added OpenShift template for Quay app
Signed-off-by: Tejas Parikh <tparikh@redhat.com>
This commit is contained in:
Tejas Parikh
parent
23c5120790
commit
c975807e50
1 changed files with 219 additions and 0 deletions
219
deploy/openshift/quay-app.yaml
Normal file
219
deploy/openshift/quay-app.yaml
Normal file
|
|
@ -0,0 +1,219 @@
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Template
|
||||||
|
metadata:
|
||||||
|
name: quay
|
||||||
|
objects:
|
||||||
|
- apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
name: ${{NAME}}
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- secrets
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- namespaces
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- extensions
|
||||||
|
- apps
|
||||||
|
resources:
|
||||||
|
- deployments
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- watch
|
||||||
|
- apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: ${{NAME}}
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: Role
|
||||||
|
name: ${{NAME}}
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: default
|
||||||
|
- apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: quay-clusterip-service
|
||||||
|
spec:
|
||||||
|
type: ClusterIP
|
||||||
|
ports:
|
||||||
|
- protocol: TCP
|
||||||
|
name: clusterip
|
||||||
|
port: ${{CLUSTERIP_SERVICE_PORT}}
|
||||||
|
targetPort: ${{CLUSTERIP_SERVICE_TARGET_PORT}}
|
||||||
|
selector:
|
||||||
|
${{QUAY_APP_COMPONENT_LABEL_KEY}}: ${{QUAY_APP_COMPONENT_LABEL_VALUE}}
|
||||||
|
- apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: quay-loadbalancer-service
|
||||||
|
spec:
|
||||||
|
ports:
|
||||||
|
- name: loadbalancer
|
||||||
|
protocol: TCP
|
||||||
|
port: ${{LOADBALANCER_SERVICE_PORT}}
|
||||||
|
targetPort: ${{LOADBALANCER_SERVICE_TARGET_PORT}}
|
||||||
|
loadBalancerIP:
|
||||||
|
type: LoadBalancer
|
||||||
|
selector:
|
||||||
|
${{QUAY_APP_COMPONENT_LABEL_KEY}}: ${{QUAY_APP_COMPONENT_LABEL_VALUE}}
|
||||||
|
- apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: quay-app
|
||||||
|
labels:
|
||||||
|
${{QUAY_APP_COMPONENT_LABEL_KEY}}: ${{QUAY_APP_COMPONENT_LABEL_VALUE}}
|
||||||
|
spec:
|
||||||
|
replicas: ${{QUAY_APP_DEPLOYMENT_REPLICAS}}
|
||||||
|
minReadySeconds: ${{QUAY_APP_DEPLOYMENT_MIN_READY_SECONDS}}
|
||||||
|
progressDeadlineSeconds: ${{QUAY_APP_DEPLOYMENT_PROGRESS_DEADLINE_SECONDS}}
|
||||||
|
revisionHistoryLimit: ${{QUAY_APP_DEPLOYMENT_REVISION_HISTORY_LIMITS}}
|
||||||
|
strategy:
|
||||||
|
type: ${{QUAY_APP_DEPLOYMENT_STRATEGY_TYPE}}
|
||||||
|
rollingUpdate:
|
||||||
|
maxUnavailable: ${{QUAY_APP_DEPLOYMENT_MAX_UNAVAILABLE}}
|
||||||
|
maxSurge: ${{QUAY_APP_DEPLOYMENT_MAX_SURGE}}
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
${{QUAY_APP_COMPONENT_LABEL_KEY}}: ${{QUAY_APP_COMPONENT_LABEL_VALUE}}
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
${{QUAY_APP_COMPONENT_LABEL_KEY}}: ${{QUAY_APP_COMPONENT_LABEL_VALUE}}
|
||||||
|
spec:
|
||||||
|
volumes:
|
||||||
|
- name: configvolume
|
||||||
|
secret:
|
||||||
|
secretName: ${{QUAY_APP_CONFIG_SECRET}}
|
||||||
|
containers:
|
||||||
|
- name: quay-app
|
||||||
|
image: ${IMAGE}:${IMAGE_TAG}
|
||||||
|
imagePullPolicy: Always
|
||||||
|
ports:
|
||||||
|
- containerPort: 8443
|
||||||
|
volumeMounts:
|
||||||
|
- name: configvolume
|
||||||
|
readOnly: false
|
||||||
|
mountPath: /conf/stack
|
||||||
|
livenessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /health/instance
|
||||||
|
port: 8443
|
||||||
|
initialDelaySeconds: ${{QUAY_APP_LIVENESS_PROBE_INITIAL_DELAY_SECONDS}}
|
||||||
|
periodSeconds: ${{QUAY_APP_LIVENESS_PROBE_PERIOD_SECONDS}}
|
||||||
|
timeoutSeconds: ${{QUAY_APP_LIVENESS_PROBE_TIMEOUT_SECONDS}}
|
||||||
|
readinessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /health/endtoend
|
||||||
|
port: 8443
|
||||||
|
initialDelaySeconds: ${{QUAY_APP_READINESS_PROBE_INITIAL_DELAY_SECONDS}}
|
||||||
|
periodSeconds: ${{QUAY_APP_READINESS_PROBE_PERIOD_SECONDS}}
|
||||||
|
timeoutSeconds: ${{QUAY_APP_READINESS_PROBE_TIMEOUT_SECONDS}}
|
||||||
|
resources:
|
||||||
|
limits:
|
||||||
|
cpu: ${{QUAY_APP_CPU_LIMIT}}
|
||||||
|
memory: ${{QUAY_APP_MEMORY_LIMIT}}
|
||||||
|
requests:
|
||||||
|
cpu: ${{QUAY_APP_CPU_REQUEST}}
|
||||||
|
memory: ${{QUAY_APP_MEMORY_REQUEST}}
|
||||||
|
parameters:
|
||||||
|
- name: NAME
|
||||||
|
value: "quay"
|
||||||
|
displayName: name
|
||||||
|
description: Defaults to quay.
|
||||||
|
- name: IMAGE
|
||||||
|
value: "quay.io/app-sre/quay"
|
||||||
|
displayName: quay image
|
||||||
|
description: quay docker image. Defaults to quay.io/app-sre/quay.
|
||||||
|
- name: IMAGE_TAG
|
||||||
|
value: "latest"
|
||||||
|
displayName: quay version
|
||||||
|
description: quay version which defaults to latest
|
||||||
|
- name: CLUSTERIP_SERVICE_PORT
|
||||||
|
value: "443"
|
||||||
|
displayName: clusterip service port
|
||||||
|
- name: CLUSTERIP_SERVICE_TARGET_PORT
|
||||||
|
value: "8443"
|
||||||
|
displayName: clusterip service target port
|
||||||
|
- name: QUAY_APP_COMPONENT_LABEL_KEY
|
||||||
|
value: "quay-component"
|
||||||
|
displayName: quay app selector label
|
||||||
|
- name: QUAY_APP_COMPONENT_LABEL_VALUE
|
||||||
|
value: "app"
|
||||||
|
displayName: quay app selector label value
|
||||||
|
- name: LOADBALANCER_SERVICE_PORT
|
||||||
|
value: "443"
|
||||||
|
displayName: loadbalancer service port
|
||||||
|
- name: LOADBALANCER_SERVICE_TARGET_PORT
|
||||||
|
value: "8443"
|
||||||
|
displayName: loadbalancer service target port
|
||||||
|
- name: QUAY_APP_CONFIG_SECRET
|
||||||
|
value: "quay-config-secret"
|
||||||
|
displayName: quay app config secret
|
||||||
|
- name: QUAY_APP_DEPLOYMENT_REPLICAS
|
||||||
|
value: "1"
|
||||||
|
displayName: quay app deployment replicas
|
||||||
|
- name: QUAY_APP_MEMORY_REQUEST
|
||||||
|
value: "1024Mi"
|
||||||
|
displayName: "quay app memory request"
|
||||||
|
- name: QUAY_APP_CPU_REQUEST
|
||||||
|
value: "1"
|
||||||
|
displayName: "quay app CPU request"
|
||||||
|
- name: QUAY_APP_MEMORY_LIMIT
|
||||||
|
value: "1024Mi"
|
||||||
|
displayName: "quay app memory limit"
|
||||||
|
- name: QUAY_APP_CPU_LIMIT
|
||||||
|
value: "1"
|
||||||
|
displayName: "quay app CPU limit"
|
||||||
|
- name: QUAY_APP_DEPLOYMENT_MIN_READY_SECONDS
|
||||||
|
value: "0"
|
||||||
|
displayName: quay app deployment min ready seconds
|
||||||
|
- name: QUAY_APP_DEPLOYMENT_PROGRESS_DEADLINE_SECONDS
|
||||||
|
value: "600s"
|
||||||
|
displayName: quay app deployment progress deadline seconds
|
||||||
|
- name: QUAY_APP_DEPLOYMENT_REVISION_HISTORY_LIMITS
|
||||||
|
value: "10"
|
||||||
|
displayName: quay app deployment revision history limits
|
||||||
|
- name: QUAY_APP_DEPLOYMENT_STRATEGY_TYPE
|
||||||
|
value: "RollingUpdate"
|
||||||
|
displayName: quay app deployment strategy
|
||||||
|
- name: QUAY_APP_DEPLOYMENT_MAX_SURGE
|
||||||
|
value: "25%"
|
||||||
|
displayName: quay app deployment max surge
|
||||||
|
- name: QUAY_APP_DEPLOYMENT_MAX_UNAVAILABLE
|
||||||
|
value: "25%"
|
||||||
|
displayName: quay app deployment max unavailable
|
||||||
|
- name: QUAY_APP_LIVENESS_PROBE_INITIAL_DELAY_SECONDS
|
||||||
|
value: "15"
|
||||||
|
displayName: quay app liveness probe initial delay seconds
|
||||||
|
- name: QUAY_APP_LIVENESS_PROBE_PERIOD_SECONDS
|
||||||
|
value: "30"
|
||||||
|
displayName: quay app liveness probe period seconds
|
||||||
|
- name: QUAY_APP_LIVENESS_PROBE_TIMEOUT_SECONDS
|
||||||
|
value: "10"
|
||||||
|
displayName: quay app liveness probe timeout
|
||||||
|
- name: QUAY_APP_READINESS_PROBE_INITIAL_DELAY_SECONDS
|
||||||
|
value: "15"
|
||||||
|
displayName: quay app readiness probe initial delay seconds
|
||||||
|
- name: QUAY_APP_READINESS_PROBE_PERIOD_SECONDS
|
||||||
|
value: "30"
|
||||||
|
displayName: quay app readiness probe period seconds
|
||||||
|
- name: QUAY_APP_READINESS_PROBE_TIMEOUT_SECONDS
|
||||||
|
value: "10"
|
||||||
|
displayName: quay app readiness probe timeout
|
||||||
|
|
||||||
Reference in a new issue