Merge pull request #285 from seqeralabs/24.2-docs-port

Create 24.2 docs

platform_versioned_docs/version-24.2/_templates/aws-batch/forge-policy.json

@@ -0,0 +1,62 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Sid": "TowerForge0",
+            "Effect": "Allow",
+            "Action": [
+                "ssm:GetParameters",
+                "iam:CreateInstanceProfile",
+                "iam:DeleteInstanceProfile",
+                "iam:GetRole",
+                "iam:RemoveRoleFromInstanceProfile",
+                "iam:CreateRole",
+                "iam:DeleteRole",
+                "iam:AttachRolePolicy",
+                "iam:PutRolePolicy",
+                "iam:AddRoleToInstanceProfile",
+                "iam:PassRole",
+                "iam:DetachRolePolicy",
+                "iam:ListAttachedRolePolicies",
+                "iam:DeleteRolePolicy",
+                "iam:ListRolePolicies",
+                "iam:TagRole",
+                "iam:TagInstanceProfile",
+                "batch:CreateComputeEnvironment",
+                "batch:DescribeComputeEnvironments",
+                "batch:CreateJobQueue",
+                "batch:DescribeJobQueues",
+                "batch:UpdateComputeEnvironment",
+                "batch:DeleteComputeEnvironment",
+                "batch:UpdateJobQueue",
+                "batch:DeleteJobQueue",
+                "batch:TagResource",
+                "fsx:DeleteFileSystem",
+                "fsx:DescribeFileSystems",
+                "fsx:CreateFileSystem",
+                "fsx:TagResource",
+                "ec2:DescribeSecurityGroups",
+                "ec2:DescribeAccountAttributes",
+                "ec2:DescribeSubnets",
+                "ec2:DescribeLaunchTemplates",
+                "ec2:DescribeLaunchTemplateVersions", 
+                "ec2:CreateLaunchTemplate",
+                "ec2:DeleteLaunchTemplate",
+                "ec2:DescribeKeyPairs",
+                "ec2:DescribeVpcs",
+                "ec2:DescribeInstanceTypeOfferings",
+                "ec2:GetEbsEncryptionByDefault",
+                "elasticfilesystem:DescribeMountTargets",
+                "elasticfilesystem:CreateMountTarget",
+                "elasticfilesystem:CreateFileSystem",
+                "elasticfilesystem:DescribeFileSystems",
+                "elasticfilesystem:DeleteMountTarget",
+                "elasticfilesystem:DeleteFileSystem",
+                "elasticfilesystem:UpdateFileSystem",
+                "elasticfilesystem:PutLifecycleConfiguration",
+                "elasticfilesystem:TagResource"
+            ],
+            "Resource": "*"
+        }
+    ]
+}

platform_versioned_docs/version-24.2/_templates/aws-batch/launch-policy.json

@@ -0,0 +1,36 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Sid": "TowerLaunch0",
+            "Effect": "Allow",
+            "Action": [
+                "batch:DescribeJobQueues",
+                "batch:CancelJob",
+                "batch:SubmitJob",
+                "batch:ListJobs",
+                "batch:TagResource",
+                "batch:DescribeComputeEnvironments",
+                "batch:TerminateJob",
+                "batch:DescribeJobs",
+                "batch:RegisterJobDefinition",
+                "batch:DescribeJobDefinitions",
+                "ecs:DescribeTasks",
+                "ec2:DescribeInstances",
+                "ec2:DescribeInstanceTypes",
+                "ec2:DescribeInstanceAttribute",
+                "ecs:DescribeContainerInstances",
+                "ec2:DescribeInstanceStatus",
+                "logs:Describe*",
+                "logs:Get*",
+                "logs:List*",
+                "logs:StartQuery",
+                "logs:StopQuery",
+                "logs:TestMetricFilter",
+                "logs:FilterLogEvents",
+                "secretsmanager:ListSecrets"
+            ],
+            "Resource": "*"
+        }
+    ]
+}

platform_versioned_docs/version-24.2/_templates/aws-batch/s3-bucket-write-policy.json

@@ -0,0 +1,26 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "s3:ListBucket"
+            ],
+            "Resource": [
+                "arn:aws:s3:::YOUR-BUCKET-NAME"
+            ]
+        },
+        {
+            "Action": [
+                "s3:GetObject",
+                "s3:PutObject",
+                "s3:PutObjectTagging",
+                "s3:DeleteObject"
+            ],
+            "Resource": [
+                "arn:aws:s3:::YOUR-BUCKET-NAME/*"
+            ],
+            "Effect": "Allow"
+        }
+    ]
+}

platform_versioned_docs/version-24.2/_templates/eks/eks-iam-policy.json

@@ -0,0 +1,14 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+      {
+        "Sid": "TowerEks0",
+        "Effect": "Allow",
+        "Action": [
+          "eks:ListClusters",
+          "eks:DescribeCluster"
+        ],
+        "Resource": "*"
+      }
+    ]
+  }

platform_versioned_docs/version-24.2/_templates/k8s/tower-launcher.yml

@@ -0,0 +1,60 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: tower-nf
+
+---
+
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: tower-launcher-sa
+  namespace: tower-nf
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: tower-launcher-role
+  namespace: tower-nf
+rules:
+  - apiGroups: [""]
+    resources: ["pods", "pods/status", "pods/log", "pods/exec", "persistentvolumeclaims", "configmaps"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: ["apps"]
+    resources: ["deployments"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups: ["batch"]
+    resources: ["jobs", "jobs/status", "jobs/log"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: tower-launcher-rolebind
+  namespace: tower-nf
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: tower-launcher-role
+subjects:
+  - kind: ServiceAccount
+    name: tower-launcher-sa
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: tower-launcher-userbind
+  namespace: tower-nf
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: tower-launcher-role
+subjects:
+  - kind: User
+    name: tower-launcher-user

platform_versioned_docs/version-24.2/_templates/k8s/tower-scratch-local.yml

@@ -0,0 +1,31 @@
+# PVC backed by local storage 
+# Only works for a single node cluster
+
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: tower-storage
+  namespace: tower-nf
+spec:
+  storageClassName: scratch
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  hostPath:
+    path: /tmp/tower
+
+---
+
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: tower-scratch
+  namespace: tower-nf
+spec:
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 10Gi
+  storageClassName: scratch

platform_versioned_docs/version-24.2/_templates/k8s/tower-scratch-nfs.yml

@@ -0,0 +1,111 @@
+# PVC backed by NFS server
+#
+# For K8s environments other than GKE, you will need to modify the nfs-storage
+# persistent volume to reference directly the IP address of the nfs-server:
+# 1. Deploy the nfs-server resources
+# 2. Get the IP address of the nfs-server with `kubectl get service nfs-server`
+# 3. Replace `nfs-server.tower-nf.svc.cluster.local` with the IP address in the nfs-storage YAML
+# 4. Deploy the nfs-storage PV and tower-scratch PVC
+#
+# For more information, see https://github.com/kubernetes/minikube/issues/3417#issuecomment-670005434
+
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: nfs-server
+  namespace: tower-nf
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
+  storageClassName: standard
+
+---
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nfs-server
+  namespace: tower-nf
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      role: nfs-server
+  template:
+    metadata:
+      labels:
+        role: nfs-server
+    spec:
+      containers:
+      - name: nfs-server
+        image: gcr.io/google_containers/volume-nfs:0.8
+        ports:
+          - name: nfs
+            containerPort: 2049
+          - name: mountd
+            containerPort: 20048
+          - name: rpcbind
+            containerPort: 111
+        securityContext:
+          privileged: true
+        volumeMounts:
+          - mountPath: /exports
+            name: vol-1
+      volumes:
+        - name: vol-1
+          persistentVolumeClaim:
+            claimName: nfs-server
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: nfs-server
+  namespace: tower-nf
+spec:
+  ports:
+    - name: nfs
+      port: 2049
+    - name: mountd
+      port: 20048
+    - name: rpcbind
+      port: 111
+  selector:
+    role: nfs-server
+
+---
+
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: nfs-storage
+  namespace: tower-nf
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    # For K8s environments other than GKE, the nfs-server IP address must be used
+    server: nfs-server.tower-nf.svc.cluster.local
+    path: "/"
+
+---
+
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: tower-scratch
+  namespace: tower-nf
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  resources:
+    requests:
+      storage: 10Gi
+