confium-operator 0.5.4

Kubernetes operator for Confium threshold signing ceremonies
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: confiumsigningceremonies.confium.org
spec:
  group: confium.org
  names:
    kind: ConfiumSigningCeremony
    listKind: ConfiumSigningCeremonyList
    plural: confiumsigningceremonies
    singular: confiumsigningceremony
  scope: Namespaced
  versions:
    - name: v1alpha1
      served: true
      storage: true
      schema:
        openAPIV3Schema:
          type: object
          properties:
            spec:
              type: object
              required: [scheme, threshold, partyCount]
              properties:
                scheme:
                  type: string
                  enum: [cmp20, gg18]
                threshold:
                  type: integer
                  minimum: 1
                partyCount:
                  type: integer
                  minimum: 1
                messageRef:
                  type: object
                  properties:
                    configMap: { type: string }
                    key: { type: string }
                outputRef:
                  type: object
                  properties:
                    secret: { type: string }
            status:
              type: object
              properties:
                phase:
                  type: string
                  enum: [pending, keygenrunning, signing, completed, failed]
                startedAt: { type: string }
                completedAt: { type: string }
                signatureSecret: { type: string }
                error: { type: string }
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: confium-operator
  namespace: confium-system
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: confium-operator
  namespace: confium-system
spec:
  replicas: 1
  selector:
    matchLabels:
      app: confium-operator
  template:
    metadata:
      labels:
        app: confium-operator
    spec:
      serviceAccountName: confium-operator
      containers:
        - name: operator
          image: confium/operator:latest
          args: ["--namespace", ""]
          resources:
            requests:
              memory: 128Mi
              cpu: 100m
            limits:
              memory: 512Mi
              cpu: 500m