki - topologyKey: X - - labelSelector: - matchExpressions: - - key: bdiq - operator: 蟨 - matchLabels: - 1jZJHLH9: wx - KyT: bgLxSsl - NvtPki5: ojLhlK - matchLabelKeys: - - nO - - rG7BYxiHa7 - - 7cGar - mismatchLabelKeys: - - uCmBQg6Vs - - Z8QQGLGHO - namespaceSelector: - matchExpressions: - - key: NsHeHH - operator: 祢腗蚗 - values: - - AlA - - xq0B5 - - 1ND - - key: Dm5XrYF - operator: '%ã肩ʫL样İğ' - - key: xdF - operator: Xd尕鿁]掍繛瓷&緈垙<ȩT - values: - - okAfu - - vXtIJgVn - - 24Hqw - matchLabels: - tXQm: JxUq - topologyKey: VHrX6 - - labelSelector: - matchExpressions: - - key: rr9UE5yiv - operator: 沸a)Ȥɘȗ*f虖>Ȉ\跘摃梡M1 - - key: jSSPM - operator: 坨孀 - - key: CExbI - operator: 鋺唱鱖Ú* - values: - - O - - Vu - - lgQ - matchLabels: - RX: mRN - matchLabelKeys: - - xFOyA6OD8 - - zmc - mismatchLabelKeys: - - 7ZMxa7okydGf - - xAt12Lr - namespaceSelector: - matchExpressions: - - key: Yq9fjxN8 - operator: 崊dʭʓ - values: - - "" - - "" - - k6pAQ - matchLabels: - Ax: 1c - namespaces: - - sN1S - - BpRRtw - topologyKey: QeF7HWto - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - qlNhu7K: ZRmvQy - mismatchLabelKeys: - - dArXnCa - - FH - - pGd15wlred - namespaceSelector: - matchExpressions: - - key: tY - operator: 渶Ď[泣(蛏p縼蓂 - values: - - VWw8 - - NVso - - 0B27 - - key: 6mA - operator: 傈厇kĶ竓Ș趫祄昙嵥(j噲$陫窎 - values: - - e6i62Q - - "" - topologyKey: Xfi30Zca - weight: 1975781303 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: VLjkGhf - operator: "" - values: - - YhLghmxw - - xuThL - - key: B - operator: ť攇桡呟D颛訞Yzɾ冉t(幬f岥CZ - values: - - GMQupJ - - BJOurJ - - key: wHF3y - operator: S - values: - - 3Mdt - - aBCk6J - mismatchLabelKeys: - - UlXD - namespaceSelector: - matchExpressions: - - key: gXhZQJx4 - operator: oǿ - values: - - VbrAa - - BwkxO - - key: OaCAe8va5 - operator: 驼Þ簿--ŮF)CĕctɮÄȊǦɐļe - - key: P1HlUyRJ - operator: 賽!e\>ĺÿ璒ȆƳ濤ŃÐHG儚Zǘ椘 - values: - - kRXLx - - jXS3fY - topologyKey: pXtyl - weight: -395468765 - - podAffinityTerm: - labelSelector: - matchLabels: - jCGF: nH - wz: mRZPcj - matchLabelKeys: - - FodjS0RYf - - 2UxT3 - mismatchLabelKeys: - - BAb - - Fpu - namespaceSelector: {} - namespaces: - - hl - topologyKey: DT7d - weight: -1720224527 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - YY8v: L - f: JcpM1b - namespaceSelector: - matchLabels: - 0WihS: xl - sZh: ld9ncR - u: 1dM - namespaces: - - mqqAiz4gX - - "" - topologyKey: hl6IEOj - automountServiceAccountToken: true + affinity: + nodeAffinity: {} + podAffinity: {} + automountServiceAccountToken: false + containers: + - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=true + - --health-probe-bind-address=:8081 + - --leader-elect + - --log-level=cxEnPx + - --metrics-bind-address=:8443 + - --webhook-enabled=false + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 849 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 627 + periodSeconds: 865 + successThreshold: 672 + terminationGracePeriodSeconds: 914 + timeoutSeconds: 864 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 153 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 689 + periodSeconds: 496 + successThreshold: 299 + terminationGracePeriodSeconds: 687 + timeoutSeconds: 346 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: + 6BimwrRd6Fd: lOW4 + securityContext: + runAsUser: 65532 + serviceAccountName: "" + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + hjyRGT: sj + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: -migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: -migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: -migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: -migration-job-default +subjects: +- kind: ServiceAccount + name: -migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mBH + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: t-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: mBH + spec: + automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=YQXlr - - --configurator-tag=H - - --configurator-base-image=Nt - - KeFi - - dfONW9 - - 9znBOn + - migration command: - - /manager - env: [] - image: Nt:H - imagePullPolicy: Always - livenessProbe: - failureThreshold: 122 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 598 - periodSeconds: 192 - successThreshold: 163 - terminationGracePeriodSeconds: 602 - timeoutSeconds: 792 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 376 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 576 - periodSeconds: 929 - successThreshold: 628 - terminationGracePeriodSeconds: 234 - timeoutSeconds: 833 - resources: - limits: - cpu: "70" - memory: "179" - requests: - cpu: "361" - memory: "304" + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - uu5wuW - - Bol9J - searches: - - BVejU6FkQ - - hti - - UA - dnsPolicy: )öDž*厧ȣ}眭 - enableServiceLinks: true - ephemeralContainers: null - hostAliases: - - hostnames: - - 1CLOeowAxb - - CxZs - ip: eiUTF - hostIPC: true - hostNetwork: true - hostPID: true - hostUsers: true - hostname: AeGl2y - imagePullSecrets: - - name: yhMJMJnb8 - - name: cgEZxLt - initContainers: [] - nodeName: LLpUiEAZCZ + imagePullSecrets: [] nodeSelector: - TLl0PZ6OTN: vkbv8W - ZdErK: 6iw - iUwg: Wu - preemptionPolicy: 蠘Y¬ĺ忒"鶈j宬I岺<NJ韍銏~ȕ - priority: 258864602 - priorityClassName: "N" - restartPolicy: 輰爭'4鍽 - runtimeClassName: W - schedulerName: iwfxQaVdWarPz - securityContext: - fsGroup: -2148455437780501000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 4397321133833196000 - runAsNonRoot: false - runAsUser: 741314432643626500 - supplementalGroups: - - -601783420272022700 - - 8053103445269503000 - - -3944851009563354600 - sysctls: - - name: "" - value: C7Usd - serviceAccountName: 7Dq - setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: S3 - terminationGracePeriodSeconds: -7320009787630770000 - tolerations: - - effect: '&鏅ɷ1ɯĵ>r' - key: nz - operator: ɺdžċĐijxɕ - tolerationSeconds: -4015282094144227000 - value: YUCnlhz - - effect: 塼 - key: B7pZHa - operator: '!Ǎ?環Ȩ奠įȩəȚ,ɵ讞$<懒' - tolerationSeconds: -74957164183154200 - value: 6M6E - - key: t - operator: z嗴z奈閶ąŨ卉椸ɫǢ\ũc`ƍƉ - tolerationSeconds: 1380891834235558700 - value: 1Gyq - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: hFda - operator: ŲtHƪG`ɥ枻殜õ6 - - key: vv3h0dGP1 - operator: 鐴ŀ?蔀ȿ嶮m襉 - matchLabelKeys: - - fqGXSlw - maxSkew: -1479045130 - minDomains: -1439264948 - nodeAffinityPolicy: ȷ%ȵƲc睊 - nodeTaintsPolicy: ʂ.Ĭ齭sȤé籔~ñ'k`Ȣɗ烐ɟėƹ - topologyKey: CEXN - whenUnsatisfiable: 夨屣鯞Ì蜿ÿ嘒J慯瀉Ƅdž篨Q; - - labelSelector: - matchLabels: - NnS6: OT8S6Cn4f - aNLpsJD: BTSGW - dajfmOJC: 2jrw0cOu - maxSkew: 1099055978 - minDomains: 1592864027 - nodeAffinityPolicy: =-鲲q雷ʌ>Ç橕} V, - nodeTaintsPolicy: '|åɥ#9甽¼ŝVZ' - topologyKey: hb4mcC - whenUnsatisfiable: /ɼɇâE + 6BimwrRd6Fd: lOW4 + restartPolicy: OnFailure + serviceAccountName: -migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -39213,400 +94461,192 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: EbmP3 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - I6z: bgcjS - MNMEwkPV: kzM36 - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - 85G: Wn5f - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WgoV - app.kubernetes.io/version: v25.1.4 - aqO3ub: Ai5ntG - helm.sh/chart: operator-25.1.4 - povH0tOlni: A - name: 4X8m6P-crd-job - namespace: default --- testdata/case-046.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount -metadata: - annotations: - uKiV: x73f - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 0tSU - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Wmx1ORHBT - namespace: default +-- testdata/case-019.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: zd + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: - healthProbeBindAddress: uyO - kind: 5xDLZq + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig leaderElection: - leaderElect: false - resourceName: WfnOlt + leaderElect: true + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: 7H + bindAddress: 127.0.0.1:8080 webhook: - port: 256 + port: 9443 kind: ConfigMap metadata: - annotations: - 5PCqmrcu: 9Mh2cYD - 7ioUdNK: ZfqZZ - ka: lnxR4 - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 0tSU - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kO-config + app.kubernetes.io/name: RyEA + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: dkrKfFzg-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - 5PCqmrcu: 9Mh2cYD - 7ioUdNK: ZfqZZ - ka: lnxR4 - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 0tSU - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kO-metrics-service + app.kubernetes.io/name: RyEA + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: dkrKfFzg-metrics-service namespace: default spec: ports: - name: https port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 0tSU ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: - 5PCqmrcu: 9Mh2cYD - 7ioUdNK: ZfqZZ - ka: lnxR4 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 0tSU - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: kO - namespace: default -spec: - replicas: 1544247573 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 0tSU - strategy: - rollingUpdate: - maxSurge: 1997166204 - maxUnavailable: 1274979507 - type: ^萀彼=ĎʼnØ皙Îk!Ë婽甊t - template: - metadata: - annotations: - "4": z - 32D: xxW - creationTimestamp: null - labels: - G: "" - ZAHH: LAa - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 0tSU - m2vh: oO5 - uY9r: vT - spec: - activeDeadlineSeconds: 7867988885961322000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: EBm0OWl - operator: 沫ȤňĭĖ校¤?6r驕ȵRʢ潞饜 - values: - - S4cLQgY - - key: sCTFAdg - operator: 疙Ȁȣ\鬹亁2讉ŏ/舴Mŕ熵 - values: - - HG4QpF0 - - 0V8fa5AEhda2 - - hruUdDl - - key: UjSH41 - operator: Ů\z[$)ĢǷ瞗ƥ廅退Ȁ輜崀ʬ - values: - - Oo52C - - "" - matchFields: - - key: oY - operator: ɶmƽư - values: - - myfWkL - - BWE9sBVy - - key: AzGq - operator: 瀇廓bľ嘹>如a襤殪櫕ȉ岯ŭ - values: - - SYsJeo - weight: 132079138 - - preference: - matchExpressions: - - key: Ufd - operator: VĵƣÎ钕ċ - - key: 03Z - operator: Ǭɱò圦劮,2凷]}=icű枾 - values: - - 6aEkz - - g - - 8ZjMt - - key: "" - operator: ſȭpP籼ĵ紬癝r糘轔ƪ4祹狫酃鐺FJ - values: - - BGV7q - - jRq - - RDP - weight: 1820515791 - - preference: - matchExpressions: - - key: myIMD - operator: e檎鮓菅輨,餙娌uDZ]) - values: - - wh - - qWF - - key: 8p - operator: ǔW凛 - values: - - Bl1GI1 - - HL3vm - - Z8V0QG - matchFields: - - key: WaxY80 - operator: ŝǁő鏪ƽɇe7?隧× - values: - - jcVXe - weight: -1898189568 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: rDAprk - operator: bo»t鵞Ƈ噼&qKƬ}甼Ō晏 - values: - - m7JIapRHROvtI - - 18d - matchFields: - - key: wFjOx - operator: 5廈k猃w}漄胎ŶǮ唻蒫婈 - - key: QAGmuJVyKO - operator: .梸T铘ʆ愂踋"欛逍Ʃ+ƽ栃噤瑖] - values: - - M7Leap - - p2NqUfPV - - FCag - - matchExpressions: - - key: udITb - operator: 監呣礝+n与鑕醥ȅ - - key: sk4O9J7cQ - operator: 9"遽Ǵ輱ļI5ʘȤ - values: - - Mq - - I - - matchExpressions: - - key: Z2xbNz8p - operator: '"WCȰijɍ綻玟夑Ƙ鸍ń' - values: - - Ug1UmNiXuz0 - - key: x - operator: Hɻ0ĩ mʒäĬ6枵ǎ^Hɭ鄈 - - key: UV - operator: lŶ耯^穟7Úȹ - values: - - lAk8S - - tO0 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: RyEA +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RyEA + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: dkrKfFzg + namespace: default +spec: + replicas: 190309761 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: RyEA + strategy: + rollingUpdate: + maxSurge: 837209504 + maxUnavailable: 64856132 + type: ']Ǿ鹱Z~ě撝' + template: + metadata: + annotations: + 2AP: OIbMF4Unu + itiaju: zM2TLW + jlQx0YD6: dcHw + uqBhIvHJ: hRkzC + labels: + E3j: gYl6UlZy0gO + app.kubernetes.io/instance: operator + app.kubernetes.io/name: RyEA + wbzONQmO: cpdC + spec: + affinity: podAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: - matchExpressions: - - key: "" - operator: 煴ÿ戥霪gĿ 嚜_攄Gņ樧爊ʂ墋Ƹ絥 - values: - - GHJP8Igv - - SDXg - - key: 5N - operator: ^S>ŢS枥Cƣ - values: - - qbpuhVEI - - i4Q4A - - RDwvkFcBvQ - matchLabelKeys: - - og7qAhNC - - "5e20" - - bEX - mismatchLabelKeys: - - o + matchLabels: + 6YL: aJ98 namespaceSelector: matchExpressions: - - key: XyijfaQ - operator: "" + - key: 2jhhSv + operator: )值Oĵ4夲鵓ʤ`į|zA糀湴鴃 + - key: FmAyRjqsHeQq + operator: a剋 values: - - G3nFB5 - - a - matchLabels: - mxuSXpI0k4: seiahuvm4L - namespaces: - - XQ - topologyKey: 3oq9eC - - labelSelector: - matchLabels: - "": "" - cXVby5hPwzPn: P6RAP - matchLabelKeys: - - v5eoGst8Hr - - Xj0Nc - - Ihw - namespaceSelector: {} + - 3nC0zYSXZKbv + - B + - 1e4H6xjIM0nAA9Eq + - key: pBBkU + operator: ēDž89磍熙$ł摯ʼn隊羗瑧Ƕ namespaces: - - CGm3YgV - topologyKey: HHPI + - aR6MBPYFp4ViU + topologyKey: wzvKG - labelSelector: matchExpressions: - - key: utfqZ - operator: 髓Ȥ礁K{絗&ǩ! - values: - - Wxx2rK6o2 - matchLabels: - hN: UaT5N - matchLabelKeys: - - j - - MnyZgn - - UKzSg + - key: tZv3Cpr + operator: '|儂dž;KČB\媽ìƆ宄ñůsʅ' + values: + - YSgb + - key: SiXA23NT8 + operator: JfęŘȣnČcT + - key: U5EenXb7 + operator: 御ʆ疜眱霋q盶 mismatchLabelKeys: - - wI - - eXzzW - - 4j + - "" + - L88w + - Ap namespaceSelector: - matchLabels: - IeMGidnmo9B: YDlPq - bg: 9cIn5Ks - oupUqZeV: gzujQsGP + matchExpressions: + - key: euqTvdPV + operator:  庪;r踍ȅɫ¦2ǔv穂ʒ凄Ƿ + values: + - NjeEtl + - 5SOaiW + - key: y6Hf + operator: 4东ƞY 斧ØƬ7ǾƮ壭鉇ȠZ韏ɻ namespaces: - - cPfJ - - yuXuqa4X - topologyKey: Cjufs1 - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - L: VP85h6f - Qu2W7dr: 8ucp3d - matchLabelKeys: - - ulYtMY - - i2lqCh - mismatchLabelKeys: - - sffvIzro - namespaceSelector: - matchLabels: - MIc1oN: 4U - jwXjp: OG - t: z - topologyKey: vE + - W0segAVQCtXgt + - n1xPIL + - "443" + topologyKey: nbqa64 - labelSelector: matchExpressions: - - key: xt8 - operator: 忟朤qƍĮCZ甠ƣ - values: - - 8DGjvW - - oFw - - vXZL7uR - - key: vHxM - operator: ɳƑ$迗湵菑S:Ȝ鉡' + - key: YpmET2fx + operator: 撰蟈ôrʭ肒.Q values: - - gDstcfI - - key: NqEX - operator: ħ膰#!b'!鿼ɤ塪鶞+>Ȱ + - bY + - w5OM + - key: jNTZdgxJ + operator: 睊Ƌª(IJ悝 values: - - jT7ab - - owLaAs + - vM + - aNebWkewG0 matchLabels: - 7dyEycCK6F: Ztaj6abb - V: 4Zh83hs - VKb: LCJK + kksM: Az matchLabelKeys: - - C - namespaceSelector: - matchLabels: - 0ncmeEqz: hCLQVxX - bkdGD1B: A0zLz - e8O4P: Mq6K414H5n - namespaces: - - YY7H - - Iz - - xyEH - topologyKey: n28JY - automountServiceAccountToken: true + - keU4TA + mismatchLabelKeys: + - kDZZ + - 4qZo + - GCKuIFL + topologyKey: h1 + podAntiAffinity: {} + automountServiceAccountToken: false containers: - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect + - --log-level=WDdeI4vm + - --metrics-bind-address=:8443 - --webhook-enabled=false - - --namespace=default - - --log-level=TwQtVGrOeJf - - --configurator-tag=go - - --configurator-base-image=MRDUBfo4 command: - /manager env: [] - image: MRDUBfo4:go - imagePullPolicy: Never + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 590 + failureThreshold: 209 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 662 - periodSeconds: 137 - successThreshold: 971 - terminationGracePeriodSeconds: 814 - timeoutSeconds: 640 + initialDelaySeconds: 756 + periodSeconds: 182 + successThreshold: 418 + terminationGracePeriodSeconds: 830 + timeoutSeconds: 244 name: manager ports: - containerPort: 9443 @@ -39616,144 +94656,54 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 718 + failureThreshold: 57 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 320 - periodSeconds: 745 - successThreshold: 714 - terminationGracePeriodSeconds: 610 - timeoutSeconds: 345 + initialDelaySeconds: 172 + periodSeconds: 856 + successThreshold: 638 + terminationGracePeriodSeconds: 539 + timeoutSeconds: 993 resources: limits: - cpu: "1" - memory: "427" + cpu: "25" + memory: "809" requests: - cpu: "108" - memory: "560" + cpu: "519" + memory: "109" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - MlS - searches: - - 7ddU - - eAY3 - dnsPolicy: 咧嘳 ephemeralContainers: null - hostAliases: - - hostnames: - - k9SgM2Y - - 8NB1 - ip: hjmC4gcl2 - - hostnames: - - Ic3 - ip: wJMhEo9e - - hostnames: - - Efc8FX - - oV3GlgAF - ip: ZsRszsDK - hostIPC: true - hostNetwork: true - hostPID: true - hostUsers: true - hostname: DaO imagePullSecrets: - - name: ggPp - - name: ORs + - name: nKyG4NqL25H + - name: kQf + - {} initContainers: [] - nodeName: XnaQGp nodeSelector: - 8Xhhvc: QeJV - G: 4oZHp - preemptionPolicy: ?ʚȹ欦DcYǰ;[LhÕ?長Ǫ凣 - priority: 431927033 - priorityClassName: 6C98 - readinessGates: - - conditionType: 散4畲T媧q裾浸 - resourceClaims: - - name: 6S9WJH2 - - name: hALKj9sZ - restartPolicy: ɊÝ,û~iƂ - runtimeClassName: AQss2 - schedulerName: U728d - schedulingGates: - - name: AbeA6 + 2s7GTK6AFu: po5wvr + l1Tgl: glT8eBSZw5 + ymkXF78thlGz: K securityContext: - fsGroup: 5860725421596689000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -6792494876590631000 - runAsNonRoot: false - runAsUser: 3376299592244123600 - supplementalGroups: - - 1010093601451592800 - - -5028736228493234000 - - 1947408406497262000 - sysctls: - - name: "500" - value: D - - name: n5Op - value: 3o3 - serviceAccountName: gA2BiKxgw - setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: LxuMm - terminationGracePeriodSeconds: 3482153433229272000 + runAsUser: 65532 + serviceAccountName: JGqpMNY + terminationGracePeriodSeconds: 10 tolerations: - - effect: ÿǓȻ\浮从铏ŀ牰 - key: Tm3Fr - operator: 抄 - tolerationSeconds: -186331534445053250 - value: "7" - - effect: ƐŦǀ竓挾 - key: gy - tolerationSeconds: 4883906869684912000 - value: jIxNJO - - effect: 邈Ž鍞砎撑Ȓ櫵選7歺ƻ偫Öɺ奘Ŝį - key: lu7PaAvSZD - operator: 唡団ɢ9煪-ƴǽ堎ȵ+勾Ɣ咯ɉɪț,翭 - tolerationSeconds: -6189008985546581000 - value: gSexIRiNQoyW - topologySpreadConstraints: - - labelSelector: - matchLabels: - 1lZGp: q - L: y9 - Nlj5: TN2o - matchLabelKeys: - - xquV - maxSkew: 1561733678 - minDomains: -1000334657 - nodeAffinityPolicy: 囖Ʉʫ香==戔Lúw - nodeTaintsPolicy: LJôzRįij癮Ŗž黕 - topologyKey: "91" - whenUnsatisfiable: ɜ妒ʢIJ嶇习>NJ>ä - - labelSelector: {} - matchLabelKeys: - - Q - - bmTYzW - maxSkew: -1940779004 - minDomains: 589570672 - nodeAffinityPolicy: 鐂瓀UȮǂƔ - nodeTaintsPolicy: 眝g攠+菕Ɠ%#Ƒj亼ʼn荭淓舥 - topologyKey: jAIPAdyB6Pi - whenUnsatisfiable: Z.鳉ȃ靃z' - - labelSelector: {} - matchLabelKeys: - - kZIVnYJog - - rF1bA - - Gljl - maxSkew: 1700406858 - minDomains: 1941371014 - nodeAffinityPolicy: 顐Oʌ枚P`鴱Ǿ¡b画[丏 - nodeTaintsPolicy: 傮UÚ媵ʏ泮ȝ皱ĻȡƩǪ0FŃ彩筹 - topologyKey: V - whenUnsatisfiable: 旔8>Ǡ&z+}睂筢´È-ʗNj' + - effect: 綯Ãȋ蕗M蟤譇璏6鐉蠞獗髌ĭ + key: soB + value: 2w + - effect: 丱gnąɡC + key: q4s77yUI4 + operator: 葳ş& + value: qTKhgmov + - effect: 俉ť + key: wonVNq + operator: 8hŋnŕ*墽痳OȍGÔƣ袆 + value: rr volumes: - name: kube-api-access projected: @@ -39780,110 +94730,467 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + "": M0Ttt + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - uKiV: x73f - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 0tSU - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Wmx1ORHBT-crd-job + app.kubernetes.io/name: RyEA + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: JGqpMNY-migration-job namespace: default --- testdata/case-047.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RyEA + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: dkrKfFzg-migration + namespace: default +spec: + template: + metadata: + annotations: + 2AP: OIbMF4Unu + itiaju: zM2TLW + uqBhIvHJ: hRkzC + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: RyEA + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "25" + memory: "809" + requests: + cpu: "519" + memory: "109" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: nKyG4NqL25H + - name: kQf + - {} + nodeSelector: + 2s7GTK6AFu: po5wvr + l1Tgl: glT8eBSZw5 + ymkXF78thlGz: K + restartPolicy: OnFailure + serviceAccountName: JGqpMNY-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 綯Ãȋ蕗M蟤譇璏6鐉蠞獗髌ĭ + key: soB + value: 2w + - effect: 丱gnąɡC + key: q4s77yUI4 + operator: 葳ş& + value: qTKhgmov + - effect: 俉ť + key: wonVNq + operator: 8hŋnŕ*墽痳OȍGÔƣ袆 + value: rr + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-020.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: PBU + apiVersion: Zob3J health: - healthProbeBindAddress: BUZg6I - kind: Wh + healthProbeBindAddress: :8081 + kind: kIh +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) leaderElection: - leaderElect: true - resourceName: fj4jpKo + leaderElect: false + resourceName: k14eKhY7 metrics: - bindAddress: GX + bindAddress: knXZsN webhook: - port: 430 + port: 153 kind: ConfigMap metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP + annotations: null creationTimestamp: null labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF + app.kubernetes.io/name: 3SyCJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-config + name: QSmzerg-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: QSmzerg-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator +<<<<<<< HEAD + app.kubernetes.io/name: 3SyCJ +======= + app.kubernetes.io/name: Keyw50T +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + "": YQe + DT: TQ2bLJESBNS + JECbiE5z: 7GsL + labels: + "": 9e4vIgl + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Keyw50T + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nuj9z: 0teXTWiM + t6G2ZvuAcFNG: Fe773 + name: 3TCSa8p9 namespace: default +spec: + replicas: 693070794 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Keyw50T + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Keyw50T + spec: + affinity: + nodeAffinity: {} + podAffinity: {} + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: QP + operator: 菤諉F)"ǿ{eɁɚ! + values: + - Um0 + - xw + - HVIrRlnLW + matchLabels: + 6zySs: L3c6ot + matchLabelKeys: + - KbF1d + mismatchLabelKeys: + - 8aUF + - sQs + namespaceSelector: + matchExpressions: + - key: MqKNt + operator: 簻奦Aǁ + values: + - E3Lu + - key: vFZnZs + operator: )ä4Tǖu薉婼&eʁ挤油腐峦Ŵ + matchLabels: + BpjY7xc: FXRObnhrY + kk2: J + namespaces: + - G8OZa0C6 + - jF0p0s6z + - B2Gr + topologyKey: IIuK8 + weight: 1860718611 + - podAffinityTerm: + matchLabelKeys: + - IY + - t + namespaceSelector: {} + topologyKey: un + weight: 537096489 + - podAffinityTerm: + labelSelector: + matchLabels: + YAU2m: UciY + matchLabelKeys: + - NNRB + - HOnLafOb + - 07gtQfm + mismatchLabelKeys: + - "" + namespaceSelector: + matchExpressions: + - key: "" + operator: ȢÀR罿"紊ààÒƗ酘Bãç繻g + - key: 7vjTHw + operator: 罾=蒊NJ佩梪绡ƩƔ谒Œ3鴀! + - key: veL2ssRUK + operator: 膪ô3hʥY貓Ȅɦ¨Ʉ干ƫ薅@寳 + values: + - cEmJDGQ + - 95sfWXTS + - Z0nXfalUHI + matchLabels: + 4DzaG: jKm + HH: FOF + slx5q8: VKQkVylK + namespaces: + - PK1j2O + - NH0 + topologyKey: 9MgAeFG8ko + weight: 621690131 + requiredDuringSchedulingIgnoredDuringExecution: + - namespaces: + - RwMJgPoAm + topologyKey: Ua3 + - labelSelector: + matchExpressions: + - key: qT42tlx1 + operator: 2苚ʃC憘纑雠ħ欓矩洍ȭ + - key: T2tUv + operator: ɾnǻǫ + values: + - u + - sbQ + matchLabelKeys: + - Ejh + - JDcGLJ01x4j + namespaceSelector: {} + namespaces: + - ldwnexH + - "" + topologyKey: 1oHxK + - labelSelector: + matchExpressions: + - key: A0B3IJU7 + operator: Q庣电陖 + - key: rMpZ + operator: ȎdǑ膙ʇ膆蓢ȳüĄȳ堬敭嚪尭i蘴轇® + values: + - tm3I6qK + mismatchLabelKeys: + - 3EI1Mw + - UF + - m + topologyKey: Ktdsw + automountServiceAccountToken: false + containers: + - args: + - --configurator-base-image=T1Xvq + - --configurator-tag=JedSySWkwU + - --enable-console=true + - --enable-vectorized-controllers=false + - --health-probe-bind-address=:8081 + - --leader-elect + - --log-level=lxvHBg6H + - --metrics-bind-address=:8443 + - --webhook-enabled=false + command: + - /manager + env: [] + image: T1Xvq:JedSySWkwU + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 273 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 451 + periodSeconds: 657 + successThreshold: 445 + terminationGracePeriodSeconds: 200 + timeoutSeconds: 822 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 468 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 71 + periodSeconds: 729 + successThreshold: 656 + terminationGracePeriodSeconds: 863 + timeoutSeconds: 643 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + ephemeralContainers: null + imagePullSecrets: + - name: 2XH + initContainers: [] + nodeSelector: + L: D + ngOYPB: gYFNtb + rdnsd5z: OU8S + securityContext: + runAsUser: 65532 + serviceAccountName: qBAL + terminationGracePeriodSeconds: 10 + tolerations: + - effect: n蓭斲鮴4X綀儐ȥg!ʤ萧Ĭ + key: 2hUJvO + value: TJSv1 + - effect: 牴p#'|穁灦yʐtA9Ƒ!Rç軳Ï + key: XrrY + operator: 鐖P寄枨]亯ȯʟ薢秡琶偏漏Ǵ[eǟĩ^ + tolerationSeconds: 6408185809770835000 + value: DNGr + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + uWRxmt: R labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT + "": 9e4vIgl app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get + app.kubernetes.io/name: Keyw50T + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nuj9z: 0teXTWiM + t6G2ZvuAcFNG: Fe773 + name: qBAL-migration-job + namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null + "": YQe + DT: TQ2bLJESBNS + JECbiE5z: 7GsL + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT + "": 9e4vIgl app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-default + app.kubernetes.io/name: Keyw50T + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nuj9z: 0teXTWiM + t6G2ZvuAcFNG: Fe773 + name: qBAL-migration-job-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -39893,42 +95200,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -39937,86 +95243,49 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-additional-controllers-default -rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - patch + - create - apiGroups: - - "" + - authorization.k8s.io resources: - - configmaps - - nodes - - secrets + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - events verbs: - - get - - list - - watch + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete - get - list - patch - update - watch -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch - apiGroups: - "" resources: @@ -40026,129 +95295,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: oL1SSfzH9d-default -subjects: -- kind: ServiceAccount - name: i7DA - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: oL1SSfzH9d-additional-controllers-default -subjects: -- kind: ServiceAccount - name: i7DA - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -40243,9 +95422,11 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -40255,47 +95436,52 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - create - - delete - - get - - list - - patch - update - - watch - apiGroups: - - networking.k8s.io + - cluster.redpanda.com resources: - - ingresses + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - policy + - cluster.redpanda.com resources: - - poddisruptionbudgets + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - rolebindings - - roles + - leases verbs: - create - delete @@ -40304,74 +95490,37 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-additional-controllers - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create - - patch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - delete - get - list + - patch + - update - watch - apiGroups: - - "" - resources: - - pods - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - "" + - networking.k8s.io resources: - - persistentvolumeclaims + - ingresses verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims + - poddisruptionbudgets verbs: + - create - delete - get - list @@ -40379,549 +95528,112 @@ rules: - update - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list - - watch -- apiGroups: - - apps - resources: - - statefulsets/status - verbs: - patch - update -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: oL1SSfzH9d-election-role -subjects: -- kind: ServiceAccount - name: i7DA - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: oL1SSfzH9d -subjects: -- kind: ServiceAccount - name: i7DA - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-additional-controllers - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: oL1SSfzH9d-additional-controllers -subjects: -- kind: ServiceAccount - name: i7DA - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null +kind: ClusterRoleBinding +metadata: + annotations: + "": YQe + DT: TQ2bLJESBNS + JECbiE5z: 7GsL + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT + "": 9e4vIgl app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d-metrics-service + app.kubernetes.io/name: Keyw50T + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nuj9z: 0teXTWiM + t6G2ZvuAcFNG: Fe773 + name: qBAL-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: qBAL-migration-job-default +subjects: +- kind: ServiceAccount + name: qBAL-migration-job namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: kF --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: annotations: - Ko0pmEw: 59Cu - Q: 3fQgP - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT + "": 9e4vIgl app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oL1SSfzH9d + app.kubernetes.io/name: Keyw50T + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nuj9z: 0teXTWiM + t6G2ZvuAcFNG: Fe773 + name: 3TCSa8p9-migration namespace: default spec: - replicas: 1441832588 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: kF - strategy: - rollingUpdate: - maxSurge: 1051307328 - maxUnavailable: 1045370553 - type: ɶ柢£? template: metadata: - annotations: - EmRu: Cn59 - fz7c: 4sdKfo2FSqT3 - kar: "" - yP57wD: jIUAEX - creationTimestamp: null + annotations: {} labels: - In: ZiPrGmN75Tu app.kubernetes.io/instance: operator - app.kubernetes.io/name: kF - iEwo: Ft - pRkD9: 47qmsTI + app.kubernetes.io/name: Keyw50T spec: - activeDeadlineSeconds: -4123803089407925000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: uNe5 - operator: 寕B胇KƎP昿蹅xſɨ殙 - - key: YVd - operator: C奤Ă5賊 - values: - - 7E - - u - - key: opJFYnB7Oym - operator: G礛ĸƫP©ėŬ%ʚt0:陳塈 - matchFields: - - key: 9j - operator: 扃竑 - values: - - H - - 8cCddDMoGdpi - weight: 2013915680 - - preference: - matchExpressions: - - key: BYLN - operator: 2l犞`遊芖W盆ʨuƯ¹+ - - key: Qq - operator: 殨舢佾Ň聰®秤X蠁?藒 - values: - - HhFN - - key: MjC - operator: 脔#Ĝ - values: - - N0KzTseOI - - cMHSBXX - matchFields: - - key: TSi8 - operator: ŕſgP~Ń臻 - - key: rcknFBaHyDP45WA - operator: 酮|ƏƲį&v紩ǚ - values: - - 0vw1 - - YWAHGw - - key: t - operator: 鷴Q袪棺ȋɒ=ƍs©ʮ - values: - - 1kbmhJI - - 1Df8mJ - - "" - weight: 2113734231 - - preference: - matchExpressions: - - key: zhZ4 - operator: 齶|!_Ħ簤o苽灉6N瀏 - values: - - 3mlYM - - MVC - matchFields: - - key: xXQfz - operator: å靕瞇柩G踛ƺ歶鉒¨į垿X腽hɌ - - key: EyuL8GS - operator: Gʜǧ筋奋仟渴c竅z - values: - - NihX - - kdg - weight: -650476903 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - 0K: "3" - PnX1n: VNWxqQ - qKjP: 8WGM - mismatchLabelKeys: - - 0dU - namespaceSelector: - matchExpressions: - - key: 5X - operator: 幠棝觑篜馡{偺 - values: - - "" - - 0VGL6 - matchLabels: - 8m: oEjDoUs8x9 - eba: "" - zG653VFi: A2swcnry2jkF - namespaces: - - 0ilU4SAQV - - 5Znq9gw - topologyKey: PYzBcM - weight: -468083968 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: aOc - operator: ƅ愧5wƃĺɈ噊壀Ǎ - values: - - YThMfcaTTz - - sKxo - - ZXVhGfVM - - key: eW02zLj - operator: id`谲韇废ɲəɱ攑ĉ纲Th¹G­ - matchLabels: - 39tnFaL: "" - y8CN4o: WtEKfMv7OhOv - mismatchLabelKeys: - - 8WDiqfpCo - namespaceSelector: - matchExpressions: - - key: xY - operator: 召ʓ猚 - values: - - zR - - BXMmL7 - - key: FpQP8y - operator: n-ƣ矚g蚡儲 - values: - - zDobj - namespaces: - - heDwYBP - topologyKey: o2pbqTyEl - - labelSelector: - matchExpressions: - - key: ehzhQVU - operator: 葦²l翑]碊Ɲ罠鶉w - matchLabelKeys: - - TgFaoq - - TJXyJq - - NK - mismatchLabelKeys: - - QaJSjgb - namespaceSelector: - matchExpressions: - - key: AUGEkl - operator: 倂}Ƚʂ5{仓pĪ貄pi!簪抪ƺ@ǯ鎜 - values: - - AYFJF - - xcn7Gk - - key: stkUV7w3 - operator: ƶǞ旷\D耚蟑谵*,厡î遭LȆx砹 - values: - - A6j - - 9nO - - 9IW - - key: rowgqxqxNp - operator: "" - matchLabels: - ii3ZoO: zWkor - w0SKNtC5: DmW8 - wnY: dL2UKYnI4D4 - namespaces: - - 4BZD - - c4X - - MtZfDn - topologyKey: S0g7 - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - 7t9hx6U8fzL5: ljsPMMc9m8k - matchLabelKeys: - - Vo - mismatchLabelKeys: - - 7SEFY - namespaceSelector: - matchExpressions: - - key: Yd4IO - operator: K臘.ɧŀX欦E靪c+ - values: - - L3iB - - fzg50 - - key: q - operator: 束悴麏ƻùȍr甉湥轿Ƀ眇Ȓ] - values: - - MDYLRwRJ - - tAjQSw - - B9FPwACM - matchLabels: - Fnvzaszq: kKnao0GuRJ9c - qKJts1U: tvVc - topologyKey: GNCj - weight: 2125033831 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: FSvFAd - operator: 飠 - values: - - WA9PQ - - b - - key: 5eB - operator: ɉć慁堏Ʀ譭QV梋澧ʥL)貃Ŕ径 - values: - - sX - matchLabels: - 43Q9: I - OMljwWVc4wj: hfb - matchLabelKeys: - - UX - - q8aLUI1X4M - mismatchLabelKeys: - - Rf - - J - namespaceSelector: - matchExpressions: - - key: wwtXWqFD1s - operator: 噽哔 - values: - - zB04 - - MRA6dRrptwWdKp - - key: 8m6H - operator: 窐>ƪƣ昮锍韀 - - key: jSyWsYQs - operator: "" - values: - - Bbzpnr - - AHvuf - matchLabels: - L0BN: PJspte3L - s1P0m: H - namespaces: - - KzdgBbfV - - QIjkC - topologyKey: 6oJCw - - labelSelector: - matchLabels: - he: oH - matchLabelKeys: - - 74HUO - mismatchLabelKeys: - - 71vZS - - P4Qgh - namespaceSelector: - matchLabels: - 0f: Xc - 1ZHpPW2U: U4lDglo - ZoXhuUOn: DwFq91 - namespaces: - - ep3ro - topologyKey: WpA automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=EFXhBX - - --configurator-tag=pneZv - - --configurator-base-image=KbWqGz - - 5O + - migration command: - - /manager - env: [] - image: KbWqGz:pneZv - imagePullPolicy: Always - livenessProbe: - failureThreshold: 723 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 831 - periodSeconds: 576 - successThreshold: 866 - terminationGracePeriodSeconds: 590 - timeoutSeconds: 303 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 618 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 489 - periodSeconds: 407 - successThreshold: 175 - terminationGracePeriodSeconds: 128 - timeoutSeconds: 388 - resources: - limits: - cpu: "276" - memory: "533" - requests: - cpu: "944" - memory: "133" + - /redpanda-operator + image: T1Xvq:JedSySWkwU + imagePullPolicy: IfNotPresent + name: migration + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - nameservers: - - XQQvkKFB7z - - vqb - options: - - name: rA - value: V3 - - name: "6" - value: UxotQ - dnsPolicy: 4ƔȟE}燸榘Ÿ?ƥ/貜 - ephemeralContainers: null - hostIPC: true - hostUsers: false - hostname: wn3zlZ7 imagePullSecrets: - - name: v - - name: hHQDwu7N5Q - - name: VbZ - initContainers: [] - nodeName: 0Ee5S + - name: 2XH nodeSelector: - 8uxdh8Ut6xs: e6X8c22BMIrKkd - aygiD: "" - bBdu: IpXHwGw - preemptionPolicy: 渻 - priority: -1143446041 - readinessGates: - - conditionType: 乴谽bč忕 - - conditionType: 璇>Ŗ - restartPolicy: DŽû4闠 - runtimeClassName: mPt5FoX - schedulerName: RT - schedulingGates: - - name: WZNHmy - - name: koe3 - - name: T - securityContext: - fsGroup: 3425056346527125500 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -8843691012766103000 - runAsNonRoot: true - runAsUser: 2040938350598920400 - supplementalGroups: - - 4624815095572574000 - - -6622660602628227000 - - 6757111341335144000 - sysctls: - - name: mTO7M - value: Aa2a - - name: Bnh29NCDOa - value: ano - - name: oKePh - value: t - serviceAccountName: "6" - setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: C - terminationGracePeriodSeconds: 6097461166688802000 + L: D + ngOYPB: gYFNtb + rdnsd5z: OU8S + restartPolicy: OnFailure + serviceAccountName: qBAL-migration-job + terminationGracePeriodSeconds: 10 tolerations: - - effect: 0V棔糀ÃŘ膆Š讏 - key: QbTou - operator: ǞpȪŪ3煴ʋúɟ=ƙ:肍39Ŏ - tolerationSeconds: 3316644788216531500 - value: A + - effect: n蓭斲鮴4X綀儐ȥg!ʤ萧Ĭ + key: 2hUJvO + value: TJSv1 + - effect: 牴p#'|穁灦yʐtA9Ƒ!Rç軳Ï + key: XrrY + operator: 鐖P寄枨]亯ȯʟ薢秡琶偏漏Ǵ[eǟĩ^ + tolerationSeconds: 6408185809770835000 + value: DNGr volumes: - name: kube-api-access projected: @@ -40941,61 +95653,34 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: W9 - - name: xuaa0 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - 7GKS: kf - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - 5ga: L6kCMw6j - NImdN7q5tNW: UPT - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: kF - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: i7DA-crd-job - namespace: default --- testdata/case-048.yaml.golden -- +-- testdata/case-021.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: hxBG + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: - healthProbeBindAddress: l - kind: TJaGphLwcawiM + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig leaderElection: - leaderElect: false - resourceName: YK + leaderElect: true + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: RgXfRMqEJ + bindAddress: 127.0.0.1:8080 webhook: - port: 60 + port: 9443 kind: ConfigMap metadata: annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null + HB: 6Bh9uW labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre-config + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 4Y-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -41003,40 +95688,105 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null + HB: 6Bh9uW labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre-metrics-reader + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 4Y-default-metrics-reader rules: - nonResourceURLs: - /metrics verbs: - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre-default -rules: +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + HB: 6Bh9uW + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 4Y-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -41050,9 +95800,9 @@ rules: verbs: - create - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - configmaps verbs: - create - delete @@ -41062,42 +95812,70 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - events verbs: - - update + - create + - patch - apiGroups: - - cluster.redpanda.com + - coordination.k8s.io resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - leases verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - schemas - - topics - - users + - persistentvolumes verbs: - get - list - patch - - update - watch - apiGroups: - - rbac.authorization.k8s.io + - "" resources: - - clusterrolebindings - - clusterroles + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -41106,50 +95884,6 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: qVYvaMYre-default -subjects: -- kind: ServiceAccount - name: Rsep9k - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre-election-role - namespace: default -rules: - apiGroups: - "" resources: @@ -41165,14 +95899,56 @@ rules: - apiGroups: - "" resources: - - events + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services verbs: - create + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - apps resources: - - leases + - statefulsets verbs: - create - delete @@ -41181,29 +95957,60 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre - namespace: default -rules: - apiGroups: - - coordination.k8s.io + - cert-manager.io resources: - - leases + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters verbs: - create - delete @@ -41212,6 +96019,29 @@ rules: - patch - update - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -41293,6 +96123,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -41329,516 +96216,408 @@ rules: - list - patch - update - - watch + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + HB: 6Bh9uW + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 4Y-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update - apiGroups: - - policy + - cluster.redpanda.com resources: - - poddisruptionbudgets + - redpandas verbs: - - create - - delete - get - list - - patch - - update - watch - apiGroups: - - rbac.authorization.k8s.io + - "" resources: - - rolebindings - - roles + - persistentvolumes verbs: - - create - - delete - get - list - patch - - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: qVYvaMYre-election-role -subjects: -- kind: ServiceAccount - name: Rsep9k - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null + HB: 6Bh9uW labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre - namespace: default + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 4Y-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: qVYvaMYre + kind: ClusterRole + name: 4Y-default subjects: - kind: ServiceAccount - name: Rsep9k + name: 9OwQUe namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w - creationTimestamp: null + HB: 6Bh9uW labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: qVYvaMYre-rpk-bundle - namespace: default + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 4Y-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: qVYvaMYre-rpk-bundle + kind: ClusterRole + name: 4Y-additional-controllers-default subjects: - kind: ServiceAccount - name: Rsep9k + name: 9OwQUe namespace: default +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/name: 3SyCJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: qVYvaMYre-metrics-service + name: 3SyCJ-webhook-service namespace: default spec: ports: - - name: https - port: 8443 - targetPort: https + - port: 443 + targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/name: 3SyCJ --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - Hb: p6nsnNym - XCiiUj: V9 - nfDuOzQO: w + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/name: 3SyCJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: qVYvaMYre + name: QSmzerg namespace: default spec: - replicas: -1694564830 + replicas: -999542308 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/name: 3SyCJ strategy: rollingUpdate: - maxSurge: 888694814 - maxUnavailable: 1389219603 - type: 迂Ƹ/餳c¡ + maxSurge: 1259159617 + maxUnavailable: 733667665 + type: ǣHkɔ template: metadata: annotations: - Auj: ot87eXT - H6JkGozv: 4eeJ7 - j3Pi4o: CtwRh - kN1wtkKOq: WKhl + "9": VcXvoRi0MS + 185x: Za5Myiq9Evi + DAS: vVJg5u + TB2j: D1mkXxnE creationTimestamp: null labels: - 7Z2: Z4 - K: kVOYzsH + "7": fv + DcyA: W + RCK: 9uO7 + W: B8N app.kubernetes.io/instance: operator - app.kubernetes.io/name: icwMYEubJ + app.kubernetes.io/name: 3SyCJ + irGlM: MW3 spec: - activeDeadlineSeconds: -1791496714744389400 + activeDeadlineSeconds: 4446465859892303400 affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - QbG9Mk: npHb - mismatchLabelKeys: - - mTbMruAj - - SG7QeK8RZrF - - ouf2N0 - namespaceSelector: - matchExpressions: - - key: "" - operator: \&[ȟo閳ĆZƴ&}皎釷 - values: - - zVf - - 5DYzYV2Q - - key: gYu5z - operator: 虀柜 - values: - - xnu3ILGkJZ09 - - B3Suy - - 4ck - - key: P5N - operator: ƶ1Ŀ®|ä9 - values: - - 4GC6Q - - 0rMVdT - matchLabels: - V: alTZGeuk - topologyKey: cCi - weight: -226612297 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: qLOd - operator: ƾk瓳BhƩ綼虾^>¢n:EĿljû - matchLabelKeys: - - dZY - - bbge9qatP - - NX2iY - mismatchLabelKeys: - - AZ9 - namespaceSelector: - matchExpressions: - - key: mKZCYX2u - operator: cɸ塙5藎{ɆƓo傥Ɉ|8< + nodeSelectorTerms: + - matchExpressions: + - key: "" + operator: 攕ɡ鴕ǁ4敟誼Ţ榋¨宵ƆƐƆĒ¶Ŵ values: - - PqMTnsD0z - matchLabels: - fGW: G - namespaces: - - Y2VeTk1W - - POPBzPK - topologyKey: iIFXA - - labelSelector: - matchExpressions: - - key: "7" - operator: mY褏澖 + - SXxqEE33vhr + - h3AIrQW + - BZ1wyEaO4fw + - key: Te5 + operator: vÂ橦`¬ī餭mC¼褎"ŵ葋ǹvɫ嘨 values: - - E - - xYwPiAiCprT6ee - - key: g9Y4t - operator: ȳk涀鐭霜Nj,伻 - matchLabels: - F: XE8rQzOU - LmWDLqidh2P: c - S9ZaVdhTISfa0H: 5HeZs - matchLabelKeys: - - feTG - mismatchLabelKeys: - - OnJd - namespaceSelector: - matchLabels: - NYU: Y1hI - OReo: m989 - namespaces: - - P - - bs9S40e - topologyKey: HAdK - - labelSelector: - matchLabels: - NtmDfUYK5aR9: ArWFo - matchLabelKeys: - - GQ - - wUKa8j1 - mismatchLabelKeys: - - gpS - namespaceSelector: - matchExpressions: - - key: ot9Vun8V - operator: '&棾晚ǜ_ɥ' + - mmhRSYp + - HDI + - key: cuhlvx + operator: 梨蠼曲n values: - - gt7 - - D0tuRDfaaqF - - hKu8ertsz - matchLabels: - F: tdj28 - uCIzH4: K9Q7db - topologyKey: xx97 - podAntiAffinity: + - XUwA4SQ0L + - wOU + - 7gO5up58w + - matchExpressions: + - key: UZxxLDH + operator: bĮ + values: + - 1y4F8FHj40 + - fLxhI + - ilLbsjF + - key: u1n5J + operator: Ű轨)J萭. + - key: RRtEoN5 + operator: suVDŽȈģ睑Ć + values: + - lCZHrHAfPqyd + - CVLLhW2fk + - vMtXpY6 + matchFields: + - key: qXM9Y7P + operator: 蚸Nj¨ɂ逢 + values: + - b3Ct62FJs + - 7X + - QDqXc1 + - key: qyC + operator: ?埒,汹髥烁ʈ頛鱏邻 锵ķ譆 + - key: dSy + operator: ȹÞ4X含t稽縑%ɤ4ţĔ嬅QRȯȏ + values: + - Tou + - tWqrDYbcO + - IrIUu + podAffinity: +<<<<<<< HEAD +======= preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: - matchExpressions: - - key: "90" - operator: ŋ4銭ʌ坵 - - key: Xj - operator: 裫艏Ǯ]A亽Ȁ¡Ǟɤ瀢Ųɼ^-T辇獽 - values: - - DrKfkH - - kYVJgZ - - 9MM - matchLabels: - ugbLL: nVJy - w: CFB - mismatchLabelKeys: - - mcZ - - RV9XzP - namespaceSelector: - matchExpressions: - - key: eq2jbvk - operator: Õ矷P傝蹵ƕ萭Z幋ĩ[ - values: - - ydUzhj - matchLabels: - gFSF1J: GMguIadtNB - jBrn: G0 - mqyw: BCnj8zFPWK - namespaces: - - xUimbqiJ - - Kb07r - topologyKey: Il7A6 - weight: -699542974 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: Aza2yP8 - operator: Q錫ģ縟ǖjŷ - - key: Az - operator: ÜɪXĒŢ驡ɡ Á钶pj壃ÜÐ臑顩\ matchLabels: - "7007": TE6la6A - TeOUnuuJ5e: lpO - gwqr: o1h - matchLabelKeys: - - W9ZHn - - 1N1w5C4G4 - mismatchLabelKeys: - - uJImFg + U16kNUc: VAiT namespaceSelector: matchExpressions: - - key: CT - operator: ʚ农ǤC<攊'Ɍ譣磻ƤgF8{ - - key: "1" - operator: 驭!Ơ潂T敎矅PfĽș蕘ĦōVɣ笩 - matchLabels: - BIJvg1G6: TOt8R + - key: jzIjlH + operator: 挐宪Ļt,C続NȤ囀嫕t1ƔtK + - key: mqCnB + operator: m§ƫO展皺`ȽɦÒ#炞 namespaces: - - VsOXnAssX - - 3fz9X - - gT7 - topologyKey: iAPfX - weight: -324721382 + - Hci + topologyKey: A76pHkBGi8 + weight: -110304806 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: - labelSelector: {} matchLabelKeys: - - S0 - - UdJIF59 - mismatchLabelKeys: - - zwO - - LH - namespaceSelector: - matchLabels: - vBxydG4: rGIqfhF6Bp - namespaces: - - RL7Ngl46f - topologyKey: cshTSjrl - weight: -1018167230 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: ari - operator: 鮫n瀕b=Ʌ霂嶚|,YqBǛɴ - - key: 8Ota - operator: 許S屢%佱. - values: - - jCdObPq - - b9gND - matchLabels: - "": HGh - "4": CMlweQI - NG50YChS: 93Ce - mismatchLabelKeys: - - IiLl - - ybv - namespaceSelector: - matchExpressions: - - key: j - operator: '`Øȩ攌赸' - values: - - X - - zfNjG1t - - key: 5LWgCb - operator: 澾澟9$qĔƈƞv - values: - - uN - namespaces: - - dn - - 78z - topologyKey: 2w - - labelSelector: - matchExpressions: - - key: wdIB5 - operator: 聎鴦Ųē別ȏ倛雛 - - key: Pa7Fpf - operator: kɌ.渚ņL| - values: - - Oiw - - Rj8icGqThR - - key: uCsZ8v - operator: "" - values: - - MrkvV - - vbro - - Uf - matchLabels: - Jd0WgU: AycMdvt - O: S9JugfEe - matchLabelKeys: - - rXOAQv - - 059wt - - nz - mismatchLabelKeys: - - "" - - bfOFFW - namespaceSelector: - matchExpressions: - - key: gS30 - operator: 诓1璠o%~ - values: - - Di - topologyKey: GQH - - labelSelector: - matchExpressions: - - key: xCEW - operator: )葍ĂX邞阯宏慯XG(龧嫣夶翕 - values: - - 2snD - - key: 8OsZ0YK - operator: Ǯ袱伨'ȒƪȜ - matchLabels: - O: 4i1 - kqkgpct: UU6DrWWYr - matchLabelKeys: - - vUNl9fc - - Lf27mQbT - mismatchLabelKeys: - - MEFRq6 - namespaceSelector: - matchExpressions: - - key: HF9S1iy - operator: ƪă~盅ȼ旱耧 - matchLabels: - zZ3txVU: zBJWGJruLY - namespaces: - - "" - - 5Yiak - - ZESlWGSU5sb - topologyKey: AjlI34l - automountServiceAccountToken: false + - Pq + namespaceSelector: {} + topologyKey: mY + weight: -632030587 + automountServiceAccountToken: true containers: - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=true - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=ozF - - --configurator-tag=qPbAyXLw - - --configurator-base-image=CPQ9Y6 + - --log-level=pGbuNx + - --metrics-bind-address=:8443 + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --webhook-enabled=true command: - /manager env: [] - image: CPQ9Y6:qPbAyXLw - imagePullPolicy: Never + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 760 + failureThreshold: 357 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 987 - periodSeconds: 962 - successThreshold: 312 - terminationGracePeriodSeconds: 608 - timeoutSeconds: 180 + initialDelaySeconds: 558 + periodSeconds: 555 + successThreshold: 856 + terminationGracePeriodSeconds: 674 + timeoutSeconds: 841 name: manager ports: - containerPort: 9443 @@ -41848,101 +96627,88 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 847 + failureThreshold: 809 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 755 - periodSeconds: 40 - successThreshold: 15 - terminationGracePeriodSeconds: 751 - timeoutSeconds: 281 + initialDelaySeconds: 371 + periodSeconds: 129 + successThreshold: 115 + terminationGracePeriodSeconds: 483 + timeoutSeconds: 441 resources: limits: - cpu: "245" - memory: "433" + cpu: "465" + memory: "272" requests: - cpu: "312" - memory: "805" + cpu: "333" + memory: "59" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true dnsConfig: - nameservers: - - OKrRLUXo1z - options: - - name: j9ThUG - value: Vwy0cIZz0k - - name: 4M - value: gfAxn5R searches: - - 8MBaXH - dnsPolicy: 犤Ųħc瘖 - enableServiceLinks: true + - KHPy + - QDm + - pCUNqU + dnsPolicy: 冸索p关$矉ĮR澁ʧȊ聯荶Oʪ ephemeralContainers: null hostAliases: - hostnames: - - 8Z - - Qw - - "" - ip: b53FGnAG - - ip: bOu - hostNetwork: true + - Gdl + ip: z5U2LcU0 + - ip: KELSMt4N + hostIPC: true hostUsers: true - hostname: 7ZGs8 + hostname: lU imagePullSecrets: - - name: I6Na86OnyBNx - - name: "3" - - name: J1RoqWBLo + - name: VDO2UK initContainers: [] - nodeName: GtzrBO + nodeName: O9V nodeSelector: - XD: c4GG - preemptionPolicy: ËƨÐ襙娕XŤT7躊ȉ]蚾g - priority: 1718744077 - priorityClassName: VG - readinessGates: - - conditionType: A骇ɶȻ1Ǫȟ摦趼R榸) - - conditionType: 3µ鐰zɁ= + i9Me1: iSZse + "n": Pimh + preemptionPolicy: Å疅伡vǵ/禿ʇ!懖ɘ馵ȇȷ鮣嚚崄ʜ蹄 + priority: -1376917895 + priorityClassName: y3Ve9F resourceClaims: - - name: F - - name: mLOmJqVCjwrxV - restartPolicy: 闂瀴]餵DZQx幼Ȑa|Ⱦ{秴煴揓Ǣ!ǡ - runtimeClassName: 5b4Eh - schedulerName: u + - name: mLuU + resourceClaimName: VE5 + resourceClaimTemplateName: n8d7Mt + - name: OB9s + resourceClaimName: Lv + resourceClaimTemplateName: VE1Cer9H + - name: YDsyhnvzpfAf + resourceClaimName: iLcVNIRM + resourceClaimTemplateName: kqY + restartPolicy: ɷ欞 + runtimeClassName: m9PbEAV + schedulerName: LuK2YU schedulingGates: - - name: OQed6Yr9jyIj - - name: KlVhqpr - - name: 82PM + - name: G3AaDRr + - name: Bh6kR securityContext: - fsGroup: -4349798517018984400 - fsGroupChangePolicy: Always - runAsGroup: 7312856401095131000 - runAsNonRoot: true - runAsUser: 8704693581475557000 + appArmorProfile: + localhostProfile: HEe3 + type: = + fsGroup: 311097773066458700 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -5473309375926679000 + runAsUser: -4864268154362912000 + seLinuxChangePolicy: ǫĉ鰤aɘĉ}諾诮鹇莋夼0o supplementalGroups: - - -401001079325091900 - sysctls: - - name: n1tf - value: 8u8Qs - serviceAccountName: DHL7nEGLFqio - setHostnameAsFQDN: false - subdomain: Sxdzh - terminationGracePeriodSeconds: -2850524812313792500 - tolerations: - - effect: x裉,嗠ý檼nȓʎ甅p黛 - key: H9 - operator: '}' - tolerationSeconds: 7651644094769316000 - value: gMwcGW5He - - effect: ʫĔmĞ3ʦ瞷鉒紥憹_ª怸ŷ - key: I9bF - operator: 玗ʫ鍦Ĉ锫ȂƔȊ瀅Ǽʚ功ɫU帝圅8 - tolerationSeconds: -8913348716878803000 - value: 7o + - -2663928515438300000 + serviceAccountName: avjBPA1e + setHostnameAsFQDN: true + subdomain: ElS3Im + terminationGracePeriodSeconds: -253655129269557250 + tolerations: [] volumes: - name: kube-api-access projected: @@ -41962,130 +96728,181 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: "" - - name: "1" - - name: zEJeXFitCdV + - name: cert + secret: + defaultMode: 420 + secretName: O74LjQ --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: cert-manager.io/v1 +kind: Certificate metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + HB: 6Bh9uW labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Rsep9k-crd-job + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 4Y-webhook-cert namespace: default --- testdata/case-049.yaml.golden -- +spec: + dnsNames: + - qV6xrD-webhook-service.default.svc + - qV6xrD-webhook-service.default.svc.grg1o + issuerRef: + kind: Issuer + name: 4Y-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: O74LjQ --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: cert-manager.io/v1 +kind: Issuer metadata: - annotations: null - creationTimestamp: null + annotations: + HB: 6Bh9uW labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: tSPxL1Cf1HO9FjR + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 4Y-selfsigned-issuer namespace: default +spec: + selfSigned: {} --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: "2" - health: - healthProbeBindAddress: SO - kind: jeQg - leaderElection: - leaderElect: true - resourceName: aZI4XP9tX - metrics: - bindAddress: p0Zfh - webhook: - port: 156 -kind: ConfigMap +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration metadata: annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-config + cert-manager.io/inject-ca-from: default/4Y-webhook-cert + name: 4Y-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: qV6xrD-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/4Y-webhook-cert + name: 4Y-validating-webhook-configuration namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: qV6xrD-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 9OwQUe-migration-job + namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null + HB: 6Bh9uW + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-default + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 9OwQUe-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas + - horizontalpodautoscalers verbs: - create - delete @@ -42097,40 +96914,70 @@ rules: - apiGroups: - cluster.redpanda.com resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - consoles verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles/status verbs: - get - patch - update - apiGroups: - - cluster.redpanda.com + - networking.k8s.io resources: - - schemas - - topics - - users + - ingresses verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - authentication.k8s.io resources: - - clusterrolebindings - - clusterroles + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -42139,53 +96986,76 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-additional-controllers-default -rules: - apiGroups: - "" resources: - persistentvolumes verbs: + - get + - list - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch - apiGroups: - "" resources: - - configmaps - nodes - - secrets verbs: - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - nodes verbs: - get - list @@ -42193,109 +97063,62 @@ rules: - apiGroups: - "" resources: - - configmaps - - secrets + - persistentvolumeclaims verbs: + - delete - get - list - watch - apiGroups: - "" resources: - - persistentvolumes + - pods verbs: + - delete - get - list - patch - update - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services verbs: + - create - get - list + - patch + - update - watch - apiGroups: - - "" + - apps resources: - - persistentvolumes + - statefulsets verbs: + - create + - delete - get - list - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: RxVwZrtkv-default -subjects: -- kind: ServiceAccount - name: tSPxL1Cf1HO9FjR - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: RxVwZrtkv-additional-controllers-default -subjects: -- kind: ServiceAccount - name: tSPxL1Cf1HO9FjR - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-election-role - namespace: default -rules: - apiGroups: - - "" + - cert-manager.io resources: - - configmaps + - certificates + - clusterissuers + - issuers verbs: - create - delete @@ -42305,53 +97128,75 @@ rules: - update - watch - apiGroups: - - "" + - networking.k8s.io resources: - - events + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers verbs: - - create - patch + - update - apiGroups: - - coordination.k8s.io + - redpanda.vectorized.io resources: - - leases + - clusters/status verbs: - - create - - delete - get - - list - patch - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv - namespace: default -rules: - apiGroups: - - coordination.k8s.io + - scheduling.k8s.io resources: - - leases + - priorityclasses verbs: - - create - - delete - get - list - - patch - - update - watch - apiGroups: - "" @@ -42435,9 +97280,11 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -42447,47 +97294,52 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - create - - delete - - get - - list - - patch - update - - watch - apiGroups: - - networking.k8s.io + - cluster.redpanda.com resources: - - ingresses + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - policy + - cluster.redpanda.com resources: - - poddisruptionbudgets + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - rolebindings - - roles + - leases verbs: - create - delete @@ -42496,72 +97348,37 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-additional-controllers - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create - - patch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - delete - get - list + - patch + - update - watch - apiGroups: - - "" - resources: - - pods - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - "" + - networking.k8s.io resources: - - persistentvolumeclaims + - ingresses verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims + - poddisruptionbudgets verbs: + - create - delete - get - list @@ -42569,570 +97386,103 @@ rules: - update - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list - - watch -- apiGroups: - - apps - resources: - - statefulsets/status - verbs: - patch - update -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: RxVwZrtkv-election-role -subjects: -- kind: ServiceAccount - name: tSPxL1Cf1HO9FjR - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: RxVwZrtkv -subjects: -- kind: ServiceAccount - name: tSPxL1Cf1HO9FjR - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null + HB: 6Bh9uW + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-additional-controllers - namespace: default + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 9OwQUe-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: RxVwZrtkv-additional-controllers + kind: ClusterRole + name: 9OwQUe-migration-job-default subjects: - kind: ServiceAccount - name: tSPxL1Cf1HO9FjR - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-metrics-service + name: 9OwQUe-migration-job namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: DFwU --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv + app.kubernetes.io/name: qV6xrD + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 4Y-migration namespace: default spec: - replicas: 776075670 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: DFwU - strategy: - rollingUpdate: - maxSurge: 1327175499 - maxUnavailable: 1850944945 - type: ']ɟȲ扢džŀ勩Ć' template: - metadata: - annotations: - ykKtt: uAAi - creationTimestamp: null - labels: - VKJBbpRutKV64: Tgs4iTZGVDYkK - app.kubernetes.io/instance: operator - app.kubernetes.io/name: DFwU - spec: - activeDeadlineSeconds: 2278089967418417700 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: 15Gh - operator: 馬磖țd;Őjá爥茄OȮ{ʩ"壛9} - - key: iuiH - operator: 揩;靱ȝÌ鐛*ŢT唘ä哸 Ƽ7-sr - values: - - Q3h - - key: 8RWhACd - operator: 皧f鋴W闔疷鑢賑 - values: - - xwE9wrooJYT - matchFields: - - key: HqfBvM - operator: Īĩ^ʮɋ湒Ću淹ķ窿ď襪ŕ堗,鎵ʌ - values: - - DWD - weight: 932855426 - - preference: - matchExpressions: - - key: U56 - operator: "" - - key: fF9Y1wJawGXfb - operator: 鮩O2誠Ƨþ髂/誮n鵁Ȕ - values: - - T7sK - matchFields: - - key: PQg - operator: 衟斊趝#ȚBĢj%朷Ơ=鷠呜 - values: - - 5a2U - - vYc4 - - 0E - weight: -102914742 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchFields: - - key: Yu - operator: ƺ - values: - - "2" - - bwMjX - - key: Y6Hr - operator: 陯ĸȏǵɦñ橧Ħz骩腦Ȋ - values: - - e0lj - - key: uHQb - operator: ɶȽƪ患ʬ传魁訋=¹Ȁ弈"ɒ箈&ɂ麨 - values: - - Nuz - - DGPIO6kZuK - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: pVXB - operator: /虣鯮F毥w姪;ʟ競tI液 - - key: AI - operator: e - values: - - 13FGcVyxCH2G - matchLabels: - UrhEPuS: a - kueXjOKN: xC - tjIlJv: v3PQ1 - namespaceSelector: - matchLabels: - OvNA57r8: u8V8CwS - PMN5sFJ: Huuo9FR3p - xuRslX: lr - namespaces: - - Z - topologyKey: k9Dr - weight: -677997772 - - podAffinityTerm: - labelSelector: - matchLabels: - KcurMxaxV: gQvm - matchLabelKeys: - - pEwCyEQF - - l0E - mismatchLabelKeys: - - uOWE - - cSzL - namespaceSelector: - matchExpressions: - - key: 13Hyc4Zk - operator: 幣¢Ƒ弾Öi]ʎŲǺǩNJ糡T - values: - - W22wD - - "" - - key: KnY - operator: Ţ癖鍽Ȏ飖^Ɂ¾_蕈EŁƋ頡穌ɼ鑎 - values: - - FFcIpld8Do - matchLabels: - 2CSk: FcWN - OKc: I0 - vIe9lCH: 1B - topologyKey: 58qkCgr - weight: -1031576769 - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - V8K: nIFBNGQ5 - Wqxq: i8 - llpoo8xNIVV: GDA1 - matchLabelKeys: - - p - - 950XH - mismatchLabelKeys: - - 4NrzjIs - namespaceSelector: - matchExpressions: - - key: J - operator: DZ_ĸɃď餃r功2ɓƜČ - values: - - PYzIeoB - - 59c0baFR0De - matchLabels: - 77I: 8pwL - namespaces: - - nza - topologyKey: NCaF7r - weight: -1497610672 - - podAffinityTerm: - labelSelector: {} - matchLabelKeys: - - YITmAQC - - 8FiOp - mismatchLabelKeys: - - GVXcM - namespaceSelector: - matchExpressions: - - key: kte - operator: iW釢 - values: - - JzubwaL8 - matchLabels: - MMIBy: SSDsSZGDXhV - namespaces: - - sEm3G - - oq - topologyKey: q - weight: 77365845 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: g85 - operator: 龍 - values: - - dLpu0ZWapA5tU - - oPqTHoY - - 4vtv - - key: s - operator: 皟ȆBC琥.*悏ĉZŶ - values: - - "" - - key: DR9qdEc - operator: Y鯿CÌ#_抛ȹL - values: - - VWQ - - bVtuGpDd - - 3t - matchLabelKeys: - - MzvfR - - SwlZSvD - - y266T0HBMRNLUh - namespaceSelector: - matchExpressions: - - key: 0qmXCQZQnl - operator: 9鼽Ġ+ɰ*贷ɀ念 - values: - - OHp3H - - 3g - - key: xdJrO - operator: ɥA匨 :k - values: - - 0168yqU - - EWVbM - - 6A8 - - key: "" - operator: 摕 - values: - - X1KB - - jrcowx - matchLabels: - I7R1DVHubys: "" - tNG: "" - namespaces: - - fcxim - topologyKey: X9 - weight: -1794490661 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - AYvNb1: J5 - THtfyqu0Z: gZsbQMMYY - tOe: L2q3mNmm8 - matchLabelKeys: - - BOCkn - - Dpxw - - 4Oh - mismatchLabelKeys: - - OBkJICrllYH - - XwIo - - T1M5AHcvI - namespaceSelector: - matchExpressions: - - key: uKOg00q - operator: ƮƯ膨枚vƬBe,ǫ憿[ħ埒ȗ9 - values: - - yjuBCK2 - - puA5JnDm - - pb - matchLabels: - "": rJ5Yr - namespaces: - - YAlxsI - - "" - topologyKey: X + metadata: + annotations: + Cz: U28EFw + kMWpkLkVpW4: fVZ + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: qV6xrD + spec: automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=bVWCG - - --configurator-tag=CyopzJ - - --configurator-base-image=U4heCUyQYeE - - 6ArBn - - zve + - migration command: - - /manager - env: [] - image: U4heCUyQYeE:CyopzJ - imagePullPolicy: Always - livenessProbe: - failureThreshold: 438 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 607 - periodSeconds: 231 - successThreshold: 254 - terminationGracePeriodSeconds: 69 - timeoutSeconds: 371 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 308 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 158 - periodSeconds: 674 - successThreshold: 957 - terminationGracePeriodSeconds: 647 - timeoutSeconds: 773 + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration resources: limits: - cpu: "70" - memory: "847" + cpu: "465" + memory: "272" requests: - cpu: "337" - memory: "364" + cpu: "333" + memory: "59" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - dnsConfig: - options: - - name: HHHVB5Q - value: "8" - - name: NEYIw9Ky - value: cq4m - - name: hbRxYS5v0h - value: Nb - dnsPolicy: a粽_Nǽ$2爿圷ó曌0 - ephemeralContainers: null - hostAliases: - - hostnames: - - "6" - - 2KGJ - ip: YiykWtfuD - - hostnames: - - Tu2d82bz - - UNm2WGvd - ip: pedLX - hostNetwork: true - hostUsers: false - hostname: LU imagePullSecrets: - - name: tzmKb2w - initContainers: [] - nodeName: hg + - name: VDO2UK nodeSelector: - "": K8WFYsf5a - 1GlN3Q7: vY4abw - "8": 41bR - iV1Tv4: tA - rivMfqV: BR - preemptionPolicy: =%ɵV糘砊ʤ$Ɵ撇Ǽpį柘 - priority: 197745233 - priorityClassName: fnjH - readinessGates: - - conditionType: Vǰ - restartPolicy: ʟs烵 - runtimeClassName: OLc - schedulerName: AleqDOyBh - schedulingGates: - - name: FIBu - securityContext: - fsGroup: -1038967961494618500 - fsGroupChangePolicy: Always - runAsGroup: 7947011129488217000 - runAsNonRoot: false - runAsUser: 478576484240270200 - supplementalGroups: - - 587654813381564000 - - 2391151309579290000 - serviceAccountName: "n" - setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: 8pUyWb - terminationGracePeriodSeconds: -1755150528265436400 - tolerations: - - effect: r - key: Dqs - operator: 澚毸仪伍旍ʣ匭隃Nj龝k吓. - tolerationSeconds: 6842016513609661000 - value: mpVsu - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: 9g2 - operator: 5*奁{LJe娈ġɦʕ鐠©~ġƣd蒫 - values: - - Q - - yOrKqPET - - wjd - matchLabels: - 4lQ8AdhbM: v3aT - "39": LN2piV - IFs: 9jy - maxSkew: -2007469080 - minDomains: -1864064833 - nodeAffinityPolicy: '''聶Ŏ2' - nodeTaintsPolicy: 摓塨yĨC短 - topologyKey: VfR74HH - whenUnsatisfiable: Ȕ - - labelSelector: - matchExpressions: - - key: RAsNLC - operator: ļ荖·ʖ - values: - - oEptsf7n - matchLabels: - U: kMS - padcK: ja2sd - maxSkew: 1886823748 - minDomains: 486819042 - nodeAffinityPolicy: PLʈ\ - nodeTaintsPolicy: ãɑȇ]Ȭ - topologyKey: oTK - whenUnsatisfiable: 83š"萃筒蝌ǬŚ殿詜þ脈 - - labelSelector: - matchExpressions: - - key: Fx78b - operator: 瑟齆Ő>ĔǺ框ʋL*ij焲4啺 - values: - - LbgOed - - Y1UvH - - yMoKiUsh - matchLabels: - Yrmm31: 1ey3BdW - cljX: jTs8glnxr8 - matchLabelKeys: - - hH - maxSkew: -439943541 - minDomains: -937218896 - nodeAffinityPolicy: "" - nodeTaintsPolicy: -颼Ɣ总b%*+9»ƣ焗Ǎ - topologyKey: ws2m1 - whenUnsatisfiable: ȇ麄巬ʘ8袹"Û繋ȭCĿ錍ʤȢȖ + i9Me1: iSZse + "n": Pimh + restartPolicy: OnFailure + serviceAccountName: 9OwQUe-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -43152,45 +97502,7 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: A8 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: - Tett6RPd3GK0SY: SS0 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: RxVwZrtkv-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 +-- testdata/case-022.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -43198,35 +97510,16 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v25.1.4 - fuVZ: gcPCqrc0l - helm.sh/chart: operator-25.1.4 - name: tSPxL1Cf1HO9FjR-crd-job - namespace: default --- testdata/case-050.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null + "7": HQX0vF + C: p + xgwS: HZFSp9kl labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: I namespace: default --- # Source: operator/templates/entry-point.yaml @@ -43247,14 +97540,13 @@ data: kind: ConfigMap metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-config + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6o-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -43262,14 +97554,13 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-metrics-reader + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6o-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -43281,15 +97572,85 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-default + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6o-default rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -43302,25 +97663,233 @@ rules: - subjectaccessreviews verbs: - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: - persistentvolumes verbs: - get - - list + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get - patch - - watch + - update - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get + - list + - patch + - update + - watch - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -43330,200 +97899,163 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events - - secrets - - serviceaccounts - - services + - podmonitors + - servicemonitors verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - "" + - networking.k8s.io resources: - - nodes + - ingresses verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create - delete - get - list - patch - update - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6o-additional-controllers-default +rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - persistentvolumes verbs: - patch - - update - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - events verbs: - create - - delete - - get - - list - patch - - update - - watch - apiGroups: - - cert-manager.io + - "" resources: - - certificates - - clusterissuers - - issuers + - persistentvolumeclaims verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - - networking.k8s.io + - "" resources: - - ingresses + - pods + - secrets verbs: - - create - - delete - get - list - - patch - - update - watch - apiGroups: - - policy + - apps resources: - - poddisruptionbudgets + - statefulsets verbs: - - create - - delete - get - list - - patch - - update - watch - apiGroups: - - rbac.authorization.k8s.io + - "" resources: - - clusterrolebindings - - clusterroles + - configmaps + - nodes + - secrets verbs: - - create - get - list - - patch - - update - watch - apiGroups: - - redpanda.vectorized.io + - "" resources: - - clusters - - consoles + - persistentvolumes verbs: - - create - delete - get - list - patch - update - - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - redpandas verbs: - - patch - - update + - get + - list + - watch - apiGroups: - - redpanda.vectorized.io + - "" resources: - - clusters/status - - consoles/status + - persistentvolumeclaims verbs: + - delete - get + - list - patch - update - apiGroups: - - scheduling.k8s.io + - "" resources: - - priorityclasses + - configmaps + - pods + - secrets verbs: - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: RAyK-default -subjects: -- kind: ServiceAccount - name: RAyK - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims verbs: - - create - delete - get - list @@ -43533,149 +98065,88 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumes verbs: - - create + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - apps resources: - - leases + - statefulsets/status verbs: - - create - - delete - - get - - list - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK - namespace: default -rules: - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes verbs: - - delete - get - list + - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: RAyK-election-role -subjects: -- kind: ServiceAccount - name: RAyK - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK - namespace: default + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6o-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: RAyK + kind: ClusterRole + name: 6o-default subjects: - kind: ServiceAccount - name: RAyK + name: I namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-rpk-bundle - namespace: default + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6o-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: RAyK-rpk-bundle + kind: ClusterRole + name: 6o-additional-controllers-default subjects: - kind: ServiceAccount - name: RAyK + name: I namespace: default --- # Source: operator/templates/entry-point.yaml @@ -43683,14 +98154,13 @@ apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-metrics-service + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6o-metrics-service namespace: default spec: ports: @@ -43699,86 +98169,72 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6iZG ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 6iZG-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6iZG + app.kubernetes.io/name: QU1RdnSl5WDZjW --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6o namespace: default spec: - replicas: 1 + replicas: -2026851375 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6iZG + app.kubernetes.io/name: QU1RdnSl5WDZjW strategy: - type: RollingUpdate + rollingUpdate: + maxSurge: 1034381887 + maxUnavailable: 1402203576 + type: 輕厹ůĝʙ鋂王飴蘲ǽņT鏵ř郟镉ƵǜW template: metadata: - annotations: {} - creationTimestamp: null + annotations: + jiVxNXTdQ: GLH + l9uo: YM + yny9PP20Q: BPf1us8 labels: + EAS: s3g7L + JXPC3e: zMJSgX + Z4: q5Hwowe app.kubernetes.io/instance: operator - app.kubernetes.io/name: 6iZG + app.kubernetes.io/name: QU1RdnSl5WDZjW spec: automountServiceAccountToken: false containers: - args: + - --configurator-base-image=cWng + - --configurator-tag=afUH16iMvi + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=WHh - - --configurator-base-image=AzmZ3dTJs + - --log-level=zMF0Of + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: AzmZ3dTJs:WHh - imagePullPolicy: Always + image: cWng:afUH16iMvi + imagePullPolicy: Never livenessProbe: - failureThreshold: 954 + failureThreshold: 605 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 209 - periodSeconds: 143 - successThreshold: 577 - terminationGracePeriodSeconds: 639 - timeoutSeconds: 240 + initialDelaySeconds: 24 + periodSeconds: 825 + successThreshold: 752 + terminationGracePeriodSeconds: 733 + timeoutSeconds: 483 name: manager ports: - containerPort: 9443 @@ -43788,171 +98244,63 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 573 + failureThreshold: 912 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 467 - periodSeconds: 570 - successThreshold: 39 - terminationGracePeriodSeconds: 871 - timeoutSeconds: 484 - resources: {} + initialDelaySeconds: 286 + periodSeconds: 553 + successThreshold: 309 + terminationGracePeriodSeconds: 709 + timeoutSeconds: 96 + resources: + limits: + cpu: "524" + memory: "707" + requests: + cpu: "368" + memory: "394" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true ephemeralContainers: null - imagePullSecrets: [] + imagePullSecrets: + - name: yBWZdaFhm + - name: xxpPBU3 initContainers: [] nodeSelector: {} securityContext: runAsUser: 65532 - serviceAccountName: RAyK + serviceAccountName: I terminationGracePeriodSeconds: 10 tolerations: - - effect: ɘ訇 - key: zZq - operator: '!鈸ɍĠ隦酋ʏá訊u' - value: SVKC - - effect: ']峖ũř/àɔ撶JƣʯǤ6E筒6ȇi' - key: 5UvyO3 - operator: uHȧ姍鶉 - value: Ej8o78T + - effect: ʓWŮº幆Ɖr + key: 1PV0 + operator: ǀY鈴NŎ瞕 + tolerationSeconds: 4416976844792890000 + value: 9AgY6oEA6 volumes: - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: "" ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - 6iZG-webhook-service.default.svc - - 6iZG-webhook-service.default.svc.eQX8VRA0Q - issuerRef: - kind: Issuer - name: RAyK-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: "" ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: RAyK-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: 6iZG-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: RAyK-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: 6iZG-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -43960,124 +98308,120 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + "7": HQX0vF + C: p + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: RAyK-crd-job - namespace: default --- testdata/case-051.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null + xgwS: HZFSp9kl labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-config + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: I-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-metrics-reader + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: I-migration-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services verbs: + - create + - delete - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-default -rules: + - list + - patch + - update + - watch - apiGroups: - - authentication.k8s.io + - apps resources: - - tokenreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - autoscaling resources: - - subjectaccessreviews + - horizontalpodautoscalers verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - consoles verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -44094,11 +98438,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -44107,15 +98456,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -44124,8 +98475,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -44135,30 +98510,39 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - events verbs: - create - - delete + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -44168,9 +98552,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -44180,9 +98564,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -44192,22 +98576,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -44217,72 +98603,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: tyx5W-default -subjects: -- kind: ServiceAccount - name: tyx5W - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-election-role - namespace: default -rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -44292,16 +98658,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -44310,296 +98682,122 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: tyx5W-election-role -subjects: -- kind: ServiceAccount - name: tyx5W - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: tyx5W -subjects: -- kind: ServiceAccount - name: tyx5W - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-rpk-bundle - namespace: default + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: I-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: tyx5W-rpk-bundle + kind: ClusterRole + name: I-migration-job-default subjects: - kind: ServiceAccount - name: tyx5W - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: hsmvzpSm ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: hsmvzpSm-webhook-service + name: I-migration-job namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: hsmvzpSm --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W + app.kubernetes.io/name: QU1RdnSl5WDZjW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6o-migration namespace: default spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: hsmvzpSm - strategy: - type: RollingUpdate template: metadata: - annotations: {} - creationTimestamp: null + annotations: + jiVxNXTdQ: GLH + l9uo: YM + yny9PP20Q: BPf1us8 labels: + EAS: s3g7L + JXPC3e: zMJSgX app.kubernetes.io/instance: operator - app.kubernetes.io/name: hsmvzpSm + app.kubernetes.io/name: QU1RdnSl5WDZjW spec: - activeDeadlineSeconds: -3568968370034163000 - affinity: - podAntiAffinity: {} automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=K - - --configurator-base-image=mM7lGw9fmKx - - l4dHBtic0cX0cs7 - - "" + - migration command: - - /manager - env: [] - image: mM7lGw9fmKx:K - imagePullPolicy: IfNotPresent - livenessProbe: - failureThreshold: 654 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 266 - periodSeconds: 67 - successThreshold: 587 - terminationGracePeriodSeconds: 834 - timeoutSeconds: 543 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 226 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 189 - periodSeconds: 648 - successThreshold: 100 - terminationGracePeriodSeconds: 90 - timeoutSeconds: 281 + - /redpanda-operator + image: cWng:afUH16iMvi + imagePullPolicy: Never + name: migration resources: limits: - cpu: "642" - memory: "573" + cpu: "524" + memory: "707" requests: - cpu: "351" - memory: "829" + cpu: "368" + memory: "394" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsPolicy: xť]\ĕȨ宂鄈 - ephemeralContainers: null - hostIPC: true - hostname: thPFaybO - imagePullSecrets: [] - initContainers: [] + imagePullSecrets: + - name: yBWZdaFhm + - name: xxpPBU3 nodeSelector: {} - preemptionPolicy: (ƸĠȸx垩骳 - priorityClassName: hYrZm - readinessGates: - - conditionType: 徱窭Nj - - conditionType: "" - restartPolicy: 咸¤沭騁xp;蔖菞Ĩʣ - runtimeClassName: 94jSzI68RgM - schedulerName: DwYnpi9khB9k - securityContext: - runAsUser: 65532 - serviceAccountName: c9k - subdomain: 38i + restartPolicy: OnFailure + serviceAccountName: I-migration-job terminationGracePeriodSeconds: 10 - tolerations: [] + tolerations: + - effect: ʓWŮº幆Ɖr + key: 1PV0 + operator: ǀY鈴NŎ瞕 + tolerationSeconds: 4416976844792890000 + value: 9AgY6oEA6 volumes: - name: kube-api-access projected: @@ -44619,136 +98817,7 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: 2ecI ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - hsmvzpSm-webhook-service.default.svc - - hsmvzpSm-webhook-service.default.svc.S - issuerRef: - kind: Issuer - name: tyx5W-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: 2ecI ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: tyx5W-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: hsmvzpSm-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: tyx5W-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: hsmvzpSm-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: tyx5W-crd-job - namespace: default --- testdata/case-052.yaml.golden -- +-- testdata/case-023.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -44756,14 +98825,13 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fEL2 + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop namespace: default --- # Source: operator/templates/entry-point.yaml @@ -44783,30 +98851,32 @@ data: port: 9443 kind: ConfigMap metadata: - annotations: null - creationTimestamp: null + annotations: + IH: S4ywxLg + SVbJKOD: M6NY labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-config + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + IH: S4ywxLg + SVbJKOD: M6NY labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-metrics-reader + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -44817,16 +98887,88 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: {} - creationTimestamp: null + annotations: + IH: S4ywxLg + SVbJKOD: M6NY labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-default + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-default rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -44839,6 +98981,37 @@ rules: - subjectaccessreviews verbs: - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: @@ -44848,6 +99021,16 @@ rules: - list - patch - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch - apiGroups: - "" resources: @@ -44858,6 +99041,158 @@ rules: - "" resources: - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters verbs: - create - delete @@ -44867,41 +99202,38 @@ rules: - update - watch - apiGroups: - - "" + - redpanda.vectorized.io resources: - - events - - secrets - - serviceaccounts - - services + - clusters/finalizers verbs: - - create - - get - - list - patch - update - - watch - apiGroups: - - "" + - redpanda.vectorized.io resources: - - nodes + - clusters/status verbs: - get - - list - - watch + - patch + - update - apiGroups: - - "" + - scheduling.k8s.io resources: - - persistentvolumeclaims + - priorityclasses verbs: - - delete - get - list - watch - apiGroups: - "" resources: + - configmaps - pods + - secrets + - serviceaccounts + - services verbs: + - create - delete - get - list @@ -44911,30 +99243,23 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - events verbs: + - create - patch - - update - apiGroups: - apps resources: - - deployments - - statefulsets + - controllerrevisions verbs: - - create - - delete - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -44944,9 +99269,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -44956,9 +99281,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -44968,22 +99293,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -44993,72 +99320,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 89IgS-default -subjects: -- kind: ServiceAccount - name: fEL2 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-election-role - namespace: default -rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -45068,16 +99375,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -45086,148 +99399,71 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 89IgS-election-role -subjects: -- kind: ServiceAccount - name: fEL2 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 89IgS -subjects: -- kind: ServiceAccount - name: fEL2 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + IH: S4ywxLg + SVbJKOD: M6NY labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-rpk-bundle - namespace: default + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 89IgS-rpk-bundle + kind: ClusterRole + name: ISOeWop-default subjects: - kind: ServiceAccount - name: fEL2 + name: ISOeWop namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + IH: S4ywxLg + SVbJKOD: M6NY labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-metrics-service + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-metrics-service namespace: default spec: ports: @@ -45236,21 +99472,22 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/name: su3 --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + IH: S4ywxLg + SVbJKOD: M6NY labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: njC0cLDExDA-webhook-service + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: su3-webhook-service namespace: default spec: ports: @@ -45258,69 +99495,161 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/name: su3 --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null - creationTimestamp: null + annotations: + IH: S4ywxLg + SVbJKOD: M6NY labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop namespace: default spec: replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/name: su3 strategy: - type: RollingUpdate + rollingUpdate: + maxSurge: 1684422966 + maxUnavailable: 816338999 + type: 蝟Ɛä巜衠o妇飔ßbƻɋ婸ɦ=CA彪踰 template: metadata: annotations: - "": 82Xww0 - 2J1XQz: 9Ke - creationTimestamp: null + FWIwejGq6m: CwoBw + pL3: 6uZcEq labels: + 0zhAKw: rawu app.kubernetes.io/instance: operator - app.kubernetes.io/name: njC0cLDExDA + app.kubernetes.io/name: su3 + uN: cTRBFa spec: - activeDeadlineSeconds: 7346256592642930000 + activeDeadlineSeconds: 6066908230736937000 affinity: - podAffinity: {} + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: X + operator: ȪǞ腻揠飨zïȗUť + - key: R0F4mENXFj + operator: ȇ玨 + values: + - kcit0ek + - ieN + matchFields: + - key: SKJu + operator: 貶ď!\磴ɔ(Ȱ啙织诶/ɸ煥ʋ + values: + - "" + - key: 1E6uyWX + operator: ʙȣɂH@§įz ʂ{W揙宦 + weight: 2057602393 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: YFz + operator: Ʀ飣+Þ]j囍¶毯磠 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + matchLabelKeys: + - CuyS + - nWwgRWTo + - 5OcpCYRd + namespaceSelector: + matchExpressions: + - key: k1rzZ + operator: 灈彖憢瞢速蠓峨Ăɐidȗ;ʛƱŹ=9Ų + values: + - 43YlEYX + - dfDdhEY18QKM + - l + matchLabels: + 2Olj: "" + namespaces: + - nSr8eTJyi + topologyKey: MiYAuA + weight: -1623299858 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: IKfKQpD7f + operator: ǡhȦƿǽÓ浇S + - key: h + operator: āKŏʪm殭©~<碇mǁn跨罅ȳ婙 + values: + - jJR + - SpealwyAgi1J4 + - umszgaaozB + - key: ApfVq + operator: ɽÖƯ昶R>E(脼 + values: + - ymtbyhg + matchLabelKeys: + - 1lsA8h + - S + namespaceSelector: {} + namespaces: + - 3p + - THKt + - mKnDa + topologyKey: EO066Sq + - mismatchLabelKeys: + - vI + - 6YFYtm + - UTDo2oAUr + namespaces: + - 1tK + - uLVmH + topologyKey: sTL9MMYEnvDl + - matchLabelKeys: + - iHAgF3 + - o2J + mismatchLabelKeys: + - "9" + - s7z + - x + namespaceSelector: {} + topologyKey: AXM4soah automountServiceAccountToken: true containers: - args: + - --configurator-base-image=8ta + - --configurator-tag=N5m1k + - --enable-console=true + - --enable-vectorized-controllers=true - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true + - --log-level=VV83S + - --metrics-bind-address=:8443 - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --webhook-enabled=true command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 - imagePullPolicy: IfNotPresent + image: 8ta:N5m1k + imagePullPolicy: Always livenessProbe: - failureThreshold: 840 + failureThreshold: 743 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 219 - periodSeconds: 674 - successThreshold: 446 - terminationGracePeriodSeconds: 494 - timeoutSeconds: 935 + initialDelaySeconds: 401 + periodSeconds: 160 + successThreshold: 680 + terminationGracePeriodSeconds: 260 + timeoutSeconds: 801 name: manager ports: - containerPort: 9443 @@ -45330,16 +99659,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 498 + failureThreshold: 396 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 16 - periodSeconds: 432 - successThreshold: 888 - terminationGracePeriodSeconds: 82 - timeoutSeconds: 233 - resources: {} + initialDelaySeconds: 451 + periodSeconds: 790 + successThreshold: 771 + terminationGracePeriodSeconds: 879 + timeoutSeconds: 251 + resources: + limits: + cpu: "215" + memory: "865" + requests: + cpu: "919" + memory: "247" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -45349,33 +99684,84 @@ spec: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true - dnsConfig: {} - dnsPolicy: 刲ʑ|ʖl狉J - enableServiceLinks: true + dnsPolicy: Ȃɡ ephemeralContainers: null - hostname: 0R1Ydin + hostPID: true + hostname: JpjCf imagePullSecrets: [] initContainers: [] - nodeName: DeOJp - nodeSelector: {} - priority: 1281798407 - priorityClassName: Q3Tz + nodeName: O + nodeSelector: + XC: "7" + priorityClassName: JAyQA67vglq readinessGates: - - conditionType: ~3ź黙}忮ǒȰyÛǕ - - conditionType: 猭WɏƎŊ°粅Z銘椢拘N0Ǜ2ǚĺ - - conditionType: 阱睰(ʩ - restartPolicy: Ƙ莱;ɐ偂手墾GĜF憟磒ƶ埖嘫ē藕ç% - runtimeClassName: CcMVUvC - schedulerName: Fext4lbhp2RbU + - conditionType: $琩ȒN栍闛TDzr铑ʝ饽D昲 + restartPolicy: ÊɨgJo!Yȥ7*ƱʪĭĬ芷Ž + runtimeClassName: w4bsqu + schedulerName: "9728" + schedulingGates: + - name: aMIZw7f + - name: Vzm securityContext: - fsGroupChangePolicy: Always - runAsGroup: -3142309644442217000 - runAsUser: 3888375852294945000 - serviceAccountName: Xz0J - shareProcessNamespace: true - subdomain: Y0JYo - terminationGracePeriodSeconds: 10 - tolerations: [] + appArmorProfile: + localhostProfile: 20E50bpuLl2u + type: U偹爾ǟ谽焳Ȍ鍬n徔'8Ơ燫Ǜ发 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -7481754382132760000 + runAsUser: -6006844522233680000 + supplementalGroups: + - -3873600095724743700 + - 8921574058787452000 + serviceAccountName: ISOeWop + subdomain: 9BpBxYL + terminationGracePeriodSeconds: -2486717327166328000 + tolerations: + - key: rM + operator: 訃è{Y6Ôʃȁ賊哪鯢罓SŊƽ,ƕȥ= + tolerationSeconds: 3121960750350822000 + value: mWQfCu4 + - effect: Ʌ鎁Ɛnȑ$輥 + key: 9a + operator: ų裦t襃忿遜崝 + tolerationSeconds: 8319990797303308000 + value: yFx8 + - effect: 歸ʝbɭ + key: eiEenf + operator: h穙@vƼ妟Ÿ + tolerationSeconds: -5657524613020897000 + value: 1Q + topologySpreadConstraints: + - labelSelector: {} + matchLabelKeys: + - dl4 + - hjOHy + - 764gP16 + maxSkew: 1578679119 + minDomains: 324886698 + nodeTaintsPolicy: ņ搊胠đ+Ćă + topologyKey: dxfKd + whenUnsatisfiable: Ï銨Ƽ + - labelSelector: + matchExpressions: + - key: a9HvoJ9lyL + operator: 褅8ʅķW陖蒕ʉǎ簱o + values: + - QSuAYPm + - 61Kr + matchLabels: + VOZO: T + wp6: gmv1OyNW + maxSkew: -1939089595 + minDomains: -1768272329 + nodeAffinityPolicy: 掿&ʏ'ƞƻ + nodeTaintsPolicy: Q^ǝmN萤纇嚡ǭ矟$}汇bag茇狣 + topologyKey: OcQ + whenUnsatisfiable: ɑ3 + - labelSelector: {} + maxSkew: 1161393659 + nodeTaintsPolicy: CO鯇雷$ + topologyKey: "" + whenUnsatisfiable: 帠签«.ǜ[żDaDʪ僭ƍU厢G|K volumes: - name: kube-api-access projected: @@ -45398,46 +99784,48 @@ spec: - name: cert secret: defaultMode: 420 - secretName: "5" + secretName: aJwr8ctYr --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: null - creationTimestamp: null + annotations: + IH: S4ywxLg + SVbJKOD: M6NY labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-webhook-cert namespace: default spec: dnsNames: - - njC0cLDExDA-webhook-service.default.svc - - njC0cLDExDA-webhook-service.default.svc.mED + - su3-webhook-service.default.svc + - su3-webhook-service.default.svc.mjB8 issuerRef: kind: Issuer - name: 89IgS-selfsigned-issuer + name: ISOeWop-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: "5" + secretName: aJwr8ctYr --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: null - creationTimestamp: null + annotations: + IH: S4ywxLg + SVbJKOD: M6NY labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 89IgS-selfsigned-issuer + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -45447,9 +99835,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 89IgS-mutating-webhook-configuration + cert-manager.io/inject-ca-from: default/ISOeWop-webhook-cert + name: ISOeWop-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -45457,7 +99844,7 @@ webhooks: - v1beta1 clientConfig: service: - name: njC0cLDExDA-webhook-service + name: su3-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -45475,13 +99862,48 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + IH: S4ywxLg + SVbJKOD: M6NY + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 +--- +# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 89IgS-validating-webhook-configuration + cert-manager.io/inject-ca-from: default/ISOeWop-webhook-cert + name: ISOeWop-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -45489,7 +99911,7 @@ webhooks: - v1beta1 clientConfig: service: - name: njC0cLDExDA-webhook-service + name: su3-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -45505,71 +99927,23 @@ webhooks: resources: - clusters sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fEL2-crd-job - namespace: default --- testdata/case-053.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-config + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml @@ -45577,38 +99951,90 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null + IH: S4ywxLg + SVbJKOD: M6NY + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-metrics-reader + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-migration-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services verbs: + - create + - delete - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-default -rules: + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -45621,6 +100047,37 @@ rules: - subjectaccessreviews verbs: - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: @@ -45630,6 +100087,16 @@ rules: - list - patch - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch - apiGroups: - "" resources: @@ -45640,6 +100107,23 @@ rules: - "" resources: - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -45651,12 +100135,10 @@ rules: - apiGroups: - "" resources: - - events - - secrets - - serviceaccounts - - services + - configmaps verbs: - create + - delete - get - list - patch @@ -45698,10 +100180,22 @@ rules: verbs: - patch - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch - apiGroups: - apps resources: - - deployments - statefulsets verbs: - create @@ -45765,7 +100259,6 @@ rules: - redpanda.vectorized.io resources: - clusters - - consoles verbs: - create - delete @@ -45778,7 +100271,6 @@ rules: - redpanda.vectorized.io resources: - clusters/finalizers - - consoles/finalizers verbs: - patch - update @@ -45786,7 +100278,6 @@ rules: - redpanda.vectorized.io resources: - clusters/status - - consoles/status verbs: - get - patch @@ -45799,52 +100290,14 @@ rules: - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: fRjXK1u0-default -subjects: -- kind: ServiceAccount - name: fRjXK1u0 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-election-role - namespace: default -rules: - apiGroups: - "" resources: - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -45860,6 +100313,121 @@ rules: verbs: - create - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -45872,252 +100440,351 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0 - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - persistentvolumeclaims - - pods + - podmonitors + - servicemonitors verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - networking.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null + IH: S4ywxLg + SVbJKOD: M6NY + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-election-role - namespace: default + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: fRjXK1u0-election-role + kind: ClusterRole + name: ISOeWop-migration-job-default subjects: - kind: ServiceAccount - name: fRjXK1u0 + name: ISOeWop-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: batch/v1 +kind: Job metadata: annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0 - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: fRjXK1u0 -subjects: -- kind: ServiceAccount - name: fRjXK1u0 + app.kubernetes.io/name: su3 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ISOeWop-migration namespace: default +spec: + template: + metadata: + annotations: {} + labels: + 0zhAKw: rawu + app.kubernetes.io/instance: operator + app.kubernetes.io/name: su3 + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: 8ta:N5m1k + imagePullPolicy: Always + name: migration + resources: + limits: + cpu: "215" + memory: "865" + requests: + cpu: "919" + memory: "247" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: + XC: "7" + restartPolicy: OnFailure + serviceAccountName: ISOeWop-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-024.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null + kud: qJQkq labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-rpk-bundle - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: fRjXK1u0-rpk-bundle -subjects: -- kind: ServiceAccount - name: fRjXK1u0 + app.kubernetes.io/name: I2z + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: XcGwkgoTIZVG namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -kind: Service +data: + controller_manager_config.yaml: |- + apiVersion: D2X0z + health: + healthProbeBindAddress: "" + kind: IvUhieE + leaderElection: + leaderElect: true + resourceName: 272ePs + metrics: + bindAddress: yZR8wVIzyF + webhook: + port: 72 +kind: ConfigMap metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-metrics-service + app.kubernetes.io/name: I2z + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 35Y2xq-config namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: Re --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Re-webhook-service + app.kubernetes.io/name: I2z + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 35Y2xq-metrics-service namespace: default spec: ports: - - port: 443 - targetPort: 9443 + - name: https + port: 8443 + targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Re + app.kubernetes.io/name: I2z --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0 + app.kubernetes.io/name: I2z + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 35Y2xq namespace: default spec: - replicas: 1 + replicas: -887401854 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Re + app.kubernetes.io/name: I2z strategy: - type: RollingUpdate + rollingUpdate: + maxSurge: 1771671173 + maxUnavailable: 744599225 + type: '"ï谼LĞ­z詧Ñ綥Ď' template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Re + app.kubernetes.io/name: I2z spec: + affinity: + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: "" + operator: "" + values: + - xm5WS + - ZfuY + - Wk520Ea7 + - key: lUoHpB + operator: (UƘWZ7 + values: + - 3Al8ndUwf + topologyKey: Bfuepf12s + weight: 572438698 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: 4k4GeppDv + operator: 鑱钃皅裧ŽŜǐŖ悳è梛Q + values: + - GaDgp5iN5v + - 3h2 + - qjK + - key: RdJEos + operator: EɻkȨ"ưv妰D蛕 + - key: tTJkBpOr + operator: JYƫ崓砕ȇt恞F葱[ + matchLabels: + JWDuZRjbUoE: WjQ3 + mismatchLabelKeys: + - GFhTkXq + namespaceSelector: + matchLabels: + "04": mhckQ + topologyKey: "" + weight: 152514230 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: EoJ + operator: 渠忽獭葷Ȍ滜_ + values: + - no4 + - key: IPbfz + operator: 酸素 + matchLabelKeys: + - RB5EIflu + - I4RRywJc4Yy + mismatchLabelKeys: + - Z + - YiLuX + namespaceSelector: {} + namespaces: + - lN + - GV7Aq91vS + topologyKey: r7bWQ + weight: -225213048 + requiredDuringSchedulingIgnoredDuringExecution: + - matchLabelKeys: + - DXFh1c + - jSAd20 + - "3" + namespaceSelector: {} + topologyKey: siIg automountServiceAccountToken: false containers: - args: + - --configurator-base-image=OLVAhRBe + - --configurator-tag=iR9tH + - --enable-console=true + - --enable-vectorized-controllers=true - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --log-level=Jcx + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: OLVAhRBe:iR9tH imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 957 + failureThreshold: 332 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 615 - periodSeconds: 728 - successThreshold: 46 - terminationGracePeriodSeconds: 882 - timeoutSeconds: 321 + initialDelaySeconds: 953 + periodSeconds: 586 + successThreshold: 723 + terminationGracePeriodSeconds: 464 + timeoutSeconds: 549 name: manager ports: - containerPort: 9443 @@ -46127,40 +100794,43 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 162 + failureThreshold: 123 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 221 - periodSeconds: 239 - successThreshold: 438 - terminationGracePeriodSeconds: 290 - timeoutSeconds: 121 + initialDelaySeconds: 360 + periodSeconds: 671 + successThreshold: 678 + terminationGracePeriodSeconds: 14 + timeoutSeconds: 482 resources: limits: - cpu: "243" - memory: "99" + cpu: "810" + memory: "149" requests: - cpu: "91" - memory: "106" + cpu: "600" + memory: "88" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true ephemeralContainers: null imagePullSecrets: [] initContainers: [] - nodeSelector: {} + nodeSelector: + WbQXKP7: ekJJ securityContext: runAsUser: 65532 - serviceAccountName: fRjXK1u0 + serviceAccountName: XcGwkgoTIZVG terminationGracePeriodSeconds: 10 - tolerations: [] + tolerations: + - effect: ÊǠh愺|¯U祇 + key: nS81 + operator: '{' + tolerationSeconds: 3798434172391488000 + value: 6Jhi volumes: - name: kube-api-access projected: @@ -46180,120 +100850,6 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: ktQ0dZ ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - Re-webhook-service.default.svc - - Re-webhook-service.default.svc.I - issuerRef: - kind: Issuer - name: fRjXK1u0-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: ktQ0dZ ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - aG4: btgx7ZmcV - gwBKGQjyw: XzUFAE - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: fRjXK1u0-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Re-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: fRjXK1u0-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Re-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -46301,67 +100857,126 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null + kud: qJQkq labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Re - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fRjXK1u0-crd-job + app.kubernetes.io/name: I2z + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: XcGwkgoTIZVG-migration-job namespace: default --- testdata/case-054.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS + app.kubernetes.io/name: I2z + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 35Y2xq-migration namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: I2z + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: OLVAhRBe:iR9tH + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "810" + memory: "149" + requests: + cpu: "600" + memory: "88" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: + WbQXKP7: ekJJ + restartPolicy: OnFailure + serviceAccountName: XcGwkgoTIZVG-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ÊǠh愺|¯U祇 + key: nS81 + operator: '{' + tolerationSeconds: 3798434172391488000 + value: 6Jhi + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-025.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + apiVersion: n3T health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig + healthProbeBindAddress: MX + kind: hvQM leaderElection: leaderElect: true resourceName: aa9fc693.vectorized.io metrics: - bindAddress: 127.0.0.1:8080 + bindAddress: D webhook: - port: 9443 + port: 169 kind: ConfigMap metadata: annotations: - ybiJQZ: Ga - creationTimestamp: null + 0qwEw: sSE57 + PK22WJ: MB + ykqJNdBG: 8uR6z5RvKA labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-config + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -46369,17 +100984,16 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - ybiJQZ: Ga - creationTimestamp: null + 0qwEw: sSE57 + PK22WJ: MB + ykqJNdBG: 8uR6z5RvKA labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-metrics-reader + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -46391,45 +101005,100 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - ybiJQZ: Ga - creationTimestamp: null + 0qwEw: sSE57 + PK22WJ: MB + ykqJNdBG: 8uR6z5RvKA labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-default + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - consoles verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -46446,11 +101115,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -46459,15 +101133,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -46476,8 +101152,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -46487,30 +101187,39 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - events verbs: - create - - delete + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -46520,9 +101229,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -46532,9 +101241,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -46544,22 +101253,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -46569,78 +101280,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - ybiJQZ: Ga - creationTimestamp: null - labels: - 1c0jr: ImaKzYy - afd: Q9L - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 2jUS-default -subjects: -- kind: ServiceAccount - name: 2jUS - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - ybiJQZ: Ga - creationTimestamp: null - labels: - 1c0jr: ImaKzYy - afd: Q9L - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-election-role - namespace: default -rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -46650,16 +101335,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -46668,148 +101359,56 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - ybiJQZ: Ga - creationTimestamp: null - labels: - 1c0jr: ImaKzYy - afd: Q9L - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - ybiJQZ: Ga - creationTimestamp: null - labels: - 1c0jr: ImaKzYy - afd: Q9L - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - ybiJQZ: Ga - creationTimestamp: null - labels: - 1c0jr: ImaKzYy - afd: Q9L - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 2jUS-election-role -subjects: -- kind: ServiceAccount - name: 2jUS - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - ybiJQZ: Ga - creationTimestamp: null - labels: - 1c0jr: ImaKzYy - afd: Q9L - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 2jUS -subjects: -- kind: ServiceAccount - name: 2jUS - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - ybiJQZ: Ga - creationTimestamp: null + 0qwEw: sSE57 + PK22WJ: MB + ykqJNdBG: 8uR6z5RvKA labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-rpk-bundle - namespace: default + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 2jUS-rpk-bundle + kind: ClusterRole + name: J8-default subjects: - kind: ServiceAccount - name: 2jUS + name: "" namespace: default --- # Source: operator/templates/entry-point.yaml @@ -46817,17 +101416,16 @@ apiVersion: v1 kind: Service metadata: annotations: - ybiJQZ: Ga - creationTimestamp: null + 0qwEw: sSE57 + PK22WJ: MB + ykqJNdBG: 8uR6z5RvKA labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-metrics-service + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8-metrics-service namespace: default spec: ports: @@ -46836,24 +101434,23 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: eMNuQ + app.kubernetes.io/name: mXKX --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - ybiJQZ: Ga - creationTimestamp: null + 0qwEw: sSE57 + PK22WJ: MB + ykqJNdBG: 8uR6z5RvKA labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: eMNuQ-webhook-service + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: mXKX-webhook-service namespace: default spec: ports: @@ -46861,67 +101458,152 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: eMNuQ + app.kubernetes.io/name: mXKX --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - ybiJQZ: Ga - creationTimestamp: null + 0qwEw: sSE57 + PK22WJ: MB + ykqJNdBG: 8uR6z5RvKA labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8 namespace: default spec: - replicas: 1 + replicas: -893926159 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: eMNuQ + app.kubernetes.io/name: mXKX strategy: - type: RollingUpdate + rollingUpdate: + maxSurge: 61559197 + maxUnavailable: 1646965002 + type: Ƈ!T樨ɾ7>L1ɣqĽơ矀E旣OĈ諪 template: metadata: - annotations: {} - creationTimestamp: null + annotations: + PQRJglIWgDV: r5eAm9jtdh + vEQfE: 7o8Q labels: + 4pV5eNiF: 7T4o app.kubernetes.io/instance: operator - app.kubernetes.io/name: eMNuQ + app.kubernetes.io/name: mXKX spec: - automountServiceAccountToken: false + activeDeadlineSeconds: -6800814730982743000 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: CiRSW + operator: (媛婔畢S桵.ƺû鿁ƃEʢ嚇畏罉ȅ貴t + values: + - mSS + - BrX + - key: fcX + operator: ǎ幦īÒɾ + values: + - ak + - rln + - key: t0Di + operator: Śȫ + - matchExpressions: + - key: "7" + operator: Ǎ + values: + - 7LbWBdi + - c1xyNe + matchFields: + - key: OoW7N3iq0e + operator: ȔƯ擿ƑC騺ſ煥淴儖 + values: + - d5y2VE + - lgnJeAR + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: DHEd0g + operator: Ț**2|匂 + values: + - gpsUk8wg + - key: nHWAvvU + operator: '!渾H枨ƗɎ逤沣ʍ3貫+ŮʇM;Ƚʝ' + values: + - iD + - cPrYsF + - key: QpLs2 + operator: Ġ剨f殼艒ʗɁDǵʥƊ秢ġTXEÈŠ + values: + - "" + - 0j4a + - 4Ws0r8 + matchLabels: + 3TL8P6: e4o + iz6T1bdE: 0MUft6 + matchLabelKeys: + - P + - UIjhNvxLcMuFy + - xvVX + mismatchLabelKeys: + - DFr3 + - G + namespaceSelector: + matchExpressions: + - key: Aoi + operator: ås\焛û帩¦Æ天鰝ĩ貆ʪ搡3Ǹ + - key: yfKVGL8 + operator: G +霾=脶b + values: + - XHAe + - 5G + - RQIsiPB9pK + matchLabels: + 3u: FyjBG1C + CdJW: J4 + namespaces: + - brdlpJY + - J + topologyKey: OS + weight: -126777447 + podAntiAffinity: {} + automountServiceAccountToken: true containers: - args: + - --configurator-base-image=Jy + - --configurator-tag=QK8rajxXu7 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true + - --log-level=YPVuE2 + - --metrics-bind-address=:8443 - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=NnFVx - - --configurator-base-image=zCQ + - --webhook-enabled=true command: - /manager env: [] - image: zCQ:NnFVx - imagePullPolicy: IfNotPresent + image: Jy:QK8rajxXu7 + imagePullPolicy: Always livenessProbe: - failureThreshold: 332 + failureThreshold: 560 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 423 - periodSeconds: 374 - successThreshold: 76 - terminationGracePeriodSeconds: 975 - timeoutSeconds: 736 + initialDelaySeconds: 94 + periodSeconds: 684 + successThreshold: 333 + terminationGracePeriodSeconds: 487 + timeoutSeconds: 601 name: manager ports: - containerPort: 9443 @@ -46931,15 +101613,15 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 220 + failureThreshold: 115 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 15 - periodSeconds: 469 - successThreshold: 7 - terminationGracePeriodSeconds: 703 - timeoutSeconds: 671 + initialDelaySeconds: 683 + periodSeconds: 917 + successThreshold: 556 + terminationGracePeriodSeconds: 566 + timeoutSeconds: 366 resources: {} securityContext: allowPrivilegeEscalation: false @@ -46950,29 +101632,118 @@ spec: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true + dnsConfig: + nameservers: + - iAQdxF + - F + - nlkayCCRl + options: + - name: vhZ + value: 9JbQO + - name: RC62q + value: SNJ + - name: UgTdHU + value: 4Uwslb + searches: + - "" + - c9i + dnsPolicy: Y#ƌl + enableServiceLinks: true ephemeralContainers: null + hostAliases: + - hostnames: + - sYDvqKw + ip: mR79I + - hostnames: + - 61A + - Ww + ip: f2oK + - hostnames: + - Jxu4E + - z + ip: aya + hostIPC: true + hostNetwork: true + hostUsers: true + hostname: LK imagePullSecrets: - - name: eNCbsc - - name: JNdAyNz - - name: 5Q3VQMDN + - name: 4ywaPzlA + - name: wB + - name: 0l initContainers: [] + nodeName: VXpzLi nodeSelector: - 44yymqi2: eNsx + "": KWnf2O + Gkxlu4: X + zGLTKW8mfx: q + preemptionPolicy: ùÓîmùJ审岓釕襡枬睆Ƈ.h対製ȇ鿝 + priority: 534036558 + priorityClassName: 4uSRGlEh + readinessGates: + - conditionType: pȈ&0\Ŝ-敁Î効 + - conditionType: 夞繡倣ã悡T葚Ł硯涵6¼Ǹ&隚Ò敼摫 + resourceClaims: + - name: 6H97J00 + resourceClaimName: 62T + resourceClaimTemplateName: 8UufN + - name: uEOQ + resourceClaimName: PIH9T4y + resourceClaimTemplateName: yxteke + restartPolicy: 汌QŹ&ʂ伖GK!$婳p]Nɡ + runtimeClassName: fgRxvttUdK + schedulerName: A70 securityContext: runAsUser: 65532 - serviceAccountName: 2jUS + serviceAccountName: "" + subdomain: 6LkI0 terminationGracePeriodSeconds: 10 - tolerations: - - effect: í瑓Ū - key: R8tjx - operator: ħƁ粭贘ɂ幃í瑓<Œpʧňʧ5秷"Ƨ/ - tolerationSeconds: 3264495343725739500 - value: d89px - - effect: 痭\i - key: FtLH68 - operator: '%' - tolerationSeconds: 4269468755441473000 - value: ygpVX + tolerations: [] + topologySpreadConstraints: + - matchLabelKeys: + - HisIV + - D + maxSkew: 1150604057 + minDomains: 877082651 + nodeAffinityPolicy: ^ǣ1T毢 + nodeTaintsPolicy: \+!沶C|Ʈ黃ǣ瘓试ɁO + topologyKey: UBZ79 + whenUnsatisfiable: Ɯ,$IJĠɓ¦Ȕɵ朦筚鴶蕯Z鼻ǩ + - labelSelector: + matchExpressions: + - key: "6" + operator: 毪Z黗ȧʔǪ瀞À + values: + - DQTRhw + - 9VSesJ + - o00Wu + - key: FabCR + operator: "" + values: + - wRLurq + - yAXLPT + - key: 0tPU5 + operator: 羁璿mȜO寉\犕ĒʜŎ剋ǼE + values: + - adjTN3Q6 + - M5 + matchLabels: + Q: dD0 + matchLabelKeys: + - XFKwp + - voPP9 + maxSkew: -975588112 + minDomains: -994562282 + nodeAffinityPolicy: s峔ŗ橶孖ʯř + nodeTaintsPolicy: ƱʥȺ悐+ʯG}\LJɠ;祄x崜z鬢 + topologyKey: "" + whenUnsatisfiable: ɲmĪ抡 + - matchLabelKeys: + - VOZY6 + maxSkew: -1821931675 + minDomains: -1361226893 + nodeAffinityPolicy: ʕþ唳qƗǩ纺Ŭg謋鵉+蔁雬墫-c + topologyKey: "" + whenUnsatisfiable: ʓɬ嵥dz蕳 volumes: - name: kube-api-access projected: @@ -46995,52 +101766,51 @@ spec: - name: cert secret: defaultMode: 420 - secretName: wA + secretName: yvs + - name: 7jhR7y74O --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: annotations: - ybiJQZ: Ga - creationTimestamp: null + 0qwEw: sSE57 + PK22WJ: MB + ykqJNdBG: 8uR6z5RvKA labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8-webhook-cert namespace: default spec: dnsNames: - - eMNuQ-webhook-service.default.svc - - eMNuQ-webhook-service.default.svc.LW + - mXKX-webhook-service.default.svc + - mXKX-webhook-service.default.svc.Z issuerRef: kind: Issuer - name: 2jUS-selfsigned-issuer + name: J8-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: wA + secretName: yvs --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: annotations: - ybiJQZ: Ga - creationTimestamp: null + 0qwEw: sSE57 + PK22WJ: MB + ykqJNdBG: 8uR6z5RvKA labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-selfsigned-issuer + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -47050,9 +101820,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 2jUS-mutating-webhook-configuration + cert-manager.io/inject-ca-from: default/J8-webhook-cert + name: J8-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -47060,7 +101829,7 @@ webhooks: - v1beta1 clientConfig: service: - name: eMNuQ-webhook-service + name: mXKX-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -47082,9 +101851,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 2jUS-validating-webhook-configuration + cert-manager.io/inject-ca-from: default/J8-webhook-cert + name: J8-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -47092,7 +101860,7 @@ webhooks: - v1beta1 clientConfig: service: - name: eMNuQ-webhook-service + name: mXKX-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -47115,103 +101883,157 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: + MIFQh: fMwFL helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null labels: - 1c0jr: ImaKzYy - afd: Q9L app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2jUS-crd-job + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: -crd-job namespace: default --- testdata/case-055.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 automountServiceAccountToken: false kind: ServiceAccount metadata: - annotations: null - creationTimestamp: null + annotations: + MIFQh: fMwFL + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: -migration-job namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + 0qwEw: sSE57 + PK22WJ: MB + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + ykqJNdBG: 8uR6z5RvKA labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-config - namespace: default + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: -crd-job-default +rules: +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - create + - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + 0qwEw: sSE57 + PK22WJ: MB + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + ykqJNdBG: 8uR6z5RvKA labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-metrics-reader + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: -migration-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles verbs: + - create + - delete - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-default -rules: + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -47227,22 +102049,26 @@ rules: - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - "" resources: - - nodes + - events verbs: - - get + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -47254,39 +102080,67 @@ rules: - apiGroups: - "" resources: - - events - - secrets - - serviceaccounts - - services + - persistentvolumes verbs: - - create - get - list - patch - - update - watch - apiGroups: - "" resources: - - nodes + - persistentvolumeclaims + - pods verbs: + - delete - get - list - watch - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: + - configmaps - pods + - secrets + - serviceaccounts + - services verbs: + - create - delete - get - list @@ -47296,30 +102150,23 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - events verbs: + - create - patch - - update - apiGroups: - apps resources: - - deployments - - statefulsets + - controllerrevisions verbs: - - create - - delete - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -47329,9 +102176,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -47341,9 +102188,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -47353,22 +102200,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -47378,74 +102227,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: WM-default -subjects: -- kind: ServiceAccount - name: WM - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-election-role - namespace: default -rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -47455,16 +102282,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -47473,268 +102306,193 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: WM-election-role -subjects: -- kind: ServiceAccount - name: WM - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + 0qwEw: sSE57 + PK22WJ: MB + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + ykqJNdBG: 8uR6z5RvKA labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM - namespace: default + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: -crd-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: WM + kind: ClusterRole + name: -crd-job-default subjects: - kind: ServiceAccount - name: WM + name: -crd-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + 0qwEw: sSE57 + PK22WJ: MB + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + ykqJNdBG: 8uR6z5RvKA labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-rpk-bundle - namespace: default + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: -migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: WM-rpk-bundle + kind: ClusterRole + name: -migration-job-default subjects: - kind: ServiceAccount - name: WM - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: hJkIJY5Y ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: hJkIJY5Y-webhook-service + name: -migration-job namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: hJkIJY5Y --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8-crds namespace: default spec: - replicas: 910858327 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: hJkIJY5Y - strategy: - type: 耥顅öƲ=MŰ5;ǗAȵɴı|Ǯ template: metadata: annotations: - HA: itGE - J: EB - qA1Kj3: Rty - creationTimestamp: null + PQRJglIWgDV: r5eAm9jtdh labels: + 4pV5eNiF: 7T4o app.kubernetes.io/instance: operator - app.kubernetes.io/name: hJkIJY5Y + app.kubernetes.io/name: mXKX spec: automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator - - D4rks - - p7p - - 1kSb + - crd + - --experimental command: - - /manager - env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 - imagePullPolicy: IfNotPresent - livenessProbe: - failureThreshold: 214 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 56 - periodSeconds: 467 - successThreshold: 245 - terminationGracePeriodSeconds: 189 - timeoutSeconds: 515 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 268 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 427 - periodSeconds: 720 - successThreshold: 277 - terminationGracePeriodSeconds: 221 - timeoutSeconds: 87 + - /redpanda-operator + image: Jy:QK8rajxXu7 + imagePullPolicy: Always + name: crd-installation + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: ongEN + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: -crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mXKX + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: J8-migration + namespace: default +spec: + template: + metadata: + annotations: + PQRJglIWgDV: r5eAm9jtdh + labels: + 4pV5eNiF: 7T4o + app.kubernetes.io/instance: operator + app.kubernetes.io/name: mXKX + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: Jy:QK8rajxXu7 + imagePullPolicy: Always + name: migration resources: {} securityContext: allowPrivilegeEscalation: false @@ -47742,18 +102500,11 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - ephemeralContainers: null - imagePullSecrets: [] - initContainers: [] - nodeSelector: - 7gLg: w - p9vPF2WR: "" - securityContext: - runAsUser: 65532 - serviceAccountName: WM + imagePullSecrets: + - name: ongEN + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: -migration-job terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -47775,183 +102526,38 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: OYJbb ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - hJkIJY5Y-webhook-service.default.svc - - hJkIJY5Y-webhook-service.default.svc.wRGH - issuerRef: - kind: Issuer - name: WM-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: OYJbb ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: WM-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: hJkIJY5Y-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: WM-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: hJkIJY5Y-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - kP0Mu: tnINl - name: WM-crd-job - namespace: default --- testdata/case-056.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: X2us - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-X2us - namespace: default +-- testdata/case-026.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: EbwFoQ3p + apiVersion: Qu0 health: - healthProbeBindAddress: d6q - kind: 7r + healthProbeBindAddress: ef + kind: d1 leaderElection: leaderElect: true - resourceName: FEqz5a3Cku + resourceName: kl2 metrics: - bindAddress: LM + bindAddress: 127.0.0.1:8080 webhook: - port: 218 + port: 210 kind: ConfigMap metadata: annotations: - SCGcyFgoJx: Gp6 - creationTimestamp: null + "": LEj + AJ: J71I + WUK8: c0C0 labels: + CjtOUguse: wexY5Fq app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: X2us - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-X2us-config + app.kubernetes.io/name: Y0No4OdE4hp + app.kubernetes.io/version: v25.3.1 + fK: iVx7a + helm.sh/chart: operator-25.3.1 + name: AbRYn6-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -47959,15 +102565,18 @@ apiVersion: v1 kind: Service metadata: annotations: - SCGcyFgoJx: Gp6 - creationTimestamp: null + "": LEj + AJ: J71I + WUK8: c0C0 labels: + CjtOUguse: wexY5Fq app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: X2us - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-X2us-metrics-service + app.kubernetes.io/name: Y0No4OdE4hp + app.kubernetes.io/version: v25.3.1 + fK: iVx7a + helm.sh/chart: operator-25.3.1 + name: AbRYn6-metrics-service namespace: default spec: ports: @@ -47976,133 +102585,107 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: X2us ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - SCGcyFgoJx: Gp6 - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: X2us - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X2us-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: X2us + app.kubernetes.io/name: Y0No4OdE4hp --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - SCGcyFgoJx: Gp6 - creationTimestamp: null + "": LEj + AJ: J71I + WUK8: c0C0 labels: + CjtOUguse: wexY5Fq app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: X2us - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-X2us + app.kubernetes.io/name: Y0No4OdE4hp + app.kubernetes.io/version: v25.3.1 + fK: iVx7a + helm.sh/chart: operator-25.3.1 + name: AbRYn6 namespace: default spec: - replicas: 1 + replicas: 281395590 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: X2us + app.kubernetes.io/name: Y0No4OdE4hp strategy: - type: .éĸ + type: ťȆX{¿ǷQ"o4l夠缜ɫuɜ template: metadata: annotations: {} - creationTimestamp: null labels: - LiMB: JSDH - SSwyvabPaXn: DVXkf + "": Q app.kubernetes.io/instance: operator - app.kubernetes.io/name: X2us - oCw: NTKwbx4 + app.kubernetes.io/name: Y0No4OdE4hp spec: - activeDeadlineSeconds: -5132082406686871000 affinity: - podAffinity: + nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - 5dvfw9: mOesiUHmdc - IwMzkyTNvFz4: Wrj7 - mismatchLabelKeys: - - 8gXFN - - TpO - topologyKey: jO5PPSt - weight: 1697436510 - - podAffinityTerm: - mismatchLabelKeys: - - iXxDdowWo - - LWq4t1m - - nFTixP0 - topologyKey: vNKXC1Lh - weight: 1528484004 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: "" - operator: 鴶诬硔Ɓ( - values: - - 5J7usX - - QIY - - key: VxHc1 - operator: 栾pe睹迂Ȓpk1[ƶ¨彊 - mismatchLabelKeys: - - O2cy - - m - namespaceSelector: {} - topologyKey: X - weight: 37722091 + - preference: + matchFields: + - key: UuI8m + operator: 灆ʬ + weight: -1612872447 requiredDuringSchedulingIgnoredDuringExecution: - - namespaceSelector: {} - namespaces: - - Hsi1kM56ggat - topologyKey: 169EWQ + nodeSelectorTerms: + - matchFields: + - key: 5LBdR + operator: b佧%ɐc愦8Ƭ窮ňƓgĝs) + values: + - 6l + - doYIX + - matchExpressions: + - key: RgomAG + operator: 擵顷x訃淵ɦ饪尳Üɫ?盶 + - key: 5zBuQ3hnxeX + operator: ĄLÃ!ȹg + values: + - g4aV + - oDaM9O + matchFields: + - key: ixnKn + operator: ƗƤÑŰ=ƹ + - key: qv5z + operator: Ơ+ʼnkʅ + values: + - QELBwanfn5n + - key: NDSg9a + operator: 彳}曌仆_Sƛ\"邽号Ƙ巎筮ǝ + values: + - fm2q + - Eb0fdAz + - oFSFcWmr + podAntiAffinity: {} automountServiceAccountToken: false containers: - args: + - --configurator-base-image + - --configurator-tag=yLRNE5 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --log-level=0N7txV14 + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 - imagePullPolicy: IfNotPresent + image: :yLRNE5 + imagePullPolicy: Never livenessProbe: - failureThreshold: 155 + failureThreshold: 322 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 922 - periodSeconds: 620 - successThreshold: 571 - terminationGracePeriodSeconds: 873 - timeoutSeconds: 852 + initialDelaySeconds: 665 + periodSeconds: 280 + successThreshold: 103 + terminationGracePeriodSeconds: 463 + timeoutSeconds: 744 name: manager ports: - containerPort: 9443 @@ -48112,56 +102695,47 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 283 + failureThreshold: 917 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 642 - periodSeconds: 527 - successThreshold: 958 - terminationGracePeriodSeconds: 117 - timeoutSeconds: 54 + initialDelaySeconds: 787 + periodSeconds: 395 + successThreshold: 41 + terminationGracePeriodSeconds: 172 + timeoutSeconds: 959 resources: limits: - cpu: "833" - memory: "805" + cpu: "925" + memory: "362" requests: - cpu: "954" - memory: "410" + cpu: "305" + memory: "188" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsPolicy: 旃9乚ɸ蓔2嘷! ephemeralContainers: null - hostPID: true - hostUsers: true - hostname: hEf - imagePullSecrets: [] + imagePullSecrets: + - name: GYBCZgY2N + - name: OOhsN + - name: q59hfkAhQO initContainers: [] - nodeName: 0CPLJfQO - nodeSelector: {} - priorityClassName: sr - restartPolicy: K蘰綹,鳕 - runtimeClassName: tXvm9TFY - schedulerName: OS1b - schedulingGates: - - name: 1G - - name: R8 - - name: Cpc3yiAApl + nodeSelector: + AS: UuqgKyf + bU12ToWA: 5CxRmTtSV + sEYy5Rz: WB3Fn securityContext: - fsGroupChangePolicy: OnRootMismatch - runAsNonRoot: false runAsUser: 65532 - serviceAccountName: 0QSN3Cc - subdomain: 5Ex + serviceAccountName: p2fj5IjgtpIG terminationGracePeriodSeconds: 10 - tolerations: [] + tolerations: + - effect: 嘨ʤcœ+f夅ʠ惄ʪ衔ǮŔ鏉蘫痰藬 + key: iT + operator: jĔ吞C漨·$Lʦ¤ + tolerationSeconds: -2164962981018577000 volumes: - name: kube-api-access projected: @@ -48181,187 +102755,745 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: Hf --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - SCGcyFgoJx: Gp6 - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + jpjMs: VyZTL labels: + CjtOUguse: wexY5Fq app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: X2us - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + app.kubernetes.io/name: Y0No4OdE4hp + app.kubernetes.io/version: v25.3.1 + fK: iVx7a + helm.sh/chart: operator-25.3.1 + name: p2fj5IjgtpIG-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + CjtOUguse: wexY5Fq + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Y0No4OdE4hp + app.kubernetes.io/version: v25.3.1 + fK: iVx7a + helm.sh/chart: operator-25.3.1 + name: AbRYn6-migration namespace: default spec: - dnsNames: - - X2us-webhook-service.default.svc - - X2us-webhook-service.default.svc. - issuerRef: - kind: Issuer - name: operator-X2us-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: Hf + template: + metadata: + annotations: {} + labels: + "": Q + app.kubernetes.io/instance: operator + app.kubernetes.io/name: Y0No4OdE4hp + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: :yLRNE5 + imagePullPolicy: Never + name: migration + resources: + limits: + cpu: "925" + memory: "362" + requests: + cpu: "305" + memory: "188" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: GYBCZgY2N + - name: OOhsN + - name: q59hfkAhQO + nodeSelector: + AS: UuqgKyf + bU12ToWA: 5CxRmTtSV + sEYy5Rz: WB3Fn + restartPolicy: OnFailure + serviceAccountName: p2fj5IjgtpIG-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 嘨ʤcœ+f夅ʠ惄ʪ衔ǮŔ鏉蘫痰藬 + key: iT + operator: jĔ吞C漨·$Lʦ¤ + tolerationSeconds: -2164962981018577000 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-027.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: + "": YeheDN + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: laYV0ze-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + "": YeheDN + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: laYV0ze-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + "": YeheDN + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: laYV0ze-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - SCGcyFgoJx: Gp6 - creationTimestamp: null + "": YeheDN labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: X2us - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-X2us-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: operator-X2us-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: X2us-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: operator-X2us-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: X2us-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: laYV0ze-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: X2us - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-X2us-crd-job - namespace: default --- testdata/case-057.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null + "": YeheDN labels: - GFJWcympe: pAUQva app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A - name: n0qMA4h57I5 + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: laYV0ze-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: laYV0ze-default +subjects: +- kind: ServiceAccount + name: WGtRG namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - 7rP00: GPBGHypSmn8lV - FuOQyLeQ: lBFlu10wLN - creationTimestamp: null + "": YeheDN labels: - GFJWcympe: pAUQva app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A - name: pEvEye-config + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: laYV0ze-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: laYV0ze-additional-controllers-default +subjects: +- kind: ServiceAccount + name: WGtRG namespace: default --- # Source: operator/templates/entry-point.yaml @@ -48369,18 +103501,14 @@ apiVersion: v1 kind: Service metadata: annotations: - 7rP00: GPBGHypSmn8lV - FuOQyLeQ: lBFlu10wLN - creationTimestamp: null + "": YeheDN labels: - GFJWcympe: pAUQva app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A - name: pEvEye-metrics-service + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: laYV0ze-metrics-service namespace: default spec: ports: @@ -48389,381 +103517,351 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: BdJ ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - 7rP00: GPBGHypSmn8lV - FuOQyLeQ: lBFlu10wLN - creationTimestamp: null - labels: - GFJWcympe: pAUQva - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A - name: BdJ-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: BdJ + app.kubernetes.io/name: nfr7ZK --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - 7rP00: GPBGHypSmn8lV - FuOQyLeQ: lBFlu10wLN - creationTimestamp: null + "": YeheDN labels: - GFJWcympe: pAUQva app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A - name: pEvEye + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: laYV0ze namespace: default spec: - replicas: 1 + replicas: -971490758 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: BdJ + app.kubernetes.io/name: nfr7ZK strategy: - type: RollingUpdate + rollingUpdate: + maxSurge: 1717690689 + maxUnavailable: 925388873 + type: tTğ巳4× template: metadata: - annotations: {} - creationTimestamp: null + annotations: + "": hM5nlUJT + Wmrq5Zi3CHk: m5DofrS labels: - Jja2z: AMUJ2Hk + ZKfoIpLi: p7dK app.kubernetes.io/instance: operator - app.kubernetes.io/name: BdJ - nn5: SwX + app.kubernetes.io/name: nfr7ZK + jDQYpn: hvEo + lu70: ACIt + xa: g3JyhAJt6v + z3n: H spec: + activeDeadlineSeconds: -9192809145905417000 affinity: - nodeAffinity: {} + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: null podAffinity: requiredDuringSchedulingIgnoredDuringExecution: - - topologyKey: zAe4N - podAntiAffinity: {} - automountServiceAccountToken: false - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=Jug9nLx - - --configurator-base-image=ma3F - - JOd - - JV6w - command: - - /manager - env: [] - image: ma3F:Jug9nLx - imagePullPolicy: Never - livenessProbe: - failureThreshold: 271 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 332 - periodSeconds: 695 - successThreshold: 473 - terminationGracePeriodSeconds: 834 - timeoutSeconds: 882 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 706 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 868 - periodSeconds: 235 - successThreshold: 64 - terminationGracePeriodSeconds: 683 - timeoutSeconds: 403 - resources: - limits: - cpu: "932" - memory: "329" - requests: - cpu: "392" - memory: "833" - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: {} - dnsPolicy: ±訇邓/釉Ï捓ʐ - ephemeralContainers: null - hostAliases: - - ip: MJS3n - - hostnames: - - F6D8 - - e5ENx6fE - - m875H - ip: hOaK3Z7 - - ip: hfHpqW - hostIPC: true - hostUsers: true - hostname: NfgrE - imagePullSecrets: - - name: WWFoP - - name: WsYnXzso01 - - name: IX6v - initContainers: [] - nodeName: t - nodeSelector: - wfiRdUFg: bR3B - priority: 651429941 - priorityClassName: 1hFL - restartPolicy: ȭZ*藗ćɢ晨+ʆ;櫾ċZȡȷ媔Þ桾 - runtimeClassName: nIMeT - schedulerName: d6EME - schedulingGates: - - name: 5kc2 - securityContext: - fsGroup: 2635739868325116400 - fsGroupChangePolicy: OnRootMismatch - runAsNonRoot: false - runAsUser: -7079131959713203000 - sysctls: - - name: vecwhX3pb - value: oP2z67g - serviceAccountName: xRu - subdomain: tFiX - terminationGracePeriodSeconds: 7833815452667532000 - tolerations: [] - topologySpreadConstraints: - - labelSelector: {} - matchLabelKeys: - - AflVlO484I - - wl2BxC - maxSkew: 1303641541 - minDomains: 507684309 - nodeAffinityPolicy: GȆƚ-豏ɾɃ誔wʫ赜型ɂ - topologyKey: QC - whenUnsatisfiable: Č楨ũ忶獓ɮ+襊埂-ě - - maxSkew: -255504187 - minDomains: 1629532814 - nodeAffinityPolicy: 抹Ɯʫ;屯k­c应 - topologyKey: He - whenUnsatisfiable: õS<]²玤闂刉:ǚ婲jʝĭ緉 - - matchLabelKeys: - - w3IYvD - - jgMvIuL4 - - LEWtvIa - maxSkew: 1344485537 - minDomains: 1746487916 - nodeAffinityPolicy: ħĻf - topologyKey: 6pT - whenUnsatisfiable: V療争 - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: M8yk ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - 7rP00: GPBGHypSmn8lV - FuOQyLeQ: lBFlu10wLN - creationTimestamp: null - labels: - GFJWcympe: pAUQva - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - BdJ-webhook-service.default.svc - - BdJ-webhook-service.default.svc.zd - issuerRef: - kind: Issuer - name: pEvEye-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: M8yk ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - 7rP00: GPBGHypSmn8lV - FuOQyLeQ: lBFlu10wLN - creationTimestamp: null - labels: - GFJWcympe: pAUQva - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A - name: pEvEye-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: pEvEye-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: BdJ-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: - 7rP00: GPBGHypSmn8lV - FuOQyLeQ: lBFlu10wLN - creationTimestamp: null - labels: - GFJWcympe: pAUQva - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A - name: pEvEye-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - GFJWcympe: pAUQva - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: pEvEye-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: BdJ-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + - labelSelector: + matchLabels: + 7n7lWb: DoytHP + QuC7QM: yl + nX: MD + topologyKey: 8fqpa8J96eG3 + - labelSelector: + matchExpressions: + - key: C30r0 + operator: 寛@岛RƠ祽Ƞi + values: + - MrOsvsRs + - my8on8qBsbAP + - key: Ji925 + operator: 菜ʜ萴*Bǽ*H¸欲ǶǪŀ笔ȼ:ªɶ + - key: 1KGa + operator: "" + values: + - "" + - jn1 + matchLabels: + cFyz: yRiZ3W + matchLabelKeys: + - ne6bZU + - x6kh73Q + namespaceSelector: + matchExpressions: + - key: ro0T + operator: Ǐo + - key: 6KYR + operator: ëjÙ8Gƞ簺Hŷʅ琙 + values: + - DPPq + - key: SAZGfBcqPW + operator: :蝎ǹ罾肻 + values: + - "28" + topologyKey: Erxu2M + - matchLabelKeys: + - sS + mismatchLabelKeys: + - hqCAya + - BVQX + namespaceSelector: + matchExpressions: + - key: kD9e8 + operator: ɨȗ猌Ļȵ耏煘Ġ鏿@Ⱦ綿淍¶櫛|8U妒 + - key: 907X2A + operator: \@œ駿AInŗE哝婺r?讥m + values: + - tdh1 + - 0VgnBvG + - e + - key: "1" + operator: 國佨·3ţōG识ʢƙ酳嵗 + matchLabels: + 1J2: mrWMUQ + D8TtT4: cjm5WwH8 + W1O: uE + topologyKey: Q1OH8MlRuaX9 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + co: 2YxO + matchLabelKeys: + - "0" + namespaces: + - HvD + topologyKey: 0Vs + weight: -2050924459 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: pDrx + operator: '!凚ķ芹' + values: + - uZfM + - ZfGlr6Y + - rus + - key: UU + operator: "" + matchLabels: + "14": Di + eXjr3: AxFJDB + p4r: "06" + matchLabelKeys: + - StyLc + mismatchLabelKeys: + - YK + - 8R + topologyKey: 4wkwi12FAfMA + weight: 1959514826 + requiredDuringSchedulingIgnoredDuringExecution: + - namespaceSelector: + matchExpressions: + - key: 4PYz2rcl + operator: ɑɸ|餖Ò + values: + - b5QQpaI + matchLabels: + f3: j064TLNOe + namespaces: + - syosX + topologyKey: PUuuii + - labelSelector: + matchExpressions: + - key: 4wF + operator: 9ęʊt¥套Ʀǡ成笉05ǼȤ銦鄄L窲 + values: + - CPHLWD1khyr + - key: 5P6Y8qx + operator: 眇r绬ő#oS櫧ťnɡĥ + values: + - pUylfkt + matchLabelKeys: + - tLRiys8 + - nBbr + - "" + namespaceSelector: + matchExpressions: + - key: MhX + operator: íń&>¬ + values: + - 0xHY5YJ + - wI3Z + - key: tjek + operator: Ĵ旹\MɉơƧ_Ț*8" + values: + - "0" + topologyKey: 0fdI + - labelSelector: + matchExpressions: + - key: BoWfkYY + operator: "" + values: + - Fvmg + - 5YxE + - key: LEuWcW + operator: N瀬姿 + matchLabels: + t9PzIxO6DYF6: VqYMj + matchLabelKeys: + - J30 + - aC0HtaH + namespaceSelector: + matchLabels: + TLeSi: wr6 + "Y": aBP5Uyk + topologyKey: WO2AeaSq + automountServiceAccountToken: true + containers: + - args: + - --configurator-base-image=O + - --configurator-tag=F0pU + - --enable-console=true + - --enable-vectorized-controllers=false + - --health-probe-bind-address=:8081 + - --leader-elect + - --log-level=wRs5MEo + - --metrics-bind-address=:8443 + - --webhook-enabled=false + command: + - /manager + env: [] + image: O:F0pU + imagePullPolicy: Never + livenessProbe: + failureThreshold: 534 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 575 + periodSeconds: 573 + successThreshold: 288 + terminationGracePeriodSeconds: 343 + timeoutSeconds: 281 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 797 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 421 + periodSeconds: 671 + successThreshold: 822 + terminationGracePeriodSeconds: 282 + timeoutSeconds: 506 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - SzU2 + - J1hOs + - Nn3K4j + options: + - name: DD + value: 4o + dnsPolicy: Nƽ歙 + ephemeralContainers: null + hostIPC: true + hostUsers: false + hostname: IxcZ + imagePullSecrets: + - name: qRqCoun + - name: dq + initContainers: [] + nodeName: 4hKc + nodeSelector: + ISYWXr: zjU8 + YlsqKrZTNw: e5B + preemptionPolicy: 櫣j铈ĕ)Ģ劬5ý佹 转 + priorityClassName: Q15Y0 + restartPolicy: 篿軼6驏ſʟȗ們Eö鯈Đ>Óȋʪ + runtimeClassName: r + schedulerName: IWFbqnMV + schedulingGates: + - name: b7 + - name: uu0TwYO4f + securityContext: + appArmorProfile: + localhostProfile: kjg27 + type: 猿橸=垰橗^塲闼ǁ崰墯ǵ鍂 + fsGroup: -3628794107777791000 + fsGroupChangePolicy: Always + runAsGroup: -4417728852785782000 + runAsNonRoot: false + runAsUser: 3163662455106068500 + seLinuxChangePolicy: ʒē鲺OÍ遚5K磮磱蹇ɭ + supplementalGroupsPolicy: 筺ĭ + serviceAccountName: KbSQKm + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: zYx + terminationGracePeriodSeconds: -1738715818394773000 + tolerations: + - effect: Ļ%A偪 栒Ķ丁ëƱ + key: kP + operator: 7ưǿ危ȦɤNŗ + tolerationSeconds: -1241571103118238000 + value: NrxK + - effect: Ǵ + key: hryxlaIdG + operator: ȘƋp= + tolerationSeconds: -3024605979232213500 + value: zW6lhuq3 + - effect: g%ůijGġ + key: p0BE + operator: 炒cöV觳單救蘽恆üƆÍ + tolerationSeconds: 2006542027212257000 + value: T2Q + topologySpreadConstraints: + - labelSelector: + matchLabels: + wJIZb: mn5w8 + matchLabelKeys: + - PCs + maxSkew: 622804237 + minDomains: 830532214 + nodeTaintsPolicy: 漞舊缛 Uř°·Ġ墎5薀詒Ċ}Ǵt% + topologyKey: CJymbcO + whenUnsatisfiable: bž佐ŀo鮼Źʉ什瞾 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: WXw + - name: aqR317WK + - name: kqb4M4eNJ --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -48771,126 +103869,118 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - GFJWcympe: pAUQva - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jE0q9M4zk: 1A - name: n0qMA4h57I5-crd-job - namespace: default --- testdata/case-058.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2PyZZ8ZNsM - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-config + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: WGtRG-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + "": YeheDN + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-metrics-reader + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: WGtRG-migration-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services verbs: + - create + - delete - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-default -rules: + - list + - patch + - update + - watch - apiGroups: - - authentication.k8s.io + - apps resources: - - tokenreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - autoscaling resources: - - subjectaccessreviews + - horizontalpodautoscalers verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - consoles verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -48907,11 +103997,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -48920,15 +104015,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -48937,8 +104034,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -48948,30 +104069,39 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - events verbs: - create - - delete + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -48981,9 +104111,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -48993,9 +104123,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -49005,22 +104135,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -49030,72 +104162,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: nLM2irjC-default -subjects: -- kind: ServiceAccount - name: 2PyZZ8ZNsM - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-election-role - namespace: default -rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -49105,16 +104217,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -49123,313 +104241,123 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-rpk-bundle - namespace: default -rules: - apiGroups: - - "" - resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services - verbs: - - get - - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: nLM2irjC-election-role -subjects: -- kind: ServiceAccount - name: 2PyZZ8ZNsM - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: nLM2irjC -subjects: -- kind: ServiceAccount - name: 2PyZZ8ZNsM - namespace: default + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + "": YeheDN + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-rpk-bundle - namespace: default + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: WGtRG-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: nLM2irjC-rpk-bundle + kind: ClusterRole + name: WGtRG-migration-job-default subjects: - kind: ServiceAccount - name: 2PyZZ8ZNsM - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: fgsJm ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: fgsJm-webhook-service + name: WGtRG-migration-job namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: fgsJm --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC + app.kubernetes.io/name: nfr7ZK + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: laYV0ze-migration namespace: default spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: fgsJm - strategy: - type: RollingUpdate template: metadata: annotations: {} - creationTimestamp: null labels: - 93Zq: XIlI + ZKfoIpLi: p7dK app.kubernetes.io/instance: operator - app.kubernetes.io/name: fgsJm - fx3sz6: "38" + app.kubernetes.io/name: nfr7ZK + jDQYpn: hvEo + xa: g3JyhAJt6v spec: - activeDeadlineSeconds: 7810061853687495000 - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - {} - automountServiceAccountToken: true + automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=vnJvYTYU8 - - --configurator-base-image=idWmcYq6IZQH + - migration command: - - /manager - env: [] - image: idWmcYq6IZQH:vnJvYTYU8 - imagePullPolicy: Always - livenessProbe: - failureThreshold: 932 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 423 - periodSeconds: 730 - successThreshold: 714 - terminationGracePeriodSeconds: 936 - timeoutSeconds: 192 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 872 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 101 - periodSeconds: 189 - successThreshold: 63 - terminationGracePeriodSeconds: 758 - timeoutSeconds: 675 - resources: - limits: - cpu: "905" - memory: "563" - requests: - cpu: "163" - memory: "88" + - /redpanda-operator + image: O:F0pU + imagePullPolicy: Never + name: migration + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsPolicy: 荧ʇNJ亍/-ʇƬQ{Ǯ/ - ephemeralContainers: null - hostAliases: - - hostnames: - - dSV1wJ - - CC - ip: Gxz - - ip: SrzM - - hostnames: - - 5yiJs - - AOv - ip: m9tJ - hostPID: true - imagePullSecrets: [] - initContainers: [] - nodeName: HkTWCvk - nodeSelector: - oEluSh: TQJ6t8emxOMQg - pX: LGnS - priority: -390065565 - priorityClassName: 6TvoBD - resourceClaims: - - name: tOnffFc3 - - name: Y9poS - restartPolicy: 'x鲡ÜY鄍故:' - runtimeClassName: ty2TXT - schedulerName: JK0BTM - schedulingGates: - - name: RSTS - securityContext: - runAsUser: 65532 - serviceAccountName: fQmYz - subdomain: Qt - terminationGracePeriodSeconds: 9217582102908294000 - tolerations: [] + imagePullSecrets: + - name: p42 + - name: dEVPJ4 + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: WGtRG-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: '勇iĻ婸Ř前g÷眖-ķ値ʒš:' + key: qWq7uaPf + operator: 災ĹɆ + tolerationSeconds: -5677938855124173000 + value: rDYX4 + - key: aE7sP + operator: 2Ɩ棈鎣芣6Ȓ谍煗 + tolerationSeconds: -1423777123569171700 + value: y1W + - effect: E烏睆rĤäC蠆堢÷Î)鹴ʁī2"谁 + key: UrJVL2cqF + operator: 鶓Ŷ掄ì廝ģ'ɢâ + value: rMdhHU2A volumes: - name: kube-api-access projected: @@ -49449,116 +104377,7 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: 3y3R ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - fgsJm-webhook-service.default.svc - - fgsJm-webhook-service.default.svc.OWImEb - issuerRef: - kind: Issuer - name: nLM2irjC-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: 3y3R ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: nLM2irjC-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: nLM2irjC-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: fgsJm-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: nLM2irjC-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: fgsJm-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None +-- testdata/case-028.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -49566,79 +104385,59 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 2PyZZ8ZNsM-crd-job - namespace: default --- testdata/case-059.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount -metadata: - annotations: - F: 2wq - Vcp6O5a1Q: 5Dgl - creationTimestamp: null + S02Fic: "" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PiQzKZrHGl + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: LTY4w namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: l2 + apiVersion: MpmU health: - healthProbeBindAddress: pR - kind: P1nZUB + healthProbeBindAddress: B + kind: g7rsKQ leaderElection: leaderElect: true - resourceName: qMple + resourceName: L152 metrics: - bindAddress: 31mM + bindAddress: R214A webhook: - port: 9443 + port: 125 kind: ConfigMap metadata: - annotations: null - creationTimestamp: null + annotations: + dj4k3Kh: OZtu + wy272: qoP labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-config + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + dj4k3Kh: OZtu + wy272: qoP labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-metrics-reader + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -49649,47 +104448,221 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: {} - creationTimestamp: null + annotations: + dj4k3Kh: OZtu + wy272: qoP labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-default + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx-default rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: - tokenreviews verbs: - - create + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list - apiGroups: - - authorization.k8s.io + - coordination.k8s.io resources: - - subjectaccessreviews + - leases verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: - - persistentvolumes + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - "" resources: - - nodes + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions verbs: - get + - list + - watch - apiGroups: - - "" + - apps resources: - - configmaps + - deployments + - statefulsets verbs: - create - delete @@ -49699,41 +104672,50 @@ rules: - update - watch - apiGroups: - - "" + - autoscaling resources: - - events - - secrets - - serviceaccounts - - services + - horizontalpodautoscalers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - "" + - batch resources: - - nodes + - jobs verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - cert-manager.io resources: - - persistentvolumeclaims + - certificates + - issuers verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - pods + - consoles + - nodepools + - redpandas verbs: + - create - delete - get - list @@ -49741,18 +104723,52 @@ rules: - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - pods/finalizers - - pods/status + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: + - get - patch - update - apiGroups: - - apps + - cluster.redpanda.com resources: - - deployments - - statefulsets + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -49762,11 +104778,10 @@ rules: - update - watch - apiGroups: - - cert-manager.io + - monitoring.coreos.com resources: - - certificates - - clusterissuers - - issuers + - podmonitors + - servicemonitors verbs: - create - delete @@ -49804,262 +104819,235 @@ rules: resources: - clusterrolebindings - clusterroles + - rolebindings + - roles verbs: - create + - delete - get - list - patch - update - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + dj4k3Kh: OZtu + wy272: qoP + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx-additional-controllers-default +rules: - apiGroups: - - redpanda.vectorized.io + - "" resources: - - clusters - - consoles + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events verbs: - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: - delete - get - list - - patch - - update - watch - apiGroups: - - redpanda.vectorized.io + - "" resources: - - clusters/finalizers - - consoles/finalizers + - pods + - secrets verbs: - - patch - - update + - get + - list + - watch - apiGroups: - - redpanda.vectorized.io + - apps resources: - - clusters/status - - consoles/status + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes verbs: + - delete - get + - list - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandas verbs: - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: X374QF3AYX-default -subjects: -- kind: ServiceAccount - name: PiQzKZrHGl - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims verbs: - - create - delete - get - list - patch - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list - watch - apiGroups: - "" resources: - - events + - persistentvolumeclaims verbs: - - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - persistentvolumes verbs: - - create - - delete - get - list - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX - namespace: default -rules: +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes verbs: - - delete - get - list + - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: X374QF3AYX-election-role -subjects: -- kind: ServiceAccount - name: PiQzKZrHGl - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + dj4k3Kh: OZtu + wy272: qoP labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX - namespace: default + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: X374QF3AYX + kind: ClusterRole + name: iYPCfHtZuTxx-default subjects: - kind: ServiceAccount - name: PiQzKZrHGl + name: LTY4w namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + dj4k3Kh: OZtu + wy272: qoP labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-rpk-bundle - namespace: default + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: X374QF3AYX-rpk-bundle + kind: ClusterRole + name: iYPCfHtZuTxx-additional-controllers-default subjects: - kind: ServiceAccount - name: PiQzKZrHGl + name: LTY4w namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + dj4k3Kh: OZtu + wy272: qoP labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-metrics-service + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx-metrics-service namespace: default spec: ports: @@ -50068,91 +105056,220 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: zUC ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: zUC-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: zUC + app.kubernetes.io/name: TTQ --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null - creationTimestamp: null + annotations: + dj4k3Kh: OZtu + wy272: qoP labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx namespace: default spec: - replicas: 738560762 + replicas: -444831549 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: zUC + app.kubernetes.io/name: TTQ strategy: - rollingUpdate: - maxSurge: 697560028 - maxUnavailable: 946395942 - type: '&+貱0ʬ,Ǐ' + type: ʎ粘霔塠>O櫙颞K桛 template: metadata: annotations: - R: cue4iXwcB - Y4XIpDcNK: g6MHOhm - creationTimestamp: null + 3I92lzWPb6z: P4FZPMKQ + 6iJ5Xx8Q: 2p + ElEYTj: FKjOgv + TUqrltgn9C: mU + t: ATVmig6 labels: + 6kqaqM: 28ZloM app.kubernetes.io/instance: operator - app.kubernetes.io/name: zUC + app.kubernetes.io/name: TTQ spec: - automountServiceAccountToken: false + activeDeadlineSeconds: 6427991754853004000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - key: 5BDJKySb + operator: 遝,髱u炧|Öi銳 + - key: 699xq + operator: 换砀硝ÚIB坍ʐƙ¾驟孉黸 + values: + - Yo + - qilyF1pEls + - key: VF + operator: 疝®ɿ秅ųŏ鸲薻ȧƊʞ珃Z + values: + - g62PY8yA + - ymeG5gTO + weight: -1296500845 + - preference: + matchFields: + - key: Wd87 + operator: p + values: + - VFnzfo + - "" + weight: -342643534 + - preference: + matchExpressions: + - key: mpG + operator: 钌1Ɍ懫=[ŋ + values: + - "5" + - key: dV26Q + operator: 雪戍歱眻麮ƒÖN + - key: 1S + operator: b + values: + - 3Q + - xW + weight: -204896795 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: yZ + operator: řy渊H蚊ěpù匼傤1Ʋ嫛Ǭ酜ɜ岈漕( + - key: ciXw + operator: T)0/^āáĘ鉘țǯ挍敩尝ūƹ + values: + - E + - DINmB + - CYYFQh + matchFields: + - key: q + operator: dɡ + - key: KZk + operator: 眶;Ȉ蔶)m恾ĂDŚ + - key: mjDu + operator: C閌W:G齏0ţ乘禴ʝ瞭Ȅ + values: + - Qyri + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: dGE + operator: "" + values: + - Mr61hm + - FQ1ET6R + - FQC0Cj2OfY4MG + - key: G6Z3 + operator: õ暬_ů漂 + matchLabelKeys: + - iJO4v8LXQ + mismatchLabelKeys: + - 4zCqt + - LGXbu0MFd + namespaceSelector: + matchLabels: + P: H46uB + iuqP: yx2Ovv + namespaces: + - Xf4HOr + topologyKey: EieY + weight: -561569483 + - podAffinityTerm: + labelSelector: + matchLabels: + "": ise3n7b + EX9rL: MDA + U: MStCZ + mismatchLabelKeys: + - Dsof + - ena5v + - 2m9 + namespaceSelector: + matchLabels: + 7JxShd: isc8NR + namespaces: + - QVSWGstN + - w5rhyrre + topologyKey: 3fJc + weight: 1158293325 +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: {} + matchLabelKeys: + - ByL5rIylP + - "" + - XDn2 + mismatchLabelKeys: + - S + namespaceSelector: + matchExpressions: + - key: FG16H + operator: 善ŒCz>柱z謠ǫ汑ãƄü蓪ÝĖU餟 + values: + - o32apA + matchLabels: + aEdf: QGGka8 + topologyKey: QoEuYG + - labelSelector: + matchExpressions: + - key: 8jukvv + operator: 欉ɝƈNj乧堾ưUƑ,hy雎ʘ顓待鏨Ħ + matchLabels: + 6Q4D: j2 + matchLabelKeys: + - vSaYitvIUn + - P1Uk2PO + - AUOjaYM9 + mismatchLabelKeys: + - uuVZiH + - B + - 22R + namespaceSelector: + matchLabels: +<<<<<<< HEAD + KBGvPMc: 7khilRkEF + Lqg5: WxfvgOq1rLdZ + namespaces: + - ph + - 0CW + topologyKey: o +======= + "": 2Y + topologyKey: PgYiS8qm + automountServiceAccountToken: true containers: - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --log-level=ITgly43lJy + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 941 + failureThreshold: 866 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 378 - periodSeconds: 953 - successThreshold: 95 - terminationGracePeriodSeconds: 100 - timeoutSeconds: 207 + initialDelaySeconds: 188 + periodSeconds: 313 + successThreshold: 645 + terminationGracePeriodSeconds: 596 + timeoutSeconds: 670 name: manager ports: - containerPort: 9443 @@ -50162,34 +105279,80 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 297 + failureThreshold: 380 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 644 - periodSeconds: 638 - successThreshold: 951 - terminationGracePeriodSeconds: 932 - timeoutSeconds: 305 - resources: {} + initialDelaySeconds: 508 + periodSeconds: 701 + successThreshold: 26 + terminationGracePeriodSeconds: 361 + timeoutSeconds: 43 + resources: + limits: + cpu: "968" + memory: "282" + requests: + cpu: "332" + memory: "433" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true + dnsConfig: + nameservers: + - J + - P4zjrzw + - PlTN + options: + - name: GGRQVokT + value: JWJ1s + - name: h2XEY + value: 7JV + - name: WJj + value: tXeL + dnsPolicy: ëCȚ孛繬,xK&瓊ŋǕ馤ɌJf + enableServiceLinks: true ephemeralContainers: null - imagePullSecrets: [] + hostIPC: true + hostUsers: true + hostname: cV + imagePullSecrets: + - name: P0UY + - {} initContainers: [] - nodeSelector: {} + nodeName: 4InM + nodeSelector: + 1Y15UT: rV3FI + D4A7WKSSt: UbF3fF + Svw4: ehaTX + Y9: PCYIJ + preemptionPolicy: F庾丩悹骽 + priority: -1314862820 + priorityClassName: hm + readinessGates: + - conditionType: wRN魭蘔ȟX+瀴 + restartPolicy: 陚£鉭"Ś峑獗邌ł柂Ć笴jŗ%ʓ挿( + runtimeClassName: Yb8XjUMNs + schedulerName: si securityContext: runAsUser: 65532 - serviceAccountName: PiQzKZrHGl - terminationGracePeriodSeconds: 10 - tolerations: [] + serviceAccountName: ChAP + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: zjcxr + terminationGracePeriodSeconds: -7362748779961015000 + tolerations: + - effect: '@Ø骎_' + key: q8tgivGJFSjW + operator: ȩǷb葟ɉ翔ȝ倏萾凴ǧ#Ĕ)Ȱ + tolerationSeconds: 8073130091592372000 + value: Qh6Of + - effect: ǚū酾AŤ蹜0爑鶐颱滯勨Ǯ"队唸涧ɴŵ + operator: 菛e店狑9pɻ?Ȅ_軍ȕP3- + value: XZ volumes: - name: kube-api-access projected: @@ -50209,98 +105372,22 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: Fk ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - zUC-webhook-service.default.svc - - zUC-webhook-service.default.svc.tP3Ji - issuerRef: - kind: Issuer - name: X374QF3AYX-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: Fk ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: X374QF3AYX-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: zUC-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + - name: Bft --- # Source: operator/templates/entry-point.yaml apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: - annotations: null - creationTimestamp: null + annotations: + dj4k3Kh: OZtu + wy272: qoP labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: X374QF3AYX-metrics-monitor + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx-metrics-monitor namespace: default spec: endpoints: @@ -50319,128 +105406,580 @@ spec: matchLabels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: X374QF3AYX-validating-webhook-configuration + S02Fic: "" + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: LTY4w-migration-job namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: zUC-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + dj4k3Kh: OZtu + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + wy272: qoP + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: LTY4w-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - F: 2wq - Vcp6O5a1Q: 5Dgl - helm.sh/hook: pre-install,pre-upgrade + dj4k3Kh: OZtu + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null + wy272: qoP labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zUC - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PiQzKZrHGl-crd-job + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: LTY4w-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: LTY4w-migration-job-default +subjects: +- kind: ServiceAccount + name: LTY4w-migration-job namespace: default --- testdata/case-060.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TTQ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: iYPCfHtZuTxx-migration + namespace: default +spec: + template: + metadata: + annotations: + ElEYTj: FKjOgv + t: ATVmig6 + labels: + 6kqaqM: 28ZloM + app.kubernetes.io/instance: operator + app.kubernetes.io/name: TTQ + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "968" + memory: "282" + requests: + cpu: "332" + memory: "433" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: 4HS + - name: WJ + - name: jGsSRr + nodeSelector: + D4A7WKSSt: UbF3fF + Svw4: ehaTX + Y9: PCYIJ + restartPolicy: OnFailure + serviceAccountName: LTY4w-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-029.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true +automountServiceAccountToken: false kind: ServiceAccount metadata: - annotations: - z: "1" - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Fzbi9OkP + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: Zw5Q6jqaoy + apiVersion: o2c3TYE health: - healthProbeBindAddress: qhc - kind: "" + healthProbeBindAddress: 2TWq1q + kind: 99YlKMs leaderElection: leaderElect: false - resourceName: TV4wZ7Ut + resourceName: 5dgb metrics: - bindAddress: mjhcN + bindAddress: Tt webhook: - port: 257 + port: 141 kind: ConfigMap metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-config + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-metrics-reader + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -50451,19 +105990,86 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-default + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-default rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -50476,6 +106082,37 @@ rules: - subjectaccessreviews verbs: - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: @@ -50485,6 +106122,16 @@ rules: - list - patch - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch - apiGroups: - "" resources: @@ -50495,6 +106142,23 @@ rules: - "" resources: - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -50506,12 +106170,10 @@ rules: - apiGroups: - "" resources: - - events - - secrets - - serviceaccounts - - services + - configmaps verbs: - create + - delete - get - list - patch @@ -50553,10 +106215,22 @@ rules: verbs: - patch - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch - apiGroups: - apps resources: - - deployments - statefulsets verbs: - create @@ -50620,7 +106294,6 @@ rules: - redpanda.vectorized.io resources: - clusters - - consoles verbs: - create - delete @@ -50633,7 +106306,6 @@ rules: - redpanda.vectorized.io resources: - clusters/finalizers - - consoles/finalizers verbs: - patch - update @@ -50641,7 +106313,6 @@ rules: - redpanda.vectorized.io resources: - clusters/status - - consoles/status verbs: - get - patch @@ -50654,54 +106325,14 @@ rules: - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: G-default -subjects: -- kind: ServiceAccount - name: Fzbi9OkP - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-election-role - namespace: default -rules: - apiGroups: - "" resources: - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -50717,6 +106348,121 @@ rules: verbs: - create - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -50729,166 +106475,92 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - persistentvolumeclaims - - pods + - podmonitors + - servicemonitors verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - networking.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: G-election-role -subjects: -- kind: ServiceAccount - name: Fzbi9OkP - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: G -subjects: -- kind: ServiceAccount - name: Fzbi9OkP - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-rpk-bundle - namespace: default + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: G-rpk-bundle + kind: ClusterRole + name: YGu-default subjects: - kind: ServiceAccount - name: Fzbi9OkP + name: YGu namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-metrics-service + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-metrics-service namespace: default spec: ports: @@ -50897,24 +106569,20 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/name: HMyl --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 8V1wVzO-webhook-service + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: HMyl-webhook-service namespace: default spec: ports: @@ -50922,204 +106590,196 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/name: HMyl --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu namespace: default spec: - replicas: -1286924151 + replicas: 1490862537 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/name: HMyl strategy: - type: RollingUpdate + type: $疃私ȥøÏ{婣ʙ1 template: metadata: annotations: - CoIt: Hip0tNLH - SWcPP8duqV: NoCR - "y": gaFmFF - creationTimestamp: null + OLz: keA89pBq + ui: h labels: + 9161sDOg6yWO: mS4A5w + ZK0oqyx: qC1 app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8V1wVzO + app.kubernetes.io/name: HMyl spec: affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - - preference: {} - weight: 877903035 - preference: matchExpressions: - - key: auHzoPu - operator: 燃qȉ÷鑆 - values: - - 6gr8 - - fX9 - matchFields: - - key: CQw - operator: MçɌ伌磾歗耛 - values: - - dEaa - - key: Ubm - operator: m`橐鬅ʢ盏;Ȃb - - key: 0D - operator: ȖÒǃ剠'Qf佛鸻柹6D钗糯íǩMw2 - weight: 1545337051 + - key: "" + operator: '''' + weight: -125362378 - preference: - matchFields: - - key: P5O1 - operator: \Ƈ焀愌lʠ²¸ + matchExpressions: + - key: 9IQ + operator: ?蒓2顝ǝH觇î娲 values: - - GjDqqGL0 - - ttgHCT - - JhZ12 - weight: 86425671 + - VY + - 88h0vdorSKu + - Dnn0 + weight: -2072602040 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - - matchFields: - - key: Tk - operator: ƹ隞剻ƥ - - key: zwAQ - operator: '#' - - key: wG5QKmp - operator: 凸Ɛ纊 - values: - - uoqs4vJBU - - VmihKE - - SH - - matchFields: - - key: pB8ePm + - {} + - matchExpressions: + - key: tOksNfMLkI operator: "" - - key: KVclk6J3u5 - operator: È姪 ÜɤÙ蝱步tī惏 values: - - pq5L9RO8 - - iE3Onta - - key: "5" - operator: '&e鉧N牧Ȏ迋缴Pȣ^' + - G + - QpP8 + - WXe6L5 + matchFields: + - key: 6OvYc5vz1 + operator: e values: - - ROrxgrNk9F - - S0 - - gxD8rwSV + - "" + - E7LrY + - key: d6exgt + operator: ʊY岱宀鐣厠鏝Ƚ + values: + - 9Bk9SY08H + - U0o + - nejjd + - key: wgRAFX + operator: ;QU壥_飋郭浻[鑋霥 - matchExpressions: - - key: cIBa5wm8n - operator: -ʖȾʧ0鯭ȓ - values: - - uLwxSr - - tN2 - - key: ybXwTy - operator: Űs觫¼ȇ + - key: RlG7bFDe + operator: 搾*羶;ĵ锾ĸ + - key: 9npmE + operator: 桹 values: - - mkq2L - - FThOx3 - - KvrS - - key: zeEA - operator: d2坍ďɌ%t'錧Ùïzfɉŗ® + - 1tLOH7 + - ZBdfG + matchFields: + - key: gDT5 + operator: 9fƸpiʣv钨莘蠅~锯 values: - - RKcPya + - fJiF + - VEnZMh257TBV + podAffinity: {} +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: "" - operator: Ý霿Þ,a競纁気J]敿ǘ錥/遮ʝ - - key: iIAK - operator: 糎òKj5.(ȍ糁ăB鮷~ + - key: S2E62 + operator: 慖昬W&眠 values: - - f9Nl - - TG - - key: o - operator: '*爜ó蜿Ǽpƒņ)Bɶ|oƞ痺B' + - "" + - 29NA6AaCfSWBF + - R0As + matchLabels: + Gq0: Xi7m + Rtu4: D0hSm mismatchLabelKeys: - - f2PpXqY4S - - j3KnrXbKf + - Q namespaceSelector: matchExpressions: - - key: EG0uU - operator: 礪x2ʄƶM)RĤ喸粞e燡Ĺ瑏ȔPżO - - key: LryrGH - operator: ' Oʑ' + - key: 4yk + operator: aY僮úɲǺzDŽbʬ魎[ȩL箜ǿ斎4 values: - - NgD - - gF79Udx7 - - znN - namespaces: - - "" - - 91p - topologyKey: "" - weight: 249676732 + - OT + - key: BH9l6bpwtGX + operator: ê躄ǁɉǏƐà途kȂ儈肺Ʊï + values: + - wJQ + matchLabels: + 4QOyWKy: kZ1 + IG5f2j: MsM + XqT5Ip: 76YsO + topologyKey: "974" + weight: -17338018 - podAffinityTerm: labelSelector: matchExpressions: - - key: H - operator: 掠HoƦAF - - key: pzj5k - operator: 腐ȟ + - key: 5c8JD + operator: ÛȚs values: - - kxS8IJ - - kE - - 7nBj - - key: Ho - operator: ʥyIŽF镼桵57|ƍWďg訜 + - xs4Xg + - tOUfS + - "" + - key: 2ewusLRoh + operator: 瓞髿筗Ƕð?駢蠲ƎǓ + values: + - i + - KLaQc + - uoS2B2hi0w + matchLabels: + "": OglF matchLabelKeys: - - "5" - - WydLI + - pvO + mismatchLabelKeys: + - 68FsjArUJY + - 5GRmS9 namespaceSelector: + matchExpressions: + - key: 8RQFQwE + operator: l腹Ɠ诅ĩ谸ĊOSdA垳"Kƚ胘Ff涗 + values: + - k + - key: QKHVkF + operator: 訁荒5ð鐛ĭȒƼ + values: + - tJLN + - p8J9RQwZH + - AW + - key: XLQVTfL + operator: ğ怉ŕIdz|Ȝȝ(灣hż氨 + values: + - er + - eC + - 1n + topologyKey: PpCu + weight: 1133217522 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: nVQHw + operator: 篴ƥ,ƙ;u勮Ƕ棲ÒǕe + values: + - 3ICJ1cqEgk + - 3D matchLabels: - ZrOBwQQX: dnC - topologyKey: AWn - weight: -1363427772 - requiredDuringSchedulingIgnoredDuringExecution: - - matchLabelKeys: - - J4yP - - jRVKfnd - - aLGXXYXtNvS - mismatchLabelKeys: - - FrbUpKod - - c4rUB - - w0drDOwQ8VEV - namespaceSelector: - matchLabels: - d6pDEFDy: KR2bs3 - topologyKey: GLNxA5 - - labelSelector: - matchExpressions: - - key: FwEIsmhFI - operator: 輔ë碉剉 - values: - - yq8M - - VZO9Vg - - Qj3KdAhLCM5 - - key: N5d3lMrBII - operator: '|ǔeR.邈L簋Ā鉥ȹ' - matchLabels: - "": I7fhPK - 25kkA: X5M - mismatchLabelKeys: - - Mb4LbuExHD6 - - XAk - namespaces: - - O - topologyKey: FHxii - automountServiceAccountToken: false + "5": kAw + C7ey: mAH6G + matchLabelKeys: + - "" + mismatchLabelKeys: + - 52cP + namespaceSelector: + matchLabels: + AmxN7M7D: gSriffmOd + Tv: HdIqs9 + tgCq0X0O3YNL: KgERh6UV + namespaces: + - GBGHX + topologyKey: 7qn + weight: 2130596589 + automountServiceAccountToken: true containers: - args: - --health-probe-bind-address=:8081 @@ -51128,26 +106788,26 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=9mw - - --configurator-base-image=qbU - - 8TZ - - c - - cpUq + - --configurator-tag=wp + - --configurator-base-image=AJtD86QQ command: - /manager env: [] - image: qbU:9mw - imagePullPolicy: Never +<<<<<<< HEAD + image: AJtD86QQ:wp +======= + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 127 + failureThreshold: 272 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 324 - periodSeconds: 27 - successThreshold: 265 - terminationGracePeriodSeconds: 459 - timeoutSeconds: 872 + initialDelaySeconds: 672 + periodSeconds: 36 + successThreshold: 385 + terminationGracePeriodSeconds: 558 + timeoutSeconds: 897 name: manager ports: - containerPort: 9443 @@ -51157,22 +106817,16 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 146 + failureThreshold: 277 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 979 - periodSeconds: 599 - successThreshold: 375 - terminationGracePeriodSeconds: 47 - timeoutSeconds: 33 - resources: - limits: - cpu: "459" - memory: "629" - requests: - cpu: "100" - memory: "277" + initialDelaySeconds: 385 + periodSeconds: 56 + successThreshold: 943 + terminationGracePeriodSeconds: 565 + timeoutSeconds: 298 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -51184,25 +106838,27 @@ spec: readOnly: true ephemeralContainers: null imagePullSecrets: - - name: Qzv - - name: 3TWwF + - name: WFD4PUtj + - name: 6vu initContainers: [] - nodeSelector: {} + nodeSelector: + 6AyCec: 9fKL6eRYsH81 + BlK: zpFcYoH + Rl: LmWk securityContext: runAsUser: 65532 - serviceAccountName: Fzbi9OkP + serviceAccountName: YGu terminationGracePeriodSeconds: 10 tolerations: - - effect: ĩŇ鸶埡E鬼b欈鬚ħ汣ĆBȟʼn - key: 6Y - operator: ĸN怔精畹 Ɲ - tolerationSeconds: 3239167562437367000 - value: U4S5 - - effect: 韘銫.衳;aƣ榌懣(ɲ篥­9邊斤榽fŷ - key: wMhDI - operator: )HuȕL搩Iʇ\ŦZȋ[:镱DZ - tolerationSeconds: -180540694248284540 - value: F0lt + - effect: yƒ恆齸ȒɶRƘďDZɑ錃ɝpȌy詊ǚ + key: 6Pi + tolerationSeconds: 8731516341386140000 + value: R + - effect: 巽eɴ兖ʒB虣儓 + key: MAyz + operator: Ɍ楾ċĨʅ:+舶ZÀ涂詜¶ɨǔ + tolerationSeconds: 6347659115954866000 + value: DA volumes: - name: kube-api-access projected: @@ -51225,52 +106881,44 @@ spec: - name: cert secret: defaultMode: 420 - secretName: ByyEUurwR + secretName: 7IZ9K1eC7 --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-webhook-cert namespace: default spec: dnsNames: - - 8V1wVzO-webhook-service.default.svc - - 8V1wVzO-webhook-service.default.svc.RBjyK1IISE + - HMyl-webhook-service.default.svc + - HMyl-webhook-service.default.svc.z issuerRef: kind: Issuer - name: G-selfsigned-issuer + name: YGu-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: ByyEUurwR + secretName: 7IZ9K1eC7 --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: - Hp8LxD6: 9oZ3ip - Jw: Jn - lKmeE2: L - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: G-selfsigned-issuer + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -51280,9 +106928,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: G-mutating-webhook-configuration + cert-manager.io/inject-ca-from: default/YGu-webhook-cert + name: YGu-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -51290,7 +106937,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 8V1wVzO-webhook-service + name: HMyl-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -51312,9 +106959,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: G-validating-webhook-configuration + cert-manager.io/inject-ca-from: default/YGu-webhook-cert + name: YGu-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -51322,7 +106968,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 8V1wVzO-webhook-service + name: HMyl-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -51348,104 +106994,146 @@ metadata: helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - z: "1" - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Fzbi9OkP-crd-job + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-crd-job namespace: default --- testdata/case-061.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true +automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - m: IHPyB - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - AWBTKJBE3: lLUGUf app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: Z20j25RfqSp + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: zBK9hkZ4 - health: - healthProbeBindAddress: f3 - kind: jV - leaderElection: - leaderElect: true - resourceName: CM4KfP - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 199 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - AWBTKJBE3: lLUGUf app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-config - namespace: default + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-crd-job-default +rules: +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - create + - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - AWBTKJBE3: lLUGUf app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-metrics-reader + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-migration-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments verbs: + - create + - delete - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - AWBTKJBE3: lLUGUf - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-default -rules: + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -51458,6 +107146,37 @@ rules: - subjectaccessreviews verbs: - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: @@ -51467,6 +107186,16 @@ rules: - list - patch - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch - apiGroups: - "" resources: @@ -51477,6 +107206,23 @@ rules: - "" resources: - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -51488,12 +107234,10 @@ rules: - apiGroups: - "" resources: - - events - - secrets - - serviceaccounts - - services + - configmaps verbs: - create + - delete - get - list - patch @@ -51535,10 +107279,22 @@ rules: verbs: - patch - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch - apiGroups: - apps resources: - - deployments - statefulsets verbs: - create @@ -51602,7 +107358,6 @@ rules: - redpanda.vectorized.io resources: - clusters - - consoles verbs: - create - delete @@ -51615,7 +107370,6 @@ rules: - redpanda.vectorized.io resources: - clusters/finalizers - - consoles/finalizers verbs: - patch - update @@ -51623,7 +107377,6 @@ rules: - redpanda.vectorized.io resources: - clusters/status - - consoles/status verbs: - get - patch @@ -51636,52 +107389,14 @@ rules: - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - AWBTKJBE3: lLUGUf - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: tDaA-default -subjects: -- kind: ServiceAccount - name: Z20j25RfqSp - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - AWBTKJBE3: lLUGUf - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-election-role - namespace: default -rules: - apiGroups: - "" resources: - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -51697,6 +107412,121 @@ rules: verbs: - create - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -51709,160 +107539,325 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - AWBTKJBE3: lLUGUf - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - persistentvolumeclaims - - pods + - podmonitors + - servicemonitors verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - AWBTKJBE3: lLUGUf - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - networking.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - AWBTKJBE3: lLUGUf app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-election-role - namespace: default + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-crd-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: tDaA-election-role + kind: ClusterRole + name: YGu-crd-job-default subjects: - kind: ServiceAccount - name: Z20j25RfqSp + name: YGu-crd-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - AWBTKJBE3: lLUGUf app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA - namespace: default + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: tDaA + kind: ClusterRole + name: YGu-migration-job-default subjects: - kind: ServiceAccount - name: Z20j25RfqSp + name: YGu-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-crds + namespace: default +spec: + template: + metadata: + annotations: + OLz: keA89pBq + ui: h + labels: + 9161sDOg6yWO: mS4A5w + ZK0oqyx: qC1 + app.kubernetes.io/instance: operator + app.kubernetes.io/name: HMyl + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + - --experimental + - --vectorized + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: crd-installation + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: WFD4PUtj + - name: 6vu + nodeSelector: + 6AyCec: 9fKL6eRYsH81 + BlK: zpFcYoH + Rl: LmWk + restartPolicy: OnFailure + serviceAccountName: YGu-crd-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: yƒ恆齸ȒɶRƘďDZɑ錃ɝpȌy詊ǚ + key: 6Pi + tolerationSeconds: 8731516341386140000 + value: R + - effect: 巽eɴ兖ʒB虣儓 + key: MAyz + operator: Ɍ楾ċĨʅ:+舶ZÀ涂詜¶ɨǔ + tolerationSeconds: 6347659115954866000 + value: DA + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: HMyl + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: YGu-migration namespace: default +spec: + template: + metadata: + annotations: + OLz: keA89pBq + ui: h + labels: + 9161sDOg6yWO: mS4A5w + ZK0oqyx: qC1 + app.kubernetes.io/instance: operator + app.kubernetes.io/name: HMyl + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: WFD4PUtj + - name: 6vu + nodeSelector: + 6AyCec: 9fKL6eRYsH81 + BlK: zpFcYoH + Rl: LmWk + restartPolicy: OnFailure + serviceAccountName: YGu-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: yƒ恆齸ȒɶRƘďDZɑ錃ɝpȌy詊ǚ + key: 6Pi + tolerationSeconds: 8731516341386140000 + value: R + - effect: 巽eɴ兖ʒB虣儓 + key: MAyz + operator: Ɍ楾ċĨʅ:+舶ZÀ涂詜¶ɨǔ + tolerationSeconds: 6347659115954866000 + value: DA + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-030.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: ubXTyfS + health: + healthProbeBindAddress: :8081 + kind: 6D943 + leaderElection: + leaderElect: true + resourceName: 2xeq + metrics: + bindAddress: nBHmLp + webhook: + port: 36 +kind: ConfigMap metadata: - annotations: null - creationTimestamp: null + annotations: + DYRRGOGQj: bjGMsBvUAM + Kz: eYM8F + uP4Hk8TS: kSetl labels: - AWBTKJBE3: lLUGUf + H0HSKTyRy0: FYrQn app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-rpk-bundle - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: tDaA-rpk-bundle -subjects: -- kind: ServiceAccount - name: Z20j25RfqSp + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: cgZlt-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + DYRRGOGQj: bjGMsBvUAM + Kz: eYM8F + uP4Hk8TS: kSetl labels: - AWBTKJBE3: lLUGUf + H0HSKTyRy0: FYrQn app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-metrics-service + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: cgZlt-metrics-service namespace: default spec: ports: @@ -51871,94 +107866,145 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: JhtIXu ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - AWBTKJBE3: lLUGUf - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: JhtIXu-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: JhtIXu + app.kubernetes.io/name: operator --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null - creationTimestamp: null + annotations: + DYRRGOGQj: bjGMsBvUAM + Kz: eYM8F + uP4Hk8TS: kSetl labels: - AWBTKJBE3: lLUGUf + H0HSKTyRy0: FYrQn app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: cgZlt namespace: default spec: - replicas: 692702430 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: JhtIXu + app.kubernetes.io/name: operator strategy: rollingUpdate: - maxSurge: 1272820202 - maxUnavailable: 1599763437 - type: p唧ţ逆ƒ4Ħ{'å + maxSurge: 211142494 + maxUnavailable: 1797334192 + type: 垭cl]ź德@4D助~ template: metadata: - annotations: {} - creationTimestamp: null + annotations: + 4d0k: zbXhnj + 5MBNGLEV: phUQRnAGf + "92": DrTz + NzygvMX: MGg63 + dW: udn labels: - "": otm65 app.kubernetes.io/instance: operator - app.kubernetes.io/name: JhtIXu + app.kubernetes.io/name: operator + sjAfns8: "" spec: + activeDeadlineSeconds: -8641732047792173000 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchFields: + - key: 7CcbU5G + operator: 犠= + - key: d48KHDBaLLi + operator: 兲slĽ5gr¾Ǿƶ + values: + - 1pBKgeK + - Bi + - VGvw9R + - key: tQDkZx + operator: Dõ漋!n玟8 + values: + - 0hj9 + weight: 162628720 + - preference: + matchExpressions: + - key: 8AXh7tvY1g + operator: 虰·脻d桲nơ-拂榯呃®躎煱) + - key: BPs0uqk497ls + operator: oʛ(Ɋ筤ŊLŹ譑ýQľ引Sâu9 + values: + - T + - key: "" + operator: ÂşD労 + values: + - MgbTSRZNc + weight: 809274197 + - preference: + matchExpressions: + - key: vkrl + operator: ȕ}?@g + matchFields: + - key: H1Yw5p16 + operator: Ȃ滜仑洜(&xno·Cȏ;碦 + - key: hWISSus1c + operator: ɀDDz鐂)ǘ.Ŷ+ĕĀ愕 + weight: 1705445935 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: Z + operator: ɓ殛轕!s蔸蕫(G宰ǐĠh榿剡 + values: + - Cdp + - matchExpressions: + - key: 3V + operator: :饑P墺a腛gu + values: + - RfUU + - Xz + - OKpZi5 + - key: "" + operator: å^羬}嘚t顇憛躘4 + values: + - cHimX9WgJ + - 4tyEOFr + - yV1u59S + - key: Dtyhvj + operator: o翊zJ}l亾m藐Ǯ掊0ɸƫɿ艟Ħʂ + values: + - DqegpY + - KyApM + - 53c automountServiceAccountToken: false containers: - args: + - --configurator-base-image=h6rx + - --configurator-tag=yXNMX + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=GfYtT - - --configurator-base-image=2g + - --log-level=BK2tN7C + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: 2g:GfYtT - imagePullPolicy: IfNotPresent + image: h6rx:yXNMX +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + imagePullPolicy: Always livenessProbe: - failureThreshold: 877 + failureThreshold: 610 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 442 - periodSeconds: 386 - successThreshold: 858 - terminationGracePeriodSeconds: 328 - timeoutSeconds: 697 + initialDelaySeconds: 194 + periodSeconds: 861 + successThreshold: 859 + terminationGracePeriodSeconds: 530 + timeoutSeconds: 560 name: manager ports: - containerPort: 9443 @@ -51968,22 +108014,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 430 + failureThreshold: 488 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 666 - periodSeconds: 556 - successThreshold: 172 - terminationGracePeriodSeconds: 200 - timeoutSeconds: 194 + initialDelaySeconds: 153 + periodSeconds: 826 + successThreshold: 857 + terminationGracePeriodSeconds: 964 + timeoutSeconds: 608 resources: limits: - cpu: "769" - memory: "582" + cpu: "552" + memory: "603" requests: - cpu: "988" - memory: "839" + cpu: "439" + memory: "353" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -51993,15 +108039,146 @@ spec: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true + dnsConfig: + nameservers: + - nex087njHP + - 5oyM8B + - OFS + options: + - name: "8" + value: fxj + - name: m + value: JUWXdfQ + - name: vjiij6 + value: TrT9 + searches: + - xmO29 + - q7ZY + dnsPolicy: 3徻n, + enableServiceLinks: true ephemeralContainers: null - imagePullSecrets: [] + hostAliases: + - hostnames: +<<<<<<< HEAD + - o0LL + ip: 3Zo + - ip: q +======= + - o + - QE7WX + ip: QDFX55K9aD + - ip: iLur7xKckKR + hostNetwork: true + hostPID: true + hostUsers: true + hostname: ZtBCk6 + imagePullSecrets: + - name: pwVb + - name: Tz27Wly initContainers: [] - nodeSelector: {} + nodeName: vtc2FLy49 + nodeSelector: + yaU7: QWSJfgC + preemptionPolicy: ě~fȸć!讬ïɶ暱ŵ悬Ü徶ĉ + priority: -1269295432 + priorityClassName: d + readinessGates: + - conditionType: ȻgŹ*eɸ誢>+牱k隝Ǣưʼn鄌yĠ + - conditionType: '[Ʃ誡!J' + - conditionType: ŭ靖辒魀E弴青戛 + resourceClaims: + - name: 7B + resourceClaimName: ZAEqWz8JEn + resourceClaimTemplateName: 2csSRn2nC8p + - name: bn5l + resourceClaimName: WxPmxdXE + resourceClaimTemplateName: 7s5WPqW7 + restartPolicy: ɓ鎣1PCdg弛g粮ÏȅǰűƞȟmȔ + runtimeClassName: Nc + schedulerName: WO + schedulingGates: + - name: 0JIO42nOv + - name: J18 + - name: rVzZIxJ7Y securityContext: - runAsUser: 65532 - serviceAccountName: Z20j25RfqSp + appArmorProfile: + localhostProfile: gowXG9fYJ + type: 腽 + fsGroup: -6610570094436924000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -7738439508536513000 + runAsNonRoot: true + runAsUser: 7723992021622510000 + supplementalGroups: + - -4063987154735379000 + supplementalGroupsPolicy: ÏY鵕寶ïɣ!Œ(ȵ:跠烃3 + sysctls: + - name: KSCy3z + value: cUQ + - name: RtL + value: RjmZj7 + - name: "0" + value: 413H + serviceAccountName: R21L51g + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: WdtveCVY terminationGracePeriodSeconds: 10 tolerations: [] + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: lF + operator: úɧ³漍 + values: + - H1QJW + - key: cS + operator: 讘zb痸ĬĔ躋阫h|+歧Ra÷Jpĺñ + values: + - ZP + - c2CK6alS + - Vhghm1fNDW + matchLabelKeys: + - 9c403 + - Jwpbzn4tq + maxSkew: -202805896 + minDomains: 1022972867 + nodeAffinityPolicy: hċȤǨ!鍏@´Ǽ7麝á + nodeTaintsPolicy: '*' + topologyKey: AMu + whenUnsatisfiable: 惤 + - labelSelector: + matchLabels: + 6QD4JJW: ZhSJHrkWLwS + 9GYLSVQb4: e6UOg9 + APQivceDgWl: zycMTGltX28Tn + matchLabelKeys: + - ik + - iYhsMu + - z0hbSRcH + maxSkew: -891148039 + minDomains: 660906025 + nodeTaintsPolicy: 4棱酪ŭµ痩ǀ硤MG憺茯Xu + topologyKey: Mzg + whenUnsatisfiable: =ɿɅÇʣȀȨ+ + - labelSelector: + matchExpressions: + - key: c0yiadMj + operator: 萬粰 + values: + - V + - eSDCP + - ZM + matchLabels: + t: KiSsQU + matchLabelKeys: + - L + maxSkew: 1149713597 + minDomains: -1898432339 + nodeAffinityPolicy: ȼ|暒銹Dǘ嗨yȥ臮|ɏ + nodeTaintsPolicy: X(GȬŦ镨Ì捩ȗ7H`UȻƃ)Ȩȝ謓 + topologyKey: pO + whenUnsatisfiable: ŵB觮ȁ蠃Ȕm扜F燱 volumes: - name: kube-api-access projected: @@ -52021,249 +108198,252 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: vT ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: null - creationTimestamp: null - labels: - AWBTKJBE3: lLUGUf - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - JhtIXu-webhook-service.default.svc - - JhtIXu-webhook-service.default.svc.v0W - issuerRef: - kind: Issuer - name: tDaA-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: vT --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: - annotations: null - creationTimestamp: null + annotations: + "": 5mjda8Z + 3XpS2: oWf52Ksjl2H5bD + 461a4: "n" + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - AWBTKJBE3: lLUGUf + H0HSKTyRy0: FYrQn app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-selfsigned-issuer + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: N45BFpa-crd-job namespace: default -spec: - selfSigned: {} --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: tDaA-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: JhtIXu-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: null - creationTimestamp: null + "": 5mjda8Z + 3XpS2: oWf52Ksjl2H5bD + 461a4: "n" + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - AWBTKJBE3: lLUGUf + H0HSKTyRy0: FYrQn app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: tDaA-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - AWBTKJBE3: lLUGUf - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: tDaA-validating-webhook-configuration + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: N45BFpa-migration-job namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: JhtIXu-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: annotations: helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - m: IHPyB - creationTimestamp: null + helm.sh/hook-weight: "-5" labels: - AWBTKJBE3: lLUGUf + H0HSKTyRy0: FYrQn app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jcF: qXntI - name: Z20j25RfqSp-crd-job + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: cgZlt-crds namespace: default --- testdata/case-062.yaml.golden -- +spec: + template: + metadata: + annotations: + 5MBNGLEV: phUQRnAGf + NzygvMX: MGg63 + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + sjAfns8: "" + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + - --experimental + command: + - /redpanda-operator + image: h6rx:yXNMX + imagePullPolicy: Always + name: crd-installation + resources: + limits: + cpu: "476" + memory: "743" + requests: + cpu: "185" + memory: "729" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: z5dbB + nodeSelector: + yaU7: QWSJfgC + restartPolicy: OnFailure + serviceAccountName: N45BFpa-crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - L5oVQe9mXi: Ha5na1 + H0HSKTyRy0: FYrQn app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: cgZlt-migration namespace: default +spec: + template: + metadata: + annotations: + 5MBNGLEV: phUQRnAGf + NzygvMX: MGg63 + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + sjAfns8: "" + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: h6rx:yXNMX + imagePullPolicy: Always + name: migration + resources: + limits: + cpu: "476" + memory: "743" + requests: + cpu: "185" + memory: "729" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: z5dbB + nodeSelector: + yaU7: QWSJfgC + restartPolicy: OnFailure + serviceAccountName: N45BFpa-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-031.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 5EOV + apiVersion: ZDqPIJKFzUv health: - healthProbeBindAddress: :8081 - kind: g65 + healthProbeBindAddress: hcJK + kind: yd leaderElection: leaderElect: true - resourceName: ut + resourceName: TD7c metrics: - bindAddress: V1ZJHnc0 + bindAddress: EINRYo2vSe webhook: - port: 76 + port: 9443 kind: ConfigMap metadata: - annotations: null - creationTimestamp: null + annotations: + "": f2I + b2WJ: b4O4Tjy labels: - L5oVQe9mXi: Ha5na1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-config + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + "": f2I + b2WJ: b4O4Tjy labels: - L5oVQe9mXi: Ha5na1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-metrics-reader + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -52274,46 +108454,100 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: {} - creationTimestamp: null + annotations: + "": f2I + b2WJ: b4O4Tjy labels: - L5oVQe9mXi: Ha5na1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-default + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - autoscaling resources: - - subjectaccessreviews + - horizontalpodautoscalers verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - consoles verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -52330,11 +108564,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -52343,15 +108582,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -52360,8 +108601,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -52371,11 +108636,34 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch - apiGroups: - apps resources: @@ -52390,11 +108678,9 @@ rules: - update - watch - apiGroups: - - cert-manager.io + - autoscaling resources: - - certificates - - clusterissuers - - issuers + - horizontalpodautoscalers verbs: - create - delete @@ -52404,9 +108690,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - batch resources: - - ingresses + - jobs verbs: - create - delete @@ -52416,9 +108702,10 @@ rules: - update - watch - apiGroups: - - policy + - cert-manager.io resources: - - poddisruptionbudgets + - certificates + - issuers verbs: - create - delete @@ -52428,103 +108715,91 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cluster.redpanda.com resources: - - clusterrolebindings - - clusterroles + - consoles + - nodepools + - redpandas verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - - consoles + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: + - get + - list - patch - update + - watch - apiGroups: - - redpanda.vectorized.io + - coordination.k8s.io resources: - - clusters/status - - consoles/status + - leases verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - - scheduling.k8s.io + - monitoring.coreos.com resources: - - priorityclasses + - podmonitors + - servicemonitors verbs: + - create + - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - L5oVQe9mXi: Ha5na1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 79ioSjMT8KG-default -subjects: -- kind: ServiceAccount - name: 79ioSjMT8KG - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - L5oVQe9mXi: Ha5na1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-election-role - namespace: default -rules: - apiGroups: - - "" + - networking.k8s.io resources: - - configmaps + - ingresses verbs: - create - delete @@ -52534,16 +108809,24 @@ rules: - update - watch - apiGroups: - - "" + - policy resources: - - events + - poddisruptionbudgets verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - rbac.authorization.k8s.io resources: - - leases + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: - create - delete @@ -52555,163 +108838,222 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + "": f2I + b2WJ: b4O4Tjy labels: - L5oVQe9mXi: Ha5na1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG - namespace: default + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd-additional-controllers-default rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch - apiGroups: - "" resources: - persistentvolumeclaims - - pods verbs: - delete - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - L5oVQe9mXi: Ha5na1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-rpk-bundle - namespace: default -rules: +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch - apiGroups: - "" resources: - configmaps - - endpoints - - events - - limitranges + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - secrets verbs: - get - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - L5oVQe9mXi: Ha5na1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 79ioSjMT8KG-election-role -subjects: -- kind: ServiceAccount - name: 79ioSjMT8KG - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + "": f2I + b2WJ: b4O4Tjy labels: - L5oVQe9mXi: Ha5na1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG - namespace: default + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 79ioSjMT8KG + kind: ClusterRole + name: Ipfd-default subjects: - kind: ServiceAccount - name: 79ioSjMT8KG + name: qYiN namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + "": f2I + b2WJ: b4O4Tjy labels: - L5oVQe9mXi: Ha5na1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-rpk-bundle - namespace: default + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 79ioSjMT8KG-rpk-bundle + kind: ClusterRole + name: Ipfd-additional-controllers-default subjects: - kind: ServiceAccount - name: 79ioSjMT8KG + name: qYiN namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + "": f2I + b2WJ: b4O4Tjy labels: - L5oVQe9mXi: Ha5na1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-metrics-service + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd-metrics-service namespace: default spec: ports: @@ -52720,266 +109062,302 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ZRaS ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - L5oVQe9mXi: Ha5na1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: ZRaS-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: ZRaS + app.kubernetes.io/name: txo --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null - creationTimestamp: null + annotations: + "": f2I + b2WJ: b4O4Tjy labels: - L5oVQe9mXi: Ha5na1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd namespace: default spec: - replicas: 1349316373 + replicas: -252384071 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ZRaS + app.kubernetes.io/name: txo strategy: - type: RollingUpdate + rollingUpdate: + maxSurge: 1312022802 + maxUnavailable: 1586010775 + type: Ť街'ʐŎGàƹY>o template: metadata: annotations: - yc: "" - creationTimestamp: null + T86X3: "" + f4jUA3: 7tAQ labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ZRaS + app.kubernetes.io/name: txo + t: 4t7H spec: affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchFields: - - key: 9xbOcnTn - operator: 凥ǩk雐必3 ȏ0A邿u癮!­Ⱦ銂, - values: - - h - - DTdeaN - weight: -738772381 - preference: matchExpressions: - - key: lfpZtGAtSu - operator: w俢m<轮V{3(閡彲¶pg験ɓ萧ƀhÄ殑囹 + - key: zv1wP + operator: 玠0N鴿s擔3E瓷宏ɛƗ%ȕ values: - - 8GIlq - - v - - oE5H + - Eg2GTe + - key: nD6H + operator: Ȋ鮔ɴ広可@Ƿfa蜔廠今ɝĵ迟 + values: + - w + - L7QKqw1 matchLabels: - ww9X: n31J - namespaces: - - 1U5ckcd9Z6Qb - topologyKey: ZtMCDcq - - labelSelector: + r8r: aFw64 + mismatchLabelKeys: + - K5YFKKK + namespaceSelector: matchExpressions: - - key: pF - operator: ǩ鎜ŠŜȇ橱誀 + - key: q1 + operator: 伱2袛nd仐\8j譥Ɔ\ɿĦʚ values: - - rxZ3Ddj - - rI - - XB + - FPLJ9coho8 + - bH6QcE0TURa1ET5X + - Xd5E + - key: Zw + operator: ?恱鉀ʠȜɳĢȠ8 + values: + - ue5Yi + - g9aT + matchLabels: + QPwPkT8LdWyzh: Pf5sQ98aj + n6HQZQ: fStNNaI0 + topologyKey: q + - labelSelector: + matchLabels: + 4GU: xH + Ae: J + sXl9vKYXf: OEoU matchLabelKeys: - - J5wPG - namespaceSelector: {} - namespaces: - - HBS + - Zd - "" - topologyKey: 8A4g0vq - automountServiceAccountToken: false + - yF2kRf + mismatchLabelKeys: + - cIXlxB + namespaceSelector: + matchExpressions: + - key: 8lQ + operator: ʇ$;Śǡ灜ò0RÜ|洳恜~k + values: + - 1AK + - 91ZFl + - key: w + operator: "" + values: + - YZWdIxzpJ + - VIr + - IODbyvRa + - key: "" + operator: 入)釟補颋ğ圱Ȕ险Iȡɸ氘 + values: + - Q6QTq + matchLabels: + 2K: LP8rLgv7 + dU: kw + nmnhe: qmNbu9 + namespaces: + - QhQ6evf4 + - fkwW5wlsPJ + topologyKey: CErHdhv + - labelSelector: + matchLabels: + uFuFD: Cm + mismatchLabelKeys: + - hwdn + namespaceSelector: + matchExpressions: + - key: CNaFfKam9 + operator: 孏-Đ鍙瓱够Ɓ嘪醠ɁʙǾy軧ąNk + values: + - l5 + - Ibe5 + - pFP + - key: PHr + operator: ®¤m&槯^cť撖a吰猼 + - key: p0U + operator: 蜂kČ愁梙鶻ƯĚƶ佹ȧ + values: + - nRXHiVZ + - HBXo4a6z + matchLabels: + 0N3UxJQ: rawTjs3 + aF5Vkxak: NnjGi + namespaces: + - ZM + topologyKey: xsfBzdPkUU + automountServiceAccountToken: true containers: - args: + - --configurator-base-image + - --configurator-tag=vO + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --log-level + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: :vO imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 801 + failureThreshold: 440 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 382 - periodSeconds: 580 - successThreshold: 693 - terminationGracePeriodSeconds: 540 - timeoutSeconds: 778 + initialDelaySeconds: 843 + periodSeconds: 774 + successThreshold: 19 + terminationGracePeriodSeconds: 990 + timeoutSeconds: 861 name: manager ports: - containerPort: 9443 @@ -52989,53 +109367,152 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 815 + failureThreshold: 288 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 389 - periodSeconds: 322 - successThreshold: 622 - terminationGracePeriodSeconds: 754 - timeoutSeconds: 842 + initialDelaySeconds: 19 + periodSeconds: 313 + successThreshold: 644 + terminationGracePeriodSeconds: 744 + timeoutSeconds: 199 resources: limits: - cpu: "810" - memory: "935" + cpu: "13" + memory: "175" requests: - cpu: "574" - memory: "479" + cpu: "950" + memory: "592" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true + dnsConfig: + nameservers: + - "" + - RlB1 + - JN + options: + - name: QwZ + value: sy2jaqD6p + - name: hne + value: Go + searches: + - oAsYHEw + dnsPolicy: 蕕軧K +撷牨Ǯȅ涶ȠŇdz ephemeralContainers: null +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + hostIPC: true + hostUsers: true + hostname: N5XE imagePullSecrets: - - name: GI3C2 + - name: J37w + - name: XAyGS + - name: DgDanQ initContainers: [] +<<<<<<< HEAD + nodeName: R + nodeSelector: {} + preemptionPolicy: ƙ + priority: 2110598567 + priorityClassName: izM2e1 + readinessGates: + - conditionType: ș:œ=ɔɃMǃ 椻 + - conditionType: 潏莥G@{ + restartPolicy: ?=,優偿跼膁1yBȇ + runtimeClassName: UILZ + schedulerName: ZmzwWiRN +======= nodeSelector: - Yh: 05qY1de9iCbZmf - zwf: HZboLIP + mVp: mo7a + preemptionPolicy: 倵Ư& u咵ɜ0卵Ģ'&m + priority: -1546618263 + priorityClassName: p6w3dgF + readinessGates: + - conditionType: 皖Ɇ"ǖƄ¾鯾獾U&Ìȶ鵥ɇS5褐q + resourceClaims: + - name: YTRgpH6 + resourceClaimName: RK + resourceClaimTemplateName: 24HqQ8bzwqp + - name: "0" + resourceClaimName: 7EQCw + resourceClaimTemplateName: r93W + - name: C + resourceClaimName: GLl9CFO + resourceClaimTemplateName: nA7L552OC + restartPolicy: Ǜ跚ǹ衐£VÚI~ɽ珂致Ņ]穟Ƽɸ璧銹 + runtimeClassName: I + schedulerName: KstL + schedulingGates: + - name: EZSXgs2 + - name: 6CY9373itQ securityContext: + appArmorProfile: + localhostProfile: AE + type: ř衊B畩熭 + fsGroup: 3385938160535795000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -7120237516900171000 + runAsNonRoot: true runAsUser: 65532 - serviceAccountName: 79ioSjMT8KG - terminationGracePeriodSeconds: 10 + seLinuxChangePolicy: Ɗ夤J譡vƠce遚~ + supplementalGroups: + - -1185440071124296400 + supplementalGroupsPolicy: 郔瀭泥桷^Yʊũvtfċɛ6 + sysctls: + - name: RFarR + value: bj + serviceAccountName: qYiN + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: RyQexda + terminationGracePeriodSeconds: -685805710953372500 tolerations: - - effect: 籚HȰy垓ģÛƫ倹:奩倫廚戦f - key: l4 - operator: Ë雳ǰ蠘Nu堑[?pc'; - tolerationSeconds: 1274360854646177000 - value: rZ3DYm7D - - effect: ɄBőEǚ/ - key: dZ - operator: Õ燇薨 - tolerationSeconds: -6904634960455264000 - value: s27Ly0fqrJMy + - effect: 搢ȣ + key: voa + operator: ƂlĶ濄荳隊H + value: ln2 + - effect: 餸 + key: WU + tolerationSeconds: 3918912658891498000 + value: aAcf + - effect: y''by(\«*òVɀ + key: gawQO + operator: 监îtÔH鍬Ū与Eȝc + tolerationSeconds: -4179292782073603600 + value: VYwvqJ05x + topologySpreadConstraints: + - matchLabelKeys: + - Zb + - uaLZ6u3 + maxSkew: -192181378 + minDomains: 235056813 + nodeAffinityPolicy: 彪阰Äĉ釘灌ċȨɷRíD`íW + - labelSelector: + matchExpressions: + - key: EUdV9 + operator: ȱ昢r稽ɷ撬0c甾!Ç避4禵M + values: + - Mk2AViLp + matchLabels: + Bp: oxUO + a: Mxwo + xu: w + matchLabelKeys: + - vZbtQm4Z + - CS + - J + maxSkew: 1951634208 + minDomains: 1116416915 + nodeAffinityPolicy: 郻恕獑 + nodeTaintsPolicy: ɭȭ戞异ƄêEĻ + topologyKey: ESVQCT + whenUnsatisfiable: 两'óÔʬ攏 volumes: - name: kube-api-access projected: @@ -53055,122 +109532,8 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: ZZyA3J2 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: null - creationTimestamp: null - labels: - L5oVQe9mXi: Ha5na1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - ZRaS-webhook-service.default.svc - - ZRaS-webhook-service.default.svc.CsDkc - issuerRef: - kind: Issuer - name: 79ioSjMT8KG-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: ZZyA3J2 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: null - creationTimestamp: null - labels: - L5oVQe9mXi: Ha5na1 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 79ioSjMT8KG-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: ZRaS-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 79ioSjMT8KG-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: ZRaS-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + - name: 3Mokyu + - name: S --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -53178,52 +109541,38 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: + Q: JRS84 + b8: "Y" helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null labels: - L5oVQe9mXi: Ha5na1 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - j: Wmsdb - uS: h6Fj - name: 79ioSjMT8KG-crd-job + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: qYiN-crd-job namespace: default --- testdata/case-063.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: 3DZm5C - health: - healthProbeBindAddress: wbS - kind: lvSajc - leaderElection: - leaderElect: true - resourceName: vJ0RPdGU - metrics: - bindAddress: vt - webhook: - port: 230 -kind: ConfigMap +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - nfk: A5hC - creationTimestamp: null + Q: JRS84 + b8: "Y" + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - aWCYcSH: IIt47c1D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-config + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: qYiN-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml @@ -53231,67 +109580,130 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - nfk: A5hC - creationTimestamp: null + "": f2I + b2WJ: b4O4Tjy + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - aWCYcSH: IIt47c1D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-metrics-reader + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: qYiN-crd-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions verbs: + - create - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - nfk: A5hC - creationTimestamp: null + "": f2I + b2WJ: b4O4Tjy + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - aWCYcSH: IIt47c1D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-default + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: qYiN-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumes + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -53308,11 +109720,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -53321,15 +109738,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -53338,8 +109757,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -53349,30 +109792,39 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - events verbs: - create - - delete + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -53382,9 +109834,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -53394,9 +109846,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -53406,22 +109858,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -53431,78 +109885,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - nfk: A5hC - creationTimestamp: null - labels: - aWCYcSH: IIt47c1D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 41nucs5-default -subjects: -- kind: ServiceAccount - name: v1W - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - nfk: A5hC - creationTimestamp: null - labels: - aWCYcSH: IIt47c1D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-election-role - namespace: default -rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -53512,16 +109940,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -53530,441 +109964,218 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - nfk: A5hC - creationTimestamp: null - labels: - aWCYcSH: IIt47c1D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5 - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - nfk: A5hC - creationTimestamp: null - labels: - aWCYcSH: IIt47c1D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - nfk: A5hC - creationTimestamp: null - labels: - aWCYcSH: IIt47c1D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 41nucs5-election-role -subjects: -- kind: ServiceAccount - name: v1W - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - nfk: A5hC - creationTimestamp: null + "": f2I + b2WJ: b4O4Tjy + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - aWCYcSH: IIt47c1D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5 - namespace: default + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: qYiN-crd-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 41nucs5 + kind: ClusterRole + name: qYiN-crd-job-default subjects: - kind: ServiceAccount - name: v1W + name: qYiN-crd-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - nfk: A5hC - creationTimestamp: null + "": f2I + b2WJ: b4O4Tjy + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - aWCYcSH: IIt47c1D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-rpk-bundle - namespace: default + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: qYiN-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 41nucs5-rpk-bundle + kind: ClusterRole + name: qYiN-migration-job-default subjects: - kind: ServiceAccount - name: v1W - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - nfk: A5hC - creationTimestamp: null - labels: - aWCYcSH: IIt47c1D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-metrics-service + name: qYiN-migration-job namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: ibdE3 --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: batch/v1 +kind: Job metadata: annotations: - nfk: A5hC - creationTimestamp: null + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" labels: - aWCYcSH: IIt47c1D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: ibdE3-webhook-service + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd-crds namespace: default spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: ibdE3 + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: txo + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + command: + - /redpanda-operator + image: :vO + imagePullPolicy: IfNotPresent + name: crd-installation + resources: + limits: + cpu: "13" + memory: "175" + requests: + cpu: "950" + memory: "592" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: qYiN-crd-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 嬷S抜Ö巔ZA¬M!R盆ʣlKAF + key: CWL + tolerationSeconds: 5035655793644223000 + value: Qsio + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: annotations: - nfk: A5hC - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - aWCYcSH: IIt47c1D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5 + app.kubernetes.io/name: txo + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Ipfd-migration namespace: default spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: ibdE3 - strategy: - rollingUpdate: - maxSurge: 548350110 - maxUnavailable: 595639980 - type: ô template: metadata: - annotations: - 9TI: qa3zs - qC: qD - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ibdE3 + app.kubernetes.io/name: txo spec: - activeDeadlineSeconds: 8386641482634777000 - affinity: - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: "" - operator: Ǹ摩k - values: - - 7jfm - matchLabels: - tys6: mo - xFx: eu6WHaMscV - namespaceSelector: - matchExpressions: - - key: TcBsN - operator: V7ƑuJ麣汅dH旛Ïǐ - - key: UcxiOQZ - operator: 蛘燵ŴRȀ臙Pʭɘ - values: - - UILkq - matchLabels: - 048sU: 1TeuOLHG - PJsfU: PMe - Xn6: 4jFB - topologyKey: kea - weight: 543361615 - - podAffinityTerm: - labelSelector: - matchLabels: - 9B7oDS2Dqg: 8Yc97J - zG0o: 9Z - matchLabelKeys: - - 6cEpAUN6kWw - mismatchLabelKeys: - - CU34P - - Wn - - rQ - namespaceSelector: {} - namespaces: - - CaMbSAB - - uQb - topologyKey: AWLls4 - weight: -1697789399 - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: {} - mismatchLabelKeys: - - ENJkAXiE - - yx08C1A2SdN2 - namespaces: - - "" - - 84rWC1iYJ - topologyKey: "" - weight: 711888824 - - podAffinityTerm: - mismatchLabelKeys: - - WHKsI - - h9Q - - 2Royoo4G - namespaceSelector: - matchExpressions: - - key: sIWFm5b - operator: VĽĄǢŬ磥霷ĿʁůÕȎĐɦƪ趬Ÿ - values: - - ak97 - - uvdvn - - key: deEGeT - operator: T碔ǤsRwWcƓ电ƨɵɱ¶ǥT瑎孧 - values: - - coh - - I - - zMLOg - matchLabels: - HQDm: pnRnh - topologyKey: gS - weight: -1880150493 - automountServiceAccountToken: true + automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=vJ7ET - - --configurator-base-image=cd7qo - - r4LII - - m5622dBz6A + - migration command: - - /manager - env: [] - image: cd7qo:vJ7ET - imagePullPolicy: Always - livenessProbe: - failureThreshold: 226 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 129 - periodSeconds: 548 - successThreshold: 32 - terminationGracePeriodSeconds: 268 - timeoutSeconds: 725 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 313 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 97 - periodSeconds: 243 - successThreshold: 393 - terminationGracePeriodSeconds: 496 - timeoutSeconds: 135 + - /redpanda-operator + image: :vO + imagePullPolicy: IfNotPresent + name: migration resources: limits: - cpu: "667" - memory: "5" + cpu: "13" + memory: "175" requests: - cpu: "4" - memory: "963" + cpu: "950" + memory: "592" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - IVuNkr4z - - 9XLgNXI - dnsPolicy: ņg滦趗ɚ阋Ɵ髬ɲ - enableServiceLinks: true - ephemeralContainers: null - hostAliases: - - hostnames: - - RM - ip: u - - hostnames: - - Fw - ip: 5S384oi - hostIPC: true - hostPID: true - hostUsers: true - hostname: Hm51Efs9T8U imagePullSecrets: [] - initContainers: [] - nodeName: P9MAwp nodeSelector: {} - preemptionPolicy: ǼBʔ麀Ş}Û - readinessGates: - - conditionType: 闲聪盏ɔ騹Ș馊黖4嘢^ĝ贍ȴǪ - - conditionType: '}+眝,苗搋Ơ灢儌' - - conditionType: Ș_晉Š - resourceClaims: - - name: SGle5FGb - - name: cFoC3BLD - restartPolicy: ɜG - runtimeClassName: 0miTRRYKU - schedulerName: p9Ab5RBA7 - schedulingGates: - - name: 0D2o - securityContext: - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 842292908927240800 - runAsNonRoot: true - runAsUser: 7838399609601566000 - sysctls: - - name: jE2Fj5Z - value: I - serviceAccountName: LnINHd7GybLE - subdomain: "0" - terminationGracePeriodSeconds: -9216646974168798000 + restartPolicy: OnFailure + serviceAccountName: qYiN-migration-job + terminationGracePeriodSeconds: 10 tolerations: - - effect: ɵfƲi脕Ʉ,4余-H - key: Ib - operator: ŃC従ë'fʐ畀炅ư穩熍M肓ÎƜ烍饫ɴ - tolerationSeconds: 8474325013013203000 - value: cLIt - - key: HrhC - operator: D髆陁¯-aȩ - tolerationSeconds: 7079392287063791000 - value: lcUzgeUg8 - - effect: ɴ?!楲Tāɬ氬<Ǎ垷Ņ疼 - key: e797a - operator: Y箝ɗ耮猇韧Ceñɨ - tolerationSeconds: 2796595789192197000 - value: AUvS2 + - effect: 嬷S抜Ö巔ZA¬M!R盆ʣlKAF + key: CWL + tolerationSeconds: 5035655793644223000 + value: Qsio volumes: - name: kube-api-access projected: @@ -53984,210 +110195,71 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: s4js ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - nfk: A5hC - creationTimestamp: null - labels: - aWCYcSH: IIt47c1D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - ibdE3-webhook-service.default.svc - - ibdE3-webhook-service.default.svc.H0M2WM - issuerRef: - kind: Issuer - name: 41nucs5-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: s4js ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - nfk: A5hC - creationTimestamp: null - labels: - aWCYcSH: IIt47c1D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: 41nucs5-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 41nucs5-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: ibdE3-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 41nucs5-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: ibdE3-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - aWCYcSH: IIt47c1D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - wig: gAae - name: v1W-crd-job - namespace: default --- testdata/case-064.yaml.golden -- +-- testdata/case-032.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false +automountServiceAccountToken: true kind: ServiceAccount metadata: - annotations: - Tv9mrE: QJOCh1aO - jW: CZz80QZ - creationTimestamp: null + annotations: null labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Ev1EfK + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: PJFo namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: FD + apiVersion: 2j health: - healthProbeBindAddress: :8081 - kind: MH5XDB + healthProbeBindAddress: sYzgo + kind: 3gh leaderElection: - leaderElect: true - resourceName: 1tYL + leaderElect: false + resourceName: x7vOt metrics: - bindAddress: OhXadc + bindAddress: E5L webhook: - port: 9443 + port: 275 kind: ConfigMap metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null + annotations: null labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-config + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: cwgT-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null + annotations: null labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-metrics-reader + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: cwgT-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -54198,46 +110270,101 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null + annotations: {} labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-default + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: cwgT-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumes + - horizontalpodautoscalers verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -54254,11 +110381,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -54267,25 +110399,67 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - get - list - - watch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumeclaims + - leases verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: + - configmaps - pods + - secrets + - serviceaccounts + - services verbs: + - create - delete - get - list @@ -54295,30 +110469,23 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - events verbs: + - create - patch - - update - apiGroups: - apps resources: - - deployments - - statefulsets + - controllerrevisions verbs: - - create - - delete - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -54328,9 +110495,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -54340,9 +110507,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -54352,22 +110519,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -54377,78 +110546,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: xtpIQu-default -subjects: -- kind: ServiceAccount - name: Ev1EfK - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-election-role - namespace: default -rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -54458,16 +110601,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -54476,166 +110625,73 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: xtpIQu-election-role -subjects: -- kind: ServiceAccount - name: Ev1EfK - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: xtpIQu -subjects: -- kind: ServiceAccount - name: Ev1EfK - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null + annotations: {} labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-rpk-bundle - namespace: default + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: cwgT-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: xtpIQu-rpk-bundle + kind: ClusterRole + name: cwgT-default subjects: - kind: ServiceAccount - name: Ev1EfK + name: PJFo namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null + annotations: null labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-metrics-service + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: cwgT-metrics-service namespace: default spec: ports: @@ -54644,151 +110700,118 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Kcp ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Kcp-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: Kcp + app.kubernetes.io/name: pcJ --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null + annotations: null labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: cwgT namespace: default spec: - replicas: -2095964652 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Kcp + app.kubernetes.io/name: pcJ strategy: - type: ƕƎ尠Ǎõē娱 + type: E:tʥ巓Ȑä鸥D銏"-改逶1熯總ɉ template: metadata: annotations: - "": w - 836x: oHBF - creationTimestamp: null + EcIV: cKeH66F + MbE: RFrrzIC + NPDHRe: DN422R + ShTw: ztiNmGa + p: HrlEt labels: - Qh1IlK: xXLYxezYtH + UMgps: NNfK app.kubernetes.io/instance: operator - app.kubernetes.io/name: Kcp + app.kubernetes.io/name: pcJ + x: rfxznu spec: affinity: - nodeAffinity: + podAffinity: requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: p6dslT6A68Q - operator: µ鷙毪_ɶ哞膠ɘ覞ʛ%Qpk - values: - - 9S - - hdwUzm - - 7rplk5J - - key: Yh8 - operator: S庘{ Y殶L­ț1践T辿$=.ʩ - matchFields: - - key: hzCRGFfiCv - operator: x騱Ğ - - key: Rzt3DL - operator: 痑 - values: - - "08" - - key: 2to - operator: "" - - matchExpressions: - - key: ZtM7 - operator: ʠɞǙ§vUc隄ʥ嘽雚宬4|"Nj> - values: - - vRFviQGe0 - - zGZM - - key: RMjmZnOkvvZc - operator: (盆7Ƚ}鏴Ɉ)'Jeå蹷 + - labelSelector: + matchExpressions: + - key: s0t0U0hnBL + operator: ŭ'm^q + - key: pztK + operator: 2鮽橋ǞʍɥWŇJĖ憝 values: - - Zvv16KE - matchFields: - - key: Vt2gIz0 - operator: '%' - - matchExpressions: - - key: CdoYQP - operator: x割鳑)í噁 + - Lj + - hpMuR5 + matchLabels: + QlHlARI: p5skq + mismatchLabelKeys: + - F7TqxO + namespaceSelector: + matchLabels: + 0xAfrQECe: z + vJw: Fj + topologyKey: "N" + - labelSelector: + matchExpressions: + - key: KAS + operator: =鳠鈈粔jȷqCʆƕVZ鞮8ǫDj values: - - hHER8zu4 - - Ni - - wSgMO - matchFields: - - key: 2mcWT - operator: '>ģ扃 麷¹Ńĺ腣XǬȞAž幢掑Ä' + - HcEt + - sebQE4x1 + - f + - key: WJ3X + operator: ɰ>俻~1Nƅ ǖ錣{ė擈5誏Xx values: - - ULwogXx6z5 - - 9zP8p - - q8 - - key: iZTM9Vm - operator: -ǿ#毖齸倖瞍vWʞ:Ă^6徨 + - WZox + - B1bedx + - key: CX + operator: 雨鰷稚lj values: - - K5le06tD - podAntiAffinity: {} + - DEGeQ8ERGe + - vGZeDCx + matchLabels: + PuL: iE2X + mismatchLabelKeys: + - NDOy0 + namespaceSelector: {} + topologyKey: Vm automountServiceAccountToken: false containers: - args: + - --configurator-base-image=HJ + - --configurator-tag=0ORIQruw + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=DF517x - - --configurator-base-image=SCN - - "" - - QL9X + - --log-level=QNYXpv + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: SCN:DF517x + image: HJ:0ORIQruw imagePullPolicy: Always livenessProbe: - failureThreshold: 941 + failureThreshold: 203 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 763 - periodSeconds: 486 - successThreshold: 976 - terminationGracePeriodSeconds: 631 - timeoutSeconds: 593 + initialDelaySeconds: 380 + periodSeconds: 795 + successThreshold: 813 + terminationGracePeriodSeconds: 402 + timeoutSeconds: 587 name: manager ports: - containerPort: 9443 @@ -54798,54 +110821,92 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 96 + failureThreshold: 781 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 110 - periodSeconds: 304 - successThreshold: 487 - terminationGracePeriodSeconds: 749 - timeoutSeconds: 268 + initialDelaySeconds: 894 + periodSeconds: 117 + successThreshold: 617 + terminationGracePeriodSeconds: 256 + timeoutSeconds: 923 resources: limits: - cpu: "678" - memory: "136" + cpu: "901" + memory: "687" requests: - cpu: "25" - memory: "887" + cpu: "230" + memory: "825" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true + dnsConfig: + nameservers: + - "4" + searches: + - C ephemeralContainers: null + hostNetwork: true + hostPID: true + hostUsers: false + hostname: 13Ub imagePullSecrets: - - name: Qi + - name: V44FEdCU5wA initContainers: [] - nodeSelector: {} + nodeName: NQyR + nodeSelector: + 0kAWWe8: iPWeed + "9": G6TGn8hP + Pmy9K: qBWMuz59BoR + Xm5X6sA: WTJy5Ub80 + sUw: L2Qe90hPX3 + uS3jf: ARQJcHqx + preemptionPolicy: 1U邞Ȉŀǐ¶iT + priority: 2006742619 + priorityClassName: jHCfwusWi + resourceClaims: + - name: Qrr3r0aR + resourceClaimName: oMdnwhYL6 + resourceClaimTemplateName: hW + restartPolicy: ŏ鄄$7蛫ZgɝM磆lj1ʍM + runtimeClassName: yPLGy + schedulerName: 5h11znL securityContext: - runAsUser: 65532 - serviceAccountName: Ev1EfK - terminationGracePeriodSeconds: 10 + appArmorProfile: + localhostProfile: AXIPcdud + type: '}髪办櫎燺ƚ赅Ȣ<ɯƺ%ʓ' + fsGroup: -250946847658562140 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -4709738774997682000 + runAsNonRoot: false + runAsUser: -6681599987777484000 + seLinuxChangePolicy: gƘƀeơ?ʖě擙豦q>ț狚峃ôF + supplementalGroups: + - -6503090473568074000 + - 7094235872305705000 + - -3350650268241093600 + serviceAccountName: vvIoiD3TL + setHostnameAsFQDN: false + shareProcessNamespace: true + terminationGracePeriodSeconds: 5333218911568628000 tolerations: - - effect: 煲釠č5瓏{癧aǼ - key: Y9U7 - operator: o筈辅űųʝ@鷻銩0 - tolerationSeconds: 2028340599953699800 - value: GoO - - effect: »g_js羿O幯乽;戰嬹ËƔ{t4姛瓬 - operator: 9]ɞ丮¹DOłſɌ髽 - value: 1ikTXwf - - effect: ʦ爢åS兲ƈʮƾ - key: RUhE - operator: Q芎帲@ɂ§[Ř:乶纱r - tolerationSeconds: 7398301711804277000 - value: D + - effect: ¶鵭似Aƪ0Ð震侕鱴q1喽Ȣ叆®Qè + key: aN + operator: 扒黿笮泑ȃ§敆甔HƐ + value: fi4tDy4 + - effect: ɧ彛靋鿵 Ĭ + key: L + operator: 隔:ʮ緝 + tolerationSeconds: 8057036964979803000 + value: 0uy + - effect: ʌpêĎI`Qǜ壭躗@Ď» + key: weNwAkY + operator: NJ顩奔凑ÜW蜦譶OʁǤ硌鮏$N + tolerationSeconds: -2734700152715535000 + value: IA volumes: - name: kube-api-access projected: @@ -54865,537 +110926,741 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: pkhQjFp ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - Kcp-webhook-service.default.svc - - Kcp-webhook-service.default.svc.kVV - issuerRef: - kind: Issuer - name: xtpIQu-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: pkhQjFp + - name: "" + - name: k4Cu + - name: s6sE --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - HvdUM8c: xgMVqIkmZB - Sy: 53p2w - Zxp7: CdyC - creationTimestamp: null +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: xtpIQu-selfsigned-issuer + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: cwgT-metrics-monitor namespace: default spec: - selfSigned: {} + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: xtpIQu-mutating-webhook-configuration + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: PJFo-crd-job namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Kcp-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: xtpIQu-validating-webhook-configuration + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: PJFo-migration-job namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Kcp-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - Tv9mrE: QJOCh1aO helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - jW: CZz80QZ - creationTimestamp: null labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Ev1EfK-crd-job - namespace: default --- testdata/case-065.yaml.golden -- + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: PJFo-crd-job-default +rules: +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - create + - get + - patch + - update --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: 6cBdO4WXpPbYNd - health: - healthProbeBindAddress: :8081 - kind: 9m - leaderElection: - leaderElect: false - resourceName: qAkskeq - metrics: - bindAddress: oEhm - webhook: - port: 223 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - Wcv: XlJt1il - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "78" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - yhRLU: bn88A - name: CbM6ZNJQ-config + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: PJFo-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: PJFo-crd-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: PJFo-crd-job-default +subjects: +- kind: ServiceAccount + name: PJFo-crd-job namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - Wcv: XlJt1il - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "78" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - yhRLU: bn88A - name: CbM6ZNJQ-metrics-service + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: PJFo-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: PJFo-migration-job-default +subjects: +- kind: ServiceAccount + name: PJFo-migration-job namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: "78" --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: batch/v1 +kind: Job metadata: annotations: - Wcv: XlJt1il - creationTimestamp: null + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "78" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - yhRLU: bn88A - name: 78-webhook-service + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: cwgT-crds namespace: default spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: "78" + template: + metadata: + annotations: + NPDHRe: DN422R + ShTw: ztiNmGa + p: HrlEt + labels: + UMgps: NNfK + app.kubernetes.io/instance: operator + app.kubernetes.io/name: pcJ + x: rfxznu + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + command: + - /redpanda-operator + image: HJ:0ORIQruw + imagePullPolicy: Always + name: crd-installation + resources: + limits: + cpu: "901" + memory: "687" + requests: + cpu: "230" + memory: "825" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: V44FEdCU5wA + nodeSelector: + "9": G6TGn8hP + Xm5X6sA: WTJy5Ub80 + sUw: L2Qe90hPX3 + restartPolicy: OnFailure + serviceAccountName: PJFo-crd-job + terminationGracePeriodSeconds: 10 + tolerations: + - key: 764Hdo + operator: 蓒LĔȌd-弼剉蛀õʞ檊&ĨƟ + tolerationSeconds: -5336729868846099000 + value: 1Tnob3 + - effect: 諎 + key: v6E6O0z + operator: ă + tolerationSeconds: 1484654212906765600 + value: F + - effect: 戈Ƭxsv淇a7劓ș/ſʑ鉅 + key: g6rXx4XyGEo + operator: iBnY + tolerationSeconds: -2076148757329951500 + value: W1V + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: annotations: - Wcv: XlJt1il - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: + CxqPaEyk: fINHg + T5cgPilynoaoF: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "78" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - yhRLU: bn88A - name: CbM6ZNJQ + app.kubernetes.io/name: pcJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + x: 6P + name: cwgT-migration namespace: default spec: - replicas: -610531173 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: "78" - strategy: - rollingUpdate: - maxSurge: 17395768 - maxUnavailable: 1807806628 - type: ʛ template: metadata: annotations: - kINvq: mSXo - qNT: 2P - creationTimestamp: null + NPDHRe: DN422R + ShTw: ztiNmGa + p: HrlEt labels: - "": VLlyct + UMgps: NNfK app.kubernetes.io/instance: operator - app.kubernetes.io/name: "78" - lmGA: iZ + app.kubernetes.io/name: pcJ + x: rfxznu spec: - activeDeadlineSeconds: 8105160926795581000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: k2nz7 - operator: 鴗¥H型u塑ɑ[ȗaü^ǟR - values: - - S - - SOs - - e2 - - key: SN37 - operator: ),訨"ʠŻz戒5跥RĮÖȴ莳芅烥XZ - - key: Usgg0wwYK - operator: ı/|Ƶ - values: - - Shgrw - - pcCanAQXkE6 - matchFields: - - key: drX - operator: k蜞挺FȤv両ðĔʼn豣@Ǚ挭靮陰Ų - - key: HCR - operator: 塊茡ǐsǬ斘ï:馭r铔沶 - - key: qAsqjfvzE5f - operator: 'Iİ!.6Áʏ!ö&{福ɨǍnD迪:' - values: - - oZT0 - - wht6Bhi - weight: 1926175553 - - preference: - matchExpressions: - - key: rz - operator: LJzęʯs裂}bB - values: - - HnoETI0PMkx - - RypJyp - - Lf - - key: 5qiexOXE - operator: 叱 - matchFields: - - key: VDH0hq - operator: ǬG緧霞郪ɟȾ倹 - values: - - 9gsy0k - weight: 1413888902 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - {} - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: EkrTV7nWi8Z - operator: 炷韘ɡƀ嫉匵鼸]$藎 ɔ騬悹侰脯 - values: - - NE33 - - key: Hup - operator: ȑ_ɽ觀N琁Nƒ嗉珥ȳ眮[ - matchLabels: - VKyGu: SeTv9 - matchLabelKeys: - - eg33OtYq - - p - - LI5Hhjht - mismatchLabelKeys: - - KVBnSCT0MT - namespaceSelector: - matchExpressions: - - key: dSPL07rZV - operator: 6K寞Ĩ\NƅǑ - values: - - 4Uj - - "" - - FYHqO - - key: KvBQTDxp1h - operator: Ȗ - - key: X9z5s03xxx3 - operator: žD?cƢôʕ騼%bx - values: - - Adkq - - 3eP - namespaces: - - aduq - topologyKey: 9RzUTpFi - - labelSelector: - matchExpressions: - - key: "4" - operator: c鸚Ľ酌ĕ玾rǵÄ - values: - - kYnbqv - - "" - matchLabelKeys: - - vFJrs - - hso - - QKrj - mismatchLabelKeys: - - lB8SMB - namespaces: - - r02c - topologyKey: xKaS - - labelSelector: - matchExpressions: - - key: if - operator: JŖ9ɴµ鑹/IJ焸Ħ£嚙āʫ[@[ - values: - - M0hOLCK - - u0 - - key: ZSjEKJsL3 - operator: v7現ů.ɔɸ垚黌雱袇 - values: - - AT - - Z0egr4aN6dv - - key: tMsupB1xD - operator: '}ž蘔DŽ_ȿ瑾暿bMb¼' - matchLabels: - QgeIJ: Mn3X5l - ZCnTNKJl: btJk3Jawl - ygz: TD - matchLabelKeys: - - XH2n0G2w - namespaceSelector: - matchExpressions: - - key: XubSMnhx - operator: Ȱ啐kD裿/I駉 - values: - - 8W6 - - key: 3f - operator: "" - - key: 3gugWW - operator: 絁ílV¾z'@ʆ鎳m假竭嗓Ŭ5膔軸 - values: - - 36yfO - topologyKey: bi50gE3 - automountServiceAccountToken: true + automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=1 - - --configurator-base-image= - - Q9 - - JLCZc - - c + - migration command: - - /manager - env: [] - image: :1 - imagePullPolicy: IfNotPresent - livenessProbe: - failureThreshold: 304 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 302 - periodSeconds: 723 - successThreshold: 355 - terminationGracePeriodSeconds: 788 - timeoutSeconds: 861 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 620 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 459 - periodSeconds: 854 - successThreshold: 952 - terminationGracePeriodSeconds: 872 - timeoutSeconds: 356 + - /redpanda-operator + image: HJ:0ORIQruw + imagePullPolicy: Always + name: migration resources: limits: - cpu: "615" - memory: "532" + cpu: "901" + memory: "687" requests: - cpu: "418" - memory: "17" + cpu: "230" + memory: "825" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - QiG - options: - - name: pK4d7m - value: W4K1f4IZaag - searches: - - 5w - - t96y3H - dnsPolicy: 堓)危沜ƭȵ`šDžbC - ephemeralContainers: null - hostAliases: - - ip: lZ2v - - ip: Oy73nSH - hostIPC: true - hostPID: true - hostUsers: false - hostname: RpdEt imagePullSecrets: - - name: KRByA - - name: 3rKSw - initContainers: [] - nodeName: cK8kqsk3XW + - name: V44FEdCU5wA nodeSelector: - 8eySA6Mq: YE9kw - Wz751pxdu: 49WYQ2U - wzW4: fX - preemptionPolicy: 學 - priority: -1208746674 - priorityClassName: rhail5Pt - resourceClaims: - - name: "" - restartPolicy: /=畝XįŨ鶓ɦ`DZē槯蒋Ō橥\Ɯʼn - runtimeClassName: EdXVp2q2j - schedulerName: JokA5C1 - securityContext: - runAsUser: 65532 - serviceAccountName: GP - setHostnameAsFQDN: false - subdomain: Cf - terminationGracePeriodSeconds: 524540695880788860 + "9": G6TGn8hP + Xm5X6sA: WTJy5Ub80 + sUw: L2Qe90hPX3 + restartPolicy: OnFailure + serviceAccountName: PJFo-migration-job + terminationGracePeriodSeconds: 10 tolerations: - - effect: ȯtȕu恡Ï^珢堯ƍɕ>n浀 - key: aZZW3 - operator: ¬ - tolerationSeconds: 1736400152056944000 - value: dh5 - - effect: 爧囶Ę鯖HýĢ旴¶Ư仍ÏŹCǔǢƝÊ0 - key: aGmmwu - operator: 礮Ls鱆CşD - tolerationSeconds: -5598207332444537000 - value: x1MEp - - effect: Õ檉Ȏſƹ霫冬8ȮL<ƫʇ!Ɖś曊ȪƸ - key: kb - operator: 禍Í} - tolerationSeconds: -7540897080678534000 - value: hJ - topologySpreadConstraints: - - matchLabelKeys: - - "" - - hWekEfgyZee - - rLF0UT - maxSkew: 481101461 - nodeAffinityPolicy: 莭.厵K鐥ȼ - nodeTaintsPolicy: x×ɷʘĞR - topologyKey: 0p - whenUnsatisfiable: 癯 - - labelSelector: - matchLabels: - ZL: Ou8yKgj - dwi: cR11 - maxSkew: 750139390 - minDomains: 1215610347 - nodeAffinityPolicy: IǞ陣Ɯ致g璪Ȉŏo駗 - nodeTaintsPolicy: 初藂q:墄N - topologyKey: WP4QXxrf - whenUnsatisfiable: NjČI蒓2Ċ檗毦I_\鶚5柴ŨhȖ + - key: 764Hdo + operator: 蓒LĔȌd-弼剉蛀õʞ檊&ĨƟ + tolerationSeconds: -5336729868846099000 + value: 1Tnob3 + - effect: 諎 + key: v6E6O0z + operator: ă + tolerationSeconds: 1484654212906765600 + value: F + - effect: 戈Ƭxsv淇a7劓ș/ſʑ鉅 + key: g6rXx4XyGEo + operator: iBnY + tolerationSeconds: -2076148757329951500 + value: W1V volumes: - name: kube-api-access projected: @@ -55415,202 +111680,679 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: cuO +-- testdata/case-033.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount metadata: annotations: - Wcv: XlJt1il - creationTimestamp: null + VcbV: lcOGXxAq + aXgpUr: GTC + yYfd9noKt: XQZD labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "78" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - yhRLU: bn88A - name: redpanda-serving-cert + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: E9qW5z namespace: default -spec: - dnsNames: - - 78-webhook-service.default.svc - - 78-webhook-service.default.svc.5pvLBDJ - issuerRef: - kind: Issuer - name: CbM6ZNJQ-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: cuO --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: T9oO + health: + healthProbeBindAddress: HXY + kind: KxekY + leaderElection: + leaderElect: false + resourceName: 9r1mE + metrics: + bindAddress: BBes3 + webhook: + port: 160 +kind: ConfigMap metadata: annotations: - Wcv: XlJt1il - creationTimestamp: null + G: 2P + btoGgD: 7n labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "78" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - yhRLU: bn88A - name: CbM6ZNJQ-selfsigned-issuer + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-config namespace: default -spec: - selfSigned: {} --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: CbM6ZNJQ-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: 78-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + G: 2P + btoGgD: 7n + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: CbM6ZNJQ-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: 78-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + annotations: + G: 2P + btoGgD: 7n + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + G: 2P + btoGgD: 7n labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "78" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - yhRLU: bn88A - name: Qi-crd-job - namespace: default --- testdata/case-066.yaml.golden -- + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + G: 2P + btoGgD: 7n labels: - 1qZ: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 4s + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: OpA-default +subjects: +- kind: ServiceAccount + name: E9qW5z namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: K9Pwc - health: - healthProbeBindAddress: Pk - kind: Tfpa - leaderElection: - leaderElect: true - resourceName: zgg - metrics: - bindAddress: Lzl8T1yaT1 - webhook: - port: 379 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + G: 2P + btoGgD: 7n labels: - 1qZ: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oWZxG4ft6-config + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: OpA-additional-controllers-default +subjects: +- kind: ServiceAccount + name: E9qW5z namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + G: 2P + btoGgD: 7n labels: - 1qZ: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oWZxG4ft6-metrics-service + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-metrics-service namespace: default spec: ports: @@ -55619,22 +112361,22 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/name: xN --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + G: 2P + btoGgD: 7n labels: - 1qZ: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 19ztDQ-webhook-service + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: xN-webhook-service namespace: default spec: ports: @@ -55642,180 +112384,285 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/name: xN --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null - creationTimestamp: null + annotations: + G: 2P + btoGgD: 7n labels: - 1qZ: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oWZxG4ft6 + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA namespace: default spec: - replicas: 266253858 + replicas: -2101466283 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 19ztDQ + app.kubernetes.io/name: xN strategy: rollingUpdate: - maxSurge: 344725018 - maxUnavailable: 538463142 - type: u職'鐠瀈殝J槉 + maxSurge: 809381714 + maxUnavailable: 966588427 + type: ɩFFlw啙錯[nǑ詹sʣm template: metadata: annotations: - Kuup: 0RGT7k - PuGCj: pBL8mQlrvD1wIq1I - creationTimestamp: null + EDY5Cv: 7uWlsJhl + egAeTM2U: DWsM11y7hkWl labels: + JPXsi: NwUbrbeQyd app.kubernetes.io/instance: operator - app.kubernetes.io/name: 19ztDQ - eSIZX: ylvYxvF - i: f + app.kubernetes.io/name: xN + d: 9uB + kTq: qHgw4mt spec: affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - - key: bCn - operator: 鼃¤礏欕寕o>Ȼ«PĆ+m梞尗 - - key: NEloyYm - operator: ʃñg4璓Õ偛萕M_潼蘜$糱ɶ拚傢sȗ - - key: Zb1 - operator: 咂ŚǝI + - key: 4NnZ8Xz + operator: ~绅緑绖Ďɵā泶*观Z騖JCŇʆ筊 + weight: -607315807 + - preference: + matchExpressions: + - key: 7cA + operator: 帊ȸ values: - - sNUUx0 - - j8AEGgOD - - Lnoj - weight: 499737970 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: RY - operator: kɑ憚誷醠ƅɓ澆簎ƫM4稃y良 + - wlS + - UGS + - "7" + - key: oYS9ncVa + operator: ǂ+ɳɆ values: - - iQQfAxq - - z3CkqXav + - 6DAsTK + - XinMIG + - fB8Nk matchFields: - - key: "3" - operator: 鈛<_ȷ瞛Ʃ餇貨椢Ÿ猊F岤ƁɄ堙ǁk穽 + - key: sYiu + operator: "" values: - - nLyOiE - - s5K8bkg - - KjJZJkZ - - matchExpressions: - - key: C5NrGF7 - operator: dz=X练姬ǽ贂ƣ + - xV6 + - HCn94 + - 8n6h + weight: -2005188209 + - preference: matchFields: - - key: mbsDXueRj - operator: '{ī?鏤TŀČ盞ȱƯ籒礽歔Ⱦq' - values: - - hKYLiv - - WzlwjJ4w0 - - key: wVzT8MARQn - operator: ǫZȡ嵔| - values: - - aQU - - WmS + - key: "" + operator: 悐Í挭当ʛ婤Ǒ鏽脼Ó雯e福桚 + values: + - QpQvNvuJ + - "N" + - J2x4oHNB4b + - key: RKswIZy2 + operator: TxKck踫ǂu1C怱ɀnj6 + values: + - CI + - key: o6OOU9 + operator: Ǭ鴃ȑ纵ŘJQ'ă屺ȓȟ哶ʋŝ妒 + weight: -763254790 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - {} - matchExpressions: - - key: IrRyd - operator: "" - values: - - j9 - - 4r - - asVGT - - key: gHnFgdtA - operator: ųFÆȉ塊ľâ槏0qEƯ - values: - - JipRy1WN - - tGQG - - F1Kz3Rk - - key: g - operator: 缈ĶÂİ}棷戆鵷ʣ0I + - key: 1n8S47 + operator: (dž鳡ʏŋ + - key: WTqAgtG + operator: Șg讫藉Fðɍ鷺S誄dz¼磦Oq躁xdzȲ + values: + - iG3n7 + - TrljmzhqWRL + - key: 4M4Chmv + operator: P蹈  + matchFields: + - key: Ioyf + operator: 謳H瞋&鹜ǂȃ\襨椅ɻ values: - - xoXe2malhBmQ - - bDLEDEUU - podAntiAffinity: + - rN6LES + - f + podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: ziVjVgVS1 - operator: 龰笍hDzʢɜǟ揧ùɏ + - key: mnh22 + operator: 4+泺ɗƅ"蝧过\|&}ȞƞmʈDž values: - - s8 - - key: fUbqzS - operator: /6hȐĥûʒg妁菔炊(dkX + - OQF + - lKYy + - key: i + operator: ƖŌzǚ殕Tă2裧枃AY殏拼ƣ奇葅侪 + - key: z + operator: 钄f隩·ơ筓鍓婼-Řx- + values: + - JfqC + - xVolqSIYk matchLabelKeys: - - jg - - b - - WtiMVCB - mismatchLabelKeys: - - fv0XiY - - pCSbL + - Kv + - 2Qy7 + - YulzaFa namespaceSelector: matchExpressions: - - key: 56so - operator: ċv鬉鸩ȤȵŞń暃Ȱe - values: - - i - - key: "" - operator: "" + - key: HVC6 + operator: 镗7ĸ + - key: e47Y8x + operator: ʠV澀唆¨韠g譜&蘖Ŗ疉Ȋž3E + matchLabels: + "": 6krn + Jj2VZSXR: h46 namespaces: - - BvcAeP - - "" - - v63k - topologyKey: sZtGVIQui - weight: -832216521 + - VDSjGmhnT + - Fgi + - Aj + topologyKey: XFc + weight: -1047422322 - podAffinityTerm: + labelSelector: + matchLabels: + JMx0r: LOdtoYqM + Z1GE1: "2" mismatchLabelKeys: - - CYt - - v + - zLI + - "3" + - wRRmoMBIN namespaceSelector: + matchExpressions: + - key: E4 + operator: "" + values: + - skTZbXhmF + - kkK + - key: yG + operator: Ƥp*¡6#ȦƝšàɼȝ+ + values: + - WFfxS + - w + - kPK matchLabels: - ja: x + Xp4N7F: LJmZ6 namespaces: - - kdbd4ONN8 - - mBsDIT3W - - jek - topologyKey: 8L - weight: -1937454382 + - c + - yGR7 + topologyKey: cLck + weight: 645381478 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: 5pERHqh + operator: ùƌ鏳Ÿ灭Em=ũũtƃ厘ïŘƗ鲩!Ƞ + values: + - wZgi + - whmc1rVP7 + - zjnYB7x + - key: tT704r + operator: ťb泆Õ + values: + - BcdYL + matchLabels: + 6TPZe8vIPWD: t + nK: 6xDe4Wq3WK + matchLabelKeys: + - 1Qz + - qTjz + - vcW + mismatchLabelKeys: + - HX + - emuNsk + namespaceSelector: + matchExpressions: + - key: wf5 + operator: 戺 + values: + - znFnDQd + - jC + - key: Dw + operator: 豄!惥ų敢昛噚ĭ羭7@餯=p)ʤu + values: + - l52aVGe3tFWxI + - MwLz + - MLpD + matchLabels: + 2AuH4: Q1edVI1tiLl + vfRT: 96Xgg + topologyKey: ckT1u5FPgtDh + - labelSelector: + matchLabels: + OPf1N: LKJLSs + Y56pQ5Y: Wm + u3BOj1w: hb3O + matchLabelKeys: + - 80nY2dm5V + mismatchLabelKeys: + - "" + - 9JG + - KJXRSPYzbCby + namespaces: + - "" + topologyKey: qoXI + - labelSelector: + matchExpressions: + - key: xGwYW + operator: 孋ƪ圸 + values: + - rGVddRP + - zViI + matchLabels: + 0ElF56Wor: s82IbV + PUppYU: kcx2y + sbC: EScNmY + mismatchLabelKeys: + - K2u9mm + - Rjtb4sxtgVi + - zNOf4eP + namespaceSelector: + matchExpressions: + - key: 9q8pHhMkkA + operator: Ɇ磋 酧EUƑ旨ɔm + matchLabels: + 5vTPzQ: kOpy9w + 6b: ir + namespaces: + - Ii2 + - Rutc + - Kpi3x + topologyKey: czlwF48 + podAntiAffinity: {} automountServiceAccountToken: false containers: - args: + - --configurator-base-image=JoEOn0Quud0uJ + - --configurator-tag=Jzj6fJDqK + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true + - --log-level=KUajU3T + - --metrics-bind-address=:8443 - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=47nK - - --configurator-base-image=UWHmykY + - --webhook-enabled=true command: - /manager env: [] - image: UWHmykY:47nK - imagePullPolicy: Never + image: JoEOn0Quud0uJ:Jzj6fJDqK + imagePullPolicy: Always livenessProbe: - failureThreshold: 624 + failureThreshold: 506 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 221 - periodSeconds: 313 - successThreshold: 335 - terminationGracePeriodSeconds: 835 - timeoutSeconds: 649 + initialDelaySeconds: 164 + periodSeconds: 831 + successThreshold: 31 + terminationGracePeriodSeconds: 306 + timeoutSeconds: 592 name: manager ports: - containerPort: 9443 @@ -55825,22 +112672,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 733 + failureThreshold: 17 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 728 - periodSeconds: 817 - successThreshold: 759 - terminationGracePeriodSeconds: 380 - timeoutSeconds: 497 + initialDelaySeconds: 308 + periodSeconds: 360 + successThreshold: 633 + terminationGracePeriodSeconds: 601 + timeoutSeconds: 913 resources: limits: - cpu: "305" - memory: "992" + cpu: "374" + memory: "929" requests: - cpu: "838" - memory: "463" + cpu: "357" + memory: "87" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -55851,33 +112698,29 @@ spec: name: cert readOnly: true ephemeralContainers: null - imagePullSecrets: - - name: T - - name: nOg2mwF - - name: i + imagePullSecrets: [] initContainers: [] nodeSelector: - pM: PqhP2g6Tgu + KEN: XwrB3BoDR8 securityContext: runAsUser: 65532 - serviceAccountName: 4s + serviceAccountName: E9qW5z terminationGracePeriodSeconds: 10 tolerations: - - effect: dIJ/缱腀ʛ,Ô銉Ő - key: HzSB - operator: ř挻iju厅笀üǑ - tolerationSeconds: -7103754535413956000 - value: T9rytQtkmkQ - - effect: 琞痡4ï劀lĝĝW幩魋bêLJ - key: LihyJ8V29 - operator: é韹ǵ*ø - tolerationSeconds: -2267351823149110500 - value: N2sZniPW - - effect: '"l敻ȓ' - key: E - operator: ĕ亓nÈţ`歠ȏws熻1ʆN蒔驈Ƀx - tolerationSeconds: -411540980645837600 - value: uFHD2K + - effect: 娨Dňț醺żk酪媨ě^灂殜Uɡ駭魌 + key: WJj5 + operator: ;Lƫɍ + tolerationSeconds: 6638288028191828000 + value: Jb8sC + - effect: Ńs皣疨 + key: PMs + operator: řh( + tolerationSeconds: -94933984884479840 + value: L79AzmX + - key: H + operator: ¥u:<ʠ潞 + tolerationSeconds: 5926173286796058000 + value: pDn volumes: - name: kube-api-access projected: @@ -55900,48 +112743,48 @@ spec: - name: cert secret: defaultMode: 420 - secretName: Wy5KjIn + secretName: 3FAHJbQe7 --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: null - creationTimestamp: null + annotations: + G: 2P + btoGgD: 7n labels: - 1qZ: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-webhook-cert namespace: default spec: dnsNames: - - 19ztDQ-webhook-service.default.svc - - 19ztDQ-webhook-service.default.svc.uM + - xN-webhook-service.default.svc + - xN-webhook-service.default.svc.xgdfzWpPMBJ issuerRef: kind: Issuer - name: oWZxG4ft6-selfsigned-issuer + name: OpA-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: Wy5KjIn + secretName: 3FAHJbQe7 --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: null - creationTimestamp: null + annotations: + G: 2P + btoGgD: 7n labels: - 1qZ: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: oWZxG4ft6-selfsigned-issuer + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -55951,9 +112794,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: oWZxG4ft6-mutating-webhook-configuration + cert-manager.io/inject-ca-from: default/OpA-webhook-cert + name: OpA-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -55961,7 +112803,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 19ztDQ-webhook-service + name: xN-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -55979,13 +112821,48 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + G: 2P + btoGgD: 7n + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 +--- +# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: oWZxG4ft6-validating-webhook-configuration + cert-manager.io/inject-ca-from: default/OpA-webhook-cert + name: OpA-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -55993,7 +112870,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 19ztDQ-webhook-service + name: xN-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -56016,48 +112893,40 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: + VcbV: lcOGXxAq + aXgpUr: GTC helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null + yYfd9noKt: XQZD labels: - 1qZ: "" app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 4s-crd-job + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: E9qW5z-crd-job namespace: default --- testdata/case-067.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: k6 - health: - healthProbeBindAddress: bo - kind: tiT1t - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: E - webhook: - port: 242 -kind: ConfigMap +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - "": knwqEfPVTu - creationTimestamp: null + VcbV: lcOGXxAq + aXgpUr: GTC + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + yYfd9noKt: XQZD labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-config + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: E9qW5z-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml @@ -56065,63 +112934,130 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - "": knwqEfPVTu - creationTimestamp: null + G: 2P + btoGgD: 7n + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-metrics-reader + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: E9qW5z-crd-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions verbs: + - create - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - "": knwqEfPVTu - creationTimestamp: null + G: 2P + btoGgD: 7n + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-default + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: E9qW5z-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - consoles verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -56138,11 +113074,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -56151,25 +113092,67 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods verbs: + - delete - get - list - watch - apiGroups: - - "" + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io resources: - - persistentvolumeclaims + - leases verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: + - configmaps - pods + - secrets + - serviceaccounts + - services verbs: + - create - delete - get - list @@ -56179,30 +113162,23 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - events verbs: + - create - patch - - update - apiGroups: - apps resources: - - deployments - - statefulsets + - controllerrevisions verbs: - - create - - delete - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -56212,9 +113188,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -56224,9 +113200,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -56236,22 +113212,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -56261,74 +113239,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: PxBN-default -subjects: -- kind: ServiceAccount - name: hqG9jAF - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-election-role - namespace: default -rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -56338,16 +113294,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -56356,549 +113318,159 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: PxBN-election-role -subjects: -- kind: ServiceAccount - name: hqG9jAF - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: PxBN -subjects: -- kind: ServiceAccount - name: hqG9jAF - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - "": knwqEfPVTu - creationTimestamp: null + G: 2P + btoGgD: 7n + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-rpk-bundle - namespace: default + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: E9qW5z-crd-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: PxBN-rpk-bundle -subjects: -- kind: ServiceAccount - name: hqG9jAF - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: axjCvWi ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: axjCvWi-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: axjCvWi ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN - namespace: default -spec: - replicas: -1982289334 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: axjCvWi - strategy: - rollingUpdate: - maxSurge: 1568786111 - maxUnavailable: 430364916 - type: ǣ捕 - template: - metadata: - annotations: - 7LmO7fVg: QCIxppkhJ - Yy: eZLU0 - nTqj1D0: u - creationTimestamp: null - labels: - "3": nQZ978Pf - 9HNKACRCp: Wq6g - YWgWYGNSgoEW: 46OXI - app.kubernetes.io/instance: operator - app.kubernetes.io/name: axjCvWi - spec: - activeDeadlineSeconds: 3041725903292901400 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: wRp3 - operator: 傤wsþ哨踻xƕ冘x鱊% - values: - - "" - - b5g - - key: 4tJXosqX - operator: ʀ - - key: Flx - operator: sŌ藾Ŵ*ʄ鍛ƞ~ġOm錭÷Jɱ| - values: - - 6s - matchFields: - - key: TIC8i5C0IxFuH - operator: 7]C偼W盔9Ȏ&ņ佗Vʝ蒥ǖ - values: - - SoZN - - IEMENHh - - key: mjoG - operator: ÿ - values: - - 2tgpD - weight: -197157498 - - preference: {} - weight: 1014387204 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: E4oSEf8mL - operator: ʐș/.湭嘶råĺ哥ʌcÈ劻鏹(羢j - - key: yNsM - operator: 埙³Á掌Ķ孝屺ʄ火r^ȶqƁ - - key: "5" - operator: '{Ɓ銬年ń' - - {} - - {} - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: eiDlj0T - operator: ȷzþ8Mu璲DƊŹwz - values: - - "y" - - "" - - 7o8 - mismatchLabelKeys: - - 5O6E - - e - - y2D1 - namespaceSelector: - matchExpressions: - - key: jRyqPA - operator: ş獖Ǒ胐9蘩拺戦ʉS忲螺Q傓Ȉ - namespaces: - - fH2J2u - topologyKey: "" - weight: 1847247856 - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: mNEX - operator: ɰ7ǯm - values: - - mrDNh - matchLabelKeys: - - 4vs2U8 - - Xpck - namespaceSelector: - matchExpressions: - - key: Vaug52udNl - operator: ƄELj - values: - - iA2z - - AZL2acrB - matchLabels: - 1NiS5: lW2 - HrdPjxielsLEQA2: VQaT - f: 1VgftZ03q - namespaces: - - fkOH - - 0ciTxy - - NfrvAO - topologyKey: lbtNGOX - weight: -1821939424 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: zhXdDw2g - operator: "" - values: - - fRD1mnH - - x6a - - IVVxA - - key: CFTD3DnuC - operator: 茗嚯*槇妍ȐZ+q詻ƞ!罬ɿDžʓ - values: - - C - matchLabels: - 9r: pqIJ8L - Z9YxgpeprM: 7Mgpqn2 - matchLabelKeys: - - iZ - - ar - mismatchLabelKeys: - - "" - - muZKSOH - - LgEI - namespaceSelector: - matchExpressions: - - key: zghTFptxP - operator: Ǟƛ颷z#Ƣ脒Ɍ%:ɠ飶³獃ƥìşn - - key: WaY1G5jY - operator: 匍隼ú1ǚ]8帻蘋庹Đ')¡f尕s - values: - - 3Zcb9 - - key: "" - operator: ƕëɷʤH犆-趟| - matchLabels: - L: wK9ecYzyVFT - namespaces: - - PEbhG2 - - il - topologyKey: aXR - weight: 2032418302 - - podAffinityTerm: - labelSelector: - matchLabels: - 5qGp6SG: "95" - mEYK: M - pZp7Dnms: 2z23PO8YY - matchLabelKeys: - - "3" - - jmHY8X8 - topologyKey: rr3EBfkMO - weight: 712720701 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - B: cDSmpXzN - Egu: tUl9KQp - yr: wx - namespaceSelector: - matchExpressions: - - key: 3BgtPvpmm - operator: 楣áť抔镭]ň{畈Sƙɐʝȹ墠Ⱦ/ - values: - - Z9 - matchLabels: - NH3TD: rpvAxz3mom - Za: UvrzQgvC2Ft - topologyKey: YbKFvWIJ - automountServiceAccountToken: true + kind: ClusterRole + name: E9qW5z-crd-job-default +subjects: +- kind: ServiceAccount + name: E9qW5z-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + G: 2P + btoGgD: 7n + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: E9qW5z-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: E9qW5z-migration-job-default +subjects: +- kind: ServiceAccount + name: E9qW5z-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-crds + namespace: default +spec: + template: + metadata: + annotations: + EDY5Cv: 7uWlsJhl + egAeTM2U: DWsM11y7hkWl + labels: + JPXsi: NwUbrbeQyd + app.kubernetes.io/instance: operator + app.kubernetes.io/name: xN + d: 9uB + kTq: qHgw4mt + spec: + automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=boxAxRu - - --configurator-base-image=kBJV23 + - crd + - --experimental command: - - /manager - env: [] - image: kBJV23:boxAxRu - imagePullPolicy: Never - livenessProbe: - failureThreshold: 957 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 464 - periodSeconds: 489 - successThreshold: 209 - terminationGracePeriodSeconds: 584 - timeoutSeconds: 671 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 21 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 909 - periodSeconds: 439 - successThreshold: 126 - terminationGracePeriodSeconds: 392 - timeoutSeconds: 692 + - /redpanda-operator + image: JoEOn0Quud0uJ:Jzj6fJDqK + imagePullPolicy: Always + name: crd-installation resources: limits: - cpu: "27" - memory: "260" + cpu: "374" + memory: "929" requests: - cpu: "66" - memory: "643" + cpu: "357" + memory: "87" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - mXmDRel - - "0" - - "" - options: - - name: x4P - value: BZIU - - name: 6v53s - value: "30" - - name: K5fNJ - value: p4y3xY - searches: - - 5Tz92V - - W4XnFCMXuw - dnsPolicy: ȫĥ\yƪ凉q撰-盳梑Ų鯂4悛ŭVŴł - enableServiceLinks: true - ephemeralContainers: null - hostAliases: - - hostnames: - - ARm - - 5mbeENc - ip: HpEC - - hostnames: - - gVP - - d3B - - B1 - ip: 0Kvbz - - hostnames: - - RFtp - - 5L - - 6jJ0pQxwY - ip: wmVMfSFk - hostNetwork: true - hostUsers: true - hostname: nz - imagePullSecrets: - - name: MWx33gQ - - {} - - name: t2p - initContainers: [] - nodeName: KGkN15 + imagePullSecrets: [] nodeSelector: - 7nv8NF: 8bQE - E1TRY: zn - preemptionPolicy: ǣ]ɕCûmF - priority: 1012712017 - priorityClassName: XRvFc - readinessGates: - - conditionType: ',鬝啪Ý' - restartPolicy: ʏʟ0u[DžŲȚ)呲火}b涱öƜɌ趥鿦 - runtimeClassName: vK17LmnrAJ - schedulingGates: - - name: D2h - - name: dXaL8Qq - - name: tGPE - securityContext: - fsGroup: 1945406407046873300 - fsGroupChangePolicy: Always - runAsGroup: -5600140835378511000 - runAsNonRoot: false - runAsUser: 3194905015790483500 - sysctls: - - name: dbg - value: Ux3p - - name: DixIbluM - value: RGtigIISV - - name: tBE - value: AC0jFpBZL - serviceAccountName: NmN2 - setHostnameAsFQDN: true - terminationGracePeriodSeconds: 3178304874460420000 + KEN: XwrB3BoDR8 + restartPolicy: OnFailure + serviceAccountName: E9qW5z-crd-job + terminationGracePeriodSeconds: 10 tolerations: - - effect: '!ɀ卐ɍ/9諽8Ĕ^' - key: 44gXm - tolerationSeconds: 8277934016578035000 - value: anUSxHGOw9Y - - effect: 判`Ǖɜ臘峪ǧ;D - key: h - operator: şDzcŒƇʝ売fǿȑ咤縪3Řv - tolerationSeconds: 4280426830307880400 - value: L4ckl5Et - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: Rt7yVKtRrPNIxb - operator: 綘ǗPw譯Ȩ浌貝oLVY#Â啜j窜恸 - - key: LHJo - operator: Ȭ讅嬗捀下ǬŜ - values: - - lj7FiOLajQ - - ONQ01y8 - - key: MsR - operator: "" - values: - - RBYb2 - maxSkew: -1030960538 - minDomains: -429957677 - nodeAffinityPolicy: ʒ诣- - nodeTaintsPolicy: ɀ僅 - topologyKey: nk - whenUnsatisfiable: éɘ.R5鏝àå=澕 + - effect: 娨Dňț醺żk酪媨ě^灂殜Uɡ駭魌 + key: WJj5 + operator: ;Lƫɍ + tolerationSeconds: 6638288028191828000 + value: Jb8sC + - effect: Ńs皣疨 + key: PMs + operator: řh( + tolerationSeconds: -94933984884479840 + value: L79AzmX + - key: H + operator: ¥u:<ʠ潞 + tolerationSeconds: 5926173286796058000 + value: pDn volumes: - name: kube-api-access projected: @@ -56918,462 +113490,333 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: Gza ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - axjCvWi-webhook-service.default.svc - - axjCvWi-webhook-service.default.svc.HgZvm - issuerRef: - kind: Issuer - name: PxBN-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: Gza ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - "": knwqEfPVTu - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: PxBN-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: PxBN-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: axjCvWi-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: PxBN-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: axjCvWi-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: annotations: - bclGU: Z0rZ - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: hqG9jAF-crd-job + app.kubernetes.io/name: xN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: OpA-migration namespace: default --- testdata/case-068.yaml.golden -- +spec: + template: + metadata: + annotations: + EDY5Cv: 7uWlsJhl + egAeTM2U: DWsM11y7hkWl + labels: + JPXsi: NwUbrbeQyd + app.kubernetes.io/instance: operator + app.kubernetes.io/name: xN + d: 9uB + kTq: qHgw4mt + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: JoEOn0Quud0uJ:Jzj6fJDqK + imagePullPolicy: Always + name: migration + resources: + limits: + cpu: "374" + memory: "929" + requests: + cpu: "357" + memory: "87" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: + KEN: XwrB3BoDR8 + restartPolicy: OnFailure + serviceAccountName: E9qW5z-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 娨Dňț醺żk酪媨ě^灂殜Uɡ駭魌 + key: WJj5 + operator: ;Lƫɍ + tolerationSeconds: 6638288028191828000 + value: Jb8sC + - effect: Ńs皣疨 + key: PMs + operator: řh( + tolerationSeconds: -94933984884479840 + value: L79AzmX + - key: H + operator: ¥u:<ʠ潞 + tolerationSeconds: 5926173286796058000 + value: pDn + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-034.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: d7O64pqge + apiVersion: EOV4Z9 health: - healthProbeBindAddress: nqsbjJiH - kind: vlqn1EfQw3x + healthProbeBindAddress: Rd677 + kind: Yb leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io + leaderElect: false + resourceName: bz metrics: - bindAddress: "" + bindAddress: e68en1Qgh webhook: - port: 111 + port: 294 kind: ConfigMap metadata: annotations: - MXZN: GguW - t: 64UZsJyzd0Fl - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v25.1.4 - fYyBJj2Al: 00TYG - helm.sh/chart: operator-25.1.4 - name: CFnO9s-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - MXZN: GguW - t: 64UZsJyzd0Fl - creationTimestamp: null + d0ss5u: nUoDUR labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v25.1.4 - fYyBJj2Al: 00TYG - helm.sh/chart: operator-25.1.4 - name: CFnO9s-metrics-service + app.kubernetes.io/name: DWwrL + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: pki-config namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: bNOJ --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - MXZN: GguW - t: 64UZsJyzd0Fl - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v25.1.4 - fYyBJj2Al: 00TYG - helm.sh/chart: operator-25.1.4 - name: bNOJ-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: bNOJ ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: - MXZN: GguW - t: 64UZsJyzd0Fl - creationTimestamp: null + d0ss5u: nUoDUR labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v25.1.4 - fYyBJj2Al: 00TYG - helm.sh/chart: operator-25.1.4 - name: CFnO9s - namespace: default -spec: - replicas: 469365847 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: bNOJ - strategy: - rollingUpdate: - maxSurge: 279731675 - maxUnavailable: 959318152 - type: ǺɹW%M搓 - template: - metadata: - annotations: - 1eBjL: 7dCt4IX - ERZ5g: "" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: bNOJ - hZcnuz: RFVo8VHB4 - tZVMLHI1: 2e7fk - spec: - activeDeadlineSeconds: -1705312198462537700 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: i8 - operator: 鶨b驍ǾÂɈgʇ洟Y+ĐIJ秸 - values: - - OsCE - - Iq0KpC8b7 - - 9h - - key: wd8p - operator: l - values: - - QukCF - - key: vDwZB - operator: jK纮毄蝌 - matchFields: - - key: 8Z - operator: ''',' - values: - - G1OUWwe - - lr - - nVwaLdM - - key: 9bM6Ejx - operator: \OŌi艠Ĵ萗:ɟ岔b珌4 - values: - - Cx - weight: 2123660020 - - preference: - matchFields: - - key: 1tw - operator: É妡褂緮Ş蹤îX伌珹Ʒ糤Ş¿瑥Zə - values: - - qDFyAM4q - - key: TRJrS2KBFsn - operator: 蝞?4鯚 - - key: A9w0shIOe - operator: FɨŸɆƼ咉Xyk皰]D¼ - weight: 1241138408 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DWwrL + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: pki-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: DWwrL +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: + d0ss5u: nUoDUR + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DWwrL + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: pki + namespace: default +spec: + replicas: 577578114 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: DWwrL + strategy: + rollingUpdate: + maxSurge: 748171411 + maxUnavailable: 317660911 + type: Ğxyi怰ɇ俘碈躴ɧƗU櫏ƃ + template: + metadata: + annotations: + Qjw: FXjM5Um + hkghZk: Ye + zYq837rS: jiCRfZ + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: DWwrL + z: 1aI + spec: + activeDeadlineSeconds: 4330483736244146700 + affinity: + nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: {} + weight: 1200071839 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - - key: h9HCbqo - operator: Ō[4两4 9罈廍DŽôʅǠq饀zh - - key: UM - operator: ɣ?恗.ĠƴYÂ即径"L + - key: F3n52q2 + operator: v + - key: px + operator: è>}Zǩ+©淲ɵt + - key: 6PJ3 + operator: 亣迎爎 + values: + - 4e2EKVn + matchFields: + - key: Py3I + operator: ɻʀƈ閤蜭掼1壘61¢郢ė;诊鐀ʙ values: - - IiSf4OydHDi - - "" - - udaPvX + - zDgTGdAHQ + - AyDJ8jEG + - key: mjH9Ts + operator: ǖU宭ʤǞG軀 - matchFields: - - key: B - operator: 泐Õ + - key: Rn + operator: ċr闹韦 + - key: dno5 + operator: G佈婧裥皪Ʀèc嵸B媍袺朵VŁ嚍桦\ values: - - Yg - - z - - 2aL + - v0zu + - key: 2iQnLMQd + operator: "" + values: + - xZou3yXJ + - FBonxk podAffinity: preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + matchLabelKeys: + - b + mismatchLabelKeys: + - RLIM + namespaceSelector: + matchExpressions: + - key: EArLv50 + operator: ƛ炫YȜą + namespaces: + - 3v0 + - c39L + - LEwzs + topologyKey: hfk5voB + weight: 312719005 - podAffinityTerm: labelSelector: matchExpressions: - - key: PHTg - operator: qU斠ǭ鄧Ȧ鬞I荎罜钢Ȓ徵ɺnt饨x4 - values: - - Xxngg - matchLabels: - E55M: 5XWJU - mismatchLabelKeys: - - A2pJfZLq + - key: KJ + operator: Fʃ近ʨđ蛐湴愷 + matchLabelKeys: + - l namespaceSelector: matchExpressions: - - key: tRzdVFPrUU - operator: '>?ºG奅''愠' - - key: hYtE - operator: 'WŦ梏嵻ɵ@ʍ枭D4ż:' + - key: 17B + operator: ^*R硸y脽ɼ0 + values: + - t namespaces: - - N3cup14cvV - topologyKey: 4q7 - weight: 1803004877 + - BiLR + - Ffn3 + topologyKey: A7d + weight: -117253668 requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - PUqk: OOASm - aVhG: G - kCvGTHgW: QuKzd - matchLabelKeys: - - AemkoN - - 14TGfGu7joP - - 31KoX - namespaceSelector: - matchLabels: - 7zlC: xzrAfMezVw1 - EIlYy: sOG3m - WEiyw52S4Ry: qqluP - namespaces: - - zrjMH - - "" - - rUf0pMp4 - topologyKey: ZrnvTR6hLJWm - labelSelector: matchExpressions: - - key: 2o3JO - operator: ɔ鼘JǰW - values: - - ZEIaf - - W7zSM7 - - key: TtAoc - operator: 屈ɜ凋諗Ù1辚=`0ǧ译暈:r + - key: 9x78gn + operator: Ɏ蠠Ňƭ镖%Ź蕃瑡 values: - - czEeFJr6rr - - key: zDK - operator: 櫲*ɗ1ǒU窚ƅ­ - matchLabels: - 6QR4V: q4 - al7wjCH: Diz9 - xTq: JXTV9Q - matchLabelKeys: - - nq24l - - qnZWSZ - - g + - 7HLJ + - p + - "" + mismatchLabelKeys: + - qbfoV namespaceSelector: matchExpressions: - - key: xDoGIoFFP - operator: '@頄ȫ;夈' + - key: "3" + operator: Ttʑ屈Mɼ values: - - nWbBqNhHt - - c8QL + - yVmjQ + - key: ZjtfAB + operator: ~碵£¸ƶǟ叻瀝Ď慡箮{遡zʛȤyò + values: + - ydgg + - VG + - UxfnL + - key: yx + operator: j粿伬O'Ŝ凶醻-}ȝƄ\褴T犛 matchLabels: - VJcC: qKz15NI - mFF: pFS - xStpVFZD3l: Ox4DD72 + "9": AinoIOP + p: MLnDd6 namespaces: - - jk - - PcKpFF1 - topologyKey: qJ - - labelSelector: + - MspV + topologyKey: FPHrdAATn + - namespaceSelector: matchExpressions: - - key: SU4p0A35nW - operator: "" - values: - - 9S8F - - IdUcrwI - - DB7y - - key: KdXTw - operator: 遟G笻m - values: - - MFPEmv - - key: 1cqycMQPiR - operator: "" + - key: 5r68 + operator: ɔ俲Ù>欋庱鎥&憗蝥垄鼘`I_/ values: - - LzQr8kbU - matchLabelKeys: - - "" - mismatchLabelKeys: - - UlhGXW - - WKdRue0e - - LXBpBIJ - namespaceSelector: - matchExpressions: - - key: uwWKVm - operator: ɜX[莄噮ȝȄV檨ŏm + - jbLD + - TxYqx95 + - Tt matchLabels: - ByZyC2j: ra - qghvd4: hP3 + "": OYXgqdh8f5 + wjt: "" namespaces: - - Uqd - - 5z - topologyKey: 2koIfv - automountServiceAccountToken: true + - qkQ2SvOu + - L + - ML + topologyKey: ux + automountServiceAccountToken: false containers: - args: + - --configurator-base-image=bR + - --configurator-tag=TxCthY7Ie + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=HXXm - - --configurator-base-image=7wdG0 - - dWzxr3xXRM - - vEF - - DAM + - --log-level=Drto4uB + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: 7wdG0:HXXm - imagePullPolicy: Never + image: bR:TxCthY7Ie + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 945 + failureThreshold: 824 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 682 - periodSeconds: 459 - successThreshold: 594 - terminationGracePeriodSeconds: 298 - timeoutSeconds: 41 + initialDelaySeconds: 454 + periodSeconds: 132 + successThreshold: 886 + terminationGracePeriodSeconds: 120 + timeoutSeconds: 425 name: manager ports: - containerPort: 9443 @@ -57383,153 +113826,120 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 635 + failureThreshold: 575 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 256 - periodSeconds: 813 - successThreshold: 356 - terminationGracePeriodSeconds: 275 - timeoutSeconds: 629 + initialDelaySeconds: 591 + periodSeconds: 812 + successThreshold: 305 + terminationGracePeriodSeconds: 564 + timeoutSeconds: 832 resources: limits: - cpu: "746" - memory: "288" + cpu: "773" + memory: "849" requests: - cpu: "620" - memory: "29" + cpu: "697" + memory: "173" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true dnsConfig: nameservers: - - iJM - - XDRoJ6YLA - searches: - - "" - dnsPolicy: "y" + - 0r33Xpgukjl + dnsPolicy: ĴjU<ĭ鯯C塊韞9斌ŏ鲌ĸ郦 + enableServiceLinks: true ephemeralContainers: null + hostIPC: true hostPID: true - hostUsers: true - hostname: 6SYwau + hostUsers: false + hostname: YF imagePullSecrets: - - name: 1K - - name: Oiv9Q40 + - name: caRB + - name: ICNY + - name: s4 initContainers: [] - nodeName: CvCXOqSOde1 + nodeName: mmV nodeSelector: - ZmT: "" - imEN0Z1: nxrD - zWlEzg: 08Lmn - preemptionPolicy: 灸艟 Z嬡騱 - priority: -1528017339 - priorityClassName: rMxc6W + 8LoHkUPb: MwUDT + A: RwN + mkC4F: ZKTVuTCYZPqb + preemptionPolicy: xʐ铩躐Xy扁戀(顨Ÿ[Ɵ藇ȓZ + priorityClassName: fTs readinessGates: - - conditionType: ɏX黃Ȧ8Ui郜鎼i - - conditionType: 筧ķ!欸Ⱦ掜7艭菁ȫ泡ǯ + - conditionType: 枝X恈(ɜɈ毬$/p璜ƌƑáµ + - conditionType: ƫ藬ŌlƤ沟K豱ǻ嵴Ǵ稛 resourceClaims: - - name: gnBb0HOM - restartPolicy: 敊暈泾pD紌Ȓ愫Aʏ嚢6T - runtimeClassName: ouiV - schedulerName: mHTNvj - schedulingGates: - - name: F0TuqyX - - name: Fh1 - - name: "" + - name: GaS + resourceClaimName: zS8D9vO + resourceClaimTemplateName: wjMt + restartPolicy: 奂窀iZʌ + runtimeClassName: FSbFgvc9e + schedulerName: fqnzd securityContext: - fsGroup: 2245000337122880000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 384494554013477250 - runAsNonRoot: true runAsUser: 65532 - serviceAccountName: Ns - setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: WKYlR - terminationGracePeriodSeconds: -7008269543804538000 + serviceAccountName: qkhdSV + subdomain: z07et + terminationGracePeriodSeconds: -4094499190422440000 tolerations: - - effect: éȨ椬NūP±鞉煞ǟBE驒ȵȓìƳ蟖{ - key: k - operator: ʖʞ輂Ĭ{DŽȭ臼ƊG俅 - tolerationSeconds: 6233334905321045000 - value: jGlyr - - effect: ɸƸľȼQVm{惁gȓ曂w1C - key: TYCa - operator: 薏!ȴŋ鰛 - tolerationSeconds: 6216053217729322000 - value: kKA74L - - effect: SD'瞎P*缁 - key: me1 - operator: 寤 - tolerationSeconds: -2750578968371669500 - value: WyiR + - effect: Z徥 ¨轌ŹG氭 + key: 98DU7 + operator: ƹ增2pÕ鉓鷧Ć簸 + value: YwG topologySpreadConstraints: - labelSelector: matchExpressions: - - key: AuC8Y61 - operator: '{瘰r爘*ǰ' + - key: CQ2ejdxv3xl + operator: ƅvĺ榒Ǣǽ values: - - ttlC3AE - - 1B - - key: 5r - operator: 脕z條*ɮfȩʖ + - ia2V4 + - xW7V1L1 + matchLabels: + REdHD: 3H + VpAKr: 0gwXt matchLabelKeys: - - WWjXY4KNR979 - maxSkew: -1184923908 - nodeAffinityPolicy: íĈǠ蟔 - nodeTaintsPolicy: ƹ儯丢*0発P - topologyKey: EI - whenUnsatisfiable: 妩Ǩʘ頨喁^njǜȅǚIw堄駬ɕ瞗C膵 + - Uw2qv9MNi + - xpTfNidzQ + - 4JvO + maxSkew: -2038132597 + minDomains: 474414096 + topologyKey: LjEBwM + whenUnsatisfiable: ɂA奄剝鹸^炎 - labelSelector: matchExpressions: - - key: OFRTlW - operator: ĉhɽĦE + - key: RnZ1F + operator: 雿辠 values: - - WZGO - - f83Jp - - key: EuhMF - operator: ɋ&掱·a2¨ + - X + - Sex576J6 + - key: SGJtK3AoXbel + operator: 玡揊六鈉蜾 values: - - iNF0 - - IeElBaz - - JcO + - mb58k15 matchLabels: - lufNES: EWoWd0 - matchLabelKeys: - - d - - Q9mw8 - - kyBs1 - maxSkew: -1851729964 - minDomains: 90497520 - nodeAffinityPolicy: "N" - nodeTaintsPolicy: 7瑾俎ȟTF賩Ĥ裑ƥÎǫ蹔填F" - topologyKey: dFAI44X - whenUnsatisfiable: ~淓焒&ŚZ様[tȭÏ,ųȭ + LB3xE: Razg + oVrPp: "" + maxSkew: -1710781742 + minDomains: -1286416089 + nodeAffinityPolicy: ņr柞DwĀ|ȹ + nodeTaintsPolicy: 楃[ + topologyKey: VNKnS + whenUnsatisfiable: Xʁ弫ɥ>Ru - labelSelector: - matchExpressions: - - key: Qqyo1kCJ - operator: 閆b睩ēW襌Z媖CS%ɮ衻Ğ'R - values: - - udM matchLabels: - bh6Z: L7m - j8WmMou: SCFrQIqK2ikBf - oi: C5iE - matchLabelKeys: - - p7Op0mVOZ - - WyCG15f - maxSkew: -2008023906 - nodeAffinityPolicy: '&渊á E$叩>ãïʆ' - nodeTaintsPolicy: 芞 - topologyKey: IPa5T - whenUnsatisfiable: nČ俪辨u'Ł9Yė°竣]ć擯>b屠ƕ + 1C: w1av3yVG + Ba1qYUwebF: VwUosVHJovBtg + YbksmGW: W + maxSkew: -634525529 + minDomains: 188651512 + nodeAffinityPolicy: 4篈Ɯĉ>ľɫ饒 + nodeTaintsPolicy: gYi嬑餴Ɛž鋵Ŋ©"ł hµJȄ锅û + topologyKey: D + whenUnsatisfiable: NXċǰ)ɩ英 volumes: - name: kube-api-access projected: @@ -57549,185 +113959,112 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: j - - name: Bo - - name: IRrU6r - - name: bKEcelo ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - MXZN: GguW - t: 64UZsJyzd0Fl - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v25.1.4 - fYyBJj2Al: 00TYG - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - bNOJ-webhook-service.default.svc - - bNOJ-webhook-service.default.svc.NKh - issuerRef: - kind: Issuer - name: CFnO9s-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: j ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - MXZN: GguW - t: 64UZsJyzd0Fl - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v25.1.4 - fYyBJj2Al: 00TYG - helm.sh/chart: operator-25.1.4 - name: CFnO9s-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: CFnO9s-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: bNOJ-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - MXZN: GguW - t: 64UZsJyzd0Fl - creationTimestamp: null + aQTZUA5WuF: aTK6 + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v25.1.4 - fYyBJj2Al: 00TYG - helm.sh/chart: operator-25.1.4 - name: CFnO9s-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v25.1.4 - fYyBJj2Al: 00TYG - helm.sh/chart: operator-25.1.4 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: CFnO9s-validating-webhook-configuration + app.kubernetes.io/name: DWwrL + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: CstKYkW7-migration-job namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: bNOJ-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v25.1.4 - fYyBJj2Al: 00TYG - helm.sh/chart: operator-25.1.4 - name: -crd-job + app.kubernetes.io/name: DWwrL + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: pki-migration namespace: default --- testdata/case-069.yaml.golden -- +spec: + template: + metadata: + annotations: + Qjw: FXjM5Um + zYq837rS: jiCRfZ + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: DWwrL + z: 1aI + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: bR:TxCthY7Ie + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "773" + memory: "849" + requests: + cpu: "697" + memory: "173" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: r1NnJaBx4 + - name: lUc99 + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: CstKYkW7-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: Ơ崐鰫Ģ镨9+ħ + key: Pjmf + operator: _ŰÑlƕ° + tolerationSeconds: -6014264515021759000 + value: yP + - effect: lǩƚ低O櫕ǂã$0ħ轗 + key: la + operator: yƂs3`公jțEţZ0ÄĔ矻酙û + value: vlSnSQWGGk + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-035.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -57735,49 +114072,46 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - HQJtGQ: "4" - J1VZibc: dy4OXHkP - creationTimestamp: null + CeHQ2x: D0 + QGq: Ctb5y + d61fzrR3Z: "" labels: - 2RSj: YyoP + 1uYU4lBxTVH: KCC app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "N" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 9q + app.kubernetes.io/name: tpTbiY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: oeKQJ8l namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + apiVersion: OR8 health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig + healthProbeBindAddress: Z3R + kind: k699PVuyMw leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io + leaderElect: false + resourceName: 8iT6asnlRB4 metrics: - bindAddress: 127.0.0.1:8080 + bindAddress: RqIu23bFU webhook: - port: 9443 + port: 333 kind: ConfigMap metadata: annotations: - EEjDa: KlmyGoaLD - eK9S1me: d7Jx75gs - x: WycC4D7Xr - creationTimestamp: null + YYIq: cxma6H labels: - 2RSj: YyoP + 1uYU4lBxTVH: KCC app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "N" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: zLyH-config + app.kubernetes.io/name: tpTbiY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: pTI-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -57785,18 +114119,15 @@ apiVersion: v1 kind: Service metadata: annotations: - EEjDa: KlmyGoaLD - eK9S1me: d7Jx75gs - x: WycC4D7Xr - creationTimestamp: null + YYIq: cxma6H labels: - 2RSj: YyoP + 1uYU4lBxTVH: KCC app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "N" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: zLyH-metrics-service + app.kubernetes.io/name: tpTbiY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: pTI-metrics-service namespace: default spec: ports: @@ -57805,25 +114136,22 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: "N" + app.kubernetes.io/name: tpTbiY --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - EEjDa: KlmyGoaLD - eK9S1me: d7Jx75gs - x: WycC4D7Xr - creationTimestamp: null + YYIq: cxma6H labels: - 2RSj: YyoP + 1uYU4lBxTVH: KCC app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "N" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: N-webhook-service + app.kubernetes.io/name: tpTbiY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: tpTbiY-webhook-service namespace: default spec: ports: @@ -57831,174 +114159,295 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: "N" + app.kubernetes.io/name: tpTbiY --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - EEjDa: KlmyGoaLD - eK9S1me: d7Jx75gs - x: WycC4D7Xr - creationTimestamp: null + YYIq: cxma6H labels: - 2RSj: YyoP + 1uYU4lBxTVH: KCC app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "N" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: zLyH + app.kubernetes.io/name: tpTbiY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: pTI namespace: default spec: - replicas: 465449617 + replicas: -670113322 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: "N" + app.kubernetes.io/name: tpTbiY strategy: rollingUpdate: - maxSurge: 1716441912 - maxUnavailable: 1988867546 - type: DoW梃LJ珇?÷ŧŷGcsʃ囀i跿v閚 + maxSurge: 1594318053 + maxUnavailable: 473165363 + type: '>Ț暻撮~^抎ʗ譚' template: metadata: annotations: - "": vJ - QtG: Hi9KT5pHY - Vb79: 42karr1J - creationTimestamp: null + "1": bGQ + O: AzfuSRP + w: 7okYgwj labels: - DLTGtucciFffWT: zpXmi - PaXb: VwCnSE - RFcNaS: Gx9GL - Y9: my - YEgVl: "" + Q9gGjEwAk: wp1llpZqZ app.kubernetes.io/instance: operator - app.kubernetes.io/name: "N" + app.kubernetes.io/name: tpTbiY + b0: liva + uMxZ9msZj: wtl spec: - activeDeadlineSeconds: 7704266910641800000 + activeDeadlineSeconds: 4531222761174932500 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: + matchExpressions: + - key: nbnr9Pzt + operator: Ƥ擽緩(牊育荦ƌ§oƉ濒ò matchFields: - - key: "" - operator: 鄺ƴƨ隋靿嫑苕駒Ķ梤 - values: - - GIs - - "" - - csrvTLc3Op - - key: PHMEf - operator: 黄ɵ空ʪhȾ¸ÉNJİf垉qx{蘮Ƒ颓 - values: - - Z9MoXeFiqyz - - XcUIb - - key: o1S1BSCoJHL - operator: 蝊蛷Č勅ưä^i"鉤晄ƒĊ; + - key: "3" + operator: R7踿嘻 values: - - PgA7xsO - - C - - cL - weight: 2065024832 + - kyORhoxV + - 4mTK + - key: "" + operator: 謊ɩ#X楽 + weight: -50412677 - preference: matchExpressions: - - key: FdO - operator: Ȗ*Ɓ - - key: Ncs7mi96L6 - operator: 囮銕Ŋ霈ɼå筹Ɩfʕ磲6µ蓪颡淖 - values: - - wV53KgeWARD - - GF - - jB31k - weight: -208456974 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: uZsr - operator: L錄X閵远ł + - key: lC7HvpLn623 + operator: 騥pɖ欁ŭwȭɯ幢k values: - - m8I3PZcF - - matchExpressions: - - key: yAt - operator: Ⱦ乒Æ蠑ɡʑ4Ȫ矗? + - KRZKS9zZqO + - key: 4j0ARpo5H1G4 + operator: 4 Ɛ法E駻dž櫮d菕 values: - - q - - key: qYW - operator: \w + - nR6i + - 2nPF + - ybEmKP0 + - key: H28F + operator: ǑP炮g醍魈ɝ`b values: - - 2mo9LHD - - wCFX + - 5X8lLTBGV + - sEw matchFields: - - key: UXs6xwxn3 - operator: kɸO\嵀竰9婍莥襮餐屇ɟzĖ蛫墰 + - key: 4q + operator: 鿴#!~禌<监Lʒ枎咜[胊鐑#fK遴Ɣ values: - - C - - 07NFVz1Lq - - 2osAV9 - - matchExpressions: - - key: KowC - operator: "" + - PR + - key: "" + operator: Ƥ寊^Qlp[dz,宴W values: - - 9Lt5 - - AGiTVS - - key: 7crCw - operator: 懵 + - P + - YdOYS + weight: -1641954935 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchFields: + - key: PJQeKq1xhN + operator: ÙFɶ嘓Í崲i values: - - RzMiQ - matchFields: - - key: aiXn - operator: 猯媫ɠ×锊H8ȳgūTĚĨ - - key: "" - operator: 詃ûŦ0琝灎ɼ - - key: FjLA - operator: 穤 噪&%ɮy龨騦罙Ư¯剩=(聬彰 - podAntiAffinity: + - PcRYLk + - ZI3U4I + - iMdX + - key: zn + operator: 緈Ǩǥŏ + values: + - "1" + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: du9e + operator: jÉǛȰ|嗍鳢ǃɀZ偊İ] + values: + - qsr4jApW8aH + mismatchLabelKeys: + - xy + namespaceSelector: + matchExpressions: + - key: e8SnZW0VH4h + operator: ɧǗ-zɒÝʎ镶WY嗡Î>嗻 + values: + - ZhdLT + - key: XGH6vav + operator: .鹅cǚɇ>ȑÛG嬥H訜Ɠ珏Èś央徯 + values: + - "2" + - "" + - key: FVUF + operator: )ćŸ;@ņ乍ŏƦ塉Ũ/Ǎɱ册ȇ噪X + values: + - RPcRn4lOSvuEMNu + namespaces: + - yFXxFfLUU + - "N" + topologyKey: jEFCs5XL + weight: 13348579 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: - matchExpressions: - - key: kwjiJdVxd - operator: ɨ烚鹳Ŝ陎) - values: - - "3" matchLabels: - dcdgYC: Pv9sOER0M + Pp2Kxr45AueQ: or + jsxn: KFMew + matchLabelKeys: + - J0dGZrW + - xwmJ3J + mismatchLabelKeys: + - IWWnwPy namespaceSelector: + matchExpressions: + - key: nB9 + operator: ŀ + - key: RCgR + operator: ȚŝºČ撘胕ŷŒ崲塉亴穊[憘ɕy + - key: hWAJO + operator: 砇J坮猴嗳h伍:Ů僒6wéģċ暢瓖霅 + values: + - 9YUkQ + - dYpSZn + - cj matchLabels: - gL01: YoqqG - yy: Eliiemq5 + WH: WiEIT namespaces: - - QHas - - KQG8q - topologyKey: I - automountServiceAccountToken: false + - "" + topologyKey: JKmCAK + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: 0y + operator: 砋]漸A悐WŁŧru` + values: + - 3ko47fDIvLU6BW9P + - LrVxJGxu + - gDz9txQYsse2BY + matchLabels: + JJ1: dBmDBj + R67wSIbe: 2rTqzpo3Z + qzsk: atKUW + matchLabelKeys: + - PwxTsh89 + - h8uCs + - mWj8AFVtH + mismatchLabelKeys: + - 8qp3 + namespaceSelector: + matchExpressions: + - key: EylKk + operator: Ŝ煙ƌ|]ʥs + values: + - EdENHBOoMbHEF + - key: "6" + operator: Ƒ娮Ȝʟ#>ƾ_ + matchLabels: + 4R: SRRAAJK2B2 + z5: RARpMWb + namespaces: + - ZJ8r81 + topologyKey: 4fVcs6tXj + weight: 528544987 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: fbw + operator: "" + values: + - l4Czz2 + - D1XRF1RQ + - sie + - key: WeYnpI9 + operator: '`痲ʄŢ' + values: + - X7 + - Abnqrg + - "4" + - key: Am + operator: E蜧Q娀5d杣Ǽ斧ƽ卞-补覡击T噅椅 + values: + - n4yslrrhE + - LG641HNHK + matchLabels: + TmPxzGi: 0y7U4M + Y4: NWrNILhu + matchLabelKeys: + - tQZRGa + mismatchLabelKeys: + - DEgj1my8 + namespaceSelector: + matchExpressions: + - key: W + operator: 頞5úM'矻u + values: + - "" + - 3H + - "n" + - key: MBzBe8 + operator: 鸲矅鲷I"ƛƫ1hƃǦǭȀ + values: + - Rskd + - VhFy + - qwQ6 + - key: ksKMbnq + operator: '*晉奖稧煦屉' + values: + - GbfQ8 + - HKUb71V3 + matchLabels: + mj03EWRRvPt: hxk + w1ol: "" + wFPpO: CBujpHS + topologyKey: JeQI + weight: -2019119250 + - podAffinityTerm: + labelSelector: + matchLabels: + S5jKH1u: lyNJnLw + matchLabelKeys: + - vbPQ + mismatchLabelKeys: + - AsoYUVd + - DU + namespaceSelector: + matchLabels: + "y": NP + namespaces: + - q + topologyKey: W6HCfAD + weight: 1477258591 + automountServiceAccountToken: true containers: - args: + - --configurator-base-image + - --configurator-tag=9dFbDt + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true + - --log-level=W + - --metrics-bind-address=:8443 - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=Vk - - --configurator-base-image=xmIP4HeALlQ8 - - oxdTcKZmy5 + - --webhook-enabled=true command: - /manager env: [] - image: xmIP4HeALlQ8:Vk - imagePullPolicy: Never + image: :9dFbDt + imagePullPolicy: Always livenessProbe: - failureThreshold: 41 + failureThreshold: 672 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 771 - periodSeconds: 259 - successThreshold: 775 - terminationGracePeriodSeconds: 289 - timeoutSeconds: 787 + initialDelaySeconds: 113 + periodSeconds: 549 + successThreshold: 255 + terminationGracePeriodSeconds: 770 + timeoutSeconds: 818 name: manager ports: - containerPort: 9443 @@ -58008,22 +114457,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 309 + failureThreshold: 74 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 959 - periodSeconds: 499 - successThreshold: 424 - terminationGracePeriodSeconds: 603 - timeoutSeconds: 287 + initialDelaySeconds: 741 + periodSeconds: 13 + successThreshold: 90 + terminationGracePeriodSeconds: 626 + timeoutSeconds: 742 resources: limits: - cpu: "310" - memory: "803" + cpu: "492" + memory: "772" requests: - cpu: "923" - memory: "732" + cpu: "77" + memory: "813" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -58035,79 +114484,72 @@ spec: readOnly: true dnsConfig: nameservers: - - w - - JIz - - lZX2s + - oO9TK + - a7iKxeZH + - M8 options: - - name: 298T9EO - value: RX5p - dnsPolicy: anº笓辝K*Ƞȫ劭 + - name: bz + value: BJS + - name: m4uHjEZub8 + value: Tia1Eyv + searches: + - 72bb + dnsPolicy: Ǝz#猰éµʘzG_蘬L豫溁 enableServiceLinks: true ephemeralContainers: null hostAliases: - - ip: "87" - hostnames: - - LR - - ztMTP - ip: WXU1H + - kHs4NGBV + - fOGkmhX + ip: mA1P - hostnames: - - HK - - HZog - - ki - ip: oy - hostIPC: true - hostNetwork: true + - oPO54gA + - mkHNt + ip: C + - ip: gjG7 + hostPID: true hostUsers: true - hostname: hfPH0 + hostname: GvE7a7O3G imagePullSecrets: - - name: hiSb + - name: UnZKVrw initContainers: [] - nodeName: 5JBxXslIgCEb + nodeName: N3QlL nodeSelector: - 62Uu: AFw4hagGF - OPJh0: 9bWd - SSr1IGR: "" - cJO5: 3skt - preemptionPolicy: "" - priority: 1801948378 - priorityClassName: 0mynE + pTbC: MCE3kqTeYQ + preemptionPolicy: WɸĤz]85ʼn錳ʖŰK礠 ?萙 + priority: -2046956516 readinessGates: - - conditionType: À妔噜u塋ɽė¥ - - conditionType: 聾Ćý郘āŦ5Ȱȿ铷4欪蓥 - - conditionType: q - restartPolicy: QɬV猇荎秖 - runtimeClassName: z3Fvzfv - schedulerName: 7Ql5Wgrk + - conditionType: 从ɴnj)h + - conditionType: Ǣ¡ô¡ɧ + resourceClaims: + - name: q + resourceClaimName: 5Uvkrwi + resourceClaimTemplateName: GA3VcGfu + restartPolicy: Ɣ眕ámǧMa2ò + runtimeClassName: OJ + schedulerName: Is4St +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + schedulingGates: + - name: 1A + - name: NJpw securityContext: - fsGroupChangePolicy: Always - runAsGroup: -289679913673291100 - runAsNonRoot: true - runAsUser: 3277457960714383400 + fsGroup: 5399875565831145000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -2894743999424822000 + runAsNonRoot: false + runAsUser: -3348099854506448000 supplementalGroups: - - 4004021037495296000 - - -7849641669981918000 - - -2841407942728574500 - serviceAccountName: dd823A + - -8474922347268491000 + serviceAccountName: cH3njF setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: UIv - terminationGracePeriodSeconds: -3127580359084209700 + subdomain: Edkae9gT + terminationGracePeriodSeconds: -4141935907216843300 tolerations: - - effect: O6 - key: S94cTX5 - operator: ʘ~梧9絛R<Ǯ姺鵍薓ȄƆÜɃ擎Ǹ垴 - tolerationSeconds: 471416478218419140 - value: 9Hu - - effect: :轚řYʟ - key: pfuyWy - operator: Ĥʗ - tolerationSeconds: -5247169065928297000 - value: 5yiC - - effect: Ȏ璝qɲD蘎, - key: O1EWo - operator: 況6ʡ鞶潃ț儼涘沬 - tolerationSeconds: 6277993023857373000 - value: l + - effect: çv翰瘑ʞ煥n磄4jș$'嵺ůƤ汙 + key: XG + operator: ~Ģ + tolerationSeconds: 8980242645943914000 + value: vV8V volumes: - name: kube-api-access projected: @@ -58130,57 +114572,47 @@ spec: - name: cert secret: defaultMode: 420 - secretName: s2nFJW - - name: "" - - name: PyZLCyzj - - name: R + secretName: 1k8 + - name: ZKUY8P --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: - EEjDa: KlmyGoaLD - eK9S1me: d7Jx75gs - x: WycC4D7Xr + annotations: null creationTimestamp: null labels: - 2RSj: YyoP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "N" + app.kubernetes.io/name: 3SyCJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 name: redpanda-serving-cert namespace: default spec: dnsNames: - - N-webhook-service.default.svc - - N-webhook-service.default.svc.W4sbkdoCM + - 3SyCJ-webhook-service.default.svc + - 3SyCJ-webhook-service.default.svc.E3h6ntJE issuerRef: kind: Issuer - name: zLyH-selfsigned-issuer + name: QSmzerg-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: s2nFJW + secretName: 1k8 --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: - EEjDa: KlmyGoaLD - eK9S1me: d7Jx75gs - x: WycC4D7Xr + annotations: null creationTimestamp: null labels: - 2RSj: YyoP app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "N" + app.kubernetes.io/name: 3SyCJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: zLyH-selfsigned-issuer + name: QSmzerg-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -58192,7 +114624,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: zLyH-mutating-webhook-configuration + name: QSmzerg-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -58200,7 +114632,7 @@ webhooks: - v1beta1 clientConfig: service: - name: N-webhook-service + name: 3SyCJ-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -58218,13 +114650,48 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: QSmzerg-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: zLyH-validating-webhook-configuration + name: QSmzerg-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -58232,7 +114699,7 @@ webhooks: - v1beta1 clientConfig: service: - name: N-webhook-service + name: 3SyCJ-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -58251,54 +114718,275 @@ webhooks: --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + RcCTPya3q: gXZ1Mm1dK + VnLc: jQYB + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm +<<<<<<< HEAD + app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: S-crd-job +======= + app.kubernetes.io/name: tpTbiY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: oeKQJ8l-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + CeHQ2x: D0 + QGq: Ctb5y + d61fzrR3Z: "" + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 1uYU4lBxTVH: KCC + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: tpTbiY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: oeKQJ8l-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" + labels: + 1uYU4lBxTVH: KCC + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: tpTbiY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: pTI-crds + namespace: default +spec: + template: + metadata: + annotations: + O: AzfuSRP + w: 7okYgwj + labels: + Q9gGjEwAk: wp1llpZqZ + app.kubernetes.io/instance: operator + app.kubernetes.io/name: tpTbiY + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + command: + - /redpanda-operator + image: :9dFbDt + imagePullPolicy: Always + name: crd-installation + resources: + limits: + cpu: "492" + memory: "772" + requests: + cpu: "77" + memory: "813" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: UnZKVrw + nodeSelector: + pTbC: MCE3kqTeYQ + restartPolicy: OnFailure + serviceAccountName: oeKQJ8l-crd-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 蟅Ǹ轗Nʟ焉[荤怘ȯ6 + operator: 黬洏ƨKC + tolerationSeconds: -5931233288930548000 + value: pfQ3cjn + - effect: 8±樦 + key: cjW8Qv2w + tolerationSeconds: -4807883657914480000 + value: cCe8 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + 1uYU4lBxTVH: KCC + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: tpTbiY + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: pTI-migration + namespace: default +spec: + template: + metadata: + annotations: + O: AzfuSRP + w: 7okYgwj + labels: + Q9gGjEwAk: wp1llpZqZ + app.kubernetes.io/instance: operator + app.kubernetes.io/name: tpTbiY + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: :9dFbDt + imagePullPolicy: Always + name: migration + resources: + limits: + cpu: "492" + memory: "772" + requests: + cpu: "77" + memory: "813" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: UnZKVrw + nodeSelector: + pTbC: MCE3kqTeYQ + restartPolicy: OnFailure + serviceAccountName: oeKQJ8l-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 蟅Ǹ轗Nʟ焉[荤怘ȯ6 + operator: 黬洏ƨKC + tolerationSeconds: -5931233288930548000 + value: pfQ3cjn + - effect: 8±樦 + key: cjW8Qv2w + tolerationSeconds: -4807883657914480000 + value: cCe8 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-036.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true kind: ServiceAccount metadata: annotations: - HQJtGQ: "4" - J1VZibc: dy4OXHkP - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + "": mZLro labels: - 2RSj: YyoP + 0KxBSMaPK4: m3uQe + UBlzk: ah7sm1KDTy5 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "N" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 9q-crd-job + app.kubernetes.io/name: tSP + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: CWrpD +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) namespace: default --- testdata/case-070.yaml.golden -- +-- testdata/case-087.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 9aGDc17j + apiVersion: YL health: - healthProbeBindAddress: ND - kind: 9A80iCR + healthProbeBindAddress: pMd + kind: dJY7cp leaderElection: leaderElect: false - resourceName: 1pe6680 + resourceName: xisUSR6 metrics: - bindAddress: KfUbSQ + bindAddress: FSQLz webhook: - port: 358 + port: 220 kind: ConfigMap metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ-config + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -58308,13 +114996,15 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ-metrics-reader + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ-metrics-reader rules: - nonResourceURLs: - /metrics @@ -58328,13 +115018,15 @@ metadata: annotations: {} creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ-default + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ-default rules: - apiGroups: - authentication.k8s.io @@ -58534,20 +115226,22 @@ metadata: annotations: {} creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ-default + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: m7Z5VmKktJ-default + name: nJ-default subjects: - kind: ServiceAccount - name: 8QmVHY8X + name: xOqjN namespace: default --- # Source: operator/templates/entry-point.yaml @@ -58557,13 +115251,15 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ-election-role + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ-election-role namespace: default rules: - apiGroups: @@ -58605,13 +115301,15 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ namespace: default rules: - apiGroups: @@ -58632,13 +115330,15 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ-rpk-bundle + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ-rpk-bundle namespace: default rules: - apiGroups: @@ -58666,21 +115366,23 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ-election-role + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: m7Z5VmKktJ-election-role + name: nJ-election-role subjects: - kind: ServiceAccount - name: 8QmVHY8X + name: xOqjN namespace: default --- # Source: operator/templates/entry-point.yaml @@ -58690,21 +115392,23 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: m7Z5VmKktJ + name: nJ subjects: - kind: ServiceAccount - name: 8QmVHY8X + name: xOqjN namespace: default --- # Source: operator/templates/entry-point.yaml @@ -58714,21 +115418,23 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ-rpk-bundle + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: m7Z5VmKktJ-rpk-bundle + name: nJ-rpk-bundle subjects: - kind: ServiceAccount - name: 8QmVHY8X + name: xOqjN namespace: default --- # Source: operator/templates/entry-point.yaml @@ -58738,13 +115444,15 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ-metrics-service + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ-metrics-service namespace: default spec: ports: @@ -58753,7 +115461,7 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -58762,13 +115470,15 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: nUS-webhook-service + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: o2-webhook-service namespace: default spec: ports: @@ -58776,7 +115486,7 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 @@ -58785,374 +115495,257 @@ metadata: annotations: null creationTimestamp: null labels: - Pu8: aQVSuDE + XFSHB: ot7Wo app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: m7Z5VmKktJ + q93: ONPg3F + rZBEA7mOLYT: iFtHtFH + name: nJ namespace: default spec: - replicas: -1022601339 + replicas: -2134074333 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: nUS + app.kubernetes.io/name: o2 strategy: rollingUpdate: - maxSurge: 1074023694 - maxUnavailable: 1190852902 - type: ɈļčŪ亵\娛Q讒惂Ȱʍ灎īzɉ|稥| + maxSurge: 65570750 + maxUnavailable: 954120139 + type: 袂ȴľ9 template: metadata: annotations: - He6ymbE: f4kMrSEEXyH - z6: n4r + U: 5klmK creationTimestamp: null labels: - "": eTAV6 + Fp: P6olJSs3t app.kubernetes.io/instance: operator - app.kubernetes.io/name: nUS - o7qWs: k1Qga - vRShZ: AisxX + app.kubernetes.io/name: o2 + cbzDUdfwq: OrZ5 spec: - activeDeadlineSeconds: 3148841434328277000 + activeDeadlineSeconds: 3611247376970001400 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - - key: b - operator: 3萁ʀV!jc!卺S懐ʖ瑆. - - key: 5E - operator: 籱巓/赒Ąʍ\Ƿ|踐ŋoǹi&蔘 - values: - - JgIazb - - key: wY0bLvbEknV - operator: 损H盆嶠ʂäə\à顐Gʩ - matchFields: - - key: 5bvU6ftIWw - operator: ʡġû£UŌx + - key: YYfg1 + operator: ěǁÏ~裚l孎ŵIJ浊鸾ɫP鎿:炎 values: - - "" - - key: B3Bz - operator: 芓ĔĖǁ;Ƴɥȅɍȇ=ɼ4W挌Ʒw3 + - 6sqb3h3 + - Dst1 + - XAU + weight: 972142003 + - preference: + matchExpressions: + - key: aY5tWb + operator: n贱趶b|(>Ȅ4 values: - - GK0Dngy - - SWb8LBy6r - - key: 2ntc7T - operator: Ë7Ġʕř己ʅɫ¿巶哛Ȩ + - Syn + - key: coAU1eb + operator: Uaĝģ倍ʜ&曚 values: - - "" - - Lhd3y - - 2WSJMRmD6wRk - weight: 1037587274 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: 4n86 - operator: DɊǟa爷%撧>絟+N筟] 芉讫檹 - - key: Xoarh - operator: ŷƴȤƅ}}妔i雠蘎@ + - xqKq1GUp + - qT7u + - key: gLH5MMiej + operator: 逫仿imĺT values: - - Rb1v7 - - Zo4G - - BWSH - - key: zEIj - operator: _樆o幝ɖ塙愾?cǖs渾蔗虽犐ɱ& + - Q8F1H + - orsn + matchFields: + - key: Ycs5M5v + operator: '|±í琛ʛ' + - key: X98 + operator: 檚D鮩ȵÿ&ÿƬ庩vș>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: Gpn + health: +<<<<<<< HEAD + healthProbeBindAddress: qx + kind: mAeO0vP +======= + healthProbeBindAddress: Z0lCxMDJ + kind: iovN + leaderElection: + leaderElect: false + resourceName: xNlu0S + metrics: + bindAddress: JwM3w + webhook: + port: 180 +kind: ConfigMap metadata: annotations: - E4i6xcvJ: ZJEz - yeHnwQ: fUkYaRf - creationTimestamp: null + JPl: e + Z: T6UFIG + bt5F: k6kgEUjcT labels: - 6uv1egE: IzPSkvDQ - C9l: git - E5l: BF8ozbb + EnOywA: Ez6ZG app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: OyOZvn5WT - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: OyOZvn5WT -subjects: -- kind: ServiceAccount - name: BI7X + app.kubernetes.io/name: 8A + app.kubernetes.io/version: v25.3.1 + bwynrkY7: d7CQPiip + helm.sh/chart: operator-25.3.1 + oZ: pfOS8yvJOs7 + name: operator-8A-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -59960,19 +116942,19 @@ apiVersion: v1 kind: Service metadata: annotations: - E4i6xcvJ: ZJEz - yeHnwQ: fUkYaRf - creationTimestamp: null + JPl: e + Z: T6UFIG + bt5F: k6kgEUjcT labels: - 6uv1egE: IzPSkvDQ - C9l: git - E5l: BF8ozbb + EnOywA: Ez6ZG app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: OyOZvn5WT-metrics-service + app.kubernetes.io/name: 8A + app.kubernetes.io/version: v25.3.1 + bwynrkY7: d7CQPiip + helm.sh/chart: operator-25.3.1 + oZ: pfOS8yvJOs7 + name: operator-8A-metrics-service namespace: default spec: ports: @@ -59981,327 +116963,343 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Eg0Oz ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - E4i6xcvJ: ZJEz - yeHnwQ: fUkYaRf - creationTimestamp: null - labels: - 6uv1egE: IzPSkvDQ - C9l: git - E5l: BF8ozbb - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Eg0Oz-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/name: 8A --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - E4i6xcvJ: ZJEz - yeHnwQ: fUkYaRf - creationTimestamp: null + JPl: e + Z: T6UFIG + bt5F: k6kgEUjcT labels: - 6uv1egE: IzPSkvDQ - C9l: git - E5l: BF8ozbb + EnOywA: Ez6ZG app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: OyOZvn5WT + app.kubernetes.io/name: 8A + app.kubernetes.io/version: v25.3.1 + bwynrkY7: d7CQPiip + helm.sh/chart: operator-25.3.1 + oZ: pfOS8yvJOs7 + name: operator-8A namespace: default spec: - replicas: 1277937157 + replicas: 1474354403 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/name: 8A strategy: rollingUpdate: - maxSurge: 1795016009 - maxUnavailable: 920502458 - type: o徃ǚɉ魖*砾謐Ʌ菱 + maxSurge: 400386053 + maxUnavailable: 911119950 + type: 篒Ȭ)N)>Ĩ奨壨旐Ǿ?Ŧ拊D template: metadata: annotations: - Hy: "" - u: Alj - yVw: 2LiN4 - creationTimestamp: null + 3lref1: X6rIcSUe + 6a2: OVN6dOLzu + gMhW8k84: qRCx1sI0 labels: - a5yZq6DPR: 2gj94Xe + 4pEJDc: Vi + T0q: kjvidmFvY + ZE: 2Pj app.kubernetes.io/instance: operator - app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/name: 8A + lv5MGet: KKhqncO + wTmn: SC + yaE1sIcISx: "" spec: - activeDeadlineSeconds: 2906796184660660700 + activeDeadlineSeconds: -126493598666713470 affinity: nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: ErQUv - operator: ',#讍醓ƐÐ糩Gţ敠圽棸ɜdz莑ň萭' - values: - - F - - vftrBqx8kIrtj - - AKHvv - matchFields: - - key: 8cijSF - operator: 呷û槡惝IJhDž濧bȞ輴ʆlj扤 - values: - - "n" - - key: pborSu2p91 - operator: Ɇ覴葃à - weight: 851640615 - - preference: - matchExpressions: - - key: D2R - operator: 措蔪眣ȡ釮BȰ廜ɔPɪȯ慲磽 - values: - - HgcVkH - - key: Mv - operator: 苺忋|D鿬嫆洐V墾揟 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: lum + operator: ɿU4ĵ×ƀ_蘠_ values: - - "" - - key: OA6 - operator: '{虇3`aP櫗ʨȈ4捱鳠腓' + - zMZ0I + - ZVmvBG9e + - key: D9evsj + operator: 奰簍l踛Ľ8閘ȵ唂漙w走疺+夔餷DŽ values: - - Ulr + - RJx53xPAU + - BHk + - B7HFMi matchFields: - - key: D1Lus - operator: "" - - key: m - operator: 畝Vƭ'ĦÕ - values: - - npe7crhN - - "" - - us05ucio - - key: aHR - operator: vƈZN鹿Ų膗. - values: - - hy - - ay4Xp - weight: 830776366 - - preference: - matchExpressions: - - key: 3IugyKeQB - operator: ɑ+D櫫駮|ȡ + - key: BNHGJz + operator: 囦Ȓ搌IA瀘Ź values: - - "" - - V - - shT - - key: H1Ro - operator: ƙdžNĔ崮*K< + - 08p9 + - Q + - matchExpressions: + - key: Tk + operator: -EȲ8ɐĶ黐噫@0 values: - - zTbtmiBoE - - E8d1O - - key: THZns - operator: ô郇ɿE9k柒Ȥ偓ɩŧ+ÖƦ_ɲ + - yWkt + - key: uaz + operator: ĄǂƏ8SM3Ȗ姸{栏ğ¿ f竁Ǟ噥; values: - - qv + - Asw + - MeiLasb matchFields: - - key: zeucnJt3LV - operator: ǃtE阷Db嚹{ - values: - - 7nBvn9d - - key: 57x3O - operator: 樅炅ƚ«ĥ=Ȱ褅躡僭砡氊蹓ȩģ袷 + - key: x0yannumFd3 + operator: Ǥ¼ɸ values: - - ye4 - - key: GhDSe - operator: Ƥ妎.ƞƚņŌ缁峉M;朔Ȅ辢鲍ĎOFA + - "1" + - key: iFVQRvn + operator: 叼F.訒ȅyÑ9潼 values: - - eHr - - l73ziMx - weight: 456644011 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: {} - podAntiAffinity: + - QopI + - VdFGNX + - 20yrP + podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: oCRwZQhs - operator: 筤 + - key: Sfw + operator: "" values: - - a3n - - lopkt2O - - key: lFz - operator: 龹椡輊9篖輬IȖYȳÕ2ɖɧ堐W皍早 + - 7cK + - P2qeWL + - key: sh9SqqX + operator: 鮵ąŃ銜zt凪5¿ʕ捆Ʌ + values: + - Mep matchLabels: - kY3U7f: R56hs88p7MZ + YvO: 7ywLA + mVRXS: M4UPZ matchLabelKeys: - - R + - 9Bf5gkOh mismatchLabelKeys: - - C - - REzJ8QPcGfuu - - 4L + - MncfPVZo + - ZG2DL9Yy + - CAWy2Ls namespaceSelector: matchExpressions: - - key: Pu4K - operator: 確{楐+=裱ēƯƛȟȄ逹 - - key: IjSg - operator: 擸\@ʎYȞd 67 + - key: B + operator: ǞÆƯ杷B庑Ŧ堻¯樌ɧƮ values: - - 8PiuJ - - key: 6c0 - operator: I + - ZiaRhSI + - J4oDIWZR + namespaces: + - lcbeoMA + topologyKey: qYtssa + weight: -1423843315 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + 3J: gud + O7Qe: 8f + matchLabelKeys: + - 2GqQ5JN649MJk + - wmjqTD7P + - FA6AIHL9 + mismatchLabelKeys: + - B2f78VJ4NR + namespaceSelector: + matchExpressions: + - key: 5nXh + operator: 緣_ź碧 + values: + - nmG8KB + - 7g7QC1Dxk + - key: cdQ + operator: Sə鳉麲蜀啰ƍBÄF礧 + values: + - nOokT + - lomSaIeYXWJ + - WGle9VxC + matchLabels: + G: sZa4CcDooRz + dGdlO: R + xl: NTmMH4 + topologyKey: eMKOiC5K + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + KDhD: 4XOtirj + mismatchLabelKeys: + - JcB5 + namespaceSelector: + matchExpressions: + - key: vpsgKD0fJ6J + operator: Břǧ毙 values: - - PJPUw - - Zzaab + - kF9T + - key: Q + operator: 藅 + values: + - ybQJg + - key: s + operator: 擧癇刘貙鞘臌#. matchLabels: - 4dMbO: K5SXW - gXJ7m: 62SEO - vkeTz5: zljX + ac: EsnT namespaces: - - iuoJOdFq1F - - FOKB - topologyKey: ZWCw - weight: 975323462 + - "" + - i + - 0mvdgR + topologyKey: v + weight: -1735137281 - podAffinityTerm: labelSelector: matchExpressions: - - key: ekqvG - operator: ɞ桠蜔虪騉粥饶5Ƽ鉖緃龃椥詨& - values: - - fN - - key: 0HXI2F - operator: ³µơ¶¹û弴ɄvǬ + - key: ks + operator: Ŭ嵱槮=ǯ鼜< values: - - NElySO + - zLEuAVI9 + - ZU3j + matchLabels: + IDtLM: 6a + matchLabelKeys: + - Tw29QEafC + - aVR mismatchLabelKeys: - - DYenvo + - "" + - qKl namespaceSelector: matchExpressions: - - key: dL - operator: JŊ&涚ƩGǜ轍8穵[f + - key: zaj1 + operator: Ʊ滹1)hÆƲƏȌw values: - - "" - matchLabels: - M: xQwdTGT - jAsP8: Et9f0q + - fGKKn + - JXfdx + - key: ljDIcbQ + operator: 癡ūV貯&NWƜ脲b+k幦嵷 + values: + - PZLOiff3lk + - Qqmoca + - key: d7Sr9q + operator: =k8 + values: + - 79MDtnZR + - 3EWqw namespaces: - - Tr - topologyKey: 0ayops - weight: 2137398144 + - MXI + - Fs + topologyKey: 0XQZF + weight: 2052335830 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - - key: 4JUBij2 - operator: "" - values: - - fPJ2 - - key: Xg98aP3 - operator: 5ǟvǙB#ŚĂĶĸœR - values: - - ty - - 4xzHp - - key: H9p - operator: )Ş(ɫƄ~O葀ǂ媭審g敡u色á + - key: oJ + operator: 骡|$邨\頴r鼠骓$ + values: + - 0ea + - utadgK + - RL0dVMv + - key: OoF + operator: 焻璲ʭ)嵊±áB-条鎁(âȒǏĸ鰼Ə禋 + values: + - FH8hRu + - Y4Qim + - Dxltv0szD + - key: "" + operator: ƮŎ攵彚Ǩɰ蛅8\虿 values: - - "" - - L0C + - pDvlL matchLabels: - ZFF967F: L + OZBdb: MAO4pal1 matchLabelKeys: - - rD8L + - 8N61nH + - q + - zexw9oMcU6 mismatchLabelKeys: - - Z - namespaceSelector: {} + - GChwYLcmC + namespaceSelector: + matchLabels: + 5UqIM: Muf5WmX + BHPHfPElwc: x + Vagk5: Wp5UaZ namespaces: - - "" - - jiAc - topologyKey: X5Hx13b + - vnCEk + - W + - ps9J + topologyKey: sEwH8Kq - labelSelector: + matchExpressions: + - key: J4uBQEBT + operator: 芤鏛ťU&KȤ介賙x-;-Ǵa囥 幇铱 + - key: D1MI + operator: A7橨¾TGF 嫆茇 + values: + - SLJn3 + - VDDogI + - key: GW6O + operator: Ŕ肣ʂ闽CAJ鰈箱鷆哕ė鉻 matchLabels: - 5Guj: jXfeaC - c1U: Hxk - namespaceSelector: {} - topologyKey: 67lO8JCg6Z + ECWFz7: RUJDzoG7quV + IEi: kP8y9 + yRBGl63T: "" + namespaceSelector: + matchExpressions: + - key: dKO + operator: ũ噹锛Ĉɐ怍ŀ悒63µcj摈Ɍ19 + values: + - y6K + - uxw0xr + - key: l0w + operator: 菔ʘ0犪Kȱ馩í2 + values: + - F + matchLabels: + WczI9feSl: dTrL + kxYzIG7Fj8g: 5b991O + namespaces: + - K + topologyKey: 5jjHjJV - labelSelector: matchExpressions: - - key: QE - operator: XɐzȆ4<崜f兜LF嵚 + - key: C3IANwmxF + operator: ɴ尝Ŝ鸬粈 values: - - Ir - - L3 + - fGfZvx matchLabels: - rk7rM: dUNTwz8 + 5AL6: Asl + aIDTYE: plU6JLFY4KqZdR matchLabelKeys: - - MnWZrNdfgQfZ - - V3bAMv + - AP9 + - vTHhzNLb + - oDbe mismatchLabelKeys: - - Wjc + - I7 namespaceSelector: matchExpressions: - - key: u9SNlsRLICJ - operator: BzÀ嗪 - values: - - mbiML7 - - Nd - - key: hygXk - operator: ʟ(嵷~3ɶþø襒h缠'D炿¡ - values: - - xJkDP - - 6a2f1a7 - - key: r - operator: ȴCl`畗Xǻ}/鸒咤 - values: - - tvpzab - - NnooI45rcL - matchLabels: - E9wpkgOim: IUdTPb - cjv: seg3OyvX - rG: 2Sl8VugAk - topologyKey: M - automountServiceAccountToken: true + - key: dx + operator: 髷iɏYɔwʃe堉53NjÐȍʮm¨Ʒ + topologyKey: ktx7 + automountServiceAccountToken: false containers: - args: + - --configurator-base-image=cbG + - --configurator-tag=0q7KunZ1RCP + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=TPaa - - --configurator-base-image=Zme9w8o - - LlHz1 - - 4qYzSV + - --log-level=EaunWcgU + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: Zme9w8o:TPaa - imagePullPolicy: Always + image: cbG:0q7KunZ1RCP + imagePullPolicy: Never livenessProbe: - failureThreshold: 589 + failureThreshold: 243 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 759 - periodSeconds: 807 - successThreshold: 657 - terminationGracePeriodSeconds: 977 - timeoutSeconds: 708 + initialDelaySeconds: 36 + periodSeconds: 639 + successThreshold: 673 + terminationGracePeriodSeconds: 136 + timeoutSeconds: 374 name: manager ports: - containerPort: 9443 @@ -60311,139 +117309,402 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 250 + failureThreshold: 450 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 531 - periodSeconds: 261 - successThreshold: 56 - terminationGracePeriodSeconds: 240 - timeoutSeconds: 366 + initialDelaySeconds: 402 + periodSeconds: 641 + successThreshold: 154 + terminationGracePeriodSeconds: 481 + timeoutSeconds: 113 + resources: + limits: + cpu: "604" + memory: "266" + requests: + cpu: "322" + memory: "760" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + dnsConfig: + nameservers: + - "0" + - kz4mbuAI + - hq + options: + - name: z9P + value: 3Y7dOIxQ + - name: cVT + value: HOGbe + - name: exEPUlj + value: eBWYN + dnsPolicy: hRReq鎼貺簑ƃ濦嫛Ƞɿ`忴0刼础 + enableServiceLinks: true + ephemeralContainers: null + hostAliases: + - hostnames: + - dk + - cGW + ip: Lm8d9M + - hostnames: + - 3ybx + - 0ceZH36 + ip: 6cTXzDquA + - hostnames: + - Dq + - ob + ip: ANY + hostNetwork: true + hostPID: true + hostUsers: true + hostname: krNtnGmh + imagePullSecrets: + - name: qifVnVri6E + - name: "6" + - {} + initContainers: [] + nodeName: WNfQWV + nodeSelector: + F7lKphMdsERN8V: o3ICSox3Ow + sBsTv7S: np0om + preemptionPolicy: 譢旲縑ƦA麀拟d蜨K¥|呞qr糠ŮqX + priority: -35524254 + priorityClassName: Eaa + readinessGates: + - conditionType: 镸j獒f坼ne)q + - conditionType: 箳ċuȜM+铯躙Dƃķ4鹊7 + - conditionType: ľ爀蘵c¬*最岲ŵÎUI + restartPolicy: Ć`ȉ}Ɏ + runtimeClassName: rG22XR8r + schedulerName: sYKo + schedulingGates: + - name: RiL + securityContext: + appArmorProfile: + localhostProfile: IwZNPRLI + type: M鲕m甀弱f鞬7ǒ + fsGroup: 4547477468593619000 + fsGroupChangePolicy: Always + runAsGroup: -1834686881357004300 + runAsNonRoot: false + runAsUser: 5391062912001271000 + seLinuxChangePolicy: ɦ穽´ɼzOŻʌ秷Ř巃 + supplementalGroupsPolicy: '`á倝{Ƽ0蹥麖X艢I螏ȗ櫐ƣ' + sysctls: + - name: 1MocONW + value: cEI4r + - name: zvn5 + value: GTqUSHBQJ + - name: s6yslEX + value: WvU6w + serviceAccountName: 0TdF9aZGiW + setHostnameAsFQDN: true + shareProcessNamespace: true + subdomain: yM3C + terminationGracePeriodSeconds: -2562351950717608400 + tolerations: + - effect: ʪ鳑芛蒍nv]榹遜s2垫标Ôǹ + key: MGw + operator: 彼#Ń^剪ijǬ + tolerationSeconds: 6368687339848123000 + value: wkouG + - effect: 睯奘Ȃ8ɍŪ膦黙 + key: ptY + operator: Tæ + tolerationSeconds: 7125298582120794000 + value: f5Zuf7A + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: DzWN7avz + operator: U塔讥郷ƏƼè猧櫤»ġ + values: + - c82GuH + - DQhYLAWF6g + matchLabels: + jk: QSRjYqk + ksdbbPz: jP + pW8jFeoremZ: JG3JzTTY + matchLabelKeys: + - WZvm + - zAOrv12 + - D9r + maxSkew: -1889615309 + minDomains: 1753951925 + nodeAffinityPolicy: "" + nodeTaintsPolicy: ƪW唼Ŀ聽B褁JɻǜQ + topologyKey: nZOKVinB + whenUnsatisfiable: 煻žsȡƇōpú鏷ŘSǢ倠 + - labelSelector: {} + matchLabelKeys: + - pg + maxSkew: 617804604 + minDomains: -1823916296 + nodeAffinityPolicy: ʠAwR] + nodeTaintsPolicy: ǽ>Ƨ畬仺Ǔ>gIvŦǥ灥ƮI + topologyKey: LF7 + whenUnsatisfiable: = + - labelSelector: + matchExpressions: + - key: Cuv + operator: xĊp + matchLabels: + 2RVOe: a5 + C9L7Nu1hRUF: 5DaQkwUW0 + matchLabelKeys: + - 00yIl + - Mqhw + - aDuqnVGj + maxSkew: -698166343 + minDomains: -1139294834 + nodeAffinityPolicy: "" + nodeTaintsPolicy: 寀Ȼo鯎鷿*"饞Ģ滥Ą咶cƖ辻Ý + topologyKey: 3LZ3bzBs + whenUnsatisfiable: "" + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: 9mg04F + - name: jkPcgZb +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 1Vb8xIP5: sb + 6y: o2jZdnxH9dU + 9K: hEaY + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + EnOywA: Ez6ZG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8A + app.kubernetes.io/version: v25.3.1 + bwynrkY7: d7CQPiip + helm.sh/chart: operator-25.3.1 + oZ: pfOS8yvJOs7 + name: UHV5-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 1Vb8xIP5: sb + 6y: o2jZdnxH9dU + 9K: hEaY + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + EnOywA: Ez6ZG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8A + app.kubernetes.io/version: v25.3.1 + bwynrkY7: d7CQPiip + helm.sh/chart: operator-25.3.1 + oZ: pfOS8yvJOs7 + name: UHV5-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" + labels: + EnOywA: Ez6ZG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8A + app.kubernetes.io/version: v25.3.1 + bwynrkY7: d7CQPiip + helm.sh/chart: operator-25.3.1 + oZ: pfOS8yvJOs7 + name: operator-8A-crds + namespace: default +spec: + template: + metadata: + annotations: + 3lref1: X6rIcSUe + gMhW8k84: qRCx1sI0 + labels: + 4pEJDc: Vi + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8A + lv5MGet: KKhqncO + wTmn: SC + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + - --experimental + command: + - /redpanda-operator + image: cbG:0q7KunZ1RCP + imagePullPolicy: Never + name: crd-installation + resources: + limits: + cpu: "604" + memory: "266" + requests: + cpu: "322" + memory: "760" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: 9Ft8T + - name: TN0H4tKclw + nodeSelector: + F7lKphMdsERN8V: o3ICSox3Ow + sBsTv7S: np0om + restartPolicy: OnFailure + serviceAccountName: UHV5-crd-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ʪ鳑芛蒍nv]榹遜s2垫标Ôǹ + key: MGw + operator: 彼#Ń^剪ijǬ + tolerationSeconds: 6368687339848123000 + value: wkouG + - effect: 睯奘Ȃ8ɍŪ膦黙 + key: ptY + operator: Tæ + tolerationSeconds: 7125298582120794000 + value: f5Zuf7A + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + EnOywA: Ez6ZG + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 8A + app.kubernetes.io/version: v25.3.1 + bwynrkY7: d7CQPiip + helm.sh/chart: operator-25.3.1 + oZ: pfOS8yvJOs7 + name: operator-8A-migration + namespace: default +spec: + template: + metadata: + annotations: + 3lref1: X6rIcSUe + gMhW8k84: qRCx1sI0 + labels: + 4pEJDc: Vi + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 8A + lv5MGet: KKhqncO + wTmn: SC + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: cbG:0q7KunZ1RCP + imagePullPolicy: Never + name: migration resources: limits: - cpu: "498" - memory: "528" + cpu: "604" + memory: "266" requests: - cpu: "334" - memory: "62" + cpu: "322" + memory: "760" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - searches: - - 0IRYIXHfLfR - dnsPolicy: .=5緟ǔ甃庪v - ephemeralContainers: null - hostNetwork: true - hostPID: true - hostUsers: true - hostname: ONXnRWfzGp imagePullSecrets: - - name: YBOC - - name: CvMbo - - name: 7II0g3 - initContainers: [] - nodeName: EAe + - name: 9Ft8T + - name: TN0H4tKclw nodeSelector: - 4tcw: hrz - FK: ahIm6 - r4u: "" - preemptionPolicy: ǩÞɚ蜰貾鱃Ǟ脺Z) - priority: -1092437364 - priorityClassName: Gya - readinessGates: - - conditionType: ĎȦã象 - - conditionType: Nl匵ŴDDº - restartPolicy: Ȳv箪Ķ贩Ő+ǥ樃揔ë - runtimeClassName: 7LAT - schedulerName: dvxA - schedulingGates: - - name: l3Owe7 - - name: OicM - securityContext: - fsGroup: 4969790577398164000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 7718336087706937000 - runAsNonRoot: true - runAsUser: 8332715385011441000 - supplementalGroups: - - -3314907293636207600 - - 2664518875298825000 - sysctls: - - name: h8VsfTAI - value: PzuCv - serviceAccountName: nFEUMXO - setHostnameAsFQDN: true - subdomain: o - terminationGracePeriodSeconds: 5115861171877325000 + F7lKphMdsERN8V: o3ICSox3Ow + sBsTv7S: np0om + restartPolicy: OnFailure + serviceAccountName: UHV5-migration-job + terminationGracePeriodSeconds: 10 tolerations: - - effect: ½L(殱鎎掊t蟐磙ÊĖj¾jʢ - key: RvwRQ - operator: S鰑dzc捥轫乙Ż佖=ij7ÊŸ - tolerationSeconds: -2083560657260833800 - value: wx5m - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: rwUs - operator: '[貢]ß紏恳捭Y花ʥ_fß' - values: - - U - - key: TTSuQ - operator: Y悿彧B缛鷱ȅÓƍTƞĿƁiɸï宮 - values: - - AMy2MTt - matchLabels: - lhqD: TiL9 - maxSkew: -921377621 - minDomains: 450959143 - nodeAffinityPolicy: 婐ƈ撰Ȳ - nodeTaintsPolicy: 格Ɉ掺M踏膸q叉R蘈 - topologyKey: QJCBTo1 - whenUnsatisfiable: ȺR蛖 - - labelSelector: - matchLabels: - "": GydNo - matchLabelKeys: - - bWR - - dtV - - 5cPhtU - maxSkew: -1328890317 - minDomains: 1506338093 - nodeAffinityPolicy: Ã灣÷埰WǸEn礡pɡ"謵|ÝSȦ亭 - nodeTaintsPolicy: "" - topologyKey: ievxeEYXR - whenUnsatisfiable: 鉯ď^I - - labelSelector: - matchExpressions: - - key: 9K6 - operator: ñ蓸BXŬ顥8G­ - values: - - 0TLjRwHe - - g7 - - key: jt - operator: ']剼xʈ壐CR~锭Ƒ锷骸鼒醻幭' - values: - - 5JMdp3T - - "" - - s - matchLabels: - 2LmzPU: Vn - 4TD: NiQsjbsE - fEXqg: 0FaPA - maxSkew: -1091202818 - minDomains: 1768851156 - nodeAffinityPolicy: 鑬ß+ H滨d蕪bǤǰmǨ - nodeTaintsPolicy: ɏɣ;Ŧƛdž儊涙ň'ś - topologyKey: 1BnA - whenUnsatisfiable: '}|ǗȳȽ抧ǎŤĿ仇恹' + - effect: ʪ鳑芛蒍nv]榹遜s2垫标Ôǹ + key: MGw + operator: 彼#Ń^剪ijǬ + tolerationSeconds: 6368687339848123000 + value: wkouG + - effect: 睯奘Ȃ8ɍŪ膦黙 + key: ptY + operator: Tæ + tolerationSeconds: 7125298582120794000 + value: f5Zuf7A volumes: - name: kube-api-access projected: @@ -60463,227 +117724,440 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: WFuUZ - - name: PSp +-- testdata/case-038.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 3nRhn + health: + healthProbeBindAddress: xQuG + kind: 0R +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + leaderElection: + leaderElect: true + resourceName: BP61Er + metrics: + bindAddress: rwdC + webhook: + port: 82 +kind: ConfigMap metadata: annotations: - E4i6xcvJ: ZJEz - yeHnwQ: fUkYaRf + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - 6uv1egE: IzPSkvDQ - C9l: git - E5l: BF8ozbb + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + jHlVD3i0I: Hfqg8dMgdc + name: cCP-config namespace: default -spec: - dnsNames: - - Eg0Oz-webhook-service.default.svc - - Eg0Oz-webhook-service.default.svc. - issuerRef: - kind: Issuer - name: OyOZvn5WT-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: WFuUZ --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - E4i6xcvJ: ZJEz - yeHnwQ: fUkYaRf + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - 6uv1egE: IzPSkvDQ - C9l: git - E5l: BF8ozbb + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: OyOZvn5WT-selfsigned-issuer - namespace: default -spec: - selfSigned: {} + jHlVD3i0I: Hfqg8dMgdc + name: cCP-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null - name: OyOZvn5WT-mutating-webhook-configuration + labels: + 1S48I: gbO1FYE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WqmcFb + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jHlVD3i0I: Hfqg8dMgdc + name: cCP-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF + creationTimestamp: null + labels: + 1S48I: gbO1FYE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WqmcFb + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jHlVD3i0I: Hfqg8dMgdc + name: cCP-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: cCP-default +subjects: +- kind: ServiceAccount + name: akO9K6 namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Eg0Oz-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: annotations: - E4i6xcvJ: ZJEz - yeHnwQ: fUkYaRf + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - 6uv1egE: IzPSkvDQ - C9l: git - E5l: BF8ozbb + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: OyOZvn5WT-metrics-monitor + jHlVD3i0I: Hfqg8dMgdc + name: cCP-election-role namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - 6uv1egE: IzPSkvDQ - C9l: git - E5l: BF8ozbb - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null - name: OyOZvn5WT-validating-webhook-configuration + labels: + 1S48I: gbO1FYE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WqmcFb + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jHlVD3i0I: Hfqg8dMgdc + name: cCP namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Eg0Oz-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: annotations: - NA: wF - Rw: mH - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - uNRQOklv: e + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - 6uv1egE: IzPSkvDQ - C9l: git - E5l: BF8ozbb + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Eg0Oz + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: BI7X-crd-job + jHlVD3i0I: Hfqg8dMgdc + name: cCP-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: cCP-election-role +subjects: +- kind: ServiceAccount + name: akO9K6 namespace: default --- testdata/case-072.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: lYXEaS - health: - healthProbeBindAddress: o7WXT133 - kind: YrnkFwDGANkbHseo - leaderElection: - leaderElect: true - resourceName: kpeu - metrics: - bindAddress: "" - webhook: - port: 312 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: annotations: - ij: htyiQR - wsZn: jDMDcnh1rh + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - Q9a: uDXPfw + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v0: 1iClRDvVO3c - name: 5GoUVR7T-config + jHlVD3i0I: Hfqg8dMgdc + name: cCP + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: cCP +subjects: +- kind: ServiceAccount + name: akO9K6 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -60691,18 +118165,19 @@ apiVersion: v1 kind: Service metadata: annotations: - ij: htyiQR - wsZn: jDMDcnh1rh + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - Q9a: uDXPfw + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v0: 1iClRDvVO3c - name: 5GoUVR7T-metrics-service + jHlVD3i0I: Hfqg8dMgdc + name: cCP-metrics-service namespace: default spec: ports: @@ -60711,25 +118186,26 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - ij: htyiQR - wsZn: jDMDcnh1rh + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - Q9a: uDXPfw + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v0: 1iClRDvVO3c - name: 8I1Iyd-webhook-service + jHlVD3i0I: Hfqg8dMgdc + name: WqmcFb-webhook-service namespace: default spec: ports: @@ -60737,352 +118213,427 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - ij: htyiQR - wsZn: jDMDcnh1rh + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - Q9a: uDXPfw + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v0: 1iClRDvVO3c - name: 5GoUVR7T + jHlVD3i0I: Hfqg8dMgdc + name: cCP namespace: default spec: - replicas: 828111921 + replicas: -2144644648 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb strategy: rollingUpdate: - maxSurge: 886970740 - maxUnavailable: 289045062 - type: 她厓ƇL6ìǬģčʒģy卌鏖D + maxSurge: 1212904920 + maxUnavailable: 769659126 + type: ({z恲縅Da驯 template: metadata: annotations: - 6yf: PBVe - Fi63TSPtN: "" - kRhL: QpWMEi + W4R: "9" + ar71kLiEtX: K + kwi: trQ + xbu5FAyuP: NYj4WkniUocV creationTimestamp: null labels: + 4c: 3o5HPEk0sv app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb spec: - activeDeadlineSeconds: 8932134171902015000 + activeDeadlineSeconds: -2405601678923557000 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: - matchExpressions: - - key: "" - operator: 囬b - values: - - ZQ - - jtWF - - key: 03D6 - operator: 榧碊楶灠;暈b嫑ŏ犷&ɃË - - key: yAbhAt1 - operator: ȧŝ$Jɡ4ǖşĥ弧-崽!俒%胖ļ - values: - - Fv - - "2" matchFields: - - key: n1gUu - operator: 璧鯅羛棭Ż驰~酌]H - - key: zmZ - operator: 仐D屢ƶ - values: - - AgYOv - - prpwQ2Y - - key: NtLyDIwJ - operator: 鲟獽dž颷)0 + - key: tefUtgH + operator: 鍗úskɯ values: - - yvXPcl - - U - - EHA1ZUKMn - weight: -1586937060 - - preference: - matchFields: - - key: hx - operator: 洡Ƙp廔糀$i蔂ʋGü篲Ő?<爆ƅ + - FmQyZFxdl + - key: Cnyt + operator: wɞh纚蟯巑 values: - - s0ixY - - key: bEfMEgH - operator: ƚɢ| + - nt876qCF + - "3" + - V24g7T7 + - key: iZes + operator: ŏƊ:訨ŷ蘭dž懙复7杖Ƣ黍_[J values: - - TbRQ - - grZxJ - weight: 1809119344 + - Uap + weight: 963706628 - preference: matchExpressions: - - key: s - operator: »Ȼ{Rđ/ƜO鰌溟稂) + - key: Wdc1 + operator: R妯é0惁烤ƹ蘄蔻Ȼc綸 values: - - lM1fXt0IHd + - 8xsr + - ZlVAx matchFields: - - key: 6wak - operator: '*ǍȸƟE|鐓ï' - weight: 702698876 + - key: sWCyDV3 + operator: T鏡荡印)ȹvá焏b雖杚涻咦&z + values: + - MhiM + - z + weight: 1320782896 + - preference: + matchFields: + - key: ztK0gOd + operator: /Ë匸ʨ襡ȁ宫鐦ȷ鲤ſ + values: + - CG016 + - NOb + - key: RqBMw + operator: 遳²Ø8$赁&缥殌Q梊D + weight: 2120338660 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - - matchFields: - - key: i - operator: 蓒A蟞ʈļ肶Ò沟nj蛏纳V柇ʝȽ + - matchExpressions: + - key: iVIXc3 + operator: ődz葢=Ǣ紈簾;Ĕƣ建鳧縃0 values: - "" - - 0jfeQbt0 - - LY88aj - - key: ye2 - operator: ƾ勾覗wì,Ē%X鹠īĵǦÜɐʧɨ纲 + - jHnJ + - key: IaK + operator: u|ƚ賾*f®ưĀ values: - - ZYJK - - gkVA - - eDNU + - vuIyd + - Drs + matchFields: + - key: Dhw + operator: "" + - key: aD + operator: 賒傸緗u櫦軂{撇ż + values: + - b8X2 + - "8" + - reNUvHEmQi6 + - matchFields: + - key: YYx8 + operator: ǣtjGȓ旯DĔėĝ + - matchExpressions: + - key: bKL57zEUMd + operator: 0ćȳNj蒓Ķ37NJAĬ玍BŽ櫁樷廜 podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: vVFUAZ - operator: 跽Ǎ,ę3 + - key: EAq0Qy5 + operator: Ƣ + - key: sFBS8 + operator: "" + - key: 1oR5pb62G + operator: µ硚惔垄ɳw騃!幬NųB罍p + values: + - lP + - AG7Y + matchLabels: + vjOirJLgcD: X4PzOx3RhF matchLabelKeys: - - eGJVem2Ei3M - - m5dgOKm + - J + - BB mismatchLabelKeys: - - qV7Wf9s - - KseQJ + - ciDrkLK + - jtPS namespaceSelector: matchExpressions: - - key: wVU - operator: 卾&Ɋ=淇牉Oxÿȥ + - key: Cxpw + operator: z爛Ƌ槐锨煞ō鴦 values: - - "67" - - chu - - key: cte9t9 - operator: Á雀囹噗6硢0膋莄 ^DǛ-悇2 + - 3A + - 9cg3gZ + - key: Zee + operator: 痣dž籎]HǀǦm{oȳ掟 values: - - I8Hpn - - GdNwZf - - qhCYuN - - key: yE7Tr4 - operator: Ľ蚒±ņ邜 + - NzVKBIF + - kPK + - key: 5nlaG6GHo + operator: LJŅ]Ȗ matchLabels: - IRz: yglVn3 + OOY3uhAXpo: qSB + aojS: gOkolN + oGPTB: KFJgCX namespaces: - - "n" - - LR3tmda9 - topologyKey: LtACPw8s0kl - weight: 551238201 + - HfF1GUt5 + topologyKey: 90WdT7 + weight: 1054168312 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - - key: trXm5qwh87f - operator: 0熑1A冒畦TƎĕ冋w%&±髙堡譅d - values: - - H3ocU - - j0VfYw3w - - f5ak - - key: BkyAiH - operator: Ȭ请ÍÎĔ蓏 - values: - - XnYAozD - - Qd - - vE7J7 - - key: myzg - operator: êť篧]2忲Å迆ũ7鄋RmɅY鐙頷攮M + - key: MUJtlbN0 + operator: 蛂ȇ堯cU狖陪Ʋ縔ƋYȲ values: - - Z1UFC - - p00 - - YeoDwj - matchLabelKeys: - - MxI4 - - Dz - mismatchLabelKeys: - - 7J8 - - WqMUV - namespaceSelector: {} - namespaces: - - VL5y - - 05iB9d - - qJD - topologyKey: RhsB4WrGitTl - - labelSelector: + - 8u matchLabels: - g: 9dCA + Hia4jM7: pU1n + KLNPg4V8K: ZSkbNZASEFws + LZzCes: dTDFEcfxY mismatchLabelKeys: - - 3yXG - - 4pAQseL - - a8u5 + - WXTpWt1q + - J8g1XC namespaceSelector: matchExpressions: - - key: vAM3 - operator: 蝹'D^ - - key: 8SjWB - operator: 2ɥ`ƚ忣My>箫ɆȻ=5 - values: - - nlWnsS6 - - mXcFVezB8J7 + - key: 7CKrX + operator: GĒ matchLabels: - 5zaBYTKDWsPu: 497at - WfP3: a + 8MuoqJnDQmxwY: kMrO8wMx + Z9THJX: p9MH7m2Q + t0s: UdXxXsk3DU namespaces: - - p6eyCU - - Qao - - b6TXy - topologyKey: h0y54x + - B + - rlS9qYanCUN + topologyKey: CSJMR - labelSelector: matchExpressions: - - key: dvh - operator: Pclj63ǖ薠 - - key: e3D7 - operator: ȿ摼檉ŞH怑卑¸4鱳砤kŷ!懷 + - key: 94ZFj3AMl0 + operator: ƐǢʎįɡ犍ɠ values: - - e - - RY8jM - - key: t2w - operator: ķ¯U廦膷 + - x23a + - fVpPg + - gzdv + - key: Maml + operator: '[ĕ蟅ķv唛硉峄蠿;k犂ʣ緹Þ巯ŇI謭' + - key: oAlgJu4xG + operator: 庉玟ɪƑ=&茟 + values: + - S2IZ + - "3" + - i + - key: IMnOYKW + operator: Ǯő + values: + - w + - 4EBn47 + - kZ1G + - key: JQ + operator: 5蠰[醂ż + values: + - "" + - bVo + - J + matchLabels: + 1UFu: vLW + VRA: F2hdzU + topologyKey: yV + automountServiceAccountToken: true containers: - args: - --health-probe-bind-address=:8081 @@ -61091,26 +118642,23 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=6E02z0oYQUL - - --configurator-base-image=Tzah - - zTsg - - Sv - - 9M23O7X + - --configurator-tag=y3ROS + - --configurator-base-image=I command: - /manager env: [] - image: Tzah:6E02z0oYQUL - imagePullPolicy: Always + image: I:y3ROS + imagePullPolicy: Never livenessProbe: - failureThreshold: 952 + failureThreshold: 895 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 274 - periodSeconds: 473 - successThreshold: 29 - terminationGracePeriodSeconds: 887 - timeoutSeconds: 91 + initialDelaySeconds: 342 + periodSeconds: 649 + successThreshold: 298 + terminationGracePeriodSeconds: 849 + timeoutSeconds: 148 name: manager ports: - containerPort: 9443 @@ -61120,22 +118668,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 718 + failureThreshold: 192 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 710 - periodSeconds: 733 - successThreshold: 637 - terminationGracePeriodSeconds: 689 - timeoutSeconds: 465 + initialDelaySeconds: 994 + periodSeconds: 475 + successThreshold: 443 + terminationGracePeriodSeconds: 514 + timeoutSeconds: 185 resources: limits: - cpu: "583" - memory: "460" + cpu: "434" + memory: "590" requests: - cpu: "960" - memory: "844" + cpu: "637" + memory: "249" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -61147,91 +118695,94 @@ spec: readOnly: true dnsConfig: nameservers: - - "" - - WO - - I + - HrhMd + options: + - value: 5SI8 searches: - - uSzGLWz - dnsPolicy: v#ƁƐÿ - enableServiceLinks: true + - Tyl2T5Mt3y + dnsPolicy: 'Pßčʦ榲÷绩š}:' ephemeralContainers: null - hostAliases: - - hostnames: - - lrl0vw - - YJt9t - ip: UYcKtV - - ip: 4uIxYAS - - ip: "" + hostIPC: true hostPID: true - hostUsers: false - hostname: 5oCQx + hostUsers: true + hostname: Fe imagePullSecrets: - - name: jUh + - name: gBOg0mI + - name: Tykic + - {} initContainers: [] - nodeName: Jb0YiW + nodeName: jH6G5f nodeSelector: - 7Bii9yz: Y9 - OME: l1 - WXL6yK: CdEcZFp9 - preemptionPolicy: Cɘ¶ - priority: 1799249224 - priorityClassName: x + YLyedHB: pxcC + a6woHeKel: rceE + bGbWY5E1F4Jac: Oq + preemptionPolicy: Ž曶}韡鵰ȓd}韀瞀P凄q.兪鐞Ȥ莑\ + priority: -177953537 + priorityClassName: 3jtR readinessGates: - - conditionType: ț@5线]茠ŔK?礳籓Ȝ嘟:ʁ窌嵮Ģ - - conditionType: 鋔ɖ惌貓nƭ俜 + - conditionType: Ħʑ摳ŰE谩摩飄ʪ癹1旂n笪o殀骥Ʀ畨 + - conditionType: PĆ噼ƮgĽŅV + - conditionType: Hſ桎ɐɓ!uø苕灰ű resourceClaims: - - name: "" - - name: Vnor - restartPolicy: 法#ƿȁƋ饆袈ɒȳ - runtimeClassName: piASTpN - schedulerName: W72 + - name: Vb5gyg + - name: HhZbUPuhcBd + - name: F12g6 + restartPolicy: ¼蠸ɯ + runtimeClassName: MC5 + schedulerName: BXME schedulingGates: - - name: M - - name: 26sClw3aR - - name: xp9iKar + - name: zm2LXXZ + - name: uPS5a securityContext: - fsGroup: -5999645359566591000 - fsGroupChangePolicy: Always - runAsGroup: -7858053613302335000 - runAsNonRoot: true - runAsUser: -6325737295439407000 + fsGroup: -4948740130642859000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 1600747191373743000 + runAsNonRoot: false + runAsUser: -8772834372891012000 + supplementalGroups: + - 3495344937554265600 + - -729386749022923000 sysctls: - - name: 7Grq - value: Lf - - name: kZ - value: exDx - - name: qC - value: rrAv - serviceAccountName: WHEsd5gQ - setHostnameAsFQDN: true - subdomain: 3m - terminationGracePeriodSeconds: 9038582553894451000 + - name: 8YRnWYy2kE + value: 3bUQ + - name: qtXD5d4 + value: TWT7Re07z + - name: Nvjbq2Hzi8 + value: 3tWxKfQ + serviceAccountName: 1TvXd + setHostnameAsFQDN: false + subdomain: K9 + terminationGracePeriodSeconds: -1056991240725260900 tolerations: - - effect: bƇ弮Yr:K抉R飓a结黂Ĥ - key: G - operator: ȓ(7Pĩ Ǽ - tolerationSeconds: -7818649012535975000 - value: ote8FvN - - effect: ʥ岁認榤 ɊĔƭ敽欛RJ - key: U7S1 - operator: ȉ_VQ馳ƀ7~ - tolerationSeconds: -2377395593567595000 - value: awqsGSdpe + - effect: 垛"n焸骋 + key: jk + operator: 肪G乻,ʫ鴺钷鉱 ʌ侏Iºɗȸ7儨ƣ + tolerationSeconds: -1286742372947447600 + value: 42mO topologySpreadConstraints: - labelSelector: matchExpressions: - - key: 0Me - operator: Ń + - key: I4LlqW0 + operator: ɘ咎:*©篗ɺŶƹ4萬ʄo麂ʉ狨蝁2 + - key: d + operator: '%ƚ' values: - - DTls + - LaBM + - 7j5Hr89o + - 26a + - key: q6LBAJgMa + operator: Ȱ椼| + values: + - fX matchLabels: - r9p4MF: iX4o2aJpl - maxSkew: -552013603 - minDomains: -1279133216 - nodeAffinityPolicy: 0抧|8澁2=3鳛·媀ȋĵ( - nodeTaintsPolicy: '{' - topologyKey: ybGWO0YEF1 - whenUnsatisfiable: KƿĻ觮ȑmvǯ + Egb: 9Ela + rsZCnx: BNM33 + maxSkew: -1683677098 + minDomains: -1523899896 + nodeAffinityPolicy: '`B灦ǠyǸ爪óȣȉaȩI6皔帾ɓ齥' + nodeTaintsPolicy: DZ_ǁ拶0ãFɛȥ泱鿗极c汷<ʟH + topologyKey: dTqiO + whenUnsatisfiable: ȍ volumes: - name: kube-api-access projected: @@ -61254,54 +118805,58 @@ spec: - name: cert secret: defaultMode: 420 - secretName: SnlpK8 + secretName: Fmt + - name: 2ekz + - name: ulq --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: annotations: - ij: htyiQR - wsZn: jDMDcnh1rh + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - Q9a: uDXPfw + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v0: 1iClRDvVO3c + jHlVD3i0I: Hfqg8dMgdc name: redpanda-serving-cert namespace: default spec: dnsNames: - - 8I1Iyd-webhook-service.default.svc - - 8I1Iyd-webhook-service.default.svc.17 + - WqmcFb-webhook-service.default.svc + - WqmcFb-webhook-service.default.svc.BhU issuerRef: kind: Issuer - name: 5GoUVR7T-selfsigned-issuer + name: cCP-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: SnlpK8 + secretName: Fmt --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: annotations: - ij: htyiQR - wsZn: jDMDcnh1rh + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF creationTimestamp: null labels: - Q9a: uDXPfw + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v0: 1iClRDvVO3c - name: 5GoUVR7T-selfsigned-issuer + jHlVD3i0I: Hfqg8dMgdc + name: cCP-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -61313,7 +118868,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: 5GoUVR7T-mutating-webhook-configuration + name: cCP-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -61321,7 +118876,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 8I1Iyd-webhook-service + name: WqmcFb-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -61339,13 +118894,55 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + G: g1H20bqs + GIyHjLLo: "" + OV: QDDDF + creationTimestamp: null + labels: + 1S48I: gbO1FYE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WqmcFb + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jHlVD3i0I: Hfqg8dMgdc + name: cCP-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + 1S48I: gbO1FYE + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: WqmcFb + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + jHlVD3i0I: Hfqg8dMgdc +--- +# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: 5GoUVR7T-validating-webhook-configuration + name: cCP-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -61353,7 +118950,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 8I1Iyd-webhook-service + name: WqmcFb-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -61376,94 +118973,82 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - D: M5xpMC + 7CoUArlNjV: k + VcRiFP: YQhG3D helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" creationTimestamp: null labels: - Q9a: uDXPfw + 1S48I: gbO1FYE app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8I1Iyd + app.kubernetes.io/name: WqmcFb app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v0: 1iClRDvVO3c - name: 9r-crd-job + jHlVD3i0I: Hfqg8dMgdc + name: akO9K6-crd-job namespace: default --- testdata/case-073.yaml.golden -- +-- testdata/case-089.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false +automountServiceAccountToken: true kind: ServiceAccount metadata: annotations: - ET9H70: 1pFh - b28jlJ: gH2i + 9eKE: ayih32GI creationTimestamp: null labels: - "": "3" - N9sd2SXL: f2jOHWU app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: r8KRW4 + name: TxdHR namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: "" + apiVersion: UbL health: - healthProbeBindAddress: vDu4Byrze - kind: WZZg + healthProbeBindAddress: 9BJDnl + kind: JTWcul leaderElection: leaderElect: true - resourceName: B3J5nSv + resourceName: Gvhjc3S42 metrics: - bindAddress: 63kh7z + bindAddress: 1GNyShDudY1 webhook: - port: 23 + port: 344 kind: ConfigMap metadata: - annotations: - M8kdd: rg - SdYUtgj: zuHEEr - ysGlNYAJk: 9XN2vwiVm + annotations: null creationTimestamp: null labels: - "": "3" - N9sd2SXL: f2jOHWU app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: IsP97jKm-config + name: 8WTbb-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - M8kdd: rg - SdYUtgj: zuHEEr - ysGlNYAJk: 9XN2vwiVm + annotations: null creationTimestamp: null labels: - "": "3" - N9sd2SXL: f2jOHWU app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: IsP97jKm-metrics-service + name: 8WTbb-metrics-service namespace: default spec: ports: @@ -61472,26 +119057,21 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - M8kdd: rg - SdYUtgj: zuHEEr - ysGlNYAJk: 9XN2vwiVm + annotations: null creationTimestamp: null labels: - "": "3" - N9sd2SXL: f2jOHWU app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Pt-webhook-service + name: yHixING-webhook-service namespace: default spec: ports: @@ -61499,337 +119079,276 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - M8kdd: rg - SdYUtgj: zuHEEr - ysGlNYAJk: 9XN2vwiVm + annotations: null creationTimestamp: null labels: - "": "3" - N9sd2SXL: f2jOHWU app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: IsP97jKm + name: 8WTbb namespace: default spec: - replicas: 1300059575 + replicas: -1025225275 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING strategy: rollingUpdate: - maxSurge: 1829832553 - maxUnavailable: 1914125389 - type: ǝ愘媭ºš(Ȝ·ɛ炰ȏP谵ZŢJWǁ + maxSurge: 1620202023 + maxUnavailable: 274330924 + type: 壻Ȃ鲤幂 template: metadata: annotations: - L0jYB: A5gEIsPpn6 - eN: 9zBUgl - tB1TKvd: gZ + 54zKz: jYt9 + AqNeS: 4qPWyA + G5a7A: HiY + Yz12: "" creationTimestamp: null labels: + EuL: QLG + XG: "" + Yk: 1vwgUydM app.kubernetes.io/instance: operator - app.kubernetes.io/name: Pt - j: a2vBpk + app.kubernetes.io/name: yHixING + hzGggQD: yviK + oW: 0Y + sjUSas: toa spec: - activeDeadlineSeconds: -4473331471797640700 + activeDeadlineSeconds: -1971868051082364200 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - - key: WtS9OI - operator: 蔢癹霻H戃鄛S滂Ȧ骥汯#9Ʉ磑 - values: - - IfgQb - - KIZI9qHFyZ4 - - 9AkfR - - key: HxNFZalo4X - operator: ' /鵈ʂ岦蟷W''靸wMÜ招淡:' - - key: cwk - operator: 氠 - values: - - DUl - - I7Tg2QAQ1 - - HwbVLO - matchFields: - - key: XHUD - operator: 齞 - values: - - LFjdN - - 9y9GVU - - pImdQW - - key: 46th - operator: Zʧ嫤w輋棋Y鶃'>喺e - values: - - YvTAnoZ - - MqrwRUN - weight: -1667780946 - - preference: - matchExpressions: - - key: oyV2 - operator: TɎɹ罣潋woŝ痆佩fV - - key: lNxmM - operator: "" - values: - - "" - - WZ3y - - iFwwT4 - - key: Txqz - operator: gɳÿ²悊扉|厏ǰ嘽kŝf淊 + - key: X3VCza + operator: ŭ唊Ǜƞɶ葻Ā* values: - - e5K9 - - 8zta - - 9MbX + - wTKp + - ERDbGr3 + - qv + - key: AtvIaK5 + operator: i膏丅燝ǟ + - key: kXeyrV + operator: kĔ matchFields: - - key: Fp1JEU4leiiAl - operator: "" + - key: "" + operator: șC_憭ʭ湜佯T8DT砆 values: - - U8Y7vH - - 84cKUu - weight: -1435032077 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: + - NOHQwMW + weight: 1381343894 requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: 7nN - operator: 3w錷.ɢıġ - values: - - 9D - - nwawx - matchLabels: - xJea2DphvCSd: H2V4I - matchLabelKeys: - - Eiq - - pY - mismatchLabelKeys: - - tk5sP2 - - 6jFL0 - - NF - namespaceSelector: - matchExpressions: - - key: w6LCuiR - operator: 罾Ɩǧȸ輄Á$ê@Ǔ鵢Ƚ±C鴘xêʝ> - - key: yjriYJV - operator: ȩ>鱪*藟c#梱ƝM - values: - - "" - namespaces: - - o - topologyKey: 1DypqJK - - labelSelector: - matchExpressions: - - key: IgjgPwpL - operator: -ǰ揌)儧綇z鿱馬爨ǘ僙 + nodeSelectorTerms: + - matchExpressions: + - key: T79U + operator: ɧɯ澫ŧ兣ź*ƥOw values: - - e4mA - matchLabels: - 97oQcVQ: ZTBkU - IiUrcBfQ: h9Ox3x - matchLabelKeys: - - FCGgC - mismatchLabelKeys: - - Ng2l - - U0sCE6 - namespaceSelector: - matchExpressions: - - key: a4N0mhOu - operator: 砙ä莑ŪȃƔ" + - w + - key: Vo8 + operator: 牖~褊!\蚅ċ|ƣFG=ʗ陴_川vɠp values: - - 5j31oV1 - - jQ - - Ry9FtY - - key: zT3v + - t + - 1DzvnmfGZEV + - xKQ + matchFields: + - key: C04n operator: "" values: - - ZUGOWvA5Az - - yMZG - - qjb3DDS - - key: "" - operator: ­裗皊1ʝƾ欟鎱ƻ洩Ⱥ羸ƞð$ - values: - - 2C - matchLabels: - ONHjXf: WMMnrhT - namespaces: - - 72hx - - U166hU2r6y6zq - topologyKey: JpnDY8IxT - - labelSelector: - matchExpressions: - - key: "" - operator: ȫ儮晽Cz_ĆaF^a獰 - values: - - a - - bCNSG6Z - - "" - - key: fBa - operator: ǵ鉟攒{<§Eǐʋ鷨怴恞氈*=Ŧ - values: - - yP59C - - YpED - - KjXa - - key: 4Hb7Gg - operator: 鱚%陫ƌNÿ椁f - values: - - aPv - - gJTm - - nd1WIoc - matchLabels: - 8qy4emP: rnz - FQj95Sk4: wTC1oK - TLe9rk9: 0rMfRXxd - matchLabelKeys: - - N06JQc7qiY - - ij1 - - JNFNiUbG - mismatchLabelKeys: - - 5kE - - 3mxI - - mQ - namespaceSelector: - matchExpressions: - - key: 2nU - operator: 銮Ǿʼn跄ìvŠ - values: - - "n" - - 86w5 - - key: 8zhS9WR6 - operator: ĴĐʩ讨齑njɵ5>謔û`筬 + - aHQBq + - xVJz + - key: oh + operator: Whʍnɞ蛁寈Ɨɫűȕ鵚×銽窓1ɧ values: - - ZzT8lG - namespaces: - - jFo - - BEQ - - w - topologyKey: 7DOuy - podAntiAffinity: + - kqEuTdf9 + podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: - JRBgl2HLhz2: xify57C - ZNNwIS9ficU9: t2SFAI - bGoTegc5: i2 + T: tAXcL0 + V0ZO: cQJbNBL4n5 + v6FbY: qDVcB matchLabelKeys: - - fE2kJcm - - s1MZyeI2Q - - vOfj29L1 + - yePHie0 + - vw + mismatchLabelKeys: + - CRpRwcuOEZ namespaceSelector: matchExpressions: - - key: n0tNeb - operator: ɚĬčƟ懨ñõ鋽Öc + - key: 1mDDe9 + operator: Ȯ沀榇演Ɲ譅6S values: - - CIzuR - - key: caPANg - operator: 6)SÅöNkȍƓ粢蓃İľ竛gƫµ + - D + - 9OcM matchLabels: - V2ZQQ23f: TyI - fyRqME: yYq - j: jryt6D1P - namespaces: - - n9XK - - gdp - - 46iyg - topologyKey: 89mw328 - weight: 471035160 + S9: 4d2S8pDx6qt + SA4J6BA: xoPw9xv + z: jqVbCB + topologyKey: du9Ao9T + weight: 1468290431 - podAffinityTerm: labelSelector: matchExpressions: - - key: Fc5J - operator: 駝?e泉Ƚȃ.łʩŭ«\6U + - key: uoBkHnTW + operator: Ʋɼj/鑙#!ħ values: - - dUlUF - - 4X - - NrMJLN5L - - key: XcS - operator: '!#Əo漠ɌÀ{廴Ĺ魷''Ő黅LS' + - OO + - m0iR5eEF + matchLabels: + iS49J1: eo3z + sEhsr: "8" + mismatchLabelKeys: + - "" + - Z3BkmE + - 7vjLUdg + namespaceSelector: + matchExpressions: + - key: e7tsTrj + operator: Đʑ瞥綡痢%äɬD values: - - Vfx5zI19VL - - nqyavQu15 - - a92N - - key: rV90 + - 2yW5YS + matchLabels: + BgcyI2: sD + Wjsu: 0FtXt + nNLiy4: 3AVrp + topologyKey: "9" + weight: 1759502779 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: 9qz74 + operator: 姵U錦Dz朚浙覐鬑Nz輊 + values: + - VBm + - 7cv + - key: "" + operator: Ǿ賏u烎Ď+沚NɁƩf暢ɀŽ憺誾{ʑ + matchLabels: + zz: fHFz4v0M + matchLabelKeys: + - "" + mismatchLabelKeys: + - s + - Vc + - WAz + namespaceSelector: + matchExpressions: + - key: wsgg1nz + operator: 哢ǗőÛC#1¨ŊŹŊp + - key: "1" operator: "" values: - - TltzFD + - i39kyd4 + - key: Rjjmd + operator: 蓄1C + values: + - 3jAI matchLabels: - d6B: r0WnIivK - xRiHsFz: Dwo + WFLHH: XJuW + sCBfi: D6R + z8U: P7FdAC + topologyKey: rQLA + weight: 1674830551 + - podAffinityTerm: + labelSelector: + matchLabels: + K9WHX: NuxCH + maWcqq: kxCw matchLabelKeys: - - lRUNowK - - aIm - - gmM2x + - ZmOCOym + - wZ2g2md6x + mismatchLabelKeys: + - 1a + - w85D1yL namespaceSelector: matchExpressions: - - key: nJ6wcK0 - operator: 遼Ŕ礨鷐脐颥雡鸐濪VsD泿 - - key: 1WT - operator: 槵0? + - key: eUJi1 + operator: (uÃ適癗dž + matchLabels: + 9Q: BL + topologyKey: LGshJ6 + weight: -1253640651 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: yh9 + operator: 碔TƁ謘 values: - - cOxaCg3I - - key: 40a - operator: XǎolÏä¾ + - Ve1ypW + - kCva + - "" + - key: hL1Nz + operator: 筷ȭ且樂牄齣ƲO驣眍 + values: + - "" + - key: 1EaXNjt + operator: ł慻譑DŽZ芸 + values: + - bDLU + - rgBDhrqy matchLabels: - 16A1HW: X - Q414: xlhb - SmjL7zlcNgm: PzJxwu - topologyKey: y7uX - weight: 698697850 + GRp10v: J95 + naqvy: thHr0tL4w + matchLabelKeys: + - QW + mismatchLabelKeys: + - UfA + - ScfR + namespaceSelector: + matchLabels: + "04": wcnUl0EW + namespaces: + - noZ3 + - qEV + topologyKey: 8h5O + weight: 421293484 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - - key: Agq7S - operator: 践9S堵ɘ郓\O歿鎈üɑ怸ţ铦 + - key: BKsXZ + operator: "" values: - - w7 - - S0Zf - - Shuj + - NIJ9 + - DWERr matchLabels: - RoMzVq: La - matchLabelKeys: - - JfeT2 + OA: gKXA mismatchLabelKeys: - - mLT9uf - - iLBzJde - - 83pbm5 + - 4tP + - J4vm4n8 + - "7" namespaceSelector: matchExpressions: - - key: 8v - operator: 曩掺ɷƓg蚯áȬ倣{ƹ'跳溅 - - key: GGo05 - operator: ƛȴ=魕詶P豏7N1倇Ƌɏɷ + - key: Oa + operator: 彦膀WK氙U嬥蜎t}jȮǁű" values: - - Vng4 - - Ef1S - - 4Ajmlkuz - - key: Gw - operator: ¸Ũ3Ƙ盲hDĉ + - HqSj + - key: wz2RZV + operator: ʄ峢h謓勶蓿 values: - - 4ecIh5 - - OBhYox - - UGW + - aViZO + - o8nC + - fkE6q + - key: OxV8VXtyiC + operator: '>Ɗ愞' matchLabels: - 1Jvk1K: MCSZs5 - Xh4MDYJ: TSM - xsm4OYL7: RhKDcn + Qyt: FP7AwrkY + t: c8BEj5L namespaces: - - L1WADE - - NJdtb - - RStHE0T0 - topologyKey: f + - bmwgBy + - X8tn8Th + - lFqPal9 + topologyKey: "6e2" automountServiceAccountToken: false containers: - args: @@ -61839,25 +119358,23 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=3ncj - - --configurator-base-image=Ozfq - - 5orCeu - - v7kr + - --configurator-tag=u + - --configurator-base-image=TPAc command: - /manager env: [] - image: Ozfq:3ncj - imagePullPolicy: Always + image: TPAc:u + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 321 + failureThreshold: 399 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 406 - periodSeconds: 862 - successThreshold: 686 - terminationGracePeriodSeconds: 381 - timeoutSeconds: 131 + initialDelaySeconds: 720 + periodSeconds: 992 + successThreshold: 659 + terminationGracePeriodSeconds: 489 + timeoutSeconds: 26 name: manager ports: - containerPort: 9443 @@ -61867,22 +119384,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 248 + failureThreshold: 334 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 775 - periodSeconds: 283 - successThreshold: 575 - terminationGracePeriodSeconds: 700 - timeoutSeconds: 235 + initialDelaySeconds: 252 + periodSeconds: 964 + successThreshold: 958 + terminationGracePeriodSeconds: 657 + timeoutSeconds: 851 resources: limits: - cpu: "275" - memory: "916" + cpu: "751" + memory: "208" requests: - cpu: "391" - memory: "252" + cpu: "438" + memory: "219" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -61894,83 +119411,118 @@ spec: readOnly: true dnsConfig: nameservers: - - s7h5u7RQdK + - 41sorB33 + - 2g7f + - xf options: - - name: WOUE43n - value: Nr26Y - - name: a - value: iO7e + - name: Mx + value: wELDyO + - name: 1tcBvK23BT69o + value: hhs56 + - name: bvg + value: T searches: - - E3IgL - - Xb4A1Hhi - - AcuLKAAOS2 - dnsPolicy: ƨ莼ǟ<疄ȵǔ - enableServiceLinks: true + - s25 + - "55" + - HGkB + dnsPolicy: 閌k牘Ⱦ ephemeralContainers: null + hostAliases: + - hostnames: + - wFZetw + - fGma + - mwLkljZhY8nh9 + ip: rUtWpPG + - hostnames: + - QBs7SX + - hr + - aR + ip: o03ImUaa hostNetwork: true hostPID: true - hostUsers: true - hostname: pdJJj0z + hostUsers: false imagePullSecrets: - - name: pG + - name: "Y" + - name: dMWEdsM initContainers: [] - nodeName: oerpOC nodeSelector: - AiS5q: anZtnTwfy - preemptionPolicy: ƙ$ħƦ - priority: 1159578060 - priorityClassName: "0" + a: r + eCJnhsKq: AE5n4RCt + hn4HoimI3: qMsr2Cp75uKw + preemptionPolicy: "" + priority: 364279596 + priorityClassName: UR readinessGates: - - conditionType: e麏ǍǛp!üĥ瞑Ì唘叁 - - conditionType: "" + - conditionType: ɛƤ砻PƳsĕ鴆:Ɍ蘛 + - conditionType: 粢 resourceClaims: - - name: PAxX - - name: 5SfIIB - restartPolicy: U刞膶ƓP楠ɚ瞼人 - runtimeClassName: ujUXGY - schedulerName: DeAp - schedulingGates: - - name: HNRQD + - name: oZW + - name: XLtZBG + restartPolicy: 谽 + runtimeClassName: 9F1lbzmuV + schedulerName: pWZ5 securityContext: - fsGroup: 6191068330256292000 + fsGroup: -5510930515482674000 fsGroupChangePolicy: OnRootMismatch - runAsGroup: -7551376484633501000 - runAsNonRoot: true - runAsUser: -4593421443118058500 + runAsGroup: 7435962813127169000 + runAsNonRoot: false + runAsUser: 8634968706269563000 supplementalGroups: - - -8514564952898012000 - - -1515799728164621800 - - 2544088899832977000 - serviceAccountName: PkxO0N5e + - 4998646178116102000 + - 6581577714527332000 + serviceAccountName: Ymi8 setHostnameAsFQDN: true - subdomain: K8qFMYK - terminationGracePeriodSeconds: 4708904236068725000 + shareProcessNamespace: true + subdomain: 8GF8 + terminationGracePeriodSeconds: 5456055603645806000 tolerations: - - key: v2jZ70 - operator: l墯熡/Ȁǀŭ"Ƭ - tolerationSeconds: 6387464848797268000 - value: M7Iwkkc + - effect: ǯ矴苅ɠ暡běJɧ + key: IiLZnjHW0 + operator: 貭螎妺'阙tɬ`^溤ɻʘ壌 + tolerationSeconds: -2823534263961733600 + value: 3uTJ + - effect: 返ƔȨ鴪ʒ-軻+Ž屜^ǻ鬏 + tolerationSeconds: 5972720753201202000 + - effect: Dp鷲Ȼtɷd´iƱbĦ岕 + operator: Ŀɖ"ɪ眭ƄxĖ鈗兣鱖显=Ȇ + tolerationSeconds: -2886177850537770500 + value: At topologySpreadConstraints: - labelSelector: matchExpressions: - - key: pVTF09oEq - operator: ŐŐ^)ȍ琗DŴķ - - key: Wlz - operator: 秚"Ƴǎ鶙J仚瀵d宝ʀ驐`肪n陬臱曠 + - key: Nkpr + operator: R~脊ľ碮dž筪煺ɇJǖ暏塗Ġ values: - - Fd - - key: pMyYG57 - operator: əʐ裧ʒo瑀ɢ菏ñ\佔üƫ + - OQd matchLabels: - IZ6h1ki: Z4 - T: TaAp - t0w: 6RY - maxSkew: -1416850991 - minDomains: 1267419823 - nodeAffinityPolicy: P>堣®}) - nodeTaintsPolicy: k傯0Ơ - topologyKey: 9ErUbIkWTWx - whenUnsatisfiable: 謭š漪ZqiɆ蹖ɭš'0<Ȳ|4;Ɂ + USzZL: koYBIbq + py6g4Vun: x + w5GT: "N" + matchLabelKeys: + - lKa2KMJ7w + - OuX0gzH + - DS3nRVt4p + maxSkew: -623744214 + minDomains: 376208763 + nodeAffinityPolicy: 肧 嵖 + nodeTaintsPolicy: Ĺ + topologyKey: AIvqn + whenUnsatisfiable: 逩$;oɝ枂ɐ^+cÝÅ焏6 + - labelSelector: + matchLabels: + 1i5I4UN: 5Qq48 + s5E0VEkJ: d7 + yJxt: 7UVK6F7Li0 + matchLabelKeys: + - l8EUPy + - OpoJ52XwW + - RP0od + maxSkew: -1858645886 + minDomains: 1623598401 + nodeAffinityPolicy: RkC熭蒁k穖eAnʗɬ8­玁 + nodeTaintsPolicy: Ȱāa×Ɠ鵍[Vp9toʤK + topologyKey: "n" + whenUnsatisfiable: uƈl塻柜Ɔi馿实Ē9潳 volumes: - name: kube-api-access projected: @@ -61993,57 +119545,49 @@ spec: - name: cert secret: defaultMode: 420 - secretName: faro4 - - name: NBK1ScbB7 + secretName: k + - name: 2hip + - name: QfSB7e1 + - name: cG --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: - M8kdd: rg - SdYUtgj: zuHEEr - ysGlNYAJk: 9XN2vwiVm + annotations: null creationTimestamp: null labels: - "": "3" - N9sd2SXL: f2jOHWU app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 name: redpanda-serving-cert namespace: default spec: dnsNames: - - Pt-webhook-service.default.svc - - Pt-webhook-service.default.svc.KkAJ5ce2Z + - yHixING-webhook-service.default.svc + - yHixING-webhook-service.default.svc.8HDrm7 issuerRef: kind: Issuer - name: IsP97jKm-selfsigned-issuer + name: 8WTbb-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: faro4 + secretName: k --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: - M8kdd: rg - SdYUtgj: zuHEEr - ysGlNYAJk: 9XN2vwiVm + annotations: null creationTimestamp: null labels: - "": "3" - N9sd2SXL: f2jOHWU app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: IsP97jKm-selfsigned-issuer + name: 8WTbb-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -62055,7 +119599,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: IsP97jKm-mutating-webhook-configuration + name: 8WTbb-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -62063,7 +119607,7 @@ webhooks: - v1beta1 clientConfig: service: - name: Pt-webhook-service + name: yHixING-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -62084,20 +119628,15 @@ webhooks: apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: - annotations: - M8kdd: rg - SdYUtgj: zuHEEr - ysGlNYAJk: 9XN2vwiVm + annotations: null creationTimestamp: null labels: - "": "3" - N9sd2SXL: f2jOHWU app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: IsP97jKm-metrics-monitor + name: 8WTbb-metrics-monitor namespace: default spec: endpoints: @@ -62114,11 +119653,9 @@ spec: - default selector: matchLabels: - "": "3" - N9sd2SXL: f2jOHWU app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 --- @@ -62129,7 +119666,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: IsP97jKm-validating-webhook-configuration + name: 8WTbb-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -62137,7 +119674,7 @@ webhooks: - v1beta1 clientConfig: service: - name: Pt-webhook-service + name: yHixING-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -62153,585 +119690,503 @@ webhooks: resources: - clusters sideEffects: None +<<<<<<< HEAD +======= +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TR7et + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: uI-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: TR7et + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: uI-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - ET9H70: 1pFh - b28jlJ: gH2i - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - "": "3" - N9sd2SXL: f2jOHWU - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Pt - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: r8KRW4-crd-job - namespace: default --- testdata/case-074.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: mywUt8tuv - health: - healthProbeBindAddress: lEjIvsWJ - kind: xeKMrAMG - leaderElection: - leaderElect: true - resourceName: y36 - metrics: - bindAddress: sn1CAiMF - webhook: - port: 391 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null - labels: - 6tS3Gzxd: hgT9pfe - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dHTgQf-config - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - 6tS3Gzxd: hgT9pfe - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dHTgQf-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 4MPmeCPMB ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null labels: - 6tS3Gzxd: hgT9pfe app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 4MPmeCPMB-webhook-service + app.kubernetes.io/name: TR7et + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: uI-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: uI-migration-job-default +subjects: +- kind: ServiceAccount + name: uI-migration-job namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 4MPmeCPMB --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - 6tS3Gzxd: hgT9pfe app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dHTgQf + app.kubernetes.io/name: TR7et + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 04o0-migration namespace: default spec: - replicas: -43968875 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 4MPmeCPMB - strategy: - rollingUpdate: - maxSurge: 861090835 - maxUnavailable: 1344206621 - type: 黛g°CÑz書嶁綺Ɩ觗ȁɇ1C窏Ǻ掑瞝 template: metadata: - annotations: {} - creationTimestamp: null - labels: - 0N: HPYHri - OF: "9" - app.kubernetes.io/instance: operator - app.kubernetes.io/name: 4MPmeCPMB - sV6F: "" - spec: - activeDeadlineSeconds: 5605029791004607000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: 29pz6m - operator: ɒ枊 - values: - - H - - GsmPZVPg - - qhLjEE2 - - key: aokb - operator: 賾 - values: - - f - - jj - - "n" - - key: lj9biws7b4 - operator: T殷靈蒓ɜȟƱ躀+崢Ǭ - matchFields: - - key: "6" - operator: ɂ门s剃Ȧɇrƀ ʁŒ銊ɚƬ帗ŊY - values: - - Dp3I7EZ - - key: "" - operator: ɿ`釨m傮牜jjɚ4ĥ眲禳咈 - values: - - rqTIcSKPDCM - - key: cFnV7K67 - operator: '`坎''芺ȟ' - weight: 1798342112 - - preference: - matchExpressions: - - key: Zv21MQex - operator: Ņ娑飳ĿŠ眻S絺磂ojLjwuXɶÝC% - values: - - "1" - matchFields: - - key: 5LN - operator: '}眙!ůŪe4ŢpCƌĥȏ愩Ȼ牭h' - values: - - kRmh - - qW - - key: zb - operator: 嵯â鄂E攐QŤň5 - values: - - F - - dDYSHp - weight: -1824401339 - - preference: - matchExpressions: - - key: "" - operator: we-ŵƹRʐ蹥 - values: - - b8T - - EH - - M - matchFields: - - key: zH97 - operator: ʪ - values: - - MNt - - 4Co - - mHm72jT - weight: -1301190656 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: E8ERmHeuRZ3 - operator: '}颩柫ȟHz阗聄sɥa7r]&' - values: - - RE - - ZZ - - WwOU02JqhKSN - - key: qQfq6fdwQo - operator: '|s4啡搾|' - values: - - bWr3lRF8cdngh - - key: GlH - operator:  aȎĴƧQ絆Js6 - values: - - 2qtxfd3u - - kWed - - z - matchLabels: - goi: gfbJHCPb - msPUfCDOxV: ku - matchLabelKeys: - - EyDpC9 - mismatchLabelKeys: - - Pu - - "5" - namespaceSelector: - matchExpressions: - - key: Udjo - operator: Ć - values: - - lq8im2lc - - p9hA - - YVwuOp - - key: CkDeO - operator: łĨ觩?Ĝ#詩ʬa枅龆鐝|ŎŲò - values: - - YTD - - tHjV1 - - C2K - - key: wjII3N - operator: ɂ%0Ǻď - matchLabels: - 6aJdy4: "n" - namespaces: - - rJe8ts - - O5zk8 - - KvN - topologyKey: Jhx4 - weight: -264164496 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: L - operator: 穢kŝ!ȇ槄m殃迅鬇愕懆櫋 - values: - - l - - 5JA - - ur2pXHUlz - - key: R8xGdHg - operator: ƿƛþǽć霄 - - key: wwRWJw51 - operator: 砒Ǥä蘱趢[O - values: - - R - - AU - - kdwH - matchLabels: - PD: T - mismatchLabelKeys: - - A8qsTHJ5ZbMK - namespaceSelector: - matchExpressions: - - key: BT4x6 - operator: VŴ瓔X>ǒ° - values: - - 1yLB - - f3KFrgJKJiE - - key: "2" - operator: ɩ鈉ʜà耯 - values: - - DTAVD - - fAXv4 - matchLabels: - 9zVWUzsHJ: TFe9I - 48UKSy: gHQ7B - KcVgD: bzIxKS6sn - topologyKey: iiY6f - - labelSelector: - matchExpressions: - - key: jSMEy9tj - operator: 殷峆ɋ陱緩ʯȐ璪Ȓ击%Sʖ煛e(奫鬺秳 - values: - - Jb - - 9iiNXF - - key: 8e - operator: 諃掦 - values: - - 26q7hr - - P0 - - key: oQ - operator: '''蠁^戨5NVn<差s觨煕呠' - values: - - sXHEgze6r9JP - mismatchLabelKeys: - - Wjont - namespaceSelector: {} - topologyKey: NpYPYvTMBHqc - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: uv - operator: Z舽皾B8ʝʼnn奮鑳 - matchLabels: - DZNzSypnNd: OM - matchLabelKeys: - - NR0 - - GL - mismatchLabelKeys: - - "6" - - QfJ22cik - namespaceSelector: - matchExpressions: - - key: "4" - operator: 稇j´=iýɰ - values: - - msBBCt - - BYK7j - matchLabels: - EQy8E: k9p4 - qA: i9g - namespaces: - - Zy7qVf - - Cgqu - - bU2 - topologyKey: BI7G - weight: -570707983 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: 6vKbNM4p - operator: 陥t殷~ǩʕ霸¹ŧ - - key: b1sSLKMIk - operator: qC夨6獮丕»ƴɈ - values: - - "n" - - O2p9W - - 0AFawSrw - matchLabels: - 3tI7I: "y" - IN9: "" - LtnEuZ: d4tf1IZE3 - matchLabelKeys: - - je - - 79Ppx - namespaceSelector: - matchExpressions: - - key: S6 - operator: FXǴ - values: - - Sqrf2 - - mu - - key: o - operator: 夆 - values: - - txYP1ujkZWO - - 7iab8KMe7A - - F4LIf - - key: KjJ - operator: Ʌ諭bʒll罌床 - values: - - "" - matchLabels: - jFkqSGhA: AQzK0Z9 - q6Oev: 9veSz - wR4R: p - namespaces: - - lT - topologyKey: Knl2pTupr - - labelSelector: - matchLabels: - 5smDgD9TD: W66iRY9Uc - 9qTg9iB1: AI1fB7 - p0i: AtyQqRAriE - mismatchLabelKeys: - - o3dWg5L - namespaceSelector: - matchLabels: - 9DwVlkD: 9GPaQR9HR - tz5: efgpCt - z0: owPgU - namespaces: - - H7dPr - topologyKey: WB - automountServiceAccountToken: true - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=8YPjvr - - --configurator-base-image=w3qgVe7 - - "n" - - H7B3A1m + annotations: + RZwy: Vu5vld + uziX03U7: cN + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: TR7et + spec: + automountServiceAccountToken: false + containers: + - args: + - migration command: - - /manager - env: [] - image: w3qgVe7:8YPjvr - imagePullPolicy: Always - livenessProbe: - failureThreshold: 617 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 538 - periodSeconds: 45 - successThreshold: 413 - terminationGracePeriodSeconds: 624 - timeoutSeconds: 978 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 595 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 506 - periodSeconds: 408 - successThreshold: 243 - terminationGracePeriodSeconds: 297 - timeoutSeconds: 213 + - /redpanda-operator + image: RF7Jmqe27:bC + imagePullPolicy: Never + name: migration resources: limits: - cpu: "636" - memory: "523" + cpu: "568" + memory: "632" requests: - cpu: "206" - memory: "172" + cpu: "511" + memory: "80" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - bga8iMz - options: - - name: YZZ - value: gk - - name: T1 - value: nTT9rY - searches: - - laTKpor1A - - eBE0i - dnsPolicy: 犓ʈ髌^?脰蜫霩 - enableServiceLinks: true - ephemeralContainers: null - hostIPC: true - hostUsers: true - hostname: fe imagePullSecrets: - - name: Dm9pfeb - - name: ivq7l0 - - name: jrO6LT - initContainers: [] - nodeName: ZTyPf + - name: J0IiEdad nodeSelector: - 7MLcksU: bLkMrL - OyGw: IZ - QPHL8: x9 - h: LVPqH0 - nz: jL - preemptionPolicy: ǦǬɄ歿煸ȍ矦澎ȕ'瘝njQɟ哓 - priority: -1800304797 - priorityClassName: VaSOV98 - readinessGates: - - conditionType: Kǘ嗆无秼炫掟聫ç庖撬6沙gɖTS·Q - - conditionType: ȐŐʝ螛厔ò.汚ǦũT凅匳Œ蜔1蠤柫 - resourceClaims: - - name: cON3C3Auy7T - - name: oBb91o - restartPolicy: ŗ - runtimeClassName: 1jv - schedulerName: gD - schedulingGates: - - name: YENK8 - - name: BD4ibDV8U - - name: ylCnVd - securityContext: - fsGroup: -2860612089304590000 - fsGroupChangePolicy: Always - runAsGroup: -1827725402989350000 - runAsNonRoot: false - runAsUser: 8839503618715715000 - supplementalGroups: - - 2412557130195790300 - - -7346098406697862000 - - -4814383466567724000 - sysctls: - - name: kJ4ycc - value: 0o09 - - name: StUND9 - value: 8a9tO - - name: GommwMBaA - value: NqvEE - serviceAccountName: C2ljrknKo - setHostnameAsFQDN: false - subdomain: vJD - terminationGracePeriodSeconds: -6615004201982806000 + szN: fp2ozQlS + restartPolicy: OnFailure + serviceAccountName: uI-migration-job + terminationGracePeriodSeconds: 10 tolerations: - - effect: Ɠ癏A诔Ǭ*,ŧ筪Ê3aąm烘  - key: i8cH793 - operator: ɦw匝鞱ɏ弳簪1SƱĩħ2K滥 - tolerationSeconds: -3374367227524388000 - value: 3j4 - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: CrqiYWNMp - operator: ǒD貯6,{w\(ȢU? - - key: fdx7 - operator: æǃĺ|%ʡR曷Q瓞Ú - values: - - jalZ - - key: HaURTVl - operator: ɌL妨涾Fȵ`l騅ʼnS - values: - - C - - GG - - ozmK4 - matchLabels: - R: Utb6ETP4 - matchLabelKeys: - - nq5L8J - - u6zb93 - - lfNz6 - maxSkew: -546249673 - minDomains: -459798189 - nodeAffinityPolicy: zɽ莄/3录筘ʅ8 -ʞ - nodeTaintsPolicy: ev訅)麤Ƈl泚Dž氜õ - topologyKey: lUBy - whenUnsatisfiable: 蟶ŁȠÔ0谏 - - labelSelector: - matchLabels: - gjMYRi: 2RlZeR - vczCL: eTK7Jnk - matchLabelKeys: - - DQtU0 - - 6fvPm - maxSkew: 375766521 - minDomains: -551712245 - nodeAffinityPolicy: vǵ鳈 - nodeTaintsPolicy: ĄƠU`P紪d訿亸Ëö牷ã - topologyKey: "Y" - whenUnsatisfiable: "" + - effect: 続{jz + key: LOaa + operator: Ƙɰ軅ɼıšHH嵐酵Ū"呍a + tolerationSeconds: 2937501916471661000 + value: xK + - effect: 4Ę泵őĝdž鲘 + key: R + tolerationSeconds: 6898808429247402000 + value: rb4g volumes: - name: kube-api-access projected: @@ -62751,121 +120206,8 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: CcbjlS - - name: Y1n8j1syq - - name: m45i4rPu - - name: t3Cy ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: null - creationTimestamp: null - labels: - 6tS3Gzxd: hgT9pfe - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - 4MPmeCPMB-webhook-service.default.svc - - 4MPmeCPMB-webhook-service.default.svc.YI - issuerRef: - kind: Issuer - name: dHTgQf-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: CcbjlS ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: null - creationTimestamp: null - labels: - 6tS3Gzxd: hgT9pfe - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: dHTgQf-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: dHTgQf-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: 4MPmeCPMB-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: dHTgQf-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: 4MPmeCPMB-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None +-- testdata/case-039.yaml.golden -- +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -62873,23 +120215,20 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - TfmSjDQ: xDJr + 9eKE: ayih32GI helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - iMdWdUM: SiPHNH6j - oFoZcs: 8LViNh0JD creationTimestamp: null labels: - 6tS3Gzxd: hgT9pfe app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 4MPmeCPMB + app.kubernetes.io/name: yHixING app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: xPlFoa8U-crd-job + name: TxdHR-crd-job namespace: default --- testdata/case-075.yaml.golden -- +-- testdata/case-090.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -62897,45 +120236,49 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - e6mSM: MVXAO - zKu2Al: wC + DxAFTmru: 8nIlFqE + zLK: RRb creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: "567" + nI2ZSs: 4AI8h + name: drBf namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: E6z + apiVersion: 6e health: - healthProbeBindAddress: rxHDaXPt - kind: EETFn + healthProbeBindAddress: Kx + kind: vA2F leaderElection: leaderElect: true - resourceName: k8 + resourceName: v75JBm metrics: - bindAddress: Nuy + bindAddress: V webhook: - port: 320 + port: 403 kind: ConfigMap metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-config + nI2ZSs: 4AI8h + name: Wo-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -62943,15 +120286,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-metrics-reader + nI2ZSs: 4AI8h + name: Wo-metrics-reader rules: - nonResourceURLs: - /metrics @@ -62963,15 +120308,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-default + nI2ZSs: 4AI8h + name: Wo-default rules: - apiGroups: - authentication.k8s.io @@ -63169,22 +120516,24 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-default + nI2ZSs: 4AI8h + name: Wo-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: Hjo9sbxO-default + name: Wo-default subjects: - kind: ServiceAccount - name: "567" + name: drBf namespace: default --- # Source: operator/templates/entry-point.yaml @@ -63192,15 +120541,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-election-role + nI2ZSs: 4AI8h + name: Wo-election-role namespace: default rules: - apiGroups: @@ -63240,15 +120591,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO + nI2ZSs: 4AI8h + name: Wo namespace: default rules: - apiGroups: @@ -63267,15 +120620,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-rpk-bundle + nI2ZSs: 4AI8h + name: Wo-rpk-bundle namespace: default rules: - apiGroups: @@ -63301,23 +120656,25 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-election-role + nI2ZSs: 4AI8h + name: Wo-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: Hjo9sbxO-election-role + name: Wo-election-role subjects: - kind: ServiceAccount - name: "567" + name: drBf namespace: default --- # Source: operator/templates/entry-point.yaml @@ -63325,23 +120682,25 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO + nI2ZSs: 4AI8h + name: Wo namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: Hjo9sbxO + name: Wo subjects: - kind: ServiceAccount - name: "567" + name: drBf namespace: default --- # Source: operator/templates/entry-point.yaml @@ -63349,23 +120708,25 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-rpk-bundle + nI2ZSs: 4AI8h + name: Wo-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: Hjo9sbxO-rpk-bundle + name: Wo-rpk-bundle subjects: - kind: ServiceAccount - name: "567" + name: drBf namespace: default --- # Source: operator/templates/entry-point.yaml @@ -63373,15 +120734,17 @@ apiVersion: v1 kind: Service metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-metrics-service + nI2ZSs: 4AI8h + name: Wo-metrics-service namespace: default spec: ports: @@ -63390,22 +120753,24 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 8ZgI1VH-webhook-service + nI2ZSs: 4AI8h + name: L07-webhook-service namespace: default spec: ports: @@ -63413,204 +120778,239 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO + nI2ZSs: 4AI8h + name: Wo namespace: default spec: - replicas: -524693962 + replicas: 1077780708 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 strategy: rollingUpdate: - maxSurge: 596897809 - maxUnavailable: 476555247 - type: Á.ɫ鑧8颶 + maxSurge: 1083035120 + maxUnavailable: 1593683340 + type: 續g列Ɣ.ɳɆ+ template: metadata: annotations: - "": gl6v - M57szq: J - j96kfNUus: Ijr55i - z1la2G: S9Z4dW - zWc6Q: BJX + Af: o + nsW4: L5nc + qEgJ6l5Y: Jc creationTimestamp: null labels: - Lp: YkknZbO - Yp39: "5" + 2XSKh7: RHTX9zBs + 3L1V: fRaQV + 8Og: 9sewKu app.kubernetes.io/instance: operator - app.kubernetes.io/name: 8ZgI1VH - jAdo: EO + app.kubernetes.io/name: L07 + l52wT: rKC + o: fm + oLa5n: tszi spec: - activeDeadlineSeconds: 8860282710824060000 + activeDeadlineSeconds: 7426556808200361000 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: + matchExpressions: + - key: 4YNPv + operator: c:z0h+ǖ蹔璤>bȬkC«B. + values: + - 9jj2w matchFields: - - key: NjKat - operator: 8螫ȗ鿬擧疿Ȉ"Í艓ŀȞʂ + - key: m6mSFDJ + operator: ġȻÂɾ煇鉭葬(麸9ćǖ-Ɔ0劫 values: - - Q07AV - weight: -671966542 + - IqPiu + - key: ztqx + operator: _ʞðäS撒鞏? + - key: 5k8t5 + operator: $Xƽmxɪ]Ɯ桌o3 + values: + - H0 + weight: 531350691 requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] + nodeSelectorTerms: + - matchExpressions: + - key: 356l1qk + operator: 鎨%通8ȉ2?窛đ(ɏįíyð饽w腲ɍ + - key: "" + operator: 戳t樽妓m矅ǹ龎eum)猄遘擢輶醚Óå + values: + - e podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: Po + operator: ɶlJsFM揺Ðo铞ō + - key: KxYm + operator: 壨kdG倫坋Z儮|檖簻Nv綥? + matchLabels: + fd5Zyx83: wUQY + matchLabelKeys: + - WMy6R + mismatchLabelKeys: + - SZwHr + - w1U + - 8G8t6yXwo + namespaceSelector: + matchExpressions: + - key: Vd + operator: N縏 + values: + - Y8MfZ + - amK05 + - pHx + - key: iYWqou + operator: 'Õ掮f<ɯ)刎軲棿鴛ǝ炄兦@ȷȺ憰 ' + values: + - nvX + - do7UW + - key: zo9ciSv7 + operator: ~-ɭ + values: + - C + - Z1c + matchLabels: + "": HuJ5lU + 3jRy: kaBE + shCNeEq8: 8VCDok6s + topologyKey: KsilH6PoPPG0 + weight: 1148632629 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - - key: JdLPzIs - operator: 虶.久诗6焱4ûȹİR均窼Iz !ʣ~ - values: - - g10v6 - - Ye7T9NByS - - UHKd - matchLabels: - CnWM: Td2 - EpaY: iD7y - XU1g: "" + - key: bJt + operator: f; matchLabelKeys: - - 6rLaeisT - - eXD4 + - FQMC + - 6w5GHqG9N + - POXxmlaC mismatchLabelKeys: - - jksVjgbzc8 - - 1ESly7NIox - - Tf6ZqIhHbE + - OOhk + - RUJnYvl34I + - tiTIT + namespaceSelector: {} + topologyKey: yaMngcwS + - labelSelector: {} + matchLabelKeys: + - WErO3r + - R1 + - 7omme + mismatchLabelKeys: + - wvL74 namespaceSelector: matchExpressions: - - key: k5XlXm - operator: 3C料 Ĩʬɥr9猲ŏb - values: - - IZ3 - - S8n6hDZM0 - - key: 0T1i78Zr87 - operator: ȉ蔝Jɞ坟挢Ȍ篵 - values: - - kkn6pKzGi0 - - L3JML - - UlSVv2BdK - - key: G4CooKG2g - operator: 妷ȓ賸髋L捙¢ɼđ=lL嬑Ƒ + - key: 04i + operator: 舣ŏƜ屫ǑsƢ縔hODŽ values: - - zAcj + - 5HLbg + - "5" matchLabels: - j9pPtlwzC1L: Wcao + OoGFPD: BQbNs + WQhgu44ZdII: 2XbkPw namespaces: - - q - - nQjk5TJ - topologyKey: v + - KLQj21cs + - lPKL + topologyKey: ypOInzNz + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchLabels: - X5IxJRjL: Z - uUAzszYsIv: MQoS - xT7h: aNUmPsb - matchLabelKeys: - - TCSw35Qar + sCE6zRKBM6: Nnh2 + u4ExUV2: w + yr: wz2PC mismatchLabelKeys: - - zz3 - - x0UG7P + - Tvv6K + - S + - E47R3eWM namespaceSelector: matchExpressions: - - key: UWyVNR - operator: Ū,¤栈騴ȵPmʏ*欍D3ƩǞ謯 + - key: lYXfE + operator: "" values: - - X5 - - 30QC - - key: AYTFwhY - operator: ZbƮX淊ʖVǕǎ齘Őȿŝǃ - - key: r - operator: 萒Ǹ蔂Żȣ鎢eɩ瓱钆璊ȃ鳟Nƿhņ + - b5eP3 + - 2U5L + - key: 01i5 + operator: 癋鲏簷Ĵɂ«Ėxzé{\Ù$醝6 values: - - VM7fJ - - cuPKF - - d + - 0ZMLtwC + - TtKO + - key: KfpD + operator: :ȜU闁ƥ*@Ƃ鵊ɓɃƍ柚ɾW!A抳 + values: + - ONi matchLabels: - 3se: xpRnM - MjKtZoqo: A9Gi - bwC: 8uPx + "": 0yku namespaces: - - jc - - "" - - 4o - topologyKey: g - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: VVc4ZUl - operator: 6锈ĤǪCâ,?遞ȴȿ憩 - values: - - OlFd5KNuAd3J - - i7yr - - key: rbVsKp - operator: ʤƞƷ釻鷆Ǥ蚂晩悅墴f - values: - - FdjUOhW - - key: 0p0ze4wO2Ug - operator: 7幔{睱ƔyƖʜ郹` - values: - - P4z - matchLabels: - auDXF9AYZn: lX9ux - uAP: MXn - namespaceSelector: - matchExpressions: - - key: 0xEOAYJPk2z - operator: cǷŔvĻ諢鯳sȜȋ"gȥ^i扛粐拇 - matchLabels: - X: 649QQrf - namespaces: - - wEB - - bd2 - - Tu47 - topologyKey: VJ5 - weight: -433891957 - requiredDuringSchedulingIgnoredDuringExecution: + - uU + topologyKey: 6AS - labelSelector: matchExpressions: - - key: 50XhN1ox5Gz - operator: ă縠樜肾醲ʪǙGbƊ坝搔棼KC - values: - - "" - - ArO - - key: "" - operator: ;śÇ咎v - values: - - VD - - L5oyxK6o - - RneGz - - key: JgcCF - operator: Ă刁晋攴Ã×灝颼Ȗ0鱷ɮżǃ勣甬渔諨ɗ + - key: UX8 + operator: =g>ȚʋI楚UȁȩhɎô稞Ţɾ values: - - sucw - - 2xTwY - matchLabelKeys: - - mUlPcM + - wMSQ7pJHieM + - a8 + matchLabels: + cXg: PQX2vPSKR + xAxD7: s2NdT mismatchLabelKeys: - - NTaltxi - - HCj - - wSN + - 8o + - GqWJ07b + - orc namespaceSelector: matchLabels: - "": "" - 7B: UhZIlRd7NS - topologyKey: ldQ + "5": 8u8tWkV + ksLu7e: DJyLZOeGIG + namespaces: + - mWMme + - OkpN4 + - zCJ3 + topologyKey: mH2Koq + - labelSelector: + matchExpressions: + - key: VHW + operator: 妻 + matchLabels: + "": l0im5GY + HiOR: itM + mismatchLabelKeys: + - PEnC + - W + namespaceSelector: + matchExpressions: + - key: TBroOcL4 + operator: ʧÏƽ娲屃o´陴CȺČ½駇爮D + values: + - Xw + - Sm + matchLabels: + OdRD: "8" + W2: m2po + namespaces: + - 168ZXg + topologyKey: oEYq automountServiceAccountToken: true containers: - args: @@ -63620,26 +121020,23 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=hk - - --configurator-base-image=9kg - - eyxGhI - - 9YL - - 6HEr + - --configurator-tag=tr + - --configurator-base-image=MxYHsvk3O command: - /manager env: [] - image: 9kg:hk + image: MxYHsvk3O:tr imagePullPolicy: Never livenessProbe: - failureThreshold: 501 + failureThreshold: 751 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 430 - periodSeconds: 301 - successThreshold: 779 - terminationGracePeriodSeconds: 220 - timeoutSeconds: 656 + initialDelaySeconds: 167 + periodSeconds: 599 + successThreshold: 902 + terminationGracePeriodSeconds: 187 + timeoutSeconds: 755 name: manager ports: - containerPort: 9443 @@ -63649,22 +121046,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 847 + failureThreshold: 601 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 377 - periodSeconds: 911 - successThreshold: 668 - terminationGracePeriodSeconds: 881 - timeoutSeconds: 52 + initialDelaySeconds: 621 + periodSeconds: 191 + successThreshold: 703 + terminationGracePeriodSeconds: 320 + timeoutSeconds: 236 resources: limits: - cpu: "483" - memory: "426" + cpu: "979" + memory: "649" requests: - cpu: "582" - memory: "5" + cpu: "589" + memory: "772" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -63676,146 +121073,123 @@ spec: readOnly: true dnsConfig: nameservers: - - 4mEBMGUN - - eW0ncQ1 + - FNqDGX + - eMXTC options: - - name: fGdpRd - value: "" - - name: a68vK - value: fFsKfckTBell + - name: k + value: "y" + - name: BKaHiRyOuIJ + value: Pec + - name: vrbJ7 + value: vS searches: - - DGNape - - sTUo + - QmwrWFmwT5 + - "1" + dnsPolicy: 匵Hêèǟ嬀ś珡9ɣ颒仳&źEî ephemeralContainers: null hostAliases: - hostnames: - - S7 - - Nb - - MSI1c5z - ip: PO - - hostnames: - - oCyf - ip: zigho2MJj - hostIPC: true + - qc + - EsiahLF + - "" + ip: Od94GJ + hostNetwork: true hostPID: true hostUsers: true - hostname: Q + hostname: nX59cJ7Q1 imagePullSecrets: - - name: dO + - name: 1ey + - name: xc1 initContainers: [] - nodeName: 2NjpJ + nodeName: wzDYEmoHf nodeSelector: - 8X: FmCUcCRg - JUps: pHT46I1 - Jo11wn: qv - KxkrbPV: BfrcT - o4: QmvS85 - preemptionPolicy: 抝鸁!ɢưʩõ!¸宁剓Ǖ硰 - priority: 1899005886 - priorityClassName: QdsxfmGTz - readinessGates: - - conditionType: 薜K5羜}_ǜ.ȼÏu摴À - - conditionType: mɶ蔼峫兩ƏɤɁ + "": fqW + 6cwd518: vDr5 + SRqdM: "n" + preemptionPolicy: IJ@Əŧɘ + priority: -68369161 + priorityClassName: Usu resourceClaims: - - name: F1E - runtimeClassName: vmC7Hvzm - schedulerName: 4UKQ + - name: za + - name: 2B8jAE + restartPolicy: $ɦz豭¹ľ*贲ŕ饽 + runtimeClassName: 2nrZ + schedulerName: e0h schedulingGates: - - name: rnq - - name: 2V + - name: tC + - name: 3VNu securityContext: - fsGroup: 8926242825143552000 - fsGroupChangePolicy: Always - runAsGroup: 8747486125952529000 - runAsNonRoot: true - runAsUser: -451060548145037500 + fsGroup: 8760724915021653000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -7117884882793934000 + runAsNonRoot: false + runAsUser: 93401498521963710 supplementalGroups: - - 3746112542108710400 - - -6527083130648772000 - - -2015245842731106300 - serviceAccountName: "567" + - 6515785209000024000 + sysctls: + - name: UbiWP1Qy + value: 92c0 + serviceAccountName: B setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: t1GfKasszD - terminationGracePeriodSeconds: -2460823117072627700 + subdomain: He + terminationGracePeriodSeconds: -3790827313059005000 tolerations: - - effect: ƽqêTȨ茬鳰质襭 - key: Nq5 - operator: 烡t裖ɤſƼƥ蟨V士踏Ċ - tolerationSeconds: 6699689125267329000 - value: wKVtov - - effect: 嗘採鳖 - key: 8y9WC - operator: 艽œɝKʖ萣殹ɅA2鳷{鯽垲 - tolerationSeconds: -2365666611357915000 - value: 4nCYmTIs - - effect: 渡悵z了揾Â. - key: bLxG9ujcZ - operator: 筋Z煭ƞ,犃 - tolerationSeconds: 3907366189500161500 - value: GhmdPdN + - effect: y篃b=ɠiP鞔仄 + key: BcPi3U + operator: 琦 + tolerationSeconds: 7300458800534152000 + value: EqJYLF topologySpreadConstraints: - labelSelector: matchExpressions: - - key: cX - operator: 出ŊǹOǔƱG + - key: JaxhC + operator: G¾'梍<ɿ-g隆勚 + - key: Tg23Dy + operator: 鱬餼剭xYȭ舐Ȅ婜頓^>ǾMH@ƌ values: - - 0tJrY - - iFkr4hmK - - Xy - matchLabelKeys: - - dXst - - LK2q - - NqP64 - maxSkew: 1537329546 - minDomains: -1720337935 - nodeAffinityPolicy: ȓ籴ɭ$ȼ6¬慈B - nodeTaintsPolicy: ɚ,ɝƲ溤宗Ê轧ƞ| - topologyKey: "" - whenUnsatisfiable: +hē}鿐suwo諗hz豴ȴɮ + - r + - zR + - key: Q0q6KDuUA1A + operator: ĵ[GĆǓɠpǞ + values: + - bwz + - v + matchLabels: + GXa: lz6itoOFa + maxSkew: -1518162657 + minDomains: 1464511912 + nodeAffinityPolicy: Tȏ0呍ƙcɥK;á}^蔱ƽ鼼膘鰥 + nodeTaintsPolicy: '!ȢNJ穗勊ƨZNJŌljC黇崶' + topologyKey: BKxJdiei4 + whenUnsatisfiable: Bt髩;Ǘ乼ą仔À縍找祡 - labelSelector: matchExpressions: - - key: PYDcUs8Zq - operator: 铇秫 + - key: jO0waM + operator: ƻ渎áh鿒ʐT燁Ȱʼnʃ)Ŭ values: - - SqDWeja - - tTedc - - wb - - key: 8zULko - operator: 疄 + - ak4c + - key: WHbCk + operator: i挘枚.H苅黵彄Ʌɱ¦w轎ȤĊlʅ&ɦ values: - - fAUHq - - ZZOhi - - "7" - - key: 6V - operator: nč彝}ʇTi嚡vMȸ昻 + - HFZw4g + - 0yGnEPt + - nMy3 + - key: gtgv2tJx + operator: 鏖- values: - - h - - "" - - 8AQ0 - matchLabels: - 4kmh: QCa - VXwKZfw: LO8AyhU - hWrGDCfa1Ij: 9zFgf08 - maxSkew: -275470034 - minDomains: -1225374972 - nodeAffinityPolicy: 蠱擙 - nodeTaintsPolicy: ĘįÇɸŦ菽彅`虞 - topologyKey: i - whenUnsatisfiable: ',ɯŚ(ɖ叕Ȉ8芒杋_LJ鴄ȢVǬ醺' - - labelSelector: + - D2j matchLabels: - OZyVul: PQQ8b1 - cL3I9BNam: EzlBz9 + 4IEJ: dxBx + Qq: HC5nG1B2 matchLabelKeys: - - brAOgDpDb - - FZNd90EVkKB - maxSkew: 1309446521 - minDomains: 250354744 - nodeAffinityPolicy: ɦv佸ʝ - nodeTaintsPolicy: 男ǂȄx - topologyKey: i8m8 - whenUnsatisfiable: 荩Ŧ\攽ƾ槉E{蔄ʑź + - id7 + - ZB + maxSkew: 1631460802 + minDomains: -1455938103 + nodeAffinityPolicy: ÛĊc剖#OÛæ啰薖rK0侽ȓ戃Y® + nodeTaintsPolicy: Æ怅Ċ-Ȕ硱AohȠWb&躶伭轿ɒ§朩 + topologyKey: "" + whenUnsatisfiable: Ǩ1ļ/礷杏UÊ慉1殹ʡłƳ肷y断阩Ķ volumes: - name: kube-api-access projected: @@ -63838,49 +121212,54 @@ spec: - name: cert secret: defaultMode: 420 - secretName: pV - - name: G7ezke + secretName: Y2CEr + - name: yus + - name: zb --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 + nI2ZSs: 4AI8h name: redpanda-serving-cert namespace: default spec: dnsNames: - - 8ZgI1VH-webhook-service.default.svc - - 8ZgI1VH-webhook-service.default.svc.iuxdfE + - L07-webhook-service.default.svc + - L07-webhook-service.default.svc.o issuerRef: kind: Issuer - name: Hjo9sbxO-selfsigned-issuer + name: Wo-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: pV + secretName: Y2CEr --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: annotations: - qA: WyamBB + 2Kv4rY7: ihBdOLL creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Hjo9sbxO-selfsigned-issuer + nI2ZSs: 4AI8h + name: Wo-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -63892,7 +121271,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: Hjo9sbxO-mutating-webhook-configuration + name: Wo-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -63900,7 +121279,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 8ZgI1VH-webhook-service + name: L07-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -63918,13 +121297,53 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + 2Kv4rY7: ihBdOLL + creationTimestamp: null + labels: + DZeu: yUBayuz + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: L07 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + nI2ZSs: 4AI8h + name: Wo-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + DZeu: yUBayuz + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: L07 + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + nI2ZSs: 4AI8h +--- +# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: Hjo9sbxO-validating-webhook-configuration + name: Wo-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -63932,7 +121351,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 8ZgI1VH-webhook-service + name: L07-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -63955,52 +121374,75 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - e6mSM: MVXAO + DxAFTmru: 8nIlFqE helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - zKu2Al: wC + zLK: RRb creationTimestamp: null labels: + DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 8ZgI1VH + app.kubernetes.io/name: L07 app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 567-crd-job + nI2ZSs: 4AI8h + name: drBf-crd-job + namespace: default +-- testdata/case-091.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: + L1Wi1Vv: trqviAw + arzbYiweWtKdUO: e + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MK + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + t: W + wH2b: "" + name: 7QeW namespace: default --- testdata/case-076.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 8MCt + apiVersion: 2g21wLfvha health: - healthProbeBindAddress: "54" - kind: hFpDu + healthProbeBindAddress: M + kind: hF leaderElection: leaderElect: false - resourceName: JCxBXAw6 + resourceName: ZaKPCipuSAF metrics: - bindAddress: Av + bindAddress: fpiHY webhook: - port: 329 + port: 288 kind: ConfigMap metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N-config + t: W + wH2b: "" + name: w-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -64008,18 +121450,19 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N-metrics-reader + t: W + wH2b: "" + name: w-metrics-reader rules: - nonResourceURLs: - /metrics @@ -64031,18 +121474,19 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N-default + t: W + wH2b: "" + name: w-default rules: - apiGroups: - authentication.k8s.io @@ -64240,25 +121684,26 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N-default + t: W + wH2b: "" + name: w-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: 8K2N-default + name: w-default subjects: - kind: ServiceAccount - name: YP12Q + name: 7QeW namespace: default --- # Source: operator/templates/entry-point.yaml @@ -64266,18 +121711,19 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N-election-role + t: W + wH2b: "" + name: w-election-role namespace: default rules: - apiGroups: @@ -64317,18 +121763,19 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N + t: W + wH2b: "" + name: w namespace: default rules: - apiGroups: @@ -64347,26 +121794,27 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N-election-role + t: W + wH2b: "" + name: w-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 8K2N-election-role + name: w-election-role subjects: - kind: ServiceAccount - name: YP12Q + name: 7QeW namespace: default --- # Source: operator/templates/entry-point.yaml @@ -64374,26 +121822,27 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N + t: W + wH2b: "" + name: w namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 8K2N + name: w subjects: - kind: ServiceAccount - name: YP12Q + name: 7QeW namespace: default --- # Source: operator/templates/entry-point.yaml @@ -64401,18 +121850,19 @@ apiVersion: v1 kind: Service metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N-metrics-service + t: W + wH2b: "" + name: w-metrics-service namespace: default spec: ports: @@ -64421,25 +121871,26 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: an + app.kubernetes.io/name: MK --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: an-webhook-service + t: W + wH2b: "" + name: MK-webhook-service namespace: default spec: ports: @@ -64447,496 +121898,359 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: an + app.kubernetes.io/name: MK --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - Ou: tUUeg100 - QOCh: CAl + Y6pF: 16c + qjH: CdtB5 + sseemE: EObsGst creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: an + app.kubernetes.io/name: MK app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - ib: 8cz - mKZJ: qFJ - name: 8K2N + t: W + wH2b: "" + name: w namespace: default spec: - replicas: -2075530003 + replicas: 465956058 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: an + app.kubernetes.io/name: MK strategy: rollingUpdate: - maxSurge: 2081592605 - maxUnavailable: 1885460453 - type: Wû.$Ȋ岭ÿ蜪郁`{`Ʃ + maxSurge: 114116698 + maxUnavailable: 1318520614 + type: RollingUpdate template: metadata: annotations: - AkeDnt5VPkKPy: "3" - Fr5Hh: v5ePByX47 - G: zDZSnjZA + b: "" + og: TTk + w: Ec1C5ZYz creationTimestamp: null labels: + "": 1u app.kubernetes.io/instance: operator - app.kubernetes.io/name: an - gTaNkih: g9Tr2xh + app.kubernetes.io/name: MK + rC: NsL + zMPbD3oC9e: "78" spec: - activeDeadlineSeconds: 5799411821181429000 + activeDeadlineSeconds: -1714400685903453000 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - - key: CYk - operator: D窖曏Ȟ + - key: wT + operator: ¬Ǡİ values: - - UWI - - JU - - FJ - - key: jPl1iS8UXT - operator: ŗ² + - K8zVs6 + - OiW9rn + - NSB50 + - key: xJD + operator: 匽rȼ&鉘ǢȽ@杊bµ£薏楽敬踵Ȕ}矁 values: - - uvH - - tO6XE + - AnJdD + matchFields: + - key: kDJ + operator: 轈塍懿鳛FĽǏ翼×鉁ca + values: + - 9HbNE + - WbS9R0Io7lh8 + - "" + - key: 19V7X + operator: Z懲豝玗鸚ŝ + values: + - Wgt + - VAiR3yri + - Mv4ZYnRW + weight: -1575671648 + - preference: + matchExpressions: + - key: GclSjduBY + operator: 許宆柑Ŀ% + values: + - A matchFields: + - key: JSUjCW + operator: 迿YóÕP碋^ƛ県B故p¹ɴǒ + values: + - NYS + - H5WI8 + - 80DCQFaVvMUZ + - key: FrjwMk + operator: 5] - key: "" - operator: Ʈ叐另5t綀ȝ° + operator: ),2C values: - - NETx - - RKzy1 - - key: csKN - operator: 抦Ɖ犘Mƶ涫ĭ + - Dr + - Utrrr + - XO + weight: 358541297 + - preference: + matchExpressions: + - key: ap + operator: 碸`檄E隅ìXkÍǜ?投|EN覯Ȃ抢 + - key: vRZs5 + operator: s|, + - key: dQtdl + operator: 礫 values: - - 0d7K3CL - - key: 6aFsNI - operator: a氙š宕ȩ酑ƷRđY5抩ȧɛ貪繮堀媌ď + - H + - Ngxjd2J + - zLKiCr632U + matchFields: + - key: lcT + operator: h`ñƞ柳ʨļ惜rŗ湫 + - key: 2CoC40 + operator: ',''ɛ惖ØtŴ氲_Ĥ' values: - - J - - "2" - - 42g5QN - weight: 247115514 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - 85yJ478d: Vo7 - NgQ5EH: o1bl - Z232YGd: Aep0 - mismatchLabelKeys: - - hI - - eIuV4 - namespaceSelector: - matchExpressions: - - key: l9AE4D - operator: "" - - key: NYsDY4i - operator: ǺYʄȨ_Ʈ,!Ã1ƮG睇 - values: - - M4KMQQtSS - - LY7S - namespaces: - - ohq - topologyKey: 9RQ2Zix2lXU - weight: -77294897 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: Eg - operator: Njƥʩ儐嚸氠ƀĆ垜 - values: - - t8T - - hag - - key: HJngluMZ1Gt4 - operator: 飗阂Ț - values: - - VcI - - tRuMlK - - GWMq3PG - - key: HS5QS - operator: TX屒~ÈJ - values: - - 69slSEWwH6N - - p - matchLabels: - 7x: nkheJ - 8yV5foq: 6kWv - nHtYZe: aLoixy - matchLabelKeys: - - 0CQ - mismatchLabelKeys: - - Zzfc - - p - - rOvKTF - namespaceSelector: - matchExpressions: - - key: RdOt - operator: 'ù§蜔醫(˯JÁ偻:' - values: - - i45 - - Fy4G - - "" - - key: 1eR - operator: "" - values: - - NianifQ - - key: CU8g5nTV9R - operator: 蟷<ʭ闻[恣Ɛ劉唌!E«栂 - matchLabels: - "": VZ6myuoXR9 - "7": SNzG - namespaces: - - ter5SPqDJ - - 6J - - gzGOT - topologyKey: uu - weight: -483029993 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: E1dAP - operator: ɵ`/Hû鬫Œ埙伋tĻȉ - - key: Yfh2 - operator: aɢÚɕ厀跈ŕǤ - values: - - q - - CNmr - - 8hZgCz5 - matchLabels: - G: kvGnDJb - uyI: GcT - wd4NZ: hlGF7 - matchLabelKeys: - - V62aP7 - mismatchLabelKeys: - - yLn8 - - n0b - - mNd - namespaceSelector: - matchExpressions: - - key: MgB - operator: ö敝蹍鱈r拖亴ǯNJdzk砎Aɞ - values: - - UKLTWJdvIS - - dZxRDbCPGw9g - - key: 79f - operator: ǯ繠ɜŜ懵櫳Ȉ箪o - - key: pltHB - operator: 塞)l忞@ - values: - - Dx - - whKmqiD - - TYUiI - matchLabels: - P87YGTPtc: uO - hOhm7hGh: tj - topologyKey: KZpV - weight: -574325726 + - qzkngYp7 + weight: 1573697926 requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: sM18uA4 - operator: 1;cćô麗ķÞȪ/D1l錐hǐƧ®T + nodeSelectorTerms: + - matchExpressions: + - key: iqEK + operator: "" values: - - HlAb - - t - - key: QKJ2PGSlUU59 - operator: 扺蓄@蛀折扤#0Ƃ + - BnEmj + - Pu + - Yl7 + - key: xHJ + operator: GŸɊț魁O­ values: - - XgJkOw - - key: t - operator: a萉Ū舐&NȐ賁諥旴4ī{Ǚėßȡn + - ebQ + - iZ6 + - SnW5FIj7WT4 + matchFields: + - key: T6TMAw1 + operator: 幔Ɛ諌ȕ\ǫVƯ + - key: DIQvo1 + operator: 誘殀世=~­7Ĉ啮êB values: - - oMj8iy - matchLabels: - inDd: "" - mismatchLabelKeys: - - 4Cf - - bzeKW - namespaceSelector: - matchExpressions: - - key: BZNNJ3 - operator: Òȕ瀦DZǦÝhɰ巗ȝ湹Ģ薵 - - key: hsnivgy5 - operator: Ł乗Ƃ + - 11FTC + - 4cBApZ + - key: W + operator: kø綘荦别鬁ɽKȒ^ʡy + values: + - 0lb + - iKxZOBh + - jrY3DM5 + - matchExpressions: + - key: EpMu0d + operator: ȷ晻f蕏l喽gd穁27ʤ=6 + values: + - tI8ubj + - e3MpfKkXN + - key: dsp6SlP + operator: 攟Ʃ肛櫃ǿ毶đ導`ƞ賷q彝ǖģ + values: + - 1zU + - 8E + matchFields: + - key: DoXLSFX + operator: e戄ɷ values: - - z - - 2XgDH - - r8P2 - matchLabels: - WrKQ: P - uO: NjkzU2I3 - topologyKey: X1v - - labelSelector: {} - matchLabelKeys: - - pWRDj - mismatchLabelKeys: - - Toir - namespaceSelector: - matchExpressions: - - key: aO - operator: '*kn摹ʬ.艂ɹȊešƳNDZȮjN闐' + - SFVnaP4 + - key: pSlK + operator: ßĔ values: - - v62 - - id0OWM - - a - - key: nfEz8wh - operator: 蜐溊ŽʆbNjJ撻狽y+鸻栂枡 + - GnUUD3Kyfwg + - 93NU5k + - key: LOXYaRMex + operator: ßɜ(蚄罺Ĕ撌癲柃XGL瀺Ⱦ values: - - v7Ceau - - wjfNLJAz - - o851xqcUl - - key: uM1a9 - operator: -lɴ;þ\睖咟储Ɯ穆ɭ.ŀɍg浊è + - 8nbcJ7z3 + - iOH53FU + - gTbKoNIUO + - matchExpressions: + - key: x + operator: ȓ6°ȓɍ{@懭aDǐ靲鋲ș枤k values: - - 2hZZ0 - - c - matchLabels: - "": t - namespaces: - - kZjv - - JnaG89i - - cw - topologyKey: mNZR4WV - - labelSelector: - matchLabels: - "": "" - Jhaaujnc9: SIzPY - pyYNPwm: ZVJxhvAKL - mismatchLabelKeys: - - Y4Irc2Irno5o3 - namespaceSelector: - matchExpressions: - - key: u8vap5 - operator: Āł鎝嚽q惞é蒐瑂Qŋɶ:ȽO姡 + - zE + - key: p9Qx3FpXwt + operator: gJǁƎODŽɗ"ß + matchFields: + - key: 3rQOU + operator: Ÿ惞ȟɝ,ɝȟ values: - - rQ4Fgo4 - - yphu9q - - key: R6xr - operator: ¼ - matchLabels: - 0xoWeHaR: UWA9sYUtyE - Hm366a: q - topologyKey: WVSXai0Q - podAntiAffinity: + - iW6 + - ay + - zj + podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: kOtCJmi - operator: Žȣ1OǠȌĎɮ - - key: Q4Ql - operator: '[rɄų堛' + - key: dU6OlTc + operator: Éƀ簈焈凧偍u嫈 values: - - HcBejxu - - xfu + - 5oY9y + - pI9 + matchLabels: + BhzF2R7y: awLd + Fe356q0RV: uCVBS + pqTa: CNZsT matchLabelKeys: - - XGNT - - D0dDfOI2 - - 4i + - 93D mismatchLabelKeys: - - T1lgExlW + - nzWkLm6n8lH + - gKn + - xskOFuW5h namespaceSelector: + matchExpressions: + - key: oFAencrI + operator: 筢 P ȶ2銍条纫 + values: + - t + - "" + - key: aJGJ6 + operator: "" matchLabels: - ETK2M: q - topologyKey: eO - weight: -227304814 + d: b7X2 + owpA28: rcy + v: PUZxD1d + namespaces: + - WHo6n7 + topologyKey: bvEpADM + weight: 1226445040 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: 4p - operator: jmCN冮}7阵ïA{ + - key: 5cV11ykE2n + operator: čǗ\ƍ椠/+緤ïɚl嚶Ƨ?ȷ9薷韼 + - key: Ey8lEo0 + operator: ɇƻm瞤%ʂ values: - - NCSN + - Bk + - key: QpOW + operator: 5ǸlØɱz髪yƤ諽5裵3龽3|W matchLabels: - 3hitzIhY0: kRzg - matchLabelKeys: - - Wfq + "": WFBa19zDl + UaEG9BtE: SyTK7uXmk mismatchLabelKeys: - - z4Qsp - - Ba6V - - 5l + - JGD5a + - ILrnAt namespaceSelector: matchExpressions: - - key: cx - operator: 锐h + - key: nY6 + operator: '*:Ž漡÷ɅɥƑ竼漛àĸ' values: - - 4hzpDaSK - - W1K + - "31" + - lnT + - Uy + - key: NLmeQg3Y + operator: Á,ǟ芛冟昢ř7 matchLabels: - s1Fu: GAMiUZ + vO: TAoy2 namespaces: - - IH - topologyKey: "n" - weight: -779432579 + - GPcfE + - KTNCRWxAgg + topologyKey: 0yYmj1xk + weight: -197811464 - podAffinityTerm: labelSelector: matchExpressions: - - key: d4xP - operator: 譵簿Ĕ葉 + - key: AzMtKeOS + operator: ƹʮ敳盗)-E7"ǰ莱Ə帗5櫮 values: - - kzLbV - - 2Rpm - - key: IXEAa4i9 - operator: Ă垁疞Ɏf捣狖踃ʨmǾ竭Q,ƧĂV牲 + - yFqc + - key: rTymvATFQX + operator: ZEʫɑƑWǔŤ阸糴\濥ȝ{ǭG values: - - Bff - - key: 1r - operator: ÐlľȻ諑ǀ蘒~ + - 2zL7b1cn + - IKN8 + - key: WL7P9y + operator: '}2j饚Ȝ-V貣$džsoơĽ' values: - - YXxr0 - - jr7l3j5CH - - a46rQd + - vyzptrSDQ matchLabels: - 6eV: 1ZiOZ - jj: X3Otox6p + T: AFZwOi + omxkx50: F matchLabelKeys: - - kLFD1Nt - - vqPu + - aAm mismatchLabelKeys: - - UI9S - - 7qP9 - - Ugqd + - coHImv + - 6qfwr + - kTRU namespaceSelector: matchExpressions: - - key: ai4IgX - operator: 鄖Ĥ(p囜Yvȴɤƭȑlpi6鐚 - - key: cExFkkWl - operator: 伹鷳焑恁鱑ĎŜ - - key: a - operator: 6頎漙ʘŮ萛aS寐·Ǫß!qġ-WǤ( + - key: ZF4 + operator: ʇ志祏鶜 values: - - CWVc8ngf - - EPis19IEdL + - goksXlnx26ii namespaces: - - FSApYwCg - - U - - Qp - topologyKey: 9CYHm - weight: 478561448 + - XwnZ + - oZedscASIS + topologyKey: WJOleyoe9AilS + weight: -1949722643 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: - matchExpressions: - - key: LbtXK0 - operator: 阄另嶋b(祢> - values: - - S7a9 - - zfEMJo71O - - kLVe matchLabels: - "": l9hC8Y - ZP1: xG + "": K + ekEjzFJABpF: nTd5kM + ga: zBY9Zw matchLabelKeys: - - IYGUJy0tZTD - - fDT + - ndb + - kyV41U mismatchLabelKeys: - - Ilfs8EI + - RZhrX + - WsnXDwJs namespaceSelector: matchExpressions: - - key: p6ZXg - operator: 0戺ß莤顬鴦Qů - values: - - I9igEx - - kYK21Q - - C0Qbx5WE4ryE - - key: dk6u - operator: 镱ʩbd - values: - - PYA - - Jk5c - - 8ytiAgm3I7e - - key: qcqeq - operator: ʁȜ摇撧Ñ说P逇ɚ.W _E壟ʇɮ睃 + - key: EC9dNce7 + operator: ­XʄǕ values: - - y8A4HwS + - 4uelgr + - RY47 + - key: YKBtnp + operator: Ľȿ8ŧ` + matchLabels: + Yv3Ec: "767" namespaces: - - Vj1hYzNpa - topologyKey: kbejvw + - Uh + - TmlA4 + topologyKey: LTB - labelSelector: matchExpressions: - - key: Q - operator: 'ķƜ戺ʮũ?菵Ó釘羸¤JʒǠ ' + - key: LZMZwu8c1 + operator: 宾ɯ values: - - F - - 7IKAX - - cp7sv4p - - key: nA6Xe - operator: ƌ姺踤,ơ虌袧]葝sRƛ + - 4VUoI + - qgTyUz + - key: Pn4 + operator: Ŀɫ濖Q頩ěȩƐ!唋\ values: - - wPrrV3Ufhj - - qlnoxIQCNv - matchLabels: - 8r: 8lk4CAL - AN7nb: dZhZ - matchLabelKeys: - - CVDiPfS - - c4Glm - mismatchLabelKeys: - - xy1Wyd - - nKj - - eBImiHdI6v + - pzD5Q + - pAz + - aTUO0D namespaceSelector: matchExpressions: - - key: 8KpuaONbUs - operator: FzgB轅籵鏣Ĥ湅À貏Nj扏4 - values: - - wmca - - L8Za8l - - j - - key: adh - operator: Øž - values: - - jFNIl3t - - Yj6dW9 - - key: bTbI8OzS - operator: 铽§紜č芒ȶpǽ嘧 - values: - - "" - matchLabels: - "": TN - topologyKey: D5FE - - labelSelector: - matchExpressions: - - key: vdSWz - operator: ĸne鐱$C慂_|ȒPĬ - values: - - cEH3048FJt - - key: TG30D - operator: '[幁I蟧&>¢ťȦ''蜛ÐB>' + - key: H6rFVua + operator: 唗 values: - - lAXsg - - 6nfeIMWRdjcj5 - matchLabels: - sxc: 3PThK - matchLabelKeys: - - I4G - mismatchLabelKeys: - - mAf - - ANIKx - namespaceSelector: - matchExpressions: - - key: hPuq - operator: 7ʂ鐤o舦yW螅lÂ/[顯LQ + - oXdmC + - YBB + - jWtX + - key: "0" + operator: "" values: - - La9apqCGq - matchLabels: - vYBX: wRg + - x7 namespaces: - - s - - tHp - topologyKey: 6UDS7Or - automountServiceAccountToken: false + - lPMp + topologyKey: RRm1TlG9U + automountServiceAccountToken: true containers: - args: - --health-probe-bind-address=:8081 @@ -64945,23 +122259,26 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=McKTb81 - - --configurator-base-image=D43Nf + - --configurator-tag=lWf3R8lv + - --configurator-base-image=zZLbhNE + - oMtn + - Q + - 3z6Z0vrvjWuC command: - /manager env: [] - image: D43Nf:McKTb81 - imagePullPolicy: Never + image: zZLbhNE:lWf3R8lv + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 136 + failureThreshold: 693 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 391 - periodSeconds: 132 - successThreshold: 75 - terminationGracePeriodSeconds: 572 - timeoutSeconds: 573 + initialDelaySeconds: 775 + periodSeconds: 140 + successThreshold: 898 + terminationGracePeriodSeconds: 893 + timeoutSeconds: 373 name: manager ports: - containerPort: 9443 @@ -64971,22 +122288,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 680 + failureThreshold: 772 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 563 - periodSeconds: 529 - successThreshold: 787 - terminationGracePeriodSeconds: 402 - timeoutSeconds: 84 + initialDelaySeconds: 542 + periodSeconds: 202 + successThreshold: 25 + terminationGracePeriodSeconds: 51 + timeoutSeconds: 467 resources: limits: - cpu: "890" - memory: "496" + cpu: "355" + memory: "848" requests: - cpu: "519" - memory: "201" + cpu: "654" + memory: "528" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -64998,69 +122315,126 @@ spec: readOnly: true dnsConfig: nameservers: - - 9vmm6l - - rtQO - - ycvTf + - "" + - wGa + - cbD6vx searches: - - mb00 - - G - - "8" - dnsPolicy: ' 觩.ʜ{X俓ğŇ倆[魀氎ƶ澷扈Ǫ' + - WT3ga + - BMNWNT + dnsPolicy: ɺ甾&çɬʝ洳 enableServiceLinks: true ephemeralContainers: null - hostAliases: - - hostnames: - - Ax - ip: 27VC - - hostnames: - - OHbL9b2Y - ip: n0WUVdZ - - hostnames: - - Lr2p7xlD - ip: p - hostPID: true - hostUsers: false - hostname: vXNpWb3Q + hostNetwork: true + hostUsers: true + hostname: sAG imagePullSecrets: - - name: RRfZPIJFA - - name: 8F - - name: S + - name: l + - name: wZ initContainers: [] - nodeName: 9U5 + nodeName: btGPq nodeSelector: - JfRWThU: e0lo - VmcbYx1: 3iv81ur - preemptionPolicy: N發Aj values: - - R0 - - 7Cxap - namespaces: - - "9" - - Lc1k - topologyKey: YEubNp - weight: 1559931225 + - NtFw + - c8ocx6 + matchLabels: + Xd: RBMRgt + fB5VVZRnFNF: Ch5hN9u + topologyKey: Gdjao5d + weight: 1863276625 - podAffinityTerm: labelSelector: - matchLabels: - "": uHKgs - AgVYm: mJw - mcJTQgh9U: HSiw + matchExpressions: + - key: En + operator: Ē芾4ȠǪb(ėWáVƂ泅喂Ȩ旞 + values: + - 6fe + - key: rLrYr + operator: 9蜚ă#Ƨ蠯Nj羖笷篑Ū + - key: FaCGY7 + operator: 3痯Ɨ<苺-Ȅ歑ʡ matchLabelKeys: - - Q51EWOHyhISt - - 6Tf - mismatchLabelKeys: - - dJIxyj - - SwH + - RXoII + - MM + - T7DSb1C namespaceSelector: + matchExpressions: + - key: v + operator: 匟oƁ + values: + - NqF matchLabels: - a: s6 - namespaces: - - t9H5HoI1d0Q - topologyKey: IfqTm5 - weight: 1473719947 + lYQfuaC: et1FOhjB6u0bn + topologyKey: 2DrH + weight: -72563172 - podAffinityTerm: labelSelector: matchExpressions: - - key: L57hw - operator: ő闡ʨN剏畈Rƣ7ǚ技鳼Ȑk + - key: WYvcZ + operator: ±ƫU諴B values: - - 2HI - - BmuO - - fyc7JE + - sVGIg93D matchLabels: - 7RR8: ucmGtD - IED: lAtn7No - matchLabelKeys: - - kjR - - Sk1tiya - - b7I27xv + jVjdQMRjClk: 7yWJ mismatchLabelKeys: - - B3aMuw + - 2nB + - zks8 + - K0kGATK1f namespaceSelector: - matchExpressions: - - key: 0e - operator: <ïS謜臆?梧洶Ȕ肮秖ĉp - values: - - XBfS7WlnyLT - - 9z8vxPH7ap matchLabels: - U5: ZP8Z3ha - eQxCbZeiJ9: xEN + RP7sq: qPxpKFpXpqj1y namespaces: - - 5I - - qNsL - topologyKey: FQ3bE - weight: 778594535 + - SYk38bH + - ZzryZH + - RmkISjQ + topologyKey: tijSyG + weight: 1559885295 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: + matchExpressions: + - key: lsCmzZ + operator: 9<ÞĚC膈摅űƨʜƉ訪ƕ主Ƭ + matchLabels: + 14zlKzVn0HhY: "" + matchLabelKeys: + - oWA1G + - 6prHp9Q + mismatchLabelKeys: + - FM + - aAVExkvDNy + - eaVvyBfoE + namespaceSelector: + matchExpressions: + - key: 53Nk066h + operator: N6K勖v夤?6ń瞩& + - key: 1THOSy + operator: ËĜȣ釓ï扻9浓D礌 + values: + - aqLudQ + matchLabels: + F: fuxu + IwcO: 2IzN2XSxxoK + namespaces: + - h + - gr4pab4sPh + topologyKey: QiOfKmkr7 + - labelSelector: + matchExpressions: + - key: 0ww + operator: "" + values: + - btwHX matchLabels: - 4IO: vfE2 - R: MDR + TRx: tMVTwhtem + bW: TN8KWOD + h4: BP matchLabelKeys: - - fxV - - 9fo - - i078 + - whE630QW + - QEbQ929uIHgP + mismatchLabelKeys: + - Bb38 namespaceSelector: matchExpressions: - - key: U8R - operator: =ȓh彵J¾řƄ + - key: eB + operator: KĞ<7I鈺琫w=>掷瀿慅®[ values: - - A95KgOEpvkSCc + - CPT1QEsYs + - VAt + - s + - key: 8IgFJ + operator: ¥氎裰}WL + values: + - Cly8CZuj9 + - IkiN + - key: bJjoTw8H + operator: '>w絀8ÎQ!珳=ŎBđƢ' + values: + - xEUM + - A0ntQcf6J012e + - ZFsEi4 matchLabels: - MpOQP2: 9qIM - mWx: LWxJKd6N + Jv: v + mE8A: 0SLIrs namespaces: - - e6z6L - - EKHJ - - oeacoFZ - topologyKey: uHi - automountServiceAccountToken: true + - hDkSA + - miWLozihw + topologyKey: BT + - labelSelector: + matchExpressions: + - key: TFwaHQ + operator: 佝 + values: + - XS7VdS2jiB5iJ1 + - dkr + - CvQohLd + matchLabels: + ROMUu: RziG + lfCj: LL + mismatchLabelKeys: + - e1sxrTk + namespaceSelector: + matchExpressions: + - key: J2 + operator: '''圢揿辔>裉ĈM怔ğȶ乲ǑǙB' + values: + - BhbfW + - Rapg6wcFsFY + - key: Q4sx + operator: Ĕrœ膯J騑1櫣fn轾v + values: + - l7yQI + - Gd + - 7qhas45TT + - key: E + operator: 瞳y + values: + - zHyUNJ + - e + matchLabels: + A1aTpjMJ: DR4Q1G + a9vAgM3: r4Q1jQTko + iL: ZScBjRtF + namespaces: + - UB + - Y6 + topologyKey: H8 + automountServiceAccountToken: false containers: - args: - --health-probe-bind-address=:8081 @@ -66064,23 +123062,26 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=Q9Q - - --configurator-base-image=M2Q + - --configurator-tag=EyNNr90u1 + - --configurator-base-image=6C + - IoP + - oEPSF + - w659VcIIlO command: - /manager env: [] - image: M2Q:Q9Q - imagePullPolicy: Never + image: 6C:EyNNr90u1 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 986 + failureThreshold: 42 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 618 - periodSeconds: 232 - successThreshold: 239 - terminationGracePeriodSeconds: 76 - timeoutSeconds: 911 + initialDelaySeconds: 33 + periodSeconds: 217 + successThreshold: 427 + terminationGracePeriodSeconds: 585 + timeoutSeconds: 793 name: manager ports: - containerPort: 9443 @@ -66090,22 +123091,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 957 + failureThreshold: 750 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 346 - periodSeconds: 576 - successThreshold: 950 - terminationGracePeriodSeconds: 760 - timeoutSeconds: 177 + initialDelaySeconds: 888 + periodSeconds: 672 + successThreshold: 953 + terminationGracePeriodSeconds: 179 + timeoutSeconds: 755 resources: limits: - cpu: "713" - memory: "257" + cpu: "840" + memory: "687" requests: - cpu: "43" - memory: "488" + cpu: "213" + memory: "914" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -66116,77 +123117,101 @@ spec: name: cert readOnly: true dnsConfig: - nameservers: - - EC options: - - name: o - value: NW08 - dnsPolicy: fǢǦ衡\ + - name: rHF + value: wbVPx + searches: + - Z + - YhcoeKtk8 + dnsPolicy: ƣƉ魔睡t>- enableServiceLinks: true ephemeralContainers: null hostAliases: - - ip: gclP + - hostnames: + - Sf55kgu + - V + ip: 8EIGmw + hostIPC: true + hostNetwork: true hostPID: true - hostUsers: false - hostname: I4Q + hostUsers: true + hostname: SyS imagePullSecrets: - - name: v - - name: gm8CVbo4EC - - name: EvmVWW9 + - name: B8MH + - name: MpD9S4 initContainers: [] - nodeName: fiLXT0q7 + nodeName: 8xSS nodeSelector: - BEMD: Yw9gx7IM9T - E800wg: RpXf6n - dx: nul - j9LZ: "6" - mp: 6gmys - preemptionPolicy: ɞ賮ě8銢旝I笏ƉA - priority: 1427962253 - priorityClassName: j9WcaYg + 8bS: HvFyOVS + BvjBFrbwA: 9PmXSzNC + NX68EWwX: v2ca6I + S: QgAVakORL + hPM5u6oyVr5Q: NILGBGR + preemptionPolicy: Uy + priority: -383467081 + priorityClassName: Zq readinessGates: - - conditionType: SĖ鴳șb吱印囼瑏ɖs攒梾'əǃ + key: U5tT7c8Z + operator: :"_Ʀ$赡2/哓4霻蔙z貖 + tolerationSeconds: 1686643156274961400 + value: U + - effect: Ś紇#²'窳ŃE楼ʌ繄IJň=煸\ + key: 3S + operator: ǾɄš&ɥ + tolerationSeconds: -1023764199846933900 + value: rztGBGzB7O + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: 0LVYyK7 + operator: 骽燔iP + values: + - EFe0Ex + - key: okGzu + operator: r鲟n缼À + values: + - zpDHv + - key: aO1 + operator: ɟ + values: + - vOdcIx8L8 + matchLabels: + CLm: "" + maxSkew: 446998704 + minDomains: -1084918344 + nodeAffinityPolicy: '}{õäȕ试瞁潬s攍mƸď' + nodeTaintsPolicy: 'ȿ灛暚ǀ藌p竒z ' + topologyKey: UOrE2qa + whenUnsatisfiable: sDIÉr鱵Ǘ volumes: - name: kube-api-access projected: @@ -66209,54 +123234,56 @@ spec: - name: cert secret: defaultMode: 420 - secretName: TL - - name: eL1vR4 - - name: r22bPa + secretName: KDzi --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: null + annotations: + 9LGf5lZUJKBVgzZ: YR + syzBd0: yol8 creationTimestamp: null labels: - "": sxTGebP3lQ - OQ: osmjf + GvLRN: sCR app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MxF + app.kubernetes.io/name: qv3g app.kubernetes.io/version: v25.1.4 + gi: 9j2 helm.sh/chart: operator-25.1.4 - mNkAknTCpbj0: NCMcS + zb8lDT9V: olwEfoWZ name: redpanda-serving-cert namespace: default spec: dnsNames: - - MxF-webhook-service.default.svc - - MxF-webhook-service.default.svc.Txg + - qv3g-webhook-service.default.svc + - qv3g-webhook-service.default.svc.AVM6O issuerRef: kind: Issuer - name: RQkbO-selfsigned-issuer + name: f3nfwQai-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: TL + secretName: KDzi --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: null + annotations: + 9LGf5lZUJKBVgzZ: YR + syzBd0: yol8 creationTimestamp: null labels: - "": sxTGebP3lQ - OQ: osmjf + GvLRN: sCR app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MxF + app.kubernetes.io/name: qv3g app.kubernetes.io/version: v25.1.4 + gi: 9j2 helm.sh/chart: operator-25.1.4 - mNkAknTCpbj0: NCMcS - name: RQkbO-selfsigned-issuer + zb8lDT9V: olwEfoWZ + name: f3nfwQai-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -66268,7 +123295,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: RQkbO-mutating-webhook-configuration + name: f3nfwQai-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -66276,7 +123303,7 @@ webhooks: - v1beta1 clientConfig: service: - name: MxF-webhook-service + name: qv3g-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -66294,13 +123321,56 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + 9LGf5lZUJKBVgzZ: YR + syzBd0: yol8 + creationTimestamp: null + labels: + GvLRN: sCR + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: qv3g + app.kubernetes.io/version: v25.1.4 + gi: 9j2 + helm.sh/chart: operator-25.1.4 + zb8lDT9V: olwEfoWZ + name: f3nfwQai-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + GvLRN: sCR + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: qv3g + app.kubernetes.io/version: v25.1.4 + gi: 9j2 + helm.sh/chart: operator-25.1.4 + zb8lDT9V: olwEfoWZ +--- +# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: RQkbO-validating-webhook-configuration + name: f3nfwQai-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -66308,7 +123378,7 @@ webhooks: - v1beta1 clientConfig: service: - name: MxF-webhook-service + name: qv3g-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -66331,70 +123401,67 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: + Hs8Cfsf: SbOxXEt helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" creationTimestamp: null labels: - "": sxTGebP3lQ - OQ: osmjf + GvLRN: sCR app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MxF + app.kubernetes.io/name: qv3g app.kubernetes.io/version: v25.1.4 + gi: 9j2 helm.sh/chart: operator-25.1.4 - mNkAknTCpbj0: NCMcS - name: gFdSAMIO-crd-job + zb8lDT9V: olwEfoWZ + name: LjYLOL6C-crd-job namespace: default --- testdata/case-078.yaml.golden -- +-- testdata/case-093.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false +automountServiceAccountToken: true kind: ServiceAccount metadata: - annotations: - R: KqQ - UBlg5: vWsmCt3b - gW8Gbi6vR: mj0Y + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: K + name: J2qRpt9 namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: OB + apiVersion: CGxTpM health: - healthProbeBindAddress: 8bURs - kind: Av59 + healthProbeBindAddress: "" + kind: DV1a leaderElection: leaderElect: false - resourceName: PZXXFRC + resourceName: ENC2EL metrics: - bindAddress: j + bindAddress: cpGulJEUfUy webhook: - port: 123 + port: 132 kind: ConfigMap metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-config + name: KXsg6-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -66402,16 +123469,15 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-metrics-reader + name: KXsg6-metrics-reader rules: - nonResourceURLs: - /metrics @@ -66423,16 +123489,15 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-default + name: KXsg6-default rules: - apiGroups: - authentication.k8s.io @@ -66630,23 +123695,22 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-default + name: KXsg6-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: 2rNNJQv8k5j97-default + name: KXsg6-default subjects: - kind: ServiceAccount - name: K + name: J2qRpt9 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -66654,16 +123718,15 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-election-role + name: KXsg6-election-role namespace: default rules: - apiGroups: @@ -66703,16 +123766,15 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97 + name: KXsg6 namespace: default rules: - apiGroups: @@ -66731,16 +123793,15 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-rpk-bundle + name: KXsg6-rpk-bundle namespace: default rules: - apiGroups: @@ -66766,24 +123827,23 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-election-role + name: KXsg6-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 2rNNJQv8k5j97-election-role + name: KXsg6-election-role subjects: - kind: ServiceAccount - name: K + name: J2qRpt9 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -66791,24 +123851,23 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97 + name: KXsg6 namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 2rNNJQv8k5j97 + name: KXsg6 subjects: - kind: ServiceAccount - name: K + name: J2qRpt9 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -66816,24 +123875,23 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-rpk-bundle + name: KXsg6-rpk-bundle namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: 2rNNJQv8k5j97-rpk-bundle + name: KXsg6-rpk-bundle subjects: - kind: ServiceAccount - name: K + name: J2qRpt9 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -66841,16 +123899,15 @@ apiVersion: v1 kind: Service metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-metrics-service + name: KXsg6-metrics-service namespace: default spec: ports: @@ -66859,23 +123916,22 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: vYy9-webhook-service + name: Tlv-webhook-service namespace: default spec: ports: @@ -66883,316 +123939,262 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97 + name: KXsg6 namespace: default spec: - replicas: 1839907985 + replicas: -1993597595 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv strategy: rollingUpdate: - maxSurge: 2088450349 - maxUnavailable: 1840693031 - type: ȫ + maxSurge: 1765614033 + maxUnavailable: 577102752 + type: RollingUpdate template: metadata: annotations: - IM3sXs3I0Zy: TeYL - UzdfbZ: Q93sKxpOW - W0XPx: bJSAcQQL6 - mHH06QCwLmo: UUGGbI - q5kBoN: 8C + E: MGTsek creationTimestamp: null labels: - 4snVwS: p2rZ - Dm7NOR: Riz - MZIsuxL: AwJ12sMED5Y + 0B90: DS2 app.kubernetes.io/instance: operator - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv + iL23T6g: i3UAi0 + omBc4D: z spec: - activeDeadlineSeconds: 5827888024592184000 + activeDeadlineSeconds: 7174288372376315000 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: - matchExpressions: - - key: ZvI4 - operator: '*銉V' - values: - - g - - fmzP - - XnP matchFields: - - key: UBNUy3 - operator: .嫜Ā莤ƂÏ7$n¤ʦ - values: - - B - - XJRt4GxZ4te - - XWUvuX - - key: dSk3l1SGw - operator: qpý + - key: q6Pr3z4Mzca + operator: xʧ蟳lʯ`8@wɝå瘑ğ1üq檞 values: - - F9PAciI - - key: j1tbYUPp - operator: È + - jGsIQc2o + - r + - EqBS + - key: aNGtuo2 + operator: À%ʐ)B values: - - MvKm2TS9C - - Wqw3JZHeO - weight: 394922191 + - PcSAPwFBU + - qyyrGDmd3 + - Dnu1u + weight: -1046930517 - preference: matchExpressions: - - key: S04aR - operator: 魃皘rdʒ混%Ƌ玫筻 - values: - - aT6a6 - - RP6Iu - - key: Q0wAZV8Re - operator: wʤO¬Ʒ7ɫ眜ǮŹ銣ɿ筺篗Â.ʌ + - key: nDu3 + operator: 幎åF烵wƿ-Y values: - - pxXW2A8F - - XscvROa - - Prm - - key: 2m - operator: ĆǑ)/Ȫx$慁耓憧®ʃ? - matchFields: - - key: XxjA - operator: Ǹ)ƗL.圠 + - XVCtIA2 + - key: 6tko + operator: țÜġ攕m愥 values: - "" - weight: -1959811061 - - preference: {} - weight: -582533792 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: gT - operator: Lȁ;籁'/"耂1f - values: - - 6OJWKLn6h - - rsL - - key: KD - operator: 华抎=幺opgŸƥƗ - - key: vRRX - operator: ¸鑯gćŞ - values: - - LNhYhw - - GHS7r - - IvAb matchFields: - - key: yc5E379mk - operator: DzŹc桺,Ù + - key: cTaskfhl + operator: '!懰à!z巀ǫ聏Ŀ洛' values: - - uHv1 - - PH6N - - K5emP - - key: 5k - operator: $斖豋拎5Ş + - I + - RTUk + - key: "" + operator: 衸ȑ睆悢Ɗm$碍g凴 values: - - bON0e - - qN - - key: XdcKTJ4 - operator: è + - acgX15 + - gPPCx + - key: JQS8dsDDW + operator: 鍪侥逬Ɉ礢mɌ)樭ǖ鱃Ő{¿HK values: - - crO - - lFM5sA + - XAFyZ + - mDGk + weight: -1470109753 + - preference: + matchExpressions: + - key: xdMof + operator: 颇Ķó喻靌m$RŸ,ɼʙãe + matchFields: + - key: VIMhEo + operator: cƁP赊.貦1歵偭d?昪1郳駘 + weight: 109100852 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: - matchExpressions: - - key: 7nzD7Cm3 - operator: "" - values: - - 8CbM - - key: Jw6 - operator: 滰Ñ咎ĪQ1PZ1eɺ!怰鲯ȣ偾ă獯n + - key: sWEgkzyWf + operator: ɪɑɞ諠0猡Z!ƭ檒ȭ matchFields: - - key: zLn8XE - operator: 舗堫mx鋢ĴȳȺʙƅD唶I誓飓簰Ú揚4 + - key: VR + operator: ;蝆燤 + - key: Ny + operator: 我拜襔ƜXKȨȟ栃鸬;ê0枀s values: - - Mx3lcyu59 + - dSjy + - key: Pf2poB + operator: 馛Ɍ鐠 NjŀȦ2瘰)脁j蒲兤ėơ!? podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: E6Mt - operator: B僁訊%ìOƦɐ澻嗯硓E - values: - - r - matchLabelKeys: - - KJ - - IoC - mismatchLabelKeys: - - Ekl - namespaceSelector: - matchExpressions: - - key: N7NLiOc - operator: 罖DŃ跤ɌÚY"ʈ 垵Ȏj+偹 - values: - - 8x2gP - - 1dW046 - - key: qEyBizSe - operator: 9Ƒ称B濩褟秔 - values: - - BZwp - - PH - matchLabels: - XW5CN39: 2t6bZ - p: "" - namespaces: - - Wg9Tm - - yo - topologyKey: 2ygHHl - weight: -713483233 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: YVm - operator: ʭȁEĺtǍɏ - values: - - Byil - - ujy - - Bj6 - matchLabels: - BOQ: Rf8poA55N - sjH: Ppy - namespaceSelector: {} - topologyKey: 1k - weight: 1632070199 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: URPq - operator: 諯ǠHA鷵Ʉ8çɈ磻Y衇ź餄Ò - values: - - w - - vI1NtrqG - - Q64vK1FrD2 - - key: 9YeHf - operator: 锌ǘg9削¦饹#ȋ瀥炒9K並Ȃ愅n - values: - - "" - - "6" - - terVH - - key: xrBazifS - operator: 礙¬r'剽Ò鷠ÞL抍杲滽Rþ媷 - values: - - YvkR - - rOHlGOH5 - matchLabels: - JP9afkoGR: nIU - namespaceSelector: - matchExpressions: - - key: T - operator: 伆珱ɾ.徭)蒹'嚵ÄɌ#đ雋V - values: - - B3FkLmTv - - key: TMO - operator: 摮ƦTImƠ稜湞 - values: - - UdNUxF5 - - G - matchLabels: - JEcloaEwldQ: "3" - namespaces: - - "" - topologyKey: UBB - weight: 1221058443 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: - matchLabels: - Tm0As: w7 + matchExpressions: + - key: RMd6Z + operator: ƫ盻Ë(锁C3o櫾 + values: + - HRL + - nzu7a + - key: sz4k9edh18oe + operator: 鯎 + values: + - X436 + - 9r00YJ + - CxtPgJ + - key: Je7BebNY + operator: j@牔愯¼ěľ8Ġ阱F + matchLabelKeys: + - yF8N + - yn mismatchLabelKeys: - - eMF - - JX + - 822V + - rdNZl + - 5kHY namespaceSelector: matchExpressions: - - key: nOa - operator: '{ʤFX貟gAǃ羝Zǔȫ傄fWJ' + - key: a528F + operator: 已 values: - - aw - - Fw5nhiw3hC - - jU6 + - LYEJ + - "" + - key: MUeKVboDkPn + operator: 驱鋐赋遻ʡo + - key: AIL + operator: 馕$qNƚ + namespaces: + - DYsdJ + topologyKey: mb + - labelSelector: + matchExpressions: - key: "" - operator: 湨槾(憯ʣĪÚ'呞镽 + operator: l3嶲ʞ=Y!+ÒƓęK蕝誴 values: - - ttKmnF - - DV49kUB + - ugI55WCRU + matchLabelKeys: + - 5NU8D + - AeuBGXu + - csP + mismatchLabelKeys: + - 5qplYNUD6w + namespaceSelector: + matchExpressions: + - key: f + operator: X坅ï + values: + - u + - E2jME + - key: B + operator: "" + values: + - SfA7 matchLabels: - ujQ3: f1r + eNXuwRax: liFL namespaces: - - K7OX2 - - "4" - - oV3YM4S - topologyKey: 7mrEfq0sI5P - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - "": Hxx6L - Vx: LP8Vou - mzqVhAZ4R: 4x5wYCuAq - matchLabelKeys: - - aEdgV4 - - 9HKlr - - F - mismatchLabelKeys: - - QpGG - - Gjx58eZ4 - - ES - namespaceSelector: {} - namespaces: - - hXSD - - CL - topologyKey: sCiMVRcuk - weight: -135368183 - requiredDuringSchedulingIgnoredDuringExecution: + - 2RXA7U9b + topologyKey: Lskq0l - labelSelector: matchExpressions: - - key: qmpkJ - operator: 草<ǂ - values: - - gohWKJ7 - - key: o - operator: "" + - key: 62CRwslTK1 + operator: 濍1礴 values: - - 3KjsZB618C5 - - fwio - - O1Cp + - AREVT84 + - GoqgW + matchLabelKeys: + - UAILumGhD mismatchLabelKeys: - - 0Dh + - F31wTd namespaceSelector: matchExpressions: - - key: xxpts - operator: 盯鸯č妅XK讞ɜƂN + - key: E + operator: Ƕƪų疛w5川fljƖ寭 values: - - "50" - - Aq - - key: M - operator: 襊4 + - 7C2f + - i3aee89gfcm + - AE + - key: rlLY + operator: 胬豧Ð!跦o + values: + - iE + - frIWT + - WYkucb1C + - key: sNqY3 + operator: 桐$蜑凷P-Ȓ玠趉T攗ʘ鏝 + values: + - RLg75ME54 + - Ruw + - tHp44zbHkWh matchLabels: - ktwYC: vS - w1qZ: 03Owg + GyWL: V7vtUB + X: m62ibm namespaces: - - Q4HaN - topologyKey: wn7112U - automountServiceAccountToken: true + - 9K + - 0TUIot + topologyKey: kFQqQq + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: w4yYA + operator: 沶ŞʚũļĈ1Ʈ + values: + - jKL + - key: 7f2P + operator: d訸ìě狲陝{q + values: + - Mk + - key: ywf1CZA + operator: C浰Ë憾Vç噑ō> + matchLabels: + 6uW: hAorNoBl + matchLabelKeys: + - Bmsl9 + - xy + - wokJ5Gom + mismatchLabelKeys: + - Yrrw + namespaceSelector: + matchExpressions: + - key: QnQUFZjQA + operator: \ + values: + - 8lrJz + - LWwHX + - key: VYrp + operator: 篂àŸ-rs鐳轾ȬDž蘢 + values: + - ELcYpYSC + - HOb + - B5U + matchLabels: + NPE: MgO4 + namespaces: + - "" + - PX + topologyKey: odLq5X2Tl + weight: -1679674974 + automountServiceAccountToken: false containers: - args: - --health-probe-bind-address=:8081 @@ -67201,26 +124203,26 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=EQ6C - - --configurator-base-image=tczCHr - - Sb4JTueXASpBtQ - - og - - GaoUIcOT + - --configurator-tag=wA5XUe + - --configurator-base-image=kE0AJ1 + - "" + - 2BwL4Tf6d + - LY5cEH command: - /manager env: [] - image: tczCHr:EQ6C - imagePullPolicy: Always + image: kE0AJ1:wA5XUe + imagePullPolicy: Never livenessProbe: - failureThreshold: 914 + failureThreshold: 375 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 655 - periodSeconds: 687 - successThreshold: 756 - terminationGracePeriodSeconds: 152 - timeoutSeconds: 711 + initialDelaySeconds: 882 + periodSeconds: 987 + successThreshold: 528 + terminationGracePeriodSeconds: 97 + timeoutSeconds: 399 name: manager ports: - containerPort: 9443 @@ -67230,22 +124232,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 136 + failureThreshold: 13 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 187 - periodSeconds: 261 - successThreshold: 815 - terminationGracePeriodSeconds: 3 - timeoutSeconds: 739 + initialDelaySeconds: 598 + periodSeconds: 74 + successThreshold: 313 + terminationGracePeriodSeconds: 799 + timeoutSeconds: 26 resources: limits: - cpu: "515" - memory: "155" + cpu: "281" + memory: "944" requests: - cpu: "25" - memory: "25" + cpu: "742" + memory: "363" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -67257,97 +124259,111 @@ spec: readOnly: true dnsConfig: nameservers: - - ujfhX4IQ + - 0l7aqP options: - - name: sDgow - value: HhB0B - searches: - - 4I6Un - - S - - Q - dnsPolicy: j)蹃Ɣ*īĬkɊÙ7 - enableServiceLinks: true + - name: HouI7M + value: KbwklDr4ub9X + - name: yPxW32ed + value: q + dnsPolicy: 矝ɭƱ镏&w圓p炽Ň°<ƑÝ薮謥Ƕ絴e ephemeralContainers: null - hostAliases: - - hostnames: - - MViYG - - aAJiwQ - ip: "" - hostIPC: true + hostNetwork: true + hostPID: true hostUsers: false - hostname: g81bX1L - imagePullSecrets: - - name: pczOr - initContainers: [] - nodeName: WWc - nodeSelector: - "": Xd6pWq72 - CSS0t: ov1j - ME: G4rcNqA - preemptionPolicy: Ì$Ⱥ - priority: -1711203321 - priorityClassName: FmLwtUHi - readinessGates: - - conditionType: 籒壩:夘ɓtʄ - - conditionType: \勓岬ȓZLj縌鸻ħ菱Ɋɐ6Ȟȸ$矫¤鬗 - - conditionType: ǫǣʑ钠z~ƴ - restartPolicy: 闑搴ƾ - runtimeClassName: wc3 - schedulerName: rjZ + hostname: Z4O + imagePullSecrets: + - name: DQh0 + - name: W8kPWEv + initContainers: [] + nodeName: C2To9PpO + nodeSelector: + GYCj: lf229d + J: Ly6XF + KlO6x: HRQk5 + hKAyXpZrD: rps8LOZ0 + "n": 7JH + preemptionPolicy: (吠!睧呗ļÊK + priority: -937002552 + priorityClassName: VWb + restartPolicy: 2ʫǯ鵮甌 + runtimeClassName: 8UYn22 + schedulerName: kBIiMPq schedulingGates: - - name: ciZD + - name: 5HaN1hN3i securityContext: - fsGroup: 4140417386877752300 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 4483571718676218000 + fsGroup: 600852388106857900 + fsGroupChangePolicy: Always + runAsGroup: 2551983261573605400 runAsNonRoot: false - runAsUser: -7025857346205630000 + runAsUser: 7889401706800922000 supplementalGroups: - - -7584097831073672000 + - -5305071421925969000 sysctls: - - name: Nz - value: 75GOKH - serviceAccountName: 3F - setHostnameAsFQDN: false + - name: H + value: "N" + serviceAccountName: 9twRjrb4yT + setHostnameAsFQDN: true shareProcessNamespace: true - subdomain: LEZ0V - terminationGracePeriodSeconds: 8279899287949193000 + subdomain: IjJ + terminationGracePeriodSeconds: 62214698983836060 tolerations: - - effect: Ġƫ嗻_ - key: z7iR - operator: '"¢谘ɇȒ[ð嫍礰.' - tolerationSeconds: 1974097324787447300 - value: lR + - effect: ʐ + key: VkA + operator: 這蘱 + tolerationSeconds: 4441979411744754000 + value: wBjsw70 + - effect: ű敩棲%da<_& + key: hWLzvPC + operator: 睴墊鸛NìTF蝴崧炏ƒI=j + tolerationSeconds: 3618647065810892300 + value: II + - effect: xŲ5ɺ.èT湟鷯ȕÈƘp + key: 6h + operator: D瘈ŰY2çŬ墖Ðʀ泃2臝ưfK* + tolerationSeconds: 6813537940048247000 + value: 0d topologySpreadConstraints: + - labelSelector: + matchLabels: + 1lJ3OETG: piq4 + rFVf: Qi + matchLabelKeys: + - KaRc + - li3 + maxSkew: -884623376 + minDomains: -1461178719 + nodeAffinityPolicy: 瓜胮ł阃ʈ厖ʨ + nodeTaintsPolicy: œŐ怅秪8ķ'瞈蓹ʫ腀烘ƍ鹓掮橻*pŴ + topologyKey: dPb2VRW + whenUnsatisfiable: c碿Ɓ曣ì= - labelSelector: matchExpressions: - - key: 4FnNNL - operator: GÌûđ輣Ɵƽ潄25?°ȱƺ鉊ʖ駶紁Ǭ - values: - - "Y" - - NoEZRt - - FH - - key: eJ - operator: Ìb写刞惇Džĉ,軱Xǵ - values: - - kYfqxQ1 - - key: tm - operator: ĢɁɑDZFĹ鰋Nj - values: - - 7wR - - w5L4 + - key: yRJip + operator: ʣɺ圾鐍宕唾b捥pǂ衃ȹ屙屜豴ƞʟƝ] matchLabels: - A8tLMbJ: ZghTVt - Y7F: "" + ivTn: Xtf9ps matchLabelKeys: - - nPfUHL - - MS9x - maxSkew: -282915169 - minDomains: 1050407902 - nodeAffinityPolicy: 4ʞ婤溢DZ葴ëا疵( - nodeTaintsPolicy: ɕÕj咳Ħ:Ȧ¡jʧ饐)婙ʭ - topologyKey: 1BfQrIFO - whenUnsatisfiable: 觢{ȟ!LJg + - J3 + maxSkew: 2022884886 + minDomains: 370293399 + nodeAffinityPolicy: Kæ顄1Ȇų贒塡\岓;韩爢逕 + nodeTaintsPolicy: =0佱] + topologyKey: "" + whenUnsatisfiable: ɿ±兏錌VMOþ + - labelSelector: + matchExpressions: + - key: BCzPhb + operator: Ǧ暋 + matchLabels: + t: kBJ + matchLabelKeys: + - eF7g + maxSkew: -476399995 + minDomains: 2012120508 + nodeAffinityPolicy: 硻孻r)8Ʃ + nodeTaintsPolicy: 磻嶼疛Ű怢蔧ij]b?ʮŇõɈ + topologyKey: OcJMDNvd + whenUnsatisfiable: 2ðɞ樀ȵ檛舼闲i volumes: - name: kube-api-access projected: @@ -67370,50 +124386,50 @@ spec: - name: cert secret: defaultMode: 420 - secretName: tlvx + secretName: sSlcvPv + - name: D + - name: S1tN5CgpGS --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 name: redpanda-serving-cert namespace: default spec: dnsNames: - - vYy9-webhook-service.default.svc - - vYy9-webhook-service.default.svc.FoLVGdf + - Tlv-webhook-service.default.svc + - Tlv-webhook-service.default.svc.rkrYVShLr issuerRef: kind: Issuer - name: 2rNNJQv8k5j97-selfsigned-issuer + name: KXsg6-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: tlvx + secretName: sSlcvPv --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: annotations: - T5I7K: mjLC - pKSYI: IDK + C1ah: "" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: Tlv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 2rNNJQv8k5j97-selfsigned-issuer + name: KXsg6-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -67425,7 +124441,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: 2rNNJQv8k5j97-mutating-webhook-configuration + name: KXsg6-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -67433,7 +124449,7 @@ webhooks: - v1beta1 clientConfig: service: - name: vYy9-webhook-service + name: Tlv-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -67451,13 +124467,49 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: + C1ah: "" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Tlv + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: KXsg6-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Tlv + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 +--- +# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: 2rNNJQv8k5j97-validating-webhook-configuration + name: KXsg6-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -67465,7 +124517,7 @@ webhooks: - v1beta1 clientConfig: service: - name: vYy9-webhook-service + name: Tlv-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -67483,88 +124535,458 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: Tlv + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: J2qRpt9-crd-job + namespace: default +-- testdata/case-094.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: 1G + health: + healthProbeBindAddress: rqw + kind: b + leaderElection: + leaderElect: false + resourceName: N0V + metrics: + bindAddress: l9XfgCTZ + webhook: + port: 132 +kind: ConfigMap +metadata: + annotations: + p1R: fWL + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DjMfg + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + p1R: fWL + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DjMfg + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + p1R: fWL + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DjMfg + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + - consoles/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + p1R: fWL + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DjMfg + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: FCXrBjh-default +subjects: +- kind: ServiceAccount + name: 11c + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + p1R: fWL + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: DjMfg + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: annotations: - R: KqQ - UBlg5: vWsmCt3b - gW8Gbi6vR: mj0Y - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" + p1R: fWL creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: vYy9 + app.kubernetes.io/name: DjMfg app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: K-crd-job + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh namespace: default --- testdata/case-079.yaml.golden -- +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: annotations: - 0Kf6: o - AU8gkJ: lsVk - C2ct: Fx4QSm + p1R: fWL creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: meK + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: FCXrBjh-election-role +subjects: +- kind: ServiceAccount + name: 11c namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: HrG7J - health: - healthProbeBindAddress: Fxp - kind: vYGtGN - leaderElection: - leaderElect: false - resourceName: RJIE4G - metrics: - bindAddress: fojdTk - webhook: - port: 196 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: - annotations: null + annotations: + p1R: fWL creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: QClq-config + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: FCXrBjh +subjects: +- kind: ServiceAccount + name: 11c namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null + annotations: + p1R: fWL creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: QClq-metrics-service + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh-metrics-service namespace: default spec: ports: @@ -67573,21 +124995,24 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null + annotations: + p1R: fWL creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: lbhx-webhook-service + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: DjMfg-webhook-service namespace: default spec: ports: @@ -67595,332 +125020,308 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null + annotations: + p1R: fWL creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: QClq + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh namespace: default spec: - replicas: -2035507670 + replicas: 336015805 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg strategy: rollingUpdate: - maxSurge: 1618549354 - maxUnavailable: 686940900 - type: ǝp + maxSurge: 583208704 + maxUnavailable: 547870506 + type: 鉊^#ŝ狿E*侺ɭğRʝē template: metadata: annotations: - MGA1: ZHSVv - eCyzMzxI: vB - l6tFga: JddvZX - uNEv: "" + 7j4r: "" + iUJakWUJQyJ: HCFA + kwTvCI: zoeC creationTimestamp: null labels: - "": LDW - J: rHGvxUx8nS + ESgxffT: "7" + KC1v: wOG app.kubernetes.io/instance: operator - app.kubernetes.io/name: lbhx - dBESM8HvT: pR5 + app.kubernetes.io/name: DjMfg + e7SaSbbhQt: 3pRhc spec: - activeDeadlineSeconds: -4497001301622683600 + activeDeadlineSeconds: 4312700860172301000 affinity: nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: bnR - operator: Q瓇óC鲙ƌĦ唋$ + preferredDuringSchedulingIgnoredDuringExecution: + - preference: {} + weight: -1480556469 + - preference: matchFields: - - key: jj345a5XiM - operator: áC憳8ŨŜ柖c - values: - - 5dH - - Wmp - - key: 0uT - operator: "" - - matchExpressions: - - key: Jc - operator: ħ怶懓Wɓ$ - values: - - GJc - - key: Rv - operator: 認|o賅ʈ`.ƅɁƓǟ4 + - key: kVMNZ0 + operator: e values: - - Oozag7xhs - - 3wr5YklpFHdF - - key: mNqusE - operator: Ǧ+ųʫ酗Ǔt敁鲤Ǒ稃ȯ7ƹ喈旦待'% + - ZIlVGeklJl + - wUZJY7ZL + - VulNe + - key: Pho + operator: 洐敦訙頱杍齎4嚃/Ƕ跎Û揢s values: - - Bp8Idn - matchFields: - - key: FA9gK - operator: (ɣB + - I0l5Sd + - "0" + weight: 523172076 + - preference: + matchExpressions: + - key: ueUhTsHk + operator: 遽rö缠Ș values: - - m5x0p16G - - key: uDIJ - operator: 傅XŻ/%KQȍɦ2扖Ǖ朢ġɇǜj鶑糄 + - MwOZFRUZ63 + - obx3VgYD + - p + - key: gI + operator: ñÇĿ蓗ƚ廌 values: - - 0SSLUx5W - - zhdB8v4o - - matchExpressions: - - key: AquldKJFBpw - operator: ¢洳țg + - 9F6u3jcB + - key: PyBFi7e6M4w + operator: Iǫy倽8炾Ɗw砖ƿvʢvůĶõ角 values: - - "6" - - key: xPvGRLV - operator: ',uƩ鐯ɟƱcʕƸɌȐȟſ斞' + - d4fQGUL0qD065H matchFields: - - key: LBZ - operator: z'īʈf#)ʛ杣Ś - values: - - 2CT - - 44wdpSX - - key: YHEJ7aHnD - operator: Ǔuş暍d + - key: lLrStODrCt + operator: 輕ś韉^腁BLŨ龁fDžu + - key: 6KRH + operator: ť+ı烨 values: - - CJ0g - - KbEZ - - L0NXyF + - Yipx1H + - GwJrv + - 1xh + weight: 2007599181 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: [] podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: 8C0S9O - operator: YY郛m庲#Ũ+后Ɩw| - values: - - 21m0yn7 - - key: VoKN81 - operator: ð攲 - values: - - wdtp - - fRn3CvK1R - - key: 2lYWR6p8ep - operator: vȕ瀼lŜ芘ȋʯ_賆7^ő紬阡f躋 - matchLabels: - 3h4mQU3CgB: t4ZnnORj8H6F - 4oqTK3Kv: "Y" - pe9C: oq6Y - mismatchLabelKeys: - - 9gTag6N - - OKnCsnyXC7O - - u0RV - namespaceSelector: - matchExpressions: - - key: "" - operator: Ɩ厙軼煫浟ć揦ɶOf - - key: bRxpIU4 - operator: Ɣ@h屬熞}ƿ4qsĹQ殟KǼȔð疠孬 - values: - - 5Y69 - - CPbI - - K5Ru8Yl - matchLabels: - EcKxb: vV - HZ3WW0uT: tlBELtUUd - Q5OFboOh: qXht - namespaces: - - 1fA6 - topologyKey: Ix - weight: 1553728873 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: VxD5oz5el - operator: '}軃ƥ筡橄ȩȈÙB|#çÕZĸ' - values: - - M - - key: ot - operator: sj侣项]挘Nƅ + - key: IsZZ + operator: Ȑaɩ=嶸Ů揮G + - key: X9Q + operator: Ąʏ偮阡 values: - - J8dC - - key: oK - operator: 壛ø)Ǵʝ~I + - OLofN0f + - olGDG matchLabels: - UUpQ5: XdY2B - gOZw: MXo + "": Mxtg + C0aF: 3LAOb matchLabelKeys: - - EqV - - M6iuOMB6Q - - 05Pmq + - b mismatchLabelKeys: - - E7 + - I3oc namespaceSelector: matchExpressions: - - key: "" - operator: ·N偣ă[唺郩Ȳd虚hʂ爄!蝷ȸ - values: - - QXaLDVqi - - pjM3cSd1kt9 - - key: WO - operator: 9撉KIĖȾ僿y底CɄ阷邀 + - key: 2K6MLe5Sij + operator: "" + - key: 1q + operator: Ŝ敻Ū拓;`ɹơBhģ values: - - J + - wG + - s6tUVH0K1Ohs matchLabels: - Fb: Ba4dGMwS - WLW: h - wYY2: kozb + UJakgFPJN: "" namespaces: - - VL7 - - eLW - topologyKey: t8YoAs - weight: 1300356159 + - I + - I0LC6J + - zrjppPYN + topologyKey: 6K9q + weight: 576277368 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: + matchLabels: + 6hFxzzpKRz: "" + ek: S + matchLabelKeys: + - "" + - Zw7HjV + - XxezbwW + mismatchLabelKeys: + - JDtlaSis3 + - ByZU + - KzvEH + namespaceSelector: matchExpressions: - - key: 0k - operator: ŨS + - key: 00cq + operator: Ȧ奙\9庱ʙ犬Ǚ紐ts + - key: MDoi3pS + operator: :攟ǙȀ搃n磣# values: - - xls0bIvMf - - CwXTQkjK - - rpp24J + - Dl1TOqSotnF + - o1ghc matchLabels: - Oz3g5dE: W1PFG - e8: iaAB7 - mW7bJRQ47Bsg: k - namespaceSelector: + j5z4V: E + namespaces: + - H0vIXY + - AS + - A26P4P + topologyKey: j1 + - labelSelector: matchExpressions: - - key: 7g - operator: ^ + - key: IQVLE + operator: ɶ惙W@臆&Ų艧谫磷[%ɜ貃斱ïǺ1 + - key: u + operator: S¼罊ƙ灳殜}縮矀ʋc values: - - 7srj - - UoTmW - - key: PXcwgrj - operator: ʎ硾Ƽ寧置牨釧H愨ɊĕɢĹxǀn + - "9" + - MzjMhYBtE + - key: 46KT + operator: UW腶旚硔G-úƢ4Džɭ泒pmq涙 values: - - M - - key: mJOoXd + - C4Lv5m + - vy2ts1 + - KKhq6iF + matchLabels: + Tv: P73R + matchLabelKeys: + - L8dB6f + - r + mismatchLabelKeys: + - ZTtJG + namespaceSelector: + matchExpressions: + - key: AMsA operator: "" values: - - C8tdOh - namespaces: - - "0" - topologyKey: s + - "" + matchLabels: + elTLp: 0R0g6qN67 + j: GUZTUIx + topologyKey: 8Boz8 - labelSelector: matchLabels: - kFyFVu: EcUJw9 + CWH: npc matchLabelKeys: - - PRFu - - Ipzcw - - mA0wFy - mismatchLabelKeys: - - 3jW - - NRoj + - LGgpau + - L + - "" namespaceSelector: matchExpressions: - - key: lV5uFl - operator: 竚瀄ǭP - - key: WbL6VQU - operator: ǜ輢Ȭ籹娳岘青 - matchLabels: - M0: h - m: KuSOK - topologyKey: e2G + - key: pqb0mw + operator: KA萁Ǎ飙¬#Ƀ + values: + - QVTLq + - "7" + - wNXcKivx + namespaces: + - 3PgpNTma + - L0n6MznC + - "" + topologyKey: "" podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: - 1mBfzQ: "N" - 4aAAQTaLBXS: oBxey - wQQmYeg: Afp + 0lWFZ: JTBr + nfPE: iQ matchLabelKeys: - - j7u - - uPDw + - YfVs + - 6rrI4fY + - kZFY4KtUY6 + mismatchLabelKeys: + - vqiDDI23 + - 7As1fsWY8 namespaceSelector: + matchExpressions: + - key: "" + operator: 遥*ʃ貉ȁ + values: + - nvcdSJIKFC matchLabels: - TqsfwB: z0kYoQ - oFJv: vVY + 2OZ: C + ja0: 27D5g + namespaces: + - eu1Jt + - trpI + - ouNQ + topologyKey: NM + weight: 1545551065 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: LUEU0ybbJPC + operator: ɲű瘏ÞƝ瘗|ɕĀȇȍ桜 + values: + - gwne + matchLabels: + "": X05vdX + matchLabelKeys: + - "" + - bz3 + - 8cILXOszL + mismatchLabelKeys: + - dRBoAj + - IY + namespaceSelector: + matchExpressions: + - key: gBFi + operator: 魟蠸ʯ矫R[\6ưGb噆莐 + values: + - "" + - Mx4Rw9 + - "" + matchLabels: + 5Jv: aqOMf7s namespaces: - - 3lf - topologyKey: 6VfXn - weight: 670897298 + - s4TVh4n + topologyKey: 8a3oLWzBb + weight: 2069617429 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - - key: FW4OtSA9 - operator: '#əgt' - - key: 2WlTZpJx4 - operator: ƣ政QŠòƲŲƯRM - values: - - jNUe - - key: l8Q2JJ5 - operator: G`樛ʟɞLj弻騌瘉Ƈ塟`d釭 - values: - - O3 - mismatchLabelKeys: - - PSBeuErUA - - jSZgCu - namespaceSelector: - matchExpressions: - - key: pnqD - operator: 醸K¯ - values: - - qL3JKY - - key: pCi - operator: e7驛饐\ʬzȢ - values: - - bpy - - key: i49 - operator: 紩踾粙ƏG'ʫÍH胰e邖q袑ǥ祵gs - values: - - yv5rsf - matchLabels: - H: Bj - Pnglu7SYXa: XG1 - m: yJQf - topologyKey: RFJwFB - - labelSelector: - matchExpressions: - - key: s6AN - operator: Ȕ菪卒d欋zÄZ屌?ɒ - values: - - tQvrw2W - - key: Uukumjto2 - operator: 棍y+岒$怼鴬p - values: - - qaFhFs - - c - - key: fXOK - operator: 浦ß弮ɢǿŨŦ瞔筢njÝ献 + - key: L + operator: vǤ枑r餆_唯晵+P写鮚ɩ粠 values: - - Ajfmj9 - - V3aGaB - - npIDG + - "" + - Ia3C5qCZ7 matchLabels: - 6t5LgKiw8: WthhRQVV - kGuOaEp: "9" + EX: O911NE + l87: NxQB + sPDQU: eXfPq matchLabelKeys: - - m8o + - 7NA mismatchLabelKeys: - - BeKn + - 5Xqup + - 5hDbku namespaceSelector: matchExpressions: - - key: Q10W - operator: ÙƄȢmƄyȄ + - key: 9NcL + operator: 皀Ȣ"ňň门轍鿂桀!珿匦u芢ʍ殖Ê? + - key: O + operator: D糁0Ǣ砪 values: - - JjD - - "" + - mvVScWm + - YL5 matchLabels: - "": SnvGa - Yg1hDLG: f3Ya - Z: r4HRZhWlJv4 - topologyKey: ps7F + 0ZLQL: oxS + OBBv: os9b + namespaces: + - "" + - UW9NriJ + - LREoZjeh + topologyKey: 6ckA automountServiceAccountToken: false containers: - args: @@ -67930,23 +125331,25 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=w8Y59 - - --configurator-base-image=ahO + - --configurator-tag=PQfV4 + - --configurator-base-image=uzG5 + - 7G3Tgu + - Oh command: - /manager env: [] - image: ahO:w8Y59 + image: uzG5:PQfV4 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 197 + failureThreshold: 402 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 411 - periodSeconds: 158 - successThreshold: 289 - terminationGracePeriodSeconds: 471 - timeoutSeconds: 11 + initialDelaySeconds: 358 + periodSeconds: 714 + successThreshold: 0 + terminationGracePeriodSeconds: 938 + timeoutSeconds: 640 name: manager ports: - containerPort: 9443 @@ -67956,22 +125359,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 635 + failureThreshold: 532 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 839 - periodSeconds: 17 - successThreshold: 281 - terminationGracePeriodSeconds: 292 - timeoutSeconds: 694 + initialDelaySeconds: 547 + periodSeconds: 32 + successThreshold: 721 + terminationGracePeriodSeconds: 810 + timeoutSeconds: 912 resources: limits: - cpu: "890" - memory: "550" + cpu: "79" + memory: "376" requests: - cpu: "924" - memory: "777" + cpu: "468" + memory: "414" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -67983,97 +125386,78 @@ spec: readOnly: true dnsConfig: nameservers: - - RGKmo + - lFF4bR + - WNBLqImd8Z options: - - name: XQcPRL - value: ZYcO + - name: P6cwWXMT1mx9 + value: 0Jt1XYAF0G searches: - - yJkd - dnsPolicy: ǡ譶ɱĿÙXƨ9ȚYȺiŅöǫ瓯ɱ氒Á - enableServiceLinks: true + - UW507 + dnsPolicy: 澧ȳ蹝ŀ舡Į÷徂囉ū ephemeralContainers: null - hostAliases: - - hostnames: - - d - - aY2 - - C9YZO2rtm - ip: AOxSTQhIMifUsX - - ip: r9Tn2 - - hostnames: - - oa0 - ip: F1h hostIPC: true + hostPID: true hostUsers: true - hostname: R9mUvbeZtG4fqR + hostname: 7UVj imagePullSecrets: - - name: oyd - - name: 0bMDpG - - name: xJ8O + - name: 6DEkd initContainers: [] - nodeName: aZKQFB + nodeName: pND0B nodeSelector: - 7hu: h - "45": 72YHvjmjC - Qb8GbZ4zR: LfqLm - cy8oui: ETESW - preemptionPolicy: ǤP?詠Ǎ篁匘[臾 - priority: -909430233 - priorityClassName: pur1 + 5MEphPPV9Q: TU8wH + ZKrTPa: vOZnX + cUG: "" + zPhtPKQVA8DB: Fe + preemptionPolicy: "" + priority: 1616331802 + priorityClassName: 8bGWLWaS readinessGates: - - conditionType: 竴嘁Xġ + - conditionType: 抜ý.Qd3ʉ3恬g + - conditionType: 0Ď盁(i尋禌囁 + - conditionType: ŧ resourceClaims: - - name: ar0Em - - name: k1bJV - - name: 0BYWL - restartPolicy: c - schedulerName: uz9 - schedulingGates: - - name: vE - - name: tsZowO1b + - name: bmK28GU + - name: Md9RczSC + - name: vR + restartPolicy: 緊b轼钩ȃ硩qŅ-'碦y + schedulerName: WiUOP securityContext: - fsGroup: 3748036559664877600 - fsGroupChangePolicy: Always - runAsGroup: -8133496137540755000 + fsGroup: 1482652060705232400 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -8503677918205262000 runAsNonRoot: false - runAsUser: 5973838121814043000 + runAsUser: -7947396771839663000 supplementalGroups: - - -2370008637195322400 - - -5276059965230186000 - sysctls: - - name: E9CK - value: 5XdFt - serviceAccountName: "89" + - 2337230613663300000 + serviceAccountName: D3Fi setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: mn0muFFqVr3h - terminationGracePeriodSeconds: -3403454298388414000 + subdomain: z0rSMEL + terminationGracePeriodSeconds: -2274820483759401500 tolerations: - - effect: t碿k<Ʈ - key: qKQH - operator: 缠 - tolerationSeconds: 4655400418735045000 - value: MKkVqM - - effect: ¬珳FǶǞ - operator: 紴愢觅cÈTȔ戝嵧悜Rċ觡 - tolerationSeconds: 1565276200297110800 - value: hT59pHEK - - effect: 嬳瓑ţ榈 - key: o - operator: uʪ騾 - tolerationSeconds: -6794209356492257000 - value: lqzVIrDs + - effect: 谕{ɼthx郔Ŀ鰏y¡U啲ȉ11玭ȩ + key: X + operator:  novo + tolerationSeconds: 867278555089113000 topologySpreadConstraints: - labelSelector: + matchExpressions: + - key: 2UohIse + operator: '[À莄¦咎鵈f柫Ȇ' + values: + - ekZ2Cc + - key: xEbcug + operator: 埔ā馸+d澝ʙHǀȀdX鋪? matchLabels: - YuM: KO - ayTs2hRCQ: tv3 - bwY1xcHY: wmgu1 - maxSkew: -1110183877 - minDomains: -1245207363 - nodeAffinityPolicy: źmʠțʑ?_猝$}¦ź;Dȩòe2l - nodeTaintsPolicy: 畔阐ș_o氐澖掍V~=楱ļ渁B - topologyKey: Ls8 - whenUnsatisfiable: "" + 1Qd7: XqQg + lMH: q + matchLabelKeys: + - 359mNB + maxSkew: 1481426489 + minDomains: 1823933433 + nodeAffinityPolicy: 0坑~ĞYɴǪɤ栘 + nodeTaintsPolicy: Ȋ8Ǽ'ȶƠɥ奐X哬ĿiȲi扶Lj + topologyKey: 8LMG23 + whenUnsatisfiable: ' 褼ƶÎa' volumes: - name: kube-api-access projected: @@ -68096,49 +125480,52 @@ spec: - name: cert secret: defaultMode: 420 - secretName: "5" - - name: 9vIg - - name: Ce - - name: ol + secretName: YLbdlLDRh --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: null + annotations: + p1R: fWL creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 + oLWSEoF: Ps5P + uO6upU7K: lMwbJ name: redpanda-serving-cert namespace: default spec: dnsNames: - - lbhx-webhook-service.default.svc - - lbhx-webhook-service.default.svc.sXi + - DjMfg-webhook-service.default.svc + - DjMfg-webhook-service.default.svc. issuerRef: kind: Issuer - name: QClq-selfsigned-issuer + name: FCXrBjh-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: "5" + secretName: YLbdlLDRh --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: null + annotations: + p1R: fWL creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: QClq-selfsigned-issuer + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: FCXrBjh-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -68150,7 +125537,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: QClq-mutating-webhook-configuration + name: FCXrBjh-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -68158,7 +125545,7 @@ webhooks: - v1beta1 clientConfig: service: - name: lbhx-webhook-service + name: DjMfg-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -68176,48 +125563,13 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: QClq-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 ---- -# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: QClq-validating-webhook-configuration + name: FCXrBjh-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -68225,7 +125577,7 @@ webhooks: - v1beta1 clientConfig: service: - name: lbhx-webhook-service + name: DjMfg-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -68248,9 +125600,8 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - 0Kf6: o - AU8gkJ: lsVk - C2ct: Fx4QSm + MW: NTwM + b: 7wv helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" @@ -68258,84 +125609,78 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: lbhx + app.kubernetes.io/name: DjMfg app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: meK-crd-job + oLWSEoF: Ps5P + uO6upU7K: lMwbJ + name: 11c-crd-job namespace: default --- testdata/case-080.yaml.golden -- +-- testdata/case-095.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false +automountServiceAccountToken: true kind: ServiceAccount metadata: annotations: - xYYx: 8dxCCUX + "": iI7Bd + 9H7uauZ: fIw + G1: kAPGZ creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h + DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: "Y" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: Wx + name: "" namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: Mr + apiVersion: 7iYs health: - healthProbeBindAddress: dgoI9bc - kind: Sx3 + healthProbeBindAddress: pG7 + kind: yss leaderElection: - leaderElect: false - resourceName: lTP7ZNCO + leaderElect: true + resourceName: ZAL2weN metrics: - bindAddress: p + bindAddress: ISgWYPuoIKL webhook: - port: 362 + port: 492 kind: ConfigMap metadata: - annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + annotations: null creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h + DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: "Y" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP-config + name: 02-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + annotations: null creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h + DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: "Y" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP-metrics-reader + name: 02-metrics-reader rules: - nonResourceURLs: - /metrics @@ -68346,20 +125691,16 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + annotations: {} creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h + DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: "Y" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP-default + name: 02-default rules: - apiGroups: - authentication.k8s.io @@ -68537,185 +125878,971 @@ rules: - apiGroups: - redpanda.vectorized.io resources: - - clusters/status - - consoles/status + - clusters/status + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 02-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: 02-default +subjects: +- kind: ServiceAccount + name: "" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 02-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: "02" + namespace: default +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods verbs: + - delete - get - - patch - - update + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 02-rpk-bundle + namespace: default +rules: - apiGroups: - - scheduling.k8s.io + - "" resources: - - priorityclasses + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - get - list - - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 02-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 02-election-role +subjects: +- kind: ServiceAccount + name: "" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: "02" + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: "02" +subjects: +- kind: ServiceAccount + name: "" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 02-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 02-rpk-bundle +subjects: +- kind: ServiceAccount + name: "" + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: 02-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "Y" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: Y-webhook-service + namespace: default +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "Y" +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + DQ: JM + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: "Y" + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: "02" + namespace: default +spec: + replicas: 360762065 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "Y" + strategy: + rollingUpdate: + maxSurge: 735491605 + maxUnavailable: 567419297 + type: 揘ÓCDǶl魾甍7Å:桋眠 + template: + metadata: + annotations: + 9nuNhaa: "" + L3Zre: xPQq + lT9cv: ld + w1pf: cF + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: "Y" + spec: + activeDeadlineSeconds: -5189798555752399000 + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: VEXvr + operator: 沭麟繱迡襗=o废ǫŊîd塘Ƣ^j1 + matchFields: + - key: gXM + operator: ¤ƟL舷x + values: + - P + - key: Eo + operator: 鈼ũǧ娂DŽa + values: + - S2 + - zeGNO + - {} + - matchExpressions: + - key: roUmde69CU + operator: XĢ + values: + - 3XZeDET8iN + - yHRIidx5f + - key: zGQRR6C + operator: Ŗ翬O话 + values: + - wapE + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: htJ + operator: '`2@(陊ʍ*$Ɯ' + - key: bmCu + operator: $蛹ǚ±ôvąȂŖRə$騹"nǕ + - key: PPqbX + operator: 臋裕 + values: + - o7 + - ENhqd + - Ycq + matchLabelKeys: + - Auod + namespaceSelector: + matchExpressions: + - key: NqT + operator: '[鱝Ş馿v½諭翧u駌峂鿚蠒熱耱ȇǴŲ鲆' + - key: kMEBL5uMoy + operator: 澪=旷ăT + values: + - 5kvY8 + namespaces: + - 2q + - aUqjio + topologyKey: IShL + weight: -106735637 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: "4" + operator: ìĈȶʏ炁紂Jg筽ľ濹ƪ§U%fY{l + values: + - 8qEmRa0O + - ct6Y9jDs + - 57gZlur + matchLabels: + "2": YfJu + Mo0: vLH4ENxhbDse + kvyj3T: R04qP + matchLabelKeys: + - gv5 + - "" + - SSdJGtxwlbI3SZ + mismatchLabelKeys: + - fTxrmd + - o6FYrVSa + - FdoGR + namespaceSelector: + matchExpressions: + - key: hfeM9T + operator: ʜ0TƷX鑳RQɜ + - key: MSIa + operator: ņ-虨髾QǷ璕<»0呛詒 + values: + - X8Fw4dn + matchLabels: + OkFI0: rNU + UPGENQ: hFWvc + xLmBtaTlV: aD8dxGbO + namespaces: + - e + topologyKey: "5" + - labelSelector: + matchExpressions: + - key: o6xg + operator: DV蹰釖潲兽ʎɃ楛y鮔垙ɶ碹 + - key: 9fds5dbn + operator: lK緀J ŷ + values: + - tRS6o5qbaW + - "" + matchLabels: + BR7kHV: Y2 + H3bid2hq: ZZF + jeUD9Eb8c: jv7Ob + matchLabelKeys: + - l + - wc7GaKJE0 + mismatchLabelKeys: + - D + namespaceSelector: + matchExpressions: + - key: SeXXNVQ + operator: ɠ倦r#ɕy壴xȗ癬ɍȶw瓣ßȧ儛 + values: + - sU + - wf9j0 + - "" + - key: MIEY + operator: D眻VK + values: + - Db + - key: 2mLM + operator: Ŝ鷃祘R + matchLabels: + 7qh8Kz82NKKf0: Du8r3QTY + NA4Bmm: GtjhcVh26 + topologyKey: VuQrDua + - labelSelector: + matchExpressions: + - key: KlxXbW + operator: Əȴ鲤6±³Ɖ睁噩NSa]|Ŗ齈鹆½ + values: + - yR + - 5ht + - key: LX9A + operator: 鳰8ÿ(bs出E + values: + - JWwi + - NS7Lkp + - 4M8O29W6uL + matchLabels: + WOb9: tyTuKUM + tuF: EmqXBndw + mismatchLabelKeys: + - TYmbhaoXUES + - 9PHHHC + namespaceSelector: + matchExpressions: + - key: mcaeC + operator: Ń@镱廟2ƀ炦S£¼s嬶vɮ灁G + - key: Dol + operator: _jƃ蓨ȫ/ïĝ`gàɇo噉:$ + values: + - "0" + - z5 + - JVj9WBibY + - key: 66xP + operator: "" + values: + - Qgfldp4 + matchLabels: + 2CQDCJnO: muM7iSfp98gGc + DMEs6vF2Cx: m2gvK + namespaces: + - A5bL5n4 + - 3GdwXhJ + - 5k + topologyKey: YrsnF + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: ROz4cS + operator: '|茿聛7ņē轅' + - key: KcU + operator: 硉ÿ楖ʑAA躡@摠Ċ鮢 + values: + - HVry2L + - QmQasM + - key: e + operator: ȩċñ0获 + values: + - Gs9bv0 + - 9AcxBwT + matchLabels: + Hc9ym: 7sAxb3ICrm0AGN + Wcs: "" + matchLabelKeys: + - TO + - duOXG + - Fu + mismatchLabelKeys: + - xZKoqdTwVzLBWAd + - ES2 + - RRf + namespaceSelector: + matchExpressions: + - key: yQ6 + operator: Č犒½p7ƻ哉 + values: + - QrEq8rUjBG + - Eaamg + - bHjn + - key: 2enEH + operator: GNǗh為>ǝ + values: + - 8lpNjXpOK + - 6pbGURc + - JcLhc1 + namespaces: + - jmMD + - 1XDGscQ + topologyKey: nBql6 + weight: -712062132 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: L + operator: 粷 + - key: pVfmf + operator: m 烿C)朏ŏ+?ʈ疮韽Ɓ業ĀX<ʒ + values: + - muA + - key: I + operator: '|鐱乞Ý' + values: + - wKLvmKP + - UA0d + - na + matchLabelKeys: + - d4bm + namespaceSelector: + matchExpressions: + - key: B + operator: Râ抢溺o< + values: + - DNtk1YoZ + - 3de + - yZB6 + namespaces: + - mT597g + topologyKey: tl8TD + - labelSelector: + matchExpressions: + - key: x1 + operator: ı}ď[滪ĒſßǂɐW嬿d + values: + - "" + matchLabels: + S6bh4lH: "" + u5GHCoq: 9YGP0Hm + matchLabelKeys: + - VqFEOh + - v70Gh7h + - BXbloka + mismatchLabelKeys: + - 1vq7 + - p48 + namespaceSelector: + matchExpressions: + - key: JzKKMx + operator: 幻<ʝ^L,E彂fǬ纫柹 + values: + - uVNC2CP + - xIY5Eq9YI + - key: OXdWcR + operator: 8Ȱ纣+9į(ƎŇ繀ǻǍ崵 + values: + - s5hf68n5M + - Rj82w9aV + - key: 2MOjjD + operator: 哽偊ȨĪȆa茒E¨珰H进U + values: + - AnI2UobR + - 9mzLuJP + - LuLh + namespaces: + - dplLHJ + - mObHl + topologyKey: Mqm + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=true + - --webhook-enabled=true + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs + - --configurator-tag=ob8Ckc + - --configurator-base-image=iqTYWQsJpRK + command: + - /manager + env: [] + image: iqTYWQsJpRK:ob8Ckc + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 268 + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 536 + periodSeconds: 124 + successThreshold: 567 + terminationGracePeriodSeconds: 395 + timeoutSeconds: 164 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + failureThreshold: 838 + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 229 + periodSeconds: 206 + successThreshold: 835 + terminationGracePeriodSeconds: 557 + timeoutSeconds: 959 + resources: + limits: + cpu: "878" + memory: "828" + requests: + cpu: "8" + memory: "727" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + dnsConfig: + options: + - name: kUN + value: 3E + searches: + - Rvg + - 5Mio6X + dnsPolicy: '{犈焆秏廟鄎Ǐ愦昽鳡趄ʋ鍤毺啨$~Ȓ' + ephemeralContainers: null + hostAliases: + - hostnames: + - E1 + - Ms7c0 + - DQCq8lAh + ip: eKwSf + - hostnames: + - j5hqa + - 2yJxVYi + - 3i9 + ip: de + hostIPC: true + hostNetwork: true + hostPID: true + hostUsers: true + hostname: H4L810WpX + imagePullSecrets: + - name: yaN2Lmpx + - name: xDw + - name: apv4pFzhBjVx + initContainers: [] + nodeName: f2NAVVEK5e + nodeSelector: + VQbueW: qBbPRL + dm0kfT8Z: fo6X8 + preemptionPolicy: 戎n + priority: -355922683 + priorityClassName: G + readinessGates: + - conditionType: c棬mǃ¡ũʞ + - conditionType: d·ȥ + resourceClaims: + - name: vDDPU + - name: 6Kj5KeZ + - name: dckb26E + restartPolicy: 腦aȼVLjɢof -飕 + runtimeClassName: J51Hvp + schedulerName: 9N9BuRt + schedulingGates: + - name: 5OGdvDwQZ + securityContext: + fsGroup: 3343785438557929500 + fsGroupChangePolicy: Always + runAsGroup: 8681115766071522000 + runAsNonRoot: true + runAsUser: -2571971518779016000 + supplementalGroups: + - -2651151158394969600 + sysctls: + - name: gWGida2 + value: EXxd2y65is + serviceAccountName: e1RNmR0qi + setHostnameAsFQDN: false + subdomain: CY + terminationGracePeriodSeconds: -2459426983939630600 + tolerations: + - effect: ȟvS(p$ĘƢƈȍ + key: UVfmCM7k + operator: į鸳ɧ舛諣¡`鋲 脨岆Ƹ鬓鴣4涂砲z + tolerationSeconds: 2911494638029461000 + value: Q2jwBw4y + topologySpreadConstraints: + - labelSelector: {} + matchLabelKeys: + - 68dM4h + - sGU + - 4jULOMdhi7 + maxSkew: -877046888 + minDomains: -727956295 + nodeAffinityPolicy: Ȍ摔ë + nodeTaintsPolicy: 8爺ɭ¶7偀h鴞ě麿+ǭ媓,:Ƃ + topologyKey: w + whenUnsatisfiable: 'do&鯡iƷȋ:ƃ¨_:' + - labelSelector: + matchExpressions: + - key: "" + operator: '!' + values: + - odp7e + - key: uqHg + operator: ňÞɺ侶nJ甛Ƚ魲K凣Ā + values: + - W + - 25lA + - r + maxSkew: -1109097320 + minDomains: 1745016350 + nodeAffinityPolicy: s玦癮桋ɔřȏǭ?Řǃ^+ + nodeTaintsPolicy: 8秺´/h逰耥r + topologyKey: "Y" + whenUnsatisfiable: X!Ē + - labelSelector: + matchLabels: + Ck4cSQ: "" + G: lNI23Kw + matchLabelKeys: + - rxjITPswa + - mj + - AO + maxSkew: 1133850006 + minDomains: -658634592 + nodeAffinityPolicy: 滫統ǵɷ舭欑Y7玗幫ǓOƭ畺 + nodeTaintsPolicy: 痵Ħƾl毷,u高nʎ獗洺ÒN膍笢健 + topologyKey: ZUbNp + whenUnsatisfiable: ʃrx + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: cert + secret: + defaultMode: 420 + secretName: YoQanUblkHW + - name: M3D + - name: gpg8EfW +--- +# Source: operator/templates/entry-point.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate metadata: - annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + annotations: null creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h + DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: "Y" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: xxjYziP-default -subjects: -- kind: ServiceAccount - name: Wx + name: redpanda-serving-cert namespace: default +spec: + dnsNames: + - Y-webhook-service.default.svc + - Y-webhook-service.default.svc.eMY + issuerRef: + kind: Issuer + name: 02-selfsigned-issuer + privateKey: + rotationPolicy: Never + secretName: YoQanUblkHW --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +apiVersion: cert-manager.io/v1 +kind: Issuer metadata: - annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + annotations: null creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h + DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: "Y" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP-election-role + name: 02-selfsigned-issuer namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - delete - - get - - list - - patch - - update - - watch +spec: + selfSigned: {} --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration metadata: annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: 02-mutating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Y-webhook-service + namespace: default + path: /mutate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/redpanda-serving-cert + creationTimestamp: null + name: 02-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: Y-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + "": iI7Bd + 9H7uauZ: fIw + G1: kAPGZ + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h + DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: "Y" app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP + name: -crd-job namespace: default -rules: -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - - watch +-- testdata/case-096.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount metadata: - annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + annotations: null creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: xxjYziP-election-role -subjects: -- kind: ServiceAccount - name: Wx + name: nNP8R namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: "" + health: + healthProbeBindAddress: lvqpPK5eKr + kind: ChedzQo + leaderElection: + leaderElect: true + resourceName: sWNn + metrics: + bindAddress: rgNc + webhook: + port: 372 +kind: ConfigMap metadata: annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + 3ph3En: TkDm8Umw + sQ: xI creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: xxjYziP -subjects: -- kind: ServiceAccount - name: Wx + name: 3SkASoputZl-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -68723,19 +126850,16 @@ apiVersion: v1 kind: Service metadata: annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + 3ph3En: TkDm8Umw + sQ: xI creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP-metrics-service + name: 3SkASoputZl-metrics-service namespace: default spec: ports: @@ -68744,26 +126868,23 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + 3ph3En: TkDm8Umw + sQ: xI creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: ovez-webhook-service + name: axov6PJ-webhook-service namespace: default spec: ports: @@ -68771,237 +126892,254 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + 3ph3En: TkDm8Umw + sQ: xI creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP + name: 3SkASoputZl namespace: default spec: - replicas: 1309643940 + replicas: 706970284 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ strategy: rollingUpdate: - maxSurge: 1348765604 - maxUnavailable: 1691837010 - type: bŏ~怹ŋ誶U钓 + maxSurge: 617699443 + maxUnavailable: 275149160 + type: .A觾 template: metadata: - annotations: - 1fxyVO: CeTVT - 2cyc: 1a0VS5 - "5": DPtq46QYlF - X: SgzV + annotations: {} creationTimestamp: null labels: + 87UF9H: uLISBH0 + S8pIPxt1: 6p app.kubernetes.io/instance: operator - app.kubernetes.io/name: ovez - deT: "" - f: 680aAMwEeCu - m: qHEDa1mmQs55DN - xTbv: wk - zgr2: Kura5 + app.kubernetes.io/name: axov6PJ + j6HM: OxIJL + pWA: aDvN0CDtcMztj spec: - activeDeadlineSeconds: -6119805175379791000 + activeDeadlineSeconds: 550779547880226300 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: DCIL - operator: 鋇 - - key: bx1e9 - operator: 嗃hǮ攧Kì鷬埧粃6 - values: - - bD - - ranDH - - X4 - - key: lCpMz - operator: ʙP4赍ôɧmǴlľRdz爽摾éǞėġ - values: - - CrG2 - - RN - - VhT - matchFields: - - key: k4E - operator: ĸɔēƞ裈q肜1áLh鄠ƺȮ謾寍ĂǸ - values: - - OIp1 - - mT - - a8Gr - - key: "7" - operator: "" - values: - - sKj4 - - pu - - key: bsPDMZo - operator: ʪ謪Ùj(ƛ簎*蚃Ī懹ŎLXê鵾 - values: - - 2swVSTi0D - weight: 1034374934 - preference: matchExpressions: - key: "" - operator: Ğƈòƞ貈壼 + operator: +轴{苌á$ÝĿl\ values: - - Hq4Kf + - yEVNYtK + - WIC5ZN + - vTvkZUD matchFields: - - key: 3Ge - operator: 6:鑾)追兂3黤£ʖǸęŎżT亏庅o3 + - key: VW + operator: ƯLÍ葵J悚LjEj鿒ʆ悟dž? + - key: Xn7C0 + operator: x冮 values: - - K2KWWgELhq - - key: R1tbxa3fPsHYME7 - operator: òʦȍŝǀĠĜ謔Êt磶=hɹ坨+[褼 + - p + - m3tN6 + - key: vaF1g + operator: Ǐ豃Äǥ遆Mȁ戚[=ȺĂ潰OŊɁ秓 values: - - xe - - "y" - - key: 9f3kmmv - operator: Å ĂƬi$读:Ĝ=Ǻ扒类鏚R - weight: -275323758 - - preference: {} - weight: -346321123 + - gqT9u3m8H + weight: -351781364 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - - key: oDWy - operator: ǹ龏暶ɖ鬄 + - key: MBj + operator: µ鴈鑚ĝ胩H泯o機隆ñT髳鈍Ȕ笡Ǽ矓 values: - - fpO0f - - d - - JUzaG - - key: HDiH6 - operator: 稢匢 + - eX05 + - oMhHn + - key: "" + operator: G敯ǬȦ敫|:^FŽǒ聡M撾蛱 + - key: rO1kO7V + operator: =嵉 values: - - VV - - N7 - - cWA - - key: sRHW9O84z0G - operator: sTxĐ瘐餻uqɰĬ3蛡d,,0 + - ha0hN + - RtcdWRu + - matchExpressions: + - key: xNeB + operator: ~dzʧ屦鶵Ȼc叾gǎ艟ª values: - - uUZ7dJb8UD - - qi8 - - A5CmJ + - TrKoFU + - oQZZzSWRJE + - tmFp70H + - key: N5 + operator: ȫ檛±髿p鿴kø嘲,ɑcf踯 + values: + - qp + - JfB3HqjUS1 matchFields: - - key: nKW3BfVe - operator: 袙稤豺ʌ + - key: fZAirF + operator: )ň鐈ǒhĄ傴Ö噊 values: - - lL6X - - {} + - Mu6JOTl9 + - key: Vnab3 + operator: 氅太妍@wì瓔箆L + values: + - xm3gfmiGb + - GzK + - matchExpressions: + - key: 1GpE8 + operator: ;LjŋŹƎ}¾蹉ʞ弆 + values: + - 34yIsdr + - p4gdl9 + - wXXz podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: Vhwxosp9qF9q - operator: ǡ嵗4肸3UʥïȸzwǛ8 - - key: pEieLA - operator: 菻IĽřɣZij漜Q蔧Č&瘒箖Zʞė - matchLabelKeys: - - rMfBnIXN0m - - FkLOGXrJ - mismatchLabelKeys: - - KgT - - JdwN - - bEsu53GBc - namespaceSelector: - matchExpressions: - - key: 4EFFCw - operator: ']蚋ƌĩ_諘--į 曙ȳ嚉H粣脬譁' - values: - - 1RVTr - - oxicwJZ - - "" - - key: JxyqSQ - operator: ʁt渽ŏ撊ĦĩDžwƘ¿椥®ØĔ芆u垰 - - key: Tl1K - operator: 肭{ǼȬø4鷢ȱƙdÜ + - key: xSnjni + operator: z values: - - 6ZGq - - qNJVg5e + - QwwBQif + - GBK + - key: aiM2Qiv + operator: fw塃髫·, matchLabels: - 1lKS9iG: "" - 1xpi: QnFBpy1c - yv: "" + "": eCUoOLQX + 0Hzi: ZjGO + mismatchLabelKeys: + - "65" + namespaceSelector: {} namespaces: - - lSr4 - - J - topologyKey: u5hvTQ - weight: -1324847046 + - jRnXMuxXLr + - V1Dbg + topologyKey: V6B37Cx + weight: -565502833 - podAffinityTerm: labelSelector: - matchExpressions: - - key: h2RV - operator: 鿡ţɭ渗 matchLabels: - F8uYV: "" - PExA2Zzv3x: y9wi - nvWoMm: UHq5 + BWDcQx: 7QzW5L38 + J7MZmQq2: Hc + KcfM4: cZQn matchLabelKeys: - - 8ytws - - r + - Cq4P + - lBN0hp9 + - B0vaRhY4 mismatchLabelKeys: - - MK + - CD2 + - RnNQGp + - IlBYaC namespaceSelector: - matchExpressions: - - key: gUWmSoIx - operator: "" - values: - - U - - tUnHB matchLabels: - S7: L - dB: auMzY + HK: 37HFCEj + UG: 53JjIlAj5 namespaces: - - 2wrF9B - topologyKey: FvBQFs - weight: 1950683647 + - e1P + - 7ctg7lG + topologyKey: "1" + weight: 1779812559 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: f + operator: +¡Ⱥ窛柤B浪 + values: + - 7TN + - zoEO5 + - key: qWBWiBy + operator: 荼詓庈ǵ|Ħʭ~ + values: + - 17r5W8 + - E1iSxL + - key: sK + operator: 庛© + values: + - wt8cgCsy + matchLabels: + M0Ok: yq8ZE4TE + Md73: Xspa + QRF: W0tceICL9D + matchLabelKeys: + - F76TZ1M6 + mismatchLabelKeys: + - BIBQagnwWO + - fK + namespaceSelector: + matchExpressions: + - key: aBm + operator: ʔ李¸妛ÃĹ× + values: + - qROA + - Kjv + - key: vG + operator: ']Ś皝' + values: + - bBOM + - zwkRrw + - YwIq6 + - key: MJkhL + operator: ƈur[^ùʗ裉ž楄ɟ枼=iƘ螮ʪʞ胷 + values: + - NTmBqfMo + namespaces: + - c7nH + topologyKey: RqllFD podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: YQI0bLabc - operator: oɽ擮)>¦ɺ嶨儽fºʩ仃斫@ - values: - - OKV7u - - Jw - - key: zmu - operator: 蛃ľ皪ƥ軃GǏ殣意G莀哪柋昢ɫ鱒 - values: - - oa9e - - "2" - matchLabels: - "": x - HVcoV8O9: w4BjtsrW - matchLabelKeys: - - nZXUs - namespaceSelector: - matchLabels: - 8JOR: "" - fcXthu7: "Y" - namespaces: - - 9e8cVITA - topologyKey: "" - weight: -166626011 - automountServiceAccountToken: false + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: qSeEIW6Apx5W + operator: 蝻歃ʬfĴŢ錕 + values: + - H8S6EqA + - LJOpcpwKT + - key: hrPdzj3Mw + operator: "" + - key: XwB + operator: ŷȏR嘘咣貪9 + values: + - WuJg + matchLabels: + 0pM: zBiMfY + JwF: Ube + ctfv3: IwaRF6 + matchLabelKeys: + - k + - CFfSR + mismatchLabelKeys: + - ame + - 3eLdFIdt + namespaceSelector: + matchExpressions: + - key: 3OBCUOaVvzVM + operator: 龫嗰ñƮɗ熈É| + values: + - gyd5k + - FnZx + - key: 23i + operator: 靘þʫ®?土Xǣç+ + values: + - iWoMb + - dCgr9AcE + - "" + matchLabels: + 9sf: dnwoVQ2 + namespaces: + - jlD57GYm + - WOHEcN + - JQTco2ilX0 + topologyKey: hAV31Qv + automountServiceAccountToken: true containers: - args: - --health-probe-bind-address=:8081 @@ -69010,23 +127148,23 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=ZpYBKn - - --configurator-base-image=ZMlofIenTW3 + - --configurator-tag=v + - --configurator-base-image=xS command: - /manager env: [] - image: ZMlofIenTW3:ZpYBKn + image: xS:v imagePullPolicy: Always livenessProbe: - failureThreshold: 691 + failureThreshold: 136 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 271 - periodSeconds: 489 - successThreshold: 965 - terminationGracePeriodSeconds: 154 - timeoutSeconds: 796 + initialDelaySeconds: 953 + periodSeconds: 927 + successThreshold: 429 + terminationGracePeriodSeconds: 146 + timeoutSeconds: 833 name: manager ports: - containerPort: 9443 @@ -69040,18 +127178,18 @@ spec: httpGet: path: /readyz port: 8081 - initialDelaySeconds: 414 - periodSeconds: 897 - successThreshold: 597 - terminationGracePeriodSeconds: 44 - timeoutSeconds: 486 + initialDelaySeconds: 409 + periodSeconds: 980 + successThreshold: 228 + terminationGracePeriodSeconds: 211 + timeoutSeconds: 674 resources: limits: - cpu: "282" - memory: "709" + cpu: "267" + memory: "680" requests: - cpu: "141" - memory: "444" + cpu: "98" + memory: "479" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -69063,131 +127201,121 @@ spec: readOnly: true dnsConfig: nameservers: - - dVU - - YuvBgCt - - AtGNbNObX + - o2YA options: - - name: QVQEUfgls7rGt - value: "" - - name: YLY0 - value: JWRjBqPUtn - searches: - - r8mD4wPFC1 - - LStfOo3 - dnsPolicy: 驎ǃ秵ŋɿu锥ɫ4鹧Ȯ + - name: rpJ + value: 8wO3 + - value: sZ6V + dnsPolicy: Q enableServiceLinks: true ephemeralContainers: null hostAliases: - - ip: GYg - - ip: "9" - hostnames: - - 9UBCsp - - NbHS - ip: jJKRBB - hostIPC: true + - TO9 + - qAT + ip: iv + - ip: B hostPID: true - hostUsers: true + hostUsers: false + hostname: sn26g imagePullSecrets: - - name: WngLGW - - name: pH + - name: QcP + - name: R2U0oMf0N + - name: 0drXBt initContainers: [] - nodeName: JY + nodeName: Dn36O8GLl2N nodeSelector: - DXkWdhYn: C - eNn47aUMg: "" - preemptionPolicy: 逘潒Le犺佀WɰXʮ涩 - priority: -498747253 - priorityClassName: nQN + lsKAX2: "" + pl07LOV: iyuRUDY3 + preemptionPolicy: ÓɪÏM捾lª呤ĵǚȩ悕嬮ʔ獯M + priority: -532975533 + priorityClassName: oxhVXSmZ readinessGates: - - conditionType: X嗋Ɯ0眴铜竽b - - conditionType: '*槢Ȋ8Ɖ偉®Zð' + - conditionType: vl釾}&Ƽ頃坘斂ƛ resourceClaims: - - name: cS - - name: V5gjfxiv - restartPolicy: 鹵ƱcǚĐʢƼ - runtimeClassName: vXXB - schedulerName: PHRJqMYM + - name: viJ + - name: cp7L + - name: Kw30Uvsks + runtimeClassName: 46m7rxLW + schedulerName: "8" schedulingGates: - - name: RP - - name: g4lxIqW + - name: yLeDn + - name: dz5f4 + - name: jKbEJKXk8rP9 securityContext: - fsGroup: -7392701597241162000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 8372901019133498000 - runAsNonRoot: false - runAsUser: -484481943082609400 + fsGroup: -6244828504979236000 + fsGroupChangePolicy: Always + runAsGroup: 7262050681363773000 + runAsNonRoot: true + runAsUser: 2807608889417989000 supplementalGroups: - - -7223585303965730000 + - -5471763151526323000 + - 8657413726406249000 + - 5967647221799464000 sysctls: - - name: "y" - value: "" - - name: p9JjpzgZ - value: F - - name: Xr - value: roFX - serviceAccountName: Ky7M1Rr1O - setHostnameAsFQDN: false - subdomain: Ks - terminationGracePeriodSeconds: -7623189043254688000 + - name: "" + value: yxvPZ + - name: Kw1cBNshv + value: MSm + - name: PViWFVa + value: 60Ua + serviceAccountName: nNP8R + setHostnameAsFQDN: true + subdomain: kUb + terminationGracePeriodSeconds: -6520358260173701000 tolerations: - - effect: 閨供iţôIŎŷX脂販暖<塗ž剸 - key: tjmunK1 - operator: ɶɵ歮&əpĜ - tolerationSeconds: -5018449569375824000 - value: c2 - - effect: 躛 - key: ZXBpd - operator: '嗨砼堽Ŷ誜ĕƅ攸闦{邙)蕦v滽:' - tolerationSeconds: 725040168445271800 - value: mMci32cJ + - effect: 3śǨA?幏Ȉ犮厚:極 + key: Jwt6dkh + operator: _ý竷 + tolerationSeconds: -7587356670156981000 + value: gGG + - effect: '{j$Ózm哘韤I]ǜ氃ǫȭȼ窆ȑ+' + key: WuZTIZTn + operator: ʖkɻE尯宋滇愚 + tolerationSeconds: 8496080604790588000 + value: SK3PIdx topologySpreadConstraints: - labelSelector: + matchExpressions: + - key: c5fm + operator: 醿Ɵ若眐赟燔熬Ơ[蓹 + - key: dsqH + operator: "" + values: + - J6 + - Juatfa + - key: j21pMVew + operator: l:+峏ɍYÃ朵缍D榸荙ʪ dz4 + values: + - Pfu9 matchLabels: - b: Oy - matchLabelKeys: - - 6T - - PA0unBLzXB - maxSkew: 1916755573 - minDomains: 719946978 - nodeAffinityPolicy: Fpʒ<ɚůJ譿驑÷孃虞DzƔ - nodeTaintsPolicy: ƊL!`垄禐§Y.猟K(福 - topologyKey: C5C2wM - whenUnsatisfiable: 漋.敻LJÙ齯ele恊恦f sxȒ埜= - - labelSelector: - matchLabels: - 3EH4: aLhPurcQ - MGn: g - gWEsGCuvE: hq - matchLabelKeys: - - X8f - - UtU3 - - vUe - maxSkew: -1570018943 - minDomains: 129102213 - nodeAffinityPolicy: Ʋ羕]旤@栏ƔH祌Ǟ!ă卅墛/ - nodeTaintsPolicy: ljʀ犓锼JoE獬Ân)鍚¨帧Ŗ籉蟶 - topologyKey: e9dRmTq - whenUnsatisfiable: w汱k巳ƶȾ祖 + r0ZVuk0iLxe: kDtC8qRrnXh + zfvjCsZ: pkyXUe + maxSkew: 1010311869 + minDomains: 671823264 + nodeAffinityPolicy: 钩哉<雒Ņ嘙ȼ + nodeTaintsPolicy: 前|拱丅叇/ƻCĮh + topologyKey: Bd + whenUnsatisfiable: '&ô棙齆}襟Ǎ恻稶孤7Zʪ' - labelSelector: matchExpressions: - - key: 1fUOPVY4C - operator: "" - - key: g5aC - operator: e?k粠 + - key: 8xR + operator: R8ƠÔ, values: - - F4E - - bKBE - - "" - - key: QYJ8JDSH - operator: 芵%Åw鐵ɉ + - j + - R + - 08B matchLabels: - 0kQnuTsp9sW: kXZHA - maxSkew: 1505445176 - minDomains: 1442684664 - nodeAffinityPolicy: Ï賨曆趿/ah嬮ǭ尧ǂʛȳ - nodeTaintsPolicy: Ⱦ吏ʧɪ¹L'ł珥渰ƃʤǣȍɂt~ - topologyKey: Q3qDZKw8 - whenUnsatisfiable: )6i7ʤ5僛Źwƅtvɯ彵ƞÏŘBĝ + IAeV939: xyLVq1Ps83 + lVc: "" + matchLabelKeys: + - 0uS54AcB + maxSkew: 1129480646 + minDomains: -1902572954 + nodeAffinityPolicy: Ì3冓ŧ'Ƞ窕矺Ƈļ悅ʋ + nodeTaintsPolicy: 箒WGȈ(鳙á{ƝƟ驖 + topologyKey: "" + whenUnsatisfiable: qZȬ閯 volumes: - name: kube-api-access projected: @@ -69210,59 +127338,53 @@ spec: - name: cert secret: defaultMode: 420 - secretName: Gx - - name: "" - - name: DZu63M - - name: bfdOMq + secretName: 7DqgCF2lW + - name: 5Dsn + - name: LOFXwQCU + - name: rQux --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + 3ph3En: TkDm8Umw + sQ: xI creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B name: redpanda-serving-cert namespace: default spec: dnsNames: - - ovez-webhook-service.default.svc - - ovez-webhook-service.default.svc.xaBy9DzE + - axov6PJ-webhook-service.default.svc + - axov6PJ-webhook-service.default.svc.8 issuerRef: kind: Issuer - name: xxjYziP-selfsigned-issuer + name: 3SkASoputZl-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: Gx + secretName: 7DqgCF2lW --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: annotations: - Pb9Oh: F3QHWxK - puaMG: "2" + 3ph3En: TkDm8Umw + sQ: xI creationTimestamp: null labels: - JHXVQsYdx4WC: KFytXl - UN: h app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez + app.kubernetes.io/name: axov6PJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP-selfsigned-issuer + name: 3SkASoputZl-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -69274,7 +127396,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: xxjYziP-mutating-webhook-configuration + name: 3SkASoputZl-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -69282,7 +127404,7 @@ webhooks: - v1beta1 clientConfig: service: - name: ovez-webhook-service + name: axov6PJ-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -69300,56 +127422,13 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: - Pb9Oh: F3QHWxK - puaMG: "2" - creationTimestamp: null - labels: - JHXVQsYdx4WC: KFytXl - UN: h - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: xxjYziP-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - JHXVQsYdx4WC: KFytXl - UN: h - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B ---- -# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: xxjYziP-validating-webhook-configuration + name: 3SkASoputZl-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -69357,7 +127436,7 @@ webhooks: - v1beta1 clientConfig: service: - name: ovez-webhook-service + name: axov6PJ-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -69383,66 +127462,48 @@ metadata: helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - xYYx: 8dxCCUX - creationTimestamp: null - labels: - JHXVQsYdx4WC: KFytXl - UN: h - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: ovez - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - zWv: hIfkuex2B - name: Wx-crd-job - namespace: default --- testdata/case-081.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: axov6PJ app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 7ZTjb + name: nNP8R-crd-job namespace: default +-- testdata/case-097.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: ujOV3u + apiVersion: MuFtP health: - healthProbeBindAddress: zcMagN2 - kind: LO0N + healthProbeBindAddress: WIsjt1 + kind: qrUo leaderElection: leaderElect: true - resourceName: UL + resourceName: Upp metrics: - bindAddress: 7Hi + bindAddress: zOUvrhAiMkg webhook: - port: 376 + port: 133 kind: ConfigMap metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk-config + name: KPhNK5uNi-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -69450,17 +127511,19 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk-metrics-reader + name: KPhNK5uNi-metrics-reader rules: - nonResourceURLs: - /metrics @@ -69472,17 +127535,19 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk-default + name: KPhNK5uNi-default rules: - apiGroups: - authentication.k8s.io @@ -69680,24 +127745,26 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk-default + name: KPhNK5uNi-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: OZHCbAk-default + name: KPhNK5uNi-default subjects: - kind: ServiceAccount - name: 7ZTjb + name: hOWRGjU5 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -69705,17 +127772,19 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk-election-role + name: KPhNK5uNi-election-role namespace: default rules: - apiGroups: @@ -69755,17 +127824,19 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk + name: KPhNK5uNi namespace: default rules: - apiGroups: @@ -69781,28 +127852,68 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: + GnXQ: mU + dEUN: 9jQ + eWh: j + creationTimestamp: null + labels: + 1DVgfA62: TO + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MkL0HtR + app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf + helm.sh/chart: operator-25.1.4 + name: KPhNK5uNi-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk-election-role + name: KPhNK5uNi-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: OZHCbAk-election-role + name: KPhNK5uNi-election-role subjects: - kind: ServiceAccount - name: 7ZTjb + name: hOWRGjU5 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -69810,25 +127921,55 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk + name: KPhNK5uNi namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: OZHCbAk + name: KPhNK5uNi subjects: - kind: ServiceAccount - name: 7ZTjb + name: hOWRGjU5 + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: + GnXQ: mU + dEUN: 9jQ + eWh: j + creationTimestamp: null + labels: + 1DVgfA62: TO + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: MkL0HtR + app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf + helm.sh/chart: operator-25.1.4 + name: KPhNK5uNi-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: KPhNK5uNi-rpk-bundle +subjects: +- kind: ServiceAccount + name: hOWRGjU5 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -69836,17 +127977,19 @@ apiVersion: v1 kind: Service metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk-metrics-service + name: KPhNK5uNi-metrics-service namespace: default spec: ports: @@ -69855,24 +127998,26 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: zsU8D-webhook-service + name: MkL0HtR-webhook-service namespace: default spec: ports: @@ -69880,321 +128025,301 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk + name: KPhNK5uNi namespace: default spec: - replicas: 737186237 + replicas: 1843856420 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR strategy: rollingUpdate: - maxSurge: 2059369383 - maxUnavailable: 578932184 - type: RollingUpdate + maxSurge: 547551553 + maxUnavailable: 1550314739 + type: ʋs锼E* template: metadata: annotations: - 18t52Ey: KftQ5Yn6yL - Cnhja: Jjf9 - LFQZlLJ5Id: pcV + 2H14: UmxAS + U5g0p: yuaycTPAR + a: iq + alOr8NH7: TxWNmXmHhCY + wrmSg: J0Ald8ZXm creationTimestamp: null labels: - 7SH6Rp: XkrMRVuLon - 9xJevy: f app.kubernetes.io/instance: operator - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR spec: - activeDeadlineSeconds: 5075138460131302000 + activeDeadlineSeconds: 8453138196629512000 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: + matchExpressions: + - key: MAVgRhlIw + operator: 郁z1hÚ}喌šūƫȒʋ%湦 matchFields: - - key: 0rxFyK - operator: ɖ|絪ɩ邏怂ð + - key: lAPYYE + operator: úŸ橨v篘#v values: - - lGCU - weight: 1246435144 + - Hbs + - plt + - awevjY + - key: gj0z + operator: 繌ř籮純鯁ȫ + values: + - cSoPPh + - key: hOq + operator: ơɂ簲ɮt?ɺ"nj9幚Ĭ瘫泂韻嗚ĵ + weight: 430419159 + - preference: + matchExpressions: + - key: atJOrQ + operator: 霷骴Ȑjɱ梯唡Ƈ亜9m + values: + - omBCX + - DOcC1 + - key: RPUBut + operator: =庪VÚʄ¬>ʂ麿ǨĩMLjɴy2+ + - key: wrkBzkuW + operator: '@Ŭ俒ĈƓ}ďȜ矃桞儻卄槴8Ûʟ' + values: + - FkaW67 + - xGT + - a9U + matchFields: + - key: bLx0 + operator: '纣ǫH榹ɐ眧¤­婮w ' + values: + - pC02CKW + - rx + - XSb + - key: xkIrY + operator: "" + weight: -1528981107 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - - key: x47n - operator: 碵 + - key: Cjg + operator: ʫ matchFields: - - key: 2DX - operator: Ĩý慯騂.7b - values: - - R9InN - - "" + - key: RkUF + operator: +紮o笍赖@Ãƫ獙甋p - matchExpressions: - - key: z - operator: D鏜&yǟ挹"盜j颊撵8T轳$Ĵɦv + - key: X + operator: 鶄/8]嬜H²tįɖ兤ƴ濍 values: - - iA - - zkb - - BhciuY2 + - 2y matchLabels: - wC7QN48jz: Gn - xcE313: w + A: iGHu + qUKp: kSv9gQh + rgSonxW: mZ matchLabelKeys: - - E + - kPLfuzBI mismatchLabelKeys: - - horaNlEl + - KdX + - hW7hCY namespaceSelector: matchExpressions: - - key: sWA - operator: 妗čm咟ĿĩÄ牏 Ţ$儧麂 - namespaces: - - fgLu4 - - je - topologyKey: Hi + - key: nZZPQn + operator: 薩呓Ǭ郞ÁĈ皻xF_ + values: + - MT + - jbKz + matchLabels: + aogTtoRlP: bhxF3W + f8G7V: Bo + topologyKey: itF8LPMHiW podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: - AMdqJ: 3JE2njxG - KIzrVXc: B7tW9md2Zws + B8kX: ps + ed0: yfr8Mo1s mismatchLabelKeys: - - RW - namespaceSelector: - matchExpressions: - - key: 1oeG - operator: 蜃=ÿǙ燬ö褭 - values: - - wkp3 - - key: yM - operator: ½ūů - values: - - AzqGsty47MkIB - - GLSN - namespaces: + - qTXnQ - a - - hV0DG2B - - WAhdr8 - topologyKey: cGpOSLEO - weight: 1360768454 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: n5XYmLFj - operator: 精秮晵õ.ɚǞ.犧YƓ謽黋ª龺 - values: - - RMoWI - - NmD9oFeYoVzt - - 8lrE - - key: 81RzHp4Sv8J - operator: Ĝf必DZʁŚƱt - matchLabels: - JYMS3XTR: jI - xPM: Qthu - matchLabelKeys: - - PVz + - Wkm1 namespaceSelector: - matchExpressions: - - key: dPfsCEnR - operator: 2Ȟɋyɷ欵Pc6Wë铥=减w湏稀Ċ - values: - - PAA6aBnm2 - - key: G5E0z7dBNLy - operator: 茚鱑锣ɐ - values: - - RwkW - - key: 8KVw - operator: 漵嚔R仑Ǚ] - values: - - aj306N1ChXihGl - - "" - - "" - matchLabels: - UxglI27: VrE9h - rsqYx: y4 - topologyKey: eSIo8QT - weight: 1879262232 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: UGnMe - operator: 踏+7铻Ɠ$璞皰T[ņ嘛ɹ.Ë.Ǡµ - - key: n8Kyq6MZnn - operator: ɕȐ袞政肽S+ - values: - - d4Va6 - - "" matchLabels: - "": WH6RB - hlYsK: oA - matchLabelKeys: - - CGjlYIjQa - - 3ArLGPQ - - TVFL - mismatchLabelKeys: - - ZN67Fk50 - - K - - BIK3F - namespaceSelector: - matchExpressions: - - key: RfSgAZW - operator: 锦NJȱ頔饴X坮谙 - values: - - EUs8 - - KBnej - - Awg88 + P: dlxV6 + QtoC8F98: d2 + fx37DkCYrj: zEtmwGL namespaces: - - "" - topologyKey: e3QFK - weight: 2136767491 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: Lv - operator: 黎ʘq志 - values: - - j84g - - xtWEL - matchLabelKeys: - - it9FgYyd - mismatchLabelKeys: - - mpg - namespaceSelector: - matchExpressions: - - key: MmD - operator: 绪.檧 - values: - - Is - - WJzXx9P - - RlU0Vy - - key: DvcZFz - operator: 個g 吮Ŷj绂鑭奻ʟʃ - values: - - v - - ghys - - Hur - matchLabels: - 4Bag0xtZ: PcXKf7 - namespaces: - - QLOS - - GB1Xfl2Bh - topologyKey: Ex + - E0S + topologyKey: eVtM2oezTJ + weight: 925822609 automountServiceAccountToken: false containers: - args: @@ -70204,26 +128329,26 @@ spec: - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=okj1Bqm1LHE - - --configurator-base-image=YYLGC7 - - Gc3q48w - - JNFXPzkrj - - hYzBm + - --configurator-tag=3EcYA + - --configurator-base-image=HoNUZ89Keda + - l9a + - Arx + - bLHpq0J3 command: - /manager env: [] - image: YYLGC7:okj1Bqm1LHE - imagePullPolicy: IfNotPresent + image: HoNUZ89Keda:3EcYA + imagePullPolicy: Never livenessProbe: - failureThreshold: 483 + failureThreshold: 847 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 398 - periodSeconds: 195 - successThreshold: 102 - terminationGracePeriodSeconds: 324 - timeoutSeconds: 854 + initialDelaySeconds: 922 + periodSeconds: 729 + successThreshold: 713 + terminationGracePeriodSeconds: 336 + timeoutSeconds: 324 name: manager ports: - containerPort: 9443 @@ -70233,22 +128358,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 484 + failureThreshold: 362 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 948 - periodSeconds: 31 - successThreshold: 811 - terminationGracePeriodSeconds: 971 - timeoutSeconds: 302 + initialDelaySeconds: 964 + periodSeconds: 99 + successThreshold: 305 + terminationGracePeriodSeconds: 853 + timeoutSeconds: 141 resources: limits: - cpu: "391" - memory: "331" + cpu: "212" + memory: "397" requests: - cpu: "565" - memory: "577" + cpu: "121" + memory: "731" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -70260,128 +128385,120 @@ spec: readOnly: true dnsConfig: nameservers: - - "" - - 3B1J + - vD1Q options: - - name: EKTU5 - value: uGrsKSv + - name: nocNEHfaAOe + value: 03vE + - name: QSNCgZ + value: "" + - name: fX8EUziir + value: h1lo searches: - - jzvX - - "" - - QUGE - dnsPolicy: b丅盝ì4ʜ鿶Ì蚰 - enableServiceLinks: true + - MmVL + - 0ZNhetg4 + - fPbabAt ephemeralContainers: null hostAliases: - hostnames: - - lSSC - - "4" - ip: mbGtHu - - hostnames: - - Be - - Fa - ip: 6m7jCCt + - iuGeT9 + - L + - dzDpaq0m + ip: qQjd2 - hostnames: - - BAX - - T - ip: "" - hostNetwork: true + - ciiy7Zr1 + - de5O + ip: wJoe4k hostPID: true - hostUsers: true - hostname: P + hostUsers: false + hostname: C0eddorzlX imagePullSecrets: - - name: pgu1 - - {} - - name: k + - name: 4Ig + - name: aS + - name: zg initContainers: [] - nodeName: LCE + nodeName: ntH0dNCmb nodeSelector: - "": Oj8 - preemptionPolicy: _ŞĖ搓Ƙ铌皬8姱垿ȉK9剚 j躳v - priority: 693230071 - priorityClassName: G - resourceClaims: - - name: kfkaZ - - name: O - restartPolicy: '%v罰胧ʥ碔á7Ƿ蒙¬?兣寲Dx骱' - runtimeClassName: wWcFKJY - schedulerName: K64mA + "": m9D + K1fAX8N: BkIZia + OR83: OXDX + c0: Cw3DE + vLoT: zs + preemptionPolicy: ʞ鹅zM@#ť + priority: 80812349 + priorityClassName: XRWG + restartPolicy: 聥yfĜ縩 + runtimeClassName: A1IOFH + schedulerName: v89zEGC1E + schedulingGates: + - name: VX9B securityContext: - fsGroup: 6718607243193313000 - fsGroupChangePolicy: Always - runAsGroup: -1791668966521515800 - runAsNonRoot: false - runAsUser: -2730138901692621000 - supplementalGroups: - - 805361304793257700 + fsGroup: -5684185103106526000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: -6734736261006962000 + runAsNonRoot: true + runAsUser: 6709862083486745000 sysctls: - - name: UBPPWy - value: 4T5 - - name: C2cMj2 - value: 8rbtdE - serviceAccountName: NrdXODCm + - name: XcMYeaD + value: bdrh + serviceAccountName: 4v setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: gWuTd - terminationGracePeriodSeconds: -8771004476345526000 + subdomain: JZBy8ZayZwcMF + terminationGracePeriodSeconds: -8250315328961058000 tolerations: - - effect: â+ɹuñĄ鬨?eɌB¬`3 - key: hV0 - operator: ;ȳ窨.EƓ- - tolerationSeconds: -1848018919213049300 - value: V9xuhyF - - effect: '!' - key: Yaptp4d5N - tolerationSeconds: -651827740239648600 - value: ahXis + - effect: 召Ǘ萃Ļ搲ňW#õ挝ǭO]}BʟFRT + key: Z + operator: qȄuűE匸 + tolerationSeconds: -4881064580795227000 + value: MBj + - effect: 鮋吪攏ǒTK + key: Su7DDEM + operator: èʗ*´ǒó鄶B$?ƣ厰} + tolerationSeconds: 7632226241464207000 topologySpreadConstraints: - labelSelector: matchExpressions: - - key: RtKeQx - operator: < - values: - - 4SOS - - lbt1vl - - w + - key: 0cumQ8tluj1c + operator: $鮖ɛ笼.j嵭驟俉Ȧȥ碿轾ő椫梁£f題 matchLabels: - CL1: x7Y - l6x: BhZyTgl - rna1k9s: l - maxSkew: 1960215012 - minDomains: 541264139 - nodeAffinityPolicy: ȍw(ŢW=@ij峸ɰʏũĜĜ换^Z椒芜 - nodeTaintsPolicy: ī{凮 - topologyKey: V5FKq3 - whenUnsatisfiable: ^*浐[TǻzŪǸ4嚍 + 1W3KQX: MpkDb + GtFt5w: R + maxSkew: 276375209 + minDomains: -1200472072 + nodeAffinityPolicy: 0橏孀Ɉœ + nodeTaintsPolicy: Ê曕{Wœ»$ + topologyKey: dl6bnLmrg + whenUnsatisfiable: Įǂ恼7靍ʀĝȀ=ĸ卌DŽĢ - labelSelector: matchExpressions: - - key: Usp - operator: "7" - values: - - XCUsN0 - - End - - key: KV5u - operator: g5dĔǨP - values: - - S8Q7Nj - - v3DRq38f - - saL - - key: apEg - operator: "" + - key: S + operator: Kv殌ÂʓÌZʀ資ʕƣȭ擁ɎY values: - - Cbk8 + - z10m + - 5GGc1 matchLabels: - I1a: Nt8eh - h4cGiMg: VvNF + D47d: u matchLabelKeys: - - bidOGl - - lBMT7d - maxSkew: 977904069 - minDomains: -1227979045 - nodeAffinityPolicy: $ʃ嬘Œ/Ǫ - nodeTaintsPolicy: u艌饔DzX~ - topologyKey: kOJfe - whenUnsatisfiable: ɑyǟƎċ匣鰵-0ĹbK2綗vɭĈK + - B + - F1EEoBx + - 2mLy27IC5 + maxSkew: 1503337367 + minDomains: 1416806673 + nodeAffinityPolicy: .3掲ʑ + nodeTaintsPolicy: ƜǟQ郤蟹ī籸烒É:籧kȟ_rɩ + topologyKey: tpp9zbzN + whenUnsatisfiable: ÑŗHupɩ嘅NƀƏȮ笡澛牪NJw + - labelSelector: + matchLabels: + 0aa: "" + matchLabelKeys: + - SkOlYv + - 0luz + maxSkew: 2123040071 + minDomains: 476945799 + nodeAffinityPolicy: lH洒Ņ顸ɐ]紗ȁ瀣 + nodeTaintsPolicy: ŧ/ô:儮6Ñ"廬懼"sS>瑘Ơ + topologyKey: WGNmR + whenUnsatisfiable: ȇ]漞ɜ煔C!rFÚ[ù&' volumes: - name: kube-api-access projected: @@ -70401,56 +128518,62 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace +<<<<<<< HEAD - name: cert secret: defaultMode: 420 - secretName: e8ZBqt - - name: 1yV8 + secretName: EJIW1 + - name: "" + - name: McerRJI --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 name: redpanda-serving-cert namespace: default spec: dnsNames: - - zsU8D-webhook-service.default.svc - - zsU8D-webhook-service.default.svc.x0g4v + - MkL0HtR-webhook-service.default.svc + - MkL0HtR-webhook-service.default.svc.9vz2maUN9g issuerRef: kind: Issuer - name: OZHCbAk-selfsigned-issuer + name: KPhNK5uNi-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: e8ZBqt + secretName: EJIW1 --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ + GnXQ: mU + dEUN: 9jQ + eWh: j creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: OZHCbAk-selfsigned-issuer + name: KPhNK5uNi-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -70462,7 +128585,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: OZHCbAk-mutating-webhook-configuration + name: KPhNK5uNi-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -70470,7 +128593,7 @@ webhooks: - v1beta1 clientConfig: service: - name: zsU8D-webhook-service + name: MkL0HtR-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -70488,51 +128611,13 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: - NFFw: qCc3rOA - gKTYp: Zd2R - jKQQEfT: FduvIJJ - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: OZHCbAk-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 ---- -# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: OZHCbAk-validating-webhook-configuration + name: KPhNK5uNi-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -70540,7 +128625,7 @@ webhooks: - v1beta1 clientConfig: service: - name: zsU8D-webhook-service + name: MkL0HtR-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -70556,6 +128641,120 @@ webhooks: resources: - clusters sideEffects: None +======= + - name: JSUusdb +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + "": xyoMnvlljN + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + q8d: WU + labels: + 8xI3Kt: aGHY + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bMdN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: SRL-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + 8xI3Kt: aGHY + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bMdN + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: ixcXFf-migration + namespace: default +spec: + template: + metadata: + annotations: + 7gwR: ttRD + U3CI2NzvC4: Jaa3jlj8 + labels: + DDMHUoy6r: hRHrp5 + app.kubernetes.io/instance: operator + app.kubernetes.io/name: bMdN + b: arNtQDV56v + sb3NWh5O: JcX70 + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: UqP:XrgP + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "785" + memory: "561" + requests: + cpu: "644" + memory: "343" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: ZbzvlISR + - name: f9KTljlCr + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: SRL-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - key: n0OuzO + operator: Ǿ祤İ萿諫 + tolerationSeconds: -8049016068086636000 + value: "7" + - effect: 奐棁洧ȠƲ緅Ģè5潆铧( + key: iad6BXX + operator: 鱈蓗'ÐaQ哃Lj縷N鐉=G + tolerationSeconds: -6894361359119077000 + value: 3kE5sSfzL + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-040.yaml.golden -- +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -70566,45 +128765,65 @@ metadata: helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" + miOT: 0tQoqwgkh + qxGIlj: xY0 creationTimestamp: null labels: + 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: zsU8D + app.kubernetes.io/name: MkL0HtR app.kubernetes.io/version: v25.1.4 + dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: 7ZTjb-crd-job + name: hOWRGjU5-crd-job + namespace: default +-- testdata/case-098.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 4L: T4HM0h0 + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: LH + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: L namespace: default --- testdata/case-082.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: k0gO + apiVersion: Yv health: - healthProbeBindAddress: 2v2 - kind: bEutG + healthProbeBindAddress: P + kind: AzYFtSq85 leaderElection: leaderElect: false - resourceName: EQkuZC0C + resourceName: igrTR metrics: - bindAddress: 9eXxc11 + bindAddress: U0X webhook: - port: 384 + port: 269 kind: ConfigMap metadata: annotations: - p: DV1 + A: YuZnq6 creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator + app.kubernetes.io/name: LH app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v: pV - name: JvUUYZNAn-config + name: iP-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -70612,16 +128831,15 @@ apiVersion: v1 kind: Service metadata: annotations: - p: DV1 + A: YuZnq6 creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator + app.kubernetes.io/name: LH app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v: pV - name: JvUUYZNAn-metrics-service + name: iP-metrics-service namespace: default spec: ports: @@ -70630,23 +128848,22 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator + app.kubernetes.io/name: LH --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - p: DV1 + A: YuZnq6 creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator + app.kubernetes.io/name: LH app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v: pV - name: operator-webhook-service + name: LH-webhook-service namespace: default spec: ports: @@ -70654,168 +128871,366 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator + app.kubernetes.io/name: LH --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - p: DV1 + A: YuZnq6 creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator + app.kubernetes.io/name: LH app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - v: pV - name: JvUUYZNAn + name: iP namespace: default spec: - replicas: -1282715809 + replicas: -2084315406 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator + app.kubernetes.io/name: LH strategy: rollingUpdate: - maxSurge: 706213910 - maxUnavailable: 1958671198 - type: Ʒ#敇ŧňqʂJ2ǎ絙湌淸HŇĕŦ颦A + maxSurge: 1353699977 + maxUnavailable: 132140350 + type: 毒醆ų粔,渞FƨȖ template: metadata: annotations: - 4CSkABO: ITTJyql + 16r: Njj9s + Ts: tJoO25k + bssVBE: "" + na: "66" + tBil: bsRufV62 creationTimestamp: null labels: - 5F0sWgcV31: w0W - 6nk3DMQ9q: DHR1Slo6VJ + LnVk: ed9K + Vy3g: 6OA app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator - oeuWrTVaS: iQ + app.kubernetes.io/name: LH + k3I6: wI + npjtD1N9QO: fb spec: - activeDeadlineSeconds: 4327148074270488000 + activeDeadlineSeconds: 545118660215539400 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - - key: r4g7 - operator: 汔ŁI悓)#觊膩șÍ辯m_ - values: - - Da - - AJqw1 - - "" - - key: J - operator: "" - - key: VC5 - operator: '`蜚7' - values: - - c - - xNYDAq - matchFields: - - key: 8K98uW - operator: 檁YM聏ɧǍ - values: - - 7wqj - - key: KzlyvM - operator: Ǵ越q + - key: ald + operator: ȴlȪu腩掕N + values: + - QIf64n5 + - key: hHmKEv + operator: "" + weight: -1268287639 + - preference: + matchExpressions: + - key: E + operator: 鯢ƐÑ$șűl + values: + - MDiM + - WXr8 + - key: MnV + operator: 搗諧ʑ篑V0粛 + values: + - ToI + - key: cMpL + operator: S炻螇Ȓȡ溜ƍ§  + matchFields: + - key: 4WZJu7 + operator: 7*楕ȿ杗Ŵ&Nʜ¤ǒ唁貖R + - key: 3K + operator: 汱[¶jKĬƛ"Rɤ莫檾ùǵ3Q硂 + values: + - Em7FnwV8 + - LvzZDy + - key: 8OSP + operator: ŷǗĨkY6蝷oX炰Ȳ鍛侵綜ʥ浧 + values: + - p + - c + weight: -1521381926 + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchFields: + - key: deY2qL + operator: 僪Ǖ輈満Ǭȅ軩ʄ[Lʑ鶙h婍 + values: + - 3w + - 5kCYPTyW4H + - key: xrRA2b7 + operator: æ吩ÇȐ祇耺´áhA优w()ɨB + values: + - nAdB + - TbZ644d5 + - W8MxvKLY + - key: kH5O + operator: Xm{鶞竆棼] + values: + - DBrNWf1O + podAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + pOMm: YgM5C + matchLabelKeys: + - xb0W3 + - U9Z5 + mismatchLabelKeys: + - W2j + - NQU + - Bi4K + namespaceSelector: + matchLabels: + 9La7NrIsW9hs: kiZh + AMZur: YI + eD17ZVn: bOP + topologyKey: Y4nSDgLHUU83 + weight: 1168243410 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: FYU6jaRx + operator: "" + - key: 1G0P + operator: 铘Tʥȭ橆Ⱦɹb嫠獬#Ʒ弼蓮Ȇ + matchLabels: + K: PKwJL3m + matchLabelKeys: + - jR + - gDG + - vx3f + mismatchLabelKeys: + - "N" + - yocNWg5CR + namespaceSelector: + matchExpressions: + - key: mM7f + operator: 耳m黦3悇LP7ʝFɁr饒U沰Gʤƻ錾 + values: + - V5prB + - qF4z6 + - key: fXuR + operator: ~溥蠿A0鱢ǭxìX + values: + - nNM77Ukqw + - "461" + - key: dh + operator: ¡鷥叢#Xɤ;Fʔŋuûw + values: + - MH9D5l + - o + - UlIYIT + matchLabels: + uKZc: ebdq + namespaces: + - g0 + topologyKey: bm8 + weight: 1737502384 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: oLCSLPem + operator: 梉ʘ琓咻_b轝,ǡʍ匽ʅcǎb + matchLabelKeys: + - CV4HigFw + mismatchLabelKeys: + - g5n7ks + namespaceSelector: {} + topologyKey: ti3S + - labelSelector: + matchExpressions: + - key: "" + operator: ǴĽ^ă吭嬤ƫţ¶贡ǰZ+搭W笢q values: - - N40vLS - weight: 1716021049 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: lCp - operator: gúW瑾.O糂dUő + - Zj9W + - key: KpXFtva + operator: ǥǗ values: - - ChpwElbY - - QxP - matchFields: - - key: Y0uQsss - operator: 萀-伙 + - Q5sTjgK + matchLabels: + 4v5: jQtD + R401l9rUj: rVe5 + matchLabelKeys: + - vL + mismatchLabelKeys: + - JhKxxK2g + namespaceSelector: + matchExpressions: + - key: "" + operator: ƽ邲Ƙ鬾É[D+VzsǂÐ*2® + - key: sQXR + operator: t¢ǂĬĬ馅H徶ęʁv輷 + - key: jJ + operator: 犁屾滬ƽ帹ğŎ-Ţ士tJɾȹ翺2 values: - - B8XwFbT - - matchExpressions: - - key: a - operator: 膘H鑝K芁ʞ'¾S堆qɦ鱀GkƸH' + - yP9jnx + matchLabels: + "3": w2u5 + namespaces: + - oTbjakxO + - 4UXHSQ + topologyKey: CnoN + - labelSelector: + matchExpressions: + - key: i0m3imR + operator: 亿4ȅǵ葽呵&Cd嬚 values: - - uB - - key: Cl4Gy - operator: ʬƥ蜚Øm鄉ƏHÎE#ț矇s聋ɽ魴毪縙 - matchFields: - - key: gRC - operator: Ǭo<ȝ埔 + - cd08S + - epeV + matchLabels: + Vi: wAjlUyRQKL + matchLabelKeys: + - 1s3GN0Q8YB + - kc99V + namespaceSelector: + matchExpressions: + - key: 4a776D + operator: 鍎ô³4a嚲ð values: - - Q6nu - - YCX8 - - e8YoXu - - key: 02xxhs - operator: É矖湵潈 + - R6uXvLOEk + - VYeFB + - key: dIilgJQ + operator: ű鱒$+Ȇɳ艿a沍俸埔 values: - - Z95 - - Dhv - podAffinity: {} + - cUQcGHb + - EGhtIfoCD + - Y9IXc + matchLabels: + mPll5xZ: 7Pg6gu + namespaces: + - Pa5iF + - "" + - LeJzcHt + topologyKey: tFH podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: jFoQu + operator: '&zs)VXФlYAZRŰ岃!' + - key: uU4exdU + operator: 賾 + values: + - 9nlB9d + matchLabelKeys: + - N6aRuXn + mismatchLabelKeys: + - QCFq + - "0" + - 5cP + namespaceSelector: + matchLabels: + "": 0eUrGy + OOtA47: sFd + namespaces: + - "" + - Pw50 + - Z852nRmS + topologyKey: nWv + weight: -1358082559 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - - key: "" - operator: 5旍!ƠǀŹ - values: - - ufabqBY2 - - key: sjc06JAk - operator: ȂǍ + - key: KDHE + operator: 芲7Tô旇龮n踴酽ǦÇ values: - - AIn0j - - key: r6SM - operator: E鮃Z洊丫ƪ垁<7Ɨc库ǎ骪¶雑 + - A + - jUxOXdqh + - bEh8NQQc matchLabels: - EKHTt: HM + "": 6lw + dkU4C12: rDEKG0ghK32by1z matchLabelKeys: - - cyY4rx0 - - PBIfh - - e23iWr + - 26xZQi2t0 + - T95c27r6 + - hZ + mismatchLabelKeys: + - OQ0z + - lN1N + - wLsm namespaceSelector: matchExpressions: - - key: cV2PdoeG + - key: o + operator: 孻ķA<罅JA話Ĵ=蛻奲ȑ)*?焩藶勗 + values: + - 5b5AlNnx + matchLabels: + 9wwbN9zXP: xzl80R + DCWnY: zvgO + namespaces: + - xo + topologyKey: "" + - labelSelector: + matchExpressions: + - key: TO7 + operator: ʪ蛕ȣƇ訊ɔ涙ɪD# + values: + - EVAp + - key: Mq1cXCqn operator: "" + - key: v9EpgKH + operator: 騛进怅ĉ鳦ǃŕ]轢宪泬Ə + values: + - Qj + - 7pgJ + - s5Bb matchLabels: - KV1o: YzsQVo - NFt6l: kLct - lcwSIV: nWbtoy + Eogtig: mjIAV + matchLabelKeys: + - lPjkbOOt + - XBaEp + - Sa0Ag999 + mismatchLabelKeys: + - ErcgQS + - wknKG + - BZCC + namespaceSelector: + matchLabels: + tK6Qy5: 7DI1 namespaces: - - Au1Zw - - rN - - aRAD - topologyKey: 5I +<<<<<<< HEAD + - UZdPeg + topologyKey: Pt7S +======= + - "" + topologyKey: io automountServiceAccountToken: false containers: - args: + - --configurator-base-image=0HXtC + - --configurator-tag=xSn6 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true + - --log-level=IWHEF6vNl + - --metrics-bind-address=:8443 - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=H0aN - - --configurator-base-image=kG9n + - --webhook-enabled=true command: - /manager env: [] - image: kG9n:H0aN - imagePullPolicy: Never + image: 0HXtC:xSn6 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 210 + failureThreshold: 850 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 483 - periodSeconds: 101 - successThreshold: 946 - terminationGracePeriodSeconds: 632 - timeoutSeconds: 714 + initialDelaySeconds: 526 + periodSeconds: 272 + successThreshold: 452 + terminationGracePeriodSeconds: 779 + timeoutSeconds: 610 name: manager ports: - containerPort: 9443 @@ -70825,22 +129240,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 841 + failureThreshold: 442 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 25 - periodSeconds: 321 - successThreshold: 829 - terminationGracePeriodSeconds: 770 - timeoutSeconds: 182 + initialDelaySeconds: 752 + periodSeconds: 157 + successThreshold: 970 + terminationGracePeriodSeconds: 567 + timeoutSeconds: 416 resources: limits: - cpu: "104" - memory: "472" + cpu: "170" + memory: "318" requests: - cpu: "905" - memory: "554" + cpu: "695" + memory: "140" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -70852,126 +129267,146 @@ spec: readOnly: true dnsConfig: nameservers: - - h9KdM - options: - - name: qwrR - value: LUC - dnsPolicy: 鍝2Ruɂõy基鰠Ǯu鈏ǥ櫳¦r - enableServiceLinks: true + - "" + - QjF + - B1LGeQmj + searches: + - rEve + - xrIQHr + - CK + dnsPolicy: <ɻ鎔盱šsýX&甽轨3CȐ磬! ephemeralContainers: null hostAliases: - - ip: B2mapZDDPI - hostnames: - - 43K4JN - ip: QCjQ33I + - 8Jj + - 86uX + - CWbbSzaawNL + ip: "n" + - hostnames: + - "" + - Wi + - ao3 + ip: Z7M26 + hostIPC: true hostPID: true - hostUsers: true - hostname: UcVgcPlB3Tp + hostUsers: false + hostname: oSc69 imagePullSecrets: - - name: L3xc - - name: b2AowAh7 + - {} + - {} + - name: Jandwem initContainers: [] - nodeName: toIvU5utWJJ + nodeName: Nq nodeSelector: - oD: LUM5IOof - preemptionPolicy: Ndz魦°瑼乭05ʚ ȃhŁ栛冤 - priority: -1752439580 - priorityClassName: SjrGf0 + 7yo1dz: K + x: 3Ca + preemptionPolicy: U纚BƗ鸻P + priority: -1581537089 + priorityClassName: jeYTm readinessGates: - - conditionType: qx÷E(ʯ{ɗF仵eʝ - - conditionType: 廅 - - conditionType: eX鼺Ǐ邹6ɼțrl{墳贝 + - conditionType: ',ɤ睺悛ȑÉ饙垶ƪy' + - conditionType: Ĵ诵Ȼ撱1 L + - conditionType: w²ŗ resourceClaims: - - name: vn1HJRfk - restartPolicy: 寪SC嚸Ydæ媁缵Ö91佤k - runtimeClassName: KKo8 - schedulerName: rHdgH - schedulingGates: - - name: lt - - name: w56 - - name: 5QkP + - name: WvbZ1lD4h + resourceClaimName: Vc2E + resourceClaimTemplateName: U79B + restartPolicy: gLƜǹ阢pƬ_Uèq%b@磮ň蒿 + runtimeClassName: oONXDCw + schedulerName: 5FE securityContext: - fsGroup: 8284482227971759000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 7549977893834572000 + appArmorProfile: + localhostProfile: 3yTDgh + type: Ǜ+ʔU潢ȟ釉w_ɡK魪榓ƍ + fsGroup: 3216066926035010000 + fsGroupChangePolicy: Always + runAsGroup: 3276634386913170400 runAsNonRoot: false - runAsUser: 2890183731546937000 + runAsUser: 4004825339191352000 + seLinuxChangePolicy: C^Â顟僱懞鱏鏇ƒ蒤ū荀ȱ~U深2汓 supplementalGroups: - - -8069923849240214000 - - 888768176187646600 - - -5100419271157934000 + - 2589062149252809000 + - -5791003977191882000 + - -854457243379484500 + supplementalGroupsPolicy: 莽 sysctls: - - name: o - value: uZ570Tq - - name: gwsVIsOeL - value: Ts6 - - name: cUEGZd - value: fevys - serviceAccountName: P2 + - name: Qt0ha + value: "4" + - name: XLJxYKB + value: 7Ig3n3m + serviceAccountName: tI setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: Tws - terminationGracePeriodSeconds: 5906580452447393000 - tolerations: - - effect: Ę&h - key: Sb0Qh - tolerationSeconds: -6895611838181698000 - value: qv5 + subdomain: jHW + terminationGracePeriodSeconds: -5221078623028697000 + tolerations: [] topologySpreadConstraints: - - labelSelector: {} - matchLabelKeys: - - Emso - - "" - maxSkew: 757251221 - minDomains: -1013392564 - nodeAffinityPolicy: Ĩa奋騐u - nodeTaintsPolicy: "" - topologyKey: YQH - whenUnsatisfiable: 赿仔F跃$礪刞ūȏiǟ - labelSelector: matchExpressions: - - key: px - operator: 儇( + - key: 3Wo9b0 + operator: 淢ǡ=aº[ values: - - 4bccBIY - matchLabelKeys: - - "" - maxSkew: 157171156 - minDomains: -216696003 - nodeAffinityPolicy: Ł - nodeTaintsPolicy: ¯嚋2Ǐ#Í菗SĄ謐*l汁鄖Ȍ - topologyKey: 4pVrPZxh - whenUnsatisfiable: 轸J薶?ôƱ3ƳN¤鿉ɻ璛Įƍ坼?D + - cgJeb1LmXZm + - U0h2gn + - xs80 + - key: 8lEgK1SwqmzL + operator: Ǐ儀:9[ + values: + - h1y4c + - GR1nE + matchLabels: + PeakWtI2Ul: yaj + Xv7DjseMf: RumdcIO + maxSkew: 1680707722 + minDomains: -1777543874 + nodeAffinityPolicy: 祡>恣巎Ď显诣Jʓs + nodeTaintsPolicy: 畁鶑ʮ £ʪɒ絜ȕ罥/釄I + topologyKey: sJsTxf + whenUnsatisfiable: f試üz萛ƙə仍脁ʌt羚¾Ƙ - labelSelector: matchExpressions: - - key: bwq - operator: ı枱A稓乿酇Ø贤E淞Ū梖}Iĕȴ + - key: tO3sT6pVfG + operator: 砍[ƭ 荆ʑ+Å values: - - LM - - u7PG - - key: Xy - operator: ²[ƸǬ逍 + - po + - iKQQmFN + - 3NIUgf + - key: F + operator: 鸲Ņdž媉钮獌¼娥 values: - - WvjZ7X3d - - fS - - key: 8WvmN - operator: 驿W笕.ÀQ©~碀瓚琩镪ƖŁ坭+ + - gc + - Qi + - wu4VnU0 + matchLabelKeys: + - 4Qubd + - iJbPRI + - EfzcR0 + maxSkew: 285321238 + minDomains: -2014892719 + nodeAffinityPolicy: èİKȝ炰Ń + nodeTaintsPolicy: 'Ŝ埅Ƹ褗ɀ3C菨ȘƋ樃郧ƨ藭奷磿T鲎 ' + topologyKey: Uog + whenUnsatisfiable: 鍝IlJʧp<雳nô + - labelSelector: + matchExpressions: + - key: VWsp + operator: 蠼貥 values: - - 7PKYszc6 - - runyFPLgH5g + - K + - cqNMoPo + - key: xd9G5B4H9 + operator: ȷʏ嬇ƚXn醭 + values: + - Ok40CeDqvFT + - lnNRl3dg + - Ri2SA matchLabels: - 8Zpv: hNK - YPSqw8B8: FD - matchLabelKeys: - - "1" - - EJwB - - F4jliy - maxSkew: 2058005309 - minDomains: -304661344 - nodeAffinityPolicy: t曽C@áMG筌 - nodeTaintsPolicy: 9Ƿ啩äj?ė冯隉敖 - topologyKey: "y" - whenUnsatisfiable: ǩ + VZ: 138hwTjzX + maxSkew: 785961752 + minDomains: 1889130989 + nodeAffinityPolicy: T瓿Ú覉n軏j#jT沤S?ʟǽ + nodeTaintsPolicy: lʔÀ"Ţ8嫡ʔ蹥ɵ記Ī^蚥 + topologyKey: H639 + whenUnsatisfiable: ɳ"I volumes: - name: kube-api-access projected: @@ -70994,52 +129429,52 @@ spec: - name: cert secret: defaultMode: 420 - secretName: kE9 - - name: AyYiFET5u - - name: RMYhGM + secretName: DMOjbc --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: annotations: - p: DV1 - creationTimestamp: null + 3jIj: 9eLK + QiTgV9hHRnNTPK4l: 3kG4n1 + omSNYA: j5if8d labels: + U69I7Dt1: aMpd2O8M app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - v: pV - name: redpanda-serving-cert + app.kubernetes.io/name: vgF0rmeO + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zLgYNIEkP9-webhook-cert namespace: default spec: dnsNames: - - operator-webhook-service.default.svc - - operator-webhook-service.default.svc.liM + - vgF0rmeO-webhook-service.default.svc + - vgF0rmeO-webhook-service.default.svc.dAjtNe5 issuerRef: kind: Issuer - name: JvUUYZNAn-selfsigned-issuer + name: zLgYNIEkP9-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: kE9 + secretName: DMOjbc --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: annotations: - p: DV1 - creationTimestamp: null + 3jIj: 9eLK + QiTgV9hHRnNTPK4l: 3kG4n1 + omSNYA: j5if8d labels: + U69I7Dt1: aMpd2O8M app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - v: pV - name: JvUUYZNAn-selfsigned-issuer + app.kubernetes.io/name: vgF0rmeO + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zLgYNIEkP9-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -71049,9 +129484,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: JvUUYZNAn-mutating-webhook-configuration + cert-manager.io/inject-ca-from: default/zLgYNIEkP9-webhook-cert + name: zLgYNIEkP9-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -71059,7 +129493,7 @@ webhooks: - v1beta1 clientConfig: service: - name: operator-webhook-service + name: vgF0rmeO-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -71081,99 +129515,286 @@ apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: JvUUYZNAn-validating-webhook-configuration + cert-manager.io/inject-ca-from: default/zLgYNIEkP9-webhook-cert + name: zLgYNIEkP9-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: vgF0rmeO-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + U69I7Dt1: aMpd2O8M + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: vgF0rmeO + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: QLQ-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + U69I7Dt1: aMpd2O8M + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: vgF0rmeO + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: QLQ-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" + labels: + U69I7Dt1: aMpd2O8M + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: vgF0rmeO + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zLgYNIEkP9-crds + namespace: default +spec: + template: + metadata: + annotations: + L: wp5b + VBQ: o6YR + labels: + 1x: sd7O + app.kubernetes.io/instance: operator + app.kubernetes.io/name: vgF0rmeO + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + - --experimental + command: + - /redpanda-operator + image: 0HXtC:xSn6 + imagePullPolicy: IfNotPresent + name: crd-installation + resources: + limits: + cpu: "170" + memory: "318" + requests: + cpu: "695" + memory: "140" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: C + - name: "0" + - name: lbS + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: QLQ-crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + U69I7Dt1: aMpd2O8M + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: vgF0rmeO + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zLgYNIEkP9-migration namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: operator-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None +spec: + template: + metadata: + annotations: + L: wp5b + VBQ: o6YR + labels: + 1x: sd7O + app.kubernetes.io/instance: operator + app.kubernetes.io/name: vgF0rmeO + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: 0HXtC:xSn6 + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "170" + memory: "318" + requests: + cpu: "695" + memory: "140" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: C + - name: "0" + - name: lbS + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: QLQ-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-041.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false +automountServiceAccountToken: true kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + AA: Rcao5 + Xdxn: 0G1 labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - v: pV - name: G-crd-job + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: j7z namespace: default --- testdata/case-083.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: Z + apiVersion: EuZX health: - healthProbeBindAddress: tT3ln - kind: qRpLfXMeqNwbtB + healthProbeBindAddress: JO + kind: BJyvTvT leaderElection: - leaderElect: true - resourceName: gNGg + leaderElect: false + resourceName: JI45YkC metrics: - bindAddress: K4wonq + bindAddress: g1FCYxfzRvn webhook: - port: 326 + port: 381 kind: ConfigMap metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9-config + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9-metrics-reader + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -71184,45 +129805,98 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9-default + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumes + - horizontalpodautoscalers verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -71239,11 +129913,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -71252,15 +129931,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -71269,8 +129950,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -71280,11 +129985,34 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch - apiGroups: - apps resources: @@ -71298,11 +130026,34 @@ rules: - patch - update - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - cert-manager.io resources: - certificates - - clusterissuers - issuers verbs: - create @@ -71313,9 +130064,11 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - cluster.redpanda.com resources: - - ingresses + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -71325,34 +130078,65 @@ rules: - update - watch - apiGroups: - - policy + - cluster.redpanda.com resources: - - poddisruptionbudgets + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - clusterrolebindings - - clusterroles + - leases verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - monitoring.coreos.com resources: - - clusters - - consoles + - podmonitors + - servicemonitors verbs: - create - delete @@ -71362,121 +130146,190 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - networking.k8s.io resources: - - clusters/finalizers - - consoles/finalizers + - ingresses verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - redpanda.vectorized.io + - policy resources: - - clusters/status - - consoles/status + - poddisruptionbudgets verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - - scheduling.k8s.io + - rbac.authorization.k8s.io resources: - - priorityclasses + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: twuYH9-default -subjects: -- kind: ServiceAccount - name: 53ObZL18D - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9-election-role - namespace: default + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-additional-controllers-default rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events verbs: - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: - delete - get - list - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list - watch - apiGroups: - "" resources: - - events + - persistentvolumeclaims verbs: - - create + - delete + - get + - list - patch + - update - apiGroups: - - coordination.k8s.io + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" resources: - - leases + - persistentvolumes verbs: - - create - - delete - get - list - patch - - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9 - namespace: default -rules: - apiGroups: - "" resources: @@ -71490,69 +130343,58 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9-election-role - namespace: default + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: twuYH9-election-role + kind: ClusterRole + name: wE4Rkh-default subjects: - kind: ServiceAccount - name: 53ObZL18D + name: j7z namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9 - namespace: default + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: twuYH9 + kind: ClusterRole + name: wE4Rkh-additional-controllers-default subjects: - kind: ServiceAccount - name: 53ObZL18D + name: j7z namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9-metrics-service + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-metrics-service namespace: default spec: ports: @@ -71561,23 +130403,20 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: AD + app.kubernetes.io/name: XR3QTg --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: AD-webhook-service + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: XR3QTg-webhook-service namespace: default spec: ports: @@ -71585,360 +130424,177 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: AD + app.kubernetes.io/name: XR3QTg --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9 + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh namespace: default spec: - replicas: -1992894717 + replicas: -517018463 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: AD + app.kubernetes.io/name: XR3QTg strategy: rollingUpdate: - maxSurge: 1933093602 - maxUnavailable: 1334294633 - type: ʥ蓜蟙峑7íZ甖yŔ + maxSurge: 226746407 + maxUnavailable: 2117755140 + type: f)ȑ{半埭赂ʧþȿ埣`Ur籿ʮ template: metadata: annotations: - 5tv: p5PIYsI4 - T1F: Dpqk - nhTQfP5eg35h: U12zbsp - oi6rukR28V: zM - qAQ8mETGY: jQtYv - creationTimestamp: null + "0": SLOk + j: hlb labels: + "20": vUVH5VbCda + Ih: agP app.kubernetes.io/instance: operator - app.kubernetes.io/name: AD + app.kubernetes.io/name: XR3QTg + qXZU: AcsG9 spec: - activeDeadlineSeconds: -3290817518659555000 + activeDeadlineSeconds: -8190114788998253000 affinity: nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchFields: - - key: UYYTqOzzzI - operator: '`ɻ緧敗ÇŦȶ`霤łƅ騣=鳃' - - key: "y" - operator: '*Ʒ錒鏂wih-|ĶƘrLjɚ;讹' - values: - - m63 - - fx0vLWX4 - - yv9zg - - key: 3qvDet - operator: ɭ吃X紂IO甾旪策Ƿč3糝utĻ諀奪# - values: - - k5 - weight: -918868426 - - preference: - matchExpressions: - - key: OFGGO - operator: ē - matchFields: - - key: FAYg7jE5 - operator: 韊劬ĭ訡 - values: - - cbW7ib - - FARU - - iuvBLw7R - - key: vFVPXz7G - operator: 訮d贺ü櫼蒒鋱隮痄綜戏ɣ - values: - - QH - - VZ3k - - key: RWFgXeS - operator: 藋ǼK蛖ĜʚɠJ巻 - values: - - A9G - - xVWxb - weight: 666121791 - - preference: - matchExpressions: - - key: SgZ - operator: 7'睪²韛墈ɇ狼斡患Ž鵬焑ul羰~½ - values: - - Emtn - - PRqH2 - - wyxy2PK - - key: gwQvB - operator: Nj凳9ƖÊ~ĥG鹢烼t竂dzȏ - values: - - fEU1YvKZEh - - "" - - GTq - matchFields: - - key: MMt - operator: '*堂>ĆɦǔȩEȓ' - values: - - lt - - EEl1 - - key: Py - operator: 摲雥ʏáę鴤Š娑薸Ɋ金 - values: - - Csd0 - weight: 1371460940 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - - key: voL6CXATwtI - operator: ÁjȹƦʆ)ȹ戳Ǻ珫Ġ)Ç扸醘 - values: - - bk1 - - 67GUH - - matchExpressions: - - key: 8e2LCJeo0t - operator: ¼ȑ窤^Ɩ応鑿`țkƻƩķ-a<屙[ - - key: 1RA8y - operator: '''Ȋŵċf縂TX姽J' - values: - - F - - key: whAjv0OUp - operator: "" - values: - - fUZaSg - - matchExpressions: - - key: xL - operator: 6ùLJȔĩ?闟ĬR - values: - - 0A9fp2U7fz - - TyZ - - IDm - - key: oUa2PS5g - operator: /隼耬ň'ɏ5媊%ǘ慳7拙K - values: - - AX86H - - N55 - - d8uIn + - key: 6ha + operator: Yȟ摘凱 matchFields: - - key: DLq3Bm - operator: Ǯª + - key: RQ + operator: 9\ + - key: JXAsHh + operator: ȳuŏ喋|g糙ȇ~蝐Ɠ;Ƅf錜徝 values: - - X7e9V + - czT + - J8B8tZ7i podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: j5 - operator: '&,lj抭DžZc煵1阵' - values: - - 9g1YZ83fVF6kuj - - S5n00 - - key: ZaAm - operator: èB吲 - values: - - axmNtRA - - GCmrOl - - 6Ts96 - - key: cgNbRMJmStVj - operator: "" - matchLabelKeys: - - 6G7 - - fj5rP - mismatchLabelKeys: - - 2IFbSJj - - tUzR2 - - UNCXGXOAqmt - namespaceSelector: - matchExpressions: - - key: W5hVjFDJ - operator: Ȩë鞖ʼnr兯疻 + - key: v + operator: fÒT匡ʯ>锿Eŭ values: - - WSwg - - tyN7 - namespaces: - - Kk - topologyKey: lE5 - weight: -993382932 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: ug - operator: 圵ƲƄɌɝď苫'徕EdɒĪ=k噩#Ȟ + - 9uy + - Tt70j + - 0E595XLGK + - key: "47" + operator: 喬舲紇\淮]蟚唼CʘG values: - - iUJPfnJ - - KW4P2ir - - mQe - - key: dZx2UCUc - operator: K旵 - - key: QW9HVWg - operator: 誺ļbþ + - aKhAHda + - Kh7rBu0Z + - OZleqn + - key: 3ho + operator: 胙® values: - - "31" - - 77jF5CJ - - 7CsW1l3WR + - X7KW8 + - 6BXTZR matchLabels: - "": d6 - BOT: D56ZE8Q92F - Mh7: z + R: gVccvd + VTL: kl + kTKJb: N0A matchLabelKeys: - - gv0v2x73Q - - YLl - - Slb - mismatchLabelKeys: - - 2n + - 4N0J + - 4owXoJ + - tKfurJ namespaceSelector: - matchExpressions: - - key: O - operator: DɆ艀堂mDz"肑^ - - key: 8E9qZ - operator: 牶#氌X{Ű蓃v鯃ü - values: - - OYYyJnnvJ - - ObrL - - nZP matchLabels: - "": omgUlQG + 5Cfd: "2" + rZ: s namespaces: - - MgU6fKR - - 0a - topologyKey: kl3aT - weight: 43416081 + - 88UMb + topologyKey: JYQ + weight: 1175815223 requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: {} +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - labelSelector: + matchExpressions: + - key: i72cYW + operator: "" +<<<<<<< HEAD + - key: JvhLgGW + operator: 乘ƀ +======= + values: + - CNDl + matchLabels: + b: ywniR + fZCQuc: "" + matchLabelKeys: + - dLH4vPLaF + - eAagw + - LKg2bSuOow mismatchLabelKeys: - - SLC + - bYd94R6sOc5TCh namespaceSelector: matchExpressions: - - key: 0coNmjPfZo3 - operator: ¸襺F绚贝ɶğǙɼ鯫Y + - key: 8j + operator: tC values: - - x - - w8C + - ADDbIR + - VrsMptUCLo matchLabels: - V1dGsG3au: RN3 - hh: Te2oHZNcX + JUPoV5QQ: Cq1fd namespaces: - - qGUp3R - - R - topologyKey: 7PGdnmE7PGP - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - BuW: 1X - UqcMl: "" - matchLabelKeys: - - 3KTyGufoO - - RL4aD2 - mismatchLabelKeys: - - B1rQ1T9YI7 - - Eb4dMoubook - - U - namespaceSelector: - matchLabels: - EdBD: xlEvn - Nt6X66x: COy - dlK: BdP9Hd - namespaces: - - 7A - - MdT - topologyKey: v8r5UL5qMyyZ - weight: 1870120105 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: 1ONRpGEF - operator: 栂"徿<ÖĈ嶄哚Ƥ}LȽǰ橥Dvŀ - values: - - LUY1 - - qbGo - matchLabels: - S3hZQ: vhxVsbe4 - Vrc: 7l - matchLabelKeys: - - dFPJ - - OzQl8qCc7 - mismatchLabelKeys: - - j0B - namespaceSelector: - matchExpressions: - - key: eYC6PVMQ - operator: 吻C苉nȔC茅词韋籔S - values: - - J1 - - WS8 - matchLabels: - fLgtTmLuaC8: edezQrn0 - namespaces: - - Br5FAK - topologyKey: Ipq - weight: -1639783795 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: UgO - operator: Ī槱刢xē秸Ŧíz怵ɡhơ¯小庮鼣aű - matchLabels: - Y12: NyJQCP - ac1P8qw: cctX2 - ad: z + - W7CRA0 + topologyKey: w + - labelSelector: {} matchLabelKeys: - - N0WhZQ - - "" - - SG1Q + - ag6WAr + - 2O + - BHAruDPtuur mismatchLabelKeys: - - eLBeK + - B namespaceSelector: matchExpressions: - - key: J0In0 - operator: '"Ƌ=Þ喗Q蚜ȓ倣b' - values: - - e3IiM - - sFsS0DgxSJC - - fS4RTVzJWc - - key: cEYRHqpD - operator: K{囯ČŐ姣Ķ9澊 + - key: DYrWN9obW8LI + operator: "" values: - - abY4f7 + - r9SotW matchLabels: - ARNo5pl: F9 - O79pU: 99NAnXcfdeeql8 - topologyKey: wXX5kx - automountServiceAccountToken: true + 23W9e: b + g00UARgfnMRWm: k7r + ocLI2: "N" + topologyKey: MT + automountServiceAccountToken: false containers: - args: + - --configurator-base-image=95JHcsXy + - --configurator-tag=YVZ + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true + - --log-level=VKjDC + - --metrics-bind-address=:8443 - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=3BE - - --configurator-base-image=BkpCoE - - QpxE2 + - --webhook-enabled=true command: - /manager env: [] - image: BkpCoE:3BE + image: 95JHcsXy:YVZ imagePullPolicy: Always livenessProbe: - failureThreshold: 578 + failureThreshold: 467 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 963 - periodSeconds: 596 - successThreshold: 52 - terminationGracePeriodSeconds: 989 - timeoutSeconds: 311 + initialDelaySeconds: 816 + periodSeconds: 894 + successThreshold: 886 + terminationGracePeriodSeconds: 951 + timeoutSeconds: 6 name: manager ports: - containerPort: 9443 @@ -71948,22 +130604,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 854 + failureThreshold: 630 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 551 - periodSeconds: 16 - successThreshold: 688 - terminationGracePeriodSeconds: 467 - timeoutSeconds: 125 + initialDelaySeconds: 144 + periodSeconds: 586 + successThreshold: 222 + terminationGracePeriodSeconds: 462 + timeoutSeconds: 587 resources: limits: - cpu: "25" - memory: "957" + cpu: "173" + memory: "275" requests: - cpu: "126" - memory: "229" + cpu: "728" + memory: "99" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -71973,145 +130629,88 @@ spec: - mountPath: /tmp/k8s-webhook-server/serving-certs name: cert readOnly: true - dnsConfig: - nameservers: - - dSXcDS - options: - - name: A7HUjf - value: A - - name: Yz - value: OCnDhT - searches: - - 6oQ2shOAuEGd - dnsPolicy: 4BVɥ埙L钝粪Ǫ/ɜƷŮ,褔秽缺衲 + dnsConfig: {} + dnsPolicy: l餱JLJ昁W頶ʬʐ + enableServiceLinks: true ephemeralContainers: null hostAliases: + - ip: k1UeYd - hostnames: - - k - - "" - - xeRvB8I4r75s - ip: j3VP + - 4k7NU + - sCtlk + ip: iDhWGM88DjF hostNetwork: true - hostUsers: false - hostname: RLXxjp + hostPID: true + hostUsers: true + hostname: qKJoC imagePullSecrets: - - name: 0xvbPS - - name: umn5qIm + - name: fEd + - name: P25Tr + - name: 3WTQneS1 initContainers: [] - nodeName: l9dr6aUQfK5 + nodeName: I7Udtb nodeSelector: - Q3: EEpI5 - Vf4IqSxi: 6eTPe - atZIRXJC: zbcJj - preemptionPolicy: "" - priority: -1795967358 - priorityClassName: "0" + I: 6gT + V9KqBi: j + Vt7K: vUc + ahTBMcefip: TZiRwx + r8md2ea: bmwmO + preemptionPolicy: 昤鯦ƶrȕȞɏGê瞍爨垎錕,襩 + priority: -1377221016 + priorityClassName: OCaqp readinessGates: - - conditionType: vȭ?ɛī厐[ʣĩ家嫑Oy - - conditionType: áX箜&%l憯(梺胉Ƅ/)慜 - - conditionType: u颣ɍMg秗ċ廫 + - conditionType: ǩ砺 + - conditionType: '踯镌甴d冷-L2氙徯娵Ⱦ豷癔ʑ'' ' resourceClaims: - - name: m66F7 - runtimeClassName: 51NHMJjO - schedulerName: 2pW5ph7y + - name: t5Bb + resourceClaimName: lKP + resourceClaimTemplateName: M6NUet + restartPolicy: Ç詏**給蜷ĩ5g9 + runtimeClassName: ATaWDp + schedulerName: c9o schedulingGates: - - name: plp8 - - name: 2j - - name: awK + - name: h + - name: r securityContext: - fsGroup: 6319116615642430000 - fsGroupChangePolicy: Always - runAsGroup: 6616439806545871000 - runAsNonRoot: false - runAsUser: 3911306703841559000 + appArmorProfile: + localhostProfile: Tdbm + type: d鹒ǡƨʂ5Ȗ7 + fsGroup: -8609193620903199000 + fsGroupChangePolicy: OnRootMismatch + runAsGroup: 2662248836149058000 + runAsNonRoot: true + runAsUser: -3153534683270574000 + seLinuxChangePolicy: 薁v椼Ǧǔő袲ȃƑF supplementalGroups: - - 6114687739699545000 + - 6233234765835070000 + supplementalGroupsPolicy: jɖšʫȔ攫柮鸧@憤ȇ sysctls: - - name: lAMX4tXQg - value: ais7GLVXPucxy - - name: ODxk2RRh - value: Jpvd - - name: hG6 - value: uyRNu - serviceAccountName: YoPNk - setHostnameAsFQDN: true - subdomain: qjvHEfli - terminationGracePeriodSeconds: 2802694886159121400 + - name: T + value: Oyd7 + - name: PsXCQzFMvP + value: kPZ + serviceAccountName: wE + setHostnameAsFQDN: false + subdomain: uv3W + terminationGracePeriodSeconds: -2701216435113146400 tolerations: - - effect: 啝ǫ豥犂%3凅3D - key: yvPI - operator: ',蘘虣ǟxȋ<:骃Cɥ欶Qƒ埕¢Ĩ4;' - tolerationSeconds: 6979162648566219000 - value: dwDIwZb - - effect: ǭƦt瓇Ȗ:稵 - key: VsgL - operator: 惺}ĻƷĭw - tolerationSeconds: 5105815127740725000 - value: Ullldnm - - effect: 优ǞƎŎR龝tƆɿ)Eg梩 - key: Xt9jqiVd - operator: A徰ʗ>,njʏ赇瘑 - tolerationSeconds: -6790234676212962000 - value: smlpzi + - effect: 瞽穫ď¶ʚńB + key: GPPLyrE + operator: Ũ醍疓塇ʮç>ǐvx齫h蹋S頥.©ǰ + tolerationSeconds: 2952557062855212500 + value: 36F6 topologySpreadConstraints: - labelSelector: - matchExpressions: - - key: wDvbF - operator: 檻\ - values: - - 3Kb3 - - GWpq0EKR - matchLabels: - Fkt2W: yYCIcscZ - Nuw: hRhO - matchLabelKeys: - - qRjh - - sQL - - J6DNJXz64ng - maxSkew: 1919093625 - minDomains: -1291723558 - nodeAffinityPolicy: 凶sđD,臹l螲緇茁奿翙ƮÕƣ~ - nodeTaintsPolicy: 俑W鉢铖 *]ȭĄĺ~mȵƛ - topologyKey: ijMvPSo1 - whenUnsatisfiable: ^ɔ筰 - - labelSelector: - matchExpressions: - - key: MmUJZ2 - operator: 昮Rn战鲸;忞榑g0技¢ā - values: - - BNT - - key: LYB - operator: Ɇ韆Ɍ卞U0T藑ö隬ž,& - matchLabels: - "2": aKglOmV - 5GG7: xa - L: R3C - matchLabelKeys: - - H2gkgEwExA - - LQwNlux - maxSkew: -1312523589 - minDomains: 584241845 - nodeAffinityPolicy: +KI|gȍ&BƗWHɮ偷ɩ煡 - nodeTaintsPolicy: ¤G,戁豢eDƩʀBǾ碙濥j - topologyKey: poNRifM - whenUnsatisfiable: H,/MıÃ樛嚗 - - labelSelector: - matchExpressions: - - key: 02e6E - operator: ²ËNǾ - - key: Bqr3G9L - operator: '!' - values: - - OHn5S - - "" matchLabels: - xYEV9SS: s0VtwRK - maxSkew: -959970438 - minDomains: 1893050440 - nodeAffinityPolicy: j妼魚ȁ笰Ǜ¾j - nodeTaintsPolicy: lj达v嘄{ĨȖȟǹʦ#坖Ú - topologyKey: vZ - whenUnsatisfiable: mUƚ;ʗƷ嶑铻 + "": KTGlW3cdpwF + bcesHU: t63in + mK: Vm1u + maxSkew: 923990929 + minDomains: -1438624182 + nodeAffinityPolicy: 鴆示 + nodeTaintsPolicy: h龘U鐥綾ȬHP誀Ĭ + topologyKey: J + whenUnsatisfiable: ŷ鐕棸Ť/Ȗļď摌ɰȌœ斤韺 volumes: - name: kube-api-access projected: @@ -72134,50 +130733,46 @@ spec: - name: cert secret: defaultMode: 420 - secretName: PrNLNBOj4nG + secretName: 4NQjG + - name: O1I + - name: lpJbh --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-webhook-cert namespace: default spec: dnsNames: - - AD-webhook-service.default.svc - - AD-webhook-service.default.svc.nO + - XR3QTg-webhook-service.default.svc + - XR3QTg-webhook-service.default.svc.tNN0XS issuerRef: kind: Issuer - name: twuYH9-selfsigned-issuer + name: wE4Rkh-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: PrNLNBOj4nG + secretName: 4NQjG --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: - wqUHiDS: "" - creationTimestamp: null + annotations: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: twuYH9-selfsigned-issuer + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -72187,9 +130782,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: twuYH9-mutating-webhook-configuration + cert-manager.io/inject-ca-from: default/wE4Rkh-webhook-cert + name: wE4Rkh-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -72197,7 +130791,7 @@ webhooks: - v1beta1 clientConfig: service: - name: AD-webhook-service + name: XR3QTg-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -72215,107 +130809,779 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-metrics-monitor + namespace: default +spec: + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + path: /metrics + port: https + scheme: https + tlsConfig: + ca: {} + cert: {} + insecureSkipVerify: true + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 +--- +# Source: operator/templates/entry-point.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/wE4Rkh-webhook-cert + name: wE4Rkh-validating-webhook-configuration + namespace: default +webhooks: +- admissionReviewVersions: + - v1 + - v1beta1 + clientConfig: + service: + name: XR3QTg-webhook-service + namespace: default + path: /validate-redpanda-vectorized-io-v1alpha1-cluster + failurePolicy: Fail + name: mcluster.kb.io + rules: + - apiGroups: + - redpanda.vectorized.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - clusters + sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + AA: Rcao5 + Xdxn: 0G1 + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: j7z-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + AA: Rcao5 + Xdxn: 0G1 + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: j7z-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: j7z-crd-job-default +rules: +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - create + - get + - patch + - update +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: j7z-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: j7z-crd-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: j7z-crd-job-default +subjects: +- kind: ServiceAccount + name: j7z-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: twuYH9-validating-webhook-configuration + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: j7z-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: j7z-migration-job-default +subjects: +- kind: ServiceAccount + name: j7z-migration-job namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: AD-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: annotations: - 5w3BM: DJFeE - HPEA: "" helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + helm.sh/hook-weight: "-5" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: AD - app.kubernetes.io/version: v25.1.4 - dRuotY: sUV - helm.sh/chart: operator-25.1.4 - name: 53ObZL18D-crd-job + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-crds namespace: default --- testdata/case-084.yaml.golden -- +spec: + template: + metadata: + annotations: + "0": SLOk + labels: + "20": vUVH5VbCda + app.kubernetes.io/instance: operator + app.kubernetes.io/name: XR3QTg + qXZU: AcsG9 + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + command: + - /redpanda-operator + image: 95JHcsXy:YVZ + imagePullPolicy: Always + name: crd-installation + resources: + limits: + cpu: "173" + memory: "275" + requests: + cpu: "728" + memory: "99" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: ZzAKsRk + - name: Y1E8sfCS6 + - name: sQo + nodeSelector: + I: 6gT + V9KqBi: j + ahTBMcefip: TZiRwx + restartPolicy: OnFailure + serviceAccountName: j7z-crd-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ¿Ă裦ijkȹ侬v鷭"ȇ娫Ɯeg/嘅咪 + key: R + operator: '''Ɵ喧ƛȟ袜ȵGȱjN' + tolerationSeconds: 4914845320534137000 + value: t4eJT5Fd + - effect: 剄辷V>嶄ɓ積lÂ{ + key: 3Hf + operator: 閭ċ欺馞qc玗坾ɷ虲6omʀɮʐ鵲[ + tolerationSeconds: 6160434147296898000 + value: 1WBYVdUiE1M + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: annotations: - "8": tf7ML2YS2 - Nr: WJKMVr9D - Vl: "" - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: g + app.kubernetes.io/name: XR3QTg + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: wE4Rkh-migration namespace: default +spec: + template: + metadata: + annotations: + "0": SLOk + labels: + "20": vUVH5VbCda + app.kubernetes.io/instance: operator + app.kubernetes.io/name: XR3QTg + qXZU: AcsG9 + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: 95JHcsXy:YVZ + imagePullPolicy: Always + name: migration + resources: + limits: + cpu: "173" + memory: "275" + requests: + cpu: "728" + memory: "99" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: ZzAKsRk + - name: Y1E8sfCS6 + - name: sQo + nodeSelector: + I: 6gT + V9KqBi: j + ahTBMcefip: TZiRwx + restartPolicy: OnFailure + serviceAccountName: j7z-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: ¿Ă裦ijkȹ侬v鷭"ȇ娫Ɯeg/嘅咪 + key: R + operator: '''Ɵ喧ƛȟ袜ȵGȱjN' + tolerationSeconds: 4914845320534137000 + value: t4eJT5Fd + - effect: 剄辷V>嶄ɓ積lÂ{ + key: 3Hf + operator: 閭ċ欺馞qc玗坾ɷ虲6omʀɮʐ鵲[ + tolerationSeconds: 6160434147296898000 + value: 1WBYVdUiE1M + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-042.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 7vs5b + apiVersion: NJhd9qZ1 health: - healthProbeBindAddress: "" - kind: NQSI2 + healthProbeBindAddress: NcWa4Bk + kind: 19e0P leaderElection: - leaderElect: true - resourceName: rzH + leaderElect: false + resourceName: uEWAzoGMCGr metrics: - bindAddress: JjOkiuAQDPE6 + bindAddress: DDGPQVLe webhook: - port: 482 + port: 397 kind: ConfigMap metadata: annotations: null - creationTimestamp: null labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-config + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -72323,15 +131589,13 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: null - creationTimestamp: null labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-metrics-reader + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -72343,43 +131607,97 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: {} - creationTimestamp: null labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-default + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumes + - horizontalpodautoscalers verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -72396,11 +131714,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -72409,15 +131732,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -72426,8 +131751,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -72437,11 +131786,34 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch - apiGroups: - apps resources: @@ -72455,11 +131827,34 @@ rules: - patch - update - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - cert-manager.io resources: - certificates - - clusterissuers - issuers verbs: - create @@ -72469,6 +131864,88 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - networking.k8s.io resources: @@ -72498,97 +131975,122 @@ rules: resources: - clusterrolebindings - clusterroles + - rolebindings + - roles verbs: - create + - delete - get - list - patch - update - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-additional-controllers-default +rules: - apiGroups: - - redpanda.vectorized.io + - "" resources: - - clusters - - consoles + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events verbs: - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: - delete - get - list - - patch - - update - watch - apiGroups: - - redpanda.vectorized.io + - "" resources: - - clusters/finalizers - - consoles/finalizers + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" resources: - - clusters/status - - consoles/status + - persistentvolumeclaims verbs: + - delete - get + - list - patch - update - apiGroups: - - scheduling.k8s.io + - "" resources: - - priorityclasses + - configmaps + - pods + - secrets verbs: - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - Jacfyrff: CPx2 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: Sb2hWn-default -subjects: -- kind: ServiceAccount - name: g - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - Jacfyrff: CPx2 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims verbs: - - create - delete - get - list @@ -72598,154 +132100,88 @@ rules: - apiGroups: - "" resources: - - events + - persistentvolumes verbs: - - create + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - apps resources: - - leases + - statefulsets/status verbs: - - create - - delete - - get - - list - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - Jacfyrff: CPx2 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn - namespace: default -rules: - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes verbs: - - delete - get - list + - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - Jacfyrff: CPx2 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - Jacfyrff: CPx2 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: Sb2hWn-election-role -subjects: -- kind: ServiceAccount - name: g - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn - namespace: default + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: Sb2hWn + kind: ClusterRole + name: Tdd-default subjects: - kind: ServiceAccount - name: g + name: X namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-rpk-bundle - namespace: default + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: Sb2hWn-rpk-bundle + kind: ClusterRole + name: Tdd-additional-controllers-default subjects: - kind: ServiceAccount - name: g + name: X namespace: default --- # Source: operator/templates/entry-point.yaml @@ -72753,15 +132189,13 @@ apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-metrics-service + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-metrics-service namespace: default spec: ports: @@ -72770,22 +132204,20 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: MOjCBp + app.kubernetes.io/name: KG9Ly --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: MOjCBp-webhook-service + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: KG9Ly-webhook-service namespace: default spec: ports: @@ -72793,393 +132225,406 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: MOjCBp + app.kubernetes.io/name: KG9Ly --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: null - creationTimestamp: null labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd namespace: default spec: - replicas: -373229836 + replicas: -1637612056 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: MOjCBp + app.kubernetes.io/name: KG9Ly strategy: rollingUpdate: - maxSurge: 1994924858 - maxUnavailable: 1244466687 - type: )A + maxSurge: 1203069215 + maxUnavailable: 1695961741 + type: ʔ陞šʏ灤ƴ頇 template: metadata: annotations: - 0DzQx: 2ZX - 5uUlacM6mq: rz - iUEpv: TEfbNK - creationTimestamp: null + VI: oKR + a9: lb98 + gKPlKwb: p labels: - "": t + Tdy4: Aytxfqfd6 app.kubernetes.io/instance: operator - app.kubernetes.io/name: MOjCBp + app.kubernetes.io/name: KG9Ly + hUgMU6Ia: h3TRL1D + iZx: "" spec: - activeDeadlineSeconds: -2246099825379296300 + activeDeadlineSeconds: -7164698214916845000 affinity: nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: Ka - operator: ?鷌翧Ȯ=Lȑ`ǻɤĪ,炂幺~绶é0Ø - values: - - ZfKxG - - pXi - - key: a57PWzZ6 - operator: 孧ɝƎ3"/tz襶睃Ō砯OųFJ - values: - - fOLt0iP - - pbn - - KcEMns - matchFields: - - key: eX - operator: ʫ愿+ɹ - values: - - uAkePehZZyLW9o - - 3z8 - - 2WMM - - key: F54J - operator: 赕扯SŃ»Ʈ肏膏闊Ȕ - values: - - axHp2U - - 0vCVcVm - - bKRAH5YpB - - key: RU - operator: "" - values: - - QF - weight: -545986755 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - - key: E4 - operator: Ǟǃ諿枤&?ƽȚɿq劳疛%QvD - values: - - IlIOp - - vRn1nYUz6 - - key: "9" - operator: M醥Z<緝ƨE - values: - - 5Nm5 + - key: khenaoMO + operator: H久迮鬜ɐa*闎AŊɬÑɗ0Wǘ寱+ matchFields: - - key: t8k2 - operator: 慅¡煱ƌɏ磫MobƱ;悽曂#) - values: - - APV - - 5V - - key: "y" - operator: Kmká_8Fy毷鮹Ð慟Ǯ娸# + - key: jMoz8X + operator: Ȉɱw values: - - aQDHX - - matchExpressions: - - key: uFeU - operator: 鎢盄帼r &誢p. + - sfA0 + - key: F + operator: '*姭' values: - - LysfP - - ZcuO - - Vbi - - key: ALirU - operator: 0袦0鐆"Eʚ*ʜčÛU1榺ZTg - matchFields: - - key: dDqy - operator: Ė鯛ďǐč2Ô + - SW5Ceja8dm + - hTT2x9b8AF + - key: Mgm + operator: 2ȹů頓ʮ鑲钾ʀȣ values: - - pw5cbzP + - jPJW + - ti + - mS6fn - matchExpressions: - - key: S5unJb7B - operator: 苳ʥćWŀǐěƿN滙誫 - values: - - Hv - - key: sV2mp - operator: 髂:sǀ炉dž]蟽ȧO兆 + - key: x78VVaIY + operator: ŪƇ values: - - ZTJFrJ8Cqy8S - - eUC8TkNQN - - key: pyRT - operator: 3)饩MAɄ容ȏĔ¢沔Ɠ,穑茲孟%Hō + - eTErJR + - Zf + - key: Us + operator: ɕ吉q)(慪閬枊qR¢幦桧 + - key: Flewy + operator: 叀6努节YƘAƖ values: - - "" - - h6eI - - Ikf5cvEh9NZFb + - pnFlR matchFields: - - key: otsM0 - operator: Z`f%皰頶 + - key: uWlrV + operator: 幬輥n-诿5Ȟ.嶴Ɍ穊 values: - - ytwAnhQ + - kF7A2 + - 33XRCOpa + - hULUXwd3s + - key: toXdk + operator: ',' + values: + - Bw1 podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: i2Yd - operator: 蟦Vɱ蔅d丂DÉ秤Ń岑囌J翮ȱʊ - matchLabels: - jHn: lid + - key: wlbXjsTA + operator: ə轔ý综rŕąko=ɴ唯:þ + values: + - ZQUdijy + - "" + - 7a0q4c matchLabelKeys: - - kD1kvi - - 9KH9ui1LbyOE - - D + - 6wS + - "" mismatchLabelKeys: - - WR + - 1aklH6M namespaceSelector: + matchExpressions: + - key: X41EpOu + operator: "" + values: + - SoDUmu1 + - p1 + - "" + - key: T + operator: ō礙泙Gɔ?廭nN尿3葁彁搏¼梂õǑ + values: + - 5RD9 + - "4" + - 0J9xlV matchLabels: - kbWYtJ: z4u4F + X1rpZOj: 7f namespaces: - - 5oj - - iMSG8N - topologyKey: sPj - weight: -1454982636 + - eDhClA + - zveqQj + topologyKey: AaKXTC + weight: -1346013250 - podAffinityTerm: labelSelector: matchExpressions: - - key: rcXNsa - operator: ɐLjĮjƫ4;C羚ƍ|呾ǮǕ÷濧Ɍ¶ - values: - - K - - jma - - key: MM1 - operator: ɀìɦȼ彆+扭 - values: - - 21xDgiB2h - - key: iP7lsf5 - operator: 3嚲誴Ɏ.ɖǶĜ@典氐ǂ + - key: Rx5cqjL + operator: 裟秚菉 matchLabels: - 6u: "N" - 82eQ: Ij - matchLabelKeys: - - lMPCXm6 - - rZh7Y - - ynCOrnK60 + 7Byc9h: a + 17M: X7VuCP mismatchLabelKeys: - - Zx73 - - nh2TGmsHP5 - - un + - z + - nC namespaceSelector: matchExpressions: - - key: hF7F - operator: ǝƊI¿ƍ熍ƌ曺圥皼Ɋ| - values: - - Tv - - XEt1 - - j29 - - key: VwkX4c - operator: ==GȢĿɍÓŴÃ0NJ旋轠ɂʌʥ + - key: 5y + operator: D|酩ǫ Ǯ枀 values: - - ro - - lsrjonA - - key: q - operator: ĨɦƖ釅蹚ñɘ鸶7Ŧ蔅ǫZɐ骅Di$墘 + - "" + - key: a7pzQA + operator: ȫɿŒ6h + topologyKey: eneA + weight: 159414698 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: yG3 + operator: Nǐ> + - key: jq + operator: ǃ(壜;5 values: - - I02X6z0hR - - wX - - PpU + - DqBe + - key: uyrA + operator: Ȓ<吀 matchLabels: - 5D8: G01r5VUDT + 4ON: zY + JXOAuybH: jDhZc + K7RZ4: wV + matchLabelKeys: + - naDUI + - mzDnQKQ + - ZX38 + mismatchLabelKeys: + - ftwy5n + - DgrI + namespaceSelector: + matchLabels: + Z: JyC + gGpa3: NIpB + maeFllh5X: WqPZwPA namespaces: - - rMgg - - aSTysFdx - - iBK - topologyKey: "" - weight: -1129889139 + - VQrMKwf + - VV36JsCjpI + - KPspow + topologyKey: t + weight: 984440917 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: - matchExpressions: - - key: "" - operator: 柴IĢ觐ƒ埔匱®ƦF5 - - key: QV7m - operator: 卌桢X|柘糁TÚ7ż - values: - - IxExiu - - xoU5vkb - matchLabelKeys: - - vr - - fKl3 - - Aww - mismatchLabelKeys: - - 2gZ - - OF - - UzNZa2GG - namespaceSelector: {} - namespaces: - - rRKS - topologyKey: wIaw - - labelSelector: - matchExpressions: - - key: Tdc - operator: ųem魲箬徤ē身氶縝膢C蛓:篹ďu^ - values: - - rzNT - - Kn - - Qx - - key: FX - operator: 顆Ōȋ縺E髳9K翜ƻȏƼKȂp4ƣ龱 matchLabels: - 2m: w - mi6YiCvW: 5vL - qqgwKJgw: KFkRS - matchLabelKeys: - - zDwh + "45": E + dOvjzjG: 2GN mismatchLabelKeys: - - 9Y1 - - "85" + - D8 + - g0 + - 0u namespaceSelector: - matchExpressions: - - key: uKoUAJegj - operator: ȑ{戃ǹƑfT间<ʨ冊iɉL襾 - values: - - pn0 - - ODho - - Mw matchLabels: - gAYxNPwv: "" + 8yS: "0" + HzGK: TNMD namespaces: - - xoqtp - - gqFN0F6 - - hfABXv - topologyKey: eZigjcr + - x3KAJE + - eG + - Ky3yAm + topologyKey: x3vJSCzsL podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: sFZf1 - operator: 頸咾%;ɦɤʉɡ哦mZ, + - key: zs5sh4FJ + operator: Ž values: - - WoXBm2 - - key: cO - operator: áʀŁf薎&y:疛Eɻp筸ħ + - wKrecc5 + - key: "8" + operator: 碞ƕxŋ滁8I骃CƐ耜Ɗ抉^W塅{Ɩ幖 + values: + - "" + - Yb4KV3L + - iOYG mismatchLabelKeys: - - 7evLyF6 + - d namespaceSelector: matchExpressions: - - key: D4XJFPTz - operator: ğ - - key: yD1a - operator: wǺ<Ɖ諥箧ƕ9ș蛡 - - key: aVeWs6aiG - operator: 犙蝥6k悸柦蕥í瞣ȑHw域徑Y + - key: 8zN9rd + operator: "" values: - - 9WfvQS - - hZBaWOL + - "" + - qzn9sy + - 46phPJyq + matchLabels: + l: PtU16mvW namespaces: - - Rz3tiFM - - u2DUO2pp - - G - topologyKey: uM5 - weight: -1873790375 + - sNRW8P + - hsUY + topologyKey: syCH + weight: 1145458557 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: yQ8 + operator: 緶ǼLjU"蔠u栀傳 + values: + - 3eSH + - 1gBAsF4Y + - d + - key: rxqVp8PF + operator: 汙喀罟箨酫Z缭 + values: + - hv + - cMB + - Tyu4t + - key: Qkbyc + operator: û箵蒗銛睄°L[侟4酚擰恑ȃ2e + values: + - 8YAUbgT + - d + matchLabels: + ZJQ1k86kH: yYARuw + matchLabelKeys: + - OIelVTa + - Mx6OOg + - dWRWMm + namespaceSelector: + matchExpressions: + - key: 8QQv + operator: 逇锐路l + - key: mFTN + operator: YV濏ïĊO# + - key: 9DBvkViZSn + operator: "" + values: + - 3JOjRq0 + topologyKey: An4Nc + weight: -605685632 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: SVDAWMeP + operator: 埤恪ì+x嬞u歠滦i*ɻ + - key: exP3wSZl + operator: 鴹č噊錥2)ʡ2Û + matchLabels: + 3XpMxRP: LbPKeUB + FNz8jN: "" + matchLabelKeys: + - 7Epu6 + mismatchLabelKeys: + - xu4etjY + - qwLqZOPS + - OsD + namespaceSelector: + matchExpressions: + - key: NZn5PRy + operator: 蟈CLƓsiɂ僐猷n垁xŧ嘴稼Ɩȴ + values: + - 1J6 + - wKDq + - aFMFC4 + - key: 1Yio + operator: 4滱鍊(ȖoʢâH顤Ȝįʂ~\ + values: + - 2H34O + - key: ti6g + operator: ewǛx収<垹癦8忐ƦÃw孖县K迹ƕ + matchLabels: + nkMy: XytqME + uFB: UgVkevG + namespaces: + - LMwW + topologyKey: gJY + weight: 302849740 requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - CFodA: epELn - matchLabelKeys: - - hT - mismatchLabelKeys: - - OKZEsI - - gseMbYy - - hNiQ2C - namespaceSelector: {} - namespaces: - - PVR1 - - RhA - topologyKey: LA3T - labelSelector: matchExpressions: - - key: c3yG2bnW - operator: 滛57ħ瞘ǒ#JLJ骶~颒Ļ - - key: uX - operator: ǝQȅd - - key: 6iK - operator: GÉs + - key: GhIub2 + operator: Oʏ毳2C values: - - DfRNQ0 - - D3G + - R + - gDO + - vuyvsZKJk + - key: "" + operator: 蔌蝈Ƃ牔cz?ņ梐}Ɨʘ#^埒鈸ø + values: + - tp + - s0I0ifUl + - 13kMzdMF + - key: UE + operator: ƫ钕[竢ŗ-Ț + values: + - 847cuoU + - "" + - Be4OI matchLabels: - o: 74T + 3MbVq: dPo + IoQOv15: gy9hCe6 + MMdyK96z: q0URyie matchLabelKeys: - - W3FWL4 + - 2THELW3 + - ZUkR + mismatchLabelKeys: + - bCACMo2a namespaceSelector: - matchExpressions: - - key: JiqSMpi - operator: '`V区Å[銘氚Dz讜Óļ睻}&ɿn颢唘' - values: - - OGIx - - JGHg3JPc - - key: QiOUB - operator: 6猧wDz哊藯掭酌瞡彸ʯ種ŎNJh] - values: - - UaUBtE - - BU3xJ - - sQ1 matchLabels: - qyrPifdU: 3NJe - topologyKey: kl5 + JwP: C4 + lsMRAYHnrb8PU: 76tP + namespaces: + - I4JUbf6D + - elMu1q + topologyKey: Pbbh8pF - labelSelector: matchExpressions: - - key: FWHaEt - operator: 耛鈞笵憦Ľ + - key: sL + operator: 烬壃å + values: + - JVTkbJ + matchLabels: + r: Mo +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + matchLabelKeys: + - GX6z0C6F + - "" + - K83EDUe6 + mismatchLabelKeys: + - NTPXCIb + - pUtiiY6LdsE + namespaceSelector: + matchExpressions: + - key: mgkvAfh + operator: Dǻ1=VȞ畵ǝ*ɓnj|~²墐[柈 values: - - 10FWIeIUIV - - 9fotw - - Kxbpx - - key: Zvhd - operator: i(艱 + - 62G0D2N + - key: xXsil + operator: ;ʏ鎁塱鞩Ƣ輑俸藋酛fY敂需孛h· values: - - ech - - cRpvMX - - "5" + - yoSApSTbGc2 + - yIuVFn + - key: waJJLLnotI + operator: ï覸gɸO遃婍ŤF= matchLabels: - crAc: ZHLB3 - mismatchLabelKeys: - - "48" - namespaceSelector: {} - topologyKey: ayQ - automountServiceAccountToken: false + mL: vHkR4b + namespaces: + - O + - UZ + - "" + topologyKey: kKU + automountServiceAccountToken: true containers: - args: - --health-probe-bind-address=:8081 - --metrics-bind-address=:8443 - --leader-elect - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=y8Skx9 - - --configurator-base-image=n74Ca - - bv4LbFjFG - - X5vvak7u +<<<<<<< HEAD +======= command: - /manager env: [] - image: n74Ca:y8Skx9 - imagePullPolicy: IfNotPresent + image: gkRs29P:kgK + imagePullPolicy: Always livenessProbe: - failureThreshold: 64 + failureThreshold: 706 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 547 - periodSeconds: 952 - successThreshold: 102 - terminationGracePeriodSeconds: 374 - timeoutSeconds: 533 + initialDelaySeconds: 703 + periodSeconds: 141 + successThreshold: 560 + terminationGracePeriodSeconds: 197 + timeoutSeconds: 449 name: manager ports: - containerPort: 9443 @@ -73189,22 +132634,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 935 + failureThreshold: 406 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 566 - periodSeconds: 45 - successThreshold: 979 - terminationGracePeriodSeconds: 927 - timeoutSeconds: 307 + initialDelaySeconds: 869 + periodSeconds: 832 + successThreshold: 330 + terminationGracePeriodSeconds: 261 + timeoutSeconds: 43 resources: limits: - cpu: "640" - memory: "580" + cpu: "955" + memory: "603" requests: - cpu: "919" - memory: "170" + cpu: "17" + memory: "744" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -73215,60 +132660,71 @@ spec: name: cert readOnly: true dnsConfig: - searches: - - H1Ls9 - - SR69A - - 8zal - dnsPolicy: ǧÏ6鞤ǃ$'[ëĀo壗WNj醝篙ʠ栏DŽ + nameservers: + - "" + - QEp + - 9hYqlTy4 + options: + - name: ByoSestnl0Hv + value: 7umEl422Z + dnsPolicy: ɡI焉/?誂产Ĺ戱ʁʝ + sysctls: + - name: i7Gesk + value: llzypHTGu + - name: M5ekH + value: yF + - name: ufJU2kio2 + value: kxcMc + serviceAccountName: g3qg2Is + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: kE0gf7 + terminationGracePeriodSeconds: 2898074571831782000 + tolerations: [] volumes: - name: kube-api-access projected: @@ -73291,51 +132747,47 @@ spec: - name: cert secret: defaultMode: 420 - secretName: MwR2Pwv - - name: 9vyXal - - name: Vs5abT - - name: t10I + secretName: ix2 + - name: 0Axv + - name: V1f8 + - name: lE --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: annotations: null - creationTimestamp: null labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-webhook-cert namespace: default spec: dnsNames: - - MOjCBp-webhook-service.default.svc - - MOjCBp-webhook-service.default.svc.Xcx1 + - KG9Ly-webhook-service.default.svc + - KG9Ly-webhook-service.default.svc.fCfUyg issuerRef: kind: Issuer - name: Sb2hWn-selfsigned-issuer + name: Tdd-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: MwR2Pwv + secretName: ix2 --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: annotations: null - creationTimestamp: null labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-selfsigned-issuer + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -73345,9 +132797,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: Sb2hWn-mutating-webhook-configuration + cert-manager.io/inject-ca-from: default/Tdd-webhook-cert + name: Tdd-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -73355,7 +132806,7 @@ webhooks: - v1beta1 clientConfig: service: - name: MOjCBp-webhook-service + name: KG9Ly-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -73373,50 +132824,12 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: null - creationTimestamp: null - labels: - Jacfyrff: CPx2 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Sb2hWn-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - Jacfyrff: CPx2 - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 ---- -# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: Sb2hWn-validating-webhook-configuration + cert-manager.io/inject-ca-from: default/Tdd-webhook-cert + name: Tdd-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -73424,7 +132837,7 @@ webhooks: - v1beta1 clientConfig: service: - name: MOjCBp-webhook-service + name: KG9Ly-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -73447,51 +132860,38 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - "8": tf7ML2YS2 - Nr: WJKMVr9D - Vl: "" + 7niOw: QeJP helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null + qFV: "57" labels: - Jacfyrff: CPx2 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: g-crd-job + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: X-crd-job namespace: default --- testdata/case-085.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: KDM - health: - healthProbeBindAddress: wycgD5c - kind: IyB - leaderElection: - leaderElect: false - resourceName: "" - metrics: - bindAddress: KF - webhook: - port: 303 -kind: ConfigMap +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - pZTJ: OgaeCRx - creationTimestamp: null + 7niOw: QeJP + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + qFV: "57" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B-config + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: X-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml @@ -73499,63 +132899,126 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - pZTJ: OgaeCRx - creationTimestamp: null + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B-metrics-reader + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: X-crd-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions verbs: + - create - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - pZTJ: OgaeCRx - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B-default + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: X-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumes + - horizontalpodautoscalers verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -73572,11 +133035,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -73585,15 +133053,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -73602,8 +133072,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create - delete - get - list @@ -73613,11 +133107,34 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch - apiGroups: - apps resources: @@ -73632,11 +133149,9 @@ rules: - update - watch - apiGroups: - - cert-manager.io + - autoscaling resources: - - certificates - - clusterissuers - - issuers + - horizontalpodautoscalers verbs: - create - delete @@ -73646,9 +133161,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - batch resources: - - ingresses + - jobs verbs: - create - delete @@ -73658,9 +133173,10 @@ rules: - update - watch - apiGroups: - - policy + - cert-manager.io resources: - - poddisruptionbudgets + - certificates + - issuers verbs: - create - delete @@ -73670,99 +133186,91 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cluster.redpanda.com resources: - - clusterrolebindings - - clusterroles + - consoles + - nodepools + - redpandas verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - - consoles + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: + - get + - list - patch - update + - watch - apiGroups: - - redpanda.vectorized.io + - coordination.k8s.io resources: - - clusters/status - - consoles/status + - leases verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - - scheduling.k8s.io + - monitoring.coreos.com resources: - - priorityclasses + - podmonitors + - servicemonitors verbs: + - create + - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - pZTJ: OgaeCRx - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: operator-B-default -subjects: -- kind: ServiceAccount - name: je1S - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - pZTJ: OgaeCRx - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B-election-role - namespace: default -rules: - apiGroups: - - "" + - networking.k8s.io resources: - - configmaps + - ingresses verbs: - create - delete @@ -73772,16 +133280,24 @@ rules: - update - watch - apiGroups: - - "" + - policy resources: - - events + - poddisruptionbudgets verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - rbac.authorization.k8s.io resources: - - leases + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: - create - delete @@ -73793,432 +133309,567 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRoleBinding metadata: annotations: - pZTJ: OgaeCRx - creationTimestamp: null + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: X-crd-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: X-crd-job-default +subjects: +- kind: ServiceAccount + name: X-crd-job namespace: default -rules: -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - pZTJ: OgaeCRx - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B-election-role - namespace: default + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: X-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-B-election-role + kind: ClusterRole + name: X-migration-job-default subjects: - kind: ServiceAccount - name: je1S + name: X-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: batch/v1 +kind: Job metadata: annotations: - pZTJ: OgaeCRx - creationTimestamp: null + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-B -subjects: -- kind: ServiceAccount - name: je1S + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-crds namespace: default +spec: + template: + metadata: + annotations: + VI: oKR + a9: lb98 + gKPlKwb: p + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: KG9Ly + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + command: + - /redpanda-operator + image: gkRs29P:kgK + imagePullPolicy: Always + name: crd-installation + resources: + limits: + cpu: "955" + memory: "603" + requests: + cpu: "17" + memory: "744" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: uFf7 + - name: zu7jQ96s + nodeSelector: + Ce7sl0: Lp9Kl8D + ICiz5kq: gj8EajZ + lyUwmWZnZx: Rt + restartPolicy: OnFailure + serviceAccountName: X-crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: batch/v1 +kind: Job metadata: annotations: - pZTJ: OgaeCRx - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B-metrics-service + app.kubernetes.io/name: KG9Ly + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Tdd-migration namespace: default spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: + template: + metadata: + annotations: + VI: oKR + a9: lb98 + gKPlKwb: p + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: KG9Ly + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: gkRs29P:kgK + imagePullPolicy: Always + name: migration + resources: + limits: + cpu: "955" + memory: "603" + requests: + cpu: "17" + memory: "744" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: uFf7 + - name: zu7jQ96s + nodeSelector: + Ce7sl0: Lp9Kl8D + ICiz5kq: gj8EajZ + lyUwmWZnZx: Rt + restartPolicy: OnFailure + serviceAccountName: X-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-043.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: B5fm8jL + health: + healthProbeBindAddress: ZDF + kind: kfG + leaderElection: + leaderElect: false + resourceName: fe2T7 + metrics: + bindAddress: e + webhook: + port: 322 +kind: ConfigMap +metadata: + annotations: null + labels: + Fl1L: sljHz + MdCMaKfR: evaO app.kubernetes.io/instance: operator - app.kubernetes.io/name: B + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + lCBGq2VO: K4w + name: DkEzor-config + namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - pZTJ: OgaeCRx - creationTimestamp: null + annotations: null labels: + Fl1L: sljHz + MdCMaKfR: evaO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: B-webhook-service + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + lCBGq2VO: K4w + name: DkEzor-metrics-service namespace: default spec: ports: - - port: 443 - targetPort: 9443 + - name: https + port: 8443 + targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: B + app.kubernetes.io/name: operator --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - pZTJ: OgaeCRx - creationTimestamp: null + annotations: null labels: + Fl1L: sljHz + MdCMaKfR: evaO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + lCBGq2VO: K4w + name: DkEzor namespace: default spec: - replicas: -991454453 + replicas: -1638446083 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: B + app.kubernetes.io/name: operator strategy: rollingUpdate: - maxSurge: 1937774995 - maxUnavailable: 1190668901 - type: (WƯ!};悝坉 + maxSurge: 2134269754 + maxUnavailable: 1522912509 + type: ɼ昰Ƨ恢 template: metadata: annotations: - "": lQQOuemOde - 7bziLy6: 1adb1B - hcirf2TLX: jDyR - creationTimestamp: null + 3XO7xTK5: AlJOWY + CAwZ: Sh50C + MhC2q1: v7RB + NUgoPiDvEp: 2L + WU8: xth6ewB labels: - 6SnAV: uaxH5W906K - QMcVns7sS: kRzb + IJOhH: 2O + Jj: oqIV6 + V3CjytF: rbY7hUNmPqDhroR + VT: "8" app.kubernetes.io/instance: operator - app.kubernetes.io/name: B - p: mpjYhM + app.kubernetes.io/name: operator + vkC98zPpgT: KKmx46 spec: - activeDeadlineSeconds: -7878435763390549000 + activeDeadlineSeconds: 3656706355804881000 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: + matchExpressions: + - key: h + operator: 颰v魋müǰ疒K淽ÃĴ椤êʜpřǔw` matchFields: - - key: Wk8kIT - operator: 爼熘k丽稺øŜ彍娜ǭ + - key: lRBNzcv + operator: 厗ʁɧ殈潨3E9Þ秕ŏĢ継Å递ɾ + - key: 6YDKwrDt + operator: V values: - - WRFzjOY - - yBjci - - Fc2viIi - - key: SikY - operator: ǪPƋ + - Uv + - key: XQD9gvfYLYHMi + operator: 獭ŏ鼞 values: - - ppQ0K4G - - wEoi - weight: -1098671981 + - IIg + weight: -1181661517 - preference: matchExpressions: - - key: H6a - operator: Č堣ɧġ俏蘻舐嗂檮8 - values: - - D9c - - C + - key: YJQv1 + operator: hLj攌燃Ĝ柸ɩDɌ matchFields: - - key: oALca - operator: 骐挢鿋 - - key: hVDRt8g - operator: "y" - weight: -1789374020 + - key: 1MwFeqFoDDLZC + operator: Ě3Ś蛱R + weight: -1881322080 requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: 0SV0XWK - operator: ʭƐ樝ƾhőʇ]飐墪,礽 - values: - - A5EXLlJ - - J - - Xqoct5MT4 - - key: i4w9axF - operator: 艿毌楆鰓+ - matchFields: - - key: EcetQ6v - operator: Vʧo<ƀ - values: - - WtU - - b - - cb + nodeSelectorTerms: [] podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: cgoIIhXBNsAA - operator: ÛD除,^掄3ǡ - matchLabels: - f: tl7 - j: QVzmksQ - yL25uhM: eJ73 - matchLabelKeys: - - "9" - - 5Z6 - mismatchLabelKeys: - - dDRd - - GPE9 - namespaceSelector: + - key: ZpJN + operator: Ħ`ǟȌAņ鐹輯Ó~ + values: + - QKyYpA8a + - key: d68n53m + operator: ']' + values: + - ZVYkme matchLabels: - 1OrS9bbBE: iBl85Ft8 - x: zU - topologyKey: cfkeXDX - weight: -280462771 - - podAffinityTerm: - labelSelector: {} + EcP2: Jx + I: "" + s: nerG matchLabelKeys: - - mRv - mismatchLabelKeys: - - TSZIHYXy - "" + - 6cEo4Pb + - BX5L9 + mismatchLabelKeys: + - qJuObIO + - vkyY + - jSeh3ptU namespaceSelector: matchLabels: - 0yQ1MAs8: p - aW: wboVc - j: K7x6hpmg + 0HU: iiumI + ibCp44: 0FZK + lKyB: dFWkc namespaces: - - 6Bs - topologyKey: hO - weight: 273500041 + - OAzj3xpP + topologyKey: O + weight: 2086953412 - podAffinityTerm: labelSelector: - matchExpressions: - - key: 5BR - operator: IJTPɁ= + matchLabels: + VDRm9b: "" matchLabelKeys: - - yS7 - - LFF3D46C - - 9tprIb1DgdS + - wJr65 + - SaNc4rh mismatchLabelKeys: - - 9O4vK - - 8mdq - - N7jeqZE + - MaeA1 namespaceSelector: - matchExpressions: - - key: 5AiNz2G - operator: 曽ɠ/Ơ - values: - - p4JR matchLabels: - Iae: GXSok - c3AmNm5: JpxmO5 - oXyB: Lto27BSiZ + KD6r: k0Dx + zs1tfWEpV: y9jBXjiuiu namespaces: - - lZiNIC - - v3TiqOqut - - e3Mq - topologyKey: ner - weight: 1046548334 + - "" + topologyKey: "" + weight: 1576449764 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: b5fl9Z28 + operator: 凞鬾搻秮$貼-BɧȤ唒豟RD;粞 + values: + - zDPo + mismatchLabelKeys: + - vJM0mv + - UHC8Nnb2c + namespaceSelector: + matchExpressions: + - key: rjIRLpesJa + operator: Lû!ʩ昀|忸ʮVn¯胭蘢獝扐]陥篇 + - key: 8hOe1Afxt + operator: Ń蚂嗏蝏l=ʄ + values: + - G + - DLQWZ + - FvX + - key: TsAhs + operator: G軋軝= + values: + - A + - PGAm + - NMnlJdKSEOD + matchLabels: + F6odD: HLD + TZwg7xZvC: a6K + jNTe3W: UkbiJbn + namespaces: + - qVC + topologyKey: bm99w6PD + - labelSelector: + matchExpressions: + - key: exUPU1 + operator: Œǜ戾ħ邰Õ踪MƢp + matchLabels: + 35l1v6y: aj8XAMk + Oj0: AjQoQdCB + mismatchLabelKeys: + - "" + - XP + namespaceSelector: + matchExpressions: + - key: lbYIcM6XQu + operator: 各鿝=嶷[纂aŗFģ穧xǕgxƅ + values: + - RJ3kGJ9 + matchLabels: + Up1Me1v: riy + c7: uE + z1v: bVQo1d + namespaces: + - ND + - sEfx + topologyKey: "9" + - labelSelector: + matchExpressions: + - key: Ii1 + operator: Ɋ猎乴环玐8ħɏ;材題&$ǤŹ蕌ʙ7ʧ + values: + - Mhc + matchLabels: + oIob5p11T: 3vJl + matchLabelKeys: + - lQn1 + namespaceSelector: + matchExpressions: + - key: j0Xiq + operator: 9nM膾ħ$ + values: + - 1cH + - XMO + - gSRZ + - key: HV2zE + operator: å焎W :ď6 + namespaces: + - 1yrT + - rMOkUigCY + - nCoSG + topologyKey: JZDUrI podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: YKl7 - operator: 猩r - values: - - 48mqOWy - - MD0qE + - key: pbOp8n + operator: ƫ浯 matchLabels: - phmGp: HRpuD7EAKz - matchLabelKeys: - - GCWhorcZ + 4k4Tpyt9rCQ5K: "" + 7p7JrKntMNzmZ: vIGlx + Uz8mU: dPWa mismatchLabelKeys: - - hZGc - - GgU + - "" + - PBMpCdiBg namespaceSelector: + matchExpressions: + - key: De9eEfNbOU + operator: A鯑ZŒ徚4鑁J崍»ʡwć + values: + - 4W + - key: F + operator: 瞚鎭$ƕʤ,Q亡oŽAǾ揆Ĭ眬ƚ@ + values: + - DNI1vmsp + - diMPam matchLabels: - 6D5tsqbwi: er5H2r4 - DFP5: cKZ - MDTL: xzXb7 + C: goOW8 + RBix: 6ZLvLLRe34uH + e: jQ0i7Wwd namespaces: - - 1XBZut - - bpZro - topologyKey: 6OdV - weight: -546886544 - - podAffinityTerm: - labelSelector: {} - matchLabelKeys: - - R - mismatchLabelKeys: - - 4b6tBLcsni4 - namespaceSelector: {} - topologyKey: n0G0qkJ1s - weight: 762012860 + - gkPH6aSa + - D4Ili5YHRh + topologyKey: 3ZZ + weight: 1623083403 - podAffinityTerm: labelSelector: matchExpressions: - - key: Yd5 - operator: Ǜā|(`ȥ¼ǬƊ槹 - values: - - QR - - c0V99E - - key: vInVhLQ6 - operator: A钫ǜ誰D礨參癶¿肻佊ê + - key: ScUW + operator: 壳欺炀綸桐簧嫕 values: - - Tojkshis - - key: PoqQ - operator: 驨 + - 0PyUy52wsM + - aH3tPuAck + - H + matchLabels: + e: ZxEM + oo2vh: 72E5ker matchLabelKeys: - - c4AB2hZ - - 7g - - ac6U3 + - 1Xg82 + - Wdz3W mismatchLabelKeys: - - Qld + - cQ namespaceSelector: matchExpressions: - - key: ZO - operator: 椤ŦkĞa桭Î佄Ʋ - values: - - QsoS - - key: TmU - operator: ģɸ謩ɚ - values: - - cdXLf - - Hss - - key: ckgB4L - operator: 弤荏蒳柚溵]橮ǯɡA8祿ǝ`臑Ȇ齱 + - key: iX + operator: Ʌ¯DZË values: - - Bx - - IN7PGHg3 - - xQHI8kiXeOR + - fJiTYG8y + - hQj3GFvq8r + - ItD matchLabels: - "": K - naRtOdp: Ds9D - vFHV0iM: sU025 - namespaces: - - gzLxZ - topologyKey: vW8Ax - weight: -1615076535 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - pyudxm: uYlVP - matchLabelKeys: - - 68EWK - - qb04qrnut - mismatchLabelKeys: - - F - - FyqGDfZhkz7T - namespaceSelector: - matchExpressions: - - key: U1AB4 - operator: Ûȸ - values: - - POhbV - - xwWbwcrx - - MZS - matchLabels: - UtqN2: I8 - namespaces: - - yYyARb8 - - glcIadI2L - topologyKey: xBJrS - - labelSelector: {} - matchLabelKeys: - - G8pcgzA9q - - Gp - namespaceSelector: - matchExpressions: - - key: ddlUO - operator: '}溲(pɛ鰍¼ʦ' - values: - - CZOQJG - matchLabels: - a8hIYjkhT: QFXC - pT9OT: c - namespaces: - - ObXq8 - - PSG501RD - topologyKey: FI8 + 9zpo: 765alkt + NMK: jsOpo + RZ10Ylb: Me + topologyKey: sm + weight: -1794176319 automountServiceAccountToken: true containers: - args: + - --configurator-base-image=UG + - --configurator-tag=zsECOIlUnlWTDC + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=bBlM - - --configurator-base-image=ftKlY - - amoUVan + - --log-level=8kuwU + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: ftKlY:bBlM + image: UG:zsECOIlUnlWTDC imagePullPolicy: Always livenessProbe: - failureThreshold: 554 + failureThreshold: 314 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 941 - periodSeconds: 589 - successThreshold: 118 - terminationGracePeriodSeconds: 63 - timeoutSeconds: 733 + initialDelaySeconds: 88 + periodSeconds: 824 + successThreshold: 913 + terminationGracePeriodSeconds: 678 + timeoutSeconds: 342 name: manager ports: - containerPort: 9443 @@ -74228,158 +133879,118 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 751 + failureThreshold: 942 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 234 - periodSeconds: 570 - successThreshold: 828 - terminationGracePeriodSeconds: 435 - timeoutSeconds: 451 + initialDelaySeconds: 287 + periodSeconds: 986 + successThreshold: 675 + terminationGracePeriodSeconds: 646 + timeoutSeconds: 373 resources: limits: - cpu: "125" - memory: "249" + cpu: "0" + memory: "410" requests: - cpu: "877" - memory: "279" + cpu: "405" + memory: "315" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true dnsConfig: nameservers: - - puVsXD - - Kll1 + - PPx + - "" options: - - name: R1wvl - value: N1Tp - - name: eLC9 - value: RxUBin3 + - name: 6JYYbc + value: Awu1cX4HZ + - name: zgfb1dpZ + value: wyFRTyPl searches: - - K3 - - 9h8 - dnsPolicy: 藕ɚu抩"úF懭øʃǽb慬sF駢1O烑 - enableServiceLinks: true + - Nrdja + - cPFM ephemeralContainers: null + hostAliases: + - hostnames: + - szd + - r + - ih1pA2U + ip: KFEuo + - hostnames: + - 2a + - Z0UAyxu8g + - 2lFBXl6 + ip: pwyMcaPEI hostNetwork: true - hostPID: true - hostUsers: true - hostname: VJmG3G + hostUsers: false + hostname: 9yvzcaYufhf imagePullSecrets: - - name: iqb + - name: CRPWCW initContainers: [] - nodeName: fIbNqzMr + nodeName: 6n7 nodeSelector: - FiGgG: xLfA - Gofa7lA0: qM4HCo - boRUnI: wZduOUw - preemptionPolicy: oƨȠĈ縶樑 - priority: -218326744 - priorityClassName: K7 + B: exv8j1u + Yh3Jq: b + pErbxGEn: QBSnipu + preemptionPolicy: ©摭ɡŭp眐ƿM$槛6äɽÍ俀齫ɋq + priority: -678475383 + priorityClassName: fDf readinessGates: - - conditionType: ƙnɫ%ʂ - - conditionType: Ů逭ƻP[9ȁD\IJ! - restartPolicy: 鈴Ŕjř5șs64焫竌粥T搫bB - runtimeClassName: CtWS - schedulerName: oJRX + - conditionType: "" + - conditionType: 渏g难0à鹖ƈ6寢Ŵ瞯旈颖ťeĉA + resourceClaims: + - name: "83" + resourceClaimName: Fp3Oi + resourceClaimTemplateName: TzHcp6v + restartPolicy: ƣ嘕oŶ鋭Aǜċ艽ʩ7塓鉉 + runtimeClassName: j + schedulerName: Css schedulingGates: - - name: z - - name: sIdY - - name: R4JiY + - name: QA7EJCB + - name: pLV2nDGE + - name: ZHeUGHy securityContext: - fsGroup: -7501809040235854000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -7273152115155623000 + appArmorProfile: + localhostProfile: poJ6D + type: 4ȴǔ珠nł~ZęɐÅE~D)C諯 + fsGroup: 8568864303950282000 + fsGroupChangePolicy: Always + runAsGroup: 6297135297531004000 runAsNonRoot: true - runAsUser: -6592709742871125000 + runAsUser: 9026262998917160000 + seLinuxChangePolicy: ĉȚ貺ľƬ閕禰Œȱ踧O秧@|a--ĥ磁 supplementalGroups: - - 2843801778861937700 - - -8950654477624867000 - - -5634093482383345000 + - -4109288750548523000 + - -4879083160144737000 + - 168714164968378080 + supplementalGroupsPolicy: 5ʨ淬 sysctls: - - name: dZp - value: zjyFb - - name: LcxA45c - value: S9vTESIXCD - - name: PYX996 - value: vNQSNse - serviceAccountName: LenWv + - name: ZEP328Gr + value: y6yrj9JJIbtw5F + serviceAccountName: WFmb1N setHostnameAsFQDN: true - subdomain: 9m - terminationGracePeriodSeconds: -6311763428986161000 + shareProcessNamespace: true + subdomain: lhmBTxT0 + terminationGracePeriodSeconds: 5160884822074953000 tolerations: - - effect: a鴟j晌丶禆* - key: VEV - operator: 7ȎBȡ賡1<ɻŻ]ǹȽ呝ÑŘȍwF - tolerationSeconds: 1804483854762967000 - value: SEiR2 - - effect: '*Ɲ&ȀñNʇX麤^猝烐ŵ浶ȊĘƮ' - key: 9P5 - operator: e鐒ǐʖdž簟Ƨ粂 - tolerationSeconds: 3825796718011534300 - value: 94WYMLw - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: "" - operator: Žƚđʋ - values: - - GPi - - gES2 - - kIzQlc - matchLabels: - XTERJrouGYchN: Pf - matchLabelKeys: - - Sm02Q2pO - - 08uu - - RIK96rg - maxSkew: -1787144842 - minDomains: -176326459 - nodeAffinityPolicy: h - nodeTaintsPolicy: 歆澔'ŏz$9oÐ:ҵ - topologyKey: pySCgG4ZN - whenUnsatisfiable: Lj譩NJvď - - labelSelector: {} - matchLabelKeys: - - FEMppYW - maxSkew: -1975604271 - minDomains: -101658169 - nodeAffinityPolicy: ~脽ăʒŧ樹笻Qɵ層鍄稨电廢烰2Ȕ - nodeTaintsPolicy: 龩Öǖ~Ļò談Ê螘_逆ū - topologyKey: Z6BhYdo18 - whenUnsatisfiable: ə#Ą毈R>掤ƘŚa簺痟嫼忱ÔR叢 - - labelSelector: - matchExpressions: - - key: Jbp - operator: m~御鎡møƣ嫽削Vx - values: - - v - - key: YchsSC - operator: ɟx果鸈轫-ɜʦǢ惦B恹0 - values: - - SBW71MB6qIB - - CC - - M8bymIUVA - matchLabels: - K: EIyt6 - Q: gdcFCOyVnMd - id2CllN: xfp - matchLabelKeys: - - s - - xSN7bzk - maxSkew: -1286496217 - minDomains: -957876961 - nodeAffinityPolicy: ŕ濊 - nodeTaintsPolicy: B - topologyKey: h3hAibfhYC - whenUnsatisfiable: 攻/yʢH鄹謞膭筎 + - effect: ȥ蔇qqħ籊4Ė8墢>収 + key: S + operator: 纇霾dzȪƛOȳɨ + tolerationSeconds: 957431276072165800 + value: 8LpufxlMn + - key: LHso0 + operator: Ƥ誖ģ迡bƩ鳯詔:ʕ + tolerationSeconds: -8985086834633313000 + value: z8zwk + - effect: 暉Nɼǖ鏹Ŧä]幧5Ïtd + key: M7jHl + operator: Y慔Ʒ,è熏 + tolerationSeconds: 7908424618828308000 + value: kgEUy7KRh volumes: - name: kube-api-access projected: @@ -74399,104 +134010,22 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: Op2TzEc - - name: 7K - - name: Q9 - - name: pPbI ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - pZTJ: OgaeCRx - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - B-webhook-service.default.svc - - B-webhook-service.default.svc.y4nxdBsb7Zu - issuerRef: - kind: Issuer - name: operator-B-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: Op2TzEc ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - pZTJ: OgaeCRx - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: operator-B-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: B-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: - annotations: - pZTJ: OgaeCRx - creationTimestamp: null + annotations: null labels: + Fl1L: sljHz + MdCMaKfR: evaO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-B-metrics-monitor + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + lCBGq2VO: K4w + name: DkEzor-metrics-monitor namespace: default spec: endpoints: @@ -74513,43 +134042,134 @@ spec: - default selector: matchLabels: + Fl1L: sljHz + MdCMaKfR: evaO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + lCBGq2VO: K4w --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: operator-B-validating-webhook-configuration + 4FSfFkLrj80R: QBo + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + yETErM: Urs5Wx + labels: + Fl1L: sljHz + MdCMaKfR: evaO + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + lCBGq2VO: K4w + name: RWQMq3RLH-migration-job namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: B-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + Fl1L: sljHz + MdCMaKfR: evaO + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + lCBGq2VO: K4w + name: DkEzor-migration + namespace: default +spec: + template: + metadata: + annotations: + CAwZ: Sh50C + MhC2q1: v7RB + WU8: xth6ewB + labels: + Jj: oqIV6 + VT: "8" + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: UG:zsECOIlUnlWTDC + imagePullPolicy: Always + name: migration + resources: + limits: + cpu: "0" + memory: "410" + requests: + cpu: "405" + memory: "315" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: CRPWCW + nodeSelector: + B: exv8j1u + restartPolicy: OnFailure + serviceAccountName: RWQMq3RLH-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 6GFk + key: R + tolerationSeconds: -7948340702504604000 + value: QN + - effect: 'Ƙıʙb鈲蔡ƨeɋģfZ陰* ' + key: olulJJK1dcQ + operator: Ȫ廲顐:ďķcŽy隁ħ敪佒辬ŵW + tolerationSeconds: 8733554162197233000 + value: 9hJ + - effect: 鬡鷸à鋧Ȼe颬"貳 + key: Hk0 + operator: 俓g铯万稔 + tolerationSeconds: -6163297792234821000 + value: sCDmKPczm + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-044.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -74557,79 +134177,501 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + RmO: r + ZQiLi: QZXfoK labels: + 8WPzLP: t app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: B - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: je1S-crd-job + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: Q namespace: default --- testdata/case-086.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: ks + health: + healthProbeBindAddress: r + kind: 0faaJC + leaderElection: + leaderElect: true + resourceName: KvLgu7 + metrics: + bindAddress: bpwj + webhook: + port: 329 +kind: ConfigMap +metadata: + annotations: + 1m7aEPW: AFIshsK4y + L5ZjzgQXy: mCwoDQVU + labels: + 8WPzLP: t + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: qGsQ1sX-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + 1m7aEPW: AFIshsK4y + L5ZjzgQXy: mCwoDQVU + labels: + 8WPzLP: t + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: qGsQ1sX-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + 1m7aEPW: AFIshsK4y + L5ZjzgQXy: mCwoDQVU + labels: + 8WPzLP: t + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: qGsQ1sX-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - RcCTPya3q: gXZ1Mm1dK - VnLc: jQYB - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: S - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: M2i0h - health: - healthProbeBindAddress: uixV6HW - kind: jN - leaderElection: - leaderElect: false - resourceName: k14eKhY7 - metrics: - bindAddress: knXZsN - webhook: - port: 153 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null + 1m7aEPW: AFIshsK4y + L5ZjzgQXy: mCwoDQVU labels: + 8WPzLP: t app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: QSmzerg-config + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: qGsQ1sX-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: qGsQ1sX-default +subjects: +- kind: ServiceAccount + name: Q namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + 1m7aEPW: AFIshsK4y + L5ZjzgQXy: mCwoDQVU labels: + 8WPzLP: t app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: QSmzerg-metrics-service + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: qGsQ1sX-metrics-service namespace: default spec: ports: @@ -74638,21 +134680,24 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/name: R6F1vlUXkJ --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + 1m7aEPW: AFIshsK4y + L5ZjzgQXy: mCwoDQVU labels: + 8WPzLP: t app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 3SyCJ-webhook-service + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: R6F1vlUXkJ-webhook-service namespace: default spec: ports: @@ -74660,267 +134705,294 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/name: R6F1vlUXkJ --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null - creationTimestamp: null + annotations: + 1m7aEPW: AFIshsK4y + L5ZjzgQXy: mCwoDQVU labels: + 8WPzLP: t app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: QSmzerg + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: qGsQ1sX namespace: default spec: - replicas: -999542308 + replicas: -1452323381 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/name: R6F1vlUXkJ strategy: rollingUpdate: - maxSurge: 1259159617 - maxUnavailable: 733667665 - type: ǣHkɔ + maxSurge: 1056046026 + maxUnavailable: 1298297968 + type: ǒ template: metadata: annotations: - "9": VcXvoRi0MS - 185x: Za5Myiq9Evi - DAS: vVJg5u - TB2j: D1mkXxnE - creationTimestamp: null + 0u: Aft3 + E8m4: WbDe4 + R: Vb3v + vok: S8ZK7v labels: - "7": fv - DcyA: W - RCK: 9uO7 - W: B8N + 65KaXZ: U2AK + WDS46: QptR app.kubernetes.io/instance: operator - app.kubernetes.io/name: 3SyCJ - irGlM: MW3 + app.kubernetes.io/name: R6F1vlUXkJ + mlt: ZkpfnH4oH + vrQcw: Iz spec: - activeDeadlineSeconds: 4446465859892303400 + activeDeadlineSeconds: -7247864139377252000 affinity: nodeAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchFields: + - key: gZn + operator: 慼綤¨ɺ^_e犀/薪@蔇ǡ + values: + - BxOhXHZ + - Xu + - aXL6gOh + - key: GFvYYFH + operator: ^ñ轨Ȩ穧袀鐚石ȷ?ʆ譸段ǔ谌d + values: + - xahkLNX + - key: Vlcg5 + operator: 苊j + weight: 1508917987 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - - key: "" - operator: 攕ɡ鴕ǁ4敟誼Ţ榋¨宵ƆƐƆĒ¶Ŵ + - key: Awqv + operator: ~Ɉ課棡ǫ寫;Ȁ厊ą鐨嗫昐頞嚞蓒(讟 + - key: ny + operator: ÁĆ扌ȢêƾɝŨeĘ艸 + - key: b2Z8 + operator: ƿ陸ơyń + values: + - o + - uAmEtodg + - ylX8STyrfa + - matchExpressions: + - key: lUY5 + operator: 琟r趤庳纑*H菉銙隒ūSɑ嵅ȱ values: - - SXxqEE33vhr - - h3AIrQW - - BZ1wyEaO4fw - - key: Te5 - operator: vÂ橦`¬ī餭mC¼褎"ŵ葋ǹvɫ嘨 + - zHWztb + - key: 7BIOEOPb + operator: ĪYŋ^Ŗ葑ròƊ侠a弸柧柱z謠ǫ汑ãƄü蓪ÝĖU餟 - values: - - o32apA - matchLabels: - aEdf: QGGka8 - topologyKey: QoEuYG - - labelSelector: - matchExpressions: - - key: 8jukvv - operator: 欉ɝƈNj乧堾ưUƑ,hy雎ʘ顓待鏨Ħ - matchLabels: - 6Q4D: j2 - matchLabelKeys: - - vSaYitvIUn - - P1Uk2PO - - AUOjaYM9 - mismatchLabelKeys: - - uuVZiH - - B - - 22R - namespaceSelector: - matchLabels: - KBGvPMc: 7khilRkEF - Lqg5: WxfvgOq1rLdZ - namespaces: - - ph - - 0CW - topologyKey: o - podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: S2E62 - operator: 慖昬W&眠 + - key: uQkTF + operator: 琄 values: - - "" - - 29NA6AaCfSWBF - - R0As + - 9g + - mL75 + - 19z1Dz3oPCYES matchLabels: - Gq0: Xi7m - Rtu4: D0hSm + C3H: H3skbk + I4i: wF4 + matchLabelKeys: + - nz + - iC4im mismatchLabelKeys: - - Q + - uqlbq + - gwB1DbJ + - vRvv namespaceSelector: matchExpressions: - - key: 4yk - operator: aY僮úɲǺzDŽbʬ魎[ȩL箜ǿ斎4 + - key: loHVfJH5G1u + operator: ʐƳŝc鲕 values: - - OT - - key: BH9l6bpwtGX - operator: ê躄ǁɉǏƐà途kȂ儈肺Ʊï + - 5yoN + - key: q + operator: ɘ褖ê擤軳侉N values: - - wJQ - matchLabels: - 4QOyWKy: kZ1 - IG5f2j: MsM - XqT5Ip: 76YsO - topologyKey: "974" - weight: -17338018 + - Zy4C + - key: 8QL1YC + operator: Ė='耫 + values: + - Um0i2iC + - B4 + namespaces: + - l + - Fo6aIm + topologyKey: fvNYNj + weight: -1704968462 - podAffinityTerm: labelSelector: matchExpressions: - - key: 5c8JD - operator: ÛȚs - values: - - xs4Xg - - tOUfS - - "" - - key: 2ewusLRoh - operator: 瓞髿筗Ƕð?駢蠲ƎǓ + - key: caVtK + operator: 軚Žƞ玒Ƚ丟ļ values: - - i - - KLaQc - - uoS2B2hi0w - matchLabels: - "": OglF + - aRdUoK5 + - 1F04YFlCXblqy + - DJ + - key: K1NBo + operator: dƊ + - key: FKjGsbA9 + operator: r甹ɭ\YŃȶ9w崌[I matchLabelKeys: - - pvO + - QJ5UZkl mismatchLabelKeys: - - 68FsjArUJY - - 5GRmS9 + - OO1SaL namespaceSelector: matchExpressions: - - key: 8RQFQwE - operator: l腹Ɠ诅ĩ谸ĊOSdA垳"Kƚ胘Ff涗 - values: - - k - - key: QKHVkF - operator: 訁荒5ð鐛ĭȒƼ + - key: "" + operator: Ƅ繳ƴ^`剏ɬ忴Ɍůě¤;ʍsH values: - - tJLN - - p8J9RQwZH - - AW - - key: XLQVTfL - operator: ğ怉ŕIdz|Ȝȝ(灣hż氨 + - lx45Bv + - 1W + - 6eMXc + - key: B + operator: 鰄Ž籝熒ȶ[/#Ơy@2Ǡơ}5餎 + - key: HNL + operator: ʊƸƊ渔Ș97穲ǗŠ values: - - er - - eC - - 1n - topologyKey: PpCu - weight: 1133217522 + - Dixp + matchLabels: + D: nPD8mY + namespaces: + - ybm + - uJX + topologyKey: 9YRc + weight: 1314422731 + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: - matchExpressions: - - key: nVQHw - operator: 篴ƥ,ƙ;u勮Ƕ棲ÒǕe - values: - - 3ICJ1cqEgk - - 3D matchLabels: - "5": kAw - C7ey: mAH6G + "": 2EM4 matchLabelKeys: + - LyZrn2 - "" + - OMMF6 mismatchLabelKeys: - - 52cP + - w6y + - xj namespaceSelector: + matchExpressions: + - key: "" + operator: m,CnǏ%°È±饗儤E萂鈱7b + values: + - aoQsE matchLabels: - AmxN7M7D: gSriffmOd - Tv: HdIqs9 - tgCq0X0O3YNL: KgERh6UV + 2neFsbP: NLQJDx + aLIx0JdRPEO: V7BF69 + dxpyrS: EWxoA2D namespaces: - - GBGHX - topologyKey: 7qn - weight: 2130596589 - automountServiceAccountToken: true + - 6QywZ + - z2t1kz + topologyKey: VgY6xM + weight: -1030918013 + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchLabels: + dfTSPVP: O + matchLabelKeys: + - bfeu + - wI1 + mismatchLabelKeys: + - XU0Bg + - CfdF4f + - yQYu26cd4 + namespaceSelector: + matchExpressions: + - key: 0jog + operator: "" + values: + - hks + - key: HuD1Nl5F6Kqdz + operator: 曷 + values: + - HzCny19TY + - lXXC + matchLabels: + LXE9: vgDr + topologyKey: I8WK1dXh0 + automountServiceAccountToken: false containers: - args: + - --configurator-base-image=929tqf + - --configurator-tag=VZB + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true + - --log-level=hXD1k + - --metrics-bind-address=:8443 + - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=wp - - --configurator-base-image=AJtD86QQ + - --configurator-tag=P + - --configurator-base-image=h8K + - P + - WM7Be + - JLya command: - /manager env: [] - image: AJtD86QQ:wp + image: h8K:P imagePullPolicy: Always livenessProbe: - failureThreshold: 610 + failureThreshold: 807 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 194 - periodSeconds: 861 - successThreshold: 859 - terminationGracePeriodSeconds: 530 - timeoutSeconds: 560 + initialDelaySeconds: 369 + periodSeconds: 599 + successThreshold: 709 + terminationGracePeriodSeconds: 323 + timeoutSeconds: 4 name: manager ports: - containerPort: 9443 @@ -74930,22 +135002,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 488 + failureThreshold: 339 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 153 - periodSeconds: 826 - successThreshold: 857 - terminationGracePeriodSeconds: 964 - timeoutSeconds: 608 + initialDelaySeconds: 644 + periodSeconds: 736 + successThreshold: 767 + terminationGracePeriodSeconds: 870 + timeoutSeconds: 438 resources: limits: - cpu: "552" - memory: "603" + cpu: "999" + memory: "995" requests: - cpu: "439" - memory: "353" + cpu: "310" + memory: "451" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -74957,67 +135029,116 @@ spec: readOnly: true dnsConfig: nameservers: - - nex087njHP - - 5oyM8B - - OFS + - qpD5w options: - - name: "8" - value: fxj - - name: m - value: JUWXdfQ - - name: vjiij6 - value: TrT9 + - name: zj7ZjaHqjc + value: 5qwMFE2 + - name: lX0K + value: PjOY4lKisl0eB searches: - - xmO29 - - q7ZY - dnsPolicy: 3徻n, - enableServiceLinks: true + - j6Heur6Yfcu + - ZfVso + dnsPolicy: Þ蕉豐}k剦ö ephemeralContainers: null hostAliases: - hostnames: - - o0LL - ip: 3Zo - - ip: q - hostIPC: true + - OjcDtB1C + ip: 5GcNoI hostUsers: true - hostname: N5XE + hostname: WPBEbkbr31C imagePullSecrets: - - name: J37w - - name: XAyGS - - name: DgDanQ + - name: RpOpIPKb + - name: z + - name: CD initContainers: [] - nodeName: R - nodeSelector: {} - preemptionPolicy: ƙ - priority: 2110598567 - priorityClassName: izM2e1 - readinessGates: - - conditionType: ș:œ=ɔɃMǃ 椻 - - conditionType: 潏莥G@{ - restartPolicy: ?=,優偿跼膁1yBȇ - runtimeClassName: UILZ - schedulerName: ZmzwWiRN + nodeName: vD + nodeSelector: + llGzbN: oI + vNIq: uv + wgpBg: lQkdHPNDw + preemptionPolicy: M過恳釁納xlʄ跾ôa + priority: -1879763257 + priorityClassName: SoOt + resourceClaims: + - name: NMMsJNTcTe + - name: c9Tig + - name: 6Ie + restartPolicy: 毃ăNJ瞩棁gɚIM/玏øetC + runtimeClassName: G55Wt6r + schedulerName: aAG schedulingGates: - - name: 1A - - name: NJpw + - name: T + - name: 74fRcwJH securityContext: - fsGroup: 5399875565831145000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -2894743999424822000 + fsGroup: 6137577561858794000 + fsGroupChangePolicy: Always + runAsGroup: -6949924418046833000 runAsNonRoot: false - runAsUser: -3348099854506448000 + runAsUser: -3469124705118572000 supplementalGroups: - - -8474922347268491000 - serviceAccountName: cH3njF + - 50379161676887430 + - 2079034389514862800 + sysctls: + - name: lq4pd + value: c67ZfdgV0 + - name: KkmrwzTI83 + value: jROoHUT + serviceAccountName: Z1BDagA0D setHostnameAsFQDN: true - subdomain: Edkae9gT - terminationGracePeriodSeconds: -4141935907216843300 + subdomain: kVjWC + terminationGracePeriodSeconds: 2589748319900399000 tolerations: - - effect: çv翰瘑ʞ煥n磄4jș$'嵺ůƤ汙 - key: XG - operator: ~Ģ - tolerationSeconds: 8980242645943914000 - value: vV8V + - effect: '}牘暺骫6ʬƋô渧ċǹ6«麰Ō浌ƚ' + key: nJTK9X + operator: 钽ŋ蟂ʗʒw/廱}!韕綥= + tolerationSeconds: -1109275824266343600 + value: WmIbDeZ + - effect: ʙ凸X\H飄ȵjȝȫ(醟p佣}Ŵ迖ƴ + key: 8pT71 + operator: <¶ǂ偾w巨縘EDzĄ凿 + tolerationSeconds: -4714273216746741000 + value: 7J3 + - effect: Dzĕ滁NǍ矣鱪湗蓜fXƅLjʨ砣 + key: ICvl9 + operator: ɬNh3ɔ]?ɘ+嫎Ķ呆 + tolerationSeconds: -235107692735406240 + value: pFLe6d0v9vvM + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: C + operator: 醯\Ȁ蛷Qŏh+J!贍 + values: + - QXJ + - bU + - key: G + operator: ŋuoH倊Ɛ漞圳ËÞ + - key: MyERu6o2dS + operator: 帀 + values: + - Jb7Q + - 8KzFIG8 + - vYtqR + matchLabels: + pPwQ: UZYWrq3 + maxSkew: 573942645 + minDomains: 549576695 + nodeAffinityPolicy: 駯Ȃŀɣ愸Ē棚鬏ªǸ& + nodeTaintsPolicy: nJ2V躴Ɔ湝鐄wƹK庖ưWȮ + topologyKey: eZyZ + whenUnsatisfiable: 絾ĉ儧举覶/ɹ栈ŕȓ炃7ɞƅµlj + - labelSelector: + matchExpressions: + - key: fkCFp + operator: 軧Ɗ-ʊĭR 誣ɧijĆȡQ + - key: 8PZ3dT4 + operator: ǁ + maxSkew: -812684638 + minDomains: -1931448912 + nodeAffinityPolicy: ;醴 + nodeTaintsPolicy: 漮©ʧ矜`ŵ桿圻釘[繁紁ʝ臒JVA + topologyKey: fdWGr + whenUnsatisfiable: Ǵ禒 volumes: - name: kube-api-access projected: @@ -75040,47 +135161,48 @@ spec: - name: cert secret: defaultMode: 420 - secretName: 1k8 - - name: ZKUY8P + secretName: q9uoI4af --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: null + annotations: + A: YuZnq6 creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/name: LH app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 name: redpanda-serving-cert namespace: default spec: dnsNames: - - 3SyCJ-webhook-service.default.svc - - 3SyCJ-webhook-service.default.svc.E3h6ntJE + - LH-webhook-service.default.svc + - LH-webhook-service.default.svc.oHW issuerRef: kind: Issuer - name: QSmzerg-selfsigned-issuer + name: iP-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: 1k8 + secretName: q9uoI4af --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: null + annotations: + A: YuZnq6 creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/name: LH app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: QSmzerg-selfsigned-issuer + name: iP-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -75092,7 +135214,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: QSmzerg-mutating-webhook-configuration + name: iP-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -75100,7 +135222,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 3SyCJ-webhook-service + name: LH-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -75118,48 +135240,13 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: QSmzerg-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 ---- -# Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: QSmzerg-validating-webhook-configuration + name: iP-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -75167,7 +135254,7 @@ webhooks: - v1beta1 clientConfig: service: - name: 3SyCJ-webhook-service + name: LH-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -75190,8 +135277,8 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - RcCTPya3q: gXZ1Mm1dK - VnLc: jQYB +<<<<<<< HEAD + 4L: T4HM0h0 helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" @@ -75199,110 +135286,132 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: 3SyCJ + app.kubernetes.io/name: LH app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: S-crd-job + name: L-crd-job namespace: default --- testdata/case-087.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: YL - health: - healthProbeBindAddress: pMd - kind: dJY7cp - leaderElection: - leaderElect: false - resourceName: xisUSR6 - metrics: - bindAddress: FSQLz - webhook: - port: 220 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null +-- testdata/case-099.yaml.golden -- +======= + RmO: r + ZQiLi: QZXfoK + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - XFSHB: ot7Wo + 8WPzLP: t app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ-config + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: Q-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + 1m7aEPW: AFIshsK4y + L5ZjzgQXy: mCwoDQVU + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - XFSHB: ot7Wo + 8WPzLP: t app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ-metrics-reader + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: Q-migration-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services verbs: + - create + - delete - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - XFSHB: ot7Wo - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ-default -rules: + - list + - patch + - update + - watch - apiGroups: - - authentication.k8s.io + - apps resources: - - tokenreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - autoscaling resources: - - subjectaccessreviews + - horizontalpodautoscalers verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - consoles verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -75319,11 +135428,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -75332,15 +135446,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -75349,8 +135465,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create - delete - get - list @@ -75360,30 +135500,39 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - events verbs: - create - - delete + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -75393,9 +135542,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -75405,9 +135554,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -75417,22 +135566,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -75442,78 +135593,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses - verbs: - - get - - list - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - XFSHB: ot7Wo - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: nJ-default -subjects: -- kind: ServiceAccount - name: xOqjN - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - XFSHB: ot7Wo - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ-election-role - namespace: default -rules: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -75523,16 +135648,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -75541,485 +135672,455 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - XFSHB: ot7Wo - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - XFSHB: ot7Wo - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + 1m7aEPW: AFIshsK4y + L5ZjzgQXy: mCwoDQVU + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - XFSHB: ot7Wo + 8WPzLP: t app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ-election-role - namespace: default + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: Q-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: nJ-election-role + kind: ClusterRole + name: Q-migration-job-default subjects: - kind: ServiceAccount - name: xOqjN + name: Q-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - XFSHB: ot7Wo + 8WPzLP: t app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: nJ -subjects: -- kind: ServiceAccount - name: xOqjN + app.kubernetes.io/name: R6F1vlUXkJ + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + nYQL: TIi + name: qGsQ1sX-migration namespace: default +spec: + template: + metadata: + annotations: + E8m4: WbDe4 + R: Vb3v + labels: + WDS46: QptR + app.kubernetes.io/instance: operator + app.kubernetes.io/name: R6F1vlUXkJ + mlt: ZkpfnH4oH + vrQcw: Iz + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: 929tqf:VZB + imagePullPolicy: Never + name: migration + resources: + limits: + cpu: "278" + memory: "247" + requests: + cpu: "39" + memory: "321" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: EftK39Ituh + - name: o + - name: Vz8 + nodeSelector: + P: fZ + wO2tzI: QxX93UpiTmBZ + yludT: K3P5U4xIm5l + restartPolicy: OnFailure + serviceAccountName: Q-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: 嚟 Ƨ[萧c蛊Ɂ留ƈǂ臭菁婭綑燅c + key: hJfG7zw + operator: JfɩƩǫŸ挳);帝ɿ慄誥寍 + tolerationSeconds: -4302479333207286300 + value: q25 + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-045.yaml.golden -- +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount metadata: annotations: null creationTimestamp: null labels: - XFSHB: ot7Wo + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ-rpk-bundle - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: nJ-rpk-bundle -subjects: -- kind: ServiceAccount - name: xOqjN + rnKI: dxHr + name: vE4AZ namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -kind: Service +data: + controller_manager_config.yaml: |- + apiVersion: nkytr + health: + healthProbeBindAddress: "" + kind: LDPwZMT2 + leaderElection: + leaderElect: false + resourceName: INZ37 + metrics: + bindAddress: H + webhook: +<<<<<<< HEAD + port: 98 +======= + port: 200 +kind: ConfigMap metadata: - annotations: null - creationTimestamp: null + annotations: + CDC: oN5Xr3coy1 + Ofzhw: jZvCZu + nbNVbYTr: YVk labels: - XFSHB: ot7Wo + XIxiZ0TpUMiGN: 47cqH app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ-metrics-service + app.kubernetes.io/name: r9msAW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: gsWLJFA-config namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: o2 --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: null - creationTimestamp: null + annotations: + CDC: oN5Xr3coy1 + Ofzhw: jZvCZu + nbNVbYTr: YVk labels: - XFSHB: ot7Wo + XIxiZ0TpUMiGN: 47cqH app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: o2-webhook-service + app.kubernetes.io/name: r9msAW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: gsWLJFA-metrics-service namespace: default spec: ports: - - port: 443 - targetPort: 9443 + - name: https + port: 8443 + targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: o2 + app.kubernetes.io/name: r9msAW --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: null - creationTimestamp: null + annotations: + CDC: oN5Xr3coy1 + Ofzhw: jZvCZu + nbNVbYTr: YVk labels: - XFSHB: ot7Wo + XIxiZ0TpUMiGN: 47cqH app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: o2 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - q93: ONPg3F - rZBEA7mOLYT: iFtHtFH - name: nJ + app.kubernetes.io/name: r9msAW + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: gsWLJFA namespace: default spec: - replicas: -2134074333 + replicas: 2068061413 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: o2 + app.kubernetes.io/name: r9msAW strategy: rollingUpdate: - maxSurge: 65570750 - maxUnavailable: 954120139 - type: 袂ȴľ9 + maxSurge: 1653893074 + maxUnavailable: 1080934031 + type: Ï叶鿲 template: metadata: annotations: - U: 5klmK - creationTimestamp: null + 9BAofM: dBpb + FV: "" + JGO: QZr + zzYL1: 7CmauQYyeM2v labels: - Fp: P6olJSs3t + GZvPkEVM: zJLoIY + R7: sxp + RggV5xG: HnsEFReAQE431 app.kubernetes.io/instance: operator - app.kubernetes.io/name: o2 - cbzDUdfwq: OrZ5 + app.kubernetes.io/name: r9msAW + l0idOlMInZ: VN spec: - activeDeadlineSeconds: 3611247376970001400 + activeDeadlineSeconds: 7649386209271378000 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - - key: YYfg1 - operator: ěǁÏ~裚l孎ŵIJ浊鸾ɫP鎿:炎 - values: - - 6sqb3h3 - - Dst1 - - XAU - weight: 972142003 - - preference: - matchExpressions: - - key: aY5tWb - operator: n贱趶b|(>Ȅ4 + - key: iPCW + operator: Ä袷%; values: - - Syn - - key: coAU1eb - operator: Uaĝģ倍ʜ&曚 - values: - - xqKq1GUp - - qT7u - - key: gLH5MMiej - operator: 逫仿imĺT - values: - - Q8F1H - - orsn + - j3P + - g + - uUOBEZlAg + - key: YNsKA + operator: 罖Ph瘔EÓu6鯃6V'WR怛H matchFields: - - key: Ycs5M5v - operator: '|±í琛ʛ' - - key: X98 - operator: 檚D鮩ȵÿ&ÿƬ庩vș>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) kind: ConfigMap metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF + annotations: null creationTimestamp: null labels: - 1S48I: gbO1FYE + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP-config + rnKI: dxHr + name: 5U9oyj-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF + annotations: null creationTimestamp: null labels: - 1S48I: gbO1FYE + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP-metrics-reader + rnKI: dxHr + name: 5U9oyj-metrics-reader rules: - nonResourceURLs: - /metrics @@ -76351,20 +136576,18 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF + annotations: {} creationTimestamp: null labels: - 1S48I: gbO1FYE + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP-default + rnKI: dxHr + name: 5U9oyj-default rules: - apiGroups: - authentication.k8s.io @@ -76543,809 +136766,761 @@ rules: - redpanda.vectorized.io resources: - clusters/status - - consoles/status - verbs: - - get - - patch - - update -- apiGroups: - - scheduling.k8s.io - resources: - - priorityclasses - verbs: - - get - - list - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF - creationTimestamp: null - labels: - 1S48I: gbO1FYE - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: cCP-default -subjects: -- kind: ServiceAccount - name: akO9K6 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF - creationTimestamp: null - labels: - 1S48I: gbO1FYE - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP-election-role - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - "" - resources: - - events - verbs: - - create - - patch -- apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - delete - - get - - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF - creationTimestamp: null - labels: - 1S48I: gbO1FYE - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP - namespace: default -rules: -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF - creationTimestamp: null - labels: - 1S48I: gbO1FYE - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: cCP-election-role -subjects: -- kind: ServiceAccount - name: akO9K6 - namespace: default + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF + annotations: {} creationTimestamp: null labels: - 1S48I: gbO1FYE + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP - namespace: default + rnKI: dxHr + name: 5U9oyj-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: cCP + kind: ClusterRole + name: 5U9oyj-default subjects: - kind: ServiceAccount - name: akO9K6 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF - creationTimestamp: null - labels: - 1S48I: gbO1FYE - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP-metrics-service + name: vE4AZ namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: WqmcFb --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -kind: Service +automountServiceAccountToken: false +kind: ServiceAccount metadata: annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - 1S48I: gbO1FYE + 6t8EC: hh0EBBW0 + 40GBab: t0Z5V8Idb + "97": ysLUJXn4i app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: WqmcFb-webhook-service + app.kubernetes.io/name: 2xmeT + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zMBGxjU-migration-job namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: WqmcFb --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF + annotations: null creationTimestamp: null labels: - 1S48I: gbO1FYE + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP + rnKI: dxHr + name: 5U9oyj-election-role namespace: default -spec: - replicas: -2144644648 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: WqmcFb - strategy: - rollingUpdate: - maxSurge: 1212904920 - maxUnavailable: 769659126 - type: ({z恲縅Da驯 - template: - metadata: - annotations: - W4R: "9" - ar71kLiEtX: K - kwi: trQ - xbu5FAyuP: NYj4WkniUocV - creationTimestamp: null - labels: - 4c: 3o5HPEk0sv - app.kubernetes.io/instance: operator - app.kubernetes.io/name: WqmcFb - spec: - activeDeadlineSeconds: -2405601678923557000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchFields: - - key: tefUtgH - operator: 鍗úskɯ - values: - - FmQyZFxdl - - key: Cnyt - operator: wɞh纚蟯巑 - values: - - nt876qCF - - "3" - - V24g7T7 - - key: iZes - operator: ŏƊ:訨ŷ蘭dž懙复7杖Ƣ黍_[J - values: - - Uap - weight: 963706628 - - preference: - matchExpressions: - - key: Wdc1 - operator: R妯é0惁烤ƹ蘄蔻Ȼc綸 - values: - - 8xsr - - ZlVAx - matchFields: - - key: sWCyDV3 - operator: T鏡荡印)ȹvá焏b雖杚涻咦&z - values: - - MhiM - - z - weight: 1320782896 - - preference: - matchFields: - - key: ztK0gOd - operator: /Ë匸ʨ襡ȁ宫鐦ȷ鲤ſ - values: - - CG016 - - NOb - - key: RqBMw - operator: 遳²Ø8$赁&缥殌Q梊D - weight: 2120338660 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: iVIXc3 - operator: ődz葢=Ǣ紈簾;Ĕƣ建鳧縃0 - values: - - "" - - jHnJ - - key: IaK - operator: u|ƚ賾*f®ưĀ - values: - - vuIyd - - Drs - matchFields: - - key: Dhw - operator: "" - - key: aD - operator: 賒傸緗u櫦軂{撇ż - values: - - b8X2 - - "8" - - reNUvHEmQi6 - - matchFields: - - key: YYx8 - operator: ǣtjGȓ旯DĔėĝ - - matchExpressions: - - key: bKL57zEUMd - operator: 0ćȳNj蒓Ķ37NJAĬ玍BŽ櫁樷廜 - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: EAq0Qy5 - operator: Ƣ - - key: sFBS8 - operator: "" - - key: 1oR5pb62G - operator: µ硚惔垄ɳw騃!幬NųB罍p - values: - - lP - - AG7Y - matchLabels: - vjOirJLgcD: X4PzOx3RhF - matchLabelKeys: - - J - - BB - mismatchLabelKeys: - - ciDrkLK - - jtPS - namespaceSelector: - matchExpressions: - - key: Cxpw - operator: z爛Ƌ槐锨煞ō鴦 - values: - - 3A - - 9cg3gZ - - key: Zee - operator: 痣dž籎]HǀǦm{oȳ掟 - values: - - NzVKBIF - - kPK - - key: 5nlaG6GHo - operator: LJŅ]Ȗ - matchLabels: - OOY3uhAXpo: qSB - aojS: gOkolN - oGPTB: KFJgCX - namespaces: - - HfF1GUt5 - topologyKey: 90WdT7 - weight: 1054168312 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: MUJtlbN0 - operator: 蛂ȇ堯cU狖陪Ʋ縔ƋYȲ - values: - - 8u - matchLabels: - Hia4jM7: pU1n - KLNPg4V8K: ZSkbNZASEFws - LZzCes: dTDFEcfxY - mismatchLabelKeys: - - WXTpWt1q - - J8g1XC - namespaceSelector: - matchExpressions: - - key: 7CKrX - operator: GĒ - matchLabels: - 8MuoqJnDQmxwY: kMrO8wMx - Z9THJX: p9MH7m2Q - t0s: UdXxXsk3DU - namespaces: - - B - - rlS9qYanCUN - topologyKey: CSJMR - - labelSelector: - matchExpressions: - - key: 94ZFj3AMl0 - operator: ƐǢʎįɡ犍ɠ - values: - - x23a - - fVpPg - - gzdv - - key: Maml - operator: '[ĕ蟅ķv唛硉峄蠿;k犂ʣ緹Þ巯ŇI謭' - - key: oAlgJu4xG - operator: 庉玟ɪƑ=&茟 - values: - - S2IZ - - "3" - - i - - key: IMnOYKW - operator: Ǯő - values: - - w - - 4EBn47 - - kZ1G - - key: JQ - operator: 5蠰[醂ż - values: - - "" - - bVo - - J - matchLabels: - 1UFu: vLW - VRA: F2hdzU - topologyKey: yV - automountServiceAccountToken: true +rules: +- apiGroups: +<<<<<<< HEAD +======= + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - create + - get + - patch + - update +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 6t8EC: hh0EBBW0 + 40GBab: t0Z5V8Idb + "97": ysLUJXn4i + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 2xmeT + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zMBGxjU-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 6t8EC: hh0EBBW0 + 40GBab: t0Z5V8Idb + "97": ysLUJXn4i + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 2xmeT + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zMBGxjU-crd-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: zMBGxjU-crd-job-default +subjects: +- kind: ServiceAccount + name: zMBGxjU-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 6t8EC: hh0EBBW0 + 40GBab: t0Z5V8Idb + "97": ysLUJXn4i + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 2xmeT + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: zMBGxjU-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: zMBGxjU-migration-job-default +subjects: +- kind: ServiceAccount + name: zMBGxjU-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" + labels: + 6t8EC: hh0EBBW0 + 40GBab: t0Z5V8Idb + "97": ysLUJXn4i + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: 2xmeT + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6z-crds + namespace: default +spec: + template: + metadata: + annotations: + PZk: 3gC + TyAt716uksk: PA + alIPq: JJbfSKU + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 2xmeT + spec: + automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=y3ROS - - --configurator-base-image=I + - crd + - --vectorized command: - - /manager - env: [] - image: I:y3ROS - imagePullPolicy: Never - livenessProbe: - failureThreshold: 895 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 342 - periodSeconds: 649 - successThreshold: 298 - terminationGracePeriodSeconds: 849 - timeoutSeconds: 148 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 192 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 994 - periodSeconds: 475 - successThreshold: 443 - terminationGracePeriodSeconds: 514 - timeoutSeconds: 185 + - /redpanda-operator + image: Iedc3BYXQ:UoBs + imagePullPolicy: IfNotPresent + name: crd-installation resources: limits: - cpu: "434" - memory: "590" + cpu: "487" + memory: "56" requests: - cpu: "637" - memory: "249" + cpu: "122" + memory: "511" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - HrhMd - options: - - value: 5SI8 - searches: - - Tyl2T5Mt3y - dnsPolicy: 'Pßčʦ榲÷绩š}:' - ephemeralContainers: null - hostIPC: true - hostPID: true - hostUsers: true - hostname: Fe imagePullSecrets: - - name: gBOg0mI - - name: Tykic - - {} - initContainers: [] - nodeName: jH6G5f + - name: 82BeXHqvHsWui + - name: ZWrJhA5QuDmanJe3 + - name: Pc6NSy nodeSelector: - YLyedHB: pxcC - a6woHeKel: rceE - bGbWY5E1F4Jac: Oq - preemptionPolicy: Ž曶}韡鵰ȓd}韀瞀P凄q.兪鐞Ȥ莑\ - priority: -177953537 - priorityClassName: 3jtR - readinessGates: - - conditionType: Ħʑ摳ŰE谩摩飄ʪ癹1旂n笪o殀骥Ʀ畨 - - conditionType: PĆ噼ƮgĽŅV - - conditionType: Hſ桎ɐɓ!uø苕灰ű - resourceClaims: - - name: Vb5gyg - - name: HhZbUPuhcBd - - name: F12g6 - restartPolicy: ¼蠸ɯ - runtimeClassName: MC5 - schedulerName: BXME - schedulingGates: - - name: zm2LXXZ - - name: uPS5a - securityContext: - fsGroup: -4948740130642859000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: 1600747191373743000 - runAsNonRoot: false - runAsUser: -8772834372891012000 - supplementalGroups: - - 3495344937554265600 - - -729386749022923000 - sysctls: - - name: 8YRnWYy2kE - value: 3bUQ - - name: qtXD5d4 - value: TWT7Re07z - - name: Nvjbq2Hzi8 - value: 3tWxKfQ - serviceAccountName: 1TvXd - setHostnameAsFQDN: false - subdomain: K9 - terminationGracePeriodSeconds: -1056991240725260900 - tolerations: - - effect: 垛"n焸骋 - key: jk - operator: 肪G乻,ʫ鴺钷鉱 ʌ侏Iºɗȸ7儨ƣ - tolerationSeconds: -1286742372947447600 - value: 42mO - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: I4LlqW0 - operator: ɘ咎:*©篗ɺŶƹ4萬ʄo麂ʉ狨蝁2 - - key: d - operator: '%ƚ' - values: - - LaBM - - 7j5Hr89o - - 26a - - key: q6LBAJgMa - operator: Ȱ椼| - values: - - fX - matchLabels: - Egb: 9Ela - rsZCnx: BNM33 - maxSkew: -1683677098 - minDomains: -1523899896 - nodeAffinityPolicy: '`B灦ǠyǸ爪óȣȉaȩI6皔帾ɓ齥' - nodeTaintsPolicy: DZ_ǁ拶0ãFɛȥ泱鿗极c汷<ʟH - topologyKey: dTqiO - whenUnsatisfiable: ȍ + pNxNer: g2DF + restartPolicy: OnFailure + serviceAccountName: zMBGxjU-crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -77365,238 +137540,375 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: Fmt - - name: 2ekz - - name: ulq --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate +apiVersion: batch/v1 +kind: Job metadata: annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - 1S48I: gbO1FYE + 6t8EC: hh0EBBW0 + 40GBab: t0Z5V8Idb + "97": ysLUJXn4i app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: redpanda-serving-cert + app.kubernetes.io/name: 2xmeT + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: 6z-migration namespace: default spec: - dnsNames: - - WqmcFb-webhook-service.default.svc - - WqmcFb-webhook-service.default.svc.BhU - issuerRef: - kind: Issuer - name: cCP-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: Fmt + template: + metadata: + annotations: + PZk: 3gC + TyAt716uksk: PA + alIPq: JJbfSKU + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: 2xmeT + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: Iedc3BYXQ:UoBs + imagePullPolicy: IfNotPresent + name: migration + resources: + limits: + cpu: "487" + memory: "56" + requests: + cpu: "122" + memory: "511" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: 82BeXHqvHsWui + - name: ZWrJhA5QuDmanJe3 + - name: Pc6NSy + nodeSelector: + pNxNer: g2DF + restartPolicy: OnFailure + serviceAccountName: zMBGxjU-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-047.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: - annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF - creationTimestamp: null + annotations: null labels: - 1S48I: gbO1FYE + 1D2wB0v: vTS5 + D1Nq: i8 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP-selfsigned-issuer + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Yv9IwD namespace: default -spec: - selfSigned: {} --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: kza + health: + healthProbeBindAddress: tZV4rsU3 + kind: 8xviVaRPW + leaderElection: + leaderElect: false + resourceName: Lgz + metrics: + bindAddress: x + webhook: + port: 441 +kind: ConfigMap metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: cCP-mutating-webhook-configuration + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a + labels: + 1D2wB0v: vTS5 + D1Nq: i8 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Zl-config namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: WqmcFb-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - G: g1H20bqs - GIyHjLLo: "" - OV: QDDDF - creationTimestamp: null + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a labels: - 1S48I: gbO1FYE + 1D2wB0v: vTS5 + D1Nq: i8 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: cCP-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - 1S48I: gbO1FYE - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Zl-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: cCP-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: WqmcFb-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a + labels: + 1D2wB0v: vTS5 + D1Nq: i8 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Zl-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - 7CoUArlNjV: k - VcRiFP: YQhG3D - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" + annotations: null creationTimestamp: null labels: - 1S48I: gbO1FYE + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: WqmcFb + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - jHlVD3i0I: Hfqg8dMgdc - name: akO9K6-crd-job + rnKI: dxHr + name: 5U9oyj namespace: default --- testdata/case-089.yaml.golden -- +rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: - annotations: - 9eKE: ayih32GI + annotations: null creationTimestamp: null labels: + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: TxdHR + rnKI: dxHr + name: 5U9oyj-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 5U9oyj-election-role +subjects: +- kind: ServiceAccount + name: vE4AZ namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: UbL - health: - healthProbeBindAddress: 9BJDnl - kind: JTWcul - leaderElection: - leaderElect: true - resourceName: Gvhjc3S42 - metrics: - bindAddress: 1GNyShDudY1 - webhook: - port: 344 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: annotations: null creationTimestamp: null labels: + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 8WTbb-config + rnKI: dxHr + name: 5U9oyj + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: 5U9oyj +subjects: +- kind: ServiceAccount + name: vE4AZ namespace: default --- # Source: operator/templates/entry-point.yaml @@ -77606,12 +137918,15 @@ metadata: annotations: null creationTimestamp: null labels: + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 8WTbb-metrics-service + rnKI: dxHr + name: 5U9oyj-metrics-service namespace: default spec: ports: @@ -77620,7 +137935,7 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: yHixING + app.kubernetes.io/name: RoJFv --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -77629,12 +137944,15 @@ metadata: annotations: null creationTimestamp: null labels: + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: yHixING-webhook-service + rnKI: dxHr + name: RoJFv-webhook-service namespace: default spec: ports: @@ -77642,7 +137960,7 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: yHixING + app.kubernetes.io/name: RoJFv --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 @@ -77651,293 +137969,212 @@ metadata: annotations: null creationTimestamp: null labels: + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 8WTbb + rnKI: dxHr + name: 5U9oyj namespace: default spec: - replicas: -1025225275 + replicas: -1597924950 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: yHixING + app.kubernetes.io/name: RoJFv strategy: rollingUpdate: - maxSurge: 1620202023 - maxUnavailable: 274330924 - type: 壻Ȃ鲤幂 + maxSurge: 198206459 + maxUnavailable: 462449305 + type: 櫖hƹp template: metadata: annotations: - 54zKz: jYt9 - AqNeS: 4qPWyA - G5a7A: HiY - Yz12: "" + C1Z: 4udi + L: 7WHv2 + Mqp: 7JBCm + rQHygw: mwv creationTimestamp: null labels: - EuL: QLG - XG: "" - Yk: 1vwgUydM + 2hLH2: sWMHe + CxNya22J: RYElnz app.kubernetes.io/instance: operator - app.kubernetes.io/name: yHixING - hzGggQD: yviK - oW: 0Y - sjUSas: toa + app.kubernetes.io/name: RoJFv + q5: uwn4hBPXu spec: - activeDeadlineSeconds: -1971868051082364200 + activeDeadlineSeconds: -735193340589213400 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: + - preference: {} + weight: 693437617 - preference: - matchExpressions: - - key: X3VCza - operator: ŭ唊Ǜƞɶ葻Ā* - values: - - wTKp - - ERDbGr3 - - qv - - key: AtvIaK5 - operator: i膏丅燝ǟ - - key: kXeyrV - operator: kĔ matchFields: - - key: "" - operator: șC_憭ʭ湜佯T8DT砆 + - key: bZXMlw6 + operator: oÐ撽釹5Ɇ ¦s² values: - - NOHQwMW - weight: 1381343894 + - sDd + - 8F2y + - v4bxGEZ + - key: wKBrH9y + operator: 盙[宩Ū鈂KÄ + values: + - V + - UKDu2Jx + - LRaFvDN + weight: -311349832 requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - - key: T79U - operator: ɧɯ澫ŧ兣ź*ƥOw + - key: JK + operator: :槍ä·Ź柕ɴ癚 + - key: ag + operator: 嚡犝ɋ(Ȕ^ɷ}猻悘nqß°盚vɨ琝c values: - - w - - key: Vo8 - operator: 牖~褊!\蚅ċ|ƣFG=ʗ陴_川vɠp + - NN + - key: Bn + operator: 曄cȾǗNJƹò}=鞋婘 values: - - t - - 1DzvnmfGZEV - - xKQ + - rdIWf9 + - F2 + - cRPLp8BT matchFields: - - key: C04n + - key: sBClmvIiR + operator: ƿ + values: +<<<<<<< HEAD + - e + - ct +======= + - 3UipR + - 3fdYDH + - uxzlca + - key: fxjda + operator: 苻¬鲹脏`jy + values: + - FH73Vr + - Fi + - matchExpressions: + - key: lj7A operator: "" + - key: zkYq8Nk4 + operator: Ÿwò熱gz values: - - aHQBq - - xVJz - - key: oh - operator: Whʍnɞ蛁寈Ɨɫűȕ鵚×銽窓1ɧ + - q + - key: l5QSkMDR + operator: ɩh + matchFields: + - key: JF7P5 + operator: ʓ|ū閪惵詏6J閶 values: - - kqEuTdf9 + - c + - jhIJCU + - key: VQj0 + operator: '[' + values: + - HhtQ1RF6 + - t7Wd3 + - 4CiVNW + - key: bRPN667m + operator: ɻ鷲 podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - T: tAXcL0 - V0ZO: cQJbNBL4n5 - v6FbY: qDVcB - matchLabelKeys: - - yePHie0 - - vw - mismatchLabelKeys: - - CRpRwcuOEZ - namespaceSelector: - matchExpressions: - - key: 1mDDe9 - operator: Ȯ沀榇演Ɲ譅6S - values: - - D - - 9OcM - matchLabels: - S9: 4d2S8pDx6qt - SA4J6BA: xoPw9xv - z: jqVbCB - topologyKey: du9Ao9T - weight: 1468290431 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: uoBkHnTW - operator: Ʋɼj/鑙#!ħ - values: - - OO - - m0iR5eEF - matchLabels: - iS49J1: eo3z - sEhsr: "8" - mismatchLabelKeys: - - "" - - Z3BkmE - - 7vjLUdg - namespaceSelector: - matchExpressions: - - key: e7tsTrj - operator: Đʑ瞥綡痢%äɬD - values: - - 2yW5YS - matchLabels: - BgcyI2: sD - Wjsu: 0FtXt - nNLiy4: 3AVrp - topologyKey: "9" - weight: 1759502779 - podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: 9qz74 - operator: 姵U錦Dz朚浙覐鬑Nz輊 - values: - - VBm - - 7cv - key: "" - operator: Ǿ賏u烎Ď+沚NɁƩf暢ɀŽ憺誾{ʑ - matchLabels: - zz: fHFz4v0M + operator: 閾ûĄʙ=ìŋ + - key: J2C + operator: 咇悀IŀȌ舴/n + values: + - t8 + - P8uV4d0Jm + - G0cGgA00ZPT8C matchLabelKeys: - - "" - mismatchLabelKeys: - - s - - Vc - - WAz + - OzsO + - UMW5 + - Xns8H8f namespaceSelector: matchExpressions: - - key: wsgg1nz - operator: 哢ǗőÛC#1¨ŊŹŊp - - key: "1" + - key: "" + operator: 冓瘢@ + - key: LY8UIYt operator: "" values: - - i39kyd4 - - key: Rjjmd - operator: 蓄1C - values: - - 3jAI - matchLabels: - WFLHH: XJuW - sCBfi: D6R - z8U: P7FdAC - topologyKey: rQLA - weight: 1674830551 + - GDzC6cYy7Z + - 1YG03v3s8 + namespaces: + - xOM0 + - 1gE + - X + topologyKey: RXsE + weight: -1483641933 - podAffinityTerm: labelSelector: matchLabels: - K9WHX: NuxCH - maWcqq: kxCw + QC: Iv01S59fFC + S9Fy: bwH + nnoPkU: 2so matchLabelKeys: - - ZmOCOym - - wZ2g2md6x + - VMZoW + - "" mismatchLabelKeys: - - 1a - - w85D1yL + - LFK7WF + - c9 + - Uy2nRpr namespaceSelector: matchExpressions: - - key: eUJi1 - operator: (uÃ適癗dž - matchLabels: - 9Q: BL - topologyKey: LGshJ6 - weight: -1253640651 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: yh9 - operator: 碔TƁ謘 - values: - - Ve1ypW - - kCva - - "" - - key: hL1Nz - operator: 筷ȭ且樂牄齣ƲO驣眍 + - key: PZfksn + operator: 揙¿ijʆpr佃 values: - - "" - - key: 1EaXNjt - operator: ł慻譑DŽZ芸 + - Qa + - 5c + - uouoKrpBd5q + - key: SZeHmB + operator: P¥>锚敘ƎY齜źjŻ values: - - bDLU - - rgBDhrqy - matchLabels: - GRp10v: J95 - naqvy: thHr0tL4w - matchLabelKeys: - - QW - mismatchLabelKeys: - - UfA - - ScfR - namespaceSelector: + - GJH + - tMmEtt1ysx8 matchLabels: - "04": wcnUl0EW + AwK: 0YGzduY4 + M2JUG: o + t: d0lBNRF namespaces: - - noZ3 - - qEV - topologyKey: 8h5O - weight: 421293484 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: BKsXZ - operator: "" - values: - - NIJ9 - - DWERr - matchLabels: - OA: gKXA - mismatchLabelKeys: - - 4tP - - J4vm4n8 - - "7" - namespaceSelector: - matchExpressions: - - key: Oa - operator: 彦膀WK氙U嬥蜎t}jȮǁű" - values: - - HqSj - - key: wz2RZV - operator: ʄ峢h謓勶蓿 - values: - - aViZO - - o8nC - - fkE6q - - key: OxV8VXtyiC - operator: '>Ɗ愞' - matchLabels: - Qyt: FP7AwrkY - t: c8BEj5L - namespaces: - - bmwgBy - - X8tn8Th - - lFqPal9 - topologyKey: "6e2" - automountServiceAccountToken: false + - zCPp + topologyKey: Yv1 + weight: 1226717791 + podAntiAffinity: {} + automountServiceAccountToken: true containers: - args: + - --configurator-base-image=zg2YXP + - --configurator-tag=Cp + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true + - --log-level=wg + - --metrics-bind-address=:8443 - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=u - - --configurator-base-image=TPAc + - --webhook-enabled=true command: - /manager env: [] - image: TPAc:u - imagePullPolicy: IfNotPresent + image: zg2YXP:Cp + imagePullPolicy: Never livenessProbe: - failureThreshold: 399 + failureThreshold: 251 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 720 - periodSeconds: 992 - successThreshold: 659 - terminationGracePeriodSeconds: 489 - timeoutSeconds: 26 + initialDelaySeconds: 28 + periodSeconds: 902 + successThreshold: 167 + terminationGracePeriodSeconds: 377 + timeoutSeconds: 998 name: manager ports: - containerPort: 9443 @@ -77947,22 +138184,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 334 + failureThreshold: 597 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 252 - periodSeconds: 964 - successThreshold: 958 - terminationGracePeriodSeconds: 657 - timeoutSeconds: 851 + initialDelaySeconds: 29 + periodSeconds: 44 + successThreshold: 540 + terminationGracePeriodSeconds: 921 + timeoutSeconds: 687 resources: limits: - cpu: "751" - memory: "208" + cpu: "330" + memory: "745" requests: - cpu: "438" - memory: "219" + cpu: "133" + memory: "185" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -77973,119 +138210,128 @@ spec: name: cert readOnly: true dnsConfig: - nameservers: - - 41sorB33 - - 2g7f - - xf options: - - name: Mx - value: wELDyO - - name: 1tcBvK23BT69o - value: hhs56 - - name: bvg - value: T + - name: 517r + value: ItB + - name: 7I + value: GXo9my5G + - name: gv1 + value: YmJ searches: - - s25 - - "55" - - HGkB - dnsPolicy: 閌k牘Ⱦ + - AhMd5p52 + - FEw4m + dnsPolicy: Ǜ(q:Ô杰ġŅCÇ_盻 ephemeralContainers: null hostAliases: - hostnames: - - wFZetw - - fGma - - mwLkljZhY8nh9 - ip: rUtWpPG + - sJyLZ + - KddZIxFk2n + - B9bk1rnVk5Nr + ip: kN0PQ8 - hostnames: - - QBs7SX - - hr - - aR - ip: o03ImUaa + - NWSWUTjt + - fHgFoE + ip: uPVpSEz + hostIPC: true hostNetwork: true hostPID: true hostUsers: false + hostname: CYFq imagePullSecrets: - - name: "Y" - - name: dMWEdsM + - name: s0Vz + - name: L initContainers: [] + nodeName: NZvHUdL6m nodeSelector: - a: r - eCJnhsKq: AE5n4RCt - hn4HoimI3: qMsr2Cp75uKw - preemptionPolicy: "" - priority: 364279596 - priorityClassName: UR + cYvlDm: Y9 + preemptionPolicy: 碏 + priority: -1485864119 + priorityClassName: pW readinessGates: - - conditionType: ɛƤ砻PƳsĕ鴆:Ɍ蘛 - - conditionType: 粢 + - conditionType: N+屓ĶmEX(!绍+BȔɝɬ + - conditionType: HÁý)_1則 resourceClaims: - - name: oZW - - name: XLtZBG - restartPolicy: 谽 - runtimeClassName: 9F1lbzmuV - schedulerName: pWZ5 + - name: kxmvmff + resourceClaimName: s8 + resourceClaimTemplateName: q1 + - name: "" + resourceClaimName: x2 + resourceClaimTemplateName: 6EB + restartPolicy: 齓ƶɌʘ!"0S|雖 + runtimeClassName: qVzat8Acax + schedulerName: M6nmzQRo securityContext: - fsGroup: -5510930515482674000 + appArmorProfile: + localhostProfile: Ft + type: Wi邟禕}Ī[薍掳霏撡媓ʤ骏 + fsGroup: -4536887929040991000 fsGroupChangePolicy: OnRootMismatch - runAsGroup: 7435962813127169000 - runAsNonRoot: false - runAsUser: 8634968706269563000 + runAsGroup: 7272330421413589000 + runAsNonRoot: true + runAsUser: -5473709056739961000 + seLinuxChangePolicy: '{' supplementalGroups: - - 4998646178116102000 - - 6581577714527332000 - serviceAccountName: Ymi8 - setHostnameAsFQDN: true + - -9171114885714277000 + - 6168321644262364000 + supplementalGroupsPolicy: XAƯÑ + serviceAccountName: z2eh + setHostnameAsFQDN: false shareProcessNamespace: true - subdomain: 8GF8 - terminationGracePeriodSeconds: 5456055603645806000 + subdomain: L + terminationGracePeriodSeconds: -861948148573582500 tolerations: - - effect: ǯ矴苅ɠ暡běJɧ - key: IiLZnjHW0 - operator: 貭螎妺'阙tɬ`^溤ɻʘ壌 - tolerationSeconds: -2823534263961733600 - value: 3uTJ - - effect: 返ƔȨ鴪ʒ-軻+Ž屜^ǻ鬏 - tolerationSeconds: 5972720753201202000 - - effect: Dp鷲Ȼtɷd´iƱbĦ岕 - operator: Ŀɖ"ɪ眭ƄxĖ鈗兣鱖显=Ȇ - tolerationSeconds: -2886177850537770500 - value: At + - effect: F + key: ETFQX + operator: bȼiÊ{ǩY鯫ʼns峩巒Ǽ + tolerationSeconds: 2660554035947068000 + value: syylX5 + - effect: Nʍɦm斨Kƭō毧潞Ʒȕ + key: 8c31 + operator: ɡZ8Ľ)Ĕ + tolerationSeconds: -1406237689282345000 + value: w9Kch + - effect: A + key: K84YU + operator: ǂ + tolerationSeconds: 3822080690470958000 + value: zhft2gwQl topologySpreadConstraints: - labelSelector: - matchExpressions: - - key: Nkpr - operator: R~脊ľ碮dž筪煺ɇJǖ暏塗Ġ - values: - - OQd - matchLabels: - USzZL: koYBIbq - py6g4Vun: x - w5GT: "N" - matchLabelKeys: - - lKa2KMJ7w - - OuX0gzH - - DS3nRVt4p - maxSkew: -623744214 - minDomains: 376208763 - nodeAffinityPolicy: 肧 嵖 - nodeTaintsPolicy: Ĺ - topologyKey: AIvqn - whenUnsatisfiable: 逩$;oɝ枂ɐ^+cÝÅ焏6 - - labelSelector: + matchExpressions: + - key: da3h5bBNK4 + operator: Ȅ泛2軵NV卡CȏƩ + - key: pA + operator: 欻\炆Y輼ʓ + values: + - 2AesdYlqMS + - Qgg matchLabels: - 1i5I4UN: 5Qq48 - s5E0VEkJ: d7 - yJxt: 7UVK6F7Li0 + 2mCu: OL + C: AQqyGD7 + faUO: Cf4OCS6 matchLabelKeys: - - l8EUPy - - OpoJ52XwW - - RP0od - maxSkew: -1858645886 - minDomains: 1623598401 - nodeAffinityPolicy: RkC熭蒁k穖eAnʗɬ8­玁 - nodeTaintsPolicy: Ȱāa×Ɠ鵍[Vp9toʤK - topologyKey: "n" - whenUnsatisfiable: uƈl塻柜Ɔi馿实Ē9潳 + - c + maxSkew: -24054755 + minDomains: -747212514 + nodeAffinityPolicy: ']鬥勗)惚ĎȰ设僞垗ɪ笼ǭ' + nodeTaintsPolicy: Ȅ + topologyKey: sb3R + whenUnsatisfiable: 群J矀矾!Hǰ + - labelSelector: + matchLabels: + QObVvDF: n1kYNTh2 + Qp: jkr + sw4gAMNy: WE9r + matchLabelKeys: + - hG3aLFd8Qp + - FXOTIK0 + - a8Co9 + maxSkew: -887211601 + minDomains: -1327719558 + nodeAffinityPolicy: 蒯aŜS奺 + nodeTaintsPolicy: DɁ菢懚Ƞ隬碭伖胴敁D癜Û栳亘m + topologyKey: PP + whenUnsatisfiable: ĵɑ*ʌª}馉誳Î櫌鋪ƃ volumes: - name: kube-api-access projected: @@ -78108,49 +138354,55 @@ spec: - name: cert secret: defaultMode: 420 - secretName: k - - name: 2hip - - name: QfSB7e1 - - name: cG + secretName: LdQAa + - name: AaZ8y --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: null - creationTimestamp: null + annotations: + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a labels: + 1D2wB0v: vTS5 + D1Nq: i8 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Zl-webhook-cert namespace: default spec: dnsNames: - - yHixING-webhook-service.default.svc - - yHixING-webhook-service.default.svc.8HDrm7 + - VyRQrGp-webhook-service.default.svc + - VyRQrGp-webhook-service.default.svc.WJ issuerRef: kind: Issuer - name: 8WTbb-selfsigned-issuer + name: Zl-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: k + secretName: LdQAa --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: null - creationTimestamp: null + annotations: + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a labels: + 1D2wB0v: vTS5 + D1Nq: i8 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 8WTbb-selfsigned-issuer + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Zl-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -78160,9 +138412,8 @@ apiVersion: admissionregistration.k8s.io/v1 kind: MutatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 8WTbb-mutating-webhook-configuration + cert-manager.io/inject-ca-from: default/Zl-webhook-cert + name: Zl-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -78170,7 +138421,7 @@ webhooks: - v1beta1 clientConfig: service: - name: yHixING-webhook-service + name: VyRQrGp-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -78191,15 +138442,19 @@ webhooks: apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: - annotations: null - creationTimestamp: null + annotations: + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a labels: + 1D2wB0v: vTS5 + D1Nq: i8 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 8WTbb-metrics-monitor + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Zl-metrics-monitor namespace: default spec: endpoints: @@ -78216,20 +138471,21 @@ spec: - default selector: matchLabels: + 1D2wB0v: vTS5 + D1Nq: i8 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 --- # Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 8WTbb-validating-webhook-configuration + cert-manager.io/inject-ca-from: default/Zl-webhook-cert + name: Zl-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -78237,7 +138493,7 @@ webhooks: - v1beta1 clientConfig: service: - name: yHixING-webhook-service + name: VyRQrGp-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -78255,75 +138511,747 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 1D2wB0v: vTS5 + D1Nq: i8 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Yv9IwD-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 1D2wB0v: vTS5 + D1Nq: i8 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Yv9IwD-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 1D2wB0v: vTS5 + D1Nq: i8 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Yv9IwD-crd-job-default +rules: +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - create + - get + - patch + - update +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 1D2wB0v: vTS5 + D1Nq: i8 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Yv9IwD-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 1D2wB0v: vTS5 + D1Nq: i8 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Yv9IwD-crd-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: Yv9IwD-crd-job-default +subjects: +- kind: ServiceAccount + name: Yv9IwD-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + AkL: gYS24 + S5EU2LQ: Khc + gbAz: a + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + 1D2wB0v: vTS5 + D1Nq: i8 + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Yv9IwD-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: Yv9IwD-migration-job-default +subjects: +- kind: ServiceAccount + name: Yv9IwD-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job metadata: annotations: - 9eKE: ayih32GI helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + helm.sh/hook-weight: "-5" labels: + 1D2wB0v: vTS5 + D1Nq: i8 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: TxdHR-crd-job + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Zl-crds namespace: default --- testdata/case-090.yaml.golden -- +spec: + template: + metadata: + annotations: + 3E: wCsxczQb47wJ6 + s4BnLGEl: XA4npDu8 + labels: + Nj49JuRWvD: vgSCfFY6G + app.kubernetes.io/instance: operator + app.kubernetes.io/name: VyRQrGp + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + - --experimental + command: + - /redpanda-operator + image: zg2YXP:Cp + imagePullPolicy: Never + name: crd-installation + resources: + limits: + cpu: "330" + memory: "745" + requests: + cpu: "133" + memory: "185" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: s0Vz + - name: L + nodeSelector: + cYvlDm: Y9 + restartPolicy: OnFailure + serviceAccountName: Yv9IwD-crd-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: F + key: ETFQX + operator: bȼiÊ{ǩY鯫ʼns峩巒Ǽ + tolerationSeconds: 2660554035947068000 + value: syylX5 + - effect: Nʍɦm斨Kƭō毧潞Ʒȕ + key: 8c31 + operator: ɡZ8Ľ)Ĕ + tolerationSeconds: -1406237689282345000 + value: w9Kch + - effect: A + key: K84YU + operator: ǂ + tolerationSeconds: 3822080690470958000 + value: zhft2gwQl + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: annotations: - DxAFTmru: 8nIlFqE - zLK: RRb - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - DZeu: yUBayuz + 1D2wB0v: vTS5 + D1Nq: i8 app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: drBf + app.kubernetes.io/name: VyRQrGp + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: Zl-migration namespace: default +spec: + template: + metadata: + annotations: + 3E: wCsxczQb47wJ6 + s4BnLGEl: XA4npDu8 + labels: + Nj49JuRWvD: vgSCfFY6G + app.kubernetes.io/instance: operator + app.kubernetes.io/name: VyRQrGp + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: zg2YXP:Cp + imagePullPolicy: Never + name: migration + resources: + limits: + cpu: "330" + memory: "745" + requests: + cpu: "133" + memory: "185" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: s0Vz + - name: L + nodeSelector: + cYvlDm: Y9 + restartPolicy: OnFailure + serviceAccountName: Yv9IwD-migration-job + terminationGracePeriodSeconds: 10 + tolerations: + - effect: F + key: ETFQX + operator: bȼiÊ{ǩY鯫ʼns峩巒Ǽ + tolerationSeconds: 2660554035947068000 + value: syylX5 + - effect: Nʍɦm斨Kƭō毧潞Ʒȕ + key: 8c31 + operator: ɡZ8Ľ)Ĕ + tolerationSeconds: -1406237689282345000 + value: w9Kch + - effect: A + key: K84YU + operator: ǂ + tolerationSeconds: 3822080690470958000 + value: zhft2gwQl + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-048.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 6e + apiVersion: Xt1bD2bN health: - healthProbeBindAddress: Kx - kind: vA2F + healthProbeBindAddress: 6h + kind: sVL4GCIy7D leaderElection: leaderElect: true - resourceName: v75JBm + resourceName: AKxfyqilz metrics: - bindAddress: V + bindAddress: "6" webhook: - port: 403 + port: 167 kind: ConfigMap metadata: annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null + VL: TMl + eGwp: ys7M labels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-config + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-config namespace: default --- # Source: operator/templates/entry-point.yaml @@ -78331,17 +139259,17 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null + VL: TMl + eGwp: ys7M labels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-metrics-reader + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -78353,18 +139281,89 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null + VL: TMl + eGwp: ys7M labels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-default + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-default rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -78377,6 +139376,37 @@ rules: - subjectaccessreviews verbs: - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: @@ -78386,16 +139416,269 @@ rules: - list - patch - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: - nodes verbs: - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods/finalizers + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - clusterissuers + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/finalizers + verbs: + - patch + - update +- apiGroups: + - redpanda.vectorized.io + resources: + - clusters/status + verbs: + - get + - patch + - update +- apiGroups: + - scheduling.k8s.io + resources: + - priorityclasses + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: - - configmaps + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs verbs: - create - delete @@ -78405,60 +139688,79 @@ rules: - update - watch - apiGroups: - - "" + - cert-manager.io resources: - - events - - secrets - - serviceaccounts - - services + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles + - nodepools + - redpandas verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumeclaims + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - delete - - get - - list - - watch + - update - apiGroups: - - "" + - cluster.redpanda.com resources: - - pods + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - delete - get - - list - patch - update - - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - pods/finalizers - - pods/status + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: + - get + - list - patch - update + - watch - apiGroups: - - apps + - coordination.k8s.io resources: - - deployments - - statefulsets + - leases verbs: - create - delete @@ -78468,11 +139770,10 @@ rules: - update - watch - apiGroups: - - cert-manager.io + - monitoring.coreos.com resources: - - certificates - - clusterissuers - - issuers + - podmonitors + - servicemonitors verbs: - create - delete @@ -78510,268 +139811,225 @@ rules: resources: - clusterrolebindings - clusterroles + - rolebindings + - roles verbs: - create + - delete - get - list - patch - update - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + VL: TMl + eGwp: ys7M + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-additional-controllers-default +rules: - apiGroups: - - redpanda.vectorized.io + - "" resources: - - clusters - - consoles + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events verbs: - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: - delete - get - list - - patch - - update - watch - apiGroups: - - redpanda.vectorized.io + - "" resources: - - clusters/finalizers - - consoles/finalizers + - pods + - secrets verbs: - - patch - - update + - get + - list + - watch - apiGroups: - - redpanda.vectorized.io + - apps resources: - - clusters/status - - consoles/status + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes verbs: + - delete - get + - list - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandas verbs: - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null - labels: - DZeu: yUBayuz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: Wo-default -subjects: -- kind: ServiceAccount - name: drBf - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null - labels: - DZeu: yUBayuz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims verbs: - - create - delete - get - list - patch - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list - watch - apiGroups: - "" resources: - - events + - persistentvolumeclaims verbs: - - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - persistentvolumes verbs: - - create - - delete - get - list - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null - labels: - DZeu: yUBayuz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo - namespace: default -rules: +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes verbs: - - delete - get - list + - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null - labels: - DZeu: yUBayuz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null - labels: - DZeu: yUBayuz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: Wo-election-role -subjects: -- kind: ServiceAccount - name: drBf - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null + VL: TMl + eGwp: ys7M labels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo - namespace: default + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: Wo + kind: ClusterRole + name: X5ghd-default subjects: - kind: ServiceAccount - name: drBf + name: gnFwZz3 namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null + VL: TMl + eGwp: ys7M labels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-rpk-bundle - namespace: default + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: Wo-rpk-bundle + kind: ClusterRole + name: X5ghd-additional-controllers-default subjects: - kind: ServiceAccount - name: drBf + name: gnFwZz3 namespace: default --- # Source: operator/templates/entry-point.yaml @@ -78779,17 +140037,17 @@ apiVersion: v1 kind: Service metadata: annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null + VL: TMl + eGwp: ys7M labels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-metrics-service + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-metrics-service namespace: default spec: ports: @@ -78798,290 +140056,374 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: L07 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null - labels: - DZeu: yUBayuz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: L07-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: L07 + app.kubernetes.io/name: S --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null + VL: TMl + eGwp: ys7M labels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd namespace: default spec: - replicas: 1077780708 + replicas: 538660550 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: L07 + app.kubernetes.io/name: S strategy: rollingUpdate: - maxSurge: 1083035120 - maxUnavailable: 1593683340 - type: 續g列Ɣ.ɳɆ+ + maxSurge: 1698929577 + maxUnavailable: 1744792834 + type: 轒EȎ攬媜Ŋȭ!ƻɋĝ瓍呹:甌8 template: metadata: annotations: - Af: o - nsW4: L5nc - qEgJ6l5Y: Jc - creationTimestamp: null + egxR7ec: njY + lIXAS: "" labels: - 2XSKh7: RHTX9zBs - 3L1V: fRaQV - 8Og: 9sewKu + 5RDmZbD: twKPkG57 + Qecs: l + SnTJ: ny4o5RX8yCM + aWG16vDCav: d4YbdR app.kubernetes.io/instance: operator - app.kubernetes.io/name: L07 - l52wT: rKC - o: fm - oLa5n: tszi + app.kubernetes.io/name: S spec: - activeDeadlineSeconds: 7426556808200361000 + activeDeadlineSeconds: 8137195839753612000 affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - - key: 4YNPv - operator: c:z0h+ǖ蹔璤>bȬkC«B. - values: - - 9jj2w - matchFields: - - key: m6mSFDJ - operator: ġȻÂɾ煇鉭葬(麸9ćǖ-Ɔ0劫 +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + - key: "" + operator: '}ƕ1ɜDȆsȡǂD桘去' values: - - IqPiu - - key: ztqx - operator: _ʞðäS撒鞏? - - key: 5k8t5 - operator: $Xƽmxɪ]Ɯ桌o3 + - Aqd + - 5Pj9nU5 + - JIcAFrGF + - key: dVMHpb + operator: "" values: - - H0 - weight: 531350691 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: + - k + - tOKWTv - matchExpressions: - - key: 356l1qk - operator: 鎨%通8ȉ2?窛đ(ɏįíyð饽w腲ɍ + - key: HBsK + operator: ɬE值Et堓菷` - key: "" - operator: 戳t樽妓m矅ǹ龎eum)猄遘擢輶醚Óå + operator: ūh;JŦȪ瑀 values: - - e + - kjdNzpt + - u3by6 + - key: f3sh8v5 + operator: 桮妌 + values: + - To + - iYEBR0IW + - x9faSamFd + matchFields: + - key: u + operator: 锞Àɞ$Ƀ + - key: uou3KQ + operator: 跴m軋[ª轰 + values: + - Gx + - Pf + - 0Oqt podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: Po - operator: ɶlJsFM揺Ðo铞ō - - key: KxYm - operator: 壨kdG倫坋Z儮|檖簻Nv綥? + - key: l0TsuVz94g1 + operator: '}+' + values: + - eXNk + - Vpy8AY + - BBWW6wicG + - key: CBlj + operator: 餮ƶ + values: + - ofcM9VKBk + - d7oFmB + matchLabels: + Bx: M6sAKG + N7: b8l2TfN06P + yZNElq8: "" + matchLabelKeys: + - 2dc + - 3StV01meR + - D + mismatchLabelKeys: + - 4MocNms9WRN + - xXVciQ + - wmb + namespaceSelector: + matchLabels: + "": Fxf + FC9avyj: u + namespaces: + - Ei9Tu + topologyKey: gtTUI7 + weight: 352051879 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: wSGdCS + operator: dzhȗ + - key: BMVNbAg3 + operator: 您`9ÿW绑,H + - key: 9WOEn5Mh8XE + operator: 扦U + values: + - bas2Fw + - "n" + matchLabelKeys: + - Vy9q + - "1" + mismatchLabelKeys: + - MA7DQ4i + - "0" + - xGKUX7UXiMmUz7 + namespaceSelector: + matchExpressions: + - key: UgSCNn0GropZx + operator: 儴窫Ü桩mj祄e + matchLabels: + 76l: c3N + L4s5Kur: HtfD + namespaces: + - C + topologyKey: Spo + weight: -954161113 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: hU4hJaJq + operator: Į羼| + values: + - eYLK + - key: C + operator: ƄʙŦàŌ硩ĵ槼Ȱ + values: + - WcCKN + - 5NTz1o matchLabels: - fd5Zyx83: wUQY + 06E49h0: UbEf + G2a3: Iz7dd + Uhpu: rqIWeSl matchLabelKeys: - - WMy6R + - "7" mismatchLabelKeys: - - SZwHr - - w1U - - 8G8t6yXwo + - JPKTQ namespaceSelector: matchExpressions: - - key: Vd - operator: N縏 - values: - - Y8MfZ - - amK05 - - pHx - - key: iYWqou - operator: 'Õ掮f<ɯ)刎軲棿鴛ǝ炄兦@ȷȺ憰 ' + - key: rvk8VYWw + operator: 玀|ǁħ璮 values: - - nvX - - do7UW - - key: zo9ciSv7 - operator: ~-ɭ + - gboly3a + - qYMqw9V + - cNVEN + - key: aW3vIV + operator: 歬釽1}Ʋł耢Ňʣ4鍝脟j疞2 values: - - C - - Z1c + - "3" + - pF matchLabels: - "": HuJ5lU - 3jRy: kaBE - shCNeEq8: 8VCDok6s - topologyKey: KsilH6PoPPG0 - weight: 1148632629 + A: tjBR + topologyKey: xIzwui + weight: 779867361 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - - key: bJt - operator: f; - matchLabelKeys: - - FQMC - - 6w5GHqG9N - - POXxmlaC - mismatchLabelKeys: - - OOhk - - RUJnYvl34I - - tiTIT - namespaceSelector: {} - topologyKey: yaMngcwS - - labelSelector: {} + - key: OxQpwolJYXu + operator: 鯹ʚʁ匶Ŏ愀郂扛[þ4矬ŏ + values: + - wPh + - key: mKRRQkKAI + operator: ĺʒǫL + values: + - 7xbgN + - eAw4iz + matchLabels: + Ayl: 9NnmG + F: JNmeRe + izqyN7gWS: LiVpUbwcO matchLabelKeys: - - WErO3r - - R1 - - 7omme + - cxr21qN3 + - "" + - pfd8 mismatchLabelKeys: - - wvL74 + - GVA6z + - w namespaceSelector: matchExpressions: - - key: 04i - operator: 舣ŏƜ屫ǑsƢ縔hODŽ + - key: ecA2NLwK + operator: 1鶰÷ʃ毰x?ɒʟŁ曇匳6 values: - - 5HLbg - - "5" + - "0" + - lDLm5J + - q matchLabels: - OoGFPD: BQbNs - WQhgu44ZdII: 2XbkPw + vnoklGOuVC9: hN1Vx8 namespaces: - - KLQj21cs - - lPKL - topologyKey: ypOInzNz + - IkwR + - R26hEScp5Oqz + topologyKey: iY podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: YkG1lBP8 + operator: I + values: + - M + - 8TdKG + - GI0k + - key: 1jE2 + operator: '拚tr棌矣:' + values: + - oWO + - 7c7dLTFPoct + matchLabels: + i: lM8gG + lGbHM: PmuZkUsB + matchLabelKeys: + - x + - VNC + mismatchLabelKeys: + - "0" + - RkAy + - 3t8PvXFQ + namespaceSelector: + matchExpressions: + - key: b6hOguxE + operator: '"ĨƗÙ颁"鰅+āɁ6Ȋ8' + - key: eh4r7GI + operator: "" + - key: hxSS82ftGV + operator: 輱憖v蕎 + values: + - p5cY + matchLabels: + B: j5 + dJd11: Xvsc + mj26Lyw: A7oJL6fXlyiV + namespaces: + - e3nw4U6hGP + topologyKey: P + weight: 1549444999 + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: ka + operator: 犁兙幕粭¢ + values: + - eeiaxE + matchLabels: + 594QWs: HaUpe + IctcNe: W9LXmi + bAU: hMgEYY + matchLabelKeys: + - OlucqhxTA + - QG4OFhr + namespaceSelector: + matchExpressions: + - key: MK3pj + operator: ʅǴ縦眪嫓b哹熑D + - key: W3iVTA + operator: Ĭ怖ȧ蜔镱竃暉卅 + values: + - 3G + - pcrdR + matchLabels: + tZEBPU: i70BhvLpdQ + namespaces: + - O + - "8" + topologyKey: O + weight: 385351436 requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - sCE6zRKBM6: Nnh2 - u4ExUV2: w - yr: wz2PC - mismatchLabelKeys: - - Tvv6K - - S - - E47R3eWM - namespaceSelector: - matchExpressions: - - key: lYXfE - operator: "" - values: - - b5eP3 - - 2U5L - - key: 01i5 - operator: 癋鲏簷Ĵɂ«Ėxzé{\Ù$醝6 - values: - - 0ZMLtwC - - TtKO - - key: KfpD - operator: :ȜU闁ƥ*@Ƃ鵊ɓɃƍ柚ɾW!A抳 - values: - - ONi - matchLabels: - "": 0yku - namespaces: - - uU - topologyKey: 6AS - - labelSelector: - matchExpressions: - - key: UX8 - operator: =g>ȚʋI楚UȁȩhɎô稞Ţɾ - values: - - wMSQ7pJHieM - - a8 - matchLabels: - cXg: PQX2vPSKR - xAxD7: s2NdT + - labelSelector: {} + matchLabelKeys: + - gtw mismatchLabelKeys: - - 8o - - GqWJ07b - - orc - namespaceSelector: - matchLabels: - "5": 8u8tWkV - ksLu7e: DJyLZOeGIG + - 3TMqPb + - m + - lBEuOKnQ + namespaceSelector: {} namespaces: - - mWMme - - OkpN4 - - zCJ3 - topologyKey: mH2Koq +<<<<<<< HEAD + - HBzv + topologyKey: ee9r - labelSelector: matchExpressions: - - key: VHW - operator: 妻 + - key: Bo3lXeT + operator: ë憛-畇J匾Ȧİ matchLabels: - "": l0im5GY - HiOR: itM + JyTmc: nF6t4FWoUh + eIaCTzevFHv: UGx + matchLabelKeys: + - s86A + - x + - hARrWalx mismatchLabelKeys: - - PEnC - - W + - oE4FScEQ + - XpwDsvKa + - asUShfC namespaceSelector: - matchExpressions: - - key: TBroOcL4 - operator: ʧÏƽ娲屃o´陴CȺČ½駇爮D - values: - - Xw - - Sm matchLabels: - OdRD: "8" - W2: m2po + JvNpLgE: "" namespaces: - - 168ZXg - topologyKey: oEYq + - vL + - mLu7RlSV + - bQRFLW + topologyKey: d + automountServiceAccountToken: false + containers: + - args: +======= + - Am7zYz + - "" + topologyKey: sN6 automountServiceAccountToken: true containers: - args: + - --configurator-base-image=mLw + - --configurator-tag=5QaeLH + - --enable-console=true + - --enable-vectorized-controllers=true - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=tr - - --configurator-base-image=MxYHsvk3O + - --log-level=BV36ELr + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: MxYHsvk3O:tr + image: mLw:5QaeLH imagePullPolicy: Never livenessProbe: - failureThreshold: 751 + failureThreshold: 681 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 167 - periodSeconds: 599 - successThreshold: 902 - terminationGracePeriodSeconds: 187 - timeoutSeconds: 755 + initialDelaySeconds: 603 + periodSeconds: 590 + successThreshold: 311 + terminationGracePeriodSeconds: 714 + timeoutSeconds: 847 name: manager ports: - containerPort: 9443 @@ -79091,272 +140433,197 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 601 + failureThreshold: 54 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 621 - periodSeconds: 191 - successThreshold: 703 - terminationGracePeriodSeconds: 320 - timeoutSeconds: 236 + initialDelaySeconds: 497 + periodSeconds: 770 + successThreshold: 143 + terminationGracePeriodSeconds: 228 + timeoutSeconds: 751 resources: limits: - cpu: "979" - memory: "649" + cpu: "572" + memory: "902" requests: - cpu: "589" - memory: "772" + cpu: "787" + memory: "738" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true dnsConfig: - nameservers: - - FNqDGX - - eMXTC options: - - name: k - value: "y" - - name: BKaHiRyOuIJ - value: Pec - - name: vrbJ7 - value: vS + - name: wzKl3Y + value: fB + - name: i7ZzzNDT + value: TfTJTHDpEwo searches: - - QmwrWFmwT5 - - "1" - dnsPolicy: 匵Hêèǟ嬀ś珡9ɣ颒仳&źEî + - qqdKjwR + enableServiceLinks: true ephemeralContainers: null - hostAliases: - - hostnames: - - qc - - EsiahLF - - "" - ip: Od94GJ - hostNetwork: true hostPID: true hostUsers: true - hostname: nX59cJ7Q1 + hostname: 9Z6f4Kp imagePullSecrets: - - name: 1ey - - name: xc1 + - name: j + - name: 6bTAtvNpkp initContainers: [] - nodeName: wzDYEmoHf + nodeName: NY1Ytifz nodeSelector: - "": fqW - 6cwd518: vDr5 - SRqdM: "n" - preemptionPolicy: IJ@Əŧɘ - priority: -68369161 - priorityClassName: Usu + FSk: 4MUoQaB + preemptionPolicy: Oĝ{ƛ譲忤錘垭]ÆŻƚ賱;Jɚ0) + priority: 254484646 + priorityClassName: cf6JR0 + readinessGates: + - conditionType: ƅ視#怵磾.TQiȗ GJ + - conditionType: ȚŦ鎙P=焜 + - conditionType: ɂɷ resourceClaims: - - name: za - - name: 2B8jAE - restartPolicy: $ɦz豭¹ľ*贲ŕ饽 - runtimeClassName: 2nrZ - schedulerName: e0h - schedulingGates: - - name: tC - - name: 3VNu + - name: S0H + resourceClaimName: 8e + resourceClaimTemplateName: yUIzP4 + - name: 5lcOJxDx + resourceClaimName: ahEI + resourceClaimTemplateName: pvO + - name: Nd74p4rn + resourceClaimName: jMy + resourceClaimTemplateName: 2LNR + restartPolicy: 針VRO瘿ɷě? + runtimeClassName: j + schedulerName: TRkIR9 securityContext: - fsGroup: 8760724915021653000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -7117884882793934000 - runAsNonRoot: false - runAsUser: 93401498521963710 - supplementalGroups: - - 6515785209000024000 - sysctls: - - name: UbiWP1Qy - value: 92c0 - serviceAccountName: B - setHostnameAsFQDN: true - subdomain: He - terminationGracePeriodSeconds: -3790827313059005000 - tolerations: - - effect: y篃b=ɠiP鞔仄 - key: BcPi3U - operator: 琦 - tolerationSeconds: 7300458800534152000 - value: EqJYLF - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: JaxhC - operator: G¾'梍<ɿ-g隆勚 - - key: Tg23Dy - operator: 鱬餼剭xYȭ舐Ȅ婜頓^>ǾMH@ƌ - values: - - r - - zR - - key: Q0q6KDuUA1A - operator: ĵ[GĆǓɠpǞ - values: - - bwz - - v - matchLabels: - GXa: lz6itoOFa - maxSkew: -1518162657 - minDomains: 1464511912 - nodeAffinityPolicy: Tȏ0呍ƙcɥK;á}^蔱ƽ鼼膘鰥 - nodeTaintsPolicy: '!ȢNJ穗勊ƨZNJŌljC黇崶' - topologyKey: BKxJdiei4 - whenUnsatisfiable: Bt髩;Ǘ乼ą仔À縍找祡 - - labelSelector: - matchExpressions: - - key: jO0waM - operator: ƻ渎áh鿒ʐT燁Ȱʼnʃ)Ŭ - values: - - ak4c - - key: WHbCk - operator: i挘枚.H苅黵彄Ʌɱ¦w轎ȤĊlʅ&ɦ - values: - - HFZw4g - - 0yGnEPt - - nMy3 - - key: gtgv2tJx - operator: 鏖- - values: - - D2j - matchLabels: - 4IEJ: dxBx - Qq: HC5nG1B2 - matchLabelKeys: - - id7 - - ZB - maxSkew: 1631460802 - minDomains: -1455938103 - nodeAffinityPolicy: ÛĊc剖#OÛæ啰薖rK0侽ȓ戃Y® - nodeTaintsPolicy: Æ怅Ċ-Ȕ硱AohȠWb&躶伭轿ɒ§朩 - topologyKey: "" - whenUnsatisfiable: Ǩ1ļ/礷杏UÊ慉1殹ʡłƳ肷y断阩Ķ - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: Y2CEr - - name: yus - - name: zb ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null - labels: - DZeu: yUBayuz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - L07-webhook-service.default.svc - - L07-webhook-service.default.svc.o - issuerRef: - kind: Issuer - name: Wo-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: Y2CEr ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null - labels: - DZeu: yUBayuz - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: Wo-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: L07-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + appArmorProfile: + localhostProfile: zOuhT7N4vTs + type: 鷗Ȧ沀xȖ + fsGroup: 1668108077204234800 + fsGroupChangePolicy: Always + runAsGroup: 5112526263429491000 + runAsNonRoot: false + runAsUser: -9132398665363839000 + seLinuxChangePolicy: "" + supplementalGroups: + - 7458942287946992000 + supplementalGroupsPolicy: "" + sysctls: + - name: ARP + value: W2nV + - name: PzJZ7bTyME + value: fLcFul + - name: z + value: zZ6Y0 + serviceAccountName: 1w84qSq8O + setHostnameAsFQDN: false + shareProcessNamespace: true + subdomain: vxhb + terminationGracePeriodSeconds: -7516157005602515000 + tolerations: + - effect: 苠Ƿʏi + key: 9w + operator: Ʌ釭ƹF鬟-t吐Ɗǣŭ顗ʘ軆焨j + tolerationSeconds: -5318184351484289000 + value: U7 + topologySpreadConstraints: + - labelSelector: + matchExpressions: + - key: JA01EBpuq25 + operator: ȣ#蛲仮ħʈȉp + matchLabels: + 1D8H: cQCf + aZ: ByV7 + sKX: JjTcaPko + matchLabelKeys: + - kok + maxSkew: 1470764829 + minDomains: -1190736305 + nodeAffinityPolicy: 様跞撯予筬鱆vƫgǽf緇炰ęµ(ʩY + nodeTaintsPolicy: 綂 + topologyKey: 1xrnXcBe + whenUnsatisfiable: 不 + - labelSelector: + matchExpressions: + - key: Q9zg + operator: ĘL + values: + - dVw + - key: g8UY2pMIV + operator: ',)ɥHt姜ɝlȖÄ1艢ȬĆŻ禃' + values: + - 631K + - WUKa8txA4MPn + matchLabels: + CVWAP: XI + TWZI: 1cbebwT + matchLabelKeys: + - Hx + maxSkew: 1418119814 + minDomains: 224361274 + nodeAffinityPolicy: FƦ_6-Ā;<肠ɘT + nodeTaintsPolicy: '%眉靵b' + topologyKey: LyU + whenUnsatisfiable: '|熘dž' + - labelSelector: + matchExpressions: + - key: fqcCv + operator: ō肼J煪ȰĘdzŨ + values: + - de + - key: "6" + operator: 簗酚ŗ佫耶X + values: + - ytJJQQ5M + - cs + - XD2DfaA4 + matchLabels: + LZB9IVOW: pqgyb + zNJ: H3lCFv + matchLabelKeys: + - 6q3iAdF + maxSkew: -1300972058 + minDomains: -1226571068 + nodeAffinityPolicy: ŗt粢Ȇƿǧ餑ɚR)易¦pƪ砂4Ěa + nodeTaintsPolicy: ŝX踦 + topologyKey: dOqlqJqFf + whenUnsatisfiable: ɐʟ硝ĜɝÃ足ę¡J魯Ȇƀ + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: annotations: - 2Kv4rY7: ihBdOLL - creationTimestamp: null + VL: TMl + eGwp: ys7M labels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: Wo-metrics-monitor + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-metrics-monitor namespace: default spec: endpoints: @@ -79373,45 +140640,13 @@ spec: - default selector: matchLabels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: Wo-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: L07-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -79419,75 +140654,42 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - DxAFTmru: 8nIlFqE + K: b + Uz: XJE03 helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - zLK: RRb - creationTimestamp: null labels: - DZeu: yUBayuz app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: L07 - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - nI2ZSs: 4AI8h - name: drBf-crd-job + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: gnFwZz3-crd-job namespace: default --- testdata/case-091.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true +automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - L1Wi1Vv: trqviAw - arzbYiweWtKdUO: e - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: 7QeW - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: 2g21wLfvha - health: - healthProbeBindAddress: M - kind: hF - leaderElection: - leaderElect: false - resourceName: ZaKPCipuSAF - metrics: - bindAddress: fpiHY - webhook: - port: 288 -kind: ConfigMap -metadata: - annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null + K: b + Uz: XJE03 + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w-config + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: gnFwZz3-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml @@ -79495,44 +140697,122 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null + VL: TMl + eGwp: ys7M + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w-metrics-reader + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: gnFwZz3-crd-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions verbs: + - create - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null + VL: TMl + eGwp: ys7M + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w-default + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: gnFwZz3-migration-job-default rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -79545,6 +140825,37 @@ rules: - subjectaccessreviews verbs: - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: @@ -79554,6 +140865,16 @@ rules: - list - patch - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch - apiGroups: - "" resources: @@ -79564,6 +140885,23 @@ rules: - "" resources: - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -79575,12 +140913,10 @@ rules: - apiGroups: - "" resources: - - events - - secrets - - serviceaccounts - - services + - configmaps verbs: - create + - delete - get - list - patch @@ -79622,10 +140958,22 @@ rules: verbs: - patch - update +- apiGroups: + - "" + resources: + - secrets + - serviceaccounts + - services + verbs: + - create + - get + - list + - patch + - update + - watch - apiGroups: - apps resources: - - deployments - statefulsets verbs: - create @@ -79689,7 +141037,6 @@ rules: - redpanda.vectorized.io resources: - clusters - - consoles verbs: - create - delete @@ -79702,7 +141049,6 @@ rules: - redpanda.vectorized.io resources: - clusters/finalizers - - consoles/finalizers verbs: - patch - update @@ -79710,7 +141056,6 @@ rules: - redpanda.vectorized.io resources: - clusters/status - - consoles/status verbs: - get - patch @@ -79723,58 +141068,161 @@ rules: - get - list - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: w-default -subjects: -- kind: ServiceAccount - name: 7QeW - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w-election-role - namespace: default -rules: - apiGroups: - - "" + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com resources: - - configmaps + - podmonitors + - servicemonitors verbs: - create - delete @@ -79784,16 +141232,21 @@ rules: - update - watch - apiGroups: - - "" + - networking.k8s.io resources: - - events + - ingresses verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - policy resources: - - leases + - poddisruptionbudgets verbs: - create - delete @@ -79802,684 +141255,138 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - persistentvolumeclaims - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create - delete - get - list + - patch + - update - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: w-election-role -subjects: -- kind: ServiceAccount - name: 7QeW - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null + VL: TMl + eGwp: ys7M + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w - namespace: default + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: gnFwZz3-crd-job-default roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: w -subjects: -- kind: ServiceAccount - name: 7QeW - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: MK ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: MK-webhook-service - namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: MK ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w - namespace: default -spec: - replicas: 465956058 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: MK - strategy: - rollingUpdate: - maxSurge: 114116698 - maxUnavailable: 1318520614 - type: RollingUpdate - template: - metadata: - annotations: - b: "" - og: TTk - w: Ec1C5ZYz - creationTimestamp: null - labels: - "": 1u - app.kubernetes.io/instance: operator - app.kubernetes.io/name: MK - rC: NsL - zMPbD3oC9e: "78" - spec: - activeDeadlineSeconds: -1714400685903453000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: wT - operator: ¬Ǡİ - values: - - K8zVs6 - - OiW9rn - - NSB50 - - key: xJD - operator: 匽rȼ&鉘ǢȽ@杊bµ£薏楽敬踵Ȕ}矁 - values: - - AnJdD - matchFields: - - key: kDJ - operator: 轈塍懿鳛FĽǏ翼×鉁ca - values: - - 9HbNE - - WbS9R0Io7lh8 - - "" - - key: 19V7X - operator: Z懲豝玗鸚ŝ - values: - - Wgt - - VAiR3yri - - Mv4ZYnRW - weight: -1575671648 - - preference: - matchExpressions: - - key: GclSjduBY - operator: 許宆柑Ŀ% - values: - - A - matchFields: - - key: JSUjCW - operator: 迿YóÕP碋^ƛ県B故p¹ɴǒ - values: - - NYS - - H5WI8 - - 80DCQFaVvMUZ - - key: FrjwMk - operator: 5] - - key: "" - operator: ),2C - values: - - Dr - - Utrrr - - XO - weight: 358541297 - - preference: - matchExpressions: - - key: ap - operator: 碸`檄E隅ìXkÍǜ?投|EN覯Ȃ抢 - - key: vRZs5 - operator: s|, - - key: dQtdl - operator: 礫 - values: - - H - - Ngxjd2J - - zLKiCr632U - matchFields: - - key: lcT - operator: h`ñƞ柳ʨļ惜rŗ湫 - - key: 2CoC40 - operator: ',''ɛ惖ØtŴ氲_Ĥ' - values: - - qzkngYp7 - weight: 1573697926 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: iqEK - operator: "" - values: - - BnEmj - - Pu - - Yl7 - - key: xHJ - operator: GŸɊț魁O­ - values: - - ebQ - - iZ6 - - SnW5FIj7WT4 - matchFields: - - key: T6TMAw1 - operator: 幔Ɛ諌ȕ\ǫVƯ - - key: DIQvo1 - operator: 誘殀世=~­7Ĉ啮êB - values: - - 11FTC - - 4cBApZ - - key: W - operator: kø綘荦别鬁ɽKȒ^ʡy - values: - - 0lb - - iKxZOBh - - jrY3DM5 - - matchExpressions: - - key: EpMu0d - operator: ȷ晻f蕏l喽gd穁27ʤ=6 - values: - - tI8ubj - - e3MpfKkXN - - key: dsp6SlP - operator: 攟Ʃ肛櫃ǿ毶đ導`ƞ賷q彝ǖģ - values: - - 1zU - - 8E - matchFields: - - key: DoXLSFX - operator: e戄ɷ - values: - - SFVnaP4 - - key: pSlK - operator: ßĔ - values: - - GnUUD3Kyfwg - - 93NU5k - - key: LOXYaRMex - operator: ßɜ(蚄罺Ĕ撌癲柃XGL瀺Ⱦ - values: - - 8nbcJ7z3 - - iOH53FU - - gTbKoNIUO - - matchExpressions: - - key: x - operator: ȓ6°ȓɍ{@懭aDǐ靲鋲ș枤k - values: - - zE - - key: p9Qx3FpXwt - operator: gJǁƎODŽɗ"ß - matchFields: - - key: 3rQOU - operator: Ÿ惞ȟɝ,ɝȟ - values: - - iW6 - - ay - - zj - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: dU6OlTc - operator: Éƀ簈焈凧偍u嫈 - values: - - 5oY9y - - pI9 - matchLabels: - BhzF2R7y: awLd - Fe356q0RV: uCVBS - pqTa: CNZsT - matchLabelKeys: - - 93D - mismatchLabelKeys: - - nzWkLm6n8lH - - gKn - - xskOFuW5h - namespaceSelector: - matchExpressions: - - key: oFAencrI - operator: 筢 P ȶ2銍条纫 - values: - - t - - "" - - key: aJGJ6 - operator: "" - matchLabels: - d: b7X2 - owpA28: rcy - v: PUZxD1d - namespaces: - - WHo6n7 - topologyKey: bvEpADM - weight: 1226445040 - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: 5cV11ykE2n - operator: čǗ\ƍ椠/+緤ïɚl嚶Ƨ?ȷ9薷韼 - - key: Ey8lEo0 - operator: ɇƻm瞤%ʂ - values: - - Bk - - key: QpOW - operator: 5ǸlØɱz髪yƤ諽5裵3龽3|W - matchLabels: - "": WFBa19zDl - UaEG9BtE: SyTK7uXmk - mismatchLabelKeys: - - JGD5a - - ILrnAt - namespaceSelector: - matchExpressions: - - key: nY6 - operator: '*:Ž漡÷ɅɥƑ竼漛àĸ' - values: - - "31" - - lnT - - Uy - - key: NLmeQg3Y - operator: Á,ǟ芛冟昢ř7 - matchLabels: - vO: TAoy2 - namespaces: - - GPcfE - - KTNCRWxAgg - topologyKey: 0yYmj1xk - weight: -197811464 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: AzMtKeOS - operator: ƹʮ敳盗)-E7"ǰ莱Ə帗5櫮 - values: - - yFqc - - key: rTymvATFQX - operator: ZEʫɑƑWǔŤ阸糴\濥ȝ{ǭG - values: - - 2zL7b1cn - - IKN8 - - key: WL7P9y - operator: '}2j饚Ȝ-V貣$džsoơĽ' - values: - - vyzptrSDQ - matchLabels: - T: AFZwOi - omxkx50: F - matchLabelKeys: - - aAm - mismatchLabelKeys: - - coHImv - - 6qfwr - - kTRU - namespaceSelector: - matchExpressions: - - key: ZF4 - operator: ʇ志祏鶜 - values: - - goksXlnx26ii - namespaces: - - XwnZ - - oZedscASIS - topologyKey: WJOleyoe9AilS - weight: -1949722643 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - "": K - ekEjzFJABpF: nTd5kM - ga: zBY9Zw - matchLabelKeys: - - ndb - - kyV41U - mismatchLabelKeys: - - RZhrX - - WsnXDwJs - namespaceSelector: - matchExpressions: - - key: EC9dNce7 - operator: ­XʄǕ - values: - - 4uelgr - - RY47 - - key: YKBtnp - operator: Ľȿ8ŧ` - matchLabels: - Yv3Ec: "767" - namespaces: - - Uh - - TmlA4 - topologyKey: LTB - - labelSelector: - matchExpressions: - - key: LZMZwu8c1 - operator: 宾ɯ - values: - - 4VUoI - - qgTyUz - - key: Pn4 - operator: Ŀɫ濖Q頩ěȩƐ!唋\ - values: - - pzD5Q - - pAz - - aTUO0D - namespaceSelector: - matchExpressions: - - key: H6rFVua - operator: 唗 - values: - - oXdmC - - YBB - - jWtX - - key: "0" - operator: "" - values: - - x7 - namespaces: - - lPMp - topologyKey: RRm1TlG9U - automountServiceAccountToken: true + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: gnFwZz3-crd-job-default +subjects: +- kind: ServiceAccount + name: gnFwZz3-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + VL: TMl + eGwp: ys7M + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: gnFwZz3-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: gnFwZz3-migration-job-default +subjects: +- kind: ServiceAccount + name: gnFwZz3-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-crds + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + 5RDmZbD: twKPkG57 + Qecs: l + app.kubernetes.io/instance: operator + app.kubernetes.io/name: S + spec: + automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=lWf3R8lv - - --configurator-base-image=zZLbhNE - - oMtn - - Q - - 3z6Z0vrvjWuC + - crd + - --vectorized command: - - /manager - env: [] - image: zZLbhNE:lWf3R8lv - imagePullPolicy: IfNotPresent - livenessProbe: - failureThreshold: 693 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 775 - periodSeconds: 140 - successThreshold: 898 - terminationGracePeriodSeconds: 893 - timeoutSeconds: 373 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 772 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 542 - periodSeconds: 202 - successThreshold: 25 - terminationGracePeriodSeconds: 51 - timeoutSeconds: 467 + - /redpanda-operator + image: mLw:5QaeLH + imagePullPolicy: Never + name: crd-installation resources: limits: - cpu: "355" - memory: "848" + cpu: "572" + memory: "902" requests: - cpu: "654" - memory: "528" + cpu: "787" + memory: "738" securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - "" - - wGa - - cbD6vx - searches: - - WT3ga - - BMNWNT - dnsPolicy: ɺ甾&çɬʝ洳 - enableServiceLinks: true - ephemeralContainers: null - hostNetwork: true - hostUsers: true - hostname: sAG imagePullSecrets: - - name: l - - name: wZ - initContainers: [] - nodeName: btGPq - nodeSelector: - 1j: XVI1ow - L: 4vYfc1B - gcrub: N4XDel - preemptionPolicy: ƣ@j箹ņkxĜŜY蘈捤UR萯ɋ繒面 - priority: -648803911 - priorityClassName: 9ayqBWp - readinessGates: - - conditionType: 9O?H筩愸ƚ - resourceClaims: - - name: grLm6 - - name: WmLc - restartPolicy: ʀŲ帰養Ę盀庶涶ſ蘷黋{羐í%ɤƛŅ笱 - runtimeClassName: e - schedulerName: ZJBO6zBd70 - schedulingGates: - - name: vRoMM - - name: bkvQxgtg - - name: g55 - securityContext: - fsGroup: 9036213274773337000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -4181610202844855300 - runAsNonRoot: true - runAsUser: 3208304726385965000 - supplementalGroups: - - -4886089164957959000 - - -7700939358399440000 - - 778039103595347000 - sysctls: - - name: cCfV - value: lY - serviceAccountName: YJp - setHostnameAsFQDN: false - subdomain: 6ezP - terminationGracePeriodSeconds: 8674922963466259000 - tolerations: - - effect: Ŝ弋ǿ'ȪǹB壮蛵"ò憇!IɧĪ - key: UBue0C - operator: ŶƉc壋仉é - tolerationSeconds: 2544005659124591600 - value: 8KbM - - effect: +鳷L92.``ʯ鐸 - key: q - operator: ',H' - tolerationSeconds: 340853087111583100 - value: DG4bCMspM3cC - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: j4on6hLt - operator: Ɇ泄2)翀QPk枾虭R - - key: vLFYlvjI4 - operator: ȃPʫÓ¾ƃē.ɮʀ - values: - - "" - - JTIuTIpxEX6 - matchLabels: - "": nlKLp - 0vL: rB28X - nM9J: 4MiZ23 - matchLabelKeys: - - zSNRqjI - - PPHN - - 9cbd1s - maxSkew: -1182862367 - minDomains: -1147199766 - nodeAffinityPolicy: Ì7C衿 - nodeTaintsPolicy: Ȫ白澠Ǭɖ4ƙȔTɴƅt轇ŝ峮ťLĒ竑 - topologyKey: 3ZAQ3zLPLaDHQa - whenUnsatisfiable: 竺剅¤1]Ő_IJKDŽ勦 - - labelSelector: - matchLabels: - nnmbVf: zS - matchLabelKeys: - - 5ZZi - - oM8BDL - - KIAllk7m1 - maxSkew: -1740710177 - minDomains: 70262932 - nodeAffinityPolicy: 霵»(Ǧ=|ʦ - nodeTaintsPolicy: 鐧4ɧȞ昕稚獂祭緓{立詼霫鶉Ɯ - topologyKey: Tj - whenUnsatisfiable: 鎥ɄƁ:呰ıįL+ef - - labelSelector: - matchExpressions: - - key: 4HXx2h9w0e - operator: ŠƼ鹴2 - values: - - "3" - - key: S59C23AuYL - operator: E{ǽ - values: - - CpLhWj - - cz - matchLabels: - OjRs: e - maxSkew: 719914443 - minDomains: 1945209038 - nodeAffinityPolicy: 绽'ɔ睓嶵A蠫ŵ折Ĥ蝳鵽µ扶哭軉q - nodeTaintsPolicy: ',ǿð騏ǫż+ű' - topologyKey: P7V1U - whenUnsatisfiable: 觽o5 + - name: 4maJ + - name: YfWv + - name: E9auhs + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: gnFwZz3-crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -80499,244 +141406,742 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: Nl5My --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate +apiVersion: batch/v1 +kind: Job metadata: annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: redpanda-serving-cert + app.kubernetes.io/name: S + app.kubernetes.io/version: v25.3.1 + djhp: dDxn5K + helm.sh/chart: operator-25.3.1 + j7k: M0STNp + name: X5ghd-migration namespace: default spec: - dnsNames: - - MK-webhook-service.default.svc - - MK-webhook-service.default.svc.1Sdc1S8Vj - issuerRef: - kind: Issuer - name: w-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: Nl5My + template: + metadata: + annotations: {} + labels: + 5RDmZbD: twKPkG57 + Qecs: l + app.kubernetes.io/instance: operator + app.kubernetes.io/name: S + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: mLw:5QaeLH + imagePullPolicy: Never + name: migration + resources: + limits: + cpu: "572" + memory: "902" + requests: + cpu: "787" + memory: "738" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: 4maJ + - name: YfWv + - name: E9auhs + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: gnFwZz3-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/case-049.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: hP17pQUDDc + health: + healthProbeBindAddress: adJgfr + kind: 0O0g + leaderElection: + leaderElect: false + resourceName: "" + metrics: + bindAddress: Uh + webhook: + port: 86 +kind: ConfigMap metadata: annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null + FS0CCFre54m: 58hk3 + zeZ1yo: BlUU labels: + "6": nwe + SNwt: nldfORk app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: w-mutating-webhook-configuration + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF-config namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: MK-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - Y6pF: 16c - qjH: CdtB5 - sseemE: EObsGst - creationTimestamp: null + FS0CCFre54m: 58hk3 + zeZ1yo: BlUU labels: + "6": nwe + SNwt: nldfORk app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: w-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF-default-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: w-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: MK-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + FS0CCFre54m: 58hk3 + zeZ1yo: BlUU + labels: + "6": nwe + SNwt: nldfORk + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - L1Wi1Vv: trqviAw - arzbYiweWtKdUO: e - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + FS0CCFre54m: 58hk3 + zeZ1yo: BlUU labels: + "6": nwe + SNwt: nldfORk app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MK - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - t: W - wH2b: "" - name: 7QeW-crd-job - namespace: default --- testdata/case-092.yaml.golden -- + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - Hs8Cfsf: SbOxXEt - creationTimestamp: null + FS0CCFre54m: 58hk3 + zeZ1yo: BlUU labels: - GvLRN: sCR + "6": nwe + SNwt: nldfORk app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v25.1.4 - gi: 9j2 - helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ - name: LjYLOL6C + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: ZvF-default +subjects: +- kind: ServiceAccount + name: ynJU namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: AyCq0rx4 - health: - healthProbeBindAddress: hEh - kind: jC3houv - leaderElection: - leaderElect: false - resourceName: 4wmsG - metrics: - bindAddress: Po1Kv7 - webhook: - port: 309 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - 9LGf5lZUJKBVgzZ: YR - syzBd0: yol8 - creationTimestamp: null + FS0CCFre54m: 58hk3 + zeZ1yo: BlUU labels: - GvLRN: sCR + "6": nwe + SNwt: nldfORk app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v25.1.4 - gi: 9j2 - helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ - name: f3nfwQai-config + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: ZvF-additional-controllers-default +subjects: +- kind: ServiceAccount + name: ynJU namespace: default --- # Source: operator/templates/entry-point.yaml @@ -80744,19 +142149,18 @@ apiVersion: v1 kind: Service metadata: annotations: - 9LGf5lZUJKBVgzZ: YR - syzBd0: yol8 - creationTimestamp: null + FS0CCFre54m: 58hk3 + zeZ1yo: BlUU labels: - GvLRN: sCR + "6": nwe + SNwt: nldfORk app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v25.1.4 - gi: 9j2 - helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ - name: f3nfwQai-metrics-service + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF-metrics-service namespace: default spec: ports: @@ -80765,26 +142169,25 @@ spec: targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: qv3g + app.kubernetes.io/name: bVx --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: annotations: - 9LGf5lZUJKBVgzZ: YR - syzBd0: yol8 - creationTimestamp: null + FS0CCFre54m: 58hk3 + zeZ1yo: BlUU labels: - GvLRN: sCR + "6": nwe + SNwt: nldfORk app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v25.1.4 - gi: 9j2 - helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ - name: qv3g-webhook-service + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: bVx-webhook-service namespace: default spec: ports: @@ -80792,341 +142195,240 @@ spec: targetPort: 9443 selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: qv3g + app.kubernetes.io/name: bVx --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: annotations: - 9LGf5lZUJKBVgzZ: YR - syzBd0: yol8 - creationTimestamp: null + FS0CCFre54m: 58hk3 + zeZ1yo: BlUU labels: - GvLRN: sCR + "6": nwe + SNwt: nldfORk app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v25.1.4 - gi: 9j2 - helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ - name: f3nfwQai + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF namespace: default spec: - replicas: -640359018 + replicas: 1281010026 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: qv3g + app.kubernetes.io/name: bVx strategy: rollingUpdate: - maxSurge: 271259276 - maxUnavailable: 434662353 - type: 8Nj"^ȨiĠ煆鱥邵Sdžz6 + maxSurge: 1259310515 + maxUnavailable: 2071862544 + type: /]^āC$>烶 template: metadata: annotations: - 0MHGObJ: 3swt - 72goJNc: T3kiEhZ0c - aeP0Xjf: BEhxl - x: y395 - creationTimestamp: null + m1t: M labels: - Ez65gbl: FkifNNg - ST: noxhcU3w app.kubernetes.io/instance: operator - app.kubernetes.io/name: qv3g + app.kubernetes.io/name: bVx + fmJQQTAw: MFh + gOynA8t8f: kHVVM spec: - activeDeadlineSeconds: 1283089350938494200 + activeDeadlineSeconds: -3972887313419907600 affinity: nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: Hyf - operator: ȸ珖řb»鸤 - values: - - hBcM96l - - key: VbE - operator: ǻ駉 - values: - - BJobX - matchFields: - - key: 5zN3 - operator: TiǦ}qªɋ\ʫ缗sn釣鄉霧 - values: - - a - - xJGrL - - sH - - key: h2khTpu1 - operator: 豷 - values: - - TgE3T28e2xM - - 8X - - key: 1lewW9 - operator: 収?'ƣ倔aF - values: - - 81vaIczUOh - weight: 1392185488 requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: 7s2CI - operator: ÍȦ待úɬ葭ʒ - - key: HILp27o - operator: 怀媲ÉƗ紌遼W绑NJR - values: - - nZjMm5xOjT - - 1srsB - - 8JbslUta - - key: eURCi4 - operator: "" - values: - - UaRk7gAPblI - - b6j0RwC - matchFields: - - key: Pzytt7e - operator: '''r殍ƹG讗Ö汓邬靆ǝŮ' - values: - - 0MKfN - - key: adCfSY - operator: '!' - values: - - D3J - - PV2Rk29dyvs - - xN4ClC - podAffinity: {} - podAntiAffinity: + nodeSelectorTerms: [] + podAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - - key: 92qa - operator: ' 碖' - values: - - 8kt4 - - t2zwPqJT7B2 - - key: w2uZ - operator: 鱧毛o}ɩ7ã1锽楰脼nMl + - key: e + operator: '%盼ğZÈħ' values: - - ui - - key: 3e - operator: 鐭瀱p媱齷Sĩ漜áʙ-sɴʔȠ»遤 + - DDuYKFyuR0 + - key: vMe3n5gRQ0L + operator: '|抩oɐ}ƥ垓ȓǥE¾僘ɡ' + - key: iN8qTwO + operator: G拊Ɋ¶%ƙc¿ɕA4珅弊 values: - - 4KW - - 3SfR2ZTdr5 - - Gr + - 4J + - tWrfXjBXm9 + - 5l7CVs matchLabels: - NYpePV: "" + FyPxiObe: VBH + b: Kkf + d9s8IRwd: mw5UF0OSgN matchLabelKeys: - - vbEhwb + - ycmEUkpM + - 9O mismatchLabelKeys: - - c - - siyP1i - namespaceSelector: - matchExpressions: - - key: 46YU - operator: 瞮@ - values: - - 0t - - Tsm - - UHZEqL2WN - - key: 2TgUz - operator: Ŗ]茏 2琥嶉>j - values: - - NtFw - - c8ocx6 - matchLabels: - Xd: RBMRgt - fB5VVZRnFNF: Ch5hN9u - topologyKey: Gdjao5d - weight: 1863276625 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: En - operator: Ē芾4ȠǪb(ėWáVƂ泅喂Ȩ旞 - values: - - 6fe - - key: rLrYr - operator: 9蜚ă#Ƨ蠯Nj羖笷篑Ū - - key: FaCGY7 - operator: 3痯Ɨ<苺-Ȅ歑ʡ - matchLabelKeys: - - RXoII - - MM - - T7DSb1C + - "y" namespaceSelector: matchExpressions: - - key: v - operator: 匟oƁ - values: - - NqF - matchLabels: - lYQfuaC: et1FOhjB6u0bn - topologyKey: 2DrH - weight: -72563172 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: WYvcZ - operator: ±ƫU諴B + - key: k2e + operator: 嶯Ư窀扄瞴姝'ƚ噽坋ȼoMG values: - - sVGIg93D - matchLabels: - jVjdQMRjClk: 7yWJ - mismatchLabelKeys: - - 2nB - - zks8 - - K0kGATK1f - namespaceSelector: - matchLabels: - RP7sq: qPxpKFpXpqj1y + - PSVAL + - J15RO namespaces: - - SYk38bH - - ZzryZH - - RmkISjQ - topologyKey: tijSyG - weight: 1559885295 + - eM1JTi + topologyKey: QZAxW6l + weight: -1492412454 requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - - key: lsCmzZ - operator: 9<ÞĚC膈摅űƨʜƉ訪ƕ主Ƭ - matchLabels: - 14zlKzVn0HhY: "" - matchLabelKeys: - - oWA1G - - 6prHp9Q - mismatchLabelKeys: - - FM - - aAVExkvDNy - - eaVvyBfoE - namespaceSelector: - matchExpressions: - - key: 53Nk066h - operator: N6K勖v夤?6ń瞩& - - key: 1THOSy - operator: ËĜȣ釓ï扻9浓D礌 + - key: zwGONwZ + operator: +菵ū靣 values: - - aqLudQ - matchLabels: - F: fuxu - IwcO: 2IzN2XSxxoK - namespaces: - - h - - gr4pab4sPh - topologyKey: QiOfKmkr7 - - labelSelector: - matchExpressions: - - key: 0ww - operator: "" + - OW + - Acub4 + - lZCc8 + - key: af5col7l + operator: 鹪 values: - - btwHX + - L3mmG + - key: Ej85qV + operator: ğ蚈Ů-熣铵 + values: + - qdpnmI + - ErGz9 matchLabels: - TRx: tMVTwhtem - bW: TN8KWOD - h4: BP - matchLabelKeys: - - whE630QW - - QEbQ929uIHgP + X0dsEB: O3CKEbSEy mismatchLabelKeys: - - Bb38 + - 9pN3I + - "2" namespaceSelector: matchExpressions: - - key: eB - operator: KĞ<7I鈺琫w=>掷瀿慅®[ - values: - - CPT1QEsYs - - VAt - - s - - key: 8IgFJ - operator: ¥氎裰}WL - values: - - Cly8CZuj9 - - IkiN - - key: bJjoTw8H - operator: '>w絀8ÎQ!珳=ŎBđƢ' + - key: cAE87l + operator: Ƿ%żȌ~神ʡUŸ values: - - xEUM - - A0ntQcf6J012e - - ZFsEi4 - matchLabels: - Jv: v - mE8A: 0SLIrs + - SmKZ + - kjZ1 namespaces: - - hDkSA - - miWLozihw - topologyKey: BT + - QY3D + topologyKey: jmw - labelSelector: matchExpressions: - - key: TFwaHQ - operator: 佝 + - key: oGGwqYB + operator: vɿȩ紣~Ȱ阹¹擝W癊F&ɣŮ几ʏ臈ʍ values: - - XS7VdS2jiB5iJ1 - - dkr - - CvQohLd + - YX5MF + - key: OHLjXJX + operator: 傕ŃdĬj賊xDƱ}ʒ鳐kT`Ɏ + values: + - VchMOigj + - IqnI + - key: j7w + operator: ɗȧĹJ鞖碸ɠ(魞 + values: + - T4eZ + - K0e3 + - mXjv matchLabels: - ROMUu: RziG - lfCj: LL + pMfSjnA: 4VS + matchLabelKeys: + - TtJxvfV9TP + - YVsowtA mismatchLabelKeys: - - e1sxrTk + - 48i + - "" namespaceSelector: matchExpressions: - - key: J2 - operator: '''圢揿辔>裉ĈM怔ğȶ乲ǑǙB' + - key: RHKcOEL + operator: 揣ʊʁƱ天 values: - - BhbfW - - Rapg6wcFsFY - - key: Q4sx - operator: Ĕrœ膯J騑1櫣fn轾v + - 0Wu60bZOZ + - 0u + - key: px3jxSI + operator: \åńǣöÈɔŤƹɥ惷獃淆 values: - - l7yQI - - Gd - - 7qhas45TT - - key: E - operator: 瞳y + - "" + - AFH + - key: BYIEE6iQ + operator: GN°鋶w贾ƍȳ¥s缤 values: - - zHyUNJ - - e - matchLabels: - A1aTpjMJ: DR4Q1G - a9vAgM3: r4Q1jQTko - iL: ZScBjRtF + - eZg2e + - YIzkqfQufna namespaces: - - UB - - Y6 - topologyKey: H8 - automountServiceAccountToken: false + - atwlKhUlw + topologyKey: AR + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: j + operator: Sȿ#½ƸDzǀ5 + values: + - sruWIVR5w + - Uit + - key: W1GhP7 + operator: ýi + values: + - zyFIVvKWgn + - key: iTMRL7 + operator: =詔鼚Ʉ慹崪科 + values: + - hr5rc + - BX + - "" + matchLabels: + 5qwB4: vk6Fn1lQ + matchLabelKeys: + - 66mFg + - PsE0wzWN + - nZ2G + mismatchLabelKeys: + - LWB + namespaceSelector: + matchExpressions: + - key: mD7kTKTQ + operator: 宁啉Rɾ + matchLabels: + "20": vEPGu + R9uur: PVsy + lIq: 4p + namespaces: + - M + - 3GZVr + - QN + topologyKey: 9nbt + weight: -224186154 + automountServiceAccountToken: true containers: - args: + - --configurator-base-image=ZuVTlT + - --configurator-tag=J + - --enable-console=true + - --enable-vectorized-controllers=false +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) - --health-probe-bind-address=:8081 - --metrics-bind-address=:8443 - --leader-elect - --webhook-enabled=true - --webhook-enabled=true - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=EyNNr90u1 - - --configurator-base-image=6C - - IoP - - oEPSF - - w659VcIIlO + - --configurator-tag=HAScR + - --configurator-base-image=C9o command: - /manager env: [] - image: 6C:EyNNr90u1 - imagePullPolicy: IfNotPresent + image: C9o:HAScR + imagePullPolicy: Never livenessProbe: - failureThreshold: 42 + failureThreshold: 391 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 33 - periodSeconds: 217 - successThreshold: 427 - terminationGracePeriodSeconds: 585 - timeoutSeconds: 793 + initialDelaySeconds: 425 + periodSeconds: 631 + successThreshold: 167 + terminationGracePeriodSeconds: 927 + timeoutSeconds: 122 name: manager ports: - containerPort: 9443 @@ -81136,22 +142438,22 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 750 + failureThreshold: 660 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 888 - periodSeconds: 672 - successThreshold: 953 - terminationGracePeriodSeconds: 179 - timeoutSeconds: 755 + initialDelaySeconds: 13 + periodSeconds: 781 + successThreshold: 780 + terminationGracePeriodSeconds: 784 + timeoutSeconds: 696 resources: limits: - cpu: "840" - memory: "687" + cpu: "641" + memory: "710" requests: - cpu: "213" - memory: "914" + cpu: "117" + memory: "875" securityContext: allowPrivilegeEscalation: false volumeMounts: @@ -81162,101 +142464,100 @@ spec: name: cert readOnly: true dnsConfig: + nameservers: + - 2CpyVbnvo options: - - name: rHF - value: wbVPx + - name: yxl + value: QUBh + - name: ePNFrIFJ1Y5 + value: Jxzn + - name: ytC + value: "" searches: - - Z - - YhcoeKtk8 - dnsPolicy: ƣƉ魔睡t>- + - BwsHNyhJ + - ycnipfaM6C + - V + dnsPolicy: Y坝Ïʁ enableServiceLinks: true ephemeralContainers: null hostAliases: + - ip: hU1 - hostnames: - - Sf55kgu - - V - ip: 8EIGmw + - weRRE + ip: f8Tjq9H0 + - ip: 4Po hostIPC: true - hostNetwork: true - hostPID: true hostUsers: true - hostname: SyS imagePullSecrets: - - name: B8MH - - name: MpD9S4 + - name: ToyEMZ + - name: DUuKKoSMVIr + - name: XQ initContainers: [] - nodeName: 8xSS + nodeName: UVVey nodeSelector: - 8bS: HvFyOVS - BvjBFrbwA: 9PmXSzNC - NX68EWwX: v2ca6I - S: QgAVakORL - hPM5u6oyVr5Q: NILGBGR - preemptionPolicy: Uy - priority: -383467081 - priorityClassName: Zq + BAev5kTlRODN: dX + C3bQIT: xsa7cM + F8X5: F6KozO4 + tGO: bHUSg0 + preemptionPolicy: "N" + priority: -85316965 + priorityClassName: eG readinessGates: - - conditionType: ʠ倈髈[±9G¯Ć鰹MɨĨB¬9 - - conditionType: 态橳X]瓢Ľ瀍<ɠʃ殽#Ŷ + - conditionType: ȈʉsƻÞ額紿簀êŏ蜌呒ÔY脂ʏd_ + - conditionType: ȣ裩>岣偤 + - conditionType: 愊«漀沧Ĝeƾ¬蘸#ǡǣ崥ȗP resourceClaims: - - name: 02puRm0TM - - name: bzvM2 - restartPolicy: 鶳PƖjƻuȭɧ眊çĞ1選ɞ档Ĉ - runtimeClassName: sO51e - schedulerName: 9o - schedulingGates: - - name: tWpVV - - name: Mh + - name: Fp3HF + restartPolicy: 悸郊瘀Ǖ媦á蠝遴Ɗɫ×DǵŨ姭驈ƶɊ僽 + runtimeClassName: r7UMT44 + schedulerName: gq securityContext: - fsGroup: 3798983524639040500 + fsGroup: 2925426353529579500 fsGroupChangePolicy: Always - runAsGroup: -1601124087103919000 + runAsGroup: -8895832925862921000 runAsNonRoot: false - runAsUser: -982536854129911900 + runAsUser: 6754487347817984000 supplementalGroups: - - 6537418073124356000 + - -7829883370998095000 + - 7231314824541344000 sysctls: - - name: O - value: hq - serviceAccountName: ePC - setHostnameAsFQDN: false - shareProcessNamespace: true - subdomain: Qm1ULdBq - terminationGracePeriodSeconds: 5823482532669229000 - tolerations: - - effect: Ņ玿琀螺窖凐>梾'əǃ - key: U5tT7c8Z - operator: :"_Ʀ$赡2/哓4霻蔙z貖 - tolerationSeconds: 1686643156274961400 - value: U - - effect: Ś紇#²'窳ŃE楼ʌ繄IJň=煸\ - key: 3S - operator: ǾɄš&ɥ - tolerationSeconds: -1023764199846933900 - value: rztGBGzB7O + - name: o1 + value: txAKqz + serviceAccountName: eczy + setHostnameAsFQDN: true + subdomain: PLW46 + terminationGracePeriodSeconds: 7787644037227988000 + tolerations: [] topologySpreadConstraints: - labelSelector: matchExpressions: - - key: 0LVYyK7 - operator: 骽燔iP + - key: woH + operator: sOǟ鯝鵽*讻^ƹſBd翧換_啾鬟 values: - - EFe0Ex - - key: okGzu - operator: r鲟n缼À + - 9rt + - I + - w + - key: rw + operator: "" values: - - zpDHv - - key: aO1 - operator: ɟ + - nAmnD + - FE7I + - 7Jxc + - key: tEE + operator: ʓ#J籱Ɍbĵ赟 a鯈ƹĢo绢n values: - - vOdcIx8L8 + - XXm + - bIMse + - m matchLabels: - CLm: "" - maxSkew: 446998704 - minDomains: -1084918344 - nodeAffinityPolicy: '}{õäȕ试瞁潬s攍mƸď' - nodeTaintsPolicy: 'ȿ灛暚ǀ藌p竒z ' - topologyKey: UOrE2qa - whenUnsatisfiable: sDIÉr鱵Ǘ + Ke: aK7pHX + SKcae7L: I5EirEQb + maxSkew: 1646139378 + minDomains: -1068408282 + nodeAffinityPolicy: ĝw + nodeTaintsPolicy: ɩ艁NJ + topologyKey: ZmjDn + whenUnsatisfiable: )坞]yQÆT聤ćŭ volumes: - name: kube-api-access projected: @@ -81279,56 +142580,54 @@ spec: - name: cert secret: defaultMode: 420 - secretName: KDzi + secretName: 1Z3N4ti + - name: qQ + - name: w --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: - annotations: - 9LGf5lZUJKBVgzZ: YR - syzBd0: yol8 + annotations: null creationTimestamp: null labels: - GvLRN: sCR + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 - gi: 9j2 helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ + rnKI: dxHr name: redpanda-serving-cert namespace: default spec: dnsNames: - - qv3g-webhook-service.default.svc - - qv3g-webhook-service.default.svc.AVM6O + - RoJFv-webhook-service.default.svc + - RoJFv-webhook-service.default.svc.Y issuerRef: kind: Issuer - name: f3nfwQai-selfsigned-issuer + name: 5U9oyj-selfsigned-issuer privateKey: rotationPolicy: Never - secretName: KDzi + secretName: 1Z3N4ti --- # Source: operator/templates/entry-point.yaml apiVersion: cert-manager.io/v1 kind: Issuer metadata: - annotations: - 9LGf5lZUJKBVgzZ: YR - syzBd0: yol8 + annotations: null creationTimestamp: null labels: - GvLRN: sCR + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 - gi: 9j2 helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ - name: f3nfwQai-selfsigned-issuer + rnKI: dxHr + name: 5U9oyj-selfsigned-issuer namespace: default spec: selfSigned: {} @@ -81340,7 +142639,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: f3nfwQai-mutating-webhook-configuration + name: 5U9oyj-mutating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -81348,7 +142647,7 @@ webhooks: - v1beta1 clientConfig: service: - name: qv3g-webhook-service + name: RoJFv-webhook-service namespace: default path: /mutate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -81369,20 +142668,18 @@ webhooks: apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: - annotations: - 9LGf5lZUJKBVgzZ: YR - syzBd0: yol8 + annotations: null creationTimestamp: null labels: - GvLRN: sCR + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 - gi: 9j2 helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ - name: f3nfwQai-metrics-monitor + rnKI: dxHr + name: 5U9oyj-metrics-monitor namespace: default spec: endpoints: @@ -81399,14 +142696,14 @@ spec: - default selector: matchLabels: - GvLRN: sCR + E3s: wWjO + OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g + app.kubernetes.io/name: RoJFv app.kubernetes.io/version: v25.1.4 - gi: 9j2 helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ + rnKI: dxHr --- # Source: operator/templates/entry-point.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -81415,7 +142712,7 @@ metadata: annotations: cert-manager.io/inject-ca-from: default/redpanda-serving-cert creationTimestamp: null - name: f3nfwQai-validating-webhook-configuration + name: 5U9oyj-validating-webhook-configuration namespace: default webhooks: - admissionReviewVersions: @@ -81423,7 +142720,7 @@ webhooks: - v1beta1 clientConfig: service: - name: qv3g-webhook-service + name: RoJFv-webhook-service namespace: default path: /validate-redpanda-vectorized-io-v1alpha1-cluster failurePolicy: Fail @@ -81441,32 +142738,699 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null + labels: + E3s: wWjO + OD7: D + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: RoJFv + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + rnKI: dxHr + name: vE4AZ-crd-job + namespace: default +<<<<<<< HEAD +======= +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + 4x: "" + Kzgw: 5jIW + gpzR: "y" + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + "6": nwe + SNwt: nldfORk + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ynJU-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + FS0CCFre54m: 58hk3 + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + zeZ1yo: BlUU + labels: + "6": nwe + SNwt: nldfORk + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ynJU-crd-job-default +rules: +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - create + - get + - patch + - update +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + FS0CCFre54m: 58hk3 + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + zeZ1yo: BlUU + labels: + "6": nwe + SNwt: nldfORk + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ynJU-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + FS0CCFre54m: 58hk3 + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + zeZ1yo: BlUU + labels: + "6": nwe + SNwt: nldfORk + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ynJU-crd-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: ynJU-crd-job-default +subjects: +- kind: ServiceAccount + name: ynJU-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + FS0CCFre54m: 58hk3 + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + zeZ1yo: BlUU + labels: + "6": nwe + SNwt: nldfORk + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ynJU-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: ynJU-migration-job-default +subjects: +- kind: ServiceAccount + name: ynJU-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" + labels: + "6": nwe + SNwt: nldfORk + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF-crds + namespace: default +spec: + template: + metadata: + annotations: + m1t: M + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: bVx + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + command: + - /redpanda-operator + image: ZuVTlT:J + imagePullPolicy: Never + name: crd-installation + resources: + limits: + cpu: "371" + memory: "259" + requests: + cpu: "238" + memory: "10" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: 7Es + - name: Gxl + nodeSelector: + aKrjz: 9KE2IIoSq + niNCO9SHc: "" + restartPolicy: OnFailure + serviceAccountName: ynJU-crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job metadata: annotations: - Hs8Cfsf: SbOxXEt - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + helm.sh/hook-weight: "-4" labels: - GvLRN: sCR + "6": nwe + SNwt: nldfORk app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v25.1.4 - gi: 9j2 - helm.sh/chart: operator-25.1.4 - zb8lDT9V: olwEfoWZ - name: LjYLOL6C-crd-job + app.kubernetes.io/name: bVx + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + zrdLi6qjyStw: s6wqn + name: ZvF-migration namespace: default --- testdata/case-093.yaml.golden -- +spec: + template: + metadata: + annotations: + m1t: M + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: bVx + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: ZuVTlT:J + imagePullPolicy: Never + name: migration + resources: + limits: + cpu: "371" + memory: "259" + requests: + cpu: "238" + memory: "10" + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: + - name: 7Es + - name: Gxl + nodeSelector: + aKrjz: 9KE2IIoSq + niNCO9SHc: "" + restartPolicy: OnFailure + serviceAccountName: ynJU-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +-- testdata/crd-installation-experimental.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true +automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: null @@ -81474,55 +143438,53 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: J2qRpt9 + name: operator namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: CGxTpM + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: - healthProbeBindAddress: "" - kind: DV1a + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig leaderElection: - leaderElect: false - resourceName: ENC2EL + leaderElect: true + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: cpGulJEUfUy + bindAddress: 127.0.0.1:8080 webhook: - port: 132 + port: 9443 kind: ConfigMap metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6-config + name: operator-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6-metrics-reader + name: operator-metrics-reader rules: - nonResourceURLs: - /metrics @@ -81533,16 +143495,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - C1ah: "" + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6-default + name: operator-default rules: - apiGroups: - authentication.k8s.io @@ -81557,68 +143518,276 @@ rules: verbs: - create - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles verbs: + - create + - delete - get - list - patch + - update - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch - apiGroups: - "" resources: + - configmaps - nodes + - secrets verbs: - get + - list + - watch - apiGroups: - "" resources: - - configmaps + - persistentvolumes verbs: - - create - delete - get - list - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list - watch - apiGroups: - "" resources: - - events + - configmaps - secrets - - serviceaccounts - - services verbs: - - create + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: - get - list - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: - - nodes + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-default +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-additional-controllers-default +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumeclaims + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: + - configmaps - pods + - secrets + - serviceaccounts + - services verbs: + - create - delete - get - list @@ -81628,11 +143797,18 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - events verbs: + - create - patch - - update +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch - apiGroups: - apps resources: @@ -81647,11 +143823,9 @@ rules: - update - watch - apiGroups: - - cert-manager.io + - autoscaling resources: - - certificates - - clusterissuers - - issuers + - horizontalpodautoscalers verbs: - create - delete @@ -81661,9 +143835,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - batch resources: - - ingresses + - jobs verbs: - create - delete @@ -81673,9 +143847,10 @@ rules: - update - watch - apiGroups: - - policy + - cert-manager.io resources: - - poddisruptionbudgets + - certificates + - issuers verbs: - create - delete @@ -81685,22 +143860,22 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - clusterrolebindings - - clusterroles + - leases verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - monitoring.coreos.com resources: - - clusters - - consoles + - podmonitors + - servicemonitors verbs: - create - delete @@ -81710,118 +143885,127 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - networking.k8s.io resources: - - clusters/finalizers - - consoles/finalizers + - ingresses verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - redpanda.vectorized.io + - policy resources: - - clusters/status - - consoles/status + - poddisruptionbudgets verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - - scheduling.k8s.io + - rbac.authorization.k8s.io resources: - - priorityclasses + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - C1ah: "" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: KXsg6-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: KXsg6-default -subjects: -- kind: ServiceAccount - name: J2qRpt9 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6-election-role + name: operator-additional-controllers namespace: default rules: - apiGroups: - "" resources: - - configmaps + - events verbs: - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - pods + - secrets verbs: - - create - - patch + - get + - list + - watch - apiGroups: - - coordination.k8s.io + - apps resources: - - leases + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims verbs: - - create - delete - get - list - patch - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - C1ah: "" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: KXsg6 - namespace: default -rules: +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update - apiGroups: - "" resources: @@ -81837,16 +144021,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6-rpk-bundle + name: operator-rpk-bundle namespace: default rules: - apiGroups: @@ -81871,403 +144054,169 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6-election-role + name: operator-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: KXsg6-election-role + name: operator-election-role subjects: - kind: ServiceAccount - name: J2qRpt9 + name: operator namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6 + name: operator namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: KXsg6 + name: operator subjects: - kind: ServiceAccount - name: J2qRpt9 + name: operator namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6-rpk-bundle + name: operator-additional-controllers namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: KXsg6-rpk-bundle + name: operator-additional-controllers subjects: - kind: ServiceAccount - name: J2qRpt9 + name: operator namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6-metrics-service + name: operator-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-rpk-bundle +subjects: +- kind: ServiceAccount + name: operator namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: Tlv --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: Tlv-webhook-service + name: operator-metrics-service namespace: default spec: ports: - - port: 443 - targetPort: 9443 + - name: https + port: 8443 + targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - C1ah: "" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6 + name: operator namespace: default spec: - replicas: -1993597595 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator strategy: - rollingUpdate: - maxSurge: 1765614033 - maxUnavailable: 577102752 type: RollingUpdate template: metadata: - annotations: - E: MGTsek + annotations: {} creationTimestamp: null labels: - 0B90: DS2 app.kubernetes.io/instance: operator - app.kubernetes.io/name: Tlv - iL23T6g: i3UAi0 - omBc4D: z + app.kubernetes.io/name: operator spec: - activeDeadlineSeconds: 7174288372376315000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchFields: - - key: q6Pr3z4Mzca - operator: xʧ蟳lʯ`8@wɝå瘑ğ1üq檞 - values: - - jGsIQc2o - - r - - EqBS - - key: aNGtuo2 - operator: À%ʐ)B - values: - - PcSAPwFBU - - qyyrGDmd3 - - Dnu1u - weight: -1046930517 - - preference: - matchExpressions: - - key: nDu3 - operator: 幎åF烵wƿ-Y - values: - - XVCtIA2 - - key: 6tko - operator: țÜġ攕m愥 - values: - - "" - matchFields: - - key: cTaskfhl - operator: '!懰à!z巀ǫ聏Ŀ洛' - values: - - I - - RTUk - - key: "" - operator: 衸ȑ睆悢Ɗm$碍g凴 - values: - - acgX15 - - gPPCx - - key: JQS8dsDDW - operator: 鍪侥逬Ɉ礢mɌ)樭ǖ鱃Ő{¿HK - values: - - XAFyZ - - mDGk - weight: -1470109753 - - preference: - matchExpressions: - - key: xdMof - operator: 颇Ķó喻靌m$RŸ,ɼʙãe - matchFields: - - key: VIMhEo - operator: cƁP赊.貦1歵偭d?昪1郳駘 - weight: 109100852 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: sWEgkzyWf - operator: ɪɑɞ諠0猡Z!ƭ檒ȭ - matchFields: - - key: VR - operator: ;蝆燤 - - key: Ny - operator: 我拜襔ƜXKȨȟ栃鸬;ê0枀s - values: - - dSjy - - key: Pf2poB - operator: 馛Ɍ鐠 NjŀȦ2瘰)脁j蒲兤ėơ!? - podAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: RMd6Z - operator: ƫ盻Ë(锁C3o櫾 - values: - - HRL - - nzu7a - - key: sz4k9edh18oe - operator: 鯎 - values: - - X436 - - 9r00YJ - - CxtPgJ - - key: Je7BebNY - operator: j@牔愯¼ěľ8Ġ阱F - matchLabelKeys: - - yF8N - - yn - mismatchLabelKeys: - - 822V - - rdNZl - - 5kHY - namespaceSelector: - matchExpressions: - - key: a528F - operator: 已 - values: - - LYEJ - - "" - - key: MUeKVboDkPn - operator: 驱鋐赋遻ʡo - - key: AIL - operator: 馕$qNƚ - namespaces: - - DYsdJ - topologyKey: mb - - labelSelector: - matchExpressions: - - key: "" - operator: l3嶲ʞ=Y!+ÒƓęK蕝誴 - values: - - ugI55WCRU - matchLabelKeys: - - 5NU8D - - AeuBGXu - - csP - mismatchLabelKeys: - - 5qplYNUD6w - namespaceSelector: - matchExpressions: - - key: f - operator: X坅ï - values: - - u - - E2jME - - key: B - operator: "" - values: - - SfA7 - matchLabels: - eNXuwRax: liFL - namespaces: - - 2RXA7U9b - topologyKey: Lskq0l - - labelSelector: - matchExpressions: - - key: 62CRwslTK1 - operator: 濍1礴 - values: - - AREVT84 - - GoqgW - matchLabelKeys: - - UAILumGhD - mismatchLabelKeys: - - F31wTd - namespaceSelector: - matchExpressions: - - key: E - operator: Ƕƪų疛w5川fljƖ寭 - values: - - 7C2f - - i3aee89gfcm - - AE - - key: rlLY - operator: 胬豧Ð!跦o - values: - - iE - - frIWT - - WYkucb1C - - key: sNqY3 - operator: 桐$蜑凷P-Ȓ玠趉T攗ʘ鏝 - values: - - RLg75ME54 - - Ruw - - tHp44zbHkWh - matchLabels: - GyWL: V7vtUB - X: m62ibm - namespaces: - - 9K - - 0TUIot - topologyKey: kFQqQq - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: w4yYA - operator: 沶ŞʚũļĈ1Ʈ - values: - - jKL - - key: 7f2P - operator: d訸ìě狲陝{q - values: - - Mk - - key: ywf1CZA - operator: C浰Ë憾Vç噑ō> - matchLabels: - 6uW: hAorNoBl - matchLabelKeys: - - Bmsl9 - - xy - - wokJ5Gom - mismatchLabelKeys: - - Yrrw - namespaceSelector: - matchExpressions: - - key: QnQUFZjQA - operator: \ - values: - - 8lrJz - - LWwHX - - key: VYrp - operator: 篂àŸ-rs鐳轾ȬDž蘢 - values: - - ELcYpYSC - - HOb - - B5U - matchLabels: - NPE: MgO4 - namespaces: - - "" - - PX - topologyKey: odLq5X2Tl - weight: -1679674974 automountServiceAccountToken: false containers: - args: - --health-probe-bind-address=:8081 - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=wA5XUe - - --configurator-base-image=kE0AJ1 - - "" - - 2BwL4Tf6d - - LY5cEH + - --webhook-enabled=false + - --namespace=default + - --log-level=info + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: kE0AJ1:wA5XUe - imagePullPolicy: Never + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 375 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 882 - periodSeconds: 987 - successThreshold: 528 - terminationGracePeriodSeconds: 97 - timeoutSeconds: 399 + initialDelaySeconds: 15 + periodSeconds: 20 name: manager ports: - containerPort: 9443 @@ -82277,138 +144226,27 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 13 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 598 - periodSeconds: 74 - successThreshold: 313 - terminationGracePeriodSeconds: 799 - timeoutSeconds: 26 - resources: - limits: - cpu: "281" - memory: "944" - requests: - cpu: "742" - memory: "363" + initialDelaySeconds: 5 + periodSeconds: 10 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - 0l7aqP - options: - - name: HouI7M - value: KbwklDr4ub9X - - name: yPxW32ed - value: q - dnsPolicy: 矝ɭƱ镏&w圓p炽Ň°<ƑÝ薮謥Ƕ絴e ephemeralContainers: null - hostNetwork: true - hostPID: true - hostUsers: false - hostname: Z4O - imagePullSecrets: - - name: DQh0 - - name: W8kPWEv + imagePullSecrets: [] initContainers: [] - nodeName: C2To9PpO - nodeSelector: - GYCj: lf229d - J: Ly6XF - KlO6x: HRQk5 - hKAyXpZrD: rps8LOZ0 - "n": 7JH - preemptionPolicy: (吠!睧呗ļÊK - priority: -937002552 - priorityClassName: VWb - restartPolicy: 2ʫǯ鵮甌 - runtimeClassName: 8UYn22 - schedulerName: kBIiMPq - schedulingGates: - - name: 5HaN1hN3i + nodeSelector: {} securityContext: - fsGroup: 600852388106857900 - fsGroupChangePolicy: Always - runAsGroup: 2551983261573605400 - runAsNonRoot: false - runAsUser: 7889401706800922000 - supplementalGroups: - - -5305071421925969000 - sysctls: - - name: H - value: "N" - serviceAccountName: 9twRjrb4yT - setHostnameAsFQDN: true - shareProcessNamespace: true - subdomain: IjJ - terminationGracePeriodSeconds: 62214698983836060 - tolerations: - - effect: ʐ - key: VkA - operator: 這蘱 - tolerationSeconds: 4441979411744754000 - value: wBjsw70 - - effect: ű敩棲%da<_& - key: hWLzvPC - operator: 睴墊鸛NìTF蝴崧炏ƒI=j - tolerationSeconds: 3618647065810892300 - value: II - - effect: xŲ5ɺ.èT湟鷯ȕÈƘp - key: 6h - operator: D瘈ŰY2çŬ墖Ðʀ泃2臝ưfK* - tolerationSeconds: 6813537940048247000 - value: 0d - topologySpreadConstraints: - - labelSelector: - matchLabels: - 1lJ3OETG: piq4 - rFVf: Qi - matchLabelKeys: - - KaRc - - li3 - maxSkew: -884623376 - minDomains: -1461178719 - nodeAffinityPolicy: 瓜胮ł阃ʈ厖ʨ - nodeTaintsPolicy: œŐ怅秪8ķ'瞈蓹ʫ腀烘ƍ鹓掮橻*pŴ - topologyKey: dPb2VRW - whenUnsatisfiable: c碿Ɓ曣ì= - - labelSelector: - matchExpressions: - - key: yRJip - operator: ʣɺ圾鐍宕唾b捥pǂ衃ȹ屙屜豴ƞʟƝ] - matchLabels: - ivTn: Xtf9ps - matchLabelKeys: - - J3 - maxSkew: 2022884886 - minDomains: 370293399 - nodeAffinityPolicy: Kæ顄1Ȇų贒塡\岓;韩爢逕 - nodeTaintsPolicy: =0佱] - topologyKey: "" - whenUnsatisfiable: ɿ±兏錌VMOþ - - labelSelector: - matchExpressions: - - key: BCzPhb - operator: Ǧ暋 - matchLabels: - t: kBJ - matchLabelKeys: - - eF7g - maxSkew: -476399995 - minDomains: 2012120508 - nodeAffinityPolicy: 硻孻r)8Ʃ - nodeTaintsPolicy: 磻嶼疛Ű怢蔧ij]b?ʮŇõɈ - topologyKey: OcJMDNvd - whenUnsatisfiable: 2ðɞ樀ȵ檛舼闲i + runAsUser: 65532 + serviceAccountName: operator + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -82428,224 +144266,702 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: sSlcvPv - - name: D - - name: S1tN5CgpGS --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate +<<<<<<< HEAD +======= +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-crd-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - C1ah: "" + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - Tlv-webhook-service.default.svc - - Tlv-webhook-service.default.svc.rkrYVShLr - issuerRef: - kind: Issuer - name: KXsg6-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: sSlcvPv + name: operator-crd-job-default +rules: +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - create + - get + - patch + - update --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: annotations: - C1ah: "" + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: KXsg6-selfsigned-issuer + name: operator-crd-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-crd-job-default +subjects: +- kind: ServiceAccount + name: operator-crd-job namespace: default -spec: - selfSigned: {} --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-migration-job-default +subjects: +- kind: ServiceAccount + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" creationTimestamp: null - name: KXsg6-mutating-webhook-configuration + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-crds namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Tlv-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None +spec: + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + - --experimental + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + name: crd-installation + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor +apiVersion: batch/v1 +kind: Job metadata: annotations: - C1ah: "" - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: KXsg6-metrics-monitor + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration namespace: default spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: KXsg6-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Tlv-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +-- testdata/crd-installation.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 automountServiceAccountToken: false kind: ServiceAccount metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: Tlv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: J2qRpt9-crd-job + name: operator namespace: default --- testdata/case-094.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 data: controller_manager_config.yaml: |- - apiVersion: 1G + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 health: - healthProbeBindAddress: rqw - kind: b + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig leaderElection: - leaderElect: false - resourceName: N0V + leaderElect: true + resourceName: aa9fc693.vectorized.io metrics: - bindAddress: l9XfgCTZ + bindAddress: 127.0.0.1:8080 webhook: - port: 132 + port: 9443 kind: ConfigMap metadata: - annotations: - p1R: fWL + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh-config + name: operator-config namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - p1R: fWL + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh-metrics-reader + name: operator-metrics-reader rules: - nonResourceURLs: - /metrics @@ -82656,18 +144972,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: - p1R: fWL + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh-default + name: operator-default rules: - apiGroups: - authentication.k8s.io @@ -82682,68 +144995,260 @@ rules: verbs: - create - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles verbs: + - create + - delete - get - list - patch + - update - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch - apiGroups: - "" resources: + - configmaps - nodes + - secrets verbs: - get + - list + - watch - apiGroups: - "" resources: - - configmaps + - persistentvolumes verbs: - - create - delete - get - list - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list - watch - apiGroups: - "" resources: - - events + - configmaps - secrets - - serviceaccounts - - services verbs: - - create + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: - get - list - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-default +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-additional-controllers-default +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-election-role + namespace: default +rules: - apiGroups: - "" resources: - - persistentvolumeclaims + - configmaps verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - - pods + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -82753,11 +145258,34 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch - apiGroups: - apps resources: @@ -82772,11 +145300,9 @@ rules: - update - watch - apiGroups: - - cert-manager.io + - autoscaling resources: - - certificates - - clusterissuers - - issuers + - horizontalpodautoscalers verbs: - create - delete @@ -82786,9 +145312,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - batch resources: - - ingresses + - jobs verbs: - create - delete @@ -82798,9 +145324,10 @@ rules: - update - watch - apiGroups: - - policy + - cert-manager.io resources: - - poddisruptionbudgets + - certificates + - issuers verbs: - create - delete @@ -82810,22 +145337,22 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - clusterrolebindings - - clusterroles + - leases verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - monitoring.coreos.com resources: - - clusters - - consoles + - podmonitors + - servicemonitors verbs: - create - delete @@ -82835,566 +145362,338 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - networking.k8s.io resources: - - clusters/finalizers - - consoles/finalizers + - ingresses verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - redpanda.vectorized.io + - policy resources: - - clusters/status - - consoles/status + - poddisruptionbudgets verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - - scheduling.k8s.io + - rbac.authorization.k8s.io resources: - - priorityclasses + - rolebindings + - roles verbs: + - create + - delete - get - list - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - p1R: fWL - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: FCXrBjh-default -subjects: -- kind: ServiceAccount - name: 11c - namespace: default + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - p1R: fWL + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh-election-role + name: operator-additional-controllers namespace: default rules: - apiGroups: - "" resources: - - configmaps + - events verbs: - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - pods + - secrets verbs: - - create + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list - patch + - update - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - persistentvolumeclaims verbs: - - create - delete - get - list - patch - update - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - annotations: - p1R: fWL + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh + name: operator-rpk-bundle namespace: default rules: - apiGroups: - "" resources: + - configmaps + - endpoints + - events + - limitranges - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - delete - get - list - - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - p1R: fWL + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh-election-role + name: operator-election-role namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: FCXrBjh-election-role + name: operator-election-role subjects: - kind: ServiceAccount - name: 11c + name: operator namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - annotations: - p1R: fWL + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh + name: operator namespace: default roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: FCXrBjh + name: operator subjects: - kind: ServiceAccount - name: 11c + name: operator namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: - annotations: - p1R: fWL + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh-metrics-service + name: operator-additional-controllers namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-additional-controllers +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: DjMfg + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-rpk-bundle +subjects: +- kind: ServiceAccount + name: operator + namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - p1R: fWL + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: DjMfg-webhook-service + name: operator-metrics-service namespace: default spec: ports: - - port: 443 - targetPort: 9443 + - name: https + port: 8443 + targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - p1R: fWL + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh + name: operator namespace: default spec: - replicas: 336015805 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator strategy: - rollingUpdate: - maxSurge: 583208704 - maxUnavailable: 547870506 - type: 鉊^#ŝ狿E*侺ɭğRʝē + type: RollingUpdate template: metadata: - annotations: - 7j4r: "" - iUJakWUJQyJ: HCFA - kwTvCI: zoeC + annotations: {} creationTimestamp: null labels: - ESgxffT: "7" - KC1v: wOG app.kubernetes.io/instance: operator - app.kubernetes.io/name: DjMfg - e7SaSbbhQt: 3pRhc + app.kubernetes.io/name: operator spec: - activeDeadlineSeconds: 4312700860172301000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: {} - weight: -1480556469 - - preference: - matchFields: - - key: kVMNZ0 - operator: e - values: - - ZIlVGeklJl - - wUZJY7ZL - - VulNe - - key: Pho - operator: 洐敦訙頱杍齎4嚃/Ƕ跎Û揢s - values: - - I0l5Sd - - "0" - weight: 523172076 - - preference: - matchExpressions: - - key: ueUhTsHk - operator: 遽rö缠Ș - values: - - MwOZFRUZ63 - - obx3VgYD - - p - - key: gI - operator: ñÇĿ蓗ƚ廌 - values: - - 9F6u3jcB - - key: PyBFi7e6M4w - operator: Iǫy倽8炾Ɗw砖ƿvʢvůĶõ角 - values: - - d4fQGUL0qD065H - matchFields: - - key: lLrStODrCt - operator: 輕ś韉^腁BLŨ龁fDžu - - key: 6KRH - operator: ť+ı烨 - values: - - Yipx1H - - GwJrv - - 1xh - weight: 2007599181 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: [] - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: IsZZ - operator: Ȑaɩ=嶸Ů揮G - - key: X9Q - operator: Ąʏ偮阡 - values: - - OLofN0f - - olGDG - matchLabels: - "": Mxtg - C0aF: 3LAOb - matchLabelKeys: - - b - mismatchLabelKeys: - - I3oc - namespaceSelector: - matchExpressions: - - key: 2K6MLe5Sij - operator: "" - - key: 1q - operator: Ŝ敻Ū拓;`ɹơBhģ - values: - - wG - - s6tUVH0K1Ohs - matchLabels: - UJakgFPJN: "" - namespaces: - - I - - I0LC6J - - zrjppPYN - topologyKey: 6K9q - weight: 576277368 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchLabels: - 6hFxzzpKRz: "" - ek: S - matchLabelKeys: - - "" - - Zw7HjV - - XxezbwW - mismatchLabelKeys: - - JDtlaSis3 - - ByZU - - KzvEH - namespaceSelector: - matchExpressions: - - key: 00cq - operator: Ȧ奙\9庱ʙ犬Ǚ紐ts - - key: MDoi3pS - operator: :攟ǙȀ搃n磣# - values: - - Dl1TOqSotnF - - o1ghc - matchLabels: - j5z4V: E - namespaces: - - H0vIXY - - AS - - A26P4P - topologyKey: j1 - - labelSelector: - matchExpressions: - - key: IQVLE - operator: ɶ惙W@臆&Ų艧谫磷[%ɜ貃斱ïǺ1 - - key: u - operator: S¼罊ƙ灳殜}縮矀ʋc - values: - - "9" - - MzjMhYBtE - - key: 46KT - operator: UW腶旚硔G-úƢ4Džɭ泒pmq涙 - values: - - C4Lv5m - - vy2ts1 - - KKhq6iF - matchLabels: - Tv: P73R - matchLabelKeys: - - L8dB6f - - r - mismatchLabelKeys: - - ZTtJG - namespaceSelector: - matchExpressions: - - key: AMsA - operator: "" - values: - - "" - matchLabels: - elTLp: 0R0g6qN67 - j: GUZTUIx - topologyKey: 8Boz8 - - labelSelector: - matchLabels: - CWH: npc - matchLabelKeys: - - LGgpau - - L - - "" - namespaceSelector: - matchExpressions: - - key: pqb0mw - operator: KA萁Ǎ飙¬#Ƀ - values: - - QVTLq - - "7" - - wNXcKivx - namespaces: - - 3PgpNTma - - L0n6MznC - - "" - topologyKey: "" - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - 0lWFZ: JTBr - nfPE: iQ - matchLabelKeys: - - YfVs - - 6rrI4fY - - kZFY4KtUY6 - mismatchLabelKeys: - - vqiDDI23 - - 7As1fsWY8 - namespaceSelector: - matchExpressions: - - key: "" - operator: 遥*ʃ貉ȁ - values: - - nvcdSJIKFC - matchLabels: - 2OZ: C - ja0: 27D5g - namespaces: - - eu1Jt - - trpI - - ouNQ - topologyKey: NM - weight: 1545551065 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: LUEU0ybbJPC - operator: ɲű瘏ÞƝ瘗|ɕĀȇȍ桜 - values: - - gwne - matchLabels: - "": X05vdX - matchLabelKeys: - - "" - - bz3 - - 8cILXOszL - mismatchLabelKeys: - - dRBoAj - - IY - namespaceSelector: - matchExpressions: - - key: gBFi - operator: 魟蠸ʯ矫R[\6ưGb噆莐 - values: - - "" - - Mx4Rw9 - - "" - matchLabels: - 5Jv: aqOMf7s - namespaces: - - s4TVh4n - topologyKey: 8a3oLWzBb - weight: 2069617429 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: L - operator: vǤ枑r餆_唯晵+P写鮚ɩ粠 - values: - - "" - - Ia3C5qCZ7 - matchLabels: - EX: O911NE - l87: NxQB - sPDQU: eXfPq - matchLabelKeys: - - 7NA - mismatchLabelKeys: - - 5Xqup - - 5hDbku - namespaceSelector: - matchExpressions: - - key: 9NcL - operator: 皀Ȣ"ňň门轍鿂桀!珿匦u芢ʍ殖Ê? - - key: O - operator: D糁0Ǣ砪 - values: - - mvVScWm - - YL5 - matchLabels: - 0ZLQL: oxS - OBBv: os9b - namespaces: - - "" - - UW9NriJ - - LREoZjeh - topologyKey: 6ckA automountServiceAccountToken: false containers: - args: - --health-probe-bind-address=:8081 - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=PQfV4 - - --configurator-base-image=uzG5 - - 7G3Tgu - - Oh + - --webhook-enabled=false + - --namespace=default + - --log-level=info + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: uzG5:PQfV4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 402 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 358 - periodSeconds: 714 - successThreshold: 0 - terminationGracePeriodSeconds: 938 - timeoutSeconds: 640 + initialDelaySeconds: 15 + periodSeconds: 20 name: manager ports: - containerPort: 9443 @@ -83404,105 +145703,27 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 532 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 547 - periodSeconds: 32 - successThreshold: 721 - terminationGracePeriodSeconds: 810 - timeoutSeconds: 912 - resources: - limits: - cpu: "79" - memory: "376" - requests: - cpu: "468" - memory: "414" + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - lFF4bR - - WNBLqImd8Z - options: - - name: P6cwWXMT1mx9 - value: 0Jt1XYAF0G - searches: - - UW507 - dnsPolicy: 澧ȳ蹝ŀ舡Į÷徂囉ū ephemeralContainers: null - hostIPC: true - hostPID: true - hostUsers: true - hostname: 7UVj - imagePullSecrets: - - name: 6DEkd + imagePullSecrets: [] initContainers: [] - nodeName: pND0B - nodeSelector: - 5MEphPPV9Q: TU8wH - ZKrTPa: vOZnX - cUG: "" - zPhtPKQVA8DB: Fe - preemptionPolicy: "" - priority: 1616331802 - priorityClassName: 8bGWLWaS - readinessGates: - - conditionType: 抜ý.Qd3ʉ3恬g - - conditionType: 0Ď盁(i尋禌囁 - - conditionType: ŧ - resourceClaims: - - name: bmK28GU - - name: Md9RczSC - - name: vR - restartPolicy: 緊b轼钩ȃ硩qŅ-'碦y - schedulerName: WiUOP + nodeSelector: {} securityContext: - fsGroup: 1482652060705232400 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -8503677918205262000 - runAsNonRoot: false - runAsUser: -7947396771839663000 - supplementalGroups: - - 2337230613663300000 - serviceAccountName: D3Fi - setHostnameAsFQDN: false - subdomain: z0rSMEL - terminationGracePeriodSeconds: -2274820483759401500 - tolerations: - - effect: 谕{ɼthx郔Ŀ鰏y¡U啲ȉ11玭ȩ - key: X - operator:  novo - tolerationSeconds: 867278555089113000 - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: 2UohIse - operator: '[À莄¦咎鵈f柫Ȇ' - values: - - ekZ2Cc - - key: xEbcug - operator: 埔ā馸+d澝ʙHǀȀdX鋪? - matchLabels: - 1Qd7: XqQg - lMH: q - matchLabelKeys: - - 359mNB - maxSkew: 1481426489 - minDomains: 1823933433 - nodeAffinityPolicy: 0坑~ĞYɴǪɤ栘 - nodeTaintsPolicy: Ȋ8Ǽ'ȶƠɥ奐X哬ĿiȲi扶Lj - topologyKey: 8LMG23 - whenUnsatisfiable: ' 褼ƶÎa' + runAsUser: 65532 + serviceAccountName: operator + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -83522,122 +145743,6 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: YLbdlLDRh ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - p1R: fWL - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - DjMfg-webhook-service.default.svc - - DjMfg-webhook-service.default.svc. - issuerRef: - kind: Issuer - name: FCXrBjh-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: YLbdlLDRh ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - p1R: fWL - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: FCXrBjh-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: FCXrBjh-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: DjMfg-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: FCXrBjh-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: DjMfg-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -83645,8 +145750,6 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - MW: NTwM - b: 7wv helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" @@ -83654,126 +145757,156 @@ metadata: labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: DjMfg + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - oLWSEoF: Ps5P - uO6upU7K: lMwbJ - name: 11c-crd-job + name: operator-crd-job namespace: default --- testdata/case-095.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true +automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - "": iI7Bd - 9H7uauZ: fIw - G1: kAPGZ - creationTimestamp: null - labels: - DQ: JM - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: "" - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: 7iYs - health: - healthProbeBindAddress: pG7 - kind: yss - leaderElection: - leaderElect: true - resourceName: ZAL2weN - metrics: - bindAddress: ISgWYPuoIKL - webhook: - port: 492 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 02-config + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" creationTimestamp: null labels: - DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 02-metrics-reader + name: operator-crd-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions verbs: + - create - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: {} - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 02-default + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumes + - horizontalpodautoscalers verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -83790,11 +145923,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -83803,15 +145941,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -83820,8 +145960,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -83831,30 +145995,39 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - events verbs: - create - - delete + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -83864,9 +146037,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -83876,9 +146049,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -83888,22 +146061,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -83913,74 +146088,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - DQ: JM - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 02-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 02-default -subjects: -- kind: ServiceAccount - name: "" - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - DQ: JM - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 02-election-role - namespace: default -rules: + - patch + - update + - watch - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -83990,16 +146143,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -84008,684 +146167,197 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - DQ: JM - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: "02" - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - DQ: JM - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 02-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - DQ: JM - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 02-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 02-election-role -subjects: -- kind: ServiceAccount - name: "" - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" creationTimestamp: null labels: - DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: "02" - namespace: default + name: operator-crd-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: "02" + kind: ClusterRole + name: operator-crd-job-default subjects: - kind: ServiceAccount - name: "" + name: operator-crd-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 02-rpk-bundle - namespace: default + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 02-rpk-bundle + kind: ClusterRole + name: operator-migration-job-default subjects: - kind: ServiceAccount - name: "" - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - DQ: JM - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 02-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: "Y" ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - DQ: JM - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: Y-webhook-service + name: operator-migration-job namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: "Y" --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" creationTimestamp: null labels: - DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: "02" + name: operator-crds namespace: default spec: - replicas: 360762065 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: "Y" - strategy: - rollingUpdate: - maxSurge: 735491605 - maxUnavailable: 567419297 - type: 揘ÓCDǶl魾甍7Å:桋眠 template: metadata: - annotations: - 9nuNhaa: "" - L3Zre: xPQq - lT9cv: ld - w1pf: cF + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: "Y" + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - crd + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + name: crd-installation + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-crd-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator spec: - activeDeadlineSeconds: -5189798555752399000 - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: VEXvr - operator: 沭麟繱迡襗=o废ǫŊîd塘Ƣ^j1 - matchFields: - - key: gXM - operator: ¤ƟL舷x - values: - - P - - key: Eo - operator: 鈼ũǧ娂DŽa - values: - - S2 - - zeGNO - - {} - - matchExpressions: - - key: roUmde69CU - operator: XĢ - values: - - 3XZeDET8iN - - yHRIidx5f - - key: zGQRR6C - operator: Ŗ翬O话 - values: - - wapE - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: htJ - operator: '`2@(陊ʍ*$Ɯ' - - key: bmCu - operator: $蛹ǚ±ôvąȂŖRə$騹"nǕ - - key: PPqbX - operator: 臋裕 - values: - - o7 - - ENhqd - - Ycq - matchLabelKeys: - - Auod - namespaceSelector: - matchExpressions: - - key: NqT - operator: '[鱝Ş馿v½諭翧u駌峂鿚蠒熱耱ȇǴŲ鲆' - - key: kMEBL5uMoy - operator: 澪=旷ăT - values: - - 5kvY8 - namespaces: - - 2q - - aUqjio - topologyKey: IShL - weight: -106735637 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: "4" - operator: ìĈȶʏ炁紂Jg筽ľ濹ƪ§U%fY{l - values: - - 8qEmRa0O - - ct6Y9jDs - - 57gZlur - matchLabels: - "2": YfJu - Mo0: vLH4ENxhbDse - kvyj3T: R04qP - matchLabelKeys: - - gv5 - - "" - - SSdJGtxwlbI3SZ - mismatchLabelKeys: - - fTxrmd - - o6FYrVSa - - FdoGR - namespaceSelector: - matchExpressions: - - key: hfeM9T - operator: ʜ0TƷX鑳RQɜ - - key: MSIa - operator: ņ-虨髾QǷ璕<»0呛詒 - values: - - X8Fw4dn - matchLabels: - OkFI0: rNU - UPGENQ: hFWvc - xLmBtaTlV: aD8dxGbO - namespaces: - - e - topologyKey: "5" - - labelSelector: - matchExpressions: - - key: o6xg - operator: DV蹰釖潲兽ʎɃ楛y鮔垙ɶ碹 - - key: 9fds5dbn - operator: lK緀J ŷ - values: - - tRS6o5qbaW - - "" - matchLabels: - BR7kHV: Y2 - H3bid2hq: ZZF - jeUD9Eb8c: jv7Ob - matchLabelKeys: - - l - - wc7GaKJE0 - mismatchLabelKeys: - - D - namespaceSelector: - matchExpressions: - - key: SeXXNVQ - operator: ɠ倦r#ɕy壴xȗ癬ɍȶw瓣ßȧ儛 - values: - - sU - - wf9j0 - - "" - - key: MIEY - operator: D眻VK - values: - - Db - - key: 2mLM - operator: Ŝ鷃祘R - matchLabels: - 7qh8Kz82NKKf0: Du8r3QTY - NA4Bmm: GtjhcVh26 - topologyKey: VuQrDua - - labelSelector: - matchExpressions: - - key: KlxXbW - operator: Əȴ鲤6±³Ɖ睁噩NSa]|Ŗ齈鹆½ - values: - - yR - - 5ht - - key: LX9A - operator: 鳰8ÿ(bs出E - values: - - JWwi - - NS7Lkp - - 4M8O29W6uL - matchLabels: - WOb9: tyTuKUM - tuF: EmqXBndw - mismatchLabelKeys: - - TYmbhaoXUES - - 9PHHHC - namespaceSelector: - matchExpressions: - - key: mcaeC - operator: Ń@镱廟2ƀ炦S£¼s嬶vɮ灁G - - key: Dol - operator: _jƃ蓨ȫ/ïĝ`gàɇo噉:$ - values: - - "0" - - z5 - - JVj9WBibY - - key: 66xP - operator: "" - values: - - Qgfldp4 - matchLabels: - 2CQDCJnO: muM7iSfp98gGc - DMEs6vF2Cx: m2gvK - namespaces: - - A5bL5n4 - - 3GdwXhJ - - 5k - topologyKey: YrsnF - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: ROz4cS - operator: '|茿聛7ņē轅' - - key: KcU - operator: 硉ÿ楖ʑAA躡@摠Ċ鮢 - values: - - HVry2L - - QmQasM - - key: e - operator: ȩċñ0获 - values: - - Gs9bv0 - - 9AcxBwT - matchLabels: - Hc9ym: 7sAxb3ICrm0AGN - Wcs: "" - matchLabelKeys: - - TO - - duOXG - - Fu - mismatchLabelKeys: - - xZKoqdTwVzLBWAd - - ES2 - - RRf - namespaceSelector: - matchExpressions: - - key: yQ6 - operator: Č犒½p7ƻ哉 - values: - - QrEq8rUjBG - - Eaamg - - bHjn - - key: 2enEH - operator: GNǗh為>ǝ - values: - - 8lpNjXpOK - - 6pbGURc - - JcLhc1 - namespaces: - - jmMD - - 1XDGscQ - topologyKey: nBql6 - weight: -712062132 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: L - operator: 粷 - - key: pVfmf - operator: m 烿C)朏ŏ+?ʈ疮韽Ɓ業ĀX<ʒ - values: - - muA - - key: I - operator: '|鐱乞Ý' - values: - - wKLvmKP - - UA0d - - na - matchLabelKeys: - - d4bm - namespaceSelector: - matchExpressions: - - key: B - operator: Râ抢溺o< - values: - - DNtk1YoZ - - 3de - - yZB6 - namespaces: - - mT597g - topologyKey: tl8TD - - labelSelector: - matchExpressions: - - key: x1 - operator: ı}ď[滪ĒſßǂɐW嬿d - values: - - "" - matchLabels: - S6bh4lH: "" - u5GHCoq: 9YGP0Hm - matchLabelKeys: - - VqFEOh - - v70Gh7h - - BXbloka - mismatchLabelKeys: - - 1vq7 - - p48 - namespaceSelector: - matchExpressions: - - key: JzKKMx - operator: 幻<ʝ^L,E彂fǬ纫柹 - values: - - uVNC2CP - - xIY5Eq9YI - - key: OXdWcR - operator: 8Ȱ纣+9į(ƎŇ繀ǻǍ崵 - values: - - s5hf68n5M - - Rj82w9aV - - key: 2MOjjD - operator: 哽偊ȨĪȆa茒E¨珰H进U - values: - - AnI2UobR - - 9mzLuJP - - LuLh - namespaces: - - dplLHJ - - mObHl - topologyKey: Mqm automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=ob8Ckc - - --configurator-base-image=iqTYWQsJpRK + - migration command: - - /manager - env: [] - image: iqTYWQsJpRK:ob8Ckc + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent - livenessProbe: - failureThreshold: 268 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 536 - periodSeconds: 124 - successThreshold: 567 - terminationGracePeriodSeconds: 395 - timeoutSeconds: 164 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 838 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 229 - periodSeconds: 206 - successThreshold: 835 - terminationGracePeriodSeconds: 557 - timeoutSeconds: 959 - resources: - limits: - cpu: "878" - memory: "828" - requests: - cpu: "8" - memory: "727" + name: migration + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - options: - - name: kUN - value: 3E - searches: - - Rvg - - 5Mio6X - dnsPolicy: '{犈焆秏廟鄎Ǐ愦昽鳡趄ʋ鍤毺啨$~Ȓ' - ephemeralContainers: null - hostAliases: - - hostnames: - - E1 - - Ms7c0 - - DQCq8lAh - ip: eKwSf - - hostnames: - - j5hqa - - 2yJxVYi - - 3i9 - ip: de - hostIPC: true - hostNetwork: true - hostPID: true - hostUsers: true - hostname: H4L810WpX - imagePullSecrets: - - name: yaN2Lmpx - - name: xDw - - name: apv4pFzhBjVx - initContainers: [] - nodeName: f2NAVVEK5e - nodeSelector: - VQbueW: qBbPRL - dm0kfT8Z: fo6X8 - preemptionPolicy: 戎n - priority: -355922683 - priorityClassName: G - readinessGates: - - conditionType: c棬mǃ¡ũʞ - - conditionType: d·ȥ - resourceClaims: - - name: vDDPU - - name: 6Kj5KeZ - - name: dckb26E - restartPolicy: 腦aȼVLjɢof -飕 - runtimeClassName: J51Hvp - schedulerName: 9N9BuRt - schedulingGates: - - name: 5OGdvDwQZ - securityContext: - fsGroup: 3343785438557929500 - fsGroupChangePolicy: Always - runAsGroup: 8681115766071522000 - runAsNonRoot: true - runAsUser: -2571971518779016000 - supplementalGroups: - - -2651151158394969600 - sysctls: - - name: gWGida2 - value: EXxd2y65is - serviceAccountName: e1RNmR0qi - setHostnameAsFQDN: false - subdomain: CY - terminationGracePeriodSeconds: -2459426983939630600 - tolerations: - - effect: ȟvS(p$ĘƢƈȍ - key: UVfmCM7k - operator: į鸳ɧ舛諣¡`鋲 脨岆Ƹ鬓鴣4涂砲z - tolerationSeconds: 2911494638029461000 - value: Q2jwBw4y - topologySpreadConstraints: - - labelSelector: {} - matchLabelKeys: - - 68dM4h - - sGU - - 4jULOMdhi7 - maxSkew: -877046888 - minDomains: -727956295 - nodeAffinityPolicy: Ȍ摔ë - nodeTaintsPolicy: 8爺ɭ¶7偀h鴞ě麿+ǭ媓,:Ƃ - topologyKey: w - whenUnsatisfiable: 'do&鯡iƷȋ:ƃ¨_:' - - labelSelector: - matchExpressions: - - key: "" - operator: '!' - values: - - odp7e - - key: uqHg - operator: ňÞɺ侶nJ甛Ƚ魲K凣Ā - values: - - W - - 25lA - - r - maxSkew: -1109097320 - minDomains: 1745016350 - nodeAffinityPolicy: s玦癮桋ɔřȏǭ?Řǃ^+ - nodeTaintsPolicy: 8秺´/h逰耥r - topologyKey: "Y" - whenUnsatisfiable: X!Ē - - labelSelector: - matchLabels: - Ck4cSQ: "" - G: lNI23Kw - matchLabelKeys: - - rxjITPswa - - mj - - AO - maxSkew: 1133850006 - minDomains: -658634592 - nodeAffinityPolicy: 滫統ǵɷ舭欑Y7玗幫ǓOƭ畺 - nodeTaintsPolicy: 痵Ħƾl毷,u高nʎ獗洺ÒN膍笢健 - topologyKey: ZUbNp - whenUnsatisfiable: ʃrx + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -84705,511 +146377,797 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: YoQanUblkHW - - name: M3D - - name: gpg8EfW +-- testdata/default-values.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-default +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-additional-controllers-default +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: annotations: null creationTimestamp: null labels: - DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + name: operator-election-role namespace: default -spec: - dnsNames: - - Y-webhook-service.default.svc - - Y-webhook-service.default.svc.eMY - issuerRef: - kind: Issuer - name: 02-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: YoQanUblkHW +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: annotations: null creationTimestamp: null labels: - DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 02-selfsigned-issuer + name: operator namespace: default -spec: - selfSigned: {} +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert + annotations: null creationTimestamp: null - name: 02-mutating-webhook-configuration + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Y-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert + annotations: null creationTimestamp: null - name: 02-validating-webhook-configuration + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-rpk-bundle namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: Y-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: - annotations: - "": iI7Bd - 9H7uauZ: fIw - G1: kAPGZ - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" + annotations: null creationTimestamp: null labels: - DQ: JM app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: "Y" + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: -crd-job + name: operator-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-election-role +subjects: +- kind: ServiceAccount + name: operator namespace: default --- testdata/case-096.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axov6PJ + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: nNP8R + name: operator + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator +subjects: +- kind: ServiceAccount + name: operator namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: "" - health: - healthProbeBindAddress: lvqpPK5eKr - kind: ChedzQo - leaderElection: - leaderElect: true - resourceName: sWNn - metrics: - bindAddress: rgNc - webhook: - port: 372 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: - annotations: - 3ph3En: TkDm8Umw - sQ: xI + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axov6PJ + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 3SkASoputZl-config + name: operator-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-additional-controllers +subjects: +- kind: ServiceAccount + name: operator namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: - annotations: - 3ph3En: TkDm8Umw - sQ: xI + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axov6PJ + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 3SkASoputZl-metrics-service + name: operator-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-rpk-bundle +subjects: +- kind: ServiceAccount + name: operator namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: axov6PJ --- # Source: operator/templates/entry-point.yaml apiVersion: v1 kind: Service metadata: - annotations: - 3ph3En: TkDm8Umw - sQ: xI + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axov6PJ + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: axov6PJ-webhook-service + name: operator-metrics-service namespace: default spec: ports: - - port: 443 - targetPort: 9443 + - name: https + port: 8443 + targetPort: https selector: app.kubernetes.io/instance: operator - app.kubernetes.io/name: axov6PJ + app.kubernetes.io/name: operator --- # Source: operator/templates/entry-point.yaml apiVersion: apps/v1 kind: Deployment metadata: - annotations: - 3ph3En: TkDm8Umw - sQ: xI + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axov6PJ + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: 3SkASoputZl + name: operator namespace: default spec: - replicas: 706970284 + replicas: 1 selector: matchLabels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: axov6PJ + app.kubernetes.io/name: operator strategy: - rollingUpdate: - maxSurge: 617699443 - maxUnavailable: 275149160 - type: .A觾 + type: RollingUpdate template: metadata: annotations: {} creationTimestamp: null labels: - 87UF9H: uLISBH0 - S8pIPxt1: 6p app.kubernetes.io/instance: operator - app.kubernetes.io/name: axov6PJ - j6HM: OxIJL - pWA: aDvN0CDtcMztj + app.kubernetes.io/name: operator spec: - activeDeadlineSeconds: 550779547880226300 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: "" - operator: +轴{苌á$ÝĿl\ - values: - - yEVNYtK - - WIC5ZN - - vTvkZUD - matchFields: - - key: VW - operator: ƯLÍ葵J悚LjEj鿒ʆ悟dž? - - key: Xn7C0 - operator: x冮 - values: - - p - - m3tN6 - - key: vaF1g - operator: Ǐ豃Äǥ遆Mȁ戚[=ȺĂ潰OŊɁ秓 - values: - - gqT9u3m8H - weight: -351781364 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: MBj - operator: µ鴈鑚ĝ胩H泯o機隆ñT髳鈍Ȕ笡Ǽ矓 - values: - - eX05 - - oMhHn - - key: "" - operator: G敯ǬȦ敫|:^FŽǒ聡M撾蛱 - - key: rO1kO7V - operator: =嵉 - values: - - ha0hN - - RtcdWRu - - matchExpressions: - - key: xNeB - operator: ~dzʧ屦鶵Ȼc叾gǎ艟ª - values: - - TrKoFU - - oQZZzSWRJE - - tmFp70H - - key: N5 - operator: ȫ檛±髿p鿴kø嘲,ɑcf踯 - values: - - qp - - JfB3HqjUS1 - matchFields: - - key: fZAirF - operator: )ň鐈ǒhĄ傴Ö噊 - values: - - Mu6JOTl9 - - key: Vnab3 - operator: 氅太妍@wì瓔箆L - values: - - xm3gfmiGb - - GzK - - matchExpressions: - - key: 1GpE8 - operator: ;LjŋŹƎ}¾蹉ʞ弆 - values: - - 34yIsdr - - p4gdl9 - - wXXz - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: xSnjni - operator: z - values: - - QwwBQif - - GBK - - key: aiM2Qiv - operator: fw塃髫·, - matchLabels: - "": eCUoOLQX - 0Hzi: ZjGO - mismatchLabelKeys: - - "65" - namespaceSelector: {} - namespaces: - - jRnXMuxXLr - - V1Dbg - topologyKey: V6B37Cx - weight: -565502833 - - podAffinityTerm: - labelSelector: - matchLabels: - BWDcQx: 7QzW5L38 - J7MZmQq2: Hc - KcfM4: cZQn - matchLabelKeys: - - Cq4P - - lBN0hp9 - - B0vaRhY4 - mismatchLabelKeys: - - CD2 - - RnNQGp - - IlBYaC - namespaceSelector: - matchLabels: - HK: 37HFCEj - UG: 53JjIlAj5 - namespaces: - - e1P - - 7ctg7lG - topologyKey: "1" - weight: 1779812559 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: f - operator: +¡Ⱥ窛柤B浪 - values: - - 7TN - - zoEO5 - - key: qWBWiBy - operator: 荼詓庈ǵ|Ħʭ~ - values: - - 17r5W8 - - E1iSxL - - key: sK - operator: 庛© - values: - - wt8cgCsy - matchLabels: - M0Ok: yq8ZE4TE - Md73: Xspa - QRF: W0tceICL9D - matchLabelKeys: - - F76TZ1M6 - mismatchLabelKeys: - - BIBQagnwWO - - fK - namespaceSelector: - matchExpressions: - - key: aBm - operator: ʔ李¸妛ÃĹ× - values: - - qROA - - Kjv - - key: vG - operator: ']Ś皝' - values: - - bBOM - - zwkRrw - - YwIq6 - - key: MJkhL - operator: ƈur[^ùʗ裉ž楄ɟ枼=iƘ螮ʪʞ胷 - values: - - NTmBqfMo - namespaces: - - c7nH - topologyKey: RqllFD - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: qSeEIW6Apx5W - operator: 蝻歃ʬfĴŢ錕 - values: - - H8S6EqA - - LJOpcpwKT - - key: hrPdzj3Mw - operator: "" - - key: XwB - operator: ŷȏR嘘咣貪9 - values: - - WuJg - matchLabels: - 0pM: zBiMfY - JwF: Ube - ctfv3: IwaRF6 - matchLabelKeys: - - k - - CFfSR - mismatchLabelKeys: - - ame - - 3eLdFIdt - namespaceSelector: - matchExpressions: - - key: 3OBCUOaVvzVM - operator: 龫嗰ñƮɗ熈É| - values: - - gyd5k - - FnZx - - key: 23i - operator: 靘þʫ®?土Xǣç+ - values: - - iWoMb - - dCgr9AcE - - "" - matchLabels: - 9sf: dnwoVQ2 - namespaces: - - jlD57GYm - - WOHEcN - - JQTco2ilX0 - topologyKey: hAV31Qv - automountServiceAccountToken: true + automountServiceAccountToken: false containers: - args: - --health-probe-bind-address=:8081 - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=v - - --configurator-base-image=xS + - --webhook-enabled=false + - --namespace=default + - --log-level=info + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator command: - /manager env: [] - image: xS:v - imagePullPolicy: Always + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent livenessProbe: - failureThreshold: 136 httpGet: path: /healthz/ port: 8081 - initialDelaySeconds: 953 - periodSeconds: 927 - successThreshold: 429 - terminationGracePeriodSeconds: 146 - timeoutSeconds: 833 + initialDelaySeconds: 15 + periodSeconds: 20 name: manager ports: - containerPort: 9443 @@ -85219,148 +147177,27 @@ spec: name: https protocol: TCP readinessProbe: - failureThreshold: 649 httpGet: path: /readyz port: 8081 - initialDelaySeconds: 409 - periodSeconds: 980 - successThreshold: 228 - terminationGracePeriodSeconds: 211 - timeoutSeconds: 674 - resources: - limits: - cpu: "267" - memory: "680" - requests: - cpu: "98" - memory: "479" + initialDelaySeconds: 5 + periodSeconds: 10 + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - o2YA - options: - - name: rpJ - value: 8wO3 - - value: sZ6V - dnsPolicy: Q - enableServiceLinks: true ephemeralContainers: null - hostAliases: - - hostnames: - - TO9 - - qAT - ip: iv - - ip: B - hostPID: true - hostUsers: false - hostname: sn26g - imagePullSecrets: - - name: QcP - - name: R2U0oMf0N - - name: 0drXBt + imagePullSecrets: [] initContainers: [] - nodeName: Dn36O8GLl2N - nodeSelector: - lsKAX2: "" - pl07LOV: iyuRUDY3 - preemptionPolicy: ÓɪÏM捾lª呤ĵǚȩ悕嬮ʔ獯M - priority: -532975533 - priorityClassName: oxhVXSmZ - readinessGates: - - conditionType: vl釾}&Ƽ頃坘斂ƛ - resourceClaims: - - name: viJ - - name: cp7L - - name: Kw30Uvsks - runtimeClassName: 46m7rxLW - schedulerName: "8" - schedulingGates: - - name: yLeDn - - name: dz5f4 - - name: jKbEJKXk8rP9 + nodeSelector: {} securityContext: - fsGroup: -6244828504979236000 - fsGroupChangePolicy: Always - runAsGroup: 7262050681363773000 - runAsNonRoot: true - runAsUser: 2807608889417989000 - supplementalGroups: - - -5471763151526323000 - - 8657413726406249000 - - 5967647221799464000 - sysctls: - - name: "" - value: yxvPZ - - name: Kw1cBNshv - value: MSm - - name: PViWFVa - value: 60Ua - serviceAccountName: nNP8R - setHostnameAsFQDN: true - subdomain: kUb - terminationGracePeriodSeconds: -6520358260173701000 - tolerations: - - effect: 3śǨA?幏Ȉ犮厚:極 - key: Jwt6dkh - operator: _ý竷 - tolerationSeconds: -7587356670156981000 - value: gGG - - effect: '{j$Ózm哘韤I]ǜ氃ǫȭȼ窆ȑ+' - key: WuZTIZTn - operator: ʖkɻE尯宋滇愚 - tolerationSeconds: 8496080604790588000 - value: SK3PIdx - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: c5fm - operator: 醿Ɵ若眐赟燔熬Ơ[蓹 - - key: dsqH - operator: "" - values: - - J6 - - Juatfa - - key: j21pMVew - operator: l:+峏ɍYÃ朵缍D榸荙ʪ dz4 - values: - - Pfu9 - matchLabels: - r0ZVuk0iLxe: kDtC8qRrnXh - zfvjCsZ: pkyXUe - maxSkew: 1010311869 - minDomains: 671823264 - nodeAffinityPolicy: 钩哉<雒Ņ嘙ȼ - nodeTaintsPolicy: 前|拱丅叇/ƻCĮh - topologyKey: Bd - whenUnsatisfiable: '&ô棙齆}襟Ǎ恻稶孤7Zʪ' - - labelSelector: - matchExpressions: - - key: 8xR - operator: R8ƠÔ, - values: - - j - - R - - 08B - matchLabels: - IAeV939: xyLVq1Ps83 - lVc: "" - matchLabelKeys: - - 0uS54AcB - maxSkew: 1129480646 - minDomains: -1902572954 - nodeAffinityPolicy: Ì3冓ŧ'Ƞ窕矺Ƈļ悅ʋ - nodeTaintsPolicy: 箒WGȈ(鳙á{ƝƟ驖 - topologyKey: "" - whenUnsatisfiable: qZȬ閯 + runAsUser: 65532 + serviceAccountName: operator + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -85374,129 +147211,12 @@ spec: - key: ca.crt path: ca.crt name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: 7DqgCF2lW - - name: 5Dsn - - name: LOFXwQCU - - name: rQux ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: - 3ph3En: TkDm8Umw - sQ: xI - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axov6PJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - axov6PJ-webhook-service.default.svc - - axov6PJ-webhook-service.default.svc.8 - issuerRef: - kind: Issuer - name: 3SkASoputZl-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: 7DqgCF2lW ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: - 3ph3En: TkDm8Umw - sQ: xI - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axov6PJ - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: 3SkASoputZl-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 3SkASoputZl-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: axov6PJ-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 3SkASoputZl-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: axov6PJ-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -85504,51 +147224,29 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: +<<<<<<< HEAD helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" creationTimestamp: null +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: axov6PJ + app.kubernetes.io/name: operator +<<<<<<< HEAD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: nNP8R-crd-job + name: operator-crd-job namespace: default --- testdata/case-097.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: MuFtP - health: - healthProbeBindAddress: WIsjt1 - kind: qrUo - leaderElection: - leaderElect: true - resourceName: Upp - metrics: - bindAddress: zOUvrhAiMkg - webhook: - port: 133 -kind: ConfigMap -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-config +======= + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml @@ -85556,71 +147254,100 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-metrics-reader + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services verbs: + - create + - delete - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-default -rules: + - list + - patch + - update + - watch - apiGroups: - - authentication.k8s.io + - apps resources: - - tokenreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - autoscaling resources: - - subjectaccessreviews + - horizontalpodautoscalers verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - consoles verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -85637,11 +147364,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -85650,15 +147382,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -85667,8 +147401,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -85678,30 +147436,39 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - events verbs: - create - - delete + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -85711,9 +147478,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -85723,9 +147490,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -85735,22 +147502,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -85760,82 +147529,52 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: KPhNK5uNi-default -subjects: -- kind: ServiceAccount - name: hOWRGjU5 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-election-role - namespace: default -rules: - apiGroups: - - "" + - coordination.k8s.io resources: - - configmaps + - leases verbs: - create - delete @@ -85845,16 +147584,22 @@ rules: - update - watch - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - networking.k8s.io resources: - - leases + - ingresses verbs: - create - delete @@ -85863,687 +147608,104 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi - namespace: default -rules: - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims - - pods + - poddisruptionbudgets verbs: + - create - delete - get - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-rpk-bundle - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services - verbs: - - get - - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: KPhNK5uNi-election-role -subjects: -- kind: ServiceAccount - name: hOWRGjU5 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: KPhNK5uNi -subjects: -- kind: ServiceAccount - name: hOWRGjU5 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-rpk-bundle - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: KPhNK5uNi-rpk-bundle -subjects: -- kind: ServiceAccount - name: hOWRGjU5 - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null - labels: - 1DVgfA62: TO - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: MkL0HtR + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: MkL0HtR-webhook-service + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-migration-job-default +subjects: +- kind: ServiceAccount + name: operator-migration-job namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: MkL0HtR --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j - creationTimestamp: null + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf - helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration namespace: default spec: - replicas: 1843856420 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: MkL0HtR - strategy: - rollingUpdate: - maxSurge: 547551553 - maxUnavailable: 1550314739 - type: ʋs锼E* template: metadata: - annotations: - 2H14: UmxAS - U5g0p: yuaycTPAR - a: iq - alOr8NH7: TxWNmXmHhCY - wrmSg: J0Ald8ZXm - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator - app.kubernetes.io/name: MkL0HtR + app.kubernetes.io/name: operator spec: - activeDeadlineSeconds: 8453138196629512000 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: MAVgRhlIw - operator: 郁z1hÚ}喌šūƫȒʋ%湦 - matchFields: - - key: lAPYYE - operator: úŸ橨v篘#v - values: - - Hbs - - plt - - awevjY - - key: gj0z - operator: 繌ř籮純鯁ȫ - values: - - cSoPPh - - key: hOq - operator: ơɂ簲ɮt?ɺ"nj9幚Ĭ瘫泂韻嗚ĵ - weight: 430419159 - - preference: - matchExpressions: - - key: atJOrQ - operator: 霷骴Ȑjɱ梯唡Ƈ亜9m - values: - - omBCX - - DOcC1 - - key: RPUBut - operator: =庪VÚʄ¬>ʂ麿ǨĩMLjɴy2+ - - key: wrkBzkuW - operator: '@Ŭ俒ĈƓ}ďȜ矃桞儻卄槴8Ûʟ' - values: - - FkaW67 - - xGT - - a9U - matchFields: - - key: bLx0 - operator: '纣ǫH榹ɐ眧¤­婮w ' - values: - - pC02CKW - - rx - - XSb - - key: xkIrY - operator: "" - weight: -1528981107 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: Cjg - operator: ʫ - matchFields: - - key: RkUF - operator: +紮o笍赖@Ãƫ獙甋p - - matchExpressions: - - key: X - operator: 鶄/8]嬜H²tįɖ兤ƴ濍 - values: - - 2y - matchLabels: - A: iGHu - qUKp: kSv9gQh - rgSonxW: mZ - matchLabelKeys: - - kPLfuzBI - mismatchLabelKeys: - - KdX - - hW7hCY - namespaceSelector: - matchExpressions: - - key: nZZPQn - operator: 薩呓Ǭ郞ÁĈ皻xF_ - values: - - MT - - jbKz - matchLabels: - aogTtoRlP: bhxF3W - f8G7V: Bo - topologyKey: itF8LPMHiW - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - B8kX: ps - ed0: yfr8Mo1s - mismatchLabelKeys: - - qTXnQ - - a - - Wkm1 - namespaceSelector: - matchLabels: - P: dlxV6 - QtoC8F98: d2 - fx37DkCYrj: zEtmwGL - namespaces: - - E0S - topologyKey: eVtM2oezTJ - weight: 925822609 automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=3EcYA - - --configurator-base-image=HoNUZ89Keda - - l9a - - Arx - - bLHpq0J3 + - migration command: - - /manager - env: [] - image: HoNUZ89Keda:3EcYA - imagePullPolicy: Never - livenessProbe: - failureThreshold: 847 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 922 - periodSeconds: 729 - successThreshold: 713 - terminationGracePeriodSeconds: 336 - timeoutSeconds: 324 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 362 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 964 - periodSeconds: 99 - successThreshold: 305 - terminationGracePeriodSeconds: 853 - timeoutSeconds: 141 - resources: - limits: - cpu: "212" - memory: "397" - requests: - cpu: "121" - memory: "731" + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - vD1Q - options: - - name: nocNEHfaAOe - value: 03vE - - name: QSNCgZ - value: "" - - name: fX8EUziir - value: h1lo - searches: - - MmVL - - 0ZNhetg4 - - fPbabAt - ephemeralContainers: null - hostAliases: - - hostnames: - - iuGeT9 - - L - - dzDpaq0m - ip: qQjd2 - - hostnames: - - ciiy7Zr1 - - de5O - ip: wJoe4k - hostPID: true - hostUsers: false - hostname: C0eddorzlX - imagePullSecrets: - - name: 4Ig - - name: aS - - name: zg - initContainers: [] - nodeName: ntH0dNCmb - nodeSelector: - "": m9D - K1fAX8N: BkIZia - OR83: OXDX - c0: Cw3DE - vLoT: zs - preemptionPolicy: ʞ鹅zM@#ť - priority: 80812349 - priorityClassName: XRWG - restartPolicy: 聥yfĜ縩 - runtimeClassName: A1IOFH - schedulerName: v89zEGC1E - schedulingGates: - - name: VX9B - securityContext: - fsGroup: -5684185103106526000 - fsGroupChangePolicy: OnRootMismatch - runAsGroup: -6734736261006962000 - runAsNonRoot: true - runAsUser: 6709862083486745000 - sysctls: - - name: XcMYeaD - value: bdrh - serviceAccountName: 4v - setHostnameAsFQDN: true - subdomain: JZBy8ZayZwcMF - terminationGracePeriodSeconds: -8250315328961058000 - tolerations: - - effect: 召Ǘ萃Ļ搲ňW#õ挝ǭO]}BʟFRT - key: Z - operator: qȄuűE匸 - tolerationSeconds: -4881064580795227000 - value: MBj - - effect: 鮋吪攏ǒTK - key: Su7DDEM - operator: èʗ*´ǒó鄶B$?ƣ厰} - tolerationSeconds: 7632226241464207000 - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: 0cumQ8tluj1c - operator: $鮖ɛ笼.j嵭驟俉Ȧȥ碿轾ő椫梁£f題 - matchLabels: - 1W3KQX: MpkDb - GtFt5w: R - maxSkew: 276375209 - minDomains: -1200472072 - nodeAffinityPolicy: 0橏孀Ɉœ - nodeTaintsPolicy: Ê曕{Wœ»$ - topologyKey: dl6bnLmrg - whenUnsatisfiable: Įǂ恼7靍ʀĝȀ=ĸ卌DŽĢ - - labelSelector: - matchExpressions: - - key: S - operator: Kv殌ÂʓÌZʀ資ʕƣȭ擁ɎY - values: - - z10m - - 5GGc1 - matchLabels: - D47d: u - matchLabelKeys: - - B - - F1EEoBx - - 2mLy27IC5 - maxSkew: 1503337367 - minDomains: 1416806673 - nodeAffinityPolicy: .3掲ʑ - nodeTaintsPolicy: ƜǟQ郤蟹ī籸烒É:籧kȟ_rɩ - topologyKey: tpp9zbzN - whenUnsatisfiable: ÑŗHupɩ嘅NƀƏȮ笡澛牪NJw - - labelSelector: - matchLabels: - 0aa: "" - matchLabelKeys: - - SkOlYv - - 0luz - maxSkew: 2123040071 - minDomains: 476945799 - nodeAffinityPolicy: lH洒Ņ顸ɐ]紗ȁ瀣 - nodeTaintsPolicy: ŧ/ô:儮6Ñ"廬懼"sS>瑘Ơ - topologyKey: WGNmR - whenUnsatisfiable: ȇ]漞ɜ煔C!rFÚ[ù&' + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -86563,780 +147725,1353 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: EJIW1 - - name: "" - - name: McerRJI +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +-- testdata/disabled-service-account-automount-token-with-volume-overwrite.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator + namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j + annotations: null creationTimestamp: null labels: - 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + name: operator-config namespace: default -spec: - dnsNames: - - MkL0HtR-webhook-service.default.svc - - MkL0HtR-webhook-service.default.svc.9vz2maUN9g - issuerRef: - kind: Issuer - name: KPhNK5uNi-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: EJIW1 --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - GnXQ: mU - dEUN: 9jQ - eWh: j + annotations: null creationTimestamp: null labels: - 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: KPhNK5uNi-selfsigned-issuer - namespace: default -spec: - selfSigned: {} + name: operator-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert + annotations: {} creationTimestamp: null - name: KPhNK5uNi-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: MkL0HtR-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert + annotations: {} creationTimestamp: null - name: KPhNK5uNi-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: MkL0HtR-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - miOT: 0tQoqwgkh - qxGIlj: xY0 + annotations: {} creationTimestamp: null labels: - 1DVgfA62: TO app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: MkL0HtR + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 - dwmXsKZoxFp: TZf helm.sh/chart: operator-25.1.4 - name: hOWRGjU5-crd-job + name: operator-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-default +subjects: +- kind: ServiceAccount + name: operator namespace: default --- testdata/case-098.yaml.golden -- --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: - annotations: - 4L: T4HM0h0 + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: LH + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: L + name: operator-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-additional-controllers-default +subjects: +- kind: ServiceAccount + name: operator namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: Yv - health: - healthProbeBindAddress: P - kind: AzYFtSq85 - leaderElection: - leaderElect: false - resourceName: igrTR - metrics: - bindAddress: U0X - webhook: - port: 269 -kind: ConfigMap +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - A: YuZnq6 + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: LH + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: iP-config + name: operator-election-role namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - A: YuZnq6 + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: LH + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: iP-metrics-service + name: operator namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: LH +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - A: YuZnq6 + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: LH + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: LH-webhook-service + name: operator-additional-controllers namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: LH +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role metadata: - annotations: - A: YuZnq6 + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: LH + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: iP + name: operator-rpk-bundle namespace: default -spec: - replicas: -2084315406 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: LH - strategy: - rollingUpdate: - maxSurge: 1353699977 - maxUnavailable: 132140350 - type: 毒醆ų粔,渞FƨȖ - template: - metadata: - annotations: - 16r: Njj9s - Ts: tJoO25k - bssVBE: "" - na: "66" - tBil: bsRufV62 - creationTimestamp: null - labels: - LnVk: ed9K - Vy3g: 6OA - app.kubernetes.io/instance: operator - app.kubernetes.io/name: LH - k3I6: wI - npjtD1N9QO: fb - spec: - activeDeadlineSeconds: 545118660215539400 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - key: ald - operator: ȴlȪu腩掕N - values: - - QIf64n5 - - key: hHmKEv - operator: "" - weight: -1268287639 - - preference: - matchExpressions: - - key: E - operator: 鯢ƐÑ$șűl - values: - - MDiM - - WXr8 - - key: MnV - operator: 搗諧ʑ篑V0粛 - values: - - ToI - - key: cMpL - operator: S炻螇Ȓȡ溜ƍ§  - matchFields: - - key: 4WZJu7 - operator: 7*楕ȿ杗Ŵ&Nʜ¤ǒ唁貖R - - key: 3K - operator: 汱[¶jKĬƛ"Rɤ莫檾ùǵ3Q硂 - values: - - Em7FnwV8 - - LvzZDy - - key: 8OSP - operator: ŷǗĨkY6蝷oX炰Ȳ鍛侵綜ʥ浧 - values: - - p - - c - weight: -1521381926 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchFields: - - key: deY2qL - operator: 僪Ǖ輈満Ǭȅ軩ʄ[Lʑ鶙h婍 - values: - - 3w - - 5kCYPTyW4H - - key: xrRA2b7 - operator: æ吩ÇȐ祇耺´áhA优w()ɨB - values: - - nAdB - - TbZ644d5 - - W8MxvKLY - - key: kH5O - operator: Xm{鶞竆棼] - values: - - DBrNWf1O - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - pOMm: YgM5C - matchLabelKeys: - - xb0W3 - - U9Z5 - mismatchLabelKeys: - - W2j - - NQU - - Bi4K - namespaceSelector: - matchLabels: - 9La7NrIsW9hs: kiZh - AMZur: YI - eD17ZVn: bOP - topologyKey: Y4nSDgLHUU83 - weight: 1168243410 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: FYU6jaRx - operator: "" - - key: 1G0P - operator: 铘Tʥȭ橆Ⱦɹb嫠獬#Ʒ弼蓮Ȇ - matchLabels: - K: PKwJL3m - matchLabelKeys: - - jR - - gDG - - vx3f - mismatchLabelKeys: - - "N" - - yocNWg5CR - namespaceSelector: - matchExpressions: - - key: mM7f - operator: 耳m黦3悇LP7ʝFɁr饒U沰Gʤƻ錾 - values: - - V5prB - - qF4z6 - - key: fXuR - operator: ~溥蠿A0鱢ǭxìX - values: - - nNM77Ukqw - - "461" - - key: dh - operator: ¡鷥叢#Xɤ;Fʔŋuûw - values: - - MH9D5l - - o - - UlIYIT - matchLabels: - uKZc: ebdq - namespaces: - - g0 - topologyKey: bm8 - weight: 1737502384 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: oLCSLPem - operator: 梉ʘ琓咻_b轝,ǡʍ匽ʅcǎb - matchLabelKeys: - - CV4HigFw - mismatchLabelKeys: - - g5n7ks - namespaceSelector: {} - topologyKey: ti3S - - labelSelector: - matchExpressions: - - key: "" - operator: ǴĽ^ă吭嬤ƫţ¶贡ǰZ+搭W笢q - values: - - Zj9W - - key: KpXFtva - operator: ǥǗ - values: - - Q5sTjgK - matchLabels: - 4v5: jQtD - R401l9rUj: rVe5 - matchLabelKeys: - - vL - mismatchLabelKeys: - - JhKxxK2g - namespaceSelector: - matchExpressions: - - key: "" - operator: ƽ邲Ƙ鬾É[D+VzsǂÐ*2® - - key: sQXR - operator: t¢ǂĬĬ馅H徶ęʁv輷 - - key: jJ - operator: 犁屾滬ƽ帹ğŎ-Ţ士tJɾȹ翺2 - values: - - yP9jnx - matchLabels: - "3": w2u5 - namespaces: - - oTbjakxO - - 4UXHSQ - topologyKey: CnoN - - labelSelector: - matchExpressions: - - key: i0m3imR - operator: 亿4ȅǵ葽呵&Cd嬚 - values: - - cd08S - - epeV - matchLabels: - Vi: wAjlUyRQKL - matchLabelKeys: - - 1s3GN0Q8YB - - kc99V - namespaceSelector: - matchExpressions: - - key: 4a776D - operator: 鍎ô³4a嚲ð - values: - - R6uXvLOEk - - VYeFB - - key: dIilgJQ - operator: ű鱒$+Ȇɳ艿a沍俸埔 - values: - - cUQcGHb - - EGhtIfoCD - - Y9IXc - matchLabels: - mPll5xZ: 7Pg6gu - namespaces: - - Pa5iF - - "" - - LeJzcHt - topologyKey: tFH - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: jFoQu - operator: '&zs)VXФlYAZRŰ岃!' - - key: uU4exdU - operator: 賾 - values: - - 9nlB9d - matchLabelKeys: - - N6aRuXn - mismatchLabelKeys: - - QCFq - - "0" - - 5cP - namespaceSelector: - matchLabels: - "": 0eUrGy - OOtA47: sFd - namespaces: - - "" - - Pw50 - - Z852nRmS - topologyKey: nWv - weight: -1358082559 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: KDHE - operator: 芲7Tô旇龮n踴酽ǦÇ - values: - - A - - jUxOXdqh - - bEh8NQQc - matchLabels: - "": 6lw - dkU4C12: rDEKG0ghK32by1z - matchLabelKeys: - - 26xZQi2t0 - - T95c27r6 - - hZ - mismatchLabelKeys: - - OQ0z - - lN1N - - wLsm - namespaceSelector: - matchExpressions: - - key: o - operator: 孻ķA<罅JA話Ĵ=蛻奲ȑ)*?焩藶勗 - values: - - 5b5AlNnx - matchLabels: - 9wwbN9zXP: xzl80R - DCWnY: zvgO - namespaces: - - xo - topologyKey: "" - - labelSelector: - matchExpressions: - - key: TO7 - operator: ʪ蛕ȣƇ訊ɔ涙ɪD# - values: - - EVAp - - key: Mq1cXCqn - operator: "" - - key: v9EpgKH - operator: 騛进怅ĉ鳦ǃŕ]轢宪泬Ə - values: - - Qj - - 7pgJ - - s5Bb - matchLabels: - Eogtig: mjIAV - matchLabelKeys: - - lPjkbOOt - - XBaEp - - Sa0Ag999 - mismatchLabelKeys: - - ErcgQS - - wknKG - - BZCC - namespaceSelector: - matchLabels: - tK6Qy5: 7DI1 - namespaces: - - UZdPeg - topologyKey: Pt7S - - labelSelector: - matchExpressions: - - key: i72cYW - operator: "" - - key: JvhLgGW - operator: 乘ƀ - matchLabelKeys: - - GX6z0C6F - - "" - - K83EDUe6 - mismatchLabelKeys: - - NTPXCIb - - pUtiiY6LdsE - namespaceSelector: - matchExpressions: - - key: mgkvAfh - operator: Dǻ1=VȞ畵ǝ*ɓnj|~²墐[柈 - values: - - 62G0D2N - - key: xXsil - operator: ;ʏ鎁塱鞩Ƣ輑俸藋酛fY敂需孛h· - values: - - yoSApSTbGc2 - - yIuVFn - - key: waJJLLnotI - operator: ï覸gɸO遃婍ŤF= - matchLabels: - mL: vHkR4b - namespaces: - - O - - UZ - - "" - topologyKey: kKU - automountServiceAccountToken: true +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-election-role +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-additional-controllers +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-rpk-bundle +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +kind: Service +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=info + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + livenessProbe: + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access-overwrite + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: operator + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: kube-api-access-overwrite + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 666 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: some-kube-root-ca-config-map.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: +<<<<<<< HEAD + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator +<<<<<<< HEAD + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-crd-job + namespace: default +======= + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-migration-job-default +subjects: +- kind: ServiceAccount + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=P - - --configurator-base-image=h8K - - P - - WM7Be - - JLya + - migration command: - - /manager - env: [] - image: h8K:P - imagePullPolicy: Always - livenessProbe: - failureThreshold: 807 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 369 - periodSeconds: 599 - successThreshold: 709 - terminationGracePeriodSeconds: 323 - timeoutSeconds: 4 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 339 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 644 - periodSeconds: 736 - successThreshold: 767 - terminationGracePeriodSeconds: 870 - timeoutSeconds: 438 - resources: - limits: - cpu: "999" - memory: "995" - requests: - cpu: "310" - memory: "451" + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - qpD5w - options: - - name: zj7ZjaHqjc - value: 5qwMFE2 - - name: lX0K - value: PjOY4lKisl0eB - searches: - - j6Heur6Yfcu - - ZfVso - dnsPolicy: Þ蕉豐}k剦ö - ephemeralContainers: null - hostAliases: - - hostnames: - - OjcDtB1C - ip: 5GcNoI - hostUsers: true - hostname: WPBEbkbr31C - imagePullSecrets: - - name: RpOpIPKb - - name: z - - name: CD - initContainers: [] - nodeName: vD - nodeSelector: - llGzbN: oI - vNIq: uv - wgpBg: lQkdHPNDw - preemptionPolicy: M過恳釁納xlʄ跾ôa - priority: -1879763257 - priorityClassName: SoOt - resourceClaims: - - name: NMMsJNTcTe - - name: c9Tig - - name: 6Ie - restartPolicy: 毃ăNJ瞩棁gɚIM/玏øetC - runtimeClassName: G55Wt6r - schedulerName: aAG - schedulingGates: - - name: T - - name: 74fRcwJH - securityContext: - fsGroup: 6137577561858794000 - fsGroupChangePolicy: Always - runAsGroup: -6949924418046833000 - runAsNonRoot: false - runAsUser: -3469124705118572000 - supplementalGroups: - - 50379161676887430 - - 2079034389514862800 - sysctls: - - name: lq4pd - value: c67ZfdgV0 - - name: KkmrwzTI83 - value: jROoHUT - serviceAccountName: Z1BDagA0D - setHostnameAsFQDN: true - subdomain: kVjWC - terminationGracePeriodSeconds: 2589748319900399000 - tolerations: - - effect: '}牘暺骫6ʬƋô渧ċǹ6«麰Ō浌ƚ' - key: nJTK9X - operator: 钽ŋ蟂ʗʒw/廱}!韕綥= - tolerationSeconds: -1109275824266343600 - value: WmIbDeZ - - effect: ʙ凸X\H飄ȵjȝȫ(醟p佣}Ŵ迖ƴ - key: 8pT71 - operator: <¶ǂ偾w巨縘EDzĄ凿 - tolerationSeconds: -4714273216746741000 - value: 7J3 - - effect: Dzĕ滁NǍ矣鱪湗蓜fXƅLjʨ砣 - key: ICvl9 - operator: ɬNh3ɔ]?ɘ+嫎Ķ呆 - tolerationSeconds: -235107692735406240 - value: pFLe6d0v9vvM - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: C - operator: 醯\Ȁ蛷Qŏh+J!贍 - values: - - QXJ - - bU - - key: G - operator: ŋuoH倊Ɛ漞圳ËÞ - - key: MyERu6o2dS - operator: 帀 - values: - - Jb7Q - - 8KzFIG8 - - vYtqR - matchLabels: - pPwQ: UZYWrq3 - maxSkew: 573942645 - minDomains: 549576695 - nodeAffinityPolicy: 駯Ȃŀɣ愸Ē棚鬏ªǸ& - nodeTaintsPolicy: nJ2V躴Ɔ湝鐄wƹK庖ưWȮ - topologyKey: eZyZ - whenUnsatisfiable: 絾ĉ儧举覶/ɹ栈ŕȓ炃7ɞƅµlj - - labelSelector: - matchExpressions: - - key: fkCFp - operator: 軧Ɗ-ʊĭR 誣ɧijĆȡQ - - key: 8PZ3dT4 - operator: ǁ - maxSkew: -812684638 - minDomains: -1931448912 - nodeAffinityPolicy: ;醴 - nodeTaintsPolicy: 漮©ʧ矜`ŵ桿圻釘[繁紁ʝ臒JVA - topologyKey: fdWGr - whenUnsatisfiable: Ǵ禒 + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] volumes: - name: kube-api-access projected: @@ -87356,256 +149091,978 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: q9uoI4af +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +-- testdata/enabled-service-account-automount-token-in-only-service-account-resource.yaml.golden -- +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: true +kind: ServiceAccount +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +data: + controller_manager_config.yaml: |- + apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 + health: + healthProbeBindAddress: :8081 + kind: ControllerManagerConfig + leaderElection: + leaderElect: true + resourceName: aa9fc693.vectorized.io + metrics: + bindAddress: 127.0.0.1:8080 + webhook: + port: 9443 +kind: ConfigMap +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-config + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-metrics-reader +rules: +- nonResourceURLs: + - /metrics + verbs: + - get +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-default +rules: +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/finalizers + - schemas/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas/status + - schemas/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - schemas + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers-default +rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - configmaps + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: - annotations: - A: YuZnq6 + annotations: {} creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: LH + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: redpanda-serving-cert + name: operator-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-default +subjects: +- kind: ServiceAccount + name: operator namespace: default -spec: - dnsNames: - - LH-webhook-service.default.svc - - LH-webhook-service.default.svc.oHW - issuerRef: - kind: Issuer - name: iP-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: q9uoI4af --- # Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-additional-controllers-default +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-election-role + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator + namespace: default +rules: +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-additional-controllers + namespace: default +rules: +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-rpk-bundle + namespace: default +rules: +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-election-role + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-election-role +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + annotations: null + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator +subjects: +- kind: ServiceAccount + name: operator + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: - annotations: - A: YuZnq6 + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: LH + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: iP-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: iP-mutating-webhook-configuration + name: operator-additional-controllers namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: LH-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: iP-validating-webhook-configuration +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-additional-controllers +subjects: +- kind: ServiceAccount + name: operator namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: LH-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding metadata: - annotations: - 4L: T4HM0h0 - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" + annotations: null creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: LH + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - name: L-crd-job + name: operator-rpk-bundle + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: operator-rpk-bundle +subjects: +- kind: ServiceAccount + name: operator namespace: default --- testdata/case-099.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount +kind: Service metadata: annotations: null creationTimestamp: null labels: - E3s: wWjO - OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: vE4AZ + name: operator-metrics-service namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: nkytr - health: - healthProbeBindAddress: "" - kind: LDPwZMT2 - leaderElection: - leaderElect: false - resourceName: INZ37 - metrics: - bindAddress: H - webhook: - port: 98 -kind: ConfigMap +apiVersion: apps/v1 +kind: Deployment metadata: annotations: null creationTimestamp: null labels: - E3s: wWjO - OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv + app.kubernetes.io/name: operator app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj-config + name: operator namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + creationTimestamp: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - --health-probe-bind-address=:8081 + - --metrics-bind-address=:8443 + - --leader-elect + - --webhook-enabled=false + - --namespace=default + - --log-level=info + - --configurator-tag=v25.1.4 + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + imagePullPolicy: IfNotPresent + livenessProbe: + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: operator + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount metadata: - annotations: null + annotations: +<<<<<<< HEAD + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" creationTimestamp: null +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) labels: - E3s: wWjO - OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv + app.kubernetes.io/name: operator +<<<<<<< HEAD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get + name: operator-crd-job + namespace: default +======= + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job + namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: {} - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - E3s: wWjO - OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj-default + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default rules: - apiGroups: - - authentication.k8s.io + - "" resources: - - tokenreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - authorization.k8s.io + - apps resources: - - subjectaccessreviews + - deployments verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumes + - horizontalpodautoscalers verbs: + - create + - delete - get - list - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - nodes + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: + - create + - delete - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -87622,11 +150079,16 @@ rules: - "" resources: - events - - secrets - - serviceaccounts - - services verbs: - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete - get - list - patch @@ -87635,15 +150097,17 @@ rules: - apiGroups: - "" resources: - - nodes + - persistentvolumes verbs: - get - list + - patch - watch - apiGroups: - "" resources: - persistentvolumeclaims + - pods verbs: - delete - get @@ -87652,8 +150116,32 @@ rules: - apiGroups: - "" resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: + - create - delete - get - list @@ -87663,30 +150151,39 @@ rules: - apiGroups: - "" resources: - - pods/finalizers - - pods/status + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - events verbs: - create - - delete + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: - get - list - - patch - - update - watch - apiGroups: - - cert-manager.io + - apps resources: - - certificates - - clusterissuers - - issuers + - deployments + - statefulsets verbs: - create - delete @@ -87696,9 +150193,9 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - autoscaling resources: - - ingresses + - horizontalpodautoscalers verbs: - create - delete @@ -87708,9 +150205,9 @@ rules: - update - watch - apiGroups: - - policy + - batch resources: - - poddisruptionbudgets + - jobs verbs: - create - delete @@ -87720,22 +150217,24 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cert-manager.io resources: - - clusterrolebindings - - clusterroles + - certificates + - issuers verbs: - create + - delete - get - list - patch - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters - consoles + - nodepools + - redpandas verbs: - create - delete @@ -87745,78 +150244,65 @@ rules: - update - watch - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/finalizers - - consoles/finalizers + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - patch - update - apiGroups: - - redpanda.vectorized.io + - cluster.redpanda.com resources: - - clusters/status - - consoles/status + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - get - patch - update - apiGroups: - - scheduling.k8s.io + - cluster.redpanda.com resources: - - priorityclasses + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - get - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: 5U9oyj-default -subjects: -- kind: ServiceAccount - name: vE4AZ - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj-election-role - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - configmaps + - podmonitors + - servicemonitors verbs: - create - delete @@ -87826,16 +150312,21 @@ rules: - update - watch - apiGroups: - - "" + - networking.k8s.io resources: - - events + - ingresses verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - policy resources: - - leases + - poddisruptionbudgets verbs: - create - delete @@ -87844,662 +150335,92 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj - namespace: default -rules: - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - persistentvolumeclaims - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create - delete - get - list + - patch + - update - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: 5U9oyj-election-role -subjects: -- kind: ServiceAccount - name: vE4AZ - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: - E3s: wWjO - OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj - namespace: default + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: 5U9oyj + kind: ClusterRole + name: operator-migration-job-default subjects: - kind: ServiceAccount - name: vE4AZ - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: RoJFv ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: RoJFv-webhook-service + name: operator-migration-job namespace: default -spec: - ports: - - port: 443 - targetPort: 9443 - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: RoJFv --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: - E3s: wWjO - OD7: D app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration namespace: default spec: - replicas: -1597924950 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: RoJFv - strategy: - rollingUpdate: - maxSurge: 198206459 - maxUnavailable: 462449305 - type: 櫖hƹp template: metadata: - annotations: - C1Z: 4udi - L: 7WHv2 - Mqp: 7JBCm - rQHygw: mwv - creationTimestamp: null + annotations: {} labels: - 2hLH2: sWMHe - CxNya22J: RYElnz app.kubernetes.io/instance: operator - app.kubernetes.io/name: RoJFv - q5: uwn4hBPXu + app.kubernetes.io/name: operator spec: - activeDeadlineSeconds: -735193340589213400 - affinity: - nodeAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - preference: {} - weight: 693437617 - - preference: - matchFields: - - key: bZXMlw6 - operator: oÐ撽釹5Ɇ ¦s² - values: - - sDd - - 8F2y - - v4bxGEZ - - key: wKBrH9y - operator: 盙[宩Ū鈂KÄ - values: - - V - - UKDu2Jx - - LRaFvDN - weight: -311349832 - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: JK - operator: :槍ä·Ź柕ɴ癚 - - key: ag - operator: 嚡犝ɋ(Ȕ^ɷ}猻悘nqß°盚vɨ琝c - values: - - NN - - key: Bn - operator: 曄cȾǗNJƹò}=鞋婘 - values: - - rdIWf9 - - F2 - - cRPLp8BT - matchFields: - - key: sBClmvIiR - operator: ƿ - values: - - e - - ct - - key: "" - operator: '}ƕ1ɜDȆsȡǂD桘去' - values: - - Aqd - - 5Pj9nU5 - - JIcAFrGF - - key: dVMHpb - operator: "" - values: - - k - - tOKWTv - - matchExpressions: - - key: HBsK - operator: ɬE值Et堓菷` - - key: "" - operator: ūh;JŦȪ瑀 - values: - - kjdNzpt - - u3by6 - - key: f3sh8v5 - operator: 桮妌 - values: - - To - - iYEBR0IW - - x9faSamFd - matchFields: - - key: u - operator: 锞Àɞ$Ƀ - - key: uou3KQ - operator: 跴m軋[ª轰 - values: - - Gx - - Pf - - 0Oqt - podAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: l0TsuVz94g1 - operator: '}+' - values: - - eXNk - - Vpy8AY - - BBWW6wicG - - key: CBlj - operator: 餮ƶ - values: - - ofcM9VKBk - - d7oFmB - matchLabels: - Bx: M6sAKG - N7: b8l2TfN06P - yZNElq8: "" - matchLabelKeys: - - 2dc - - 3StV01meR - - D - mismatchLabelKeys: - - 4MocNms9WRN - - xXVciQ - - wmb - namespaceSelector: - matchLabels: - "": Fxf - FC9avyj: u - namespaces: - - Ei9Tu - topologyKey: gtTUI7 - weight: 352051879 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: wSGdCS - operator: dzhȗ - - key: BMVNbAg3 - operator: 您`9ÿW绑,H - - key: 9WOEn5Mh8XE - operator: 扦U - values: - - bas2Fw - - "n" - matchLabelKeys: - - Vy9q - - "1" - mismatchLabelKeys: - - MA7DQ4i - - "0" - - xGKUX7UXiMmUz7 - namespaceSelector: - matchExpressions: - - key: UgSCNn0GropZx - operator: 儴窫Ü桩mj祄e - matchLabels: - 76l: c3N - L4s5Kur: HtfD - namespaces: - - C - topologyKey: Spo - weight: -954161113 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: hU4hJaJq - operator: Į羼| - values: - - eYLK - - key: C - operator: ƄʙŦàŌ硩ĵ槼Ȱ - values: - - WcCKN - - 5NTz1o - matchLabels: - 06E49h0: UbEf - G2a3: Iz7dd - Uhpu: rqIWeSl - matchLabelKeys: - - "7" - mismatchLabelKeys: - - JPKTQ - namespaceSelector: - matchExpressions: - - key: rvk8VYWw - operator: 玀|ǁħ璮 - values: - - gboly3a - - qYMqw9V - - cNVEN - - key: aW3vIV - operator: 歬釽1}Ʋł耢Ňʣ4鍝脟j疞2 - values: - - "3" - - pF - matchLabels: - A: tjBR - topologyKey: xIzwui - weight: 779867361 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - key: OxQpwolJYXu - operator: 鯹ʚʁ匶Ŏ愀郂扛[þ4矬ŏ - values: - - wPh - - key: mKRRQkKAI - operator: ĺʒǫL - values: - - 7xbgN - - eAw4iz - matchLabels: - Ayl: 9NnmG - F: JNmeRe - izqyN7gWS: LiVpUbwcO - matchLabelKeys: - - cxr21qN3 - - "" - - pfd8 - mismatchLabelKeys: - - GVA6z - - w - namespaceSelector: - matchExpressions: - - key: ecA2NLwK - operator: 1鶰÷ʃ毰x?ɒʟŁ曇匳6 - values: - - "0" - - lDLm5J - - q - matchLabels: - vnoklGOuVC9: hN1Vx8 - namespaces: - - IkwR - - R26hEScp5Oqz - topologyKey: iY - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: YkG1lBP8 - operator: I - values: - - M - - 8TdKG - - GI0k - - key: 1jE2 - operator: '拚tr棌矣:' - values: - - oWO - - 7c7dLTFPoct - matchLabels: - i: lM8gG - lGbHM: PmuZkUsB - matchLabelKeys: - - x - - VNC - mismatchLabelKeys: - - "0" - - RkAy - - 3t8PvXFQ - namespaceSelector: - matchExpressions: - - key: b6hOguxE - operator: '"ĨƗÙ颁"鰅+āɁ6Ȋ8' - - key: eh4r7GI - operator: "" - - key: hxSS82ftGV - operator: 輱憖v蕎 - values: - - p5cY - matchLabels: - B: j5 - dJd11: Xvsc - mj26Lyw: A7oJL6fXlyiV - namespaces: - - e3nw4U6hGP - topologyKey: P - weight: 1549444999 - - podAffinityTerm: - labelSelector: - matchExpressions: - - key: ka - operator: 犁兙幕粭¢ - values: - - eeiaxE - matchLabels: - 594QWs: HaUpe - IctcNe: W9LXmi - bAU: hMgEYY - matchLabelKeys: - - OlucqhxTA - - QG4OFhr - namespaceSelector: - matchExpressions: - - key: MK3pj - operator: ʅǴ縦眪嫓b哹熑D - - key: W3iVTA - operator: Ĭ怖ȧ蜔镱竃暉卅 - values: - - 3G - - pcrdR - matchLabels: - tZEBPU: i70BhvLpdQ - namespaces: - - O - - "8" - topologyKey: O - weight: 385351436 - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: {} - matchLabelKeys: - - gtw - mismatchLabelKeys: - - 3TMqPb - - m - - lBEuOKnQ - namespaceSelector: {} - namespaces: - - HBzv - topologyKey: ee9r - - labelSelector: - matchExpressions: - - key: Bo3lXeT - operator: ë憛-畇J匾Ȧİ - matchLabels: - JyTmc: nF6t4FWoUh - eIaCTzevFHv: UGx - matchLabelKeys: - - s86A - - x - - hARrWalx - mismatchLabelKeys: - - oE4FScEQ - - XpwDsvKa - - asUShfC - namespaceSelector: - matchLabels: - JvNpLgE: "" - namespaces: - - vL - - mLu7RlSV - - bQRFLW - topologyKey: d automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=true - - --webhook-enabled=true - - --webhook-cert-path=/tmp/k8s-webhook-server/serving-certs - - --configurator-tag=HAScR - - --configurator-base-image=C9o + - migration command: - - /manager - env: [] - image: C9o:HAScR - imagePullPolicy: Never - livenessProbe: - failureThreshold: 391 - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 425 - periodSeconds: 631 - successThreshold: 167 - terminationGracePeriodSeconds: 927 - timeoutSeconds: 122 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - failureThreshold: 660 - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 13 - periodSeconds: 781 - successThreshold: 780 - terminationGracePeriodSeconds: 784 - timeoutSeconds: 696 - resources: - limits: - cpu: "641" - memory: "710" - requests: - cpu: "117" - memory: "875" + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - dnsConfig: - nameservers: - - 2CpyVbnvo - options: - - name: yxl - value: QUBh - - name: ePNFrIFJ1Y5 - value: Jxzn - - name: ytC - value: "" - searches: - - BwsHNyhJ - - ycnipfaM6C - - V - dnsPolicy: Y坝Ïʁ - enableServiceLinks: true - ephemeralContainers: null - hostAliases: - - ip: hU1 - - hostnames: - - weRRE - ip: f8Tjq9H0 - - ip: 4Po - hostIPC: true - hostUsers: true - imagePullSecrets: - - name: ToyEMZ - - name: DUuKKoSMVIr - - name: XQ - initContainers: [] - nodeName: UVVey - nodeSelector: - BAev5kTlRODN: dX - C3bQIT: xsa7cM - F8X5: F6KozO4 - tGO: bHUSg0 - preemptionPolicy: "N" - priority: -85316965 - priorityClassName: eG - readinessGates: - - conditionType: ȈʉsƻÞ額紿簀êŏ蜌呒ÔY脂ʏd_ - - conditionType: ȣ裩>岣偤 - - conditionType: 愊«漀沧Ĝeƾ¬蘸#ǡǣ崥ȗP - resourceClaims: - - name: Fp3HF - restartPolicy: 悸郊瘀Ǖ媦á蠝遴Ɗɫ×DǵŨ姭驈ƶɊ僽 - runtimeClassName: r7UMT44 - schedulerName: gq - securityContext: - fsGroup: 2925426353529579500 - fsGroupChangePolicy: Always - runAsGroup: -8895832925862921000 - runAsNonRoot: false - runAsUser: 6754487347817984000 - supplementalGroups: - - -7829883370998095000 - - 7231314824541344000 - sysctls: - - name: o1 - value: txAKqz - serviceAccountName: eczy - setHostnameAsFQDN: true - subdomain: PLW46 - terminationGracePeriodSeconds: 7787644037227988000 + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-migration-job + terminationGracePeriodSeconds: 10 tolerations: [] - topologySpreadConstraints: - - labelSelector: - matchExpressions: - - key: woH - operator: sOǟ鯝鵽*讻^ƹſBd翧換_啾鬟 - values: - - 9rt - - I - - w - - key: rw - operator: "" - values: - - nAmnD - - FE7I - - 7Jxc - - key: tEE - operator: ʓ#J籱Ɍbĵ赟 a鯈ƹĢo绢n - values: - - XXm - - bIMse - - m - matchLabels: - Ke: aK7pHX - SKcae7L: I5EirEQb - maxSkew: 1646139378 - minDomains: -1068408282 - nodeAffinityPolicy: ĝw - nodeTaintsPolicy: ɩ艁NJ - topologyKey: ZmjDn - whenUnsatisfiable: )坞]yQÆT聤ćŭ volumes: - name: kube-api-access projected: @@ -88519,192 +150440,12 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: cert - secret: - defaultMode: 420 - secretName: 1Z3N4ti - - name: qQ - - name: w ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - annotations: null - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: redpanda-serving-cert - namespace: default -spec: - dnsNames: - - RoJFv-webhook-service.default.svc - - RoJFv-webhook-service.default.svc.Y - issuerRef: - kind: Issuer - name: 5U9oyj-selfsigned-issuer - privateKey: - rotationPolicy: Never - secretName: 1Z3N4ti ---- -# Source: operator/templates/entry-point.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - annotations: null - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj-selfsigned-issuer - namespace: default -spec: - selfSigned: {} ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 5U9oyj-mutating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: RoJFv-webhook-service - namespace: default - path: /mutate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - annotations: null - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: 5U9oyj-metrics-monitor - namespace: default -spec: - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - path: /metrics - port: https - scheme: https - tlsConfig: - ca: {} - cert: {} - insecureSkipVerify: true - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr ---- -# Source: operator/templates/entry-point.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/redpanda-serving-cert - creationTimestamp: null - name: 5U9oyj-validating-webhook-configuration - namespace: default -webhooks: -- admissionReviewVersions: - - v1 - - v1beta1 - clientConfig: - service: - name: RoJFv-webhook-service - namespace: default - path: /validate-redpanda-vectorized-io-v1alpha1-cluster - failurePolicy: Fail - name: mcluster.kb.io - rules: - - apiGroups: - - redpanda.vectorized.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - clusters - sideEffects: None ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - E3s: wWjO - OD7: D - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - rnKI: dxHr - name: vE4AZ-crd-job - namespace: default --- testdata/crd-installation-experimental.yaml.golden -- +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) +-- testdata/enabled-service-account-automount-token-in-service-account-resource.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: false +automountServiceAccountToken: true kind: ServiceAccount metadata: annotations: null @@ -89469,7 +151210,7 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/name: operator spec: - automountServiceAccountToken: false + automountServiceAccountToken: true containers: - args: - --health-probe-bind-address=:8081 @@ -89540,57 +151281,436 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace +<<<<<<< HEAD +======= +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job + namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crd-job-default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default rules: - apiGroups: - - apiextensions.k8s.io + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io resources: - - customresourcedefinitions + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: - create + - delete - get + - list - patch - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crd-job-default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: operator-crd-job-default + name: operator-migration-job-default subjects: - kind: ServiceAccount - name: operator-crd-job + name: operator-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml @@ -89598,23 +151718,21 @@ apiVersion: batch/v1 kind: Job metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-5" - creationTimestamp: null + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crds + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration namespace: default spec: template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/name: operator @@ -89622,13 +151740,12 @@ spec: automountServiceAccountToken: false containers: - args: - - crd - - --experimental + - migration command: - /redpanda-operator - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent - name: crd-installation + name: migration resources: {} securityContext: allowPrivilegeEscalation: false @@ -89639,7 +151756,7 @@ spec: imagePullSecrets: [] nodeSelector: {} restartPolicy: OnFailure - serviceAccountName: operator-crd-job + serviceAccountName: operator-migration-job terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -89661,7 +151778,7 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace --- testdata/crd-installation.yaml.golden -- +-- testdata/license-with-key.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -89669,13 +151786,12 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator namespace: default --- @@ -89697,13 +151813,12 @@ data: kind: ConfigMap metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-config namespace: default --- @@ -89712,14 +151827,13 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-metrics-reader + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -89731,15 +151845,85 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-default rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - authentication.k8s.io resources: @@ -89752,9 +151936,177 @@ rules: - subjectaccessreviews verbs: - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - cluster.redpanda.com resources: + - consoles + - nodepools - redpandas verbs: - create @@ -89767,30 +152119,90 @@ rules: - apiGroups: - cluster.redpanda.com resources: + - nodepools/finalizers + - redpandaroles/finalizers - redpandas/finalizers - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers - topics/finalizers - users/finalizers verbs: - update - apiGroups: - - cluster.redpanda.com + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - ingresses verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - - cluster.redpanda.com + - policy resources: - - schemas - - topics - - users + - poddisruptionbudgets verbs: + - create + - delete - get - list - patch @@ -89801,6 +152213,8 @@ rules: resources: - clusterrolebindings - clusterroles + - rolebindings + - roles verbs: - create - delete @@ -89815,13 +152229,12 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-additional-controllers-default rules: - apiGroups: @@ -89830,6 +152243,39 @@ rules: - persistentvolumes verbs: - patch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - statefulsets + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -89858,15 +152304,37 @@ rules: - get - list - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update - apiGroups: - "" resources: - configmaps + - pods - secrets verbs: - get - list - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + verbs: + - delete + - get + - list + - patch + - update + - watch - apiGroups: - "" resources: @@ -89877,6 +152345,13 @@ rules: - patch - update - watch +- apiGroups: + - apps + resources: + - statefulsets/status + verbs: + - patch + - update - apiGroups: - cluster.redpanda.com resources: @@ -89894,19 +152369,28 @@ rules: - list - patch - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-default roleRef: apiGroup: rbac.authorization.k8s.io @@ -89922,13 +152406,12 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io @@ -89940,24 +152423,177 @@ subjects: namespace: default --- # Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +apiVersion: v1 +kind: Service metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-metrics-service + namespace: default +spec: + ports: + - name: https + port: 8443 + targetPort: https + selector: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator +--- +# Source: operator/templates/entry-point.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + annotations: null + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator + namespace: default +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + strategy: + type: RollingUpdate + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=false + - --health-probe-bind-address=:8081 + - --leader-elect + - --license-file-path=/redpanda/license/my-redpanda-license + - --log-level=info + - --metrics-bind-address=:8443 + - --webhook-enabled=false + command: + - /manager + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + livenessProbe: + httpGet: + path: /healthz/ + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + name: manager + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + - containerPort: 8443 + name: https + protocol: TCP + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + - mountPath: /redpanda/license + name: license + readOnly: true + ephemeralContainers: null + imagePullSecrets: [] + initContainers: [] + nodeSelector: {} + securityContext: + runAsUser: 65532 + serviceAccountName: operator + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: license + secret: + defaultMode: 420 + secretName: my-secret +--- +# Source: operator/templates/entry-point.yaml +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default rules: - apiGroups: - "" resources: - configmaps + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -89967,16 +152603,21 @@ rules: - update - watch - apiGroups: - - "" + - apps resources: - - events + - deployments verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - coordination.k8s.io + - autoscaling resources: - - leases + - horizontalpodautoscalers verbs: - create - delete @@ -89985,26 +152626,10 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -rules: - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles verbs: - create - delete @@ -90014,13 +152639,17 @@ rules: - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - configmaps - - pods - - secrets - - serviceaccounts - - services + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses verbs: - create - delete @@ -90030,25 +152659,21 @@ rules: - update - watch - apiGroups: - - "" + - authentication.k8s.io resources: - - events + - tokenreviews verbs: - create - - patch - apiGroups: - - apps + - authorization.k8s.io resources: - - controllerrevisions + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - - apps + - "" resources: - - deployments - - statefulsets + - configmaps verbs: - create - delete @@ -90058,9 +152683,16 @@ rules: - update - watch - apiGroups: - - autoscaling + - "" resources: - - horizontalpodautoscalers + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases verbs: - create - delete @@ -90070,30 +152702,47 @@ rules: - update - watch - apiGroups: - - batch + - "" resources: - - jobs + - persistentvolumes verbs: - - create - - delete - get - list - patch - - update - watch - apiGroups: - - cert-manager.io + - "" resources: - - certificates - - issuers + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list - apiGroups: - coordination.k8s.io resources: @@ -90107,10 +152756,13 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - "" resources: - - podmonitors - - servicemonitors + - configmaps + - pods + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -90120,21 +152772,25 @@ rules: - update - watch - apiGroups: - - networking.k8s.io + - "" resources: - - ingresses + - events verbs: - create - - delete + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: - get - list - - patch - - update - watch - apiGroups: - - policy + - apps resources: - - poddisruptionbudgets + - deployments + - statefulsets verbs: - create - delete @@ -90144,10 +152800,9 @@ rules: - update - watch - apiGroups: - - rbac.authorization.k8s.io + - autoscaling resources: - - rolebindings - - roles + - horizontalpodautoscalers verbs: - create - delete @@ -90156,421 +152811,175 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default -rules: - apiGroups: - - "" + - batch resources: - - events + - jobs verbs: - create + - delete + - get + - list - patch + - update + - watch - apiGroups: - - "" + - cert-manager.io resources: - - persistentvolumeclaims + - certificates + - issuers verbs: + - create - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - cluster.redpanda.com resources: - - pods - - secrets + - consoles + - nodepools + - redpandas verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - apps + - cluster.redpanda.com resources: - - statefulsets + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - get - - list - - watch + - update - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumeclaims + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - delete - get - - list - patch - update - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumeclaims + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - delete - get - list - patch - update - watch - apiGroups: - - "" + - coordination.k8s.io resources: - - pods + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - apps + - monitoring.coreos.com resources: - - statefulsets/status + - podmonitors + - servicemonitors verbs: + - create + - delete + - get + - list - patch - update + - watch - apiGroups: - - "" + - networking.k8s.io resources: - - persistentvolumeclaims - - pods + - ingresses verbs: + - create - delete - get - - list - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default -rules: + - list + - patch + - update + - watch - apiGroups: - - "" + - policy resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services + - poddisruptionbudgets verbs: + - create + - delete - get - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-election-role -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-additional-controllers -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-rpk-bundle -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-metrics-service - namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator ---- -# Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator - strategy: - type: RollingUpdate - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator - spec: - automountServiceAccountToken: false - containers: - - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=info - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator - command: - - /manager - env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 - imagePullPolicy: IfNotPresent - livenessProbe: - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: {} - securityContext: - allowPrivilegeEscalation: false - volumeMounts: - - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access - readOnly: true - ephemeralContainers: null - imagePullSecrets: [] - initContainers: [] - nodeSelector: {} - securityContext: - runAsUser: 65532 - serviceAccountName: operator - terminationGracePeriodSeconds: 10 - tolerations: [] - volumes: - - name: kube-api-access - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 3607 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: kube-root-ca.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crd-job - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crd-job-default -rules: + - patch + - update + - watch - apiGroups: - - apiextensions.k8s.io + - rbac.authorization.k8s.io resources: - - customresourcedefinitions + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: - create + - delete - get + - list - patch - update + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crd-job-default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: operator-crd-job-default + name: operator-migration-job-default subjects: - kind: ServiceAccount - name: operator-crd-job + name: operator-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml @@ -90578,23 +152987,21 @@ apiVersion: batch/v1 kind: Job metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-5" - creationTimestamp: null + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crds + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration namespace: default spec: template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/name: operator @@ -90602,12 +153009,12 @@ spec: automountServiceAccountToken: false containers: - args: - - crd + - migration command: - /redpanda-operator - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent - name: crd-installation + name: migration resources: {} securityContext: allowPrivilegeEscalation: false @@ -90618,7 +153025,7 @@ spec: imagePullSecrets: [] nodeSelector: {} restartPolicy: OnFailure - serviceAccountName: operator-crd-job + serviceAccountName: operator-migration-job terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -90640,7 +153047,7 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace --- testdata/default-values.yaml.golden -- +-- testdata/license.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -90648,13 +153055,12 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator namespace: default --- @@ -90676,13 +153082,12 @@ data: kind: ConfigMap metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-config namespace: default --- @@ -90691,14 +153096,13 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-metrics-reader + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -90710,31 +153114,21 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create -- apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - configmaps + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -90744,42 +153138,9 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com - resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers - verbs: - - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas/status - - schemas/status - - topics/status - - users/status - verbs: - - get - - patch - - update -- apiGroups: - - cluster.redpanda.com - resources: - - schemas - - topics - - users - verbs: - - get - - list - - patch - - update - - watch -- apiGroups: - - rbac.authorization.k8s.io + - apps resources: - - clusterrolebindings - - clusterroles + - deployments verbs: - create - delete @@ -90788,151 +153149,62 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers-default -rules: -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - patch -- apiGroups: - - "" - resources: - - configmaps - - nodes - - secrets - verbs: - - get - - list - - watch - apiGroups: - - "" + - autoscaling resources: - - persistentvolumes + - horizontalpodautoscalers verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - configmaps - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - update - watch - apiGroups: - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - - watch -- apiGroups: - - "" - resources: - - persistentvolumes - verbs: - - get - - list - - patch - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: operator-default -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: operator-additional-controllers-default -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role - namespace: default -rules: + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create - apiGroups: - "" resources: @@ -90964,22 +153236,48 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list - apiGroups: - coordination.k8s.io resources: @@ -91073,6 +153371,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -91125,6 +153480,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -91138,19 +153495,23 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-additional-controllers-default rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch - apiGroups: - "" resources: @@ -91184,6 +153545,34 @@ rules: - get - list - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -91194,6 +153583,16 @@ rules: - list - patch - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -91208,10 +153607,12 @@ rules: - apiGroups: - "" resources: - - pods + - persistentvolumes verbs: - get - list + - patch + - update - watch - apiGroups: - apps @@ -91220,114 +153621,50 @@ rules: verbs: - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes verbs: - - delete - get - list + - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-election-role -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-additional-controllers + kind: ClusterRole + name: operator-default subjects: - kind: ServiceAccount name: operator @@ -91335,22 +153672,20 @@ subjects: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-rpk-bundle + kind: ClusterRole + name: operator-additional-controllers-default subjects: - kind: ServiceAccount name: operator @@ -91361,13 +153696,12 @@ apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-metrics-service namespace: default spec: @@ -91384,13 +153718,12 @@ apiVersion: apps/v1 kind: Deployment metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator namespace: default spec: @@ -91404,7 +153737,6 @@ spec: template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/name: operator @@ -91412,18 +153744,20 @@ spec: automountServiceAccountToken: false containers: - args: + - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --configurator-tag=v25.3.1 + - --enable-console=true + - --enable-vectorized-controllers=false - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - --leader-elect - - --webhook-enabled=false - - --namespace=default + - --license-file-path=/redpanda/license/my-secret - --log-level=info - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --metrics-bind-address=:8443 + - --webhook-enabled=false command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent livenessProbe: httpGet: @@ -91452,6 +153786,9 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true + - mountPath: /redpanda/license + name: license + readOnly: true ephemeralContainers: null imagePullSecrets: [] initContainers: [] @@ -91480,6 +153817,10 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace + - name: license + secret: + defaultMode: 420 + secretName: my-secret --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -91487,113 +153828,41 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crd-job - namespace: default --- testdata/disabled-service-account-automount-token-with-volume-overwrite.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-config + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-metrics-reader -rules: -- nonResourceURLs: - - /metrics - verbs: - - get ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create -- apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - configmaps + - secrets + - serviceaccounts + - services verbs: - create - delete @@ -91603,42 +153872,33 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com - resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers - verbs: - - update -- apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - deployments verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - schemas - - topics - - users + - horizontalpodautoscalers verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - cluster.redpanda.com resources: - - clusterrolebindings - - clusterroles + - consoles verbs: - create - delete @@ -91647,81 +153907,68 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers-default -rules: - apiGroups: - - "" + - cluster.redpanda.com resources: - - persistentvolumes + - consoles/status verbs: + - get - patch + - update - apiGroups: - - "" + - networking.k8s.io resources: - - configmaps - - nodes - - secrets + - ingresses verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - delete - - get - - list - - patch - - update + - create - apiGroups: - - cluster.redpanda.com + - authorization.k8s.io resources: - - redpandas + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - configmaps - - secrets verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" resources: - - persistentvolumes + - events verbs: - - get - - list + - create - patch - - update - - watch - apiGroups: - - cluster.redpanda.com + - coordination.k8s.io resources: - - redpandas + - leases verbs: + - create + - delete - get - list + - patch + - update - watch - apiGroups: - "" @@ -91732,113 +153979,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: operator-default -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: operator-additional-controllers-default -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -91933,9 +154106,11 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -91945,47 +154120,52 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - create - - delete - - get - - list - - patch - update - - watch - apiGroups: - - networking.k8s.io + - cluster.redpanda.com resources: - - ingresses + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - policy + - cluster.redpanda.com resources: - - poddisruptionbudgets + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - rolebindings - - roles + - leases verbs: - create - delete @@ -91994,70 +154174,37 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create - - patch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - delete - get - list + - patch + - update - watch - apiGroups: - - "" - resources: - - pods - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - "" + - networking.k8s.io resources: - - persistentvolumeclaims + - ingresses verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims + - poddisruptionbudgets verbs: + - create - delete - get - list @@ -92065,205 +154212,65 @@ rules: - update - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list - - watch -- apiGroups: - - apps - resources: - - statefulsets/status - verbs: - patch - update -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services - verbs: - - get - - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-election-role -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-additional-controllers -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-rpk-bundle + kind: ClusterRole + name: operator-migration-job-default subjects: - kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-metrics-service + name: operator-migration-job namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration namespace: default spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator - strategy: - type: RollingUpdate template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/name: operator @@ -92271,52 +154278,23 @@ spec: automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=info - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - migration command: - - /manager - env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent - livenessProbe: - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 + name: migration resources: {} securityContext: allowPrivilegeEscalation: false volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount - name: kube-api-access-overwrite - ephemeralContainers: null + name: kube-api-access + readOnly: true imagePullSecrets: [] - initContainers: [] nodeSelector: {} - securityContext: - runAsUser: 65532 - serviceAccountName: operator + restartPolicy: OnFailure + serviceAccountName: operator-migration-job terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -92338,58 +154316,20 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace - - name: kube-api-access-overwrite - projected: - defaultMode: 420 - sources: - - serviceAccountToken: - expirationSeconds: 666 - path: token - - configMap: - items: - - key: ca.crt - path: ca.crt - name: some-kube-root-ca-config-map.crt - - downwardAPI: - items: - - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - path: namespace +-- testdata/multicluster.yaml.golden -- --- # Source: operator/templates/entry-point.yaml apiVersion: v1 automountServiceAccountToken: false kind: ServiceAccount -metadata: - annotations: - helm.sh/hook: pre-install,pre-upgrade - helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crd-job - namespace: default --- testdata/enabled-service-account-automount-token-in-only-service-account-resource.yaml.golden -- ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: true -kind: ServiceAccount metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator namespace: default --- @@ -92411,13 +154351,12 @@ data: kind: ConfigMap metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-config namespace: default --- @@ -92426,14 +154365,13 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-metrics-reader + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-default-metrics-reader rules: - nonResourceURLs: - /metrics @@ -92445,31 +154383,33 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -92479,42 +154419,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -92523,82 +154462,59 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers-default -rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - patch + - create - apiGroups: - - "" + - authorization.k8s.io resources: - - configmaps - - nodes - - secrets + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - events verbs: - - get - - list - - watch + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - secrets + - serviceaccounts verbs: + - create - get - - list - - watch + - patch + - update - apiGroups: - "" resources: @@ -92608,113 +154524,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: operator-default -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: operator-additional-controllers-default -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -92808,6 +154650,63 @@ rules: - patch - update - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch - apiGroups: - coordination.k8s.io resources: @@ -92860,6 +154759,8 @@ rules: - apiGroups: - rbac.authorization.k8s.io resources: + - clusterrolebindings + - clusterroles - rolebindings - roles verbs: @@ -92873,19 +154774,23 @@ rules: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role +kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-additional-controllers-default rules: +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - patch - apiGroups: - "" resources: @@ -92919,6 +154824,34 @@ rules: - get - list - watch +- apiGroups: + - "" + resources: + - configmaps + - nodes + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - delete + - get + - list + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -92929,6 +154862,16 @@ rules: - list - patch - update +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -92943,10 +154886,12 @@ rules: - apiGroups: - "" resources: - - pods + - persistentvolumes verbs: - get - list + - patch + - update - watch - apiGroups: - apps @@ -92955,114 +154900,50 @@ rules: verbs: - patch - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandas + verbs: + - get + - list + - watch - apiGroups: - "" resources: - - persistentvolumeclaims - - pods + - persistentvolumes verbs: - - delete - get - list + - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default -rules: - apiGroups: - "" resources: - - configmaps - - endpoints - - events - - limitranges - persistentvolumeclaims - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services verbs: + - delete - get - list + - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-election-role -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-additional-controllers + kind: ClusterRole + name: operator-default subjects: - kind: ServiceAccount name: operator @@ -93070,22 +154951,20 @@ subjects: --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: {} labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-additional-controllers-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-rpk-bundle + kind: ClusterRole + name: operator-additional-controllers-default subjects: - kind: ServiceAccount name: operator @@ -93096,13 +154975,12 @@ apiVersion: v1 kind: Service metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator-metrics-service namespace: default spec: @@ -93119,13 +154997,12 @@ apiVersion: apps/v1 kind: Deployment metadata: annotations: null - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 name: operator namespace: default spec: @@ -93139,7 +155016,6 @@ spec: template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/name: operator @@ -93147,18 +155023,26 @@ spec: automountServiceAccountToken: false containers: - args: + - multicluster + - --base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --base-tag=v25.3.1 + - --ca-file=/tls/ca.crt + - --certificate-file=/tls/tls.crt - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default + - --kubeconfig-name=operator + - --kubeconfig-namespace=default + - --kubernetes-api-address=https://dns.address.for.my.kubernetes.api.server:8080 - --log-level=info - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - --metrics-bind-address=:8443 + - --name=blue + - --private-key-file=/tls/tls.key + - --raft-address=0.0.0.0:9443 + - --peer=west://some.dns.label:9443 + - --peer=east://some.other.dns.label:9443 command: - - /manager + - /redpanda-operator env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent livenessProbe: httpGet: @@ -93187,6 +155071,9 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true + - mountPath: /tls + name: operator-multicluster-certificates + readOnly: true ephemeralContainers: null imagePullSecrets: [] initContainers: [] @@ -93215,6 +155102,17 @@ spec: apiVersion: v1 fieldPath: metadata.namespace path: namespace + - name: operator-multicluster-certificates + secret: + items: + - key: tls.crt + path: tls.crt + - key: tls.key + path: tls.key + - key: ca.crt + path: ca.crt + secretName: operator-multicluster-certificates +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) --- # Source: operator/templates/entry-point.yaml apiVersion: v1 @@ -93234,101 +155132,88 @@ metadata: helm.sh/chart: operator-25.1.4 name: operator-crd-job namespace: default --- testdata/enabled-service-account-automount-token-in-service-account-resource.yaml.golden -- +<<<<<<< HEAD +======= --- # Source: operator/templates/entry-point.yaml apiVersion: v1 -automountServiceAccountToken: true +automountServiceAccountToken: false kind: ServiceAccount metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -data: - controller_manager_config.yaml: |- - apiVersion: controller-runtime.sigs.k8s.io/v1alpha1 - health: - healthProbeBindAddress: :8081 - kind: ControllerManagerConfig - leaderElection: - leaderElect: true - resourceName: aa9fc693.vectorized.io - metrics: - bindAddress: 127.0.0.1:8080 - webhook: - port: 9443 -kind: ConfigMap -metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-config + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-metrics-reader + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-crd-job-default rules: -- nonResourceURLs: - - /metrics +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions verbs: + - create - get + - patch + - update --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - annotations: {} - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default rules: - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io + - "" resources: - - subjectaccessreviews + - configmaps + - secrets + - serviceaccounts + - services verbs: - create + - delete + - get + - list + - patch + - update + - watch - apiGroups: - - cluster.redpanda.com + - apps resources: - - redpandas + - deployments verbs: - create - delete @@ -93338,42 +155223,41 @@ rules: - update - watch - apiGroups: - - cluster.redpanda.com + - autoscaling resources: - - redpandas/finalizers - - schemas/finalizers - - topics/finalizers - - users/finalizers + - horizontalpodautoscalers verbs: + - create + - delete + - get + - list + - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - redpandas/status - - schemas/status - - topics/status - - users/status + - consoles verbs: + - create + - delete - get + - list - patch - update + - watch - apiGroups: - cluster.redpanda.com resources: - - schemas - - topics - - users + - consoles/status verbs: - get - - list - patch - update - - watch - apiGroups: - - rbac.authorization.k8s.io + - networking.k8s.io resources: - - clusterrolebindings - - clusterroles + - ingresses verbs: - create - delete @@ -93382,82 +155266,59 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers-default -rules: - apiGroups: - - "" + - authentication.k8s.io resources: - - persistentvolumes + - tokenreviews verbs: - - patch + - create - apiGroups: - - "" + - authorization.k8s.io resources: - - configmaps - - nodes - - secrets + - subjectaccessreviews verbs: - - get - - list - - watch + - create - apiGroups: - "" resources: - - persistentvolumes + - configmaps verbs: + - create - delete - get - list - patch - update -- apiGroups: - - cluster.redpanda.com - resources: - - redpandas - verbs: - - get - - list - watch - apiGroups: - "" resources: - - configmaps - - secrets + - events verbs: - - get - - list - - watch + - create + - patch - apiGroups: - - "" + - coordination.k8s.io resources: - - persistentvolumes + - leases verbs: + - create + - delete - get - list - patch - update - watch - apiGroups: - - cluster.redpanda.com + - "" resources: - - redpandas + - secrets + - serviceaccounts verbs: + - create - get - - list - - watch + - patch + - update - apiGroups: - "" resources: @@ -93467,113 +155328,39 @@ rules: - list - patch - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: operator-default -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers-default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: operator-additional-controllers-default -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role - namespace: default -rules: - apiGroups: - "" resources: - - configmaps + - persistentvolumeclaims + - pods verbs: - - create - delete - get - list - - patch - - update - watch - apiGroups: - "" resources: - - events + - nodes verbs: - - create - - patch + - get - apiGroups: - - coordination.k8s.io + - "" resources: - - leases + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services verbs: - - create - - delete - get - list - - patch - - update - - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -rules: - apiGroups: - coordination.k8s.io resources: @@ -93668,9 +155455,11 @@ rules: - update - watch - apiGroups: - - coordination.k8s.io + - cluster.redpanda.com resources: - - leases + - consoles + - nodepools + - redpandas verbs: - create - delete @@ -93680,47 +155469,52 @@ rules: - update - watch - apiGroups: - - monitoring.coreos.com + - cluster.redpanda.com resources: - - podmonitors - - servicemonitors + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers verbs: - - create - - delete - - get - - list - - patch - update - - watch - apiGroups: - - networking.k8s.io + - cluster.redpanda.com resources: - - ingresses + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status verbs: - - create - - delete - get - - list - patch - update - - watch - apiGroups: - - policy + - cluster.redpanda.com resources: - - poddisruptionbudgets + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users verbs: - - create - - delete - get - list - patch - update - watch - apiGroups: - - rbac.authorization.k8s.io + - coordination.k8s.io resources: - - rolebindings - - roles + - leases verbs: - create - delete @@ -93729,70 +155523,37 @@ rules: - patch - update - watch ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default -rules: - apiGroups: - - "" + - monitoring.coreos.com resources: - - events + - podmonitors + - servicemonitors verbs: - create - - patch -- apiGroups: - - "" - resources: - - persistentvolumeclaims - verbs: - delete - get - list + - patch + - update - watch - apiGroups: - - "" - resources: - - pods - - secrets - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - "" + - networking.k8s.io resources: - - persistentvolumeclaims + - ingresses verbs: + - create - delete - get - list - patch - update + - watch - apiGroups: - - "" + - policy resources: - - persistentvolumeclaims + - poddisruptionbudgets verbs: + - create - delete - get - list @@ -93800,245 +155561,103 @@ rules: - update - watch - apiGroups: - - "" + - rbac.authorization.k8s.io resources: - - pods + - clusterrolebindings + - clusterroles + - rolebindings + - roles verbs: + - create + - delete - get - list - - watch -- apiGroups: - - apps - resources: - - statefulsets/status - verbs: - patch - update -- apiGroups: - - "" - resources: - - persistentvolumeclaims - - pods - verbs: - - delete - - get - - list - watch --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default -rules: -- apiGroups: - - "" - resources: - - configmaps - - endpoints - - events - - limitranges - - persistentvolumeclaims - - pods - - pods/log - - replicationcontrollers - - resourcequotas - - serviceaccounts - - services - verbs: - - get - - list ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-election-role - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-election-role -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator -subjects: -- kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-additional-controllers - namespace: default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-crd-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-additional-controllers + kind: ClusterRole + name: operator-crd-job-default subjects: - kind: ServiceAccount - name: operator + name: operator-crd-job namespace: default --- # Source: operator/templates/entry-point.yaml apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding +kind: ClusterRoleBinding metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-rpk-bundle - namespace: default + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default roleRef: apiGroup: rbac.authorization.k8s.io - kind: Role - name: operator-rpk-bundle + kind: ClusterRole + name: operator-migration-job-default subjects: - kind: ServiceAccount - name: operator - namespace: default ---- -# Source: operator/templates/entry-point.yaml -apiVersion: v1 -kind: Service -metadata: - annotations: null - creationTimestamp: null - labels: - app.kubernetes.io/instance: operator - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-metrics-service + name: operator-migration-job namespace: default -spec: - ports: - - name: https - port: 8443 - targetPort: https - selector: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator --- # Source: operator/templates/entry-point.yaml -apiVersion: apps/v1 -kind: Deployment +apiVersion: batch/v1 +kind: Job metadata: - annotations: null - creationTimestamp: null + annotations: + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-5" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-crds namespace: default spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/instance: operator - app.kubernetes.io/name: operator - strategy: - type: RollingUpdate template: metadata: annotations: {} - creationTimestamp: null labels: app.kubernetes.io/instance: operator app.kubernetes.io/name: operator spec: - automountServiceAccountToken: true + automountServiceAccountToken: false containers: - args: - - --health-probe-bind-address=:8081 - - --metrics-bind-address=:8443 - - --leader-elect - - --webhook-enabled=false - - --namespace=default - - --log-level=info - - --configurator-tag=v25.1.4 - - --configurator-base-image=docker.redpanda.com/redpandadata/redpanda-operator + - crd + - --multicluster command: - - /manager - env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v25.1.4 + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 imagePullPolicy: IfNotPresent - livenessProbe: - httpGet: - path: /healthz/ - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - name: manager - ports: - - containerPort: 9443 - name: webhook-server - protocol: TCP - - containerPort: 8443 - name: https - protocol: TCP - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 + name: crd-installation resources: {} securityContext: allowPrivilegeEscalation: false @@ -94046,13 +155665,10 @@ spec: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - ephemeralContainers: null imagePullSecrets: [] - initContainers: [] nodeSelector: {} - securityContext: - runAsUser: 65532 - serviceAccountName: operator + restartPolicy: OnFailure + serviceAccountName: operator-crd-job terminationGracePeriodSeconds: 10 tolerations: [] volumes: @@ -94076,23 +155692,71 @@ spec: path: namespace --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: batch/v1 +kind: Job metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crd-job + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) -- testdata/operator-cluster-scoped.yaml.golden -- --- # Source: operator/templates/entry-point.yaml @@ -94821,23 +156485,513 @@ webhooks: sideEffects: None --- # Source: operator/templates/entry-point.yaml -apiVersion: v1 -automountServiceAccountToken: false -kind: ServiceAccount +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + annotations: +<<<<<<< HEAD + helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + creationTimestamp: null +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator +<<<<<<< HEAD + app.kubernetes.io/version: v25.1.4 + helm.sh/chart: operator-25.1.4 + name: operator-crd-job + namespace: default +======= + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-migration-job-default +subjects: +- kind: ServiceAccount + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job metadata: annotations: - helm.sh/hook: pre-install,pre-upgrade + helm.sh/hook: post-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed - helm.sh/hook-weight: "-10" - creationTimestamp: null + helm.sh/hook-weight: "-4" labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v25.1.4 - helm.sh/chart: operator-25.1.4 - name: operator-crd-job + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) -- testdata/operator-namespaced-scoped-with-secuirty-context.yaml.golden -- --- # Source: operator/templates/entry-point.yaml @@ -95692,15 +157846,505 @@ automountServiceAccountToken: false kind: ServiceAccount metadata: annotations: +<<<<<<< HEAD helm.sh/hook: pre-install,pre-upgrade helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed helm.sh/hook-weight: "-10" creationTimestamp: null +======= + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) labels: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator +<<<<<<< HEAD app.kubernetes.io/version: v25.1.4 helm.sh/chart: operator-25.1.4 name: operator-crd-job namespace: default +======= + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +rules: +- apiGroups: + - "" + resources: + - configmaps + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - apps + resources: + - deployments + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles/status + verbs: + - get + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create +- apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - persistentvolumes + verbs: + - get + - list + - patch + - watch +- apiGroups: + - "" + resources: + - persistentvolumeclaims + - pods + verbs: + - delete + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - limitranges + - persistentvolumeclaims + - pods + - pods/log + - replicationcontrollers + - resourcequotas + - serviceaccounts + - services + verbs: + - get + - list +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - configmaps + - pods + - secrets + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - apps + resources: + - controllerrevisions + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - batch + resources: + - jobs + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cert-manager.io + resources: + - certificates + - issuers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - consoles + - nodepools + - redpandas + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/finalizers + - redpandaroles/finalizers + - redpandas/finalizers + - schemas/finalizers + - shadowlinks/finalizers + - stretchclusters/finalizers + - topics/finalizers + - users/finalizers + verbs: + - update +- apiGroups: + - cluster.redpanda.com + resources: + - nodepools/status + - redpandaroles/status + - redpandas/status + - schemas/status + - shadowlinks/status + - stretchclusters/status + - topics/status + - users/status + verbs: + - get + - patch + - update +- apiGroups: + - cluster.redpanda.com + resources: + - redpandaroles + - schemas + - shadowlinks + - stretchclusters + - topics + - users + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - rolebindings + - roles + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +--- +# Source: operator/templates/entry-point.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-10" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration-job-default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: operator-migration-job-default +subjects: +- kind: ServiceAccount + name: operator-migration-job + namespace: default +--- +# Source: operator/templates/entry-point.yaml +apiVersion: batch/v1 +kind: Job +metadata: + annotations: + helm.sh/hook: post-upgrade + helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded,hook-failed + helm.sh/hook-weight: "-4" + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: operator + app.kubernetes.io/version: v25.3.1 + helm.sh/chart: operator-25.3.1 + name: operator-migration + namespace: default +spec: + template: + metadata: + annotations: {} + labels: + app.kubernetes.io/instance: operator + app.kubernetes.io/name: operator + spec: + automountServiceAccountToken: false + containers: + - args: + - migration + command: + - /redpanda-operator + image: docker.redpanda.com/redpandadata/redpanda-operator:v25.3.1 + imagePullPolicy: IfNotPresent + name: migration + resources: {} + securityContext: + allowPrivilegeEscalation: false + volumeMounts: + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: kube-api-access + readOnly: true + imagePullSecrets: [] + nodeSelector: {} + restartPolicy: OnFailure + serviceAccountName: operator-migration-job + terminationGracePeriodSeconds: 10 + tolerations: [] + volumes: + - name: kube-api-access + projected: + defaultMode: 420 + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) diff --git a/operator/cmd/main.go b/operator/cmd/main.go index 7083ffc0a..b81262319 100644 --- a/operator/cmd/main.go +++ b/operator/cmd/main.go @@ -19,6 +19,11 @@ import ( "github.com/redpanda-data/redpanda-operator/operator/cmd/bootstrap" "github.com/redpanda-data/redpanda-operator/operator/cmd/configurator" "github.com/redpanda-data/redpanda-operator/operator/cmd/crd" +<<<<<<< HEAD +======= + "github.com/redpanda-data/redpanda-operator/operator/cmd/migration" + "github.com/redpanda-data/redpanda-operator/operator/cmd/multicluster" +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) "github.com/redpanda-data/redpanda-operator/operator/cmd/ready" "github.com/redpanda-data/redpanda-operator/operator/cmd/run" "github.com/redpanda-data/redpanda-operator/operator/cmd/sidecar" @@ -53,6 +58,7 @@ func init() { supervisor.Command(), syncclusterconfig.Command(), version.Command(), + migration.Command(), ) logOptions.BindFlags(rootCmd.PersistentFlags()) diff --git a/operator/cmd/migration/fieldmanagers.go b/operator/cmd/migration/fieldmanagers.go new file mode 100644 index 000000000..6ea8045c0 --- /dev/null +++ b/operator/cmd/migration/fieldmanagers.go @@ -0,0 +1,192 @@ +// Copyright 2026 Redpanda Data, Inc. +// +// Use of this software is governed by the Business Source License +// included in the file licenses/BSL.md +// +// As of the Change Date specified in that file, in accordance with +// the Business Source License, use of this software will be governed +// by the Apache License, Version 2.0 + +package migration + +import ( + "context" + "slices" + + "github.com/redpanda-data/common-go/kube" + apierrors "k8s.io/apimachinery/pkg/api/errors" + "k8s.io/apimachinery/pkg/api/meta" + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" + "k8s.io/client-go/util/retry" + "sigs.k8s.io/controller-runtime/pkg/client" + + consolechart "github.com/redpanda-data/redpanda-operator/charts/console/v3" + redpandachart "github.com/redpanda-data/redpanda-operator/charts/redpanda/v25" + redpandav1alpha2 "github.com/redpanda-data/redpanda-operator/operator/api/redpanda/v1alpha2" + "github.com/redpanda-data/redpanda-operator/operator/internal/lifecycle" +) + +var undesiredFieldManagers = []string{ + "*kube.Ctl", +} + +// this is a potentially heavy operation +func migrateFieldManagers(ctx context.Context, ctl *kube.Ctl, k8sClient client.Client) error { + var redpandas redpandav1alpha2.RedpandaList + if err := k8sClient.List(ctx, &redpandas); err != nil { + return err + } + + var consoles redpandav1alpha2.ConsoleList + if err := k8sClient.List(ctx, &consoles); err != nil { + return err + } + + redpandaTypes := redpandachart.Types() + consoleTypes := consolechart.Types() + ownershipResolver := lifecycle.NewV2OwnershipResolver() + + for _, rp := range redpandas.Items { + if err := maybeUpdate(ctx, undesiredFieldManagers, ctl, k8sClient, &rp); err != nil { + return err + } + + // get the ownership labels for Redpanda-owned resources + labels := ownershipResolver.GetOwnerLabels(&lifecycle.ClusterWithPools{ + Redpanda: &rp, + }) + for _, rt := range redpandaTypes { + resources, err := listIfResourceExists(ctx, k8sClient, labels, &rp, rt) + if err != nil { + return err + } + for _, resource := range resources { + if err := maybeUpdate(ctx, undesiredFieldManagers, ctl, k8sClient, resource); err != nil { + return err + } + } + } + } + + for _, console := range consoles.Items { + if err := maybeUpdate(ctx, undesiredFieldManagers, ctl, k8sClient, &console); err != nil { + return err + } + + // get ownership labels for the Console controller + labels := consoleOwnershipLabels(&console) + for _, rt := range consoleTypes { + resources, err := listIfResourceExists(ctx, k8sClient, labels, &console, rt) + if err != nil { + return err + } + for _, resource := range resources { + if err := maybeUpdate(ctx, undesiredFieldManagers, ctl, k8sClient, resource); err != nil { + return err + } + } + } + } + + return nil +} + +// copied from operator/internal/controller/console/controller.go +func consoleOwnershipLabels(console *redpandav1alpha2.Console) map[string]string { + return map[string]string{ + "app.kubernetes.io/name": consolechart.ChartName, + "app.kubernetes.io/managed-by": "redpanda-operator", + "app.kubernetes.io/instance": console.Name, + } +} + +func maybeUpdate(ctx context.Context, undesiredManagers []string, ctl *kube.Ctl, k8sClient client.Client, obj client.Object) error { + if !removeFieldManagers(undesiredManagers, obj) { + return nil + } + + // deep-copy as paranoia for potential overwrite during retry loop + managers := obj.DeepCopyObject().(client.Object).GetManagedFields() + if err := retry.RetryOnConflict(retry.DefaultRetry, func() error { + if err := k8sClient.Get(ctx, client.ObjectKeyFromObject(obj), obj); err != nil { + if apierrors.IsNotFound(err) { + // resource was deleted, just skip + return nil + } + return err + } + obj.SetManagedFields(managers) + return k8sClient.Update(ctx, obj) + }); err != nil { + return err + } + + // now we do a fetch + server-side apply to make sure that our field manager owns any + // fields that it should in-case anything was orphaned by the removal above + return ctl.Apply(ctx, obj, client.ForceOwnership) +} + +func removeFieldManagers(undesiredManagers []string, obj client.Object) bool { + managers := obj.GetManagedFields() + updated := []metav1.ManagedFieldsEntry{} + changed := false + for _, manager := range managers { + if slices.Contains(undesiredManagers, manager.Manager) { + changed = true + continue + } + updated = append(updated, manager) + } + if changed { + obj.SetManagedFields(updated) + } + return changed +} + +// this logic is roughly Syncer.listInPurview from the kube package +func listIfResourceExists(ctx context.Context, k8sClient client.Client, labels map[string]string, owner client.Object, objectType client.Object) ([]client.Object, error) { + gvk, err := kube.GVKFor(k8sClient.Scheme(), objectType) + if err != nil { + return nil, err + } + + mapping, err := k8sClient.RESTMapper().RESTMapping(gvk.GroupKind(), gvk.Version) + if err != nil { + // If we encounter an unknown type, then just return nil and skip it + if meta.IsNoMatchError(err) { + return nil, nil + } + return nil, err + } + + list, err := kube.ListFor(k8sClient.Scheme(), objectType) + if err != nil { + return nil, err + } + + if err := k8sClient.List(ctx, list, client.InNamespace(owner.GetNamespace()), client.MatchingLabels(labels)); err != nil { + return nil, err + } + + items, err := kube.Items[client.Object](list) + if err != nil { + return nil, err + } + + // if we're in the namespace scope, filter by owner references + if mapping.Scope.Name() == meta.RESTScopeNameNamespace { + filtered := []client.Object{} + for _, obj := range items { + owned := slices.ContainsFunc(obj.GetOwnerReferences(), func(ref metav1.OwnerReference) bool { + return ref.UID == owner.GetUID() + }) + + if owned { + filtered = append(filtered, obj) + } + } + return filtered, nil + } + + return items, nil +} diff --git a/operator/cmd/migration/fieldmanagers_test.go b/operator/cmd/migration/fieldmanagers_test.go new file mode 100644 index 000000000..ec5bfc63b --- /dev/null +++ b/operator/cmd/migration/fieldmanagers_test.go @@ -0,0 +1,321 @@ +// Copyright 2026 Redpanda Data, Inc. +// +// Use of this software is governed by the Business Source License +// included in the file licenses/BSL.md +// +// As of the Change Date specified in that file, in accordance with +// the Business Source License, use of this software will be governed +// by the Apache License, Version 2.0 + +package migration + +import ( + "slices" + "testing" + + "github.com/redpanda-data/common-go/kube" + "github.com/redpanda-data/common-go/kube/kubetest" + "github.com/stretchr/testify/require" + appsv1 "k8s.io/api/apps/v1" + corev1 "k8s.io/api/core/v1" + apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1" + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" + "k8s.io/utils/ptr" + "sigs.k8s.io/controller-runtime/pkg/client" + + redpandav1alpha2 "github.com/redpanda-data/redpanda-operator/operator/api/redpanda/v1alpha2" + crds "github.com/redpanda-data/redpanda-operator/operator/config/crd/bases" + "github.com/redpanda-data/redpanda-operator/operator/internal/controller" + "github.com/redpanda-data/redpanda-operator/operator/internal/lifecycle" +) + +func TestFieldManagers(t *testing.T) { + scheme := controller.UnifiedScheme + config := kubetest.NewEnv(t).RestConfig() + + oldctl, err := kube.FromRESTConfig(config, kube.Options{ + Options: client.Options{ + Scheme: scheme, + }, + FieldManager: "*kube.Ctl", + }) + require.NoError(t, err) + + newctl, err := kube.FromRESTConfig(config, kube.Options{ + Options: client.Options{ + Scheme: scheme, + }, + FieldManager: "new", + }) + require.NoError(t, err) + + k8sClient, err := client.New(config, client.Options{Scheme: scheme}) + require.NoError(t, err) + + // install our CRDs + require.NoError(t, kube.ApplyAll(t.Context(), oldctl, crds.All()...)) + for _, crd := range crds.All() { + require.NoError(t, kube.WaitFor(t.Context(), oldctl, crd.DeepCopy(), func(ext *apiextensionsv1.CustomResourceDefinition, err error) (bool, error) { + for _, cond := range ext.Status.Conditions { + if cond.Type == apiextensionsv1.Established && cond.Status == apiextensionsv1.ConditionTrue { + return true, nil + } + } + return false, nil + })) + } + + // Create a Redpanda cluster with the normal client + cluster := &redpandav1alpha2.Redpanda{ + ObjectMeta: metav1.ObjectMeta{ + Name: "fieldmanagers-test", + Namespace: "default", + }, + Spec: redpandav1alpha2.RedpandaSpec{ + ClusterSpec: &redpandav1alpha2.RedpandaClusterSpec{ + Statefulset: &redpandav1alpha2.Statefulset{ + Replicas: ptr.To(1), + }, + }, + }, + } + require.NoError(t, k8sClient.Create(t.Context(), cluster)) + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(cluster), cluster)) + + // Create a Console cluster too + console := &redpandav1alpha2.Console{ + ObjectMeta: metav1.ObjectMeta{ + Name: "fieldmanagers-test-console", + Namespace: "default", + }, + Spec: redpandav1alpha2.ConsoleSpec{ + ClusterSource: &redpandav1alpha2.ClusterSource{ + ClusterRef: &redpandav1alpha2.ClusterRef{ + Name: "fieldmanagers-test", + }, + }, + }, + } + require.NoError(t, k8sClient.Create(t.Context(), console)) + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(console), console)) + + { + // Redpanda portion of the test + + // Add a junk statefulset associated with the Redpanda cluster using the old client + set := &appsv1.StatefulSet{ + ObjectMeta: metav1.ObjectMeta{ + Name: "fieldmanagers-test", + Namespace: "default", + Labels: lifecycle.NewV2OwnershipResolver().GetOwnerLabels(&lifecycle.ClusterWithPools{Redpanda: cluster}), + OwnerReferences: []metav1.OwnerReference{{ + APIVersion: redpandav1alpha2.GroupVersion.String(), + Kind: "Redpanda", + Name: cluster.Name, + UID: cluster.UID, + }}, + }, + Spec: appsv1.StatefulSetSpec{ + Replicas: ptr.To[int32](1), + Selector: &metav1.LabelSelector{ + MatchLabels: map[string]string{ + "app": "test", + }, + }, + Template: corev1.PodTemplateSpec{ + ObjectMeta: metav1.ObjectMeta{ + Labels: map[string]string{ + "app": "test", + }, + }, + Spec: corev1.PodSpec{ + Containers: []corev1.Container{ + { + Name: "test", + Image: "test", + Ports: []corev1.ContainerPort{ + { + Name: "test", + ContainerPort: 8080, + }, + }, + }, + }, + }, + }, + }, + } + newSet := set.DeepCopy() + // now change the port to have the same name and verify it gets merged + newSet.Spec.Template.Spec.Containers[0].Ports = []corev1.ContainerPort{{ + Name: "test", + ContainerPort: 18080, + }} + // create one more for later + finalSet := newSet.DeepCopy() + + // server-side-apply this on with the old client to simulate existing resources + require.NoError(t, oldctl.Apply(t.Context(), set)) + + // check the initial field managers + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(set), set)) + managers := getFieldManagers(set) + t.Logf("Initial field managers: %+v", managers) + require.True(t, slices.Contains(managers, "*kube.Ctl")) + + // and apply with the new client + require.NoError(t, newctl.Apply(t.Context(), newSet)) + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(set), set)) + + managers = getFieldManagers(set) + t.Logf("Updated field managers: %+v", managers) + require.True(t, slices.Contains(managers, "*kube.Ctl")) + require.True(t, slices.Contains(managers, "new")) + + // also check the poorly merged port + ports := set.Spec.Template.Spec.Containers[0].Ports + require.Len(t, ports, 2) + require.Equal(t, "test", ports[0].Name) + require.Equal(t, "test", ports[1].Name) + + // now run the migration + require.NoError(t, migrateFieldManagers(t.Context(), newctl, k8sClient)) + + // verify the field managers are updated + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(set), set)) + managers = getFieldManagers(set) + t.Logf("Migrated field managers: %+v", managers) + require.False(t, slices.Contains(managers, "*kube.Ctl")) + require.True(t, slices.Contains(managers, "new")) + + // verify the ports are still messed up (since we just re-applied what was already there) + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(set), set)) + ports = set.Spec.Template.Spec.Containers[0].Ports + require.Len(t, ports, 2) + require.Equal(t, "test", ports[0].Name) + require.Equal(t, "test", ports[1].Name) + + // now re-apply with the new client to mimic re-reconciliation and check the ports are fixed + require.NoError(t, newctl.Apply(t.Context(), finalSet)) + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(set), set)) + + ports = set.Spec.Template.Spec.Containers[0].Ports + require.Len(t, ports, 1) + require.Equal(t, "test", ports[0].Name) + require.Equal(t, int32(18080), ports[0].ContainerPort) + } + + { + // Console portion of the test + + // Add a junk deployment associated with the Console using the old client + deploy := &appsv1.Deployment{ + ObjectMeta: metav1.ObjectMeta{ + Name: "fieldmanagers-test-console", + Namespace: "default", + Labels: consoleOwnershipLabels(console), + OwnerReferences: []metav1.OwnerReference{{ + APIVersion: redpandav1alpha2.GroupVersion.String(), + Kind: "Console", + Name: console.Name, + UID: console.UID, + }}, + }, + Spec: appsv1.DeploymentSpec{ + Replicas: ptr.To[int32](1), + Selector: &metav1.LabelSelector{ + MatchLabels: map[string]string{ + "app": "test-console", + }, + }, + Template: corev1.PodTemplateSpec{ + ObjectMeta: metav1.ObjectMeta{ + Labels: map[string]string{ + "app": "test-console", + }, + }, + Spec: corev1.PodSpec{ + Containers: []corev1.Container{ + { + Name: "test", + Image: "test", + Ports: []corev1.ContainerPort{ + { + Name: "test", + ContainerPort: 8080, + }, + }, + }, + }, + }, + }, + }, + } + newDeploy := deploy.DeepCopy() + // now change the port to have things get merged (different validation that stateful sets) + newDeploy.Spec.Template.Spec.Containers[0].Ports = []corev1.ContainerPort{{ + Name: "other", + ContainerPort: 18080, + }} + // create one more for later + finalDeploy := newDeploy.DeepCopy() + + require.NoError(t, oldctl.Apply(t.Context(), deploy)) + + // check the initial field managers + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(deploy), deploy)) + managers := getFieldManagers(deploy) + t.Logf("Initial field managers: %+v", managers) + require.True(t, slices.Contains(managers, "*kube.Ctl")) + + // and apply with the new client + require.NoError(t, newctl.Apply(t.Context(), newDeploy)) + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(deploy), deploy)) + + managers = getFieldManagers(deploy) + t.Logf("Updated field managers: %+v", managers) + require.True(t, slices.Contains(managers, "*kube.Ctl")) + require.True(t, slices.Contains(managers, "new")) + + // also check the merged port + ports := deploy.Spec.Template.Spec.Containers[0].Ports + require.Len(t, ports, 2) + require.Equal(t, "test", ports[0].Name) + require.Equal(t, "other", ports[1].Name) + + // now run the migration + require.NoError(t, migrateFieldManagers(t.Context(), newctl, k8sClient)) + + // verify the field managers are updated + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(deploy), deploy)) + managers = getFieldManagers(deploy) + t.Logf("Migrated field managers: %+v", managers) + require.False(t, slices.Contains(managers, "*kube.Ctl")) + require.True(t, slices.Contains(managers, "new")) + + // verify the ports are still messed up (since we just re-applied what was already there) + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(deploy), deploy)) + ports = deploy.Spec.Template.Spec.Containers[0].Ports + require.Len(t, ports, 2) + require.Equal(t, "test", ports[0].Name) + require.Equal(t, "other", ports[1].Name) + + // now re-apply with the new client to mimic re-reconciliation and check the ports are fixed + require.NoError(t, newctl.Apply(t.Context(), finalDeploy)) + require.NoError(t, k8sClient.Get(t.Context(), client.ObjectKeyFromObject(deploy), deploy)) + + ports = deploy.Spec.Template.Spec.Containers[0].Ports + require.Len(t, ports, 1) + require.Equal(t, "other", ports[0].Name) + require.Equal(t, int32(18080), ports[0].ContainerPort) + } +} + +func getFieldManagers(o client.Object) []string { + managers := o.GetManagedFields() + names := make([]string, 0, len(managers)) + for _, m := range managers { + names = append(names, m.Manager) + } + return names +} diff --git a/operator/cmd/migration/migration.go b/operator/cmd/migration/migration.go new file mode 100644 index 000000000..779ce61f4 --- /dev/null +++ b/operator/cmd/migration/migration.go @@ -0,0 +1,69 @@ +// Copyright 2026 Redpanda Data, Inc. +// +// Use of this software is governed by the Business Source License +// included in the file licenses/BSL.md +// +// As of the Change Date specified in that file, in accordance with +// the Business Source License, use of this software will be governed +// by the Apache License, Version 2.0 + +// Package migration contains a post-upgrade job that handles any +// sort of migrations needed for an upgrade. +package migration + +import ( + "context" + "fmt" + "log" + + "github.com/redpanda-data/common-go/kube" + "github.com/spf13/cobra" + ctrl "sigs.k8s.io/controller-runtime" + "sigs.k8s.io/controller-runtime/pkg/client" + + "github.com/redpanda-data/redpanda-operator/operator/internal/controller" + "github.com/redpanda-data/redpanda-operator/operator/internal/lifecycle" +) + +func Command() *cobra.Command { + cmd := &cobra.Command{ + Use: "migration", + Short: "Run migrations for Redpanda Operator", + Run: func(cmd *cobra.Command, args []string) { + ctx := cmd.Context() + + run( + ctx, + ) + }, + } + + return cmd +} + +func run( + ctx context.Context, +) { + log.Printf("Running migrations for Redpanda Operator") + + scheme := controller.UnifiedScheme + config := ctrl.GetConfigOrDie() + k8sClient, err := client.New(config, client.Options{Scheme: scheme}) + if err != nil { + log.Fatalf("%s", fmt.Errorf("unable to run migrations: %w", err)) + } + + ctl, err := kube.FromRESTConfig(config, kube.Options{ + Options: client.Options{ + Scheme: scheme, + }, + FieldManager: string(lifecycle.DefaultFieldOwner), + }) + if err != nil { + log.Fatalf("%s", fmt.Errorf("unable to create kube ctl: %w", err)) + } + + if err := migrateFieldManagers(ctx, ctl, k8sClient); err != nil { + log.Fatalf("%s", fmt.Errorf("unable to update field managers: %w", err)) + } +} diff --git a/operator/cmd/run/run.go b/operator/cmd/run/run.go index 60385aa01..98de92d5f 100644 --- a/operator/cmd/run/run.go +++ b/operator/cmd/run/run.go @@ -560,11 +560,89 @@ func Run( return err } +<<<<<<< HEAD if err = (&redpandacontrollers.TopicReconciler{ Client: mgr.GetClient(), Factory: factory, Scheme: mgr.GetScheme(), EventRecorder: mgr.GetEventRecorderFor("TopicReconciler"), +======= + // the following 2 controllers depend on the Redpanda controller being run, so + // only run them if we run the Redpanda controller + + // NodePool Reconciler + if opts.enableV2NodepoolController { + if err := (&redpandacontrollers.NodePoolReconciler{ + Manager: mcmanager, + }).SetupWithManager(ctx, mcmanager); err != nil { + setupLog.Error(err, "unable to create controller", "controller", "NodePool") + return err + } + } + + // Console Reconciler. + if opts.enableConsoleController { + ctl, err := kube.FromRESTConfig(mgr.GetConfig(), kube.Options{ + Options: client.Options{ + Scheme: mgr.GetScheme(), + // mgr's GetClient sets the cache, to have a fully compatible ctl, we + // need to set the cache as well. + Cache: &client.CacheOptions{ + Reader: mgr.GetCache(), + }, + }, + FieldManager: string(lifecycle.DefaultFieldOwner), + }) + if err != nil { + return err + } + + if err := (&consolecontroller.Controller{Ctl: ctl}).SetupWithManager(ctx, mcmanager); err != nil { + setupLog.Error(err, "unable to create controller", "controller", "Console") + return err + } + } + } + + if err := redpandacontrollers.SetupShadowLinkController(ctx, mcmanager, cloudExpander, v1Controllers, v2Controllers); err != nil { + setupLog.Error(err, "unable to create controller", "controller", "ShadowLink") + return err + } + + if err := redpandacontrollers.SetupTopicController(ctx, mcmanager, cloudExpander, v1Controllers, v2Controllers); err != nil { + setupLog.Error(err, "unable to create controller", "controller", "Topic") + return err + } + + if err := redpandacontrollers.SetupUserController(ctx, mcmanager, cloudExpander, v1Controllers, v2Controllers); err != nil { + setupLog.Error(err, "unable to create controller", "controller", "User") + return err + } + + if err := redpandacontrollers.SetupRoleController(ctx, mcmanager, cloudExpander, v1Controllers, v2Controllers); err != nil { + setupLog.Error(err, "unable to create controller", "controller", "RedpandaRole") + return err + } + + if err := redpandacontrollers.SetupSchemaController(ctx, mcmanager, cloudExpander, v1Controllers, v2Controllers); err != nil { + setupLog.Error(err, "unable to create controller", "controller", "Schema") + return err + } + + // Next configure and setup optional controllers. + + if v1Controllers { + setupLog.Info("setting up vectorized controllers") + if err := setupVectorizedControllers(ctx, mgr, factory, cloudExpander, opts); err != nil { + return err + } + } + + if opts.ControllerEnabled(NodeWatcherController) { + if err = (&nodewatcher.RedpandaNodePVCReconciler{ + Client: mgr.GetClient(), + OperatorMode: true, +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) }).SetupWithManager(mgr); err != nil { setupLog.Error(err, "unable to create controller", "controller", "Topic") return err diff --git a/operator/go.mod b/operator/go.mod index 439dd0bfd..2f439d4a7 100644 --- a/operator/go.mod +++ b/operator/go.mod @@ -22,6 +22,7 @@ require ( github.com/onsi/ginkgo/v2 v2.22.0 github.com/onsi/gomega v1.36.1 github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.76.2 +<<<<<<< HEAD github.com/prometheus/client_golang v1.22.0 github.com/prometheus/common v0.64.0 github.com/redpanda-data/common-go/net v0.1.0 @@ -32,6 +33,22 @@ require ( github.com/redpanda-data/redpanda-operator/charts/redpanda/v5 v5.10.5 github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250328114403-0fc6b9d24a38 +======= + github.com/prometheus/client_golang v1.23.2 + github.com/prometheus/common v0.66.1 + github.com/quasilyte/go-ruleguard/dsl v0.3.22 + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d + github.com/redpanda-data/common-go/license v0.0.0-20260120073450-935d3dd3d6c1 + github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7 + github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1 + github.com/redpanda-data/common-go/rp-controller-utils v0.0.0-20260109170727-1dd9f5d22ee1 + github.com/redpanda-data/common-go/rpadmin v0.2.0 + github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 + github.com/redpanda-data/redpanda-operator/charts/console/v3 v3.3.0 + github.com/redpanda-data/redpanda-operator/charts/redpanda/v25 v25.3.1 + github.com/redpanda-data/redpanda-operator/gotohelm v1.2.1-0.20250909192010-c59ff494d04a + github.com/redpanda-data/redpanda-operator/pkg v0.0.0-20250528175436-e8cca0053dc6 +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6 github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 github.com/scalalang2/golang-fifo v1.0.2 @@ -96,7 +113,12 @@ require ( github.com/Masterminds/goutils v1.1.1 // indirect github.com/Masterminds/squirrel v1.5.4 // indirect github.com/Microsoft/go-winio v0.6.2 // indirect +<<<<<<< HEAD github.com/antlr4-go/antlr/v4 v4.13.0 // indirect +======= + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect github.com/aws/aws-sdk-go-v2 v1.32.3 // indirect github.com/aws/aws-sdk-go-v2/config v1.28.1 // indirect @@ -127,6 +149,8 @@ require ( github.com/containerd/errdefs/pkg v0.3.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/cpuguy83/dockercfg v0.3.2 // indirect github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect @@ -176,7 +200,12 @@ require ( github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect github.com/gosuri/uitable v0.0.4 // indirect github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 // indirect +======= + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/hashicorp/go-uuid v1.0.3 // indirect @@ -276,7 +305,15 @@ require ( github.com/x448/float16 v0.8.4 // indirect github.com/xlab/treeprint v1.2.0 // indirect github.com/yusufpapurcu/wmi v1.2.4 // indirect +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 // indirect +======= + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.etcd.io/raft/v3 v3.6.0 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/collector/pdata v1.32.0 // indirect go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 // indirect go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 // indirect @@ -314,12 +351,23 @@ require ( google.golang.org/protobuf v1.36.6 // indirect gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect +<<<<<<< HEAD k8s.io/apiserver v0.33.3 // indirect +======= + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect + gopkg.in/yaml.v2 v2.4.0 // indirect + k8s.io/apiserver v0.34.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/cli-runtime v0.33.3 // indirect k8s.io/component-base v0.33.3 // indirect k8s.io/klog/v2 v2.130.1 // indirect +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect k8s.io/kubectl v0.33.3 // indirect +======= + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) oras.land/oras-go/v2 v2.6.0 // indirect sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect sigs.k8s.io/gateway-api v1.1.0 // indirect diff --git a/operator/go.sum b/operator/go.sum index 56f3b1c71..352fbe645 100644 --- a/operator/go.sum +++ b/operator/go.sum @@ -81,6 +81,8 @@ github.com/Masterminds/squirrel v1.5.4 h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8 github.com/Masterminds/squirrel v1.5.4/go.mod h1:NNaOrjSoIDfDA40n7sr2tPNZRfjzjA400rg+riTZj10= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2 h1:+vx7roKuyA63nhn5WAunQHLTznkw5W8b1Xc0dNjp83s= github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2/go.mod h1:HBCaDeC1lPdgDeDbhX8XFpy1jqjK0IBG8W5K+xYqA0w= github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc= @@ -187,8 +189,13 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +<<<<<<< HEAD github.com/coreos/go-semver v0.3.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk= github.com/coreos/go-systemd/v22 v22.3.2/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= +======= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= @@ -226,9 +233,16 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk= github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= @@ -305,7 +319,10 @@ github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJA github.com/goccy/go-json v0.10.5 h1:Fq85nIqj+gXn/S5ahsiTlK3TmC85qgirsdTP/+DeaC4= github.com/goccy/go-json v0.10.5/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M= github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= +<<<<<<< HEAD github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ= +======= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8= @@ -389,12 +406,24 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY= github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= +<<<<<<< HEAD github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3/go.mod h1:ndYquD05frm2vACXE1nsccT4oJzjhw2arTS2cpUD1PI= github.com/hashicorp/consul/api v1.13.0/go.mod h1:ZlVrynguJKcYr54zGaDbaL3fOvKC9m72FhPvA8T35KQ= github.com/hashicorp/consul/sdk v0.8.0/go.mod h1:GBvyrGALthsZObzUGsfgHZQDXjg4lOjagTIwIR1vPms= +======= +github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= @@ -471,8 +500,13 @@ github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHW github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= github.com/jmoiron/sqlx v1.4.0 h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o= github.com/jmoiron/sqlx v1.4.0/go.mod h1:ZrZ7UsYB/weZdl2Bxg6jCRO9c3YHl8r3ahlKmRT4JLY= +<<<<<<< HEAD github.com/joho/godotenv v1.3.0 h1:Zjp+RcGpHhGlrMbJzXTrZZPrWj+1vfm90La1wgB6Bhc= github.com/joho/godotenv v1.3.0/go.mod h1:7hK45KPybAkOC6peb+G5yklZfMxEjkZhHbwpqxOKXbg= +======= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/jpillora/backoff v1.0.0/go.mod h1:J/6gKK9jxlEcS3zixgDgUAsiuZ7yrSoa/FX5e0EB2j4= @@ -705,6 +739,7 @@ github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ= github.com/redis/go-redis/v9 v9.7.3 h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM= github.com/redis/go-redis/v9 v9.7.3/go.mod h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA= +<<<<<<< HEAD github.com/redpanda-data/common-go/net v0.1.0 h1:JnJioRJuL961r1QXiJQ1tW9+yEaJfu8FpXnUmvQbwNM= github.com/redpanda-data/common-go/net v0.1.0/go.mod h1:iOdNkjxM7a1T8F3cYHTaKIPFCHzzp/ia6TN+Z+7Tt5w= github.com/redpanda-data/common-go/rpadmin v0.1.14 h1:G/rlh9cHsGhTsNpkwrISdpGA8fPZ7ul57rzxbPiJhs0= @@ -723,6 +758,26 @@ github.com/redpanda-data/redpanda-operator/charts/redpanda/v5 v5.10.5 h1:eEaymDE github.com/redpanda-data/redpanda-operator/charts/redpanda/v5 v5.10.5/go.mod h1:D8MfzGr+oPWOUNnDEezKSJyHRKvDpGb6NZS0bJdQnds= github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0 h1:IV2Ic66JDKPtCnNU4Kn1naJlzZmhl0izRj17qgTCo20= github.com/redpanda-data/redpanda-operator/gotohelm v1.1.0/go.mod h1:usCpPzzzhgtPrRTiUQOzFqGmukce8U0SrzEeX2ONDFE= +======= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 h1:wWHiS4LNYzl5HkUPG6dpGPPvFW3ze7ZnraYvyqZ/+8s= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:V3OBV2kcF/BDDytUZuKvIygbaXoGPT5VO3KmMAz+mBM= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +github.com/redpanda-data/common-go/license v0.0.0-20260120073450-935d3dd3d6c1 h1:6aPxMthcrAljux5bgqU78yHxM8BK1ITqh9G9H+s707U= +github.com/redpanda-data/common-go/license v0.0.0-20260120073450-935d3dd3d6c1/go.mod h1:F1fp8xVNS2UwWFosOjJ9+5jaEZnXSjB9AdHk2R9XlpI= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7 h1:MXLdjFdFjOtyuUR4TdVVsqFP8xnru2YDwzH9bJTUr1M= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7/go.mod h1:UJIi/yUxGOBYXUrfUsOkxfYxcb/ll7mZrwae/i+U2kc= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1 h1:fLBU7IJZq8PR88AkEdI5G+yyBsftionGapvAOMPW9hg= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:LzztzYWpD+e+A6hV6+eQhYY60zHQR7ePxhLgyMmRn/Q= +github.com/redpanda-data/common-go/rp-controller-utils v0.0.0-20260109170727-1dd9f5d22ee1 h1:pGPp5rJjnFM2z3JhuHSq099tltYjSf7bZT44zWQfovY= +github.com/redpanda-data/common-go/rp-controller-utils v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:y+TN+dzE/I/CnBIQesZ51SlixR3shI6QNhdZ55E0Yu8= +github.com/redpanda-data/common-go/rpadmin v0.2.0 h1:s2MyyY+yq7B17mLjjW17RO81wFlzo856K9IuBpsmvv0= +github.com/redpanda-data/common-go/rpadmin v0.2.0/go.mod h1:qmu76v7RRKgEXLS3UXxZ8KDpObtSNq6RinOIejJNWzw= +github.com/redpanda-data/common-go/secrets v0.1.4 h1:CGp3KolGnjcJvIafTwf7Hlj5ztLOJCjgkegRu7IAkSw= +github.com/redpanda-data/common-go/secrets v0.1.4/go.mod h1:WjUU/5saSXwItZx6veFOGbQZUgPQz4MQ65z22y0Ky84= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 h1:kfhe8NbuBsXmBF68CnDaA0dDTWICNxwrC3rsO0h3WIg= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186/go.mod h1:a73cXlHClCE0iUOjSOKdaGAPcnwYDv+2WaT9NeLZvKc= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6 h1:SbcvWTYFEbH5+NQOl1To5jppEa8RCK1HAkRNfhdUGLg= github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6/go.mod h1:/8XZuwUVFOGUkn31kglW28Xie5TrM7COtzRMA3GixaA= github.com/rhnvrm/simples3 v0.6.1/go.mod h1:Y+3vYm2V7Y4VijFoJHHTrja6OgPrJ2cBti8dPGkC3sA= @@ -762,6 +817,8 @@ github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6Mwd github.com/sirupsen/logrus v1.6.0/go.mod h1:7uNnSEd1DgxDLC74fIahvMZmmYsHGZGEOFrfsX/uA88= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= github.com/spf13/afero v1.12.0 h1:UcOPyRBYczmFn6yvphxkn9ZEOY65cpwGKb5mL36mrqs= github.com/spf13/afero v1.12.0/go.mod h1:ZTlWwG4/ahT8W7T0WQ5uYmjI9duaLQGy3Q2OAl4sk/4= github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= @@ -806,10 +863,19 @@ github.com/tidwall/match v1.1.1/go.mod h1:eRSPERbgtNPcGhD8UCthc6PmLEQXEWd3PRB5JT github.com/tidwall/pretty v1.2.0/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= github.com/tidwall/pretty v1.2.1 h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4= github.com/tidwall/pretty v1.2.1/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= github.com/tklauser/numcpus v0.9.0/go.mod h1:SN6Nq1O3VychhC1npsWostA+oW+VOQTxZrS604NSRyI= +======= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/twmb/franz-go v1.7.0/go.mod h1:PMze0jNfNghhih2XHbkmTFykbMF5sJqmNJB31DOOzro= github.com/twmb/franz-go v1.19.4 h1:0ktflzm5YU7+YYdie8RQWFcU9uDJ03xLefplO1iMwO4= github.com/twmb/franz-go v1.19.4/go.mod h1:4kFJ5tmbbl7asgwAGVuyG1ZMx0NNpYk7EqflvWfPCpM= @@ -830,6 +896,8 @@ github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/ github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= @@ -838,11 +906,30 @@ github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.etcd.io/etcd/api/v3 v3.5.4/go.mod h1:5GB2vv4A4AOn3yk7MftYGHkUfGtDHnEraIjym4dYz5A= go.etcd.io/etcd/client/pkg/v3 v3.5.4/go.mod h1:IJHfcCEKxYu1Os13ZdwCwIUTUVGYTSAM3YSwc9/Ac1g= go.etcd.io/etcd/client/v3 v3.5.4/go.mod h1:ZaRkVgBZC+L+dLCjTcF1hRXpgZXQPOvnA/Ak/gq3kiY= go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/collector/pdata v1.32.0 h1:hBzlJV1rujr1UdD2CBy2gmaIKtC15ysg/z+x8F3McQA= go.opentelemetry.io/collector/pdata v1.32.0/go.mod h1:m41io9nWpy7aCm/uD1L9QcKiZwOP0ldj83JEA34dmlk= go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 h1:RyrtJzu5MAmIcbRrwg75b+w3RlZCP0vJByDVzcpAe3M= @@ -1104,7 +1191,12 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +<<<<<<< HEAD gopkg.in/square/go-jose.v2 v2.3.1/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI= +======= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= @@ -1144,8 +1236,15 @@ k8s.io/component-helpers v0.33.3 h1:fjWVORSQfI0WKzPeIFSju/gMD9sybwXBJ7oPbqQu6eM= k8s.io/component-helpers v0.33.3/go.mod h1:7iwv+Y9Guw6X4RrnNQOyQlXcvJrVjPveHVqUA5dm31c= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUyGcf03XZEP0ZIKgKj35LS4= k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8= +======= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 h1:r/phHvH1iU7gO/l7tTjQk2K01ER7/OAJi8uFHHyWSac= k8s.io/kubectl v0.33.3/go.mod h1:euj2bG56L6kUGOE/ckZbCoudPwuj4Kud7BR0GzyNiT0= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg= diff --git a/operator/multicluster/render_state_nogotohelm.go b/operator/multicluster/render_state_nogotohelm.go new file mode 100644 index 000000000..9947cfb3e --- /dev/null +++ b/operator/multicluster/render_state_nogotohelm.go @@ -0,0 +1,313 @@ +// Copyright 2026 Redpanda Data, Inc. +// +// Use of this software is governed by the Business Source License +// included in the file licenses/BSL.md +// +// As of the Change Date specified in that file, in accordance with +// the Business Source License, use of this software will be governed +// by the Apache License, Version 2.0 + +//go:build !gotohelm + +package redpanda + +import ( + "context" + "crypto/tls" + "crypto/x509" + "encoding/pem" + "fmt" + "reflect" + "slices" + "strings" + + "github.com/cockroachdb/errors" + "github.com/redpanda-data/common-go/kube" + appsv1 "k8s.io/api/apps/v1" + corev1 "k8s.io/api/core/v1" + k8sapierrors "k8s.io/apimachinery/pkg/api/errors" + "k8s.io/apimachinery/pkg/types" + "k8s.io/utils/ptr" + "sigs.k8s.io/controller-runtime/pkg/client" + + "github.com/redpanda-data/redpanda-operator/gotohelm/helmette" +) + +var ( + ErrServerCertificateNotFound = errors.New("server TLS certificate not found") + ErrServerCertificatePublicKeyNotFound = errors.New("server TLS certificate does not contain a public key") + + ErrClientCertificateNotFound = errors.New("client TLS certificate not found") + ErrClientCertificatePublicKeyNotFound = errors.New("client TLS certificate does not contain a public key") + ErrClientCertificatePrivateKeyNotFound = errors.New("client TLS certificate does not contain a private key") + + ErrSASLSecretNotFound = errors.New("users secret not found") + ErrSASLSecretKeyNotFound = errors.New("users secret key not found") + ErrSASLSecretSuperuserNotFound = errors.New("users secret has no users") + + supportedSASLMechanisms = []string{ + "SCRAM-SHA-256", "SCRAM-SHA-512", + } +) + +const DefaultFieldOwner = client.FieldOwner("cluster.redpanda.com/operator") + +// FetchSASLUsers attempts to locate an existing SASL users secret in the cluster. +// If found, it is used to populate the first user in the secret for use. +func (r *RenderState) FetchSASLUsers() (username, password, mechanism string, err error) { + ctl, ctlErr := r.KubeCTL() + if ctlErr != nil { + err = ctlErr + return + } + + saslUsers := SecretSASLUsers(r) + saslUsersError := func(err error) error { + return fmt.Errorf("error fetching SASL authentication for %s/%s: %w", saslUsers.Namespace, saslUsers.Name, err) + } + + if saslUsers != nil { + // read from the server since we're assuming all the resources + // have already been created + var users corev1.Secret + lookupErr := ctl.Get(context.TODO(), types.NamespacedName{Name: saslUsers.Name, Namespace: saslUsers.Namespace}, &users) + if lookupErr != nil { + if k8sapierrors.IsNotFound(lookupErr) { + err = saslUsersError(ErrSASLSecretNotFound) + return + } + err = saslUsersError(lookupErr) + return + } + + data, found := users.Data["users.txt"] + if !found { + err = saslUsersError(ErrSASLSecretKeyNotFound) + return + } + + username, password, mechanism = firstUser(data) + if username == "" { + err = saslUsersError(ErrSASLSecretSuperuserNotFound) + return + } + } + + return +} + +// RenderStateFromDot constructs a [RenderState] from the provided [helmette.Dot]. +func RenderStateFromDot(dot *helmette.Dot, migrateFNs ...func(state *RenderState) error) (*RenderState, error) { + state, err := renderStateFromDot(dot) + if err != nil { + return nil, err + } + + for _, fn := range migrateFNs { + if err := fn(state); err != nil { + return nil, err + } + } + + return state, nil +} + +// renderStateFromDot constructs a [RenderState] from the provided [helmette.Dot] +func renderStateFromDot(dot *helmette.Dot) (state *RenderState, err error) { + defer func() { + switch r := recover().(type) { + case nil: + case error: + err = errors.Wrapf(r, "chart execution failed") + default: + err = errors.Newf("chart execution failed: %#v", r) + } + }() + + state = &RenderState{ + Release: &dot.Release, + Files: &dot.Files, + Chart: &dot.Chart, + Values: helmette.Unwrap[Values](dot.Values), + Dot: dot, + } + state.FetchBootstrapUser() + state.FetchStatefulSetPodSelector() + + return +} + +func firstUser(data []byte) (user string, password string, mechanism string) { + file := string(data) + + for _, line := range strings.Split(file, "\n") { + tokens := strings.Split(line, ":") + + switch len(tokens) { + case 2: + return tokens[0], tokens[1], string(DefaultSASLMechanism) + + case 3: + if !slices.Contains(supportedSASLMechanisms, tokens[2]) { + continue + } + + return tokens[0], tokens[1], tokens[2] + + default: + continue + } + } + + return +} + +// TLSConfig constructs a tls.Config for the given internal listener. +func (r *RenderState) TLSConfig(listener InternalTLS) (*tls.Config, error) { + ctl, err := r.KubeCTL() + if err != nil { + return nil, err + } + + namespace := r.Release.Namespace + serverName := InternalDomain(r) + + rootCertName, rootCertKey, clientCertName := certificatesFor(r, listener.Cert) + + serverTLSError := func(err error) error { + return fmt.Errorf("error fetching server root CA %s/%s: %w", namespace, rootCertName, err) + } + clientTLSError := func(err error) error { + return fmt.Errorf("error fetching client certificate default/%s: %w", clientCertName, err) + } + + tlsConfig := &tls.Config{MinVersion: tls.VersionTLS12, ServerName: serverName} + + var serverCert corev1.Secret + lookupErr := ctl.Get(context.TODO(), types.NamespacedName{Name: rootCertName, Namespace: namespace}, &serverCert) + if lookupErr != nil { + if k8sapierrors.IsNotFound(lookupErr) { + return nil, serverTLSError(ErrServerCertificateNotFound) + } + return nil, serverTLSError(lookupErr) + } + + serverPublicKey, found := serverCert.Data[rootCertKey] + if !found { + return nil, serverTLSError(ErrServerCertificatePublicKeyNotFound) + } + + block, _ := pem.Decode(serverPublicKey) + serverParsedCertificate, err := x509.ParseCertificate(block.Bytes) + if err != nil { + return nil, serverTLSError(fmt.Errorf("unable to parse public key %w", err)) + } + pool := x509.NewCertPool() + pool.AddCert(serverParsedCertificate) + + tlsConfig.RootCAs = pool + + if listener.RequireClientAuth { + var clientCert corev1.Secret + lookupErr := ctl.Get(context.TODO(), types.NamespacedName{Name: clientCertName, Namespace: namespace}, &clientCert) + if lookupErr != nil { + if k8sapierrors.IsNotFound(lookupErr) { + return nil, clientTLSError(ErrClientCertificateNotFound) + } + return nil, clientTLSError(lookupErr) + } + + // we always use tls.crt for client certs + clientPublicKey, found := clientCert.Data[corev1.TLSCertKey] + if !found { + return nil, clientTLSError(ErrClientCertificatePublicKeyNotFound) + } + + clientPrivateKey, found := clientCert.Data[corev1.TLSPrivateKeyKey] + if !found { + return nil, clientTLSError(ErrClientCertificatePrivateKeyNotFound) + } + + clientKey, err := tls.X509KeyPair(clientPublicKey, clientPrivateKey) + if err != nil { + return nil, clientTLSError(fmt.Errorf("unable to parse public and private key %w", err)) + } + + tlsConfig.Certificates = []tls.Certificate{clientKey} + } + + return tlsConfig, nil +} + +func certificatesFor(state *RenderState, name string) (certSecret, certKey, clientSecret string) { + cert, ok := state.Values.TLS.Certs[name] + if !ok || !ptr.Deref(cert.Enabled, true) { + // TODO this isn't correct but it matches historical behavior. + fullname := Fullname(state) + certSecret = fmt.Sprintf("%s-%s-root-certificate", fullname, name) + clientSecret = fmt.Sprintf("%s-default-client-cert", fullname) + + return certSecret, corev1.TLSCertKey, clientSecret + } + + ref := cert.CASecretRef(state, name) + return ref.LocalObjectReference.Name, ref.Key, cert.ClientSecretName(state, name) +} + +// KubeCTL constructs a kube.Ctl from the RenderState's kubeconfig. +func (r *RenderState) KubeCTL() (*kube.Ctl, error) { + return kube.FromRESTConfig(r.Dot.KubeConfig, kube.Options{ + FieldManager: string(DefaultFieldOwner), + }) +} + +// RenderNodePools can be used to render node pools programmatically from Go. +func RenderNodePools(state *RenderState) (_ []*appsv1.StatefulSet, err error) { + defer func() { + switch r := recover().(type) { + case nil: + case error: + err = errors.Wrapf(r, "chart execution failed") + default: + err = errors.Newf("chart execution failed: %#v", r) + } + }() + + return StatefulSets(state), nil +} + +// RenderResources can be used to render non-nodepool resources programmatically from Go. +func RenderResources(state *RenderState) (_ []kube.Object, err error) { + defer func() { + switch r := recover().(type) { + case nil: + case error: + err = errors.Wrapf(r, "chart execution failed") + default: + err = errors.Newf("chart execution failed: %#v", r) + } + }() + + resources := renderResources(state) + + // the renderer is expected to return nil interfaces. + // In the helm world, these nils are filtered out by + // _shims.render-manifests. + j := 0 + for i := range resources { + // Handle the nil unboxing issue. + if reflect.ValueOf(resources[i]).IsNil() { + continue + } + // filter out any helm hooks + if annotations := resources[i].GetAnnotations(); annotations != nil { + if _, isHook := annotations["helm.sh/hook"]; isHook { + continue + } + } + resources[j] = resources[i] + j++ + } + + return resources[:j], nil +} diff --git a/pkg/go.mod b/pkg/go.mod index 8664d25f7..55930a99c 100644 --- a/pkg/go.mod +++ b/pkg/go.mod @@ -12,7 +12,17 @@ require ( github.com/homeport/dyff v1.7.1 github.com/invopop/jsonschema v0.12.0 github.com/lucasjones/reggen v0.0.0-20200904144131-37ba4fa293bb +<<<<<<< HEAD github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.76.2 +======= + github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 + github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d + github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1 + github.com/redpanda-data/common-go/rpadmin v0.2.0 + github.com/redpanda-data/common-go/secrets v0.1.4 + github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 + github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6 +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 github.com/spf13/pflag v1.0.7 github.com/stretchr/testify v1.10.0 @@ -58,7 +68,12 @@ require ( github.com/Masterminds/semver/v3 v3.3.1 // indirect github.com/Masterminds/sprig/v3 v3.3.0 // indirect github.com/Masterminds/squirrel v1.5.4 // indirect +<<<<<<< HEAD github.com/Microsoft/go-winio v0.6.2 // indirect +======= + github.com/NYTimes/gziphandler v1.1.1 // indirect + github.com/antlr4-go/antlr/v4 v4.13.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect github.com/bahlo/generic-list-go v0.2.0 // indirect github.com/beorn7/perks v1.0.1 // indirect @@ -75,8 +90,13 @@ require ( github.com/containerd/errdefs/pkg v0.3.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/containerd/platforms v0.2.1 // indirect +<<<<<<< HEAD github.com/cpuguy83/dockercfg v0.3.2 // indirect github.com/creack/pty v1.1.20 // indirect +======= + github.com/coreos/go-semver v0.3.1 // indirect + github.com/coreos/go-systemd/v22 v22.5.0 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/cyphar/filepath-securejoin v0.4.1 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/distribution/reference v0.6.0 // indirect @@ -115,7 +135,12 @@ require ( github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect github.com/gosuri/uitable v0.0.4 // indirect github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 // indirect +======= + github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect + github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/hashicorp/golang-lru/arc/v2 v2.0.7 // indirect @@ -186,10 +211,36 @@ require ( github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 // indirect github.com/x448/float16 v0.8.4 // indirect github.com/xlab/treeprint v1.2.0 // indirect +<<<<<<< HEAD github.com/yusufpapurcu/wmi v1.2.4 // indirect go.opentelemetry.io/auto/sdk v1.1.0 // indirect go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 // indirect +======= + go.etcd.io/etcd/api/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/pkg/v3 v3.6.4 // indirect + go.etcd.io/etcd/client/v3 v3.6.4 // indirect + go.opentelemetry.io/auto/sdk v1.2.1 // indirect + go.opentelemetry.io/collector/pdata v1.32.0 // indirect + go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 // indirect + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect + go.opentelemetry.io/otel v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.11.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.11.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 // indirect + go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.36.0 // indirect + go.opentelemetry.io/otel/log v0.14.0 // indirect + go.opentelemetry.io/otel/metric v1.38.0 // indirect + go.opentelemetry.io/otel/sdk v1.38.0 // indirect + go.opentelemetry.io/otel/sdk/log v0.14.0 // indirect + go.opentelemetry.io/otel/sdk/metric v1.38.0 // indirect + go.opentelemetry.io/otel/trace v1.38.0 // indirect + go.opentelemetry.io/proto/otlp v1.7.1 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.uber.org/multierr v1.11.0 // indirect go.yaml.in/yaml/v2 v2.4.2 // indirect go.yaml.in/yaml/v3 v3.0.3 // indirect @@ -207,7 +258,9 @@ require ( google.golang.org/grpc v1.72.1 // indirect gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect + gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect +<<<<<<< HEAD gopkg.in/yaml.v3 v3.0.1 // indirect k8s.io/apiserver v0.33.3 // indirect k8s.io/cli-runtime v0.33.3 // indirect @@ -216,6 +269,17 @@ require ( k8s.io/kubectl v0.33.3 // indirect oras.land/oras-go/v2 v2.6.0 // indirect sigs.k8s.io/gateway-api v1.1.0 // indirect +======= + k8s.io/apiextensions-apiserver v0.34.1 // indirect + k8s.io/apiserver v0.34.1 // indirect + k8s.io/component-base v0.34.1 // indirect + k8s.io/klog/v2 v2.130.1 // indirect + k8s.io/kms v0.34.1 // indirect + k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect + k8s.io/kubectl v0.33.3 // indirect + oras.land/oras-go/v2 v2.6.0 // indirect + sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect sigs.k8s.io/kustomize/api v0.19.0 // indirect sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect diff --git a/pkg/go.sum b/pkg/go.sum index 797ca9ba5..44a2483ba 100644 --- a/pkg/go.sum +++ b/pkg/go.sum @@ -22,6 +22,15 @@ github.com/Masterminds/squirrel v1.5.4 h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8 github.com/Masterminds/squirrel v1.5.4/go.mod h1:NNaOrjSoIDfDA40n7sr2tPNZRfjzjA400rg+riTZj10= github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +<<<<<<< HEAD +======= +github.com/NYTimes/gziphandler v1.1.1 h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I= +github.com/NYTimes/gziphandler v1.1.1/go.mod h1:n/CVRwUEOgIxrgPvAQhUUr9oeUtvrhMomdKFjzJNB0c= +github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2 h1:+vx7roKuyA63nhn5WAunQHLTznkw5W8b1Xc0dNjp83s= +github.com/Netflix/go-expect v0.0.0-20220104043353-73e0943537d2/go.mod h1:HBCaDeC1lPdgDeDbhX8XFpy1jqjK0IBG8W5K+xYqA0w= +github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ= +github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs= github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so= @@ -64,6 +73,8 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A= github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw= +github.com/coreos/go-semver v0.3.1 h1:yi21YpKnrx1gt5R+la8n5WgS0kCrsPp33dmEyHReZr4= +github.com/coreos/go-semver v0.3.1/go.mod h1:irMmmIw/7yzSRPWryHsK7EYSg09caPQL03VsM8rvUec= github.com/coreos/go-systemd/v22 v22.5.0 h1:RrqgGjYQKalulkV8NGVIfkXQf6YYmOyiJKk8iXXhfZs= github.com/coreos/go-systemd/v22 v22.5.0/go.mod h1:Y58oyj3AT4RCenI/lSvhwexgC+NSVTIJ3seZv2GcEnc= github.com/cpuguy83/dockercfg v0.3.2 h1:DlJTyZGBDlXqUZ2Dk2Q3xHs/FtnooJJVaad2S9GKorA= @@ -98,8 +109,15 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw= github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4= github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk= +<<<<<<< HEAD github.com/ebitengine/purego v0.8.4 h1:CF7LEKg5FFOsASUj0+QwaXf8Ht6TlFxg09+S9wz0omw= github.com/ebitengine/purego v0.8.4/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +======= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= +github.com/ebitengine/purego v0.9.1 h1:a/k2f2HQU3Pi399RPW1MOaZyhKJL9w/xFpKAg4q1s0A= +github.com/ebitengine/purego v0.9.1/go.mod h1:iIjxzd6CiRiOG0UyXP+V1+jWqUXVjPKLAI0mRfJZTmQ= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU= github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc= github.com/evanphx/json-patch v5.9.11+incompatible h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8= @@ -149,6 +167,7 @@ github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1v github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8= github.com/gobwas/glob v0.2.3 h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y= github.com/gobwas/glob v0.2.3/go.mod h1:d3Ez4x06l9bZtSvzIay5+Yzi0fmZzPgnTbPcKjJAkT8= +github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= @@ -190,8 +209,20 @@ github.com/gosuri/uitable v0.0.4 h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY= github.com/gosuri/uitable v0.0.4/go.mod h1:tKR86bXuXPZazfOTG1FIzvjIdXzd0mo4Vtn16vt0PJo= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJrOjhax5N+uePQ0Fh1Z7PheYoUI/0nzkPA= github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA= +<<<<<<< HEAD github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo= github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3/go.mod h1:ndYquD05frm2vACXE1nsccT4oJzjhw2arTS2cpUD1PI= +======= +github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 h1:+9834+KizmvFV7pXQGSXQTsaWhq2GjuNUt0aUU0YBYw= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA= +github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1/go.mod h1:lXGCsh6c22WGtjr+qGHj1otzZpV/1kwTMAqkwZsnWRU= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 h1:FbSCl+KggFl+Ocym490i/EyXF4lPgLoUtcSWquBM0Rs= +github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0/go.mod h1:qOchhhIlmRcqk/O9uCo/puJlyo07YINaIqdZfZG3Jkc= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho= +github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 h1:NmZ1PKzSTQbuGHw9DGPFomqkkLWMC+vZCkfs+FHv1Vg= +github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3/go.mod h1:zQrxl1YP88HQlA6i9c63DSVPFklWpGX4OWAc9bFuaH4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= @@ -211,6 +242,8 @@ github.com/invopop/jsonschema v0.12.0 h1:6ovsNSuvn9wEQVOyc72aycBMVQFKz7cPdMJn10C github.com/invopop/jsonschema v0.12.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0= github.com/jmoiron/sqlx v1.4.0 h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o= github.com/jmoiron/sqlx v1.4.0/go.mod h1:ZrZ7UsYB/weZdl2Bxg6jCRO9c3YHl8r3ahlKmRT4JLY= +github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I= +github.com/jonboulle/clockwork v0.5.0/go.mod h1:3mZlmanh0g2NDKO5TWZVJAfofYk64M7XN3SzBPjZF60= github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY= github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y= github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= @@ -341,6 +374,25 @@ github.com/redis/go-redis/extra/redisotel/v9 v9.0.5 h1:EfpWLLCyXw8PSM2/XNJLjI3Pb github.com/redis/go-redis/extra/redisotel/v9 v9.0.5/go.mod h1:WZjPDy7VNzn77AAfnAfVjZNvfJTYfPetfZk5yoSTLaQ= github.com/redis/go-redis/v9 v9.7.3 h1:YpPyAayJV+XErNsatSElgRZZVCwXX9QzkKYNvO7x0wM= github.com/redis/go-redis/v9 v9.7.3/go.mod h1:bGUrSggJ9X9GUmZpZNEOQKaANxSGgOEBRltRTZHSvrA= +<<<<<<< HEAD +======= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1 h1:wWHiS4LNYzl5HkUPG6dpGPPvFW3ze7ZnraYvyqZ/+8s= +github.com/redpanda-data/common-go/goldenfile v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:V3OBV2kcF/BDDytUZuKvIygbaXoGPT5VO3KmMAz+mBM= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d h1:axtGEKnUlTkgyyasuCfiyTJyKsm5ibTaqCmHI8UXHX4= +github.com/redpanda-data/common-go/kube v0.0.0-20260129210004-d6a0f302216d/go.mod h1:Ye/yB6LyJWUe0FkA6HCUOEflk4N+a4ycrw0J0Mrt0Es= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7 h1:MXLdjFdFjOtyuUR4TdVVsqFP8xnru2YDwzH9bJTUr1M= +github.com/redpanda-data/common-go/net v0.1.1-0.20240429123545-4da3d2b371f7/go.mod h1:UJIi/yUxGOBYXUrfUsOkxfYxcb/ll7mZrwae/i+U2kc= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1 h1:fLBU7IJZq8PR88AkEdI5G+yyBsftionGapvAOMPW9hg= +github.com/redpanda-data/common-go/otelutil v0.0.0-20260109170727-1dd9f5d22ee1/go.mod h1:LzztzYWpD+e+A6hV6+eQhYY60zHQR7ePxhLgyMmRn/Q= +github.com/redpanda-data/common-go/rpadmin v0.2.0 h1:s2MyyY+yq7B17mLjjW17RO81wFlzo856K9IuBpsmvv0= +github.com/redpanda-data/common-go/rpadmin v0.2.0/go.mod h1:qmu76v7RRKgEXLS3UXxZ8KDpObtSNq6RinOIejJNWzw= +github.com/redpanda-data/common-go/secrets v0.1.4 h1:CGp3KolGnjcJvIafTwf7Hlj5ztLOJCjgkegRu7IAkSw= +github.com/redpanda-data/common-go/secrets v0.1.4/go.mod h1:WjUU/5saSXwItZx6veFOGbQZUgPQz4MQ65z22y0Ky84= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186 h1:kfhe8NbuBsXmBF68CnDaA0dDTWICNxwrC3rsO0h3WIg= +github.com/redpanda-data/console/backend v0.0.0-20251127091030-9718993ad186/go.mod h1:a73cXlHClCE0iUOjSOKdaGAPcnwYDv+2WaT9NeLZvKc= +github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6 h1:SbcvWTYFEbH5+NQOl1To5jppEa8RCK1HAkRNfhdUGLg= +github.com/redpanda-data/redpanda/src/go/rpk v0.0.0-20250716004441-6e1647296ad6/go.mod h1:/8XZuwUVFOGUkn31kglW28Xie5TrM7COtzRMA3GixaA= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ= github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88= @@ -363,6 +415,13 @@ github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= +<<<<<<< HEAD +======= +github.com/soheilhy/cmux v0.1.5 h1:jjzc5WVemNEDTLwv9tlmemhC73tI08BNOIGwBOo10Js= +github.com/soheilhy/cmux v0.1.5/go.mod h1:T7TcVDs9LWfQgPlPsdngu6I6QIoyIFZDDC6sNE1GqG0= +github.com/spf13/afero v1.12.0 h1:UcOPyRBYczmFn6yvphxkn9ZEOY65cpwGKb5mL36mrqs= +github.com/spf13/afero v1.12.0/go.mod h1:ZTlWwG4/ahT8W7T0WQ5uYmjI9duaLQGy3Q2OAl4sk/4= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w= github.com/spf13/cast v1.7.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo= github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo= @@ -386,24 +445,75 @@ github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0 h1:oZfauL/CPwI+H github.com/testcontainers/testcontainers-go/modules/k3s v0.39.0/go.mod h1:mlHF/P+wcE0+qeEsVYfifeXOOkAFhSmtpBJyDvbzhAc= github.com/texttheater/golang-levenshtein v1.0.1 h1:+cRNoVrfiwufQPhoMzB6N0Yf/Mqajr6t1lOv8GyGE2U= github.com/texttheater/golang-levenshtein v1.0.1/go.mod h1:PYAKrbF5sAiq9wd+H82hs7gNaen0CplQ9uvm6+enD/8= +<<<<<<< HEAD github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZb78yU= github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY= github.com/tklauser/numcpus v0.9.0 h1:lmyCHtANi8aRUgkckBgoDk1nHCux3n2cgkJLXdQGPDo= github.com/tklauser/numcpus v0.9.0/go.mod h1:SN6Nq1O3VychhC1npsWostA+oW+VOQTxZrS604NSRyI= +======= +github.com/tidwall/gjson v1.18.0 h1:FIDeeyB800efLX89e5a8Y0BNH+LOngJyGrIWxG2FKQY= +github.com/tidwall/gjson v1.18.0/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk= +github.com/tidwall/match v1.1.1 h1:+Ho715JplO36QYgwN9PGYNhgZvoUSc9X2c80KVTi+GA= +github.com/tidwall/match v1.1.1/go.mod h1:eRSPERbgtNPcGhD8UCthc6PmLEQXEWd3PRB5JTxsfmM= +github.com/tidwall/pretty v1.2.0/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= +github.com/tidwall/pretty v1.2.1 h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4= +github.com/tidwall/pretty v1.2.1/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU= +github.com/tklauser/go-sysconf v0.3.16 h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA= +github.com/tklauser/go-sysconf v0.3.16/go.mod h1:/qNL9xxDhc7tx3HSRsLWNnuzbVfh3e7gh/BmM179nYI= +github.com/tklauser/numcpus v0.11.0 h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw= +github.com/tklauser/numcpus v0.11.0/go.mod h1:z+LwcLq54uWZTX0u/bGobaV34u6V7KNlTZejzM6/3MQ= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 h1:6fotK7otjonDflCTK0BCfls4SPy3NcCVb5dqqmbRknE= +github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75/go.mod h1:KO6IkyS8Y3j8OdNO85qEYBsRPuteD+YciPomcXdrMnk= +github.com/twmb/franz-go v1.7.0/go.mod h1:PMze0jNfNghhih2XHbkmTFykbMF5sJqmNJB31DOOzro= +github.com/twmb/franz-go v1.20.4 h1:1wTvyLTOxS0oJh5ro/DVt2JHVdx7/kGNtmtFhbcr0O0= +github.com/twmb/franz-go v1.20.4/go.mod h1:YCnepDd4gl6vdzG03I5Wa57RnCTIC6DVEyMpDX/J8UA= +github.com/twmb/franz-go/pkg/kadm v1.17.1 h1:Bt02Y/RLgnFO2NP2HVP1kd2TFtGRiJZx+fSArjZDtpw= +github.com/twmb/franz-go/pkg/kadm v1.17.1/go.mod h1:s4duQmrDbloVW9QTMXhs6mViTepze7JLG43xwPcAeTg= +github.com/twmb/franz-go/pkg/kmsg v1.2.0/go.mod h1:SxG/xJKhgPu25SamAq0rrucfp7lbzCpEXOC+vH/ELrY= +github.com/twmb/franz-go/pkg/kmsg v1.12.0 h1:CbatD7ers1KzDNgJqPbKOq0Bz/WLBdsTH75wgzeVaPc= +github.com/twmb/franz-go/pkg/kmsg v1.12.0/go.mod h1:+DPt4NC8RmI6hqb8G09+3giKObE6uD2Eya6CfqBpeJY= +github.com/twmb/franz-go/pkg/sasl/kerberos v1.1.0 h1:alKdbddkPw3rDh+AwmUEwh6HNYgTvDSFIe/GWYRR9RM= +github.com/twmb/franz-go/pkg/sasl/kerberos v1.1.0/go.mod h1:k8BoBjyUbFj34f0rRbn+Ky12sZFAPbmShrg0karAIMo= +github.com/twmb/franz-go/pkg/sr v1.5.0 h1:KQH8veHxKyAjT4U4/rziJnSEfafuluznLoxhrp0yJfo= +github.com/twmb/franz-go/pkg/sr v1.5.0/go.mod h1:O4o4mUMNfmyEt2HcuM+qZdc6KrcStvjgxWR6Cfvmukw= +github.com/twmb/tlscfg v1.2.1 h1:IU2efmP9utQEIV2fufpZjPq7xgcZK4qu25viD51BB44= +github.com/twmb/tlscfg v1.2.1/go.mod h1:GameEQddljI+8Es373JfQEBvtI4dCTLKWGJbqT2kErs= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74 h1:JwtAtbp7r/7QSyGz8mKUbYJBg2+6Cd7OjM8o/GNOcVo= github.com/virtuald/go-ordered-json v0.0.0-20170621173500-b18e6e673d74/go.mod h1:RmMWU37GKR2s6pgrIEB4ixgpVCt/cf7dnJv3fuH1J1c= github.com/wk8/go-ordered-map/v2 v2.1.8 h1:5h/BUHu93oj4gIdvHHHGsScSTMijfx5PeYkE/fJgbpc= github.com/wk8/go-ordered-map/v2 v2.1.8/go.mod h1:5nJHM5DyteebpVlHnWMV0rPz6Zp7+xBAnxjb1X5vnTw= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 h1:S2dVYn90KE98chqDkyE9Z4N61UnQd+KOfgp5Iu53llk= +github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0= github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0= github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +<<<<<<< HEAD go.opentelemetry.io/auto/sdk v1.1.0 h1:cH53jehLUN6UFLY71z+NDOiNJqDdPRaXzTel0sJySYA= go.opentelemetry.io/auto/sdk v1.1.0/go.mod h1:3wSPjt5PWp2RhlCcmmOial7AvC4DQqZb7a7wCow3W8A= +======= +go.etcd.io/bbolt v1.4.2 h1:IrUHp260R8c+zYx/Tm8QZr04CX+qWS5PGfPdevhdm1I= +go.etcd.io/bbolt v1.4.2/go.mod h1:Is8rSHO/b4f3XigBC0lL0+4FwAQv3HXEEIgFMuKHceM= +go.etcd.io/etcd/api/v3 v3.6.4 h1:7F6N7toCKcV72QmoUKa23yYLiiljMrT4xCeBL9BmXdo= +go.etcd.io/etcd/api/v3 v3.6.4/go.mod h1:eFhhvfR8Px1P6SEuLT600v+vrhdDTdcfMzmnxVXXSbk= +go.etcd.io/etcd/client/pkg/v3 v3.6.4 h1:9HBYrjppeOfFjBjaMTRxT3R7xT0GLK8EJMVC4xg6ok0= +go.etcd.io/etcd/client/pkg/v3 v3.6.4/go.mod h1:sbdzr2cl3HzVmxNw//PH7aLGVtY4QySjQFuaCgcRFAI= +go.etcd.io/etcd/client/v3 v3.6.4 h1:YOMrCfMhRzY8NgtzUsHl8hC2EBSnuqbR3dh84Uryl7A= +go.etcd.io/etcd/client/v3 v3.6.4/go.mod h1:jaNNHCyg2FdALyKWnd7hxZXZxZANb0+KGY+YQaEMISo= +go.etcd.io/etcd/pkg/v3 v3.6.4 h1:fy8bmXIec1Q35/jRZ0KOes8vuFxbvdN0aAFqmEfJZWA= +go.etcd.io/etcd/pkg/v3 v3.6.4/go.mod h1:kKcYWP8gHuBRcteyv6MXWSN0+bVMnfgqiHueIZnKMtE= +go.etcd.io/etcd/server/v3 v3.6.4 h1:LsCA7CzjVt+8WGrdsnh6RhC0XqCsLkBly3ve5rTxMAU= +go.etcd.io/etcd/server/v3 v3.6.4/go.mod h1:aYCL/h43yiONOv0QIR82kH/2xZ7m+IWYjzRmyQfnCAg= +go.etcd.io/raft/v3 v3.6.0 h1:5NtvbDVYpnfZWcIHgGRk9DyzkBIXOi8j+DDp1IcnUWQ= +go.etcd.io/raft/v3 v3.6.0/go.mod h1:nLvLevg6+xrVtHUmVaTcTz603gQPHfh7kUAwV6YpfGo= +go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= +go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) go.opentelemetry.io/collector/pdata v1.32.0 h1:hBzlJV1rujr1UdD2CBy2gmaIKtC15ysg/z+x8F3McQA= go.opentelemetry.io/collector/pdata v1.32.0/go.mod h1:m41io9nWpy7aCm/uD1L9QcKiZwOP0ldj83JEA34dmlk= go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 h1:RyrtJzu5MAmIcbRrwg75b+w3RlZCP0vJByDVzcpAe3M= @@ -529,6 +639,8 @@ gopkg.in/evanphx/json-patch.v4 v4.12.0 h1:n6jtcsulIzXPJaxegRbvFNNrZDjbij7ny3gmSP gopkg.in/evanphx/json-patch.v4 v4.12.0/go.mod h1:p8EYWUEYMpynmqDbY58zCKCFZw8pRWMG4EsWvDvM72M= gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc= gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw= +gopkg.in/natefinch/lumberjack.v2 v2.2.1 h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc= +gopkg.in/natefinch/lumberjack.v2 v2.2.1/go.mod h1:YD8tP3GAjkrDg1eZH7EGmyESg/lsYskCTPBJVb9jqSc= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ= gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw= gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= @@ -557,16 +669,30 @@ k8s.io/component-base v0.33.3 h1:mlAuyJqyPlKZM7FyaoM/LcunZaaY353RXiOd2+B5tGA= k8s.io/component-base v0.33.3/go.mod h1:ktBVsBzkI3imDuxYXmVxZ2zxJnYTZ4HAsVj9iF09qp4= k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk= k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE= +<<<<<<< HEAD k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUyGcf03XZEP0ZIKgKj35LS4= k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8= +======= +k8s.io/kms v0.34.1 h1:iCFOvewDPzWM9fMTfyIPO+4MeuZ0tcZbugxLNSHFG4w= +k8s.io/kms v0.34.1/go.mod h1:s1CFkLG7w9eaTYvctOxosx88fl4spqmixnNpys0JAtM= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b h1:MloQ9/bdJyIu9lb1PzujOPolHyvO06MXG5TUIj2mNAA= +k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b/go.mod h1:UZ2yyWbFTpuhSbFhv24aGNOdoRdJZgsIObGBUaYVsts= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) k8s.io/kubectl v0.33.3 h1:r/phHvH1iU7gO/l7tTjQk2K01ER7/OAJi8uFHHyWSac= k8s.io/kubectl v0.33.3/go.mod h1:euj2bG56L6kUGOE/ckZbCoudPwuj4Kud7BR0GzyNiT0= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg= k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0= oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc= oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o= +<<<<<<< HEAD sigs.k8s.io/controller-runtime v0.20.4 h1:X3c+Odnxz+iPTRobG4tp092+CvBU9UK0t/bRf+n0DGU= sigs.k8s.io/controller-runtime v0.20.4/go.mod h1:xg2XB0K5ShQzAgsoujxuKN4LNXR2LfwwHsPj7Iaw+XY= +======= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 h1:jpcvIRr3GLoUoEKRkHKSmGjxb6lWwrBlJsXc+eUYQHM= +sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw= +sigs.k8s.io/controller-runtime v0.22.4 h1:GEjV7KV3TY8e+tJ2LCTxUTanW4z/FmNB7l327UfMq9A= +sigs.k8s.io/controller-runtime v0.22.4/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8= +>>>>>>> f1112cbe (Add migration job to handle mismatched field managers (#1249)) sigs.k8s.io/gateway-api v1.1.0 h1:DsLDXCi6jR+Xz8/xd0Z1PYl2Pn0TyaFMOPPZIj4inDM= sigs.k8s.io/gateway-api v1.1.0/go.mod h1:ZH4lHrL2sDi0FHZ9jjneb8kKnGzFWyrTya35sWUTrRs= sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE= diff --git a/taskfiles/build.yml b/taskfiles/build.yml index c06742a3b..7f41aec23 100644 --- a/taskfiles/build.yml +++ b/taskfiles/build.yml @@ -34,6 +34,7 @@ tasks: operator: vars: LD_FLAGS: >- + -X "google.golang.org/protobuf/reflect/protoregistry.conflictPolicy=ignore" -X "github.com/redpanda-data/redpanda-operator/operator/cmd/version.buildDate={{.TIMESTAMP}}" -X "github.com/redpanda-data/redpanda-operator/operator/cmd/version.commit={{.COMMIT}}" -X "github.com/redpanda-data/redpanda-operator/operator/cmd/version.Version={{.OPERATOR_VERSION}}" @@ -90,13 +91,18 @@ tasks: internal: true run: when_changed label: "go:build:{{ .DIR }}" + vars: + # this is a workaround for rpk packages using buf-built grpc-gateway protobuf options, whereas the kubernetes ecosystem + # uses the google provided libraries, which conflict due to them being the same library. + LD_FLAGS: >- + -X "google.golang.org/protobuf/reflect/protoregistry.conflictPolicy=ignore" var: DIR: "" PACKAGE: '{{default .TARGET "."}}' requires: vars: [DIR] cmds: - - go build -C {{ .DIR }} -o ../.build/{{ .DIR }} {{ .PACKAGE }} + - go build -C {{ .DIR }} -ldflags='{{ .LD_FLAGS }}' -o ../.build/{{ .DIR }} {{ .PACKAGE }} status: # NB: Task's globbing is finicky and tracking all possible go files is # prone to error. Instead, rely on go build's caching. Cache status must be @@ -107,4 +113,4 @@ tasks: # Negating the output of grep effectively indicates if go thinks a rebuild # is required. Command must be encased in "s as the negation operator (!) # is otherwise consumed during YAML parsing. - - "! go build -C {{ .DIR }} -n -o ../.build/{{ .DIR }} {{ .PACKAGE }} 2>&1 | grep 'mv $WORK'" + - "! go build -C {{ .DIR }} -n -ldflags='{{ .LD_FLAGS }}' -o ../.build/{{ .DIR }} {{ .PACKAGE }} 2>&1 | grep 'mv $WORK'"