onefoursix

apiVersion: v1
kind: ServiceAccount
metadata:
  name: tiller
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: tiller

onefoursix

kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: tiller-manager
  namespace: streamsets
rules:
- apiGroups: ["", "batch", "extensions", "apps"]
  resources: ["*"]
  verbs: ["*"]

onefoursix

kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: tiller-binding
  namespace: streamsets
subjects:
- kind: ServiceAccount
  name: tiller
  namespace: streamsets
roleRef:

onefoursix

apiVersion: v1
kind: Namespace
metadata:
  name: ns1
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: control-agent-deployer-role
  namespace: ns1

onefoursix

apiVersion: v1
kind: Namespace
metadata:
  name: ns1
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: control-agent-deployer
  namespace: ns1

onefoursix

#!/usr/bin/env bash

# This extracts a Service Account Token from a previously created
# ServiceAccount that has sufficient RBAC permissions to deploy
# a Control Agent. The token is then set in a kubeconfig file 
# a non-admin user can use to deploy a Control Agent. cluster-admin 
# role is required to execute this script

# This script is based entirely on innovia/kubernetes_add_service_account_kubeconfig.sh
# located at https://gist.github.com/innovia/fbba8259042f71db98ea8d4ad19bd708

onefoursix

apiVersion: v1
kind: List
items:
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: auth-sdc
    namespace: ns2
    labels:
      app : auth-sdc

onefoursix

apiVersion: v1
kind: List
items:
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: auth-sdc
    namespace: ns2
    labels:
      app : my-auth-sdc

onefoursix

declare -a dbs=("jobrunner" "messaging" "notification" "pipelinestore" "policy" "provisioning" "reporting" "scheduler" "sdp_classification" "security" "sla" "timeseries" "topology" "dynamic_preview")

for i in "${dbs[@]}"
do
    sed -i "s/^db.openjpa.ConnectionURL=/db.openjpa.ConnectionURL=jdbc\:mysql\:\/\/localhost:3306\/${i}?useSSL=false/" ${i}-app.properties
    sed -i "s/^db.openjpa.ConnectionUserName=/db.openjpa.ConnectionUserName=sch/" ${i}-app.properties
    sed -i "s/^db.openjpa.ConnectionPassword=/db.openjpa.ConnectionPassword=Mysql12345!/" ${i}-app.properties
done

onefoursix

apiVersion: apps/v1
kind: Deployment
metadata:
  name: datacollector-deployment
  namespace: ns1
spec:
  replicas: 1
  selector:
    matchLabels:
      app: datacollector-deployment