chore: run make resources

config/deploy/base.yaml

@@ -1 +1,261 @@
-{}
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    control-plane: canary-checker
+  name: canary-checker
+  namespace: canary-checker
+spec:
+  ports:
+    - port: 8080
+      protocol: TCP
+      targetPort: 8080
+  selector:
+    control-plane: canary-checker
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    control-plane: canary-checker
+  name: canary-checker
+  namespace: canary-checker
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      control-plane: canary-checker
+  template:
+    metadata:
+      labels:
+        control-plane: canary-checker
+    spec:
+      containers:
+        - args:
+            - operator
+            - -v
+            - --httpPort
+            - "8080"
+          command:
+            - /app/canary-checker
+          env:
+            - name: DOCKER_API_VERSION
+              value: "1.39"
+          image: docker.io/flanksource/canary-checker:latest
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 8080
+            initialDelaySeconds: 10
+            periodSeconds: 5
+          name: canary-checker
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: 8080
+            initialDelaySeconds: 10
+            periodSeconds: 5
+          resources:
+            limits:
+              memory: 512Mi
+            requests:
+              cpu: 200m
+              memory: 200Mi
+          securityContext:
+            allowPrivilegeEscalation: true
+            capabilities:
+              add:
+                - CAP_NET_RAW
+            privileged: true
+            runAsUser: 0
+          volumeMounts:
+            - mountPath: /var/run/docker.sock
+              name: dockersock
+            - mountPath: /etc/podinfo
+              name: podinfo
+      serviceAccountName: canary-checker-sa
+      terminationGracePeriodSeconds: 10
+      volumes:
+        - hostPath:
+            path: /var/run/docker.sock
+          name: dockersock
+        - downwardAPI:
+            items:
+              - fieldRef:
+                  fieldPath: metadata.labels
+                path: labels
+          name: podinfo
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/tls-acme: "true"
+  name: canary-checker
+  namespace: canary-checker
+spec:
+  rules:
+    - host: canary-checker
+      http:
+        paths:
+          - backend:
+              service:
+                name: canary-checker
+                port:
+                  number: 8080
+            path: /
+            pathType: ImplementationSpecific
+  tls:
+    - hosts:
+        - canary-checker
+      secretName: canary-tls
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  labels:
+    control-plane: canary-checker
+  name: canary-checker-monitor
+  namespace: canary-checker
+spec:
+  endpoints:
+    - interval: 30s
+      port: metrics
+  jobLabel: canary-checker
+  selector:
+    matchLabels:
+      control-plane: canary-checker
+---
+apiVersion: scheduling.k8s.io/v1
+description: This priority class should be used for canary pods only.
+globalDefault: false
+kind: PriorityClass
+metadata:
+  name: canary-checker-priority
+value: -1
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  name: canary-checker-role
+rules:
+  - apiGroups:
+      - canaries.flanksource.com
+    resources:
+      - canaries
+      - topologies
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - canaries.flanksource.com
+    resources:
+      - canaries/status
+      - topologies/status
+    verbs:
+      - get
+      - patch
+      - update
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - namespaces
+      - services
+    verbs:
+      - '*'
+  - apiGroups:
+      - metrics.k8s.io
+    resources:
+      - pods
+      - nodes
+    verbs:
+      - '*'
+  - apiGroups:
+      - ""
+    resources:
+      - pods/exec
+      - pods/log
+    verbs:
+      - '*'
+  - apiGroups:
+      - ""
+    resources:
+      - nodes
+    verbs:
+      - get
+      - list
+  - apiGroups:
+      - extensions
+    resources:
+      - ingresses
+    verbs:
+      - '*'
+  - apiGroups:
+      - networking.k8s.io
+    resources:
+      - ingresses
+    verbs:
+      - '*'
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+      - configmaps
+    verbs:
+      - get
+      - list
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - create
+      - patch
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps/status
+    verbs:
+      - get
+      - update
+      - patch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: canary-checker-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: canary-checker-role
+subjects:
+  - kind: ServiceAccount
+    name: canary-checker-sa
+    namespace: canary-checker
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    control-plane: canary-checker
+  name: canary-checker-sa
+  namespace: canary-checker