Руководство по установке#

kubectl apply -n $SYND_NAMESPACE -f - <<EOF
kind: ServiceAccount
apiVersion: v1
metadata:
  name: synd-sa-synapsed
imagePullSecrets:
  - name: $IMAGE_PULL_SECRETS
  EOF

kubectl apply -n $SYND_NAMESPACE -f - <<EOF
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: synd-r-synapsed
rules:
  - apiGroups:
      - coordination.k8s.io
    resources:
      - leases
    verbs:
      - get
      - list
      - watch
      - update
      - patch
  - apiGroups:
      - discovery.synapse.sber
    resources:
      - discoveryhistories
      - discoveryhistories/status
    verbs:
      - get
      - list
      - watch
      - update
      - patch

kubectl apply -n $SYND_NAMESPACE -f - <<EOF
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: synd-rb-synapsed
subjects:
  - kind: ServiceAccount
    name: synd-sa-synapsed
    namespace: $SYND_NAMESPACE
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: synd-r-synapsed
  EOF

kubectl apply -n $SYND_NAMESPACE -f - <<EOF
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: synd-cr-synapsed
rules:
  - apiGroups:
      - discovery.synapse.sber
    resources:
      - discoveryexports
      - discoveryimports
      - discoverytemplates
      - discoveryparameters
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - discovery.synapse.sber
    resources:
      - discoveryexports/status
      - discoveryimports/status
    verbs:
      - get
      - list
      - watch
      - update
      - patch

kubectl apply -n $SYND_NAMESPACE -f - <<EOF
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: synd-crb-synapsed
subjects:
  - kind: ServiceAccount
    name: synd-sa-synapsed
    namespace: $SYND_NAMESPACE
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: synd-cr-synapsed
EOF

kubectl apply -n $SYND_NAMESPACE -f - <<EOF
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.11.1
  name: discoveryexports.discovery.synapse.sber
spec:
  group: discovery.synapse.sber
  names:
    kind: DiscoveryExport
    listKind: DiscoveryExportList
    plural: discoveryexports
    singular: discoveryexport
  scope: Namespaced
  versions:
    - name: v1alpha1
      schema:
        openAPIV3Schema:
          description: DiscoveryExport is the Schema for the discoveryexports API
          properties:
            apiVersion:
              description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
              type: string
            kind:
              description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
              type: string
            metadata:
              type: object
            spec:
              description: DiscoveryExportSpec defines the desired state of DiscoveryExport
              properties:
                address:
                  properties:
                    host:
                      type: string
                    path:
                      description: Only for HTTP protocol
                      type: string
                    port:
                      format: int32
                      type: integer
                    protocol:
                      description: HTTP or GRPC
                      type: string
                  required:
                    - host
                    - port
                    - protocol
                  type: object
                billingResourceName:
                  type: string
                requestRate:
                  description: RequestRate in ms
                  format: int32
                  type: integer
                templates:
                  items:
                    properties:
                      expiredPercentile:
                        description: Percentage of tll expiration that would trigger
                          sending message with type TTL_EXPIRING
                        format: int32
                        type: integer
                      name:
                        type: string
                      ttl:
                        description: Ttl in ms
                        format: int32
                        type: integer
                    required:
                      - name
                    type: object
                  type: array
              required:
                - address
                - templates
              type: object
            status:
              description: DiscoveryExportStatus defines the observed state of DiscoveryExport
              properties:
                connection:
                  description: DiscoveryExportConnectionStatus represents the connection
                    status
                  properties:
                    connected:
                      description: indicates whether the connection is active true or
                        false
                      type: boolean
                    error:
                      description: Reason the connection failed
                      type: string
                    lastConnectedTime:
                      description: LastConnectedTime stores the timestamp of the last
                        successful connection It is optional and omitted if the connection
                        has never been established
                      type: string
                  required:
                    - connected
                  type: object
                lastUpdate:
                  type: string
                message:
                  type: string
                status:
                  type: string
                validate:
                  description: ValidationStatus represents the result of a validation
                    process
                  properties:
                    error:
                      description: Reason the validation failed
                      type: string
                    isValid:
                      description: Indicates whether the validation was successful true
                        or false
                      type: boolean
                  required:
                    - isValid
                  type: object
              required:
                - lastUpdate
                - message
                - status
                - validate
              type: object
          type: object
      served: true
      storage: true
      subresources:
        status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.11.1
  name: discoveryimports.discovery.synapse.sber
spec:
  group: discovery.synapse.sber
  names:
    kind: DiscoveryImport
    listKind: DiscoveryImportList
    plural: discoveryimports
    singular: discoveryimport
  scope: Namespaced
  versions:
    - name: v1alpha1
      schema:
        openAPIV3Schema:
          description: DiscoveryImport is the Schema for the discoveryimports API
          properties:
            apiVersion:
              description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
              type: string
            kind:
              description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
              type: string
            metadata:
              type: object
            spec:
              description: DiscoveryImportSpec defines the desired state of DiscoveryImport
              properties:
                billingResourceName:
                  type: string
                templates:
                  items:
                    type: string
                  type: array
              type: object
            status:
              description: DiscoveryImportStatus defines the observed state of DiscoveryImport
              properties:
                lastUpdate:
                  type: string
                message:
                  type: string
                status:
                  type: string
                validate:
                  description: ValidationStatus represents the result of a validation
                    process
                  properties:
                    error:
                      description: Reason the validation failed
                      type: string
                    isValid:
                      description: Indicates whether the validation was successful true
                        or false
                      type: boolean
                  required:
                    - isValid
                  type: object
              required:
                - lastUpdate
                - message
                - status
              type: object
          type: object
      served: true
      storage: true
      subresources:
        status: {}
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.11.1
  name: discoverytemplates.discovery.synapse.sber
spec:
  group: discovery.synapse.sber
  names:
    kind: DiscoveryTemplate
    listKind: DiscoveryTemplateList
    plural: discoverytemplates
    singular: discoverytemplate
  scope: Namespaced
  versions:
    - name: v1alpha1
      schema:
        openAPIV3Schema:
          description: DiscoveryTemplate is the Schema for the discoverytemplates API
          properties:
            apiVersion:
              description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
              type: string
            kind:
              description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
              type: string
            metadata:
              type: object
            spec:
              description: DiscoveryTemplateSpec defines the desired state of DiscoveryTemplate
              properties:
                envoyApiVersion:
                  description: EnvoyApiVersion is the version of the API of Envoy Synapse
                    Service Mesh that this template is for
                  type: string
                template:
                  properties:
                    data:
                      description: Data is the blank template body (plaintext)
                      type: string
                    expiredPercentile:
                      description: Percentage of tll expiration that would trigger sending
                        message with type TTL_EXPIRING
                      format: int32
                      type: integer
                    name:
                      type: string
                    providerNamespaceSelector:
                      description: ProviderNamespaceSelector
                      properties:
                        matchExpressions:
                          description: MatchExpressions is a list of namespace selector
                            requirements. The requirements are ANDed.
                          items:
                            description: NamespaceSelectorRequirement is a selector
                              that contains values, a key, and an operator that relates
                              the key and values.
                            properties:
                              key:
                                description: Key is the namespace key that the selector
                                  applies to.
                                type: string
                              operator:
                                description: Operator represents a key's relationship
                                  to a set of values. Valid operators are In, NotIn,
                                  Exists and DoesNotExist.
                                type: string
                              values:
                                description: Values is an array of string values. If
                                  the operator is In or NotIn, the values array must
                                  be non-empty. If the operator is Exists or DoesNotExist,
                                  the values array must be empty. This array is replaced
                                  during a strategic merge patch.
                                items:
                                  type: string
                                type: array
                            required:
                              - key
                              - operator
                            type: object
                          type: array
                        matchNamespaces:
                          additionalProperties:
                            type: string
                          description: MatchNamespaces is a map of {key,value} pairs.
                            A single {key,value} in the matchNamespaces map is equivalent
                            to an element of matchExpressions, whose key field is "key",
                            the operator is "In", and the values array contains only
                            "value". The requirements are ANDed.
                          type: object
                      type: object
                      x-kubernetes-map-type: atomic
                    ttl:
                      description: Ttl in ms
                      format: int32
                      type: integer
                  required:
                    - name
                  type: object
              required:
                - envoyApiVersion
                - template
              type: object
            status:
              description: DiscoveryTemplateStatus defines the observed state of DiscoveryTemplate
              type: object
          type: object
      served: true
      storage: true
      subresources:
        status: { }
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.11.1
  name: discoveryparameters.discovery.synapse.sber
spec:
  group: discovery.synapse.sber
  names:
    kind: DiscoveryParameters
    listKind: DiscoveryParametersList
    plural: discoveryparameters
    singular: discoveryparameters
  scope: Namespaced
  versions:
    - name: v1alpha1
      schema:
        openAPIV3Schema:
          description: DiscoveryParameters is the Schema for the discoveryparameters
            API
          properties:
            apiVersion:
              description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
              type: string
            kind:
              description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
              type: string
            metadata:
              type: object
            spec:
              description: DiscoveryParametersSpec defines the desired state of DiscoveryParameters
              properties:
                description:
                  type: string
                params:
                  additionalProperties:
                    properties:
                      exclusiveMaximum:
                        description: ExclusiveMaximum determines whether the Maximum
                          is absolute
                        type: boolean
                      exclusiveMinimum:
                        description: ExclusiveMinimum determines whether the Minimum
                          is absolute
                        type: boolean
                      items:
                        description: Items describes the validation scheme for each
                          element of the array or map
                        nullable: true
                        properties:
                          maxItems:
                            description: MaxItems sets the maximum number of elements
                              in an array or map
                            format: int64
                            nullable: true
                            type: integer
                          minItems:
                            description: MinItems sets the maximum number of elements
                              in an array or map
                            format: int64
                            nullable: true
                            type: integer
                          schema:
                            x-kubernetes-preserve-unknown-fields: true
                        required:
                          - schema
                        type: object
                      maxLength:
                        description: MaxLength sets the maximum possible length of the
                          string value
                        format: int64
                        nullable: true
                        type: integer
                      maximum:
                        description: Maximum sets the maximum value of numeric object
                          (Int ot Float)
                        nullable: true
                        type: string
                      minLength:
                        description: MinLength sets the minimum possible length of the
                          string value
                        format: int64
                        nullable: true
                        type: integer
                      minimum:
                        description: Minimum sets the minimum value of numeric object
                          (Int ot Float)
                        nullable: true
                        type: string
                      pattern:
                        description: Pattern specifies a regular expression for checking
                          the string value
                        nullable: true
                        type: string
                      properties:
                        description: Properties describes fields of Object
                        nullable: true
                        type: object
                        x-kubernetes-preserve-unknown-fields: true
                      required:
                        description: Required determines whether the parameters are
                          required
                        items:
                          type: string
                        nullable: true
                        type: array
                      type:
                        default: string
                        description: 'Type is one of declared types: Object / Array
                        / Map / Int / Float / Bool / String'
                        enum:
                          - int
                          - float
                          - bool
                          - map
                          - array
                          - string
                          - object
                        type: string
                    type: object
                  type: object
              required:
                - params
              type: object
          type: object
      served: true
      storage: true
---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  annotations:
    controller-gen.kubebuilder.io/version: v0.11.1
  name: discoveryhistories.discovery.synapse.sber
spec:
  group: discovery.synapse.sber
  names:
    kind: DiscoveryHistory
    listKind: DiscoveryHistoryList
    plural: discoveryhistories
    singular: discoveryhistory
  scope: Namespaced
  versions:
    - name: v1alpha1
      schema:
        openAPIV3Schema:
          description: DiscoveryHistory is the Schema for the discoveryhistories API
          properties:
            apiVersion:
              description: 'APIVersion defines the versioned schema of this representation
              of an object. Servers should convert recognized schemas to the latest
              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
              type: string
            kind:
              description: 'Kind is a string value representing the REST resource this
              object represents. Servers may infer this from the endpoint the client
              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
              type: string
            metadata:
              type: object
            spec:
              description: DiscoveryHistorySpec defines the desired state of DiscoveryHistory
              properties:
                params:
                  description: Foo is an example field of DiscoveryHistory. Edit discoveryhistory_types.go
                    to remove/update
                  type: string
              type: object
            status:
              description: DiscoveryHistoryStatus defines the observed state of DiscoveryHistory
              properties:
                lastUpdate:
                  type: string
                message:
                  type: string
                status:
                  type: string
              required:
                - lastUpdate
                - message
                - status
              type: object
          type: object
      served: true
      storage: true
      subresources:
        status: {}  
  EOF

kubectl apply -n $SYND_NAMESPACE -f - <<EOF
apiVersion: apps.firepaws.io/v1
kind: CRDProxy
metadata:
  name: synd-crdproxy-export
  namespace: $SYND_NAMESPACE
serviceAccount:
  - $SERVICE_ACCOUNT
data: |-
  apiVersion: apiextensions.k8s.io/v1
  kind: CustomResourceDefinition
  metadata:
    annotations:
      controller-gen.kubebuilder.io/version: v0.11.1
    name: discoveryexports.discovery.synapse.sber
  spec:
    group: discovery.synapse.sber
    names:
      kind: DiscoveryExport
      listKind: DiscoveryExportList
      plural: discoveryexports
      singular: discoveryexport
    scope: Namespaced
    versions:
      - name: v1alpha1
        schema:
          openAPIV3Schema:
            description: DiscoveryExport is the Schema for the discoveryexports API
            properties:
              apiVersion:
                description: 'APIVersion defines the versioned schema of this representation
                of an object. Servers should convert recognized schemas to the latest
                internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
                type: string
              kind:
                description: 'Kind is a string value representing the REST resource this
                object represents. Servers may infer this from the endpoint the client
                submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
                type: string
              metadata:
                type: object
              spec:
                description: DiscoveryExportSpec defines the desired state of DiscoveryExport
                properties:
                  address:
                    properties:
                      host:
                        type: string
                      path:
                        description: Only for HTTP protocol
                        type: string
                      port:
                        format: int32
                        type: integer
                      protocol:
                        description: HTTP or GRPC
                        type: string
                    required:
                      - host
                      - path
                      - port
                      - protocol
                    type: object
                  billingResourceName:
                    type: string
                  requestRate:
                    description: RequestRate in ms
                    format: int32
                    type: integer
                  templates:
                    items:
                      properties:
                        expiredPercentile:
                          description: Percentage of tll expiration that would trigger
                            sending message with type TTL_EXPIRING
                          format: int32
                          type: integer
                        name:
                          type: string
                        ttl:
                          description: Ttl in ms
                          format: int32
                          type: integer
                      required:
                        - name
                      type: object
                    type: array
                required:
                  - address
                type: object
              status:
                description: DiscoveryExportStatus defines the observed state of DiscoveryExport
                properties:
                  lastUpdate:
                    type: string
                  message:
                    type: string
                  status:
                    type: string
                required:
                  - lastUpdate
                  - message
                  - status
                type: object
            type: object
        served: true
        storage: true
        subresources:
          status: {}
---
apiVersion: apps.firepaws.io/v1
kind: CRDProxy
metadata:
  name: synd-crdproxy-import
  namespace: $SYND_NAMESPACE
serviceAccount:
  - $SERVICE_ACCOUNT
data: |-
  apiVersion: apiextensions.k8s.io/v1
  kind: CustomResourceDefinition
  metadata:
    annotations:
      controller-gen.kubebuilder.io/version: v0.11.1
    name: discoveryimports.discovery.synapse.sber
  spec:
    group: discovery.synapse.sber
    names:
      kind: DiscoveryImport
      listKind: DiscoveryImportList
      plural: discoveryimports
      singular: discoveryimport
    scope: Namespaced
    versions:
      - name: v1alpha1
        schema:
          openAPIV3Schema:
            description: DiscoveryImport is the Schema for the discoveryimports API
            properties:
              apiVersion:
                description: 'APIVersion defines the versioned schema of this representation
                of an object. Servers should convert recognized schemas to the latest
                internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
                type: string
              kind:
                description: 'Kind is a string value representing the REST resource this
                object represents. Servers may infer this from the endpoint the client
                submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
                type: string
              metadata:
                type: object
              spec:
                description: DiscoveryImportSpec defines the desired state of DiscoveryImport
                properties:
                  billingResourceName:
                    type: string
                  templates:
                    items:
                      type: string
                    type: array
                type: object
              status:
                description: DiscoveryImportStatus defines the observed state of DiscoveryImport
                properties:
                  lastUpdate:
                    type: string
                  message:
                    type: string
                  status:
                    type: string
                required:
                  - lastUpdate
                  - message
                  - status
                type: object
            type: object
        served: true
        storage: true
        subresources:
          status: {}
---
apiVersion: apps.firepaws.io/v1
kind: CRDProxy
metadata:
  name: synd-crdproxy-templates
  namespace: $SYND_NAMESPACE
serviceAccount:
  - $SERVICE_ACCOUNT
data: |-
  apiVersion: apiextensions.k8s.io/v1
  kind: CustomResourceDefinition
  metadata:
    annotations:
      controller-gen.kubebuilder.io/version: v0.11.1
    name: discoverytemplates.discovery.synapse.sber
  spec:
    group: discovery.synapse.sber
    names:
      kind: DiscoveryTemplate
      listKind: DiscoveryTemplateList
      plural: discoverytemplates
      singular: discoverytemplate
    scope: Namespaced
    versions:
      - name: v1alpha1
        schema:
          openAPIV3Schema:
            description: DiscoveryTemplate is the Schema for the discoverytemplates API
            properties:
              apiVersion:
                description: 'APIVersion defines the versioned schema of this representation
                of an object. Servers should convert recognized schemas to the latest
                internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
                type: string
              kind:
                description: 'Kind is a string value representing the REST resource this
                object represents. Servers may infer this from the endpoint the client
                submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
                type: string
              metadata:
                type: object
              spec:
                description: DiscoveryTemplateSpec defines the desired state of DiscoveryTemplate
                properties:
                  envoyApiVersion:
                    description: EnvoyApiVersion is the version of the API of Envoy Synapse
                      Service Mesh that this template is for
                    type: string
                  template:
                    properties:
                      data:
                        description: Data is the blank template body (plaintext)
                        type: string
                      expiredPercentile:
                        description: Percentage of tll expiration that would trigger sending
                          message with type TTL_EXPIRING
                        format: int32
                        type: integer
                      name:
                        type: string
                      providerNamespaceSelector:
                        description: ProviderNamespaceSelector
                        properties:
                          matchExpressions:
                            description: MatchExpressions is a list of namespace selector
                              requirements. The requirements are ANDed.
                            items:
                              description: NamespaceSelectorRequirement is a selector
                                that contains values, a key, and an operator that relates
                                the key and values.
                              properties:
                                key:
                                  description: Key is the namespace key that the selector
                                    applies to.
                                  type: string
                                operator:
                                  description: Operator represents a key's relationship
                                    to a set of values. Valid operators are In, NotIn,
                                    Exists and DoesNotExist.
                                  type: string
                                values:
                                  description: Values is an array of string values. If
                                    the operator is In or NotIn, the values array must
                                    be non-empty. If the operator is Exists or DoesNotExist,
                                    the values array must be empty. This array is replaced
                                    during a strategic merge patch.
                                  items:
                                    type: string
                                  type: array
                              required:
                                - key
                                - operator
                              type: object
                            type: array
                          matchNamespaces:
                            additionalProperties:
                              type: string
                            description: MatchNamespaces is a map of {key,value} pairs.
                              A single {key,value} in the matchNamespaces map is equivalent
                              to an element of matchExpressions, whose key field is "key",
                              the operator is "In", and the values array contains only
                              "value". The requirements are ANDed.
                            type: object
                        type: object
                        x-kubernetes-map-type: atomic
                      ttl:
                        description: Ttl in ms
                        format: int32
                        type: integer
                    required:
                      - name
                    type: object
                required:
                  - envoyApiVersion
                  - template
                type: object
              status:
                description: DiscoveryTemplateStatus defines the observed state of DiscoveryTemplate
                type: object
            type: object
        served: true
        storage: true
        subresources:
          status: { }
---
apiVersion: apps.firepaws.io/v1
kind: CRDProxy
metadata:
  name: synd-crdproxy-histories
  namespace: $SYND_NAMESPACE
serviceAccount:
  - $SERVICE_ACCOUNT
data: |-
  apiVersion: apiextensions.k8s.io/v1
  kind: CustomResourceDefinition
  metadata:
    annotations:
      controller-gen.kubebuilder.io/version: v0.11.1
    name: discoveryhistories.discovery.synapse.sber
  spec:
    group: discovery.synapse.sber
    names:
      kind: DiscoveryHistory
      listKind: DiscoveryHistoryList
      plural: discoveryhistories
      singular: discoveryhistory
    scope: Namespaced
    versions:
      - name: v1alpha1
        schema:
          openAPIV3Schema:
            description: DiscoveryHistory is the Schema for the discoveryhistories API
            properties:
              apiVersion:
                description: 'APIVersion defines the versioned schema of this representation
                of an object. Servers should convert recognized schemas to the latest
                internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
                type: string
              kind:
                description: 'Kind is a string value representing the REST resource this
                object represents. Servers may infer this from the endpoint the client
                submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
                type: string
              metadata:
                type: object
              spec:
                description: DiscoveryHistorySpec defines the desired state of DiscoveryHistory
                properties:
                  params:
                    description: Foo is an example field of DiscoveryHistory. Edit discoveryhistory_types.go
                      to remove/update
                    type: string
                type: object
              status:
                description: DiscoveryHistoryStatus defines the observed state of DiscoveryHistory
                properties:
                  lastUpdate:
                    type: string
                  message:
                    type: string
                  status:
                    type: string
                required:
                  - lastUpdate
                  - message
                  - status
                type: object
            type: object
        served: true
        storage: true
        subresources:
          status: {}
  EOF

kind: ConfigMap
apiVersion: v1
metadata:
  name: synapse-discovery-dashboard
data:
  synapse-discovery-dashboard.json: |
    {{`{
      "annotations": {
        "list": [
          {
            "builtIn": 1,
            "datasource": "-- Grafana --",
            "enable": true,
            "hide": true,
            "iconColor": "rgba(0, 211, 255, 1)",
            "name": "Annotations & Alerts",
            "type": "dashboard"
          }
        ]
      },
      "description": "Dashboard for sdp metrics",
      "editable": true,
      "fiscalYearStartMonth": 0,
      "graphTooltip": 0,
      "id": 8,
      "links": [],
      "panels": [
        {
          "datasource": {
            "type": "prometheus"
          },
          "description": "",
          "fieldConfig": {
            "defaults": {
              "color": {
                "mode": "thresholds"
              },
              "mappings": [],
              "thresholds": {
                "mode": "absolute",
                "steps": [
                  {
                    "color": "#FADE2A",
                    "value": null
                  },
                  {
                    "color": "semi-dark-red",
                    "value": 80
                  }
                ]
              },
              "unitScale": true
            },
            "overrides": []
          },
          "gridPos": {
            "h": 8,
            "w": 12,
            "x": 0,
            "y": 0
          },
          "id": 1,
          "options": {
            "displayMode": "gradient",
            "maxVizHeight": 300,
            "minVizHeight": 16,
            "minVizWidth": 8,
            "namePlacement": "auto",
            "orientation": "auto",
            "reduceOptions": {
              "calcs": [
                "lastNotNull"
              ],
              "fields": "",
              "values": false
            },
            "showUnfilled": true,
            "sizing": "auto",
            "valueMode": "color"
          },
          "pluginVersion": "10.4.0-pre",
          "targets": [
            {
              "datasource": {
                "type": "prometheus",
                "uid": <uid>
              },
              "disableTextWrap": false,
              "editorMode": "builder",
              "expr": "synapse_discovery_configs_received{namespace=<user-ns>}",
              "fullMetaSearch": false,
              "includeNullMetadata": true,
              "instant": false,
              "legendFormat": "__auto",
              "range": true,
              "refId": "configs_received_ok",
              "useBackend": false
            },
            {
              "datasource": {
                "type": "prometheus",
                "uid": <uid>
              },
              "disableTextWrap": false,
              "editorMode": "builder",
              "expr": "synapse_discovery_configs_received_failed{namespace=<user-ns>}",
              "fullMetaSearch": false,
              "hide": false,
              "includeNullMetadata": true,
              "instant": false,
              "legendFormat": "__auto",
              "range": true,
              "refId": "configs_received_failed",
              "useBackend": false
            }
          ],
          "title": "Configs received status",
          "type": "bargauge"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": <uid>
          },
          "description": "",
          "fieldConfig": {
            "defaults": {
              "color": {
                "mode": "thresholds"
              },
              "mappings": [],
              "thresholds": {
                "mode": "absolute",
                "steps": [
                  {
                    "color": "green",
                    "value": null
                  },
                  {
                    "color": "dark-red",
                    "value": 100
                  }
                ]
              },
              "unitScale": true
            },
            "overrides": []
          },
          "gridPos": {
            "h": 8,
            "w": 12,
            "x": 12,
            "y": 0
          },
          "id": 2,
          "options": {
            "displayMode": "gradient",
            "maxVizHeight": 300,
            "minVizHeight": 16,
            "minVizWidth": 8,
            "namePlacement": "auto",
            "orientation": "auto",
            "reduceOptions": {
              "calcs": [
                "lastNotNull"
              ],
              "fields": "",
              "values": false
            },
            "showUnfilled": true,
            "sizing": "auto",
            "valueMode": "color"
          },
          "pluginVersion": "10.4.0-pre",
          "targets": [
            {
              "datasource": {
                "type": "prometheus",
                "uid": <uid>
              },
              "disableTextWrap": false,
              "editorMode": "builder",
              "expr": "synapse_discovery_response_to_proxy_success{namespace=<user-ns>}",
              "fullMetaSearch": false,
              "includeNullMetadata": true,
              "instant": false,
              "legendFormat": "__auto",
              "range": true,
              "refId": "Response to Proxy Success",
              "useBackend": false
            },
            {
              "datasource": {
                "type": "prometheus",
                "uid": <uid>
              },
              "disableTextWrap": false,
              "editorMode": "builder",
              "expr": "synapse_discovery_response_to_proxy_fail{namespace=<user-ns>}",
              "fullMetaSearch": false,
              "hide": false,
              "includeNullMetadata": true,
              "instant": false,
              "legendFormat": "__auto",
              "range": true,
              "refId": "Response to Proxy Failed",
              "useBackend": false
            }
          ],
          "title": "Response to proxy status",
          "type": "bargauge"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": <uid>
          },
          "fieldConfig": {
            "defaults": {
              "color": {
                "mode": "thresholds"
              },
              "fieldMinMax": false,
              "mappings": [],
              "thresholds": {
                "mode": "absolute",
                "steps": [
                  {
                    "color": "green",
                    "value": null
                  },
                  {
                    "color": "red",
                    "value": 80
                  }
                ]
              },
              "unitScale": true
            },
            "overrides": []
          },
          "gridPos": {
            "h": 8,
            "w": 12,
            "x": 0,
            "y": 8
          },
          "id": 3,
          "options": {
            "displayMode": "basic",
            "maxVizHeight": 300,
            "minVizHeight": 16,
            "minVizWidth": 8,
            "namePlacement": "auto",
            "orientation": "auto",
            "reduceOptions": {
              "calcs": [
                "lastNotNull"
              ],
              "fields": "/^\\{__name__=\"synapse_discovery_envoy_current_connections_active\", app=\"synapse\\-discovery\", cluster=<cluser>, instance=<ip>, job=<job-name>, namespace=<user-ns>, pod=\"synapse\\-discovery\\-<uid>\", pod_template_hash=<uid>, security_istio_io_tlsMode=\"istio\", service_istio_io_canonical_name=\"synapse\\-discovery\", service_istio_io_canonical_revision=\"v1\", version=\"v1\"\\}$/",
              "values": false
            },
            "showUnfilled": true,
            "sizing": "auto",
            "valueMode": "color"
          },
          "pluginVersion": "10.4.0-pre",
          "targets": [
            {
              "datasource": {
                "type": "prometheus",
                "uid": <uid>
              },
              "disableTextWrap": false,
              "editorMode": "builder",
              "expr": "synapse_discovery_envoy_current_connections_active{namespace=<user-ns>}",
              "fullMetaSearch": false,
              "includeNullMetadata": true,
              "instant": false,
              "legendFormat": "__auto",
              "range": true,
              "refId": "Active Envoy Connections",
              "useBackend": false
            },
            {
              "datasource": {
                "type": "prometheus",
                "uid": <uid>
              },
              "disableTextWrap": false,
              "editorMode": "builder",
              "expr": "synapse_discovery_envoy_connections_fail{namespace=<user-ns>}",
              "fullMetaSearch": false,
              "hide": false,
              "includeNullMetadata": true,
              "instant": false,
              "legendFormat": "__auto",
              "range": true,
              "refId": "Failed Envoy Connections",
              "useBackend": false
            },
            {
              "datasource": {
                "type": "prometheus",
                "uid": <uid>
              },
              "disableTextWrap": false,
              "editorMode": "builder",
              "expr": "synapse_discovery_envoy_connections_total{namespace=<user-ns>}",
              "fullMetaSearch": false,
              "hide": false,
              "includeNullMetadata": true,
              "instant": false,
              "legendFormat": "__auto",
              "range": true,
              "refId": "Total Envoy Connections",
              "useBackend": false
            }
          ],
          "title": "Envoy Connections",
          "type": "bargauge"
        }
      ],
      "refresh": "5s",
      "schemaVersion": 39,
      "tags": [],
      "templating": {
        "list": []
      },
      "time": {
        "from": "now-5m",
        "to": "now"
      },
      "timepicker": {},
      "timezone": "",
      "title": "Synapse Discovery Metrics",
      "uid": <uid>,
      "version": 4,
      "weekStart": ""
    }`}}

kind: Deployment
apiVersion: apps/v1
metadata:
  name: synapse-metrics-dashboard
  labels:
    app.kubernetes.io/instance: synapse-metrics-dashboard
    app.kubernetes.io/name: dashboard
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/instance: synapse-metrics-dashboard
      app.kubernetes.io/name: dashboard
  template:
    metadata:
      labels:
        app.kubernetes.io/instance: synapse-metrics-dashboard
        app.kubernetes.io/name: dashboard
    spec:
...      
      volumeMounts:
...
        - name: synapse-discovery-dashboard
          mountPath: /var/lib/grafana/dashboards/synapse-discovery-dashboard
...
      volumes:
...
        - name: synapse-discovery-dashboard
          configMap:
            name: synapse-discovery-dashboard
            defaultMode: 256
...

apiVersion: v1
kind: ConfigMap
metadata:
  name: synapse-metrics-agent-scrapeconfig
  labels:
    platformv.sber.ru/productCode: "SSM"
    platformv.sber.ru/componentCode: "GATM"
    platformv.sber.ru/releaseVersion: "3.9"
data:
  scrape.yml: |
    global:
...
    scrape_configs:
    - job_name: 'prom-endpoint'
      scrape_interval: 5s
      metrics_path: '/metrics'
      static_configs:
      - targets:
        - synapse-discovery.***.svc.cluster.local:8888
...
    - bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
      job_name: istio-data-plane-pods
      kubernetes_sd_configs:
      - role: pod
        namespaces:
          names: ["data-plane2", "istio-system"]
      relabel_configs:
        - action: keep
          regex: synapse-discovery
          source_labels:
            - __meta_kubernetes_pod_container_name
...
        - action: replace
          regex: ([^:]+)(?::\d+)?
          replacement: $1:8888/metrics
          source_labels:
            - __address__
          target_label: __address__
...
    - bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
      job_name: istio-pods
      metrics_path: /stats/prometheus
      kubernetes_sd_configs:
      - role: pod
        namespaces:
          names: ["data-plane2", "{{ .Values.egress.istioControlPlane }}", "synapse-metrics-systems"]
...
    - bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
      job_name: istio-cp-pods
      kubernetes_sd_configs:
      - role: pod
        namespaces:
          names: ["data-plane2", "{{ .Values.egress.istioControlPlane }}", "synapse-metrics-systems"]

...
system_metrics_targets:
...
- name: metrics
  namespace: $SYND_NAMESPACE
  relabel_regex: "('kube_deployment_status_replicas_available|kube_deployment_status_replicas|container_memory_usage_bytes')"
...

apiVersion: v1
kind: ConfigMap
metadata:
  name: {{ .Values.logs.configMaps.name }}
data:
  telegraf.conf: |-
    [[inputs.tail]]
      files = ["/logs/synd.logs"] 
      name_override = "synd-logs"
      data_format = "json"                             
      json_string_fields = ["*"]
      tag_keys = ["level"]

    [[outputs.file]]
      files = ["stdout"]
      data_format = "json"

    [[outputs.health]]
      service_address = "http://:{{ .Values.logs.healthCheckPort }}"

    [[processors.override]]
      [processors.override.tags]
        logLevel = "info"
        namespace = "$POD_NAMESPACE"
        podName = "$POD_NAME"
        service = "$DEPLOYMENT_NAME"

    [agent]
      debug = false                                     
      interval = "2s"                                   
      flush_interval = "10s"                           
      metric_batch_size = 10

    [[outputs.kafka]]
      startup_error_behavior = "retry"
      topic = "{{ .Values.kafka.topic }}"
      brokers = ["{{ .Values.kafka.service }}.{{ .Release.Namespace }}.svc.cluster.local:{{ .Values.kafka.kafka_mesh_virtual_port }}"]
      compression_codec = 0
      data_format = "json"
      routing_tag = "message"
      enable_tls = false
      json_timestamp_format = "2006-01-02T15:04:05Z07:00"
      max_retry = 3
      keep_alive_period = "10s"

kind: Deployment
  ...
spec:
    containers:
        - name: synapse-logs-agent
          image: ${ссылка на image приложений Agent (logs)}
          args:
              - '--watch-config=poll'
          env:
            - name: POD_NAMESPACE
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.name
            - name: NODE_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: spec.nodeName
            - name: POD_IP
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: status.podIP
            - name: NODE_PATH
              value: some.value
            - name: DEPLOYMENT_NAME
              value: synd-synapsed
          resources:
            limits:
              cpu: 1400m
              memory: 400Mi
            requests:
              cpu: 100m
              memory: 100Mi
          volumeMounts:
            - name: synd-logs-agent-config
              mountPath: /var/logs-agent
            - name: synd-logs-volume
              mountPath: /logs
          livenessProbe:
            httpGet:
              path: /health
              port: 8083
              scheme: HTTP
            initialDelaySeconds: 60
            timeoutSeconds: 5
            periodSeconds: 20
            successThreshold: 1
            failureThreshold: 5
          readinessProbe:
            httpGet:
              path: /ready
              port: 8083
              scheme: HTTP
            initialDelaySeconds: 5
            timeoutSeconds: 5
            periodSeconds: 15
            successThreshold: 1
            failureThreshold: 30
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          imagePullPolicy: Always
          securityContext:
            capabilities:
              drop:
                - ALL
            privileged: false
            runAsUser: 10001
            runAsGroup: 10001
            runAsNonRoot: true
            readOnlyRootFilesystem: true
            allowPrivilegeEscalation: false
            seccompProfile:
              type: RuntimeDefault
    ...
    volumes:
          ...
        - name: synd-logs-agent-config
          configMap:
            name: synd-logs-agent-config
            defaultMode: 256

apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  labels:
  {{ range $_, $l := .Values.labels }}
    {{ $l -}}
  {{ end }}
  name: synd-kafka-mesh-drs
spec:
  exportTo:
    - .
  host: {{ .Values.kafka.address }}
  trafficPolicy:
    loadBalancer:
      simple: LEAST_CONN
    portLevelSettings:
      - port:
          number: {{ .Values.kafka.port }}
        tls:
          {{- if eq .Values.gatm.enable_namespace_synd "true" }}
          caCertificates: {{ .Values.gatm.tlsSettings.ca }}
          clientCertificate: {{ .Values.gatm.tlsSettings.clientCertificate }}
          privateKey: {{ .Values.gatm.tlsSettings.privateKey }}
          {{ else }}
          caCertificates: {{ .Values.egress.tlsKafka.ca }}
          clientCertificate: {{ .Values.egress.tlsKafka.crt }}
          privateKey: {{ .Values.egress.tlsKafka.key }}
          {{ end }}
          mode: MUTUAL
          sni: {{ .Values.kafka.address }}
  workloadSelector:
    matchLabels:
      {{- if eq .Values.gatm.enable_namespace_synd "true" }}
      istio: egw-syn-metrics-{{ .Release.Namespace }}
      {{ else }}
      istio: egw-syn-discovery-{{ .Release.Namespace }}
      {{ end }}

---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  labels:
  {{ range $_, $l := .Values.labels }}
    {{ $l -}}
  {{ end }}
  name: synd-kafka-mesh-local-drs
spec:
  exportTo:
    - .
  host: {{ .Values.kafka.service }}.{{ .Release.Namespace }}.svc.cluster.local
  trafficPolicy:
    portLevelSettings:
      - port:
          number: {{ .Values.kafka.port }}
        tls:
          mode: ISTIO_MUTUAL
---
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  name: {{ .Values.kafka.service }}-gw
  labels:
  {{ range $_, $l := .Values.labels }}
  {{ $l -}}
  {{ end }}
spec:
  selector:
    {{- if eq .Values.gatm.enable_namespace_synd "true" }}
    istio: egw-syn-metrics-{{ .Release.Namespace }}
    {{ else }}
    istio: egw-syn-discovery-{{ .Release.Namespace }}
    {{ end }}
  servers:
    - hosts:
        - {{ .Values.kafka.service }}.{{ .Release.Namespace }}.svc.cluster.local
      port:
        name: kafka-{{ .Values.kafka.kafka_mesh_virtual_port }}
        number: {{ .Values.kafka.kafka_mesh_virtual_port }}
        protocol: kafka
---
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: synd-kafka-mesh-cluster-se
  labels:
  {{ range $_, $l := .Values.labels }}
  {{ $l -}}
  {{ end }}
spec:
  endpoints:
    - address: {{ .Values.kafka.address }}
      ports:
        kafka-{{ .Values.kafka.port }}: {{ .Values.kafka.port }}
  exportTo:
    - .
  hosts:
    -  {{ .Values.kafka.address }}
  location: MESH_EXTERNAL
  ports:
    - name: kafka-{{ .Values.kafka.port }}
      number:  {{ .Values.kafka.port }}
      protocol: kafka
  resolution: DNS
---
apiVersion: v1
kind: Service
metadata:
  name: {{ .Values.kafka.service }}
  labels:
  {{ range $_, $l := .Values.labels }}
  {{ $l -}}
  {{ end }}
spec:
  ports:
    - name: kafka-{{ .Values.kafka.kafka_mesh_virtual_port }}
      protocol: TCP
      port: {{ .Values.kafka.kafka_mesh_virtual_port }}
      targetPort: {{ .Values.kafka.kafka_mesh_virtual_port }}
  selector:
    {{- if eq .Values.gatm.enable_namespace_synd "true" }}
    istio: egw-syn-metrics-{{ .Release.Namespace }}
    {{ else }}
    istio: egw-syn-discovery-{{ .Release.Namespace }}
    {{ end }}
  sessionAffinity: None
  type: ClusterIP
---
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
  name: synd-kafka-mesh-egress-vs
  labels:
  {{ range $_, $l := .Values.labels }}
  {{ $l -}}
  {{ end }}
spec:
  exportTo:
    - .
  gateways:
    - {{ .Values.kafka.service }}-gw
    - mesh
  hosts:
    - {{ .Values.kafka.service }}.{{ .Release.Namespace }}.svc.cluster.local
  tcp:
    - match:
        - gateways:
            - {{ .Values.kafka.service }}-gw
          port: {{ .Values.kafka.kafka_mesh_virtual_port }}

      route:
        - destination:
            host: {{ .Values.kafka.address }}
            port:
              number: {{ .Values.kafka.port }}
          weight: 100