112 lines
2.9 KiB
YAML
112 lines
2.9 KiB
YAML
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: quotad
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: ConfigMap
|
||
|
|
metadata:
|
||
|
|
name: quotad-script
|
||
|
|
namespace: quotad
|
||
|
|
data:
|
||
|
|
quotad.sh: |
|
||
|
|
#!/usr/bin/env bash
|
||
|
|
set -eou pipefail
|
||
|
|
|
||
|
|
echo "-----------------------------------------"
|
||
|
|
echo "quotad script written by Aaron 17.09.2023"
|
||
|
|
echo "-----------------------------------------"
|
||
|
|
while read ns; do
|
||
|
|
ns=$(echo $ns | cut -d "/" -f 2)
|
||
|
|
echo -n "check if $ns has the unlimited label"
|
||
|
|
if [[ $(kubectl get ns $ns -o json | jq -r '.metadata.labels["yolokube.de/unlimited-quota"]') == "true" ]]; then
|
||
|
|
echo ": yes"
|
||
|
|
# remove the quota elements if they exist
|
||
|
|
kubectl delete -n $ns -f /quotad-script/default-quota.yaml --ignore-not-found=true
|
||
|
|
else
|
||
|
|
echo ": no"
|
||
|
|
# set the quota elements if they do not already exist
|
||
|
|
kubectl apply -n $ns -f /quotad-script/default-quota.yaml
|
||
|
|
fi
|
||
|
|
echo "-----------------------------------------"
|
||
|
|
done <<< $(kubectl get ns -o name)
|
||
|
|
default-quota.yaml: |
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: ResourceQuota
|
||
|
|
metadata:
|
||
|
|
name: pvc-quota
|
||
|
|
spec:
|
||
|
|
hard:
|
||
|
|
persistentvolumeclaims.storageclass.storage.k8s.io/longhorn: 50Gi
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: LimitRange
|
||
|
|
metadata:
|
||
|
|
name: storagelimits
|
||
|
|
spec:
|
||
|
|
limits:
|
||
|
|
- type: PersistentVolumeClaim
|
||
|
|
max:
|
||
|
|
storage: 10Gi
|
||
|
|
---
|
||
|
|
apiVersion: batch/v1
|
||
|
|
kind: CronJob
|
||
|
|
metadata:
|
||
|
|
name: quotad
|
||
|
|
namespace: quotad
|
||
|
|
spec:
|
||
|
|
schedule: "*/2 * * * *"
|
||
|
|
successfulJobsHistoryLimit: 1
|
||
|
|
failedJobsHistoryLimit: 3
|
||
|
|
jobTemplate:
|
||
|
|
spec:
|
||
|
|
ttlSecondsAfterFinished: 240
|
||
|
|
template:
|
||
|
|
spec:
|
||
|
|
volumes:
|
||
|
|
- name: quotad-script
|
||
|
|
configMap:
|
||
|
|
name: quotad-script
|
||
|
|
defaultMode: 0777
|
||
|
|
containers:
|
||
|
|
- name: quotad
|
||
|
|
image: bitnami/kubectl
|
||
|
|
env:
|
||
|
|
- name: NODE_NAME
|
||
|
|
valueFrom:
|
||
|
|
fieldRef:
|
||
|
|
fieldPath: spec.nodeName
|
||
|
|
command: ["/bin/sh", "-c", "/quotad-script/quotad.sh"]
|
||
|
|
imagePullPolicy: IfNotPresent
|
||
|
|
volumeMounts:
|
||
|
|
- mountPath: /quotad-script
|
||
|
|
name: quotad-script
|
||
|
|
restartPolicy: Never
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
name: quotad-role
|
||
|
|
namespace: quotad
|
||
|
|
rules:
|
||
|
|
- apiGroups: [""]
|
||
|
|
resources: ["namespaces"]
|
||
|
|
verbs: ["get", "patch", "list"]
|
||
|
|
- apiGroups: [""]
|
||
|
|
resources: ["resourcequotas", "limitranges"]
|
||
|
|
verbs: ["get", "patch", "list", "create", "delete", "update"]
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
metadata:
|
||
|
|
name: quotad-binding
|
||
|
|
namespace: quotad
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: default
|
||
|
|
namespace: quotad
|
||
|
|
roleRef:
|
||
|
|
kind: ClusterRole
|
||
|
|
name: quotad-role
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|