|
| 1 | +apiVersion: operators.coreos.com/v1alpha1 |
| 2 | +kind: ClusterServiceVersion |
| 3 | +metadata: |
| 4 | + annotations: |
| 5 | + alm-examples: |- |
| 6 | + [ |
| 7 | + { |
| 8 | + "apiVersion": "ibm.com/v1", |
| 9 | + "kind": "IBMSecurityVerifyAccess", |
| 10 | + "metadata": { |
| 11 | + "name": "ivia-sample" |
| 12 | + }, |
| 13 | + "spec": { |
| 14 | + "image": "icr.io/ivia/ivia-wrp:11.0.0.0", |
| 15 | + "instance": "default" |
| 16 | + } |
| 17 | + } |
| 18 | + ] |
| 19 | + capabilities: Seamless Upgrades |
| 20 | + categories: Security |
| 21 | + certified: "false" |
| 22 | + containerImage: icr.io/isva/verify-access-operator:25.4.0 |
| 23 | + createdAt: "2025-05-01T01:27:17Z" |
| 24 | + description: The IBM Verify Identity Access Operator manages the lifecycle of |
| 25 | + IBM Verify Identity Access worker containers. |
| 26 | + operators.operatorframework.io/builder: operator-sdk-v1.39.2 |
| 27 | + operators.operatorframework.io/project_layout: go.kubebuilder.io/v4 |
| 28 | + repository: https://github.com/IBM-Security/verify-access-operator |
| 29 | + support: IBM |
| 30 | + name: ibm-security-verify-access-operator.v25.4.0 |
| 31 | + namespace: placeholder |
| 32 | +spec: |
| 33 | + apiservicedefinitions: {} |
| 34 | + customresourcedefinitions: |
| 35 | + owned: |
| 36 | + - description: IBMSecurityVerifyAccess is the Schema for the ibmsecurityverifyaccesses |
| 37 | + API. |
| 38 | + displayName: IBMSecurity Verify Access |
| 39 | + kind: IBMSecurityVerifyAccess |
| 40 | + name: ibmsecurityverifyaccesses.ibm.com |
| 41 | + resources: |
| 42 | + - kind: Deployment |
| 43 | + name: "" |
| 44 | + version: v1 |
| 45 | + specDescriptors: |
| 46 | + - description: The name of the IBM Security Verify Access image to be used. |
| 47 | + displayName: Image |
| 48 | + path: image |
| 49 | + x-descriptors: |
| 50 | + - urn:alm:descriptor:com.tectonic.ui:text |
| 51 | + - description: The name of the Verify Access instance which is being deployed. This |
| 52 | + value is only used for WRP and DSC deployments and is ignored for Runtime |
| 53 | + deployments. |
| 54 | + displayName: Instance |
| 55 | + path: instance |
| 56 | + x-descriptors: |
| 57 | + - urn:alm:descriptor:com.tectonic.ui:text |
| 58 | + - description: The number of pods which will be started for the deployment. |
| 59 | + displayName: Replicas |
| 60 | + path: replicas |
| 61 | + x-descriptors: |
| 62 | + - urn:alm:descriptor:com.tectonic.ui:number |
| 63 | + - description: A boolean flag which indicates whether the deployment should |
| 64 | + be automatically restarted when a new snapshot is published. |
| 65 | + displayName: Auto Restart |
| 66 | + path: autoRestart |
| 67 | + x-descriptors: |
| 68 | + - urn:alm:descriptor:com.tectonic.ui:booleanSwitch |
| 69 | + statusDescriptors: |
| 70 | + - description: The list of status conditions associated with the custom resource. |
| 71 | + displayName: Conditions |
| 72 | + path: conditions |
| 73 | + x-descriptors: |
| 74 | + - urn:alm:descriptor:io.kubernetes.conditions |
| 75 | + version: v1 |
| 76 | + description: |+ |
| 77 | + In a world of highly fragmented access management environments, [IBM Verify Identity Access](https://www.ibm.com/au-en/products/verify-access) helps you simplify your users' access while more securely adopting web, mobile and cloud technologies. This solution helps you strike a balance between usability and security through the use of risk-based access, single sign-on, integrated access management control, identity federation and its mobile multi-factor authentication capability, IBM Verify. Take back control of your access management with IBM Verify Identity Access. |
| 78 | +
|
| 79 | + The IBM Verify Identity Access operator provides lifecycle management of the lightweight containers which are used to protect an environment, namely: |
| 80 | + * [Web Reverse Proxy](https://www.ibm.com/docs/en/sva/latest?topic=support-docker-image-verify-access-web-reverse-proxy) |
| 81 | + * [Runtime](https://www.ibm.com/docs/en/sva/latest?topic=support-docker-image-verify-access-runtime) |
| 82 | + * [Distributed Session Cache](https://www.ibm.com/docs/en/sva/latest?topic=support-docker-image-verify-access-distributed-session-cache) |
| 83 | +
|
| 84 | + The operator will manage the deployment of these lightweight IBM Verify Identity Access worker containers, and also control the rolling restart of these containers when a configuration snapshot is updated. |
| 85 | +
|
| 86 | + See the project [Readme](https://github.com/IBM-Security/verify-access-operator/blob/master/README.md) for further information and details. |
| 87 | +
|
| 88 | + displayName: IBM Verify Identity Access Operator |
| 89 | + icon: |
| 90 | + - base64data: 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 |
| 91 | + mediatype: image/png |
| 92 | + install: |
| 93 | + spec: |
| 94 | + clusterPermissions: |
| 95 | + - rules: |
| 96 | + - apiGroups: |
| 97 | + - "" |
| 98 | + resources: |
| 99 | + - pods |
| 100 | + verbs: |
| 101 | + - get |
| 102 | + - list |
| 103 | + - watch |
| 104 | + - apiGroups: |
| 105 | + - "" |
| 106 | + resources: |
| 107 | + - secrets |
| 108 | + verbs: |
| 109 | + - create |
| 110 | + - delete |
| 111 | + - get |
| 112 | + - list |
| 113 | + - patch |
| 114 | + - update |
| 115 | + - watch |
| 116 | + - apiGroups: |
| 117 | + - apps |
| 118 | + resources: |
| 119 | + - deployments |
| 120 | + verbs: |
| 121 | + - create |
| 122 | + - delete |
| 123 | + - get |
| 124 | + - list |
| 125 | + - patch |
| 126 | + - update |
| 127 | + - watch |
| 128 | + - apiGroups: |
| 129 | + - ibm.com |
| 130 | + resources: |
| 131 | + - ibmsecurityverifyaccesses |
| 132 | + verbs: |
| 133 | + - create |
| 134 | + - delete |
| 135 | + - get |
| 136 | + - list |
| 137 | + - patch |
| 138 | + - update |
| 139 | + - watch |
| 140 | + - apiGroups: |
| 141 | + - ibm.com |
| 142 | + resources: |
| 143 | + - ibmsecurityverifyaccesses/finalizers |
| 144 | + verbs: |
| 145 | + - update |
| 146 | + - apiGroups: |
| 147 | + - ibm.com |
| 148 | + resources: |
| 149 | + - ibmsecurityverifyaccesses/status |
| 150 | + verbs: |
| 151 | + - get |
| 152 | + - patch |
| 153 | + - update |
| 154 | + - apiGroups: |
| 155 | + - authentication.k8s.io |
| 156 | + resources: |
| 157 | + - tokenreviews |
| 158 | + verbs: |
| 159 | + - create |
| 160 | + - apiGroups: |
| 161 | + - authorization.k8s.io |
| 162 | + resources: |
| 163 | + - subjectaccessreviews |
| 164 | + verbs: |
| 165 | + - create |
| 166 | + serviceAccountName: verify-access-operator-controller-manager |
| 167 | + deployments: |
| 168 | + - label: |
| 169 | + control-plane: controller-manager |
| 170 | + name: verify-access-operator-controller-manager |
| 171 | + spec: |
| 172 | + replicas: 1 |
| 173 | + selector: |
| 174 | + matchLabels: |
| 175 | + control-plane: controller-manager |
| 176 | + strategy: {} |
| 177 | + template: |
| 178 | + metadata: |
| 179 | + labels: |
| 180 | + control-plane: controller-manager |
| 181 | + spec: |
| 182 | + containers: |
| 183 | + - args: |
| 184 | + - --metrics-bind-address=:8443 |
| 185 | + - --leader-elect |
| 186 | + command: |
| 187 | + - /manager |
| 188 | + image: icr.io/isva/verify-access-operator:25.4.0 |
| 189 | + livenessProbe: |
| 190 | + httpGet: |
| 191 | + path: /healthz |
| 192 | + port: 8081 |
| 193 | + initialDelaySeconds: 15 |
| 194 | + periodSeconds: 20 |
| 195 | + name: manager |
| 196 | + readinessProbe: |
| 197 | + httpGet: |
| 198 | + path: /readyz |
| 199 | + port: 8081 |
| 200 | + initialDelaySeconds: 5 |
| 201 | + periodSeconds: 10 |
| 202 | + resources: |
| 203 | + limits: |
| 204 | + cpu: 400m |
| 205 | + memory: 500Mi |
| 206 | + requests: |
| 207 | + cpu: 100m |
| 208 | + memory: 20Mi |
| 209 | + securityContext: |
| 210 | + allowPrivilegeEscalation: false |
| 211 | + securityContext: |
| 212 | + runAsNonRoot: true |
| 213 | + serviceAccountName: verify-access-operator-controller-manager |
| 214 | + terminationGracePeriodSeconds: 10 |
| 215 | + permissions: |
| 216 | + - rules: |
| 217 | + - apiGroups: |
| 218 | + - "" |
| 219 | + resources: |
| 220 | + - configmaps |
| 221 | + verbs: |
| 222 | + - get |
| 223 | + - list |
| 224 | + - watch |
| 225 | + - create |
| 226 | + - update |
| 227 | + - patch |
| 228 | + - delete |
| 229 | + - apiGroups: |
| 230 | + - coordination.k8s.io |
| 231 | + resources: |
| 232 | + - leases |
| 233 | + verbs: |
| 234 | + - get |
| 235 | + - list |
| 236 | + - watch |
| 237 | + - create |
| 238 | + - update |
| 239 | + - patch |
| 240 | + - delete |
| 241 | + - apiGroups: |
| 242 | + - "" |
| 243 | + resources: |
| 244 | + - events |
| 245 | + verbs: |
| 246 | + - create |
| 247 | + - patch |
| 248 | + serviceAccountName: verify-access-operator-controller-manager |
| 249 | + strategy: deployment |
| 250 | + installModes: |
| 251 | + - supported: false |
| 252 | + type: OwnNamespace |
| 253 | + - supported: false |
| 254 | + type: SingleNamespace |
| 255 | + - supported: false |
| 256 | + type: MultiNamespace |
| 257 | + - supported: true |
| 258 | + type: AllNamespaces |
| 259 | + keywords: |
| 260 | + - identity and access |
| 261 | + - security |
| 262 | + links: |
| 263 | + - name: Verify Identity Access Product Information |
| 264 | + url: https://www.ibm.com/au-en/products/verify-access |
| 265 | + - name: Verify Identity Access Documentation |
| 266 | + url: https://www.ibm.com/docs/en/sva |
| 267 | + maintainers: |
| 268 | + |
| 269 | + name: Verify Identity Access Development Team |
| 270 | + maturity: stable |
| 271 | + minKubeVersion: 1.17.0 |
| 272 | + provider: |
| 273 | + name: IBM |
| 274 | + url: https://www.ibm.com |
| 275 | + version: 25.4.0 |
| 276 | + replaces: ibm-security-verify-access-operator.v24.12.0 |
0 commit comments