Thomas Schubart c800175c72
[ws-manager-mk2] Protect tokens (#16806)
* [wsman-mk2] Create token secret

* [installer] Fix casing for namespace type metadata

* [installer] Create secrets namespace

* [installer] Configure roles and bindings

* [installer] Move namespace constant to common pkg

* [installer] Create permissions for ws-daemon

* [wsman-mk2] Watch on multiple ns

* [ws-daemon] Use token secret

* [wsman-mk2] Remove secret from initializer

* [wsman-mk2] Test token secret

* [werft] Fix document index

* [installer] Update render tests

* [wsman-mk2] Fix imports

* [wsman-mk2] Ensure maintenance controller required permissions

* [wsman-mk2] Retry deleting secret

* [installer] Ensure objects in secrets namespace are only created with mk2 option
2023-03-15 12:57:07 +01:00

27 lines
587 B
Go

// Copyright (c) 2021 Gitpod GmbH. All rights reserved.
// Licensed under the GNU Affero General Public License (AGPL).
// See License.AGPL.txt in the project root for license information.
package wsdaemon
import (
"github.com/gitpod-io/gitpod/installer/pkg/common"
)
var Objects = common.CompositeRenderFunc(
role,
clusterrole,
configmap,
common.DefaultServiceAccount(Component),
daemonset,
rolebinding,
common.GenerateService(Component, []common.ServicePort{
{
Name: "rpc",
ContainerPort: ServicePort,
ServicePort: ServicePort,
},
}),
tlssecret,
)