change mongodb files

application.yaml

@@ -0,0 +1,23 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: app-agenda
+  namespace: argocd
+spec:
+  project: default
+
+  source:
+    repoURL: https://github.com/soukainna/kubeArgocdTesting
+    targetRevision: HEAD
+    path: agenda
+  destination: 
+    server: https://kubernetes.default.svc
+    namespace: argoapp
+
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+
+    automated:
+      selfHeal: true
+      prune: true

mobility-accounts/sealed-mobility-account-secret.yaml

@@ -5,13 +5,13 @@ metadata:
     sealedsecrets.bitnami.com/namespace-wide: "true"
   creationTimestamp: null
   name: mobility-account-secret
-  namespace: default
+  namespace: argocd-test
 spec:
   encryptedData:
-    services_oidc_provider_csrf_key: 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
+    services_oidc_provider_csrf_key: AgCN7Vcaid7r3SggtT6BH2IHyfNG1btvp3BF/hXnA5ofI9pnSArskvnNHdqzLL+GIzXu5iJnM+6YJsp4JKi6G8TcyQ9tpQneDmPiJCjUp2+TIPilJ+4DAjQ+ffdFKo/HGi3Viq0AAYy4225UeGS7734rm0reiTPQ5Ntfd8gyxdXHPQTuB51a5NMWz/TAIY4+Vlpvmgo+uJ4faysZ61ydRq5M7Um2rBaawCypcWgbsOWXUip4Zi2BaQnEkQJDsC4LfAFD83TRuY0eKc5uqfuIHqNzIHyVJMPV8q8INbgCCsUkWTFLqSEcChCSikAisisxAWAMULpb72Canspskd7MtnHzavE3oypWp5K6LCLF1W39R+o+Gr9a2jFskgQHZ9rNi2LF2gUHHLuPhIbDC1Fb59LOpxSgxZn8kQHoF/SBtHdTEmChDe8xMBa80x3P9l3S7mt7r6AIjv162/EWcAJHO60V8b94qnGHS43+tc9YMYjGOlHFSP0ubJEa/5deKVi8Zvj9/+n5hs0bkYITGE0IYnGMiPTcHnJ4chkt8nqGXF/KJVmrLN0uNp+3y4ro+/n/UIxNPcRyrepvNME8xkdNbpUbUu1gUnud0xwb890S++fDbLD0edmGOf6amDqJoxN+onjOtFfmaA2/5RVG9kDoL84EHlYIXX4Nz2p5B1fOIi3SmcRrfjWkK5K87meEfOrJZxnc9YyoRokyWetk3ciXJLLMG1e8s86lGNyuUfg9OYcGAA==
-    services_oidc_provider_namespaces_parcoursmob_clients_id: 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
+    services_oidc_provider_namespaces_parcoursmob_clients_id: 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
-    services_oidc_provider_namespaces_parcoursmob_clients_secret: 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
+    services_oidc_provider_namespaces_parcoursmob_clients_secret: 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
-    services_oidc_provider_namespaces_parcoursmob_secret_key: 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
+    services_oidc_provider_namespaces_parcoursmob_secret_key: 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
   template:
     metadata:
       annotations:
@@ -19,6 +19,6 @@ spec:
         sealedsecrets.bitnami.com/namespace-wide: "true"
       creationTimestamp: null
       name: mobility-account-secret
-      namespace: default
+      namespace: argocd-test
     type: Opaque
 

mongodb/kustomization.yaml

@@ -1,8 +1,14 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-bases:
+# bases:
-- rbac/
+# - rbac/
 
 resources:
+- role.yaml
+- role_binding.yaml
+- service_account.yaml
+- service_account_database.yaml
+- role_binding_database.yaml
+- role_database.yaml
 - mongodb.yaml

mongodb/role.yaml

@@ -0,0 +1,46 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: mongodb-kubernetes-operator
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - services
+  - configmaps
+  - secrets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - apps
+  resources:
+  - statefulsets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - mongodbcommunity.mongodb.com
+  resources:
+  - mongodbcommunity
+  - mongodbcommunity/status
+  - mongodbcommunity/spec
+  - mongodbcommunity/finalizers
+  verbs:
+  - get
+  - patch
+  - list
+  - update
+  - watch

mongodb/role_binding.yaml

@@ -0,0 +1,11 @@
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: mongodb-kubernetes-operator
+subjects:
+- kind: ServiceAccount
+  name: mongodb-kubernetes-operator
+roleRef:
+  kind: Role
+  name: mongodb-kubernetes-operator
+  apiGroup: rbac.authorization.k8s.io

mongodb/role_binding_database.yaml

@@ -0,0 +1,11 @@
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: mongodb-database
+subjects:
+- kind: ServiceAccount
+  name: mongodb-database
+roleRef:
+  kind: Role
+  name: mongodb-database
+  apiGroup: rbac.authorization.k8s.io

mongodb/role_database.yaml

@@ -0,0 +1,19 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: mongodb-database
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+    verbs:
+      - get
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+    verbs:
+      - patch
+      - delete
+      - get

mongodb/service_account.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: mongodb-kubernetes-operator

mongodb/service_account_database.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: mongodb-database