mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-08-18 16:02:10 +00:00
Ruben Fiszel
f02ef6d03c
* refactor: switch operator from CRD to ConfigMap Replace the WindmillInstance CRD with a plain ConfigMap for the K8s operator. This simplifies deployment (no CRD to install/manage, no ClusterRole for custom API groups) while keeping the same config schema. - Replace crd_ee.rs with configmap_ee.rs (parses data.spec YAML key) - Rewrite reconciler_ee.rs: ConfigMap watcher + Event recorder instead of CRD Controller + status subresource - Add license_key preservation: if absent/empty in ConfigMap but present in DB, the DB value is kept - Remove print_crd_yaml() and "operator crd" subcommand - Drop schemars, chrono, instance_config_schema dependencies - Delete manifests/crd.yaml - Update K8s example and README for ConfigMap approach - RBAC now only needs a namespace-scoped Role (not ClusterRole) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * feat: add superadmin YAML export endpoint and remove cache_clear from operator config Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
68 lines
1.7 KiB
YAML
68 lines
1.7 KiB
YAML
# Example: ConfigMap for the Windmill Kubernetes operator.
|
|
#
|
|
# Prerequisites:
|
|
# 1. Create the Secret: kubectl apply -f k8s-secrets.yaml
|
|
# 2. Apply this file: kubectl apply -f k8s-windmill-instance.yaml
|
|
# 3. Check events: kubectl get events --field-selector involvedObject.name=windmill-instance
|
|
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: windmill-instance
|
|
namespace: windmill
|
|
data:
|
|
spec: |
|
|
global_settings:
|
|
base_url: "https://windmill.example.com"
|
|
|
|
# Secret reference: reads "license-key" from K8s Secret "windmill-secrets"
|
|
license_key:
|
|
secretKeyRef:
|
|
name: windmill-secrets
|
|
key: license-key
|
|
|
|
retention_period_secs: 2592000
|
|
job_default_timeout: 900
|
|
expose_metrics: true
|
|
|
|
smtp_settings:
|
|
smtp_host: "smtp.example.com"
|
|
smtp_port: 587
|
|
smtp_from: "windmill@example.com"
|
|
smtp_tls_implicit: false
|
|
smtp_password:
|
|
secretKeyRef:
|
|
name: windmill-secrets
|
|
key: smtp-password
|
|
|
|
oauths:
|
|
google:
|
|
id: "your-google-client-id"
|
|
secret:
|
|
secretKeyRef:
|
|
name: windmill-secrets
|
|
key: google-oauth-secret
|
|
login_config:
|
|
auth_url: "https://accounts.google.com/o/oauth2/v2/auth"
|
|
token_url: "https://oauth2.googleapis.com/token"
|
|
userinfo_url: "https://openidconnect.googleapis.com/v1/userinfo"
|
|
scopes: ["openid", "profile", "email"]
|
|
|
|
custom_tags:
|
|
- gpu
|
|
- high-mem
|
|
|
|
worker_configs:
|
|
default:
|
|
worker_tags:
|
|
- deno
|
|
- python3
|
|
- bun
|
|
- go
|
|
- bash
|
|
- powershell
|
|
|
|
native:
|
|
worker_tags:
|
|
- nativets
|