| ... | @@ -49,14 +49,8 @@ module Clusters |
... | @@ -49,14 +49,8 @@ module Clusters |
|
|
|
|
|
|
|
create_or_update_knative_serving_role
|
|
create_or_update_knative_serving_role
|
|
|
create_or_update_knative_serving_role_binding
|
|
create_or_update_knative_serving_role_binding
|
|
|
|
|
|
|
|
create_or_update_crossplane_database_role
|
|
create_or_update_crossplane_database_role
|
|
|
create_or_update_crossplane_database_role_binding
|
|
create_or_update_crossplane_database_role_binding
|
|
|
|
|
|
|
|
return unless knative_serving_namespace
|
|
|
|
|
|
|
|
|
|
create_or_update_knative_version_role
|
|
|
|
|
create_or_update_knative_version_role_binding
|
|
|
|
|
end
|
|
end
|
|
|
|
|
|
|
|
private
|
|
private
|
| ... | @@ -70,12 +64,6 @@ module Clusters |
... | @@ -70,12 +64,6 @@ module Clusters |
|
|
).ensure_exists!
|
|
).ensure_exists!
|
|
|
end
|
|
end
|
|
|
|
|
|
|
|
def knative_serving_namespace
|
|
|
|
|
kubeclient.get_namespace(Clusters::Kubernetes::KNATIVE_SERVING_NAMESPACE)
|
|
|
|
|
rescue Kubeclient::ResourceNotFoundError
|
|
|
|
|
nil
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def create_role_or_cluster_role_binding
|
|
def create_role_or_cluster_role_binding
|
|
|
if namespace_creator
|
|
if namespace_creator
|
|
|
kubeclient.create_or_update_role_binding(role_binding_resource)
|
|
kubeclient.create_or_update_role_binding(role_binding_resource)
|
| ... | @@ -100,14 +88,6 @@ module Clusters |
... | @@ -100,14 +88,6 @@ module Clusters |
|
|
kubeclient.update_role_binding(crossplane_database_role_binding_resource)
|
|
kubeclient.update_role_binding(crossplane_database_role_binding_resource)
|
|
|
end
|
|
end
|
|
|
|
|
|
|
|
def create_or_update_knative_version_role
|
|
|
|
|
kubeclient.update_cluster_role(knative_version_role_resource)
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def create_or_update_knative_version_role_binding
|
|
|
|
|
kubeclient.update_cluster_role_binding(knative_version_role_binding_resource)
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def service_account_resource
|
|
def service_account_resource
|
|
|
Gitlab::Kubernetes::ServiceAccount.new(
|
|
Gitlab::Kubernetes::ServiceAccount.new(
|
|
|
service_account_name,
|
|
service_account_name,
|
| ... | @@ -186,27 +166,6 @@ module Clusters |
... | @@ -186,27 +166,6 @@ module Clusters |
|
|
service_account_name: service_account_name
|
|
service_account_name: service_account_name
|
|
|
).generate
|
|
).generate
|
|
|
end
|
|
end
|
|
|
|
|
|
|
|
def knative_version_role_resource
|
|
|
|
|
Gitlab::Kubernetes::ClusterRole.new(
|
|
|
|
|
name: Clusters::Kubernetes::GITLAB_KNATIVE_VERSION_ROLE_NAME,
|
|
|
|
|
rules: [{
|
|
|
|
|
apiGroups: %w(apps),
|
|
|
|
|
resources: %w(deployments),
|
|
|
|
|
verbs: %w(list get)
|
|
|
|
|
}]
|
|
|
|
|
).generate
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def knative_version_role_binding_resource
|
|
|
|
|
subjects = [{ kind: 'ServiceAccount', name: service_account_name, namespace: service_account_namespace }]
|
|
|
|
|
|
|
|
|
|
Gitlab::Kubernetes::ClusterRoleBinding.new(
|
|
|
|
|
Clusters::Kubernetes::GITLAB_KNATIVE_VERSION_ROLE_BINDING_NAME,
|
|
|
|
|
Clusters::Kubernetes::GITLAB_KNATIVE_VERSION_ROLE_NAME,
|
|
|
|
|
subjects
|
|
|
|
|
).generate
|
|
|
|
|
end
|
|
|
|
|
end
|
|
end
|
|
|
end
|
|
end
|
|
|
end |
|
end |