cat <<EOF | kubectl create -f -
apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: name: clusterconfigurations.installer.kubesphere.io spec: group: installer.kubesphere.io versions:
- name: v1alpha1
served: true
storage: true
schema:
openAPIV3Schema:
scope: Namespaced names: plural: clusterconfigurations singular: clusterconfiguration kind: ClusterConfiguration shortNames:type: object properties: spec: type: object x-kubernetes-preserve-unknown-fields: true status: type: object x-kubernetes-preserve-unknown-fields: true
- cc
apiVersion: v1 kind: Namespace metadata: name: kubesphere-system
apiVersion: v1 kind: ServiceAccount metadata: name: ks-installer namespace: kubesphere-system
apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: ks-installer rules:
- apiGroups:
- "" resources:
- '*' verbs:
- '*'
- apiGroups:
- apps resources:
- '*' verbs:
- '*'
- apiGroups:
- extensions resources:
- '*' verbs:
- '*'
- apiGroups:
- batch resources:
- '*' verbs:
- '*'
- apiGroups:
- rbac.authorization.k8s.io resources:
- '*' verbs:
- '*'
- apiGroups:
- apiregistration.k8s.io resources:
- '*' verbs:
- '*'
- apiGroups:
- apiextensions.k8s.io resources:
- '*' verbs:
- '*'
- apiGroups:
- tenant.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- certificates.k8s.io resources:
- '*' verbs:
- '*'
- apiGroups:
- devops.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- monitoring.coreos.com resources:
- '*' verbs:
- '*'
- apiGroups:
- logging.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- jaegertracing.io resources:
- '*' verbs:
- '*'
- apiGroups:
- storage.k8s.io resources:
- '*' verbs:
- '*'
- apiGroups:
- admissionregistration.k8s.io resources:
- '*' verbs:
- '*'
- apiGroups:
- policy resources:
- '*' verbs:
- '*'
- apiGroups:
- autoscaling resources:
- '*' verbs:
- '*'
- apiGroups:
- networking.istio.io resources:
- '*' verbs:
- '*'
- apiGroups:
- config.istio.io resources:
- '*' verbs:
- '*'
- apiGroups:
- iam.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- notification.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- auditing.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- events.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- core.kubefed.io resources:
- '*' verbs:
- '*'
- apiGroups:
- installer.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- storage.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- security.istio.io resources:
- '*' verbs:
- '*'
- apiGroups:
- monitoring.kiali.io resources:
- '*' verbs:
- '*'
- apiGroups:
- kiali.io resources:
- '*' verbs:
- '*'
- apiGroups:
- networking.k8s.io resources:
- '*' verbs:
- '*'
- apiGroups:
- kubeedge.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- types.kubefed.io resources:
- '*' verbs:
- '*'
- apiGroups:
- scheduling.k8s.io resources:
- '*' verbs:
- '*'
- apiGroups:
- kubevirt.io resources:
- '*' verbs:
- '*'
- apiGroups:
- cdi.kubevirt.io resources:
- '*' verbs:
- '*'
- apiGroups:
- network.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- virtualization.kubesphere.io resources:
- '*' verbs:
- '*'
- apiGroups:
- snapshot.storage.k8s.io resources:
- '*' verbs:
- '*'
kind: ClusterRoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: ks-installer subjects:
- kind: ServiceAccount name: ks-installer namespace: kubesphere-system roleRef: kind: ClusterRole name: ks-installer apiGroup: rbac.authorization.k8s.io
apiVersion: apps/v1 kind: Deployment metadata: name: ks-installer namespace: kubesphere-system labels: app: ks-install spec: replicas: 1 selector: matchLabels: app: ks-install template: metadata: labels: app: ks-install spec: serviceAccountName: ks-installer containers:
- name: installer image: harbor.chs.neusoft.com/kubespheredev/ksv-installer:v1.6.1 imagePullPolicy: "Always" resources: limits: cpu: "1" memory: 1Gi requests: cpu: 20m memory: 100Mi volumeMounts:
- mountPath: /etc/localtime name: host-time volumes:
- hostPath: path: /etc/localtime type: "" name: host-time
EOF